last executing test programs: 25.462059883s ago: executing program 1 (id=146): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) (fail_nth: 2) 25.368189311s ago: executing program 1 (id=147): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 25.31485871s ago: executing program 1 (id=148): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) 25.26212624s ago: executing program 1 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mydev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x1, 0x4, 0x1000, 0x8, 0x18, "ed9c52dafcfd9751b42cd3345e86d0a04e5fa4"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x66) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000000)={[0x8]}) io_pgetevents(0x0, 0x0, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0), 0x0) ptrace(0x10, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, r3, 0x380) 25.07847738s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='devpts\x00', 0x22008d0, 0x0) 24.803690765s ago: executing program 1 (id=153): semop(0x0, &(0x7f00000001c0)=[{0x2, 0x7f, 0xd834c10858758284}, {0x1, 0xbbd3, 0x1000}, {0x1, 0x5, 0x800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0x6, 0x7fff]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0xfffffdf2, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af83, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0xe7, &(0x7f00000000c0)=""/231}, {0x3000, 0x0, 0x0}]}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000740)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 24.535585011s ago: executing program 32 (id=153): semop(0x0, &(0x7f00000001c0)=[{0x2, 0x7f, 0xd834c10858758284}, {0x1, 0xbbd3, 0x1000}, {0x1, 0x5, 0x800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0x6, 0x7fff]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0xfffffdf2, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af83, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0xe7, &(0x7f00000000c0)=""/231}, {0x3000, 0x0, 0x0}]}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000740)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.595231785s ago: executing program 4 (id=262): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 6.441551109s ago: executing program 4 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x121300, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x22903) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1000009, 0x1, 0xecc, 0xfa11, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='cdg', 0x3) write$binfmt_script(r3, &(0x7f0000000380), 0xfffffd9d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000200)={{0x80}, 'port0\x00', 0xbd, 0xc0006, 0x0, 0x0, 0x0, 0x4, 0xffffff3e, 0x0, 0x6}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000540), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000580)={0x0, 0x5, 0xda04, 0x3, 0x0, 0xfefa, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.164025178s ago: executing program 4 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f00000002c0)='./tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000022, 0x0, 0x80000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs/instances/foo\x00', 0x1ff) 4.305883002s ago: executing program 4 (id=272): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 4.162386391s ago: executing program 4 (id=273): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) bind$packet(r1, &(0x7f0000000100)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async) write(r1, &(0x7f00000002c0)="404efb1660837d6f41ea3238672c6a1442cc5ad9f4501cb45e4035c776bea22426bcdd304be226b286f501eeed2ea60984cb038d20626870198491f322eef22363d5f56feb83151bbb88295423928a2e15e0b4f38e8fe3f8437011ab5fcec57b64367af230159b3ab12dd9efb8b95cb7e2029941c0afb9f415120809f501a56c5e90629c4b8d4547e798d338b5f0e7adbcb14414fa76d3993111bcdcdfe93a7c161cd47ed9876c", 0xa7) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x2040, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000007c0)=0x8) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) (async) r4 = syz_usb_connect$uac3(0x0, 0xcb, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x9f, 0xa0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x13}, [@mixer_unit={0x9, 0x24, 0x5, 0x1, 0x81, "c23f57f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x36d, 0x3, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x65, 0x3, 0x9, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8, 0x40, "347a4f82cd83e9438e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x1, {0xa, 0x25, 0x25, 0x401, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff, 0x10, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x3c, 0xb, 0x7, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x40, 0xd8, 0x3, {0xa, 0x25, 0x25, 0x8, 0x8, 0x4}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x2b, 0x3, 0x7, 0xff, 0x6d}, 0x44, &(0x7f00000003c0)={0x5, 0xf, 0x44, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc6, 0x6, 0x0, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x2, 0x7, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6b1b9907e1d55be75dce731458b1ff24"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x5, 0x8, 0x8000}]}, 0x7, [{0x7f, &(0x7f0000000440)=@string={0x7f, 0x3, "c9cef40dbb55cd947e7b5fceb0cebc0eaf8ae44a5df6dc9cbbaa5b5f8b77b15df134db8998af3749f87647a225409a45e79104ca330fcf22a1137e6c6196f678cbb4905ed2f88031039c0b5b47ee63bc1c8a9a4fccb335bc8a910670ab044ad5186701f20395238132b478b4b95aa3a1f8910433323dd979d2662f0b01"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x71}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0xc1, &(0x7f0000000580)=@string={0xc1, 0x3, "4bddb21b6f36c4ef91661456e2677b0fd79dc66264a5c930cc4f276b3ff471f1ac0c3ef320a91f99e3b741bc0fb20a70dd5990dbeb8b14d27dd4870355a2781b03e1eeab50d71175ded52d29faec5d3a8550edf588abd05bfaa529beeccc720aad7ea9854f92b413be1d4cfe5d15b148bb2e4b9c77f6ffe4f4fbb092f463afde8d81d61b5eec2b493236aa76df407330dc24cbb068eb2f2f1acbdd2ff723cb33d53d83b098d4aece5a58b8d42f11f4d27e25f1d712f3b18615e3159b95035b"}}, {0x29, &(0x7f0000000680)=@string={0x29, 0x3, "d5d44f8985a69bd300a9a32f6d124ebe912dfa10a901c39eb02dd4c3a2f04958b42001eb220f57"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_disconnect(r4) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) (async) userfaultfd(0x801) 4.06040833s ago: executing program 0 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper], 0x100, 0x0, &(0x7f0000000540)=""/256}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 3.947504893s ago: executing program 0 (id=276): syz_emit_vhci(0x0, 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x55, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c032090400000102020000052400100104240202052406000105240100010705810308000a09040100020a"], 0x0) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="330520000ae0160006007e758808", 0xe, 0x801, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0x5f, 0x6, @local}, 0x14) write(r0, &(0x7f0000000200)="0d000000010001", 0x7) write(r0, 0x0, 0x0) 2.743562034s ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 2.705491935s ago: executing program 3 (id=282): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000280)="b9490800000f32b9301001c00f320f01ca650fc719c4c291bc828b45000066baf80cb8e2b6f787ef660f01dfd9fbc4e37d786a570fc4e2a1aeac5fbb34a6270f3235004000000f30c4e2219a17", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x2, 0x2000, 0x1000, &(0x7f000000a000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000100)={[0xec, 0x1, 0x200000000000080, 0xee, 0x6c, 0x4, 0x4, 0xf0, 0x5, 0x10, 0xffff, 0x0, 0x1, 0xff, 0xb08, 0xfff], 0x0, 0x80}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f0000000300)={0xff, "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.701037897s ago: executing program 2 (id=283): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) kexec_load(0x2, 0x80002c5, &(0x7f0000000000)=[{&(0x7f0000000100)="9734d5c7c43a18cca65579f55784b72169f93394c345c7894e972df595e0632721a505150b22580e4b278128797a27c8f2c4e1b299db8800000000a57ab87c60571d4d3ebd9f13c84485dc24d608602341d5db7f4ab4d12b07844b4bce6baf927f75db2327908216814990", 0x62, 0x2, 0x8}, {&(0x7f0000000640)="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", 0x101d, 0x1, 0x3}, {&(0x7f0000001680)="f81462e97ecaba2991641123d3ffb9ad89ca79821f2fbaceda7d83aa3ebf489f9751d06042b36d004c13f9e4aff573fdf13209c303793d7a5fe17ab8cdb20c0560f888a6a15c08159c765ecbb49f5b38599722d1a6aa40c3a2c4dc5715688d8a50fd51ac5ba31cb4ac4c0c422cb19fd05c66cf00457aa44ae05b31664f6c25a72c6f7689554a5ba4", 0x88, 0x7fffffff, 0x6424}], 0x1) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r3, &(0x7f0000000600)='3', 0x4e) close(0x3) 2.635921675s ago: executing program 0 (id=284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper], 0x100, 0x0, &(0x7f0000000540)=""/256}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f00000007c0)=""/256}) 2.520612957s ago: executing program 2 (id=285): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000003c0)="310000140700aaaaaaaaaa1014", 0xd) 2.465422458s ago: executing program 2 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xfff9, [0x0, 0x800], 0x4}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {0x1}, 0x2}) mount(&(0x7f0000000100)=@filename='./dev/mtdblock0\x00', &(0x7f0000000140)='./dev/mtdblock0\x00', &(0x7f0000000180)='romfs\x00', 0x23000000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}]}, 0x54}}, 0x0) open_by_handle_at(r3, &(0x7f0000000200)=@orangefs_parent={0x28, 0x2, {{"0d2a7db1e74345d436c1495c6ca878cf", 0x4}, {"43803f10e170b97f96b12a5fbecbe42f", 0xffffffff}}}, 0x408000) 2.456517855s ago: executing program 3 (id=287): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"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", "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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000002380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 2.084099988s ago: executing program 3 (id=288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x2, 0x701, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x80) syz_open_dev$evdev(&(0x7f0000000680), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mount(0x0, 0x0, &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000a80)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) lseek(0xffffffffffffffff, 0x100, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000b00)=0x13c) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x18}, 0xa) 1.743901173s ago: executing program 3 (id=289): r0 = syz_ublk_setup_io_uring(0x1a30, &(0x7f00000004c0)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x8, &(0x7f0000000680)={0x0, 0x3938700}, 0x1, 0x40, 0x1}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) close(r4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000006c0)={0x0, 0x1, 0x1000ff, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000700)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0201, 0x0) add_key(&(0x7f00000007c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000900)='6', 0x1) add_key(&(0x7f0000000940)='user\x00', 0x0, &(0x7f0000000980)='0', 0x1, 0xfffffffffffffffb) ioctl$sock_FIOSETOWN(r5, 0x7041, 0x0) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00', {0x3, 0x7, 0xfffb, 0x9}, 0x3, [0x3, 0x1c, 0x5bfc376a, 0x3, 0x5, 0x5, 0x5, 0xff, 0x7, 0x6, 0x2, 0x80d, 0x9, 0x9, 0x2, 0x3, 0x5, 0x4, 0x9, 0x2, 0x7, 0x8e33, 0x100000, 0xfff, 0x10000, 0x6, 0x0, 0x9, 0x4, 0x3, 0x61, 0x0, 0x2, 0xfffffffb, 0x3, 0x4, 0xbf, 0x94c, 0xb4c, 0x2, 0x5, 0xfffff800, 0xfffffffb, 0x2, 0x8, 0x1, 0x5, 0x3, 0x9, 0x9, 0x0, 0x6, 0x3ff, 0x1, 0x8, 0x5, 0xe, 0x100, 0x6, 0xd4e, 0x83, 0x3, 0x40, 0x7f], [0x2, 0x10001, 0x7418, 0x2, 0x5, 0x7fff, 0x4, 0xa840, 0x1, 0x9, 0x4, 0xfffffffb, 0x8, 0x8, 0x9, 0x9, 0x9, 0x8, 0x7, 0xe70, 0x401, 0xfeb, 0x8, 0x32c7, 0x9, 0x9b99, 0x1, 0x7, 0x80, 0x1ff, 0x6, 0x8f9, 0x3, 0x38, 0x0, 0x6, 0x6, 0x0, 0x7, 0x3, 0x10001, 0xfffffff8, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0x6, 0x9, 0xdac668e5, 0x4, 0x7, 0x10001, 0x6, 0x4e, 0x6, 0x6, 0x7, 0xc2, 0xff, 0x0, 0x9, 0x3], [0x4, 0x0, 0x80000000, 0x3, 0xafac, 0xb, 0x7, 0x10, 0xeb, 0x495, 0xbd4, 0xa, 0xc, 0x3, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x5f4, 0x28, 0xfffffffa, 0x3, 0xe7e8, 0x2, 0x101, 0x0, 0x2, 0xa30, 0x8, 0x9, 0x0, 0xfffff91a, 0x3ff, 0xfffffffb, 0x5, 0xb9ce, 0x7, 0x7, 0x7, 0x3, 0x0, 0x7, 0xc7, 0x3ff, 0x0, 0x4, 0x1, 0x8, 0x12f6, 0x0, 0x100, 0x4, 0xb161, 0x0, 0x3, 0x2, 0x3, 0x17d, 0x7fff, 0x4, 0x2, 0x3, 0x1], [0x4b, 0x40, 0x58, 0x5da, 0x6, 0x6c07d945, 0x135673e, 0xa464, 0x5, 0x1, 0x7, 0xfffffffb, 0x5000, 0x8001, 0x5, 0x695, 0x7f, 0x2, 0x5, 0x1, 0x2, 0xe, 0xdf, 0x2, 0x2, 0x3, 0x9, 0x5, 0x4, 0xfff, 0x81, 0x7, 0x5, 0x0, 0xdb0a, 0x1000, 0x7, 0x3, 0x7, 0x1, 0x9, 0x8001, 0x200005, 0x5, 0xffff, 0x4, 0x7, 0xf2, 0x1b7b, 0x9, 0x2, 0x3, 0xfffffff8, 0x0, 0x7fffffff, 0x800, 0x62cf, 0x7, 0x1fc47ee4, 0x3, 0x3, 0x9, 0xfffffffd, 0xa]}, 0x45c) socket$inet6_sctp(0xa, 0x1, 0x84) 1.712597629s ago: executing program 0 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 1.658535591s ago: executing program 0 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x22802, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f0000000400), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x81}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000025, &(0x7f0000000180)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x0, 0x1ff, 0x100}, 0x10) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x3) 1.49170717s ago: executing program 3 (id=292): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="0030010000004473dc257a63606f1ee86df97d2b0b640ea7fff9d59d7ba4787f3f11939a38a609798e11582a78b8f6383b595f759c58efd909b7f1115c45bcc80448ea27e15b4de44a9249a5e44db11714efcc03146e4dfb9606f0f56d1d1e9451770c98aac24e0a16b2fcf802b2272d3f58e49efab25bd44e828f890ffbd0aff60f88bec34e06ad33b2262279d4d0b8e324a00e2e29fc2d3e5bcf89a76b1ea361eb805a9b3431159850"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r2) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000}) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000001100)={0x800, 0x6, 0x8, 0xfff, 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x70802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000001140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./cifs\x00', 0x1ed) mount(&(0x7f00000011c0)=@filename='\\\\::1\\share\x00', &(0x7f0000001200)='./cifs\x00', &(0x7f0000001240)='cifs\x00', 0x0, &(0x7f0000001280)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_usb_connect$uac3(0x1, 0x151, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13f, 0x3, 0x1, 0xff, 0x40, 0x44, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x30}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4a, 0xce52}, [@feature_unit={0xd, 0x24, 0x7, 0x3, 0x5, [0x0, 0x5]}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x2, [0xb]}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0x4, 0x873c, 0x4}, @power_domain={0xa, 0x24, 0x10, 0x3, 0x8, 0xfff, 0x3, "c1"}, @extension_unit={0x15, 0x24, 0xa, 0x2, 0x5, [0x0, 0x2, 0x1, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x7, 0x1, 0x5, 0x1001, 0x5, 0x9, 0x7, 0xb9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x4, 0x65}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x8000, 0x2, 0x8}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x59, 0x4, 0x1, 0x40, "ad96a3"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf9, 0x4, 0x9, {0xa, 0x25, 0x25, 0xb, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x1, 0x44f1, 0x4, 0x52, 0x5, 0x7fff, 0x5}, @as_header={0x17, 0x24, 0x1, 0x5, 0x1, 0x2, 0x2, 0x6, 0x7, 0x4, 0xec}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x7, 0x2, 0x1}, @as_header={0x17, 0x24, 0x1, 0x4, 0x5, 0x1, 0x5, 0x45, 0x9, 0x400, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0xf1, 0xd7, {0xa, 0x25, 0x25, 0x3, 0x95, 0x4}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x9, 0x40, 0x7, 0x20, 0x5}, 0xba, &(0x7f0000000a40)={0x5, 0xf, 0xba, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "44447423f1bcdb4480d365b5ddb18ef8"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x9, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x9, 0x3ff}, @generic={0x8d, 0x10, 0x3, "6bb0d3acdb1f063e94359c1792b0bcb7ce9cef7a14fcb16b604614ad06e48af139ff3cf5a75d35afd383efe3d640bf144dd01a709d8a021bb11478eef1e8942a1ca2362863fdb1e9f52ac795c690b41966dd7e6a99e2a0d15fd51d26a368d87fcc1c81c7a892fcf03bb85006a45742e525e8aa009d6ff33396f665859785fcee60d2d7f22b26c8bd9bd8"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc09}}, {0xef, &(0x7f0000000c00)=@string={0xef, 0x3, "c477ab86e0011574ecddc553711ac63bfcaa09b4e4f9a1d1adbd9ff33040e3d5755e8f3911ab8b331ab7a139897b2619d2ac541dc756df75853f1deb1374aaefd34c110e85fbfa6185bc23348882adaaa9caead1ec09ddc0a5a26fb9c0ad5e657415bda35320119128b49d2679f1e4073182cf492f51f2553d36419df3059ec27d1a545dd284777ad9269e27e7650daa59bc3f5617f3bed36f9bcfadbba4b5d22e15792f8b7077fa41134529fc20727b9a181548dd757d477460f9708b74b1682e20c171c4334eb2693a5d7cc07eef16bcb071502651ad98cd38c02ac4c280c7097e76726043b189c60ea4113d"}}]}) setrlimit(0x7, &(0x7f00000003c0)) eventfd2(0x1, 0x80800) syz_usb_control_io$uac3(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d80)={0x0, 0xd, 0xb, {0xb, 0xd, "77c16a4379337388be"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000001040)={0x44, &(0x7f0000000e40)={0x0, 0xc, 0x2e, "6b5224edaa24de16e21c06927c1ba13051f711c70887350b90e7b682f661ed1d75648c65cea073c1c40198e9c163"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000f00)={0x20, 0x81, 0x3, '%E^'}, &(0x7f0000000f40)={0x20, 0x82, 0x3, "9fae9d"}, &(0x7f0000000f80)={0x20, 0x83, 0x2, 'f&'}, &(0x7f0000000fc0)={0x20, 0x84, 0x4, "f014895c"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "dd8150"}}) add_key(0x0, 0x0, &(0x7f0000000400)="308205553082033da00302010202147398e1982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864f86f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c4521d3e6d03913242f1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b050003820201", 0x358, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x202000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) 1.184634556s ago: executing program 0 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x10000, 0x4) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1.03680614s ago: executing program 4 (id=294): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000008c0)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) (async) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002d00)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xe17e3f20469e9d79, 0xc, 0x0, 0x5, 0xf9, 0x0, 0x0, 0x100}}, 0x50) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002d80)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002dc0)={0x2020}, 0x2020) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x20, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x3628, 0xffffffff00000001, 0x0, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r6, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000002c0)={0x6, 0x0, 'client1\x00', 0x5, "e0bc579b5f4be2c4", "c1ed2bc6bd63fa523d84fe21f39a8a5b92a1ce9e2e49cd0aded221a84790eb1b", 0x4, 0x4}) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYBLOB="5ba30100e17c664408876576dbb7527abeb9804df09a0eaabec546358c6d0a8e535c5c9aba5d8aeba19db1cf79c935dcbba30be2f44ef51c9c0a42932295fca3920b01317a3f5593a3f6c1054248229fa7c8bb6933e07c28e73d20a1372dfdd23df2ffd706bcf8d233559c3df6c1062b58fd882124c2ad7d5d0c3e248e80dfad0da7afada2d80af52da1fe75535dc773096b1f450e041ed1b6710f34424820bbdb497ba08acea2a54d26f9b2b3c04fbbbace995a03091437c66ced433eda60525607b537930226"], 0x9) 232.482065ms ago: executing program 2 (id=295): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"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", "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"}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x17, 0x9, 0x70bd27, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x32602) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000029c0)={0x5, 0x8, 0x4, 0x80, &(0x7f0000000140)=""/128, 0xbc, &(0x7f0000002800)=""/188, 0xd1, &(0x7f00000028c0)=""/209}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r5 = memfd_create(&(0x7f0000002380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 132.830372ms ago: executing program 2 (id=296): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"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", "1b9d06912ceaa96b815ba9d33d3d3608b426e315a428e2838c6b688365dc01ff890883e21f0a08049c846fc2454d00b7c2334b10ecab16f7812beb8200fefd2b17b06018b3e3875b095328586917434bb554db2886af50bc857fe714661a9588aa706fc672f1d30aa29d44e28818ac94ac334ab2045434bff76e486dd57d44d09228ec90e21978b26a4ee2d9b6e37f601f0d5d472de94c15cf24890686eea181d59c5b0fbb464f29830b00094b01f44de4ba8f7c25acdf7a62d2449f33c4a400284fbd4a8fea287f76ba12829c22e3875cb6942fea21037a0b1c54fd0590484656f7527a9a79bc66f10143f6a83393f050180b6d9d3bf4e3e092f673707b7c2654306ecb5320f5d6ad107f8f583cc78f7fd8af69def6b56ee3c0d0280e47da582b600027efb5e7cb1ded49883f72f34bfa911e16d33fe330f4a5670f0502b6160baa8b4baf1b5a45a2e3644b219f10d69a5f28014f5d6ff164a88a6a6df5e31af77e1c73985a29a8a3d449b31a06ae3b14d9ceab7a3da1e4e10e6481cccbaaa7590f1f1ccf27a7fc1428289858eb82306e43ddb4b22b8f3bd7d638e50566f16eb76bc480bc298025716b3ef0617baa977e9d29b4f283f2a53aa0ca3a2183cd258ca8c102d7d047a468fdac34b86b68fca75d7377d17ea4c260a143dc12ac780156fe21d9d1eb0bf16940119bc898898fa011864b5732d7ef715c48bb1871553e4d61e7512fdf15923ac86c1fe113b3045227bb49319332f355f2c0d133c3fb7c6375ceeb10875ae31a5a3eb269badcf4337127bd38fb4c880f1e2bdadee6404fdb8e9607de2133e3e7dc55a026c901767af52dfa40dfc334c36fcfdaf9a8122b74a0f154ecf9c9f04c0d7cc7a7a3fd9741db93c09b7bddb6130b58ae901b05384398bbeeb582423e6950d0a9cfcd826ddba4200bc8e51f282700ab2897561799e1cf5c90973a86998e002fa1fd49b1a7c293944a2f0de606a45980a40bf7035408ed649ba5c68d94427f825353cd187959d75ac6560c8f3e13b06b81b2fd3cfa2494ee559149310f11437afac0920d970eb3454fc31e00db16f246988a6a195e2bfc204192a75b5bfa716693bc0dbe39f8ddde0dfe0e5a77647e689fe38514db5410724b345a13a9ae68755df4164b5732f7a4b80c140265ff6e574342b10033eb86ebc137f4623e8a5315d40e72d79167e6fb3442d2051375dd50c61ba3ef55a7e8c1811a35b6714443fe2716c03892042309cf4ba268acb11c368b0f82fc28f8410383768247fba45d9498218367ffc962af8e2d99b236e3d060d6ab86e38d1766f0d026222bc20b8b4ccdc8a72db1f909d0acee062bea41186a9c96e064a926df072da559b589daed0d9baaba32182ed798ded847ab6ea3a6004e1efd75718978f42aedfd08a4673b49c36d342daa3e0148a081218408e649298060b200c403d33402784344724754e3a813340297fb54b013c5844c96fbc4ac871789334be2badfb5de45b2c27411b3210b4b81bb39c78743c9d81d744af24588096c18a15553d176a317056ba6110a20dbcb41a14472d142f40ee4d39bd30e2e4663b024f34f382a14576540dce2fd31d9cfa8427d6232f3154d290b64051431eb113c9b07d20e1a56a6858206efcfa045ec7630991fff3b7fc30b561ad037727e62d2428e5f6a8db0607d99123971879facfc5d83456030b0ea56ef31da654575dbd3a152ea5ebda5b8f778f8bde012409478a584b99fa2a9830fc995339c9db6aff276b0e9c54e601a8514bf7450cf1ba06b5016aa84bc0f0c2530a51264e01985ce0e799b92e0da08ba120915eb26ca1259c258971d640f5f49e8ccc7f9ee9f16880a8560f056d953198f157e17ff5430038c223c8036c26d84c573df93661e4746a650271d198cfae82eb8c5ed051a160427559ba29495a3f31b5deca9948bf5296d9d65b463ea506ade440166ca3b059da802d15c36396ecfcabf4481e0b7eeabfd52f0ad664d29f6d873d962094836696f93ab8b1b2e580b84f15e321252461f62b684e13630e10195a92fa446e455f339298994ac5fb674f37763ff8d2b8f02a34645c77b66665b9b3230027c06ae6dd8c55bbaaa5f0d64a8952f49ef943cbc70e6873d1624f07fb32629cbbe201eafbbd96078f2e8135069e5204afb56ff2e83b7067aaade3bce31bcf1df2d884636c7184a4781e705f2fc2b74b282062ebb7fa15fc4c3bdc5e824d6d962a3a8d22eb6e11e3ec89e84c2bc3516cc36fdcaa18d0517666d34cb12eb01bca3009a4bf285a898c79e3a1103ce77e1464db71adb07fa899d1bd7d9163a704194bdc88d8d25c24e7879e836e665a3f0887e546e507f62e2863a7cec3143db72668d2c39aae4c4da33773f6a9d41cbb8616c7660d8bec264222f3234c4b195fb7e0ede93e764d488c7d64514b49c68b75deaaa947ae68961b4a804c5f651d57495d95cd3d180067839dcc89072c0a04762ed8d434a75aad3761150e48f6b9764cf8edc0b6c5690e6c3bcd9304799835e9c4920f3603d1b43ed295366ad63a356a7eaa8525cb2c818362a95352aff0b223755095ce888b27707ed39de7debba0c86f2167ed3403941026d46cd8e7e58737719539b49dfa0a76c9fe22499813185e6e8d6681ab83789d376795afbb8fe669dbd85695a6b203b79a2a7f5230de46307106010dc349e18eead7a21c1e202693033d350981285b2a552cd02c6fce3bbf0ddae58fb73bce21849a800b2a4236ed984d473dffa0ce2f3c07227995506b8be7c837a872d5965f8b7d32550219e3f8f0a03080085ca88ecb226b0f3f99ecf8299ef473d7cb8e598ee16d38fb69657554cc708d02371b3df8605bf68e6990351aa24f6b2dd2036eea56a5c6981c9ca7622d4fc6d23db721df39ddac5f0c928a4809f142d89c7aff04ddfc85925c6a2e3d279abf6a3f78f949d91f0d05c300e9e3d047634ade46d2166fa9e87131b03fb1b2ed2efbac87657275ec580b5a7233198370357233f199955b3338d7ea17c813ce704ebd2beb134b2b1488bb8aade942604bc3173b668bc60a799f24f8196e50e3f1c907e9463dbab72634698bc640dd80602077930c47a44d78fbffc13b0f1eda750e5008a23504c14bbecb361c76e73d0c6f88892d3812ed275f511374c0675965f8281b7f781d090e960c06332fc5797912dc2d44302d4e80d1597ea274dd70840c79f5e3f2014da47176a29fce4818671ec95fea52a1ef1a300339ffb70c70afcb57541436521d92e0eff7c48d854b5bc6042aba348630751772ea827134e1519fbb6eb7b57f512d6192f995c7b40a64b2cfc1c306c5c2d04b171a492fb2c804eebdf815b7f714b8a091f77ea92d8269b297fa08b323057a55f0413446d518c984072662d42edbb609730d449662a8f44b6b4eaf5dcc9e7db4897dae1349d82ec45e3eabe55f63e2585ac5b0888fb8c135ccabf96d0227800e19e0b337e61744fe2a8219d635d687111f082f998c856c2081c8a5e99caa61073eb1aff84f4dd2b3219c30c752824f583d9743e5d668673932199a5a4fbf152cb622a9366d0a82fa3b3747a95cfd6af09f952da04fb2f04b483827788c9158cec3bd80281b8f5666bf878f2659d458af906ec5d78f341912a0fdb3afa38472950ac3e0c52dc5cb6422bca97556e13fa4a15fd2bc003965396b39c836a6ec8a18daf86efa94348776f9db0fbb7721c96ea4b74f53c1f23332c0c157000e9cdb40cd2e9ee0d67d494bf04f1be7ecf0b1c95282db7c50c66b9220722577a22b515855ed3b81ce0d585e8ae447f936ebab73878a5791e3814b7992a510b245095c638a0b05723b7ce7bce244017bd2ee8f9b589c23cccb664cb7222c1bbf31690f5efb36c033680cd4195c7cebe104b1232c81dcaae2589b10e9ee9827f6c1dc216450470594c9d8217f127847551165f38ea87c7386c6dd3b0a9d478efbe6d5f95ab1ca944c8ac4c15043ea6d2c49c8502404d034776517fedeefeccf92037123b9c3053f2d30e52c413e1065c0a8b21a7eab3de3b63e96d8a79166ecd6c3d7b2891353c4a02c9435df3f5f2bd9844b5e00bb6ac6b712fb5350d6d42db1aa9151cca8946e5bc471cd8a86e507a92da18dbb3881ac242c32335d66aa73a218621824a3e504006da26616f0d837a4c8cf9cf441fba4ff8c22b028204deb0dbc0726b29dd0aa1a59f8600961b85d07d6fdb9ee5b08b422f4a53f7fb6fb0734814d347fec9cd2f8e584ea43ed94f03a8ae772726c4fcd32ec5c583f67fbdab87f8275ac9a3fffe4ca875f6f289a7d876ab4347c3a00cf955d9b0dfe1b1bd5597c91740d6f5bb4599e0bcb558ca71db4c26de70862d16420c1e6f55318f9d409d6badf9ee5a4c873c537cb107b10a4222452d9515106eb1585981e6e5ad87ab58fcdded0a1447450b0c18113eee90049c43ed8522e40f414632cdf7e0756d7b86aed0a11ce4b82d246696202e855fa8785f340e23b6e7bfd8fed846e883a84bb2d9036888f1956d9e9f796560a002fca834806c97486911439c2ebd150c90ede9152e867fcb0e6392403a9a9f32009623f8575cb69ed246c1c8d2b30cab8b85b94a24e771ce9e98a903de12fced2d2e43533169702b81923cf41170ac6130ca255ec4fd85fa7c18b4034bad323afe501941b060d36f1c1d36605f0f204395cc290b717ce873f730b023557e0421c87a8480c2cdca983287fcfeab2fd7198564f2dc1ccd23f2314cc3d960041c004dad8baf9d7516b8097211ed611b9a89317760e45b739a8569bb4fdb71730e6922d8c2b735c774d14db3b2debcc2e6b6dd4f71fbd998a1cc29d7ee9347d236874831180cb011ef1f2c2f7ea353841ffb7f80e08b9bd03f77a8bacd2bc2ec28efe0b3d6d481ee1c662cf9560c2af37ccf6e6e3a245c12a1d3936bda87f921b207c929319ff53a3c2b367f9248764808e10d1a3f381422e6fd838f8edda17a215d261d5fd226d7708c91e15bcd38b47da4274eb464d57ca7c06c876d6356817e2fdb7d561e2d081c3f4974dbe005cdb111ebda118cadd93ddd10c2bdbd60f52aa513123c04a9572d73b6277b041b51edb495118f58c8c19797c8c1df4ba2ea09271d2d136904439220c65f12885d5684d9abd5a5b20a671916b7561a87e453a44261a822a42c1e13a77ebf95ffbb5224cbbebaa2d9f80bbd2f16e6936f94158c57922975506c5fc5b80e35f55de87961d3c8e59cc5059f6b3ba76882fb555a362a3da1c50e20b0e0ae2801144f12a899af9a38b0b3c18b0363ac38056f1e68e10dd30ab127a97ff7b115da9ea87fda961f8350d70241121ef5585ae52968a4cd67898579734737d9cdbc5c8e67238afec9a8d9f7633baec805f92f80d53399557fa0d08235d16dc411d1af249b206b8e0f1dc59285a5acd42ba3dcb5167ba500b1a70fd368e863771024d18b8f716da1b62bcc5d60ec1b25cb0c602a5a16183e1be3d864c0c138ec182a04b6f1bb4f4b3af1438cd8678a3d0e397a635d358f91832ac5175512ddd63534eeb67a9705963a0e8ab3942014920bd82fe2eb7ebf74ed46433a65a7c2a4f0b713e43f9f6c2f12bc8406911d9051f604d20f56620579ae8153953a3b1c5775aeb856e417f0e467a19d852181bb364a6977dd85c22011bc885cefe57b365c50175e17c232041fbf5c45068abf4b4b2089036de57ab562df519b5c881330314b24d7fd39ad889f4de86a10154486ae8188898751534c79de7d7ead78515715f5fe503caac9b068c3eddbf4df477341577cac371ebcd37358"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000002380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="000a09000000090902", @ANYRES16], 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000e40)={0xf4e, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.790792][ T32] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 92.790811][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.790841][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.950486][ T32] usb 1-1: config 0 descriptor?? [ 93.214951][ T5959] syzkaller1: entered promiscuous mode [ 93.214978][ T5959] syzkaller1: entered allmulticast mode [ 93.468471][ T32] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 93.486841][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 93.486915][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 93.488053][ T5609] Bluetooth: hci0: hardware error 0x00 [ 93.500633][ T5970] FAULT_INJECTION: forcing a failure. [ 93.500633][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 93.500659][ T5970] CPU: 1 UID: 0 PID: 5970 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 93.500678][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.500688][ T5970] Call Trace: [ 93.500694][ T5970] [ 93.500702][ T5970] dump_stack_lvl+0xe8/0x150 [ 93.500731][ T5970] should_fail_ex+0x3eb/0x540 [ 93.500758][ T5970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 93.500779][ T5970] should_failslab+0xa8/0x100 [ 93.500799][ T5970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 93.500817][ T5970] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 93.500843][ T5970] ? proc_alloc_inode+0x2a/0xc0 [ 93.500860][ T5970] ? proc_alloc_inode+0x2a/0xc0 [ 93.500885][ T5970] ? __pfx_proc_alloc_inode+0x10/0x10 [ 93.500904][ T5970] proc_alloc_inode+0x2a/0xc0 [ 93.500923][ T5970] alloc_inode+0x6a/0x1b0 [ 93.500948][ T5970] new_inode+0x1f/0x170 [ 93.500978][ T5970] ? proc_pid_make_inode+0x19/0x130 [ 93.501004][ T5970] proc_pid_make_inode+0x21/0x130 [ 93.501029][ T5970] proc_pident_instantiate+0x6d/0x2a0 [ 93.501058][ T5970] proc_pident_lookup+0x1b7/0x270 [ 93.501089][ T5970] lookup_open+0x94b/0x1970 [ 93.501134][ T5970] path_openat+0x70c/0x20f0 [ 93.501172][ T5970] do_file_open+0x23e/0x4a0 [ 93.501196][ T5970] ? __pfx_do_file_open+0x10/0x10 [ 93.501224][ T5970] ? __pfx_kfree_link+0x10/0x10 [ 93.501260][ T5970] ? _raw_spin_unlock+0x28/0x50 [ 93.501277][ T5970] ? alloc_fd+0x6af/0x760 [ 93.501312][ T5970] do_sys_openat2+0x115/0x200 [ 93.501339][ T5970] ? __se_sys_futex+0x3a8/0x450 [ 93.501363][ T5970] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.501391][ T5970] ? rcu_is_watching+0x16/0xb0 [ 93.501417][ T5970] __x64_sys_openat+0x138/0x170 [ 93.501445][ T5970] do_syscall_64+0x166/0x520 [ 93.501465][ T5970] ? trace_irq_disable+0x3b/0x140 [ 93.501482][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.501500][ T5970] ? clear_bhb_loop+0x70/0xc0 [ 93.501522][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.501539][ T5970] RIP: 0033:0x7f921355ed8e [ 93.501556][ T5970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.501570][ T5970] RSP: 002b:00007f9214497f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.501589][ T5970] RAX: ffffffffffffffda RBX: 00007f92144986c0 RCX: 00007f921355ed8e [ 93.501602][ T5970] RDX: 0000000000000002 RSI: 00007f92136351aa RDI: ffffffffffffff9c [ 93.501614][ T5970] RBP: 00007f92136358b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.501624][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.501635][ T5970] R13: 00007f9213826038 R14: 00007f9213825fa0 R15: 00007ffca97497d8 [ 93.501665][ T5970] [ 93.830318][ T5978] FAULT_INJECTION: forcing a failure. [ 93.830318][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 93.830350][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full) [ 93.830373][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.830385][ T5978] Call Trace: [ 93.830393][ T5978] [ 93.830402][ T5978] dump_stack_lvl+0xe8/0x150 [ 93.830434][ T5978] should_fail_ex+0x3eb/0x540 [ 93.830475][ T5978] should_failslab+0xa8/0x100 [ 93.830501][ T5978] __kmalloc_cache_noprof+0x9e/0x600 [ 93.830529][ T5978] ? __kmalloc_cache_noprof+0x148/0x600 [ 93.830553][ T5978] ? raw_ioctl+0x1c63/0x41c0 [ 93.830574][ T5978] ? raw_ioctl+0x1c63/0x41c0 [ 93.830601][ T5978] raw_ioctl+0x1c63/0x41c0 [ 93.830629][ T5978] ? tomoyo_path_number_perm+0x219/0x5f0 [ 93.830660][ T5978] ? do_vfs_ioctl+0x116f/0x1530 [ 93.830685][ T5978] ? __pfx_raw_ioctl+0x10/0x10 [ 93.830711][ T5978] ? handle_mm_fault+0xee/0x3540 [ 93.830769][ T5978] ? __fget_files+0x2a/0x420 [ 93.830798][ T5978] ? __fget_files+0x2a/0x420 [ 93.830831][ T5978] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.830852][ T5978] ? __pfx_raw_ioctl+0x10/0x10 [ 93.830871][ T5978] __se_sys_ioctl+0xfc/0x170 [ 93.830899][ T5978] do_syscall_64+0x166/0x520 [ 93.830922][ T5978] ? trace_irq_disable+0x3b/0x140 [ 93.830942][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.830962][ T5978] ? clear_bhb_loop+0x70/0xc0 [ 93.830986][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.831006][ T5978] RIP: 0033:0x7f921359e1eb [ 93.831025][ T5978] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 93.831041][ T5978] RSP: 002b:00007f9214495f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.831063][ T5978] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f921359e1eb [ 93.831077][ T5978] RDX: 00007f9214496fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 93.831089][ T5978] RBP: 00007f9214496fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 93.831102][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9214495fa0 [ 93.831114][ T5978] R13: 0000200000000140 R14: 0000000000000000 R15: 0000000000000000 [ 93.831145][ T5978] [ 93.912846][ T5977] rnbd_client L203: map_device: Unknown parameter or missing value 'w' [ 93.951580][ T5977] openvswitch: netlink: EtherType 548 is less than min 600 [ 94.139857][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.295764][ T5978] netlink: zone id is out of range [ 94.295806][ T5978] netlink: zone id is out of range [ 94.295814][ T5978] netlink: zone id is out of range [ 94.295822][ T5978] netlink: zone id is out of range [ 94.295829][ T5978] netlink: zone id is out of range [ 94.295836][ T5978] netlink: zone id is out of range [ 94.295844][ T5978] netlink: zone id is out of range [ 94.356091][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.380453][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.398307][ T10] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 94.412154][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 94.412195][ T10] usb 4-1: can't read configurations, error -71 [ 94.511486][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'. [ 94.578327][ T6001] tmpfs: Bad value for 'mpol' [ 94.608997][ T6005] ceph: No source [ 94.799036][ T33] audit: type=1326 audit(1792144338.297:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.67" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f7379e559 code=0x0 [ 94.886783][ T6018] FAULT_INJECTION: forcing a failure. [ 94.886783][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 94.886816][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(full) [ 94.886838][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.886850][ T6018] Call Trace: [ 94.886858][ T6018] [ 94.886866][ T6018] dump_stack_lvl+0xe8/0x150 [ 94.886899][ T6018] should_fail_ex+0x3eb/0x540 [ 94.886932][ T6018] should_failslab+0xa8/0x100 [ 94.886956][ T6018] __kvmalloc_node_noprof+0x171/0x820 [ 94.886986][ T6018] ? __kmalloc_cache_noprof+0x31c/0x600 [ 94.887015][ T6018] ? __kmalloc_cache_noprof+0x148/0x600 [ 94.887041][ T6018] ? percpu_ref_init+0xc5/0x350 [ 94.887062][ T6018] ? io_alloc_cache_init+0x42/0x140 [ 94.887085][ T6018] ? io_alloc_cache_init+0x42/0x140 [ 94.887116][ T6018] io_alloc_cache_init+0x42/0x140 [ 94.887143][ T6018] io_ring_ctx_alloc+0x508/0xb80 [ 94.887173][ T6018] io_uring_create+0x50/0x980 [ 94.887198][ T6018] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 94.887225][ T6018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.887251][ T6018] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 94.887294][ T6018] ? rcu_is_watching+0x16/0xb0 [ 94.887332][ T6018] do_syscall_64+0x166/0x520 [ 94.887356][ T6018] ? trace_irq_disable+0x3b/0x140 [ 94.887376][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.887395][ T6018] ? clear_bhb_loop+0x70/0xc0 [ 94.887430][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.887455][ T6018] RIP: 0033:0x7fa49d79e559 [ 94.887475][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.887491][ T6018] RSP: 002b:00007fa49e64bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 94.887514][ T6018] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fa49d79e559 [ 94.887529][ T6018] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 0000000000000f00 [ 94.887541][ T6018] RBP: 00007fa49d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 94.887554][ T6018] R10: 0000200000000340 R11: 0000000000000206 R12: 0000200000000300 [ 94.887567][ T6018] R13: 0000200000000340 R14: 00002000000002c0 R15: 00007ffd3bc03768 [ 94.887598][ T6018] [ 95.215996][ T6028] FAULT_INJECTION: forcing a failure. [ 95.215996][ T6028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.216027][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.71 Not tainted syzkaller #0 PREEMPT(full) [ 95.216048][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.216060][ T6028] Call Trace: [ 95.216068][ T6028] [ 95.216076][ T6028] dump_stack_lvl+0xe8/0x150 [ 95.216109][ T6028] should_fail_ex+0x3eb/0x540 [ 95.216141][ T6028] _copy_to_user+0x31/0xb0 [ 95.216170][ T6028] simple_read_from_buffer+0xe1/0x170 [ 95.216203][ T6028] proc_fail_nth_read+0x1bb/0x230 [ 95.216229][ T6028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.216255][ T6028] ? rw_verify_area+0x24a/0x4c0 [ 95.216285][ T6028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.216306][ T6028] vfs_read+0x213/0xa80 [ 95.216340][ T6028] ? __pfx___mutex_lock+0x10/0x10 [ 95.216366][ T6028] ? __pfx_vfs_read+0x10/0x10 [ 95.216395][ T6028] ? __fget_files+0x2a/0x420 [ 95.216420][ T6028] ? __fget_files+0x3a2/0x420 [ 95.216445][ T6028] ? __fget_files+0x2a/0x420 [ 95.216476][ T6028] ? fdget+0x1ac/0x250 [ 95.216509][ T6028] ksys_read+0x150/0x270 [ 95.216541][ T6028] ? __pfx_ksys_read+0x10/0x10 [ 95.216583][ T6028] do_syscall_64+0x166/0x520 [ 95.216604][ T6028] ? trace_irq_disable+0x3b/0x140 [ 95.216623][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.216643][ T6028] ? clear_bhb_loop+0x70/0xc0 [ 95.216667][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.216685][ T6028] RIP: 0033:0x7f9be235ed8e [ 95.216704][ T6028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.216720][ T6028] RSP: 002b:00007f9be05f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.216742][ T6028] RAX: ffffffffffffffda RBX: 00007f9be05f66c0 RCX: 00007f9be235ed8e [ 95.216756][ T6028] RDX: 000000000000000f RSI: 00007f9be05f60a0 RDI: 0000000000000004 [ 95.216768][ T6028] RBP: 00007f9be05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 95.216783][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.216793][ T6028] R13: 00007f9be2626038 R14: 00007f9be2625fa0 R15: 00007ffcee516ae8 [ 95.216824][ T6028] [ 95.311399][ T32] usb 1-1: USB disconnect, device number 7 [ 95.571573][ T6035] loop7: detected capacity change from 0 to 7 [ 95.639903][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 95.709065][ T6035] Dev loop7: unable to read RDB block 7 [ 95.709111][ T6035] loop7: unable to read partition table [ 95.709323][ T6035] loop7: partition table beyond EOD, truncated [ 95.709357][ T6035] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 95.734411][ T6046] FAULT_INJECTION: forcing a failure. [ 95.734411][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 95.734445][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 95.734471][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.734483][ T6046] Call Trace: [ 95.734491][ T6046] [ 95.734501][ T6046] dump_stack_lvl+0xe8/0x150 [ 95.734533][ T6046] should_fail_ex+0x3eb/0x540 [ 95.734566][ T6046] should_failslab+0xa8/0x100 [ 95.734590][ T6046] __kmalloc_cache_noprof+0x9e/0x600 [ 95.734624][ T6046] ? vicodec_open+0xf3/0xbf0 [ 95.734649][ T6046] ? vicodec_open+0xf3/0xbf0 [ 95.734680][ T6046] vicodec_open+0xf3/0xbf0 [ 95.734715][ T6046] v4l2_open+0x1bc/0x3a0 [ 95.734748][ T6046] chrdev_open+0x4d9/0x600 [ 95.734775][ T6046] ? __pfx_chrdev_open+0x10/0x10 [ 95.734798][ T6046] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 95.734820][ T6046] ? devcgroup_check_permission+0x31/0x8f0 [ 95.734847][ T6046] ? __pfx_chrdev_open+0x10/0x10 [ 95.734869][ T6046] do_dentry_open+0x80e/0x1360 [ 95.734905][ T6046] vfs_open_consume+0x4a/0x350 [ 95.734927][ T6046] ? path_openat+0x16e1/0x20f0 [ 95.734951][ T6046] path_openat+0x16fc/0x20f0 [ 95.735000][ T6046] do_file_open+0x23e/0x4a0 [ 95.735027][ T6046] ? __pfx_do_file_open+0x10/0x10 [ 95.735070][ T6046] ? _raw_spin_unlock+0x28/0x50 [ 95.735092][ T6046] ? alloc_fd+0x6af/0x760 [ 95.735133][ T6046] do_sys_openat2+0x115/0x200 [ 95.735161][ T6046] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.735193][ T6046] ? do_user_addr_fault+0xd3f/0x1480 [ 95.735227][ T6046] __x64_sys_openat+0x138/0x170 [ 95.735257][ T6046] do_syscall_64+0x166/0x520 [ 95.735281][ T6046] ? trace_irq_disable+0x3b/0x140 [ 95.735302][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.735323][ T6046] ? clear_bhb_loop+0x70/0xc0 [ 95.735349][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.735369][ T6046] RIP: 0033:0x7f9f7375ed8e [ 95.735390][ T6046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.735406][ T6046] RSP: 002b:00007f9f746c6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.735429][ T6046] RAX: ffffffffffffffda RBX: 00007f9f746c76c0 RCX: 00007f9f7375ed8e [ 95.735444][ T6046] RDX: 0000000000000002 RSI: 00007f9f746c6c00 RDI: ffffffffffffff9c [ 95.735458][ T6046] RBP: 00007f9f746c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 95.735470][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 95.735483][ T6046] R13: 00007f9f73a26038 R14: 00007f9f73a25fa0 R15: 00007ffcb5ab72c8 [ 95.735515][ T6046] [ 95.813270][ T5612] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.003705][ T5612] usb 4-1: New USB device found: idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 96.017459][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.017485][ T5612] usb 4-1: Product: syz [ 96.017497][ T5612] usb 4-1: Manufacturer: syz [ 96.017509][ T5612] usb 4-1: SerialNumber: syz [ 96.033918][ T5612] usb 4-1: config 0 descriptor?? [ 96.038611][ T6051] FAULT_INJECTION: forcing a failure. [ 96.038611][ T6051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.038678][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) [ 96.038698][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.038708][ T6051] Call Trace: [ 96.038716][ T6051] [ 96.038723][ T6051] dump_stack_lvl+0xe8/0x150 [ 96.038752][ T6051] should_fail_ex+0x3eb/0x540 [ 96.038780][ T6051] _copy_from_user+0x2d/0xb0 [ 96.038809][ T6051] memdup_user+0x5e/0xd0 [ 96.038832][ T6051] strndup_user+0x68/0xd0 [ 96.038855][ T6051] __se_sys_mount+0x9d/0x420 [ 96.038880][ T6051] ? ksys_write+0x242/0x270 [ 96.038909][ T6051] ? __pfx___se_sys_mount+0x10/0x10 [ 96.038938][ T6051] ? __x64_sys_mount+0x20/0xc0 [ 96.038964][ T6051] do_syscall_64+0x166/0x520 [ 96.038985][ T6051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.039003][ T6051] ? clear_bhb_loop+0x70/0xc0 [ 96.039024][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.039040][ T6051] RIP: 0033:0x7f9f7379e559 [ 96.039057][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.039071][ T6051] RSP: 002b:00007f9f746c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.039091][ T6051] RAX: ffffffffffffffda RBX: 00007f9f73a25fa0 RCX: 00007f9f7379e559 [ 96.039104][ T6051] RDX: 00002000000005c0 RSI: 0000200000000580 RDI: 0000200000000540 [ 96.039115][ T6051] RBP: 00007f9f746c7090 R08: 0000200000000600 R09: 0000000000000000 [ 96.039126][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.039136][ T6051] R13: 00007f9f73a26038 R14: 00007f9f73a25fa0 R15: 00007ffcb5ab72c8 [ 96.039165][ T6051] [ 96.072091][ T5612] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 96.315944][ T6057] FAULT_INJECTION: forcing a failure. [ 96.315944][ T6057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.316018][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 96.316040][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.316052][ T6057] Call Trace: [ 96.316060][ T6057] [ 96.316069][ T6057] dump_stack_lvl+0xe8/0x150 [ 96.316102][ T6057] should_fail_ex+0x3eb/0x540 [ 96.316137][ T6057] _copy_from_iter+0x1d3/0x18b0 [ 96.316179][ T6057] ? __pfx__copy_from_iter+0x10/0x10 [ 96.316200][ T6057] ? trace_kmalloc+0x2a/0xf0 [ 96.316231][ T6057] ? __kmalloc_noprof+0x387/0x710 [ 96.316257][ T6057] ? __kmalloc_noprof+0x1a6/0x710 [ 96.316282][ T6057] ? kernfs_fop_write_iter+0x157/0x540 [ 96.316318][ T6057] kernfs_fop_write_iter+0x19a/0x540 [ 96.316351][ T6057] vfs_write+0x612/0xba0 [ 96.316391][ T6057] ? __pfx_vfs_write+0x10/0x10 [ 96.316424][ T6057] ? __fget_files+0x3a2/0x420 [ 96.316450][ T6057] ? __fget_files+0x2a/0x420 [ 96.316482][ T6057] ? fdget+0x1ac/0x250 [ 96.316517][ T6057] ksys_write+0x150/0x270 [ 96.316549][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 96.316593][ T6057] do_syscall_64+0x166/0x520 [ 96.316616][ T6057] ? trace_irq_disable+0x3b/0x140 [ 96.316637][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.316657][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 96.316682][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.316701][ T6057] RIP: 0033:0x7f9f7379e559 [ 96.316722][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.316738][ T6057] RSP: 002b:00007f9f746c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.316761][ T6057] RAX: ffffffffffffffda RBX: 00007f9f73a25fa0 RCX: 00007f9f7379e559 [ 96.316776][ T6057] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 96.316788][ T6057] RBP: 00007f9f746c7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.316800][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.316812][ T6057] R13: 00007f9f73a26038 R14: 00007f9f73a25fa0 R15: 00007ffcb5ab72c8 [ 96.316868][ T6057] [ 96.472713][ T5612] sonixb 4-1:0.0: Error writing register 01: -71 [ 96.472826][ T5612] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 96.491300][ T5612] usb 4-1: USB disconnect, device number 5 [ 96.575300][ T33] audit: type=1326 audit(1792144340.077:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.2.81" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa49d79e559 code=0x0 [ 96.630379][ T6066] FAULT_INJECTION: forcing a failure. [ 96.630379][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 96.630408][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 96.630430][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.630440][ T6066] Call Trace: [ 96.630452][ T6066] [ 96.630460][ T6066] dump_stack_lvl+0xe8/0x150 [ 96.630491][ T6066] should_fail_ex+0x3eb/0x540 [ 96.630522][ T6066] should_failslab+0xa8/0x100 [ 96.630545][ T6066] __kmalloc_noprof+0xf9/0x710 [ 96.630572][ T6066] ? tomoyo_encode+0x2ad/0x570 [ 96.630598][ T6066] ? tomoyo_encode+0x2ad/0x570 [ 96.630632][ T6066] tomoyo_encode+0x2ad/0x570 [ 96.630665][ T6066] tomoyo_realpath_from_path+0x5fa/0x640 [ 96.630703][ T6066] ? tomoyo_path_number_perm+0x219/0x5f0 [ 96.630726][ T6066] tomoyo_path_number_perm+0x246/0x5f0 [ 96.630752][ T6066] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.630774][ T6066] ? __lock_acquire+0x747/0x2de0 [ 96.630833][ T6066] ? __fget_files+0x2a/0x420 [ 96.630862][ T6066] ? __fget_files+0x2a/0x420 [ 96.630890][ T6066] ? __fget_files+0x2a/0x420 [ 96.630921][ T6066] security_file_ioctl+0xc3/0x2a0 [ 96.630946][ T6066] __se_sys_ioctl+0x47/0x170 [ 96.630969][ T6066] do_syscall_64+0x166/0x520 [ 96.630991][ T6066] ? trace_irq_disable+0x3b/0x140 [ 96.631020][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.631040][ T6066] ? clear_bhb_loop+0x70/0xc0 [ 96.631063][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.631082][ T6066] RIP: 0033:0x7fa49d79e559 [ 96.631101][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.631116][ T6066] RSP: 002b:00007fa49e62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.631137][ T6066] RAX: ffffffffffffffda RBX: 00007fa49da26090 RCX: 00007fa49d79e559 [ 96.631151][ T6066] RDX: 0000000000000000 RSI: 0000000000005101 RDI: 0000000000000003 [ 96.631163][ T6066] RBP: 00007fa49e62b090 R08: 0000000000000000 R09: 0000000000000000 [ 96.631174][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.631185][ T6066] R13: 00007fa49da26128 R14: 00007fa49da26090 R15: 00007ffd3bc03768 [ 96.631218][ T6066] [ 96.634254][ T6066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.108784][ T6080] FAULT_INJECTION: forcing a failure. [ 97.108784][ T6080] name failslab, interval 1, probability 0, space 0, times 0 [ 97.108819][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) [ 97.108841][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.108851][ T6080] Call Trace: [ 97.108859][ T6080] [ 97.108868][ T6080] dump_stack_lvl+0xe8/0x150 [ 97.108900][ T6080] should_fail_ex+0x3eb/0x540 [ 97.108932][ T6080] should_failslab+0xa8/0x100 [ 97.108956][ T6080] ? security_file_alloc+0x34/0x310 [ 97.108980][ T6080] kmem_cache_alloc_noprof+0x9c/0x600 [ 97.109006][ T6080] ? rcu_is_watching+0x16/0xb0 [ 97.109030][ T6080] ? security_file_alloc+0x34/0x310 [ 97.109060][ T6080] security_file_alloc+0x34/0x310 [ 97.109086][ T6080] init_file+0x90/0x2b0 [ 97.109114][ T6080] alloc_empty_file+0x74/0x1d0 [ 97.109141][ T6080] alloc_file_pseudo+0x110/0x1e0 [ 97.109170][ T6080] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 97.109196][ T6080] ? _raw_spin_unlock+0x28/0x50 [ 97.109226][ T6080] sock_alloc_file+0xb8/0x2e0 [ 97.109254][ T6080] ? __sys_socket+0x12b/0x1b0 [ 97.109278][ T6080] __sys_socket+0x13f/0x1b0 [ 97.109301][ T6080] __x64_sys_socket+0x7a/0x90 [ 97.109324][ T6080] do_syscall_64+0x166/0x520 [ 97.109348][ T6080] ? trace_irq_disable+0x3b/0x140 [ 97.109369][ T6080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.109391][ T6080] ? clear_bhb_loop+0x70/0xc0 [ 97.109426][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.109446][ T6080] RIP: 0033:0x7f921359e559 [ 97.109465][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.109482][ T6080] RSP: 002b:00007f9214498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 97.109505][ T6080] RAX: ffffffffffffffda RBX: 00007f9213825fa0 RCX: 00007f921359e559 [ 97.109520][ T6080] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 97.109532][ T6080] RBP: 00007f92136358b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.109545][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.109557][ T6080] R13: 00007f9213826038 R14: 00007f9213825fa0 R15: 00007ffca97497d8 [ 97.109590][ T6080] [ 97.413974][ T13] bond0: (slave bond_slave_0): interface is now down [ 97.413999][ T13] bond0: (slave bond_slave_1): interface is now down [ 97.520769][ T1150] bond0: (slave bond_slave_0): interface is now down [ 97.520795][ T1150] bond0: (slave bond_slave_1): interface is now down [ 97.527391][ T1150] bond0: now running without any active interface! [ 97.544509][ T6093] FAULT_INJECTION: forcing a failure. [ 97.544509][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 97.544549][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 97.544581][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.544594][ T6093] Call Trace: [ 97.544603][ T6093] [ 97.544613][ T6093] dump_stack_lvl+0xe8/0x150 [ 97.544650][ T6093] should_fail_ex+0x3eb/0x540 [ 97.544687][ T6093] should_failslab+0xa8/0x100 [ 97.544714][ T6093] __kmalloc_cache_noprof+0x9e/0x600 [ 97.544749][ T6093] ? ip_mc_add_src+0x82e/0x1170 [ 97.544778][ T6093] ? ip_mc_add_src+0x82e/0x1170 [ 97.544819][ T6093] ip_mc_add_src+0x82e/0x1170 [ 97.544868][ T6093] ip_mc_source+0xf54/0x14c0 [ 97.544918][ T6093] do_ip_setsockopt+0x22e3/0x2e30 [ 97.544956][ T6093] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 97.544982][ T6093] ? do_futex+0x458/0x4e0 [ 97.545011][ T6093] ? __asan_memcpy+0x40/0x70 [ 97.545046][ T6093] ? lock_acquire+0x115/0x350 [ 97.545081][ T6093] ? aa_sock_opt_perm+0xe8/0x1e0 [ 97.545118][ T6093] ip_setsockopt+0x66/0x110 [ 97.545146][ T6093] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 97.545174][ T6093] do_sock_setsockopt+0x17c/0x1b0 [ 97.545205][ T6093] __x64_sys_setsockopt+0x13d/0x1b0 [ 97.545237][ T6093] do_syscall_64+0x166/0x520 [ 97.545261][ T6093] ? trace_irq_disable+0x3b/0x140 [ 97.545283][ T6093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.545306][ T6093] ? clear_bhb_loop+0x70/0xc0 [ 97.545331][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.545351][ T6093] RIP: 0033:0x7fa49d79e559 [ 97.545372][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.545389][ T6093] RSP: 002b:00007fa49e64c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.545412][ T6093] RAX: ffffffffffffffda RBX: 00007fa49da25fa0 RCX: 00007fa49d79e559 [ 97.545427][ T6093] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 97.545439][ T6093] RBP: 00007fa49d8358b0 R08: 000000000000000c R09: 0000000000000000 [ 97.545451][ T6093] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.545464][ T6093] R13: 00007fa49da26038 R14: 00007fa49da25fa0 R15: 00007ffd3bc03768 [ 97.545507][ T6093] [ 97.613287][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 97.630286][ T5612] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 97.766835][ T6096] FAULT_INJECTION: forcing a failure. [ 97.766835][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 97.766864][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) [ 97.766884][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.766895][ T6096] Call Trace: [ 97.766903][ T6096] [ 97.766910][ T6096] dump_stack_lvl+0xe8/0x150 [ 97.766941][ T6096] should_fail_ex+0x3eb/0x540 [ 97.766978][ T6096] ? dup_task_struct+0x52/0xa00 [ 97.766997][ T6096] should_failslab+0xa8/0x100 [ 97.767018][ T6096] ? dup_task_struct+0x52/0xa00 [ 97.767035][ T6096] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 97.767062][ T6096] ? dup_task_struct+0x52/0xa00 [ 97.767088][ T6096] dup_task_struct+0x52/0xa00 [ 97.767109][ T6096] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.767137][ T6096] copy_process+0x7ea/0x44b0 [ 97.767157][ T6096] ? stack_trace_save+0xa9/0x100 [ 97.767190][ T6096] ? kasan_save_track+0x4f/0x80 [ 97.767214][ T6096] ? kasan_save_track+0x3e/0x80 [ 97.767238][ T6096] ? __kasan_kmalloc+0x93/0xb0 [ 97.767254][ T6096] ? __kmalloc_cache_noprof+0x31c/0x600 [ 97.767277][ T6096] ? create_io_worker+0xab/0x5c0 [ 97.767295][ T6096] ? io_submit_sqes+0x1e74/0x2310 [ 97.767317][ T6096] ? __se_sys_io_uring_enter+0x35b/0x1bb0 [ 97.767338][ T6096] ? do_syscall_64+0x166/0x520 [ 97.767358][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.767386][ T6096] ? __pfx_copy_process+0x10/0x10 [ 97.767417][ T6096] ? __pfx_io_wq_worker+0x10/0x10 [ 97.767434][ T6096] create_io_thread+0x14e/0x1e0 [ 97.767459][ T6096] ? __pfx_create_io_thread+0x10/0x10 [ 97.767487][ T6096] ? __pfx_io_wq_worker+0x10/0x10 [ 97.767508][ T6096] ? __kasan_kmalloc+0x93/0xb0 [ 97.767529][ T6096] ? __raw_spin_lock_init+0x45/0x100 [ 97.767553][ T6096] ? __init_swait_queue_head+0xa8/0x150 [ 97.767574][ T6096] ? create_io_worker+0x27/0x5c0 [ 97.767594][ T6096] create_io_worker+0x181/0x5c0 [ 97.767616][ T6096] io_wq_enqueue+0x675/0x8a0 [ 97.767642][ T6096] ? io_wq_enqueue+0x332/0x8a0 [ 97.767666][ T6096] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 97.767699][ T6096] io_submit_sqes+0x1e74/0x2310 [ 97.767752][ T6096] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 97.767788][ T6096] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.767812][ T6096] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 97.767845][ T6096] ? rcu_is_watching+0x16/0xb0 [ 97.767872][ T6096] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 97.767899][ T6096] do_syscall_64+0x166/0x520 [ 97.767919][ T6096] ? trace_irq_disable+0x3b/0x140 [ 97.767938][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.767967][ T6096] ? clear_bhb_loop+0x70/0xc0 [ 97.767989][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.768006][ T6096] RIP: 0033:0x7f921359e559 [ 97.768025][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.768039][ T6096] RSP: 002b:00007f9214497f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 97.768059][ T6096] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f921359e559 [ 97.768072][ T6096] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 97.768083][ T6096] RBP: 0000000000000088 R08: 0000000000000000 R09: 0000000000000008 [ 97.768094][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.768104][ T6096] R13: 0000000000000008 R14: 0000000000000f39 R15: 0000000000000000 [ 97.768133][ T6096] [ 97.794319][ T5612] usb 2-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 97.798249][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.812588][ T5612] usb 2-1: config 0 descriptor?? [ 97.835856][ T5612] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 98.263356][ T6088] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET) [ 98.355126][ T6113] netlink: 'syz.1.85': attribute type 13 has an invalid length. [ 98.360317][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.514534][ T32] usb 3-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 98.517943][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.532604][ T32] usb 3-1: config 0 descriptor?? [ 98.939017][ T32] hackrf 3-1:0.0: Board ID: 00 [ 98.939059][ T32] hackrf 3-1:0.0: Firmware version: [ 98.984931][ T32] hackrf 3-1:0.0: Registered as swradio24 [ 98.984960][ T32] videodev: could not get a free minor [ 98.984971][ T32] hackrf 3-1:0.0: Failed to register as video device (-23) [ 99.019372][ T32] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 99.148361][ T33] audit: type=1326 audit(1792144342.647:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.2.90" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa49d79e559 code=0x0 [ 99.189739][ T6138] FAULT_INJECTION: forcing a failure. [ 99.189739][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.189793][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 99.189817][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.189828][ T6138] Call Trace: [ 99.189840][ T6138] [ 99.189849][ T6138] dump_stack_lvl+0xe8/0x150 [ 99.189883][ T6138] should_fail_ex+0x3eb/0x540 [ 99.189913][ T6138] _copy_to_user+0x31/0xb0 [ 99.189943][ T6138] copy_siginfo_to_user+0x22/0xc0 [ 99.189967][ T6138] x64_setup_rt_frame+0x764/0xc50 [ 99.190015][ T6138] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 99.190060][ T6138] arch_do_signal_or_restart+0x456/0x860 [ 99.190089][ T6138] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.190123][ T6138] ? __x64_sys_preadv+0x28b/0x2b0 [ 99.190151][ T6138] exit_to_user_mode_loop+0x10e/0x770 [ 99.190173][ T6138] ? rcu_is_watching+0x16/0xb0 [ 99.190199][ T6138] do_syscall_64+0x328/0x520 [ 99.190224][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.190245][ T6138] ? clear_bhb_loop+0x70/0xc0 [ 99.190268][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.190287][ T6138] RIP: 0033:0x7f9be239e557 [ 99.190306][ T6138] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 99.190321][ T6138] RSP: 002b:00007f9be05f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 99.190344][ T6138] RAX: 0000000000000127 RBX: 00007f9be2625fa0 RCX: 00007f9be239e559 [ 99.190357][ T6138] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 99.190367][ T6138] RBP: 00007f9be05f6090 R08: 0000000000007fff R09: 0000000000000000 [ 99.190379][ T6138] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 99.190390][ T6138] R13: 00007f9be2626038 R14: 00007f9be2625fa0 R15: 00007ffcee516ae8 [ 99.190421][ T6138] [ 100.208048][ T6156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.363133][ T5612] gp8psk: usb out operation failed. [ 100.363154][ T5612] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 100.363198][ T5612] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 100.460143][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.503075][ T9] usb 2-1: USB disconnect, device number 4 [ 100.560192][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.612354][ T10] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.616365][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.623414][ T10] usb 4-1: config 0 descriptor?? [ 100.675506][ T6168] fuse: Bad value for 'fd' [ 100.719726][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 100.720622][ T32] usb 1-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 100.722520][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.725664][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.725689][ T32] usb 1-1: Product: syz [ 100.725702][ T32] usb 1-1: Manufacturer: syz [ 100.725715][ T32] usb 1-1: SerialNumber: syz [ 100.781656][ T32] usb 1-1: config 0 descriptor?? [ 100.786721][ T32] cdc_ether 1-1:0.0: missing cdc header descriptor [ 100.787949][ T32] usb 1-1: unsupported MDLM descriptors [ 100.852620][ T1150] nvmet: connect request for invalid subsystem testsubsys! [ 100.853463][ T6173] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 100.885543][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.886480][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.888900][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 100.991991][ T9] usb 1-1: USB disconnect, device number 8 [ 101.067207][ T6179] FAULT_INJECTION: forcing a failure. [ 101.067207][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 101.067237][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(full) [ 101.067258][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.067268][ T6179] Call Trace: [ 101.067276][ T6179] [ 101.067284][ T6179] dump_stack_lvl+0xe8/0x150 [ 101.067317][ T6179] should_fail_ex+0x3eb/0x540 [ 101.067346][ T6179] ? __pfx_sock_alloc_inode+0x10/0x10 [ 101.067374][ T6179] should_failslab+0xa8/0x100 [ 101.067391][ T6179] ? __pfx_sock_alloc_inode+0x10/0x10 [ 101.067407][ T6179] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 101.067424][ T6179] ? sock_alloc_inode+0x2c/0x1a0 [ 101.067438][ T6179] ? sock_alloc_inode+0x2c/0x1a0 [ 101.067462][ T6179] ? __pfx_sock_alloc_inode+0x10/0x10 [ 101.067489][ T6179] sock_alloc_inode+0x2c/0x1a0 [ 101.067507][ T6179] ? __pfx_sock_alloc_inode+0x10/0x10 [ 101.067533][ T6179] alloc_inode+0x6a/0x1b0 [ 101.067550][ T6179] __sock_create+0x127/0xac0 [ 101.067566][ T6179] __sys_socketpair+0x127/0x5e0 [ 101.067583][ T6179] __x64_sys_socketpair+0x9b/0xb0 [ 101.067604][ T6179] do_syscall_64+0x166/0x520 [ 101.067626][ T6179] ? trace_irq_disable+0x3b/0x140 [ 101.067645][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.067665][ T6179] ? clear_bhb_loop+0x70/0xc0 [ 101.067687][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.067700][ T6179] RIP: 0033:0x7f9f7379e559 [ 101.067712][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.067721][ T6179] RSP: 002b:00007f9f746c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 101.067735][ T6179] RAX: ffffffffffffffda RBX: 00007f9f73a25fa0 RCX: 00007f9f7379e559 [ 101.067750][ T6179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 101.067761][ T6179] RBP: 00007f9f738358b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.067774][ T6179] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000000 [ 101.067786][ T6179] R13: 00007f9f73a26038 R14: 00007f9f73a25fa0 R15: 00007ffcb5ab72c8 [ 101.067817][ T6179] [ 101.067850][ T6179] net_ratelimit: 29 callbacks suppressed [ 101.067862][ T6179] socket: no more sockets [ 101.077549][ T6179] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 101.078521][ T6179] process 'syz.1.105' launched '/dev/fd/7' with NULL argv: empty string added [ 101.087608][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 101.125368][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 101.125401][ T10] [drm] Initialized udl on minor 1 [ 101.240892][ T9] usb 3-1: USB disconnect, device number 3 [ 101.418336][ T142] nvmet: connect request for invalid subsystem testsubsys! [ 101.418633][ T6182] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 101.463827][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.107'. [ 101.678227][ T6192] FAULT_INJECTION: forcing a failure. [ 101.678227][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 101.678258][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 101.678280][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.678291][ T6192] Call Trace: [ 101.678299][ T6192] [ 101.678307][ T6192] dump_stack_lvl+0xe8/0x150 [ 101.678339][ T6192] should_fail_ex+0x3eb/0x540 [ 101.678371][ T6192] should_failslab+0xa8/0x100 [ 101.678395][ T6192] __kmalloc_cache_noprof+0x9e/0x600 [ 101.678423][ T6192] ? rcu_is_watching+0x16/0xb0 [ 101.678444][ T6192] ? vhost_task_create+0x123/0x380 [ 101.678470][ T6192] ? vhost_task_create+0x123/0x380 [ 101.678506][ T6192] vhost_task_create+0x123/0x380 [ 101.678533][ T6192] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 101.678554][ T6192] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 101.678577][ T6192] ? __pfx_vhost_task_create+0x10/0x10 [ 101.678603][ T6192] ? register_lock_class+0x31/0x2e0 [ 101.678640][ T6192] ? __pfx_vhost_task_fn+0x10/0x10 [ 101.678679][ T6192] ? kasan_quarantine_put+0xbb/0x1f0 [ 101.678717][ T6192] kvm_mmu_post_init_vm+0x147/0x2b0 [ 101.678748][ T6192] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 101.678784][ T6192] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 101.678820][ T6192] kvm_vcpu_ioctl+0xa61/0xfd0 [ 101.678865][ T6192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.678915][ T6192] ? __fget_files+0x2a/0x420 [ 101.678946][ T6192] ? __fget_files+0x2a/0x420 [ 101.678972][ T6192] ? __fget_files+0x2a/0x420 [ 101.679003][ T6192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.679024][ T6192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.679052][ T6192] __se_sys_ioctl+0xfc/0x170 [ 101.679077][ T6192] do_syscall_64+0x166/0x520 [ 101.679099][ T6192] ? trace_irq_disable+0x3b/0x140 [ 101.679120][ T6192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.679140][ T6192] ? clear_bhb_loop+0x70/0xc0 [ 101.679165][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.679184][ T6192] RIP: 0033:0x7f9be239e559 [ 101.679203][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.679219][ T6192] RSP: 002b:00007f9be05f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.679242][ T6192] RAX: ffffffffffffffda RBX: 00007f9be2625fa0 RCX: 00007f9be239e559 [ 101.679256][ T6192] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 101.679269][ T6192] RBP: 00007f9be05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.679281][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.679294][ T6192] R13: 00007f9be2626038 R14: 00007f9be2625fa0 R15: 00007ffcee516ae8 [ 101.679327][ T6192] [ 101.975688][ T142] nvmet: connect request for invalid subsystem testsubsys! [ 101.976004][ T6195] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 101.977651][ T6191] cgroup: none used incorrectly [ 102.289951][ T5708] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.440915][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 102.443134][ T5708] usb 3-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 102.445469][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 102.445493][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 102.445505][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.447647][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.447664][ T5708] usb 3-1: Product: syz [ 102.447672][ T5708] usb 3-1: Manufacturer: syz [ 102.447679][ T5708] usb 3-1: SerialNumber: syz [ 102.464931][ T5708] usb 3-1: config 0 descriptor?? [ 102.653854][ T6217] FAULT_INJECTION: forcing a failure. [ 102.653854][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 102.653876][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 102.653889][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.653896][ T6217] Call Trace: [ 102.653901][ T6217] [ 102.653907][ T6217] dump_stack_lvl+0xe8/0x150 [ 102.653927][ T6217] should_fail_ex+0x3eb/0x540 [ 102.653945][ T6217] should_failslab+0xa8/0x100 [ 102.653959][ T6217] __kmalloc_cache_noprof+0x9e/0x600 [ 102.653980][ T6217] ? alloc_pipe_info+0xe3/0x4c0 [ 102.653993][ T6217] ? alloc_pipe_info+0xe3/0x4c0 [ 102.654008][ T6217] alloc_pipe_info+0xe3/0x4c0 [ 102.654022][ T6217] splice_direct_to_actor+0xa41/0xcb0 [ 102.654047][ T6217] ? lock_acquire+0x115/0x350 [ 102.654060][ T6217] ? __pfx_aa_file_perm+0x10/0x10 [ 102.654078][ T6217] ? __pfx_direct_splice_actor+0x10/0x10 [ 102.654095][ T6217] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 102.654118][ T6217] do_splice_direct+0x195/0x290 [ 102.654137][ T6217] ? __pfx_do_splice_direct+0x10/0x10 [ 102.654154][ T6217] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 102.654170][ T6217] ? rw_verify_area+0x203/0x4c0 [ 102.654186][ T6217] ? fdget+0x1ac/0x250 [ 102.654203][ T6217] do_sendfile+0x52e/0x7c0 [ 102.654222][ T6217] ? __pfx_do_sendfile+0x10/0x10 [ 102.654237][ T6217] ? __might_fault+0xaf/0x130 [ 102.654255][ T6217] __se_sys_sendfile64+0xdf/0x1a0 [ 102.654270][ T6217] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 102.654281][ T6217] ? __task_pid_nr_ns+0x28/0x470 [ 102.654309][ T6217] do_syscall_64+0x166/0x520 [ 102.654323][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.654335][ T6217] ? clear_bhb_loop+0x70/0xc0 [ 102.654349][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.654360][ T6217] RIP: 0033:0x7f9be239e559 [ 102.654372][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.654381][ T6217] RSP: 002b:00007f9be05f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 102.654395][ T6217] RAX: ffffffffffffffda RBX: 00007f9be2625fa0 RCX: 00007f9be239e559 [ 102.654404][ T6217] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 102.654411][ T6217] RBP: 00007f9be05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.654418][ T6217] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 102.654425][ T6217] R13: 00007f9be2626038 R14: 00007f9be2625fa0 R15: 00007ffcee516ae8 [ 102.654443][ T6217] [ 102.701798][ T5708] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 102.701900][ T5708] imon 3-1:0.0: unable to initialize intf0, err -19 [ 102.715205][ T5708] usb 3-1: USB disconnect, device number 4 [ 103.165014][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 103.189944][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.340089][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 103.344039][ T32] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.345527][ T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 103.345559][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.345583][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.345604][ T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.345646][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.444841][ T6239] FAULT_INJECTION: forcing a failure. [ 103.444841][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.444873][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT(full) [ 103.444895][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.444906][ T6239] Call Trace: [ 103.444921][ T6239] [ 103.444930][ T6239] dump_stack_lvl+0xe8/0x150 [ 103.444966][ T6239] should_fail_ex+0x3eb/0x540 [ 103.444996][ T6239] _copy_from_user+0x2d/0xb0 [ 103.445024][ T6239] memdup_user_nul+0x66/0x110 [ 103.445050][ T6239] nvmf_dev_write+0x12e/0x2d90 [ 103.445081][ T6239] ? lock_acquire+0x115/0x350 [ 103.445110][ T6239] ? aa_file_perm+0x18b/0x15f0 [ 103.445144][ T6239] ? aa_file_perm+0x4ed/0x15f0 [ 103.445170][ T6239] ? aa_file_perm+0x18b/0x15f0 [ 103.445201][ T6239] ? __pfx_nvmf_dev_write+0x10/0x10 [ 103.445227][ T6239] ? kstrtoull+0x137/0x1d0 [ 103.445251][ T6239] ? __pfx_aa_file_perm+0x10/0x10 [ 103.445281][ T6239] ? lock_acquire+0x115/0x350 [ 103.445300][ T6239] ? get_pid_task+0x20/0x1f0 [ 103.445331][ T6239] ? __lock_acquire+0x747/0x2de0 [ 103.445352][ T6239] ? get_pid_task+0x20/0x1f0 [ 103.445381][ T6239] ? apparmor_file_permission+0x1fb/0x2b0 [ 103.445406][ T6239] ? bpf_lsm_file_permission+0x9/0x20 [ 103.445424][ T6239] ? security_file_permission+0x75/0x260 [ 103.445448][ T6239] ? rw_verify_area+0x203/0x4c0 [ 103.445479][ T6239] ? __pfx_nvmf_dev_write+0x10/0x10 [ 103.445503][ T6239] vfs_write+0x296/0xba0 [ 103.445539][ T6239] ? __pfx_vfs_write+0x10/0x10 [ 103.445569][ T6239] ? __fget_files+0x2a/0x420 [ 103.445595][ T6239] ? __fget_files+0x3a2/0x420 [ 103.445620][ T6239] ? __fget_files+0x2a/0x420 [ 103.445648][ T6239] ? fdget+0x1ac/0x250 [ 103.445681][ T6239] ksys_write+0x150/0x270 [ 103.445711][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 103.445750][ T6239] do_syscall_64+0x166/0x520 [ 103.445774][ T6239] ? trace_irq_disable+0x3b/0x140 [ 103.445793][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.445812][ T6239] ? clear_bhb_loop+0x70/0xc0 [ 103.445836][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.445854][ T6239] RIP: 0033:0x7fa49d79e559 [ 103.445873][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.445888][ T6239] RSP: 002b:00007fa49e64c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.445910][ T6239] RAX: ffffffffffffffda RBX: 00007fa49da25fa0 RCX: 00007fa49d79e559 [ 103.445933][ T6239] RDX: 000000000000001d RSI: 0000200000000580 RDI: 0000000000000003 [ 103.445945][ T6239] RBP: 00007fa49e64c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.445957][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.445968][ T6239] R13: 00007fa49da26038 R14: 00007fa49da25fa0 R15: 00007ffd3bc03768 [ 103.446000][ T6239] [ 103.536368][ T6245] FAULT_INJECTION: forcing a failure. [ 103.536368][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 103.536396][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.2.127 Not tainted syzkaller #0 PREEMPT(full) [ 103.536416][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.536430][ T6245] Call Trace: [ 103.536437][ T6245] [ 103.536443][ T6245] dump_stack_lvl+0xe8/0x150 [ 103.536472][ T6245] should_fail_ex+0x3eb/0x540 [ 103.536498][ T6245] ? alloc_slab_obj_exts+0x5c/0x180 [ 103.536519][ T6245] should_failslab+0xa8/0x100 [ 103.536539][ T6245] ? alloc_slab_obj_exts+0x5c/0x180 [ 103.536558][ T6245] __kmalloc_flags_noprof+0x123/0x790 [ 103.536585][ T6245] ? alloc_slab_obj_exts+0x5c/0x180 [ 103.536612][ T6245] alloc_slab_obj_exts+0x5c/0x180 [ 103.536635][ T6245] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 103.536680][ T6245] __kmalloc_cache_noprof+0x361/0x600 [ 103.536704][ T6245] ? __kmalloc_cache_noprof+0x148/0x600 [ 103.536726][ T6245] ? alloc_pipe_info+0xe3/0x4c0 [ 103.536759][ T6245] ? alloc_pipe_info+0xe3/0x4c0 [ 103.536784][ T6245] alloc_pipe_info+0xe3/0x4c0 [ 103.536805][ T6245] splice_direct_to_actor+0xa41/0xcb0 [ 103.536843][ T6245] ? lock_acquire+0x115/0x350 [ 103.536861][ T6245] ? __pfx_aa_file_perm+0x10/0x10 [ 103.536888][ T6245] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.536921][ T6245] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.536956][ T6245] do_splice_direct+0x195/0x290 [ 103.536984][ T6245] ? __pfx_do_splice_direct+0x10/0x10 [ 103.537011][ T6245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.537030][ T6245] ? bpf_lsm_file_permission+0x9/0x20 [ 103.537046][ T6245] ? security_file_permission+0x75/0x260 [ 103.537068][ T6245] ? rw_verify_area+0x203/0x4c0 [ 103.537092][ T6245] ? fdget+0x1ac/0x250 [ 103.537118][ T6245] do_sendfile+0x52e/0x7c0 [ 103.537146][ T6245] ? __pfx_do_sendfile+0x10/0x10 [ 103.537170][ T6245] ? fdget+0x1ac/0x250 [ 103.537200][ T6245] __se_sys_sendfile64+0x144/0x1a0 [ 103.537223][ T6245] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 103.537254][ T6245] do_syscall_64+0x166/0x520 [ 103.537275][ T6245] ? trace_irq_disable+0x3b/0x140 [ 103.537293][ T6245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.537310][ T6245] ? clear_bhb_loop+0x70/0xc0 [ 103.537332][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.537349][ T6245] RIP: 0033:0x7fa49d79e559 [ 103.537367][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.537381][ T6245] RSP: 002b:00007fa49e64c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.537401][ T6245] RAX: ffffffffffffffda RBX: 00007fa49da25fa0 RCX: 00007fa49d79e559 [ 103.537413][ T6245] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 103.537424][ T6245] RBP: 00007fa49e64c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.537434][ T6245] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 103.537445][ T6245] R13: 00007fa49da26038 R14: 00007fa49da25fa0 R15: 00007ffd3bc03768 [ 103.537473][ T6245] [ 103.736287][ T32] usb 2-1: GET_CAPABILITIES returned 0 [ 103.736338][ T32] usbtmc 2-1:16.0: can't read capabilities [ 103.977554][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985545][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985598][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985638][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985884][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985923][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.985961][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986185][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986225][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986265][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986486][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986526][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986565][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986789][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986831][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.986873][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 104.137659][ T32] usb 2-1: USB disconnect, device number 5 [ 104.396057][ T6253] syz.2.129 (6253) used greatest stack depth: 17408 bytes left [ 104.890196][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.939780][ T5612] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.019833][ T32] usb 2-1: device descriptor read/64, error -71 [ 105.089716][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 105.093100][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.093158][ T5612] usb 1-1: New USB device found: idVendor=ce6d, idProduct=a1d9, bcdDevice=e.a3 [ 105.093192][ T5612] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 105.095059][ T5612] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.095094][ T5612] usb 1-1: can't read configurations, error -61 [ 105.219736][ T5612] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 105.269750][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.369751][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 105.372591][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.372623][ T5612] usb 1-1: New USB device found: idVendor=ce6d, idProduct=a1d9, bcdDevice=e.a3 [ 105.372654][ T5612] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 105.374214][ T5612] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.374251][ T5612] usb 1-1: can't read configurations, error -61 [ 105.374680][ T5612] usb usb1-port1: attempt power cycle [ 105.401560][ T32] usb 2-1: device descriptor read/64, error -71 [ 105.510777][ T32] usb usb2-port1: attempt power cycle [ 105.709748][ T5612] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 105.731220][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 105.733300][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.733331][ T5612] usb 1-1: New USB device found: idVendor=ce6d, idProduct=a1d9, bcdDevice=e.a3 [ 105.733354][ T5612] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 105.734904][ T5612] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.734924][ T5612] usb 1-1: can't read configurations, error -61 [ 105.861078][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.861221][ T5612] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.889965][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 105.898324][ T32] usb 2-1: device descriptor read/8, error -71 [ 105.898764][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.898814][ T5612] usb 1-1: New USB device found: idVendor=ce6d, idProduct=a1d9, bcdDevice=e.a3 [ 105.898849][ T5612] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 105.932663][ T5612] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.932703][ T5612] usb 1-1: can't read configurations, error -61 [ 105.934474][ T5612] usb usb1-port1: unable to enumerate USB device [ 106.129857][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.150672][ T32] usb 2-1: device descriptor read/8, error -71 [ 106.200141][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 106.203251][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 106.215303][ T10] usb 4-1: USB disconnect, device number 6 [ 106.261071][ T32] usb usb2-port1: unable to enumerate USB device [ 106.319793][ T5612] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 106.480579][ T5612] usb 3-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 106.481643][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.483601][ T5612] usb 3-1: config 0 descriptor?? [ 106.489159][ T5612] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 106.690885][ T5612] gp8psk: usb in 128 operation failed. [ 106.709892][ T5708] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 106.860459][ T5708] usb 4-1: New USB device found: idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 106.861489][ T5708] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.861513][ T5708] usb 4-1: config 0 has no interface number 0 [ 106.861555][ T5708] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 106.861580][ T5708] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 106.861603][ T5708] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 106.861627][ T5708] usb 4-1: config 0 interface 2 has no altsetting 0 [ 106.863620][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.863642][ T5708] usb 4-1: Product: syz [ 106.863656][ T5708] usb 4-1: Manufacturer: syz [ 106.863669][ T5708] usb 4-1: SerialNumber: syz [ 106.866202][ T5708] usb 4-1: config 0 descriptor?? [ 106.867823][ T6290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.867990][ T6290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.979805][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.678352][ T6297] FAULT_INJECTION: forcing a failure. [ 107.678352][ T6297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.678383][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.1.143 Not tainted syzkaller #0 PREEMPT(full) [ 107.678405][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.678416][ T6297] Call Trace: [ 107.678424][ T6297] [ 107.678433][ T6297] dump_stack_lvl+0xe8/0x150 [ 107.678464][ T6297] should_fail_ex+0x3eb/0x540 [ 107.678494][ T6297] _copy_from_user+0x2d/0xb0 [ 107.678522][ T6297] memdup_user+0x5e/0xd0 [ 107.678548][ T6297] strndup_user+0x68/0xd0 [ 107.678572][ T6297] __se_sys_mount+0x9d/0x420 [ 107.678601][ T6297] ? ksys_write+0x242/0x270 [ 107.678634][ T6297] ? __pfx___se_sys_mount+0x10/0x10 [ 107.678666][ T6297] ? __x64_sys_mount+0x20/0xc0 [ 107.678696][ T6297] do_syscall_64+0x166/0x520 [ 107.678719][ T6297] ? trace_irq_disable+0x3b/0x140 [ 107.678740][ T6297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.678760][ T6297] ? clear_bhb_loop+0x70/0xc0 [ 107.678782][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.678799][ T6297] RIP: 0033:0x7f9f7379e559 [ 107.678818][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.678834][ T6297] RSP: 002b:00007f9f746c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.678856][ T6297] RAX: ffffffffffffffda RBX: 00007f9f73a25fa0 RCX: 00007f9f7379e559 [ 107.678871][ T6297] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 107.678884][ T6297] RBP: 00007f9f746c7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.678896][ T6297] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000001 [ 107.678909][ T6297] R13: 00007f9f73a26038 R14: 00007f9f73a25fa0 R15: 00007ffcb5ab72c8 [ 107.678941][ T6297] [ 108.200862][ T27] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 108.330632][ T27] usb 1-1: device descriptor read/64, error -71 [ 108.569768][ T27] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 108.699779][ T27] usb 1-1: device descriptor read/64, error -71 [ 108.760979][ T5612] gp8psk: usb in 146 operation failed. [ 108.761002][ T5612] gp8psk: failed to get FW version [ 108.761391][ T5612] gp8psk: usb in 149 operation failed. [ 108.761403][ T5612] gp8psk: failed to get FPGA version [ 108.761806][ T5612] gp8psk: usb in 138 operation failed. [ 108.761821][ T5612] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 108.761905][ T5612] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 108.818025][ T27] usb usb1-port1: attempt power cycle                                                                                                                                             [ 110.092093][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd syzkaller syzkaller login: [ 110.240897][ T27] usb 4-1: New USB device found: idVendor=0403, idProduct=6010, bcdDevice=5.00 [ 110.242844][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.245053][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.245077][ T27] usb 4-1: Product: syz [ 110.245091][ T27] usb 4-1: Manufacturer: syz [ 110.245105][ T27] usb 4-1: SerialNumber: syz [ 110.307481][ T27] ftdi_sio 4-1:1.0: FTDI USB Serial Device converter detected [ 110.321386][ T27] usb 4-1: Detected FT2232C/D [ 110.392423][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.409532][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.424060][ T13] bond0 (unregistering): Released all slaves [ 110.716781][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.727960][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.732804][ T6351] binder: Failure when writing BR_NOOP at beginning of buffer. [ 110.732874][ T6351] binder: Read failure Err(EFAULT) in pid:147 [ 110.759500][ T27] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 110.780997][ T27] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.801068][ T6351] syz.2.158 (6351) used greatest stack depth: 12224 bytes left [ 110.816933][ T27] usb 4-1: USB disconnect, device number 8 [ 110.873307][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.873978][ T27] ftdi_sio 4-1:1.0: device disconnected [ 111.134869][ T6325] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.234047][ T6362] overlay: Unknown parameter 'pcr' [ 111.305741][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 111.489858][ T5708] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.651499][ T5708] usb 3-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 111.652813][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.652841][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 111.652879][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.740471][ T5708] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 111.963731][ T5609] Bluetooth: hci0: command tx timeout [ 112.082184][ T6389] FAULT_INJECTION: forcing a failure. [ 112.082184][ T6389] name fail_futex, interval 1, probability 0, space 0, times 1 [ 112.082223][ T6389] CPU: 0 UID: 0 PID: 6389 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT(full) [ 112.082247][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.082258][ T6389] Call Trace: [ 112.082266][ T6389] [ 112.082274][ T6389] dump_stack_lvl+0xe8/0x150 [ 112.082307][ T6389] should_fail_ex+0x3eb/0x540 [ 112.082337][ T6389] get_futex_key+0x1ab/0x1410 [ 112.082372][ T6389] ? __pfx_get_futex_key+0x10/0x10 [ 112.082399][ T6389] ? update_se+0x90/0x1080 [ 112.082425][ T6389] futex_wait_setup+0x4a/0x590 [ 112.082447][ T6389] ? __futex_wait+0xdb/0x470 [ 112.082468][ T6389] __futex_wait+0x175/0x470 [ 112.082484][ T6389] ? update_protect_slice+0x45/0x320 [ 112.082516][ T6389] ? __pfx___futex_wait+0x10/0x10 [ 112.082537][ T6389] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.082573][ T6389] ? try_to_wake_up+0x8ce/0x14e0 [ 112.082606][ T6389] futex_wait+0x121/0x390 [ 112.082626][ T6389] ? __pfx_futex_wait+0x10/0x10 [ 112.082658][ T6389] ? __raw_spin_lock_init+0x45/0x100 [ 112.082693][ T6389] do_futex+0x3e7/0x4e0 [ 112.082715][ T6389] ? __asan_memcpy+0x40/0x70 [ 112.082744][ T6389] ? __pfx_do_futex+0x10/0x10 [ 112.082787][ T6389] __se_sys_futex+0x3a8/0x450 [ 112.082817][ T6389] ? fd_install+0x39e/0x4e0 [ 112.082843][ T6389] ? __pfx___se_sys_futex+0x10/0x10 [ 112.082866][ T6389] ? fd_install+0x95/0x4e0 [ 112.082897][ T6389] ? __x64_sys_futex+0x21/0xf0 [ 112.082924][ T6389] do_syscall_64+0x166/0x520 [ 112.082946][ T6389] ? trace_irq_disable+0x3b/0x140 [ 112.082967][ T6389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.082987][ T6389] ? clear_bhb_loop+0x70/0xc0 [ 112.083011][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.083030][ T6389] RIP: 0033:0x7f921359e559 [ 112.083049][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.083065][ T6389] RSP: 002b:00007f92144980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.083087][ T6389] RAX: ffffffffffffffda RBX: 00007f9213825fa8 RCX: 00007f921359e559 [ 112.083103][ T6389] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9213825fa8 [ 112.083115][ T6389] RBP: 00007f9213825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.083128][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.083139][ T6389] R13: 00007f9213826038 R14: 00007ffca97496f0 R15: 00007ffca97497d8 [ 112.083172][ T6389] [ 112.426663][ T13] hsr_slave_0: left promiscuous mode [ 112.427809][ T13] hsr_slave_1: left promiscuous mode [ 112.431142][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.431184][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.461705][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.461730][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.495334][ T13] veth1_macvtap: left promiscuous mode [ 112.495395][ T13] veth0_macvtap: left promiscuous mode [ 112.495538][ T13] veth1_vlan: left promiscuous mode [ 112.495659][ T13] veth0_vlan: left promiscuous mode [ 112.671064][ T27] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 112.822076][ T27] usb 1-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 112.823676][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 112.823708][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.823775][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.959456][ T13] team0 (unregistering): Port device team_slave_1 removed [ 112.984393][ T13] team0 (unregistering): Port device team_slave_0 removed [ 112.996406][ T6404] binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.996425][ T6404] binder: Read failure Err(EFAULT) in pid:86 [ 113.005283][ T6404] FAULT_INJECTION: forcing a failure. [ 113.005283][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 113.005313][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 113.005334][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.005347][ T6404] Call Trace: [ 113.005355][ T6404] [ 113.005363][ T6404] dump_stack_lvl+0xe8/0x150 [ 113.005399][ T6404] should_fail_ex+0x3eb/0x540 [ 113.005430][ T6404] should_failslab+0xa8/0x100 [ 113.005455][ T6404] __kmalloc_noprof+0xf9/0x710 [ 113.005482][ T6404] ? tomoyo_encode+0x2ad/0x570 [ 113.005509][ T6404] ? tomoyo_encode+0x2ad/0x570 [ 113.005541][ T6404] tomoyo_encode+0x2ad/0x570 [ 113.005574][ T6404] tomoyo_realpath_from_path+0x5fa/0x640 [ 113.005610][ T6404] ? tomoyo_path_number_perm+0x219/0x5f0 [ 113.005633][ T6404] tomoyo_path_number_perm+0x246/0x5f0 [ 113.005658][ T6404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.005678][ T6404] ? __lock_acquire+0x747/0x2de0 [ 113.005733][ T6404] ? __fget_files+0x2a/0x420 [ 113.005761][ T6404] ? __fget_files+0x2a/0x420 [ 113.005784][ T6404] ? __fget_files+0x2a/0x420 [ 113.005821][ T6404] security_file_ioctl+0xc3/0x2a0 [ 113.005844][ T6404] __se_sys_ioctl+0x47/0x170 [ 113.005866][ T6404] do_syscall_64+0x166/0x520 [ 113.005888][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.005905][ T6404] ? clear_bhb_loop+0x70/0xc0 [ 113.005928][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.005944][ T6404] RIP: 0033:0x7f921359e559 [ 113.005962][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.005978][ T6404] RSP: 002b:00007f9214498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.005998][ T6404] RAX: ffffffffffffffda RBX: 00007f9213825fa0 RCX: 00007f921359e559 [ 113.006018][ T6404] RDX: 0000200000000900 RSI: 00000000c0306201 RDI: 0000000000000003 [ 113.006030][ T6404] RBP: 00007f9214498090 R08: 0000000000000000 R09: 0000000000000000 [ 113.006041][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.006051][ T6404] R13: 00007f9213826038 R14: 00007f9213825fa0 R15: 00007ffca97497d8 [ 113.006081][ T6404] [ 113.006187][ T6404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.268156][ T6406] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 113.373691][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.435871][ T6410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.723499][ T5725] usb 3-1: USB disconnect, device number 8 [ 113.733269][ T5725] idmouse 3-1:1.0: disconnected [ 113.902685][ T27] pegasus 1-1:1.0: probe with driver pegasus failed with error -32 [ 113.940539][ T10] usb 1-1: USB disconnect, device number 17 [ 113.942566][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.948219][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.948415][ T6325] bridge_slave_0: entered allmulticast mode [ 113.994893][ T6325] bridge_slave_0: entered promiscuous mode [ 113.998577][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.998712][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.998843][ T6325] bridge_slave_1: entered allmulticast mode [ 114.032605][ T6325] bridge_slave_1: entered promiscuous mode [ 114.039954][ T5609] Bluetooth: hci0: command tx timeout [ 114.103614][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.107610][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.156099][ T6325] team0: Port device team_slave_0 added [ 114.166122][ T6325] team0: Port device team_slave_1 added [ 114.207025][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.207044][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.207070][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.209278][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.209294][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.209319][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.488455][ T6325] hsr_slave_0: entered promiscuous mode [ 114.494334][ T6325] hsr_slave_1: entered promiscuous mode [ 114.498048][ T6325] debugfs: 'hsr0' already exists in 'hsr' [ 114.498080][ T6325] Cannot create hsr debugfs directory [ 114.692023][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 114.800522][ T6444] capability: warning: `syz.3.174' uses deprecated v2 capabilities in a way that may be insecure [ 114.888376][ T6325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.916307][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.924730][ T6325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.954470][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.959926][ T6325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.992971][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.994274][ T6325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.015377][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.039831][ T6450] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.066901][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 115.200543][ T27] usb 1-1: device descriptor read/64, error -71 [ 115.284991][ T6459] dvmrp0: entered allmulticast mode [ 115.441834][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 115.489031][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.551333][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.571455][ T27] usb 1-1: device descriptor read/64, error -71 [ 115.579385][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.579530][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.582321][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.180'. [ 115.607976][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.608084][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.680012][ T27] usb usb1-port1: attempt power cycle [ 115.828157][ T6479] FAULT_INJECTION: forcing a failure. [ 115.828157][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 115.828191][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 115.828214][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.828225][ T6479] Call Trace: [ 115.828233][ T6479] [ 115.828242][ T6479] dump_stack_lvl+0xe8/0x150 [ 115.828273][ T6479] should_fail_ex+0x3eb/0x540 [ 115.828304][ T6479] should_failslab+0xa8/0x100 [ 115.828326][ T6479] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 115.828356][ T6479] ? __d_alloc+0x37/0x7f0 [ 115.828384][ T6479] ? __d_alloc+0x37/0x7f0 [ 115.828418][ T6479] __d_alloc+0x37/0x7f0 [ 115.828452][ T6479] d_alloc_pseudo+0x21/0xc0 [ 115.828472][ T6479] alloc_path_pseudo+0x107/0x220 [ 115.828501][ T6479] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 115.828527][ T6479] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.828559][ T6479] alloc_file_pseudo+0xa8/0x1e0 [ 115.828586][ T6479] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 115.828610][ T6479] ? _raw_spin_unlock+0x28/0x50 [ 115.828638][ T6479] sock_alloc_file+0xb8/0x2e0 [ 115.828666][ T6479] ? __sys_socket+0x12b/0x1b0 [ 115.828688][ T6479] __sys_socket+0x13f/0x1b0 [ 115.828713][ T6479] __x64_sys_socket+0x7a/0x90 [ 115.828733][ T6479] do_syscall_64+0x166/0x520 [ 115.828753][ T6479] ? trace_irq_disable+0x3b/0x140 [ 115.828774][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.828795][ T6479] ? clear_bhb_loop+0x70/0xc0 [ 115.828818][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.828837][ T6479] RIP: 0033:0x7fa49d79e559 [ 115.828857][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.828874][ T6479] RSP: 002b:00007fa49e64c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.828898][ T6479] RAX: ffffffffffffffda RBX: 00007fa49da25fa0 RCX: 00007fa49d79e559 [ 115.828912][ T6479] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 115.828925][ T6479] RBP: 00007fa49d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.828938][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.828951][ T6479] R13: 00007fa49da26038 R14: 00007fa49da25fa0 R15: 00007ffd3bc03768 [ 115.828985][ T6479] [ 115.838795][ T6479] ======================================================= [ 115.838795][ T6479] WARNING: The mand mount option has been deprecated and [ 115.838795][ T6479] and is ignored by this kernel. Remove the mand [ 115.838795][ T6479] option from the mount to silence this warning. [ 115.838795][ T6479] ======================================================= [ 116.054277][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 116.118877][ T27] usb 1-1: device descriptor read/8, error -71 [ 116.119907][ T5609] Bluetooth: hci0: command tx timeout [ 116.232894][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 116.311518][ T6488] mmap: syz.3.182 (6488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.350806][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 116.375320][ T27] usb 1-1: device descriptor read/8, error -71 [ 116.480746][ T27] usb usb1-port1: unable to enumerate USB device [ 116.674090][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.894603][ T6325] veth0_vlan: entered promiscuous mode [ 116.909247][ T6325] veth1_vlan: entered promiscuous mode [ 116.943099][ T6325] veth0_macvtap: entered promiscuous mode [ 116.946864][ T6325] veth1_macvtap: entered promiscuous mode [ 116.973261][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.988750][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.044074][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.044493][ T1124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.044568][ T1124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.044601][ T1124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.125537][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.125562][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.184281][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.184306][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.296338][ T6516] FAULT_INJECTION: forcing a failure. [ 117.296338][ T6516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.296371][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT(full) [ 117.296394][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.296406][ T6516] Call Trace: [ 117.296414][ T6516] [ 117.296423][ T6516] dump_stack_lvl+0xe8/0x150 [ 117.296456][ T6516] should_fail_ex+0x3eb/0x540 [ 117.296488][ T6516] _copy_from_iter+0x1d3/0x18b0 [ 117.296531][ T6516] ? __pfx__copy_from_iter+0x10/0x10 [ 117.296553][ T6516] ? trace_kmalloc+0x2a/0xf0 [ 117.296606][ T6516] ? __kmalloc_noprof+0x387/0x710 [ 117.296632][ T6516] ? __kmalloc_noprof+0x1a6/0x710 [ 117.296657][ T6516] ? kernfs_fop_write_iter+0x157/0x540 [ 117.296700][ T6516] kernfs_fop_write_iter+0x19a/0x540 [ 117.296733][ T6516] vfs_write+0x612/0xba0 [ 117.296774][ T6516] ? __pfx_vfs_write+0x10/0x10 [ 117.296807][ T6516] ? __fget_files+0x3a2/0x420 [ 117.296834][ T6516] ? __fget_files+0x2a/0x420 [ 117.296866][ T6516] ? fdget+0x1ac/0x250 [ 117.296902][ T6516] ksys_write+0x150/0x270 [ 117.296935][ T6516] ? __pfx_ksys_write+0x10/0x10 [ 117.296978][ T6516] do_syscall_64+0x166/0x520 [ 117.297001][ T6516] ? trace_irq_disable+0x3b/0x140 [ 117.297022][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.297042][ T6516] ? clear_bhb_loop+0x70/0xc0 [ 117.297067][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.297087][ T6516] RIP: 0033:0x7f799f39e559 [ 117.297106][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.297124][ T6516] RSP: 002b:00007f79a0317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.297147][ T6516] RAX: ffffffffffffffda RBX: 00007f799f625fa0 RCX: 00007f799f39e559 [ 117.297161][ T6516] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000003 [ 117.297174][ T6516] RBP: 00007f79a0317090 R08: 0000000000000000 R09: 0000000000000000 [ 117.297187][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.297199][ T6516] R13: 00007f799f626038 R14: 00007f799f625fa0 R15: 00007ffff3743a58 [ 117.297235][ T6516] [ 117.529979][ T33] audit: type=1326 audit(1792144361.027:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.2.185" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49d79e559 code=0x0 [ 117.585988][ T6522] loop5: detected capacity change from 0 to 7 [ 117.588592][ T6522] Dev loop5: unable to read RDB block 7 [ 117.588636][ T6522] loop5: unable to read partition table [ 117.588856][ T6522] loop5: partition table beyond EOD, truncated [ 117.589064][ T6522] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.819299][ T6528] FAULT_INJECTION: forcing a failure. [ 117.819299][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 117.819330][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(full) [ 117.819352][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.819364][ T6528] Call Trace: [ 117.819372][ T6528] [ 117.819381][ T6528] dump_stack_lvl+0xe8/0x150 [ 117.819413][ T6528] should_fail_ex+0x3eb/0x540 [ 117.819445][ T6528] should_failslab+0xa8/0x100 [ 117.819466][ T6528] ? alloc_empty_file+0x5b/0x1d0 [ 117.819490][ T6528] kmem_cache_alloc_noprof+0x9c/0x600 [ 117.819519][ T6528] ? alloc_empty_file+0x5b/0x1d0 [ 117.819550][ T6528] alloc_empty_file+0x5b/0x1d0 [ 117.819575][ T6528] path_openat+0x96/0x20f0 [ 117.819595][ T6528] ? unwind_get_return_address+0x4d/0x90 [ 117.819619][ T6528] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.819640][ T6528] ? arch_stack_walk+0xfb/0x150 [ 117.819675][ T6528] do_file_open+0x23e/0x4a0 [ 117.819693][ T6528] ? do_getname+0x2e/0x250 [ 117.819715][ T6528] ? kmem_cache_alloc_noprof+0x141/0x600 [ 117.819745][ T6528] ? __pfx_do_file_open+0x10/0x10 [ 117.819763][ T6528] ? kmem_cache_alloc_noprof+0x151/0x600 [ 117.819820][ T6528] ? do_open_execat+0xad/0x590 [ 117.819853][ T6528] do_open_execat+0x12b/0x590 [ 117.819884][ T6528] ? __pfx_do_open_execat+0x10/0x10 [ 117.819928][ T6528] alloc_bprm+0x24/0x640 [ 117.819951][ T6528] do_execveat_common+0x167/0xbd0 [ 117.819970][ T6528] ? strncpy_from_user+0x150/0x2c0 [ 117.819999][ T6528] ? do_getname+0x151/0x250 [ 117.820026][ T6528] __x64_sys_execveat+0xc7/0xf0 [ 117.820050][ T6528] do_syscall_64+0x166/0x520 [ 117.820072][ T6528] ? trace_irq_disable+0x3b/0x140 [ 117.820091][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.820111][ T6528] ? clear_bhb_loop+0x70/0xc0 [ 117.820135][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.820154][ T6528] RIP: 0033:0x7f9be239e559 [ 117.820174][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.820191][ T6528] RSP: 002b:00007f9be05f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 117.820223][ T6528] RAX: ffffffffffffffda RBX: 00007f9be2625fa0 RCX: 00007f9be239e559 [ 117.820238][ T6528] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000004 [ 117.820251][ T6528] RBP: 00007f9be05f6090 R08: 0000000000001000 R09: 0000000000000000 [ 117.820264][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.820276][ T6528] R13: 00007f9be2626038 R14: 00007f9be2625fa0 R15: 00007ffcee516ae8 [ 117.820310][ T6528] [ 118.200818][ T54] Bluetooth: hci0: command tx timeout [ 118.203786][ T5709] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 118.338080][ T6539] FAULT_INJECTION: forcing a failure. [ 118.338080][ T6539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.338104][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 118.338118][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.338125][ T6539] Call Trace: [ 118.338129][ T6539] [ 118.338135][ T6539] dump_stack_lvl+0xe8/0x150 [ 118.338159][ T6539] should_fail_ex+0x3eb/0x540 [ 118.338178][ T6539] strncpy_from_user+0x36/0x2c0 [ 118.338196][ T6539] do_getname+0x77/0x250 [ 118.338213][ T6539] path_removexattrat+0x1ad/0x760 [ 118.338229][ T6539] ? __pfx_path_removexattrat+0x10/0x10 [ 118.338242][ T6539] ? __mutex_unlock_slowpath+0x731/0x900 [ 118.338273][ T6539] ? __pfx_ksys_write+0x10/0x10 [ 118.338294][ T6539] __x64_sys_removexattr+0x62/0x70 [ 118.338307][ T6539] do_syscall_64+0x166/0x520 [ 118.338321][ T6539] ? trace_irq_disable+0x3b/0x140 [ 118.338333][ T6539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.338345][ T6539] ? clear_bhb_loop+0x70/0xc0 [ 118.338359][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.338370][ T6539] RIP: 0033:0x7fa49d79e559 [ 118.338391][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.338412][ T6539] RSP: 002b:00007fa49e64c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 118.338435][ T6539] RAX: ffffffffffffffda RBX: 00007fa49da25fa0 RCX: 00007fa49d79e559 [ 118.338450][ T6539] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000200000002c40 [ 118.338462][ T6539] RBP: 00007fa49e64c090 R08: 0000000000000000 R09: 0000000000000000 [ 118.338474][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.338486][ T6539] R13: 00007fa49da26038 R14: 00007fa49da25fa0 R15: 00007ffd3bc03768 [ 118.338516][ T6539] [ 118.370995][ T5709] usb 1-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 118.372086][ T5709] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.372112][ T5709] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.372134][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.372164][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.383358][ T5709] usb 1-1: config 0 descriptor?? [ 118.809568][ T5709] hid-multitouch 0003:0EEF:72C4.0002: item fetching failed at offset 22/24 [ 118.813505][ T5709] hid-multitouch 0003:0EEF:72C4.0002: probe with driver hid-multitouch failed with error -22 [ 119.016591][ T5709] usb 1-1: USB disconnect, device number 22 [ 119.085930][ T6558] FAULT_INJECTION: forcing a failure. [ 119.085930][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.085963][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 119.085984][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.085996][ T6558] Call Trace: [ 119.086004][ T6558] [ 119.086013][ T6558] dump_stack_lvl+0xe8/0x150 [ 119.086045][ T6558] should_fail_ex+0x3eb/0x540 [ 119.086080][ T6558] _copy_to_user+0x31/0xb0 [ 119.086110][ T6558] simple_read_from_buffer+0xe1/0x170 [ 119.086142][ T6558] proc_fail_nth_read+0x1bb/0x230 [ 119.086167][ T6558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.086193][ T6558] ? rw_verify_area+0x24a/0x4c0 [ 119.086223][ T6558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.086256][ T6558] vfs_read+0x213/0xa80 [ 119.086289][ T6558] ? __pfx___mutex_lock+0x10/0x10 [ 119.086316][ T6558] ? __pfx_vfs_read+0x10/0x10 [ 119.086345][ T6558] ? __fget_files+0x2a/0x420 [ 119.086370][ T6558] ? __fget_files+0x3a2/0x420 [ 119.086394][ T6558] ? __fget_files+0x2a/0x420 [ 119.086425][ T6558] ? fdget+0x1ac/0x250 [ 119.086459][ T6558] ksys_read+0x150/0x270 [ 119.086490][ T6558] ? __pfx_ksys_read+0x10/0x10 [ 119.086530][ T6558] do_syscall_64+0x166/0x520 [ 119.086552][ T6558] ? trace_irq_disable+0x3b/0x140 [ 119.086572][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.086590][ T6558] ? clear_bhb_loop+0x70/0xc0 [ 119.086612][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.086631][ T6558] RIP: 0033:0x7f921355ed8e [ 119.086650][ T6558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.086667][ T6558] RSP: 002b:00007f9214497fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.086690][ T6558] RAX: ffffffffffffffda RBX: 00007f92144986c0 RCX: 00007f921355ed8e [ 119.086704][ T6558] RDX: 000000000000000f RSI: 00007f92144980a0 RDI: 0000000000000004 [ 119.086716][ T6558] RBP: 00007f9214498090 R08: 0000000000000000 R09: 0000000000000000 [ 119.086728][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.086739][ T6558] R13: 00007f9213826038 R14: 00007f9213825fa0 R15: 00007ffca97497d8 [ 119.086774][ T6558] [ 119.634274][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 119.806190][ T6583] gadgetfs: bound to dummy_udc driver [ 119.931261][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.210'. [ 119.931286][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.210'. [ 120.039904][ T27] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 120.040175][ C1] gadgetfs: connected [ 120.041734][ T27] gadgetfs: disconnected [ 120.279793][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 120.679352][ T6622] 0x000000000003-0x000000010001 : "" [ 120.718817][ T6622] ftl_cs: FTL header corrupt! [ 120.760479][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.840936][ T5725] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.911374][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 120.912100][ T32] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.912149][ T32] usb 5-1: no configurations [ 120.912162][ T32] usb 5-1: can't read configurations, error -22 [ 120.978833][ T6630] Bluetooth: MGMT ver 1.23 [ 120.992069][ T5725] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 120.997090][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.997121][ T5725] usb 4-1: Product: syz [ 120.997139][ T5725] usb 4-1: Manufacturer: syz [ 120.997153][ T5725] usb 4-1: SerialNumber: syz [ 121.041479][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.189795][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 121.192165][ T32] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.192208][ T32] usb 5-1: no configurations [ 121.192577][ T32] usb 5-1: can't read configurations, error -22 [ 121.193065][ T32] usb usb5-port1: attempt power cycle [ 121.429924][ T5709] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 121.529760][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.550423][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 121.551185][ T32] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.551227][ T32] usb 5-1: no configurations [ 121.551249][ T32] usb 5-1: can't read configurations, error -22 [ 121.592726][ T5709] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 121.595062][ T5709] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.595080][ T5709] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.595090][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.595129][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 121.595154][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.596909][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.596931][ T5709] usb 1-1: Product: syz [ 121.596945][ T5709] usb 1-1: Manufacturer: syz [ 121.620360][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 121.620379][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 121.635149][ T5709] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 121.635169][ T5709] cdc_wdm 1-1:1.0: Unknown control protocol [ 121.719755][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.742168][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 121.742950][ T32] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.743226][ T32] usb 5-1: no configurations [ 121.743240][ T32] usb 5-1: can't read configurations, error -22 [ 121.743841][ T32] usb usb5-port1: unable to enumerate USB device [ 121.952890][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 121.952993][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 121.953216][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 121.953238][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 121.953510][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 121.953530][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 121.953781][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 121.953801][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 121.953897][ T5709] usb 1-1: USB disconnect, device number 24 [ 121.954014][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 121.954031][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 121.954046][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 121.993498][ T6637] FAULT_INJECTION: forcing a failure. [ 121.993498][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 121.993526][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 121.993557][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.993568][ T6637] Call Trace: [ 121.993576][ T6637] [ 121.993584][ T6637] dump_stack_lvl+0xe8/0x150 [ 121.993614][ T6637] should_fail_ex+0x3eb/0x540 [ 121.993645][ T6637] should_failslab+0xa8/0x100 [ 121.993667][ T6637] __kmalloc_cache_noprof+0x9e/0x600 [ 121.993691][ T6637] ? sget_fc+0x195c/0x1a60 [ 121.993715][ T6637] ? shmem_fill_super+0xd5/0x11b0 [ 121.993734][ T6637] ? shmem_fill_super+0xd5/0x11b0 [ 121.993759][ T6637] shmem_fill_super+0xd5/0x11b0 [ 121.993777][ T6637] ? __pfx_set_anon_super_fc+0x10/0x10 [ 121.993804][ T6637] ? __pfx_sget_fc+0x10/0x10 [ 121.993827][ T6637] ? __kmalloc_cache_noprof+0x31c/0x600 [ 121.993852][ T6637] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 121.993871][ T6637] ? __pfx_shmem_fill_super+0x10/0x10 [ 121.993899][ T6637] ? __pfx_shmem_fill_super+0x10/0x10 [ 121.993920][ T6637] get_tree_nodev+0xbb/0x150 [ 121.993948][ T6637] vfs_get_tree+0x92/0x2a0 [ 121.993968][ T6637] do_new_mount+0x325/0xb00 [ 121.993999][ T6637] ? __pfx_do_new_mount+0x10/0x10 [ 121.994025][ T6637] ? ns_capable+0x84/0xe0 [ 121.994047][ T6637] ? path_mount+0x647/0x1050 [ 121.994076][ T6637] ? user_path_at+0xd4/0x160 [ 121.994107][ T6637] __se_sys_mount+0x31d/0x420 [ 121.994140][ T6637] ? __pfx___se_sys_mount+0x10/0x10 [ 121.994173][ T6637] ? __x64_sys_mount+0x20/0xc0 [ 121.994201][ T6637] do_syscall_64+0x166/0x520 [ 121.994223][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.994243][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 121.994265][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.994283][ T6637] RIP: 0033:0x7f921359e559 [ 121.994302][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.994318][ T6637] RSP: 002b:00007f9214477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.994338][ T6637] RAX: ffffffffffffffda RBX: 00007f9213826090 RCX: 00007f921359e559 [ 121.994353][ T6637] RDX: 00002000000005c0 RSI: 0000200000000580 RDI: 0000000000000000 [ 121.994365][ T6637] RBP: 00007f92136358b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.994377][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.994388][ T6637] R13: 00007f9213826128 R14: 00007f9213826090 R15: 00007ffca97497d8 [ 121.994419][ T6637] [ 122.494441][ T6642] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 123.029179][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 123.029245][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 123.069461][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.098676][ T5725] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 123.127183][ T5725] usb 4-1: USB disconnect, device number 9 [ 123.223301][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 123.946123][ T6676] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 123.969760][ T32] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 124.120312][ T32] usb 1-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=0.00 [ 124.123522][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.123552][ T32] usb 1-1: Product: syz [ 124.123566][ T32] usb 1-1: Manufacturer: syz [ 124.123579][ T32] usb 1-1: SerialNumber: syz [ 124.163406][ T32] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 124.178200][ T32] scsi host1: usb-storage 1-1:1.0 [ 124.210354][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.361193][ T9] usb 5-1: New USB device found: idVendor=1608, idProduct=0305, bcdDevice=98.de [ 124.362233][ T9] usb 5-1: config 2 has an invalid interface number: 68 but max is 0 [ 124.362257][ T9] usb 5-1: config 2 has no interface number 0 [ 124.362297][ T9] usb 5-1: config 2 interface 68 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 124.362320][ T9] usb 5-1: config 2 interface 68 altsetting 13 bulk endpoint 0x83 has invalid maxpacket 8 [ 124.362341][ T9] usb 5-1: config 2 interface 68 has no altsetting 0 [ 124.364590][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.364614][ T9] usb 5-1: Product: syz [ 124.364627][ T9] usb 5-1: Manufacturer: syz [ 124.364637][ T9] usb 5-1: SerialNumber: syz [ 124.395531][ T6676] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.395679][ T6676] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.629077][ T32] ums_eneub6250 1-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 124.636988][ T32] usb 1-1: USB disconnect, device number 25 [ 124.658475][ T5613] udevd[5613]: setting mode of /dev/bus/usb/001/025 to 020664 failed: No such file or directory [ 124.658625][ T5613] udevd[5613]: setting owner of /dev/bus/usb/001/025 to uid=0, gid=0 failed: No such file or directory [ 124.698353][ T9] io_ti 5-1:2.68: required endpoints missing [ 124.711824][ T9] usb 5-1: USB disconnect, device number 6 [ 124.930001][ T5725] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.080750][ T5725] usb 3-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 125.085599][ T5725] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.085636][ T5725] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.085662][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.085698][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.090514][ T5725] usb 3-1: config 0 descriptor?? [ 125.276862][ T6701] FAULT_INJECTION: forcing a failure. [ 125.276862][ T6701] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.276898][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 125.276921][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.276933][ T6701] Call Trace: [ 125.276942][ T6701] [ 125.276950][ T6701] dump_stack_lvl+0xe8/0x150 [ 125.276994][ T6701] should_fail_ex+0x3eb/0x540 [ 125.277028][ T6701] get_futex_key+0x1ab/0x1410 [ 125.277066][ T6701] ? __pfx_get_futex_key+0x10/0x10 [ 125.277102][ T6701] futex_wake+0x119/0x5f0 [ 125.277140][ T6701] ? __pfx_futex_wake+0x10/0x10 [ 125.277169][ T6701] ? hci_sock_bind+0x295/0x10b0 [ 125.277195][ T6701] ? lockdep_hardirqs_on+0x7b/0x110 [ 125.277219][ T6701] ? hci_sock_bind+0x295/0x10b0 [ 125.277241][ T6701] ? hci_sock_bind+0x295/0x10b0 [ 125.277263][ T6701] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.277295][ T6701] do_futex+0x458/0x4e0 [ 125.277328][ T6701] ? __pfx_do_futex+0x10/0x10 [ 125.277355][ T6701] ? __sys_bind+0x36b/0x410 [ 125.277386][ T6701] __se_sys_futex+0x3a8/0x450 [ 125.277421][ T6701] ? __pfx___se_sys_futex+0x10/0x10 [ 125.277448][ T6701] ? rcu_is_watching+0x16/0xb0 [ 125.277480][ T6701] ? __x64_sys_futex+0x21/0xf0 [ 125.277508][ T6701] do_syscall_64+0x166/0x520 [ 125.277532][ T6701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.277552][ T6701] ? clear_bhb_loop+0x70/0xc0 [ 125.277577][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.277596][ T6701] RIP: 0033:0x7f9be239e559 [ 125.277615][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.277633][ T6701] RSP: 002b:00007f9be05d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.277656][ T6701] RAX: ffffffffffffffda RBX: 00007f9be2626098 RCX: 00007f9be239e559 [ 125.277670][ T6701] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9be262609c [ 125.277683][ T6701] RBP: 00007f9be2626090 R08: 3fffffffffffffff R09: 0000000000000000 [ 125.277697][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.277708][ T6701] R13: 00007f9be2626128 R14: 00007ffcee516a00 R15: 00007ffcee516ae8 [ 125.277741][ T6701] [ 125.352178][ T6703] syz.4.246 (6703) used greatest stack depth: 11928 bytes left [ 125.524250][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524288][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524313][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524338][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524362][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524387][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524411][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524436][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524461][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524500][ T5725] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 125.524564][ T5725] hid_mf 0003:0079:1801.0003: unbalanced collection at end of report description [ 125.527362][ T5725] hid_mf 0003:0079:1801.0003: HID parse failed. [ 125.529245][ T5725] hid_mf 0003:0079:1801.0003: probe with driver hid_mf failed with error -22 [ 125.715874][ T32] usb 3-1: USB disconnect, device number 9 [ 125.772548][ T6710] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 125.799785][ T5725] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.949787][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 125.951606][ T5725] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 125.952736][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.952790][ T5725] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.952816][ T5725] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.952837][ T5725] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 125.952870][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.952892][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.955098][ T5725] usb 4-1: config 0 descriptor?? [ 126.074821][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 126.371037][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.373161][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.436751][ T5725] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 126.600875][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.614982][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.714709][ T6731] nfs: Unknown parameter 'h# å]mountport' [ 127.247392][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 128.375186][ T1223] usb 4-1: USB disconnect, device number 10 [ 128.572237][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 128.572267][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 128.572292][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 128.572306][ T5609] Workqueue: hci3 hci_rx_work [ 128.572339][ T5609] Call Trace: [ 128.572347][ T5609] [ 128.572357][ T5609] dump_stack_lvl+0xe8/0x150 [ 128.572389][ T5609] sysfs_create_dir_ns+0x271/0x2a0 [ 128.572415][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.572442][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 128.572474][ T5609] kobject_add_internal+0x622/0xcd0 [ 128.572518][ T5609] kobject_add+0x163/0x240 [ 128.572554][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 128.572590][ T5609] ? get_device_parent+0x366/0x3a0 [ 128.572620][ T5609] device_add+0x3fa/0xb80 [ 128.572645][ T5609] hci_conn_add_sysfs+0xd5/0x210 [ 128.572677][ T5609] le_conn_complete_evt+0x1094/0x1780 [ 128.572709][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.572732][ T5609] ? __mutex_unlock_slowpath+0x731/0x900 [ 128.572762][ T5609] ? skb_pull_data+0xf0/0x200 [ 128.572796][ T5609] hci_le_conn_complete_evt+0x187/0x470 [ 128.572836][ T5609] hci_event_packet+0x67a/0xf10 [ 128.572872][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.572901][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 128.572933][ T5609] ? kcov_remote_start+0x523/0x7e0 [ 128.572958][ T5609] ? hci_send_to_monitor+0xdf/0x600 [ 128.573013][ T5609] hci_rx_work+0x2b4/0x1110 [ 128.573050][ T5609] ? process_scheduled_works+0x97a/0x1630 [ 128.573075][ T5609] process_scheduled_works+0xc3d/0x1630 [ 128.573136][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.573170][ T5609] ? assign_work+0x3cf/0x5d0 [ 128.573200][ T5609] worker_thread+0xa47/0xfb0 [ 128.573257][ T5609] kthread+0x38b/0x480 [ 128.573286][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 128.573309][ T5609] ? __pfx_kthread+0x10/0x10 [ 128.573341][ T5609] ret_from_fork+0x514/0xb70 [ 128.573374][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 128.573403][ T5609] ? __switch_to+0xc78/0x1410 [ 128.573432][ T5609] ? __pfx_kthread+0x10/0x10 [ 128.573463][ T5609] ret_from_fork_asm+0x1a/0x30 [ 128.573508][ T5609] [ 128.575330][ T5609] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.575374][ T5609] Bluetooth: hci3: failed to register connection device [ 129.431311][ T6791] Could not create tracefs 'set_event_pid' entry [ 129.445369][ T6791] Could not create tracefs 'set_event_notrace_pid' entry [ 129.547123][ T6791] Could not create tracefs 'events' directory [ 130.159755][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.310597][ T10] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 130.312131][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 130.312156][ T10] usb 4-1: config 0 has no interface number 0 [ 130.312197][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.335146][ T5709] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.342415][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.342444][ T10] usb 4-1: Product: syz [ 130.342458][ T10] usb 4-1: Manufacturer: syz [ 130.342472][ T10] usb 4-1: SerialNumber: syz [ 130.350920][ T6833] netlink: 'syz.2.277': attribute type 30 has an invalid length. [ 130.350943][ T6833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.277'. [ 130.407358][ T10] usb 4-1: config 0 descriptor?? [ 130.423619][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 130.550013][ T5708] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 130.571621][ T5709] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.573099][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.576920][ T5709] usb 5-1: config 0 descriptor?? [ 130.632868][ T27] usb 4-1: USB disconnect, device number 11 [ 130.648409][ T27] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 130.702290][ T5708] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 130.705183][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.705293][ T5708] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.705338][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.755380][ T5708] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 130.963329][ T5725] usb 1-1: USB disconnect, device number 26 [ 131.292903][ T6857] bond0: option slaves: interface -b does not exist! [ 131.778339][ T1150] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.799305][ T6874] FAULT_INJECTION: forcing a failure. [ 131.799305][ T6874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.799369][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.3.287 Not tainted syzkaller #0 PREEMPT(full) [ 131.799392][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.799403][ T6874] Call Trace: [ 131.799411][ T6874] [ 131.799421][ T6874] dump_stack_lvl+0xe8/0x150 [ 131.799453][ T6874] should_fail_ex+0x3eb/0x540 [ 131.799488][ T6874] prepare_alloc_pages+0x21e/0x5f0 [ 131.799522][ T6874] __alloc_frozen_pages_noprof+0x17c/0x410 [ 131.799550][ T6874] ? __lock_acquire+0x747/0x2de0 [ 131.799572][ T6874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.799607][ T6874] ? policy_nodemask+0x2cc/0x8e0 [ 131.799627][ T6874] ? __lock_acquire+0x747/0x2de0 [ 131.799648][ T6874] alloc_pages_mpol+0x21e/0x390 [ 131.799675][ T6874] folio_alloc_mpol_noprof+0x39/0x160 [ 131.799700][ T6874] vma_alloc_folio_noprof+0xe1/0x1e0 [ 131.799726][ T6874] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 131.799755][ T6874] ? vma_has_anon_rmap+0x95/0x270 [ 131.799779][ T6874] do_pte_missing+0x559/0x3570 [ 131.799818][ T6874] ? handle_mm_fault+0xee/0x3540 [ 131.799845][ T6874] handle_mm_fault+0x1a2a/0x3540 [ 131.799877][ T6874] ? handle_mm_fault+0xee/0x3540 [ 131.799916][ T6874] ? __pfx_handle_mm_fault+0x10/0x10 [ 131.799961][ T6874] ? lock_mm_and_find_vma+0xa7/0x340 [ 131.799998][ T6874] do_user_addr_fault+0x7f6/0x1480 [ 131.800045][ T6874] exc_page_fault+0x6a/0xc0 [ 131.800070][ T6874] asm_exc_page_fault+0x26/0x30 [ 131.800089][ T6874] RIP: 0010:emulator_cmpxchg_emulated+0x3ad/0x800 [ 131.800112][ T6874] Code: c0 0f 85 05 03 00 00 41 0f b6 06 48 89 e9 48 c1 e9 03 42 0f b6 0c 21 84 c9 0f 85 08 03 00 00 0f b6 4d 00 31 ed 48 8b 54 24 10 0f b0 0a 41 89 c6 0f 94 c0 40 88 c5 bf 02 00 00 00 89 ee e8 5a [ 131.800129][ T6874] RSP: 0018:ffffc900035ff830 EFLAGS: 00050246 [ 131.800148][ T6874] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000006 [ 131.800161][ T6874] RDX: 0000200000002006 RSI: ffffffff8ff10990 RDI: 0000000000000000 [ 131.800174][ T6874] RBP: 0000000000000000 R08: ffff88802f7d1f40 R09: 0000000000000004 [ 131.800187][ T6874] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 131.800199][ T6874] R13: 0000000000000006 R14: ffff88805aeb8190 R15: 1ffff1100b5d7032 [ 131.800246][ T6874] writeback+0x7e8/0xd70 [ 131.800279][ T6874] x86_emulate_insn+0x2425/0x4350 [ 131.800315][ T6874] ? do_syscall_64+0x166/0x520 [ 131.800340][ T6874] ? __pfx_x86_emulate_insn+0x10/0x10 [ 131.800376][ T6874] x86_emulate_instruction+0xf56/0x1e90 [ 131.800423][ T6874] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 131.800446][ T6874] ? complete_emulated_mmio+0x1f2/0x910 [ 131.800472][ T6874] ? __asan_memcpy+0x40/0x70 [ 131.800499][ T6874] ? complete_emulated_mmio+0x535/0x910 [ 131.800541][ T6874] ? __pfx_complete_emulated_mmio+0x10/0x10 [ 131.800565][ T6874] kvm_arch_vcpu_ioctl_run+0x114d/0x18b0 [ 131.800598][ T6874] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 131.800628][ T6874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.800654][ T6874] kvm_vcpu_ioctl+0xa61/0xfd0 [ 131.800690][ T6874] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.800744][ T6874] ? __fget_files+0x2a/0x420 [ 131.800775][ T6874] ? __fget_files+0x2a/0x420 [ 131.800803][ T6874] ? __fget_files+0x2a/0x420 [ 131.800834][ T6874] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.800854][ T6874] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.800883][ T6874] __se_sys_ioctl+0xfc/0x170 [ 131.800909][ T6874] do_syscall_64+0x166/0x520 [ 131.800931][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.800951][ T6874] ? clear_bhb_loop+0x70/0xc0 [ 131.800976][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.801003][ T6874] RIP: 0033:0x7f921359e559 [ 131.801021][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.801037][ T6874] RSP: 002b:00007f9214498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.801057][ T6874] RAX: ffffffffffffffda RBX: 00007f9213825fa0 RCX: 00007f921359e559 [ 131.801068][ T6874] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 131.801078][ T6874] RBP: 00007f9214498090 R08: 0000000000000000 R09: 0000000000000000 [ 131.801089][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.801098][ T6874] R13: 00007f9213826038 R14: 00007f9213825fa0 R15: 00007ffca97497d8 [ 131.801128][ T6874] [ 131.820209][ T6872] VFS: Can't find a romfs filesystem on dev romfs. [ 131.820209][ T6872] [ 131.824186][ T6872] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 131.824186][ T6872] [ 132.536056][ T6886] FAULT_INJECTION: forcing a failure. [ 132.536056][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 132.536088][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT(full) [ 132.536110][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.536122][ T6886] Call Trace: [ 132.536130][ T6886] [ 132.536137][ T6886] dump_stack_lvl+0xe8/0x150 [ 132.536168][ T6886] should_fail_ex+0x3eb/0x540 [ 132.536199][ T6886] should_failslab+0xa8/0x100 [ 132.536221][ T6886] __kmalloc_noprof+0xf9/0x710 [ 132.536247][ T6886] ? user_preparse+0x9e/0x160 [ 132.536272][ T6886] ? user_preparse+0x9e/0x160 [ 132.536303][ T6886] user_preparse+0x9e/0x160 [ 132.536334][ T6886] __key_create_or_update+0x34f/0xa70 [ 132.536368][ T6886] ? __pfx___key_create_or_update+0x10/0x10 [ 132.536429][ T6886] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 132.536465][ T6886] key_create_or_update+0x42/0x60 [ 132.536498][ T6886] __se_sys_add_key+0x349/0x420 [ 132.536522][ T6886] ? __pfx___se_sys_add_key+0x10/0x10 [ 132.536554][ T6886] ? __x64_sys_add_key+0x20/0xc0 [ 132.536576][ T6886] do_syscall_64+0x166/0x520 [ 132.536597][ T6886] ? trace_irq_disable+0x3b/0x140 [ 132.536619][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.536638][ T6886] ? clear_bhb_loop+0x70/0xc0 [ 132.536662][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.536681][ T6886] RIP: 0033:0x7f921359e559 [ 132.536700][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.536717][ T6886] RSP: 002b:00007f92143ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 132.536738][ T6886] RAX: ffffffffffffffda RBX: 00007f9213826090 RCX: 00007f921359e559 [ 132.536753][ T6886] RDX: 0000200000000980 RSI: 0000000000000000 RDI: 0000200000000940 [ 132.536766][ T6886] RBP: 00007f92136358b0 R08: fffffffffffffffb R09: 0000000000000000 [ 132.536779][ T6886] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 132.536793][ T6886] R13: 00007f9213826128 R14: 00007f9213826090 R15: 00007ffca97497d8 [ 132.536828][ T6886] [ 132.767479][ T6888] capability: warning: `syz.3.292' uses 32-bit capabilities (legacy support in use) [ 132.877857][ T6885] TCP: TCP_TX_DELAY enabled [ 133.041403][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.083648][ T5709] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.084853][ T5709] [drm:udl_init] *ERROR* Selecting channel failed [ 133.098701][ T5709] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 133.098725][ T5709] [drm] Initialized udl on minor 1 [ 133.102499][ T5709] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.105496][ T990] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.107402][ T5709] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 133.117028][ T5709] usb 5-1: USB disconnect, device number 7 [ 133.118978][ T990] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.119385][ T990] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 133.166388][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.166479][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189979][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 133.190805][ T10] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 133.191850][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 133.191873][ T10] usb 4-1: config 0 has no interface number 0 [ 133.191928][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 133.198060][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.198088][ T10] usb 4-1: Product: syz [ 133.198102][ T10] usb 4-1: Manufacturer: syz [ 133.198116][ T10] usb 4-1: SerialNumber: syz [ 133.217222][ T10] usb 4-1: config 0 descriptor?? [ 133.276248][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.277159][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.589915][ T5709] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.739750][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 133.740496][ T5709] usb 5-1: New USB device found: idVendor=1e7d, idProduct=3264, bcdDevice=0.00 [ 133.741696][ T5709] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 133.741726][ T5709] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 133.741771][ T5709] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.741786][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.741806][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.744159][ T5709] usb 5-1: config 0 descriptor?? [ 133.745149][ T6894] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.800864][ T5609] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.966350][ T5709] usbhid 5-1:0.0: can't add hid device: -71 [ 133.966500][ T5709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.971574][ T5709] usb 5-1: USB disconnect, device number 8 [ 134.171127][ T6891] NFSD: Unable to initialize client recovery tracking! (-110) [ 134.171150][ T6891] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 134.171163][ T6891] NFSD: starting 90-second grace period (net f00005f1) ** replaying previous printk message ** [ 134.171163][ T6891] NFSD: starting 90-second grace period (net f00005f1) [ 134.200094][ T6909] ================================================================== [ 134.200110][ T6909] BUG: KASAN: slab-out-of-bounds in nfsd+0x116/0xbb0 [ 134.200134][ T6909] Read of size 8 at addr ffff88806724eed8 by task nfsd/6909 [ 134.200148][ T6909] [ 134.200158][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: nfsd Not tainted syzkaller #0 PREEMPT(full) [ 134.200177][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.200187][ T6909] Call Trace: [ 134.200194][ T6909] [ 134.200201][ T6909] dump_stack_lvl+0xe8/0x150 [ 134.200224][ T6909] print_address_description+0x55/0x1e0 [ 134.200248][ T6909] ? nfsd+0x116/0xbb0 [ 134.200262][ T6909] print_report+0x58/0x70 [ 134.200283][ T6909] kasan_report+0x117/0x150 [ 134.200302][ T6909] ? nfsd+0x116/0xbb0 [ 134.200320][ T6909] nfsd+0x116/0xbb0 [ 134.200340][ T6909] ? __pfx_nfsd+0x10/0x10 [ 134.200354][ T6909] ? __kthread_parkme+0x71/0x1f0 [ 134.200380][ T6909] ? __kthread_parkme+0x199/0x1f0 [ 134.200403][ T6909] kthread+0x38b/0x480 [ 134.200425][ T6909] ? __pfx_nfsd+0x10/0x10 [ 134.200439][ T6909] ? __pfx_kthread+0x10/0x10 [ 134.200462][ T6909] ret_from_fork+0x514/0xb70 [ 134.200488][ T6909] ? __pfx_ret_from_fork+0x10/0x10 [ 134.200511][ T6909] ? __switch_to+0xc78/0x1410 [ 134.200540][ T6909] ? __pfx_kthread+0x10/0x10 [ 134.200563][ T6909] ret_from_fork_asm+0x1a/0x30 [ 134.200591][ T6909] [ 134.200598][ T6909] [ 134.200602][ T6909] Allocated by task 6891: [ 134.200610][ T6909] kasan_save_track+0x3e/0x80 [ 134.200632][ T6909] __kasan_kmalloc+0x93/0xb0 [ 134.200646][ T6909] __kmalloc_cache_noprof+0x31c/0x600 [ 134.200668][ T6909] __svc_create+0x63/0x9f0 [ 134.200687][ T6909] svc_create_pooled+0x8f/0x470 [ 134.200706][ T6909] nfsd_create_serv+0x56c/0x8b0 [ 134.200720][ T6909] write_ports+0x66b/0xdb0 [ 134.200736][ T6909] nfsctl_transaction_write+0x10f/0x160 [ 134.200754][ T6909] vfs_write+0x296/0xba0 [ 134.200776][ T6909] ksys_write+0x150/0x270 [ 134.200797][ T6909] do_syscall_64+0x166/0x520 [ 134.200815][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.200830][ T6909] [ 134.200834][ T6909] The buggy address belongs to the object at ffff88806724ec00 [ 134.200834][ T6909] which belongs to the cache kmalloc-512 of size 512 [ 134.200849][ T6909] The buggy address is located 384 bytes to the right of [ 134.200849][ T6909] allocated 344-byte region [ffff88806724ec00, ffff88806724ed58) [ 134.200866][ T6909] [ 134.200870][ T6909] The buggy address belongs to the physical page: [ 134.200879][ T6909] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6724c [ 134.200895][ T6909] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.200908][ T6909] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 134.200924][ T6909] page_type: f5(slab) [ 134.200940][ T6909] raw: 00fff00000000040 ffff88813ff26c80 dead000000000100 dead000000000122 [ 134.200954][ T6909] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 134.200969][ T6909] head: 00fff00000000040 ffff88813ff26c80 dead000000000100 dead000000000122 [ 134.200983][ T6909] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 134.200998][ T6909] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 134.201012][ T6909] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 134.201020][ T6909] page dumped because: kasan: bad access detected [ 134.201028][ T6909] page_owner tracks the page as allocated [ 134.201034][ T6909] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1150, tgid 1150 (kworker/u8:8), ts 85369417412 [ 134.201062][ T6909] post_alloc_hook+0x1f9/0x250 [ 134.201082][ T6909] get_page_from_freelist+0x220f/0x2280 [ 134.201104][ T6909] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 134.201126][ T6909] allocate_slab+0x7d/0x5e0 [ 134.201142][ T6909] refill_objects+0x2d5/0x350 [ 134.201158][ T6909] __pcs_replace_empty_main+0x2c8/0x6c0 [ 134.201173][ T6909] __kmalloc_cache_noprof+0x396/0x600 [ 134.201193][ T6909] __ipv6_dev_mc_inc+0x447/0xaf0 [ 134.201212][ T6909] addrconf_dad_work+0x3fc/0x15c0 [ 134.201231][ T6909] process_scheduled_works+0xc3d/0x1630 [ 134.201248][ T6909] worker_thread+0xa47/0xfb0 [ 134.201265][ T6909] kthread+0x38b/0x480 [ 134.201285][ T6909] ret_from_fork+0x514/0xb70 [ 134.201306][ T6909] ret_from_fork_asm+0x1a/0x30 [ 134.201325][ T6909] page last free pid 5595 tgid 5595 ts 76083036697 stack trace: [ 134.201337][ T6909] free_unref_folios+0xdc6/0x14e0 [ 134.201356][ T6909] folios_put_refs+0x9e9/0xb30 [ 134.201372][ T6909] free_pages_and_swap_cache+0x2ba/0x490 [ 134.201391][ T6909] tlb_flush_mmu+0x6d3/0xa30 [ 134.201411][ T6909] tlb_finish_mmu+0xf4/0x220 [ 134.201430][ T6909] unmap_region+0x2a5/0x330 [ 134.201451][ T6909] vms_complete_munmap_vmas+0x427/0xbe0 [ 134.201465][ T6909] do_vmi_align_munmap+0x3b7/0x4b0 [ 134.201487][ T6909] do_vmi_munmap+0x252/0x2d0 [ 134.201500][ T6909] __vm_munmap+0x241/0x3e0 [ 134.201515][ T6909] __x64_sys_munmap+0x60/0x70 [ 134.201531][ T6909] do_syscall_64+0x166/0x520 [ 134.201555][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.201570][ T6909] [ 134.201575][ T6909] Memory state around the buggy address: [ 134.201583][ T6909] ffff88806724ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.201594][ T6909] ffff88806724ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.201605][ T6909] >ffff88806724ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.201613][ T6909] ^ [ 134.201623][ T6909] ffff88806724ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.201634][ T6909] ffff88806724ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.201642][ T6909] ================================================================== [ 134.202873][ T6909] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.777857][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: nfsd Not tainted syzkaller #0 PREEMPT(full) [ 134.786629][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.796787][ T6909] Call Trace: [ 134.800073][ T6909] [ 134.803021][ T6909] vpanic+0x26f/0x710 [ 134.807029][ T6909] panic+0xc5/0xd0 [ 134.810760][ T6909] ? __pfx_panic+0x10/0x10 [ 134.815196][ T6909] ? preempt_schedule_thunk+0x16/0x40 [ 134.820593][ T6909] ? nfsd+0x116/0xbb0 [ 134.824588][ T6909] ? preempt_schedule_thunk+0x16/0x40 [ 134.829962][ T6909] ? nfsd+0x116/0xbb0 [ 134.833941][ T6909] check_panic_on_warn+0x89/0xb0 [ 134.838883][ T6909] ? nfsd+0x116/0xbb0 [ 134.842861][ T6909] end_report+0x73/0x170 [ 134.847106][ T6909] ? nfsd+0x116/0xbb0 [ 134.851096][ T6909] kasan_report+0x128/0x150 [ 134.855631][ T6909] ? nfsd+0x116/0xbb0 [ 134.859652][ T6909] nfsd+0x116/0xbb0 [ 134.863491][ T6909] ? __pfx_nfsd+0x10/0x10 [ 134.867830][ T6909] ? __kthread_parkme+0x71/0x1f0 [ 134.872782][ T6909] ? __kthread_parkme+0x199/0x1f0 [ 134.877813][ T6909] kthread+0x38b/0x480 [ 134.881893][ T6909] ? __pfx_nfsd+0x10/0x10 [ 134.886220][ T6909] ? __pfx_kthread+0x10/0x10 [ 134.890814][ T6909] ret_from_fork+0x514/0xb70 [ 134.895416][ T6909] ? __pfx_ret_from_fork+0x10/0x10 [ 134.900531][ T6909] ? __switch_to+0xc78/0x1410 [ 134.905218][ T6909] ? __pfx_kthread+0x10/0x10 [ 134.909832][ T6909] ret_from_fork_asm+0x1a/0x30 [ 134.914625][ T6909] [ 134.917982][ T6909] Kernel Offset: disabled [ 134.922303][ T6909] Rebooting in 86400 seconds..