last executing test programs: 1m18.938277509s ago: executing program 0 (id=18): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x1, @mcast2, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000003b00000000000000000001"], 0x76) 1m18.882410201s ago: executing program 0 (id=21): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 1m18.826416514s ago: executing program 0 (id=23): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lseek(r1, 0x11, 0x4) 1m18.784586276s ago: executing program 0 (id=24): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x120) (rerun: 64) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") (async) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="04000000000000000000000060010000380100"/42) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) (async) r1 = socket$netlink(0x10, 0x3, 0xf) shutdown(r1, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)="e4", 0x1}], 0x2, 0x3, 0x0) getsockname(r1, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) (async) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0x7, 0x2, 0x0, 0x1, 0xa, 0x0, [{0x6, 0x8, 0x7, '\x00', 0x1208}, {0x0, 0x40, 0x6, '\x00', 0x404}, {0x1, 0x77ab, 0x5, '\x00', 0x800}, {0xa9cc, 0x7, 0x1, '\x00', 0x2882}, {0x8, 0x2, 0x10, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x81}, {0x800, 0x2, 0x2, '\x00', 0x1}, {0x4, 0x6fc, 0x0, '\x00', 0x80}, {0x4, 0x9, 0x8, '\x00', 0x1000}, {0xd, 0x0, 0x2, '\x00', 0x600}]}) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) (rerun: 64) 1m18.760860857s ago: executing program 0 (id=25): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x24, 0x4}, {0x8000000000000001, 0x6}, {0x2494}, {0x1000, 0x9}, {0x5ee5, 0xff}, {0xf, 0x2}, {0x1, 0x3}, {0x40, 0xf2}, {0x96ef, 0x5}, {0xb9, 0x7}, {0x4, 0x63c2}, {0x5, 0x5}, {0x21084409, 0x5}, {0x4, 0x6}, {0x3ff, 0x5}, {0x9, 0x2}, {0x23c2, 0x9}, {0xffffffff, 0x7f}, {0x7fff, 0x3}, {0x73eb, 0x5}, {0x8, 0x7c}, {0x3, 0xfffffffffffff000}, {0x8, 0xbc}, {0x3, 0x5}, {0x8000, 0x7fffffff}, {0x10000, 0x4}, {0x2000000000, 0x2}, {0x41f, 0x4}, {0x7, 0x400}, {0xffffffff, 0x80000001}, {0x2, 0x4}, {0x3ff, 0x9}, {0xe000000000000000, 0x101}, {0x2, 0x2}, {0x81}, {0x3, 0x5}, {0x6, 0x5}, {0x689, 0xe0e}, {0x1462ca30, 0x8000000000000001}, {0xfffffffffffffffd, 0xfb3}, {0x8000, 0x80000001}, {0x9, 0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0xb972, 0x5d9f58b1}, {0x401, 0x445f}, {0x31f4, 0x4}, {0x4, 0x8000000000000001}, {0x4, 0xc}, {0x5, 0x4}, {0x3, 0x7}, {0x10, 0x7}, {0x100000000, 0x1}, {0xbc86a48, 0x1}, {0x40, 0xf}, {0x7fa, 0x9}, {0x2, 0xe2c1}, {0x151e, 0xffffffff}, {0xa84}, {0x5, 0x9}, {0x6d9b, 0x618}, {0x3, 0x8}, {0x1, 0x1}, {0x9, 0x2}, {0x40, 0x1}, {0xcd08, 0x9}, {0x1, 0x6}, {0x401, 0x80000001}, {0x3, 0x8000000000000000}, {0x7846, 0x1}, {0xb5b, 0x3}, {0x8000, 0x10}, {0x0, 0x5}, {0x5, 0x100000001}, {0x6, 0xa78}, {0xe, 0x100000001}, {0xffffffffffff8000, 0x70}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0xb96, 0xc}, {0x4dd9, 0xd}, {0xffffffff, 0x7}, {0x5, 0x10}, {0x100000001, 0x4}, {0x2, 0x3}, {}, {0x2, 0x4}, {0x9}, {0x4, 0x2260}, {0x4e, 0x64}, {0x25ad, 0x1}, {0x0, 0x7ff}, {0xfff, 0x1b0}, {0xdd4, 0x10}, {0x3, 0x1ff}, {0x7fffffffffffffff, 0x8}, {0xff, 0x3a83}, {0x6, 0x2}, {0x9, 0x7}, {0x3, 0x401}, {0x8}, {0x5, 0xfd3}, {0x5, 0x8}, {0x0, 0x7fffffffffffffff}, {0x7, 0x4}, {0x7, 0xffffffffffff7fff}, {0x5, 0x7f}, {0x5, 0x1800000}, {0x1000000000, 0x3d}, {0x0, 0x200}, {0x5, 0x9}, {0x1, 0x1bbe}, {0x4, 0xc7d}, {0xfffffffffffffff8, 0x1d23}, {0x100, 0x7fff}, {0x7, 0x9}, {0x6}, {0x7, 0x6}, {0x4, 0x1ff}, {0x401, 0x5}, {0x6, 0x8}, {0xc8, 0xb9c}, {0x4, 0x4}, {0xb23, 0x4}, {0x10000}, {0xfffffffffffffff7, 0x6}, {0x3, 0xb}, {0x7, 0x800}, {0x6, 0x3}, {0x5, 0x9}, {0x9, 0x6}, {0xffffffffffff8001, 0x4}, {0x2, 0xa70}, {0x0, 0x3}, {0x101, 0x8000000000000000}, {0xc, 0x47d}, {0x0, 0x3}, {0x7, 0x176}, {0x6, 0x5}, {0xfffffffffffffff7, 0xbb}, {0x101, 0x200}, {0xc, 0xb2d3}, {0xfffffffffffffff8, 0xa}, {0x9, 0xffffffff00000001}, {0xfffffffffffff76a, 0x1}, {0xc3e, 0xffffffffffffffff}, {0x9a, 0x80000001}, {0xfff, 0xb2}, {0x9, 0x6}, {0x1000, 0x4}, {0x8, 0x1}, {0x6, 0x4}, {0x404, 0x7}, {0x3df, 0x696}, {0x2, 0x3}, {0x3, 0xa}, {0xfffffffffffffff9, 0x1}, {0xfffffffffffffffd, 0xc32}, {0x1, 0x8000}, {0x8, 0x8006}, {}, {0x7, 0x5}, {0xffffffffffff68b1, 0x3}, {0xc9b, 0xaad3}, {0x7fffffff, 0x9}, {0x9}, {0x2, 0x8001}, {0x8000}, {}, {0x421, 0xfffffffffffffffb}, {0x6, 0xb}, {0x3, 0xfffffffffffffffb}, {0x8, 0x5}, {0xa12, 0x9}, {0x400, 0x4}, {0x0, 0x1}, {0x1, 0x20000000}, {0x2, 0xaf}, {0x9}, {0x7, 0x13b0}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0xe, 0xff}, {0x6, 0x6}, {0x800, 0x10}, {0x15da4000000, 0x4}, {0x2dfb, 0xff}, {0x2, 0x8000000000000001}, {0xa, 0x9}, {0x2, 0x1ff}, {0x8, 0x80}, {0x4, 0x5}, {0x1, 0x5}, {0xffff, 0x9}, {0xffff, 0x3}, {0x1, 0x55c}, {0xb507, 0x7}, {0x66bb, 0xffffffff80000001}, {0x2, 0xffffffffffffffff}, {0x9, 0x7}, {0xb8b, 0x7}, {0xbbe5, 0x2}, {0x0, 0x2}, {0x1, 0xd}, {0x9, 0x7}, {0x6, 0x6f}, {0xf, 0xff}, {0x0, 0x80000000}, {0x3, 0x7f}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x3, 0x654}, {0x6, 0x80000001}, {0x4, 0xfffffffffffffff8}, {0x400}, {0x3, 0x2}, {0xd, 0x8}, {0x8, 0x7}, {0x1e2d, 0x101}, {0x81, 0x3}, {0x8, 0xbd0c}, {0x8, 0xc2a}, {0x7313, 0xfffffffffffffffe}, {0x1, 0x2}, {0x9cd, 0x7fffffffffffffff}, {0x2, 0xda6}, {0x8001, 0x80000001}, {0x5, 0x9}, {0x3, 0x7}, {0x8, 0x7}, {0xea81, 0x3}, {0x6, 0x3}, {0x40, 0x9}, {0x9, 0xf69}, {0x1, 0x7f}, {0x6a9, 0x1}, {0x8, 0x2}, {0xffff, 0x290ca271}, {0x40, 0x5}, {0x8000000000000000, 0x10000}, {0x10001, 0xd}, {0x4bf2f6ad, 0x55}, {0xfff, 0x1aed}, {0x5, 0xfffffffffffffffd}, {0x5, 0x80db}, {0xfa1, 0x7}, {0x8, 0x1}, {0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m18.666109821s ago: executing program 0 (id=27): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) mlock(&(0x7f000033c000/0x3000)=nil, 0x3000) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000140)}, 0x20000004) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x41, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa00000000000000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) 1m18.605359064s ago: executing program 32 (id=27): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) mlock(&(0x7f000033c000/0x3000)=nil, 0x3000) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000140)}, 0x20000004) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x41, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa00000000000000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) 6.698500336s ago: executing program 3 (id=607): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0}, &(0x7f0000000b40)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="02c814b3903a30c0161223b5af1d68f5eaef20a22fffcf7b1fcf8235b743e652b9cbc8f1bc2cce85f0c896c860f3eef2a306cd5125ed2042c06b12de4bdb5f2cafddd1e67f6ab7a5665817f9178aca50c5c84ec32dee39f670f33b1309fa3fd9ba14167b995d66a0ec1460690e3a000c11828963e29bd1d18d136c4524db9b6a4af81e85bec4d1fb13080172a7db581b08c6edda7efc8c990b9818a0b8438a08ce92927ff6d43c306547edda0458c089eb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="201005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x202, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x8, 0x0, [{0x1, 0x10001, 0x8, 0x2, 0x3}, {0x40000000, 0x400, 0x8, 0x5, 0x10}, {0x40000000, 0x0, 0x7, 0xf, 0x7fffffff}, {0xc0000000, 0x9, 0x3a10, 0x6, 0x564}, {0xc0000000, 0xfffff800, 0x8cbb, 0x1}, {0x1, 0xf, 0x9, 0x3, 0xc81}, {0x80000001, 0x40, 0x5, 0x4, 0x7ea1}, {0x1, 0x10, 0x6, 0x8, 0x7fffffff}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.818260941s ago: executing program 1 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x2000, 0x1, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x60000, 0xc000, 0x3, 0x5d, 0x5, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe, 0x1}, {0x26000, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x2, 0x8, 0x2, 0x5, 0x0, 0x11, 0x82, 0xff}, {0xd000, 0xd000, 0xa, 0x7, 0xf, 0x8, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xdddd0000, 0x30}, {0x7000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0x20000b, 0x0, 0xb000, [0xd, 0xd, 0x5e, 0x102]}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a001410ffffffffffffffffffffffff86dd6900000000083c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x42) 3.744285625s ago: executing program 1 (id=633): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r2, 0x0, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x00\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff(\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x00\x10\x00\x00N&\xf8#\x80z8Z\xd2}\xf5\xe4\x15\xb3r\x11g\xe7)\xaa\x91\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\r\xc2\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r5, &(0x7f0000000700)="b068", 0x2) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xa, 0x1}}, 0x30) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001b2"], 0x40}, 0xee80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc3be07c", @ANYRES16, @ANYBLOB="010000000000000000000c0000000c00018088000150a06df69fb1e0d621853d3a25193a5eee11e8a8e0e7e1721cbd5d71a71f6f7bf873886810330dd1851edb355eb6bf4edbfd1634ded8507b5a9143003c5d1842997f3d0340a8d2890d7e4d27d23961427ac97e2ac82bae2e00f17d7b4d6febc7d88080c92fe4bb66c9f9a61bff253c40d275ddba6f2a6c40cc540e85a3cb5bd8bf554896f7d35af2fa79e0e28823970cc43b1e1b5ce1d18a4c160bd7456655"], 0x38}, 0x1, 0x0, 0x0, 0x60008850}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000005500010200040000feffffff07"], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x400c080) 3.668244328s ago: executing program 1 (id=634): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000006ffc)=0x4000000000000200, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x800b}, {0x8, 0x11, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048081) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2031500}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000884) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000b40)={0xd0, r5, 0x921, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8c, 0x111, 0x0, 0x1, {0x88, 0x5, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40400c0}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x4008014) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="128ef2cf7a0000406a05b40000000000000109022400010000d00009040000050300000009210000000122180009058103ff033b7fff"], 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x110b}) keyctl$invalidate(0x15, r8) keyctl$KEYCTL_MOVE(0x1e, r8, 0x0, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)) pipe2(&(0x7f0000000100), 0x0) 3.667912618s ago: executing program 3 (id=635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x1, @mcast2, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff0200002c0000000000000000000001"], 0x76) 3.550437654s ago: executing program 3 (id=636): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080) r2 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/64, 0x40) (async) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/64, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f07000009040200000102200009040201010102"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x8, 0x7, 0x100000000}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) 2.980037831s ago: executing program 4 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x2000, 0x1, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x60000, 0xc000, 0x3, 0x5d, 0x5, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe, 0x1}, {0x26000, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x2, 0x8, 0x2, 0x5, 0x0, 0x11, 0x82, 0xff}, {0xd000, 0xd000, 0xa, 0x7, 0xf, 0x8, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xdddd0000, 0x30}, {0x7000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0x20000b, 0x0, 0xb000, [0xd, 0xd, 0x5e, 0x102]}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a003010ffffffffffffffffffffffff86dd6900000000083c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x42) 2.883026105s ago: executing program 4 (id=645): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x1, @mcast2, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000330000000000000000000001"], 0x76) 2.576332609s ago: executing program 4 (id=646): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605069e0d000000000000000003000300d9000000ca020000380000005e02000004040000000020000301"], 0x98) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 2.510356933s ago: executing program 4 (id=647): syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x80000008, 0x0, 0x5, 0x10001, 0x80104000, 0x2, 0x4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1.158468796s ago: executing program 4 (id=650): r0 = syz_ublk_setup_io_uring(0x7b36, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0x1e4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) mprotect(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x14df, 0x10, 0x3, 0xaf}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x8, 0xfffffffe, 0x30d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x1, 0x35e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x0, 0x38e, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000100)={0xdc, 0x1, 0x5d51, 0x2, 0xffffffff, 0x9}) socket$nl_route(0x10, 0x3, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') lseek(r6, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, r6, 0x180000000) 756.574855ms ago: executing program 2 (id=655): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) (async) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) 650.54841ms ago: executing program 2 (id=656): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 636.87506ms ago: executing program 1 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000001400)=""/79, 0x4f}, {&(0x7f00000003c0)=""/4109, 0x100d}], 0x4}, 0x9a}], 0x1, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010828bd7000fedbdf250c0000002000058014000280080001001400000005000300ea0a000008000100657468"], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x2400c000) 633.168281ms ago: executing program 2 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup2(r1, r1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x4, 0x0, [{0x9ee, 0x0, 0xfa}, {0x81c, 0x0, 0x1}, {0x64f, 0x0, 0x5}, {0x390, 0x0, 0x4}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0x4a, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xf9, 0x38}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000010000000, 0x4, 0x1c00000, 0x8, 0x0, 0xffffffffffffffd8, 0x7ff, 0x8000], 0x1000, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 530.452755ms ago: executing program 3 (id=659): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) timerfd_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r1, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x3ffffe, 0x2, 0x1000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b00000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x20000010) 479.985397ms ago: executing program 3 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0xca) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1\n', 0x2) close(r4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1\n', 0x2) (async) close(r5) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='1\n', 0x2) (async) close(r6) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) close(r7) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) close(r8) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000500)='dummy_udc.0\n', 0xc) 476.133698ms ago: executing program 1 (id=661): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./tracing\x00', 0x1f7) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) 406.270551ms ago: executing program 1 (id=662): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) (async) r2 = fcntl$dupfd(r0, 0x0, r0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000001c0000000c00000000000000000000000c0016000600", @ANYRESDEC=r3], 0x2c}], 0x1}, 0x0) r4 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c09, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x91', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0xffffffff) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x202, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f0000000100)=0xf160, 0x4, 0x0) (async) io_setup(0x3, &(0x7f0000002500)=0x0) io_submit(r7, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r5, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r5, 0x0, 0x0, 0x1}]) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000001c0)) 369.601583ms ago: executing program 2 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x3, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac14142c00000000000000000000000000000003000000000a00000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 291.762917ms ago: executing program 3 (id=664): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f6713944587ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b507008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19fa870cd230709b5e33cd32fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a057121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe96101000000000000008bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6494fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x3d, 0x0, {0x100000000006, 0x4, 0x5, 0x410, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x1, 0x4000, 0xf, 0x0, 0x0, 0x10, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b396", 0x564}], 0x1}, 0xff00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r5, 0xb1bf5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) fadvise64(r5, 0x2, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x400, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0xffffffff, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf49f, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 178.303702ms ago: executing program 2 (id=665): keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x2000, 0xd000, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x60000, 0xc000, 0x3, 0x5d, 0x5, 0x4, 0x9, 0x2, 0x6, 0x7, 0xe, 0x1}, {0x26000, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x2, 0x8, 0x2, 0x5, 0x0, 0x11, 0x82, 0xff}, {0xd000, 0xd000, 0xa, 0x7, 0xf, 0x5, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xdddd0000, 0x30}, {0x7000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0x20000b, 0x0, 0xb000, [0xd, 0xd, 0x5e, 0x102]}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x10}}], 0x10, 0x4000080}, 0x10004040) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd6900000000083c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x42) 153.152903ms ago: executing program 4 (id=666): lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x48004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x144}, 0xc00c1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000000)=[0x1, 0x2ff]) 0s ago: executing program 2 (id=667): recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/27}, {&(0x7f00000003c0)=""/175}, {&(0x7f00000002c0)=""/103}, {&(0x7f0000000340)=""/6}, {&(0x7f0000000480)=""/199}, {&(0x7f0000000580)=""/50}, {&(0x7f00000005c0)=""/73}], 0x5}, 0x3}], 0x1, 0x10000, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) unshare(0x64000600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x4, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x4) write(r3, &(0x7f0000000880)='r:s/p ./file0:0\f', 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{r0, 0x0, 0x1f9d01, 0x0, 0x2, 0x0, 0x0}, 0x1, &(0x7f0000000ec0)=[{0x1, 0x4, &(0x7f0000000e00)='{\x00', &(0x7f0000000f80)="1b2a006453a4883cae500dc7a27346b8f3475b2f03081ac6a24ce3f7c6fad4d29d4ad088f3ba95c0c1cd172acd0431c8f2b3190b61c6306e57f999e3b53362020000007ff5de9d82218b89c12ac66dd56cd39ee69200679019db664d8ed80100000000000011000000000000000000000000000032ab3000"/132, 0x84, 0x12}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004020000180012000a00010064"], 0x4c}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1c, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) setuid(0xee01) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/devices\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/vdpa/devices\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000200)=""/1024, 0x400) getdents64(r7, &(0x7f0000000600)=""/1024, 0x400) getdents64(r8, &(0x7f0000000a00)=""/1024, 0x400) kernel console output (not intermixed with test programs): ers+0x1f7/0x430 [ 75.730923][ T1063] ? __kasan_check_write+0x18/0x20 [ 75.730941][ T1063] ? _raw_spin_lock+0x92/0x120 [ 75.730959][ T1063] shmem_get_folio_gfp+0x5cd/0x12e0 [ 75.730983][ T1063] ? shmem_get_folio+0xc0/0xc0 [ 75.731002][ T1063] ? follow_page_pte+0x8fb/0xba0 [ 75.731028][ T1063] ? inode_to_bdi+0x6d/0x100 [ 75.731059][ T1063] shmem_write_begin+0xf4/0x260 [ 75.731085][ T1063] generic_perform_write+0x32c/0x970 [ 75.731141][ T1063] ? __cfi_generic_perform_write+0x10/0x10 [ 75.731170][ T1063] ? generic_write_checks_count+0x426/0x540 [ 75.731197][ T1063] ? file_update_time+0xa3/0x210 [ 75.731227][ T1063] shmem_file_write_iter+0x105/0x130 [ 75.731256][ T1063] __kernel_write_iter+0x462/0x900 [ 75.731278][ T1063] ? __cfi___kernel_write_iter+0x10/0x10 [ 75.731300][ T1063] ? get_dump_page+0x165/0x220 [ 75.731328][ T1063] ? __asan_memset+0x39/0x50 [ 75.731348][ T1063] ? iov_iter_bvec+0xc0/0x180 [ 75.731378][ T1063] dump_user_range+0xb8b/0xe60 [ 75.731402][ T1063] ? __cfi_dump_user_range+0x10/0x10 [ 75.731426][ T1063] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 75.731459][ T1063] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 75.731492][ T1063] ? elf_core_dump+0x23cf/0x3840 [ 75.731520][ T1063] elf_core_dump+0x2d61/0x3840 [ 75.731550][ T1063] ? __cfi_elf_core_dump+0x10/0x10 [ 75.731577][ T1063] ? mas_next_slot+0xf01/0xfd0 [ 75.731610][ T1063] ? dump_interrupted+0xf0/0xf0 [ 75.731632][ T1063] ? 0xffffffffff600000 [ 75.731647][ T1063] ? put_dmabuf_info+0xf5/0x200 [ 75.731679][ T1063] do_coredump+0x20d2/0x3050 [ 75.731704][ T1063] ? __cfi_do_coredump+0x10/0x10 [ 75.731724][ T1063] ? asm_exc_general_protection+0x2b/0x30 [ 75.731757][ T1063] ? __kasan_slab_free+0x6a/0x80 [ 75.731802][ T1063] ? get_signal+0xa2a/0x1490 [ 75.731833][ T1063] get_signal+0x11bf/0x1490 [ 75.731874][ T1063] arch_do_signal_or_restart+0xbc/0x700 [ 75.731894][ T1063] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 75.731915][ T1063] ? fixup_iopl_exception+0xe2/0x2e0 [ 75.731955][ T1063] irqentry_exit_to_user_mode+0x4d/0xb0 [ 75.731986][ T1063] irqentry_exit+0x16/0x60 [ 75.732013][ T1063] exc_general_protection+0x152/0x1e0 [ 75.732036][ T1063] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 75.732081][ T1063] asm_exc_general_protection+0x2b/0x30 [ 75.732116][ T1063] RIP: 0033:0x7fd089d9e161 [ 75.732152][ T1063] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 75.732172][ T1063] RSP: 002b:00002000000000b0 EFLAGS: 00010217 [ 75.732194][ T1063] RAX: 0000000000000000 RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 75.732211][ T1063] RDX: 00002000000000c0 RSI: 00002000000000b0 RDI: 0000000000180400 [ 75.732227][ T1063] RBP: 00007fd089e3506b R08: 0000200000000140 R09: 0000200000000140 [ 75.732243][ T1063] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 75.732259][ T1063] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 75.732279][ T1063] [ 76.216256][ T1688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 76.272456][ T711] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 76.332464][ T1063] memory: usage 282444kB, limit 307200kB, failcnt 52771 [ 76.339569][ T1063] memory+swap: usage 397560kB, limit 9007199254740988kB, failcnt 0 [ 76.347760][ T1063] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.355091][ T1063] Memory cgroup stats for /syz1: [ 76.355283][ T1063] cache 289116160 [ 76.364104][ T1063] rss 102400 [ 76.367392][ T1063] rss_huge 0 [ 76.370621][ T1063] shmem 287997952 [ 76.374530][ T1063] mapped_file 851968 [ 76.378519][ T1063] dirty 0 [ 76.381489][ T1063] writeback 0 [ 76.385058][ T1063] workingset_refault_anon 99 [ 76.389736][ T1063] workingset_refault_file 14222 [ 76.394794][ T1063] swap 117878784 [ 76.398367][ T1063] swapcached 53248 [ 76.402155][ T1063] pgpgin 180013 [ 76.405940][ T1063] pgpgout 109402 [ 76.409515][ T1063] pgfault 21522 [ 76.413237][ T1063] pgmajfault 521 [ 76.416820][ T1063] inactive_anon 158580736 [ 76.421188][ T1063] active_anon 129523712 [ 76.425683][ T1063] inactive_file 8192 [ 76.429610][ T1063] active_file 1110016 [ 76.433897][ T1063] unevictable 0 [ 76.437441][ T1063] hierarchical_memory_limit 314572800 [ 76.443026][ T1063] hierarchical_memsw_limit 9223372036854771712 [ 76.449246][ T1063] total_cache 289116160 [ 76.453652][ T1063] total_rss 102400 [ 76.457403][ T1063] total_rss_huge 0 [ 76.461191][ T1063] total_shmem 287997952 [ 76.465626][ T1063] total_mapped_file 851968 [ 76.470092][ T1063] total_dirty 0 [ 76.473875][ T1063] total_writeback 0 [ 76.477739][ T1063] total_workingset_refault_anon 99 [ 76.482773][ T711] usb 5-1: Using ep0 maxpacket: 16 [ 76.483761][ T1063] total_workingset_refault_file 14222 [ 76.493553][ T1063] total_swap 117878784 [ 76.497645][ T1063] total_swapcached 53248 [ 76.501931][ T1063] total_pgpgin 180013 [ 76.506173][ T1063] total_pgpgout 109402 [ 76.510298][ T1063] total_pgfault 21522 [ 76.514567][ T1063] total_pgmajfault 521 [ 76.516759][ T711] usb 5-1: config index 0 descriptor too short (expected 61476, got 36) [ 76.518815][ T1063] total_inactive_anon 158580736 [ 76.532197][ T1063] total_active_anon 129523712 [ 76.537041][ T1063] total_inactive_file 8192 [ 76.541500][ T1063] total_active_file 1110016 [ 76.546413][ T1063] total_unevictable 0 [ 76.550427][ T1063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.244,pid=1073,uid=0 [ 76.557558][ T711] usb 5-1: config 1 has an invalid interface number: 105 but max is -1 [ 76.571001][ T1063] Memory cgroup out of memory: Killed process 1073 (syz.1.244) total-vm:90924kB, anon-rss:1176kB, file-rss:21980kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 76.639310][ T711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 76.673895][ T711] usb 5-1: config 1 has no interface number 0 [ 76.702299][ T711] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.758619][ T711] usb 5-1: config 1 interface 105 has no altsetting 0 [ 76.773679][ T711] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 76.790464][ T711] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 76.804182][ T711] usb 5-1: Product: syz [ 76.808384][ T711] usb 5-1: Manufacturer: syz [ 76.824452][ T711] usb 5-1: SerialNumber: syz [ 76.862600][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 76.868738][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.886480][ T45] usb 4-1: USB disconnect, device number 25 [ 76.992305][ T782] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 77.042797][ T711] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 77.142302][ T782] usb 2-1: device descriptor read/64, error -71 [ 77.392282][ T782] usb 2-1: device descriptor read/64, error -71 [ 77.561366][ T1076] syz.1.244 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.598706][ T1076] CPU: 0 UID: 0 PID: 1076 Comm: syz.1.244 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 77.598740][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.598755][ T1076] Call Trace: [ 77.598762][ T1076] [ 77.598771][ T1076] __dump_stack+0x21/0x30 [ 77.598808][ T1076] dump_stack_lvl+0x140/0x1c0 [ 77.598839][ T1076] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.598869][ T1076] ? ___ratelimit+0x41c/0x5c0 [ 77.598895][ T1076] ? __kasan_check_write+0x18/0x20 [ 77.598928][ T1076] dump_stack+0x19/0x20 [ 77.598957][ T1076] dump_header+0xd9/0x460 [ 77.598988][ T1076] oom_kill_process+0x35d/0x640 [ 77.599016][ T1076] out_of_memory+0x5d1/0xa20 [ 77.599043][ T1076] ? __cfi_out_of_memory+0x10/0x10 [ 77.599068][ T1076] ? mutex_lock_killable+0x97/0x1d0 [ 77.599096][ T1076] ? __cfi_mutex_lock_killable+0x10/0x10 [ 77.599126][ T1076] mem_cgroup_out_of_memory+0x2c5/0x390 [ 77.599150][ T1076] ? css_next_descendant_pre+0x1ec/0x210 [ 77.599178][ T1076] ? __kasan_check_write+0x18/0x20 [ 77.599201][ T1076] ? drain_obj_stock+0xec0/0xec0 [ 77.599226][ T1076] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 77.599250][ T1076] try_charge_memcg+0x925/0xe10 [ 77.599282][ T1076] ? static_key_count+0x45/0x70 [ 77.599312][ T1076] ? lruvec_init+0x211/0x280 [ 77.599338][ T1076] ? __cfi_try_charge_memcg+0x10/0x10 [ 77.599371][ T1076] ? __alloc_pages_noprof+0x35a/0x7e0 [ 77.599406][ T1076] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.599441][ T1076] __mem_cgroup_charge+0xfc/0x420 [ 77.599464][ T1076] ? folio_add_lru+0x116/0x400 [ 77.599494][ T1076] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 77.599519][ T1076] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 77.599552][ T1076] ? shmem_replace_folio+0x9b0/0x9b0 [ 77.599581][ T1076] ? shmem_huge_global_enabled+0x2da/0x360 [ 77.599608][ T1076] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 77.599636][ T1076] ? __kasan_check_write+0x18/0x20 [ 77.599680][ T1076] ? _raw_spin_lock+0x92/0x120 [ 77.599703][ T1076] shmem_get_folio_gfp+0x5cd/0x12e0 [ 77.599734][ T1076] ? shmem_get_folio+0xc0/0xc0 [ 77.599759][ T1076] ? follow_page_pte+0x8fb/0xba0 [ 77.599791][ T1076] ? inode_to_bdi+0x6d/0x100 [ 77.599825][ T1076] shmem_write_begin+0xf4/0x260 [ 77.599852][ T1076] generic_perform_write+0x32c/0x970 [ 77.599883][ T1076] ? __cfi_generic_perform_write+0x10/0x10 [ 77.599919][ T1076] ? generic_write_checks_count+0x426/0x540 [ 77.599949][ T1076] ? file_update_time+0xa3/0x210 [ 77.599979][ T1076] shmem_file_write_iter+0x105/0x130 [ 77.600008][ T1076] __kernel_write_iter+0x462/0x900 [ 77.600031][ T1076] ? __cfi___kernel_write_iter+0x10/0x10 [ 77.600053][ T1076] ? get_dump_page+0x165/0x220 [ 77.600082][ T1076] ? __asan_memset+0x39/0x50 [ 77.600101][ T1076] ? iov_iter_bvec+0xc0/0x180 [ 77.600132][ T1076] dump_user_range+0xb8b/0xe60 [ 77.600158][ T1076] ? __cfi_dump_user_range+0x10/0x10 [ 77.600182][ T1076] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 77.600215][ T1076] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 77.600249][ T1076] elf_core_dump+0x2d61/0x3840 [ 77.600280][ T1076] ? __cfi_elf_core_dump+0x10/0x10 [ 77.600306][ T1076] ? mas_next_slot+0xf01/0xfd0 [ 77.600339][ T1076] ? dump_interrupted+0xf0/0xf0 [ 77.600361][ T1076] ? 0xffffffffff600000 [ 77.600375][ T1076] ? put_dmabuf_info+0xf5/0x200 [ 77.600407][ T1076] do_coredump+0x20d2/0x3050 [ 77.600434][ T1076] ? __cfi_do_coredump+0x10/0x10 [ 77.600456][ T1076] ? asm_exc_general_protection+0x2b/0x30 [ 77.600493][ T1076] ? __kasan_slab_free+0x6a/0x80 [ 77.600523][ T1076] ? get_signal+0xa2a/0x1490 [ 77.600554][ T1076] get_signal+0x11bf/0x1490 [ 77.600589][ T1076] arch_do_signal_or_restart+0xbc/0x700 [ 77.600612][ T1076] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 77.600637][ T1076] ? fixup_iopl_exception+0xe2/0x2e0 [ 77.600662][ T1076] irqentry_exit_to_user_mode+0x4d/0xb0 [ 77.600694][ T1076] irqentry_exit+0x16/0x60 [ 77.600724][ T1076] exc_general_protection+0x152/0x1e0 [ 77.600749][ T1076] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 77.600782][ T1076] asm_exc_general_protection+0x2b/0x30 [ 77.600809][ T1076] RIP: 0033:0x7fd089d9e161 [ 77.600828][ T1076] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 77.600859][ T1076] RSP: 002b:00002000000000b0 EFLAGS: 00010217 [ 77.600879][ T1076] RAX: 0000000000000000 RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 77.600895][ T1076] RDX: 00002000000000c0 RSI: 00002000000000b0 RDI: 0000000000180400 [ 77.600920][ T1076] RBP: 00007fd089e3506b R08: 0000200000000140 R09: 0000200000000140 [ 77.600936][ T1076] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 77.600950][ T1076] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 77.600970][ T1076] [ 77.601373][ T1076] memory: usage 307200kB, limit 307200kB, failcnt 57080 [ 77.708214][ T1710] netlink: 104 bytes leftover after parsing attributes in process `syz.3.455'. [ 77.709263][ T782] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 77.783616][ T1076] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 77.912337][ T782] usb 2-1: device descriptor read/64, error -71 [ 77.914458][ T1076] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 78.126230][ T1076] Memory cgroup stats for /syz1: [ 78.126632][ T1076] cache 314216448 [ 78.135555][ T1076] rss 335872 [ 78.138783][ T1076] rss_huge 0 [ 78.142005][ T1076] shmem 314216448 [ 78.145685][ T1076] mapped_file 0 [ 78.149348][ T1076] dirty 0 [ 78.152307][ T782] usb 2-1: device descriptor read/64, error -71 [ 78.161080][ T1076] writeback 0 [ 78.166653][ T1718] netlink: 'syz.3.457': attribute type 28 has an invalid length. [ 78.174485][ T1076] workingset_refault_anon 141 [ 78.179185][ T1076] workingset_refault_file 14754 [ 78.185442][ T1076] swap 127967232 [ 78.189019][ T1076] swapcached 20480 [ 78.192797][ T1076] pgpgin 198422 [ 78.196373][ T1076] pgpgout 121622 [ 78.199951][ T1076] pgfault 21936 [ 78.203455][ T1076] pgmajfault 562 [ 78.207086][ T1076] inactive_anon 199086080 [ 78.211605][ T1076] active_anon 115486720 [ 78.215815][ T1076] inactive_file 0 [ 78.219538][ T1076] active_file 0 [ 78.223047][ T1076] unevictable 0 [ 78.226582][ T1076] hierarchical_memory_limit 314572800 [ 78.231973][ T1076] hierarchical_memsw_limit 9223372036854771712 [ 78.238197][ T1076] total_cache 314216448 [ 78.242841][ T1076] total_rss 335872 [ 78.246598][ T1076] total_rss_huge 0 [ 78.250333][ T1076] total_shmem 314216448 [ 78.254775][ T1076] total_mapped_file 0 [ 78.258779][ T1076] total_dirty 0 [ 78.262370][ T1076] total_writeback 0 [ 78.264197][ T782] usb usb2-port1: attempt power cycle [ 78.266381][ T1076] total_workingset_refault_anon 141 [ 78.276954][ T1076] total_workingset_refault_file 14754 [ 78.282524][ T1076] total_swap 127967232 [ 78.286609][ T1076] total_swapcached 20480 [ 78.290913][ T1076] total_pgpgin 198422 [ 78.295264][ T1076] total_pgpgout 121622 [ 78.299359][ T1076] total_pgfault 21936 [ 78.303581][ T1076] total_pgmajfault 562 [ 78.307784][ T1076] total_inactive_anon 199086080 [ 78.313865][ T1076] total_active_anon 115486720 [ 78.318603][ T1076] total_inactive_file 0 [ 78.322843][ T1076] total_active_file 0 [ 78.326938][ T1076] total_unevictable 0 [ 78.330968][ T1076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.244,pid=1038,uid=0 [ 78.345803][ T1076] Memory cgroup out of memory: Killed process 1038 (syz.1.244) total-vm:90528kB, anon-rss:1352kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 78.422205][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 78.559074][ T1723] fuse: Unknown parameter 'user]id' [ 78.573557][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.582158][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 78.604149][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 78.622252][ T45] usb 4-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 78.625188][ T782] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 78.635853][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.709980][ T782] usb 2-1: device descriptor read/8, error -71 [ 78.752255][ T1727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.776565][ T1727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.843196][ T782] usb 2-1: device descriptor read/8, error -71 [ 78.860540][ T45] usb 4-1: string descriptor 0 read error: -71 [ 78.873980][ T45] usb 4-1: MIDIStreaming interface descriptor not found [ 78.894336][ T1080] syz.1.244 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 78.904463][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.935145][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 78.945543][ T45] usb 4-1: USB disconnect, device number 26 [ 78.995637][ T1080] CPU: 1 UID: 0 PID: 1080 Comm: syz.1.244 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 78.995670][ T1080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.995685][ T1080] Call Trace: [ 78.995692][ T1080] [ 78.995701][ T1080] __dump_stack+0x21/0x30 [ 78.995739][ T1080] dump_stack_lvl+0x140/0x1c0 [ 78.995771][ T1080] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.995802][ T1080] ? ___ratelimit+0x41c/0x5c0 [ 78.995835][ T1080] ? __kasan_check_write+0x18/0x20 [ 78.995860][ T1080] dump_stack+0x19/0x20 [ 78.995889][ T1080] dump_header+0xd9/0x460 [ 78.995919][ T1080] oom_kill_process+0x35d/0x640 [ 78.995947][ T1080] out_of_memory+0x5d1/0xa20 [ 78.995974][ T1080] ? __cfi_out_of_memory+0x10/0x10 [ 78.995999][ T1080] ? mutex_lock_killable+0x97/0x1d0 [ 78.996027][ T1080] ? __cfi_mutex_lock_killable+0x10/0x10 [ 78.996070][ T1080] mem_cgroup_out_of_memory+0x2c5/0x390 [ 78.996094][ T1080] ? css_next_descendant_pre+0x1ec/0x210 [ 78.996121][ T1080] ? __kasan_check_write+0x18/0x20 [ 78.996143][ T1080] ? drain_obj_stock+0xec0/0xec0 [ 78.996168][ T1080] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 78.996191][ T1080] try_charge_memcg+0x925/0xe10 [ 78.996221][ T1080] ? static_key_count+0x45/0x70 [ 78.996249][ T1080] ? lruvec_init+0x211/0x280 [ 78.996273][ T1080] ? __cfi_try_charge_memcg+0x10/0x10 [ 78.996304][ T1080] ? __alloc_pages_noprof+0x35a/0x7e0 [ 78.996336][ T1080] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 78.996368][ T1080] __mem_cgroup_charge+0xfc/0x420 [ 78.996388][ T1080] ? folio_add_lru+0x116/0x400 [ 78.996433][ T1080] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 78.996458][ T1080] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 78.996501][ T1080] ? shmem_replace_folio+0x9b0/0x9b0 [ 78.996527][ T1080] ? shmem_huge_global_enabled+0x2da/0x360 [ 78.996552][ T1080] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 78.996577][ T1080] ? __kasan_check_write+0x18/0x20 [ 78.996598][ T1080] ? _raw_spin_lock+0x92/0x120 [ 78.996618][ T1080] shmem_get_folio_gfp+0x5cd/0x12e0 [ 78.996645][ T1080] ? shmem_get_folio+0xc0/0xc0 [ 78.996685][ T1080] ? __kasan_check_write+0x18/0x20 [ 78.996709][ T1080] ? inode_to_bdi+0x6d/0x100 [ 78.996741][ T1080] shmem_write_begin+0xf4/0x260 [ 78.996770][ T1080] generic_perform_write+0x32c/0x970 [ 78.996801][ T1080] ? inode_update_timestamps+0x4d1/0x6e0 [ 78.996843][ T1080] ? __cfi_generic_perform_write+0x10/0x10 [ 78.996874][ T1080] ? generic_write_checks_count+0x426/0x540 [ 78.996905][ T1080] ? mnt_get_write_access_file+0x1af/0x3b0 [ 78.996938][ T1080] ? mnt_put_write_access_file+0xc2/0x100 [ 78.996971][ T1080] ? file_update_time+0x1de/0x210 [ 78.997004][ T1080] shmem_file_write_iter+0x105/0x130 [ 78.997036][ T1080] __kernel_write_iter+0x462/0x900 [ 78.997062][ T1080] ? __cfi___kernel_write_iter+0x10/0x10 [ 78.997086][ T1080] ? get_dump_page+0x165/0x220 [ 78.997116][ T1080] ? __asan_memset+0x39/0x50 [ 78.997138][ T1080] ? iov_iter_bvec+0xc0/0x180 [ 78.997172][ T1080] dump_user_range+0xb8b/0xe60 [ 78.997199][ T1080] ? __cfi_dump_user_range+0x10/0x10 [ 78.997225][ T1080] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 78.997260][ T1080] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 78.997295][ T1080] ? elf_core_dump+0x23cf/0x3840 [ 78.997326][ T1080] elf_core_dump+0x2d61/0x3840 [ 78.997359][ T1080] ? __cfi_elf_core_dump+0x10/0x10 [ 78.997388][ T1080] ? mas_next_slot+0xf01/0xfd0 [ 78.997424][ T1080] ? dump_interrupted+0xf0/0xf0 [ 78.997448][ T1080] ? 0xffffffffff600000 [ 78.997464][ T1080] ? put_dmabuf_info+0xf5/0x200 [ 78.997499][ T1080] do_coredump+0x20d2/0x3050 [ 78.997525][ T1080] ? __cfi_do_coredump+0x10/0x10 [ 78.997548][ T1080] ? asm_exc_general_protection+0x2b/0x30 [ 78.997584][ T1080] ? __kasan_slab_free+0x6a/0x80 [ 78.997612][ T1080] ? get_signal+0xa2a/0x1490 [ 78.997654][ T1080] get_signal+0x11bf/0x1490 [ 78.997685][ T1080] arch_do_signal_or_restart+0xbc/0x700 [ 78.997707][ T1080] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 78.997730][ T1080] ? fixup_iopl_exception+0xe2/0x2e0 [ 78.997752][ T1080] irqentry_exit_to_user_mode+0x4d/0xb0 [ 78.997800][ T1080] irqentry_exit+0x16/0x60 [ 78.997835][ T1080] exc_general_protection+0x152/0x1e0 [ 78.997860][ T1080] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 78.997892][ T1080] asm_exc_general_protection+0x2b/0x30 [ 78.997919][ T1080] RIP: 0033:0x7fd089d9e161 [ 78.997936][ T1080] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 78.997955][ T1080] RSP: 002b:00002000000000b0 EFLAGS: 00010217 [ 78.997976][ T1080] RAX: 0000000000000000 RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 78.997993][ T1080] RDX: 00002000000000c0 RSI: 00002000000000b0 RDI: 0000000000180400 [ 78.998010][ T1080] RBP: 00007fd089e3506b R08: 0000200000000140 R09: 0000200000000140 [ 78.998026][ T1080] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 78.998042][ T1080] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 78.998062][ T1080] [ 78.998105][ T1080] memory: usage 307200kB, limit 307200kB, failcnt 60052 [ 79.093544][ T782] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 79.096339][ T1080] memory+swap: usage 430460kB, limit 9007199254740988kB, failcnt 0 [ 79.145080][ T782] usb 2-1: device descriptor read/8, error -71 [ 79.147566][ T1080] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 79.285514][ T782] usb 2-1: device descriptor read/8, error -71 [ 79.296943][ T1080] Memory cgroup stats for [ 79.393683][ T493] usb 5-1: USB disconnect, device number 17 [ 79.462376][ T1729] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 79.477536][ T1080] /syz1 [ 79.552164][ T782] usb usb2-port1: unable to enumerate USB device [ 79.614324][ T1735] FAULT_INJECTION: forcing a failure. [ 79.614324][ T1735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.632132][ T1080] : [ 79.632320][ T1080] cache 314253312 [ 79.638506][ T1735] CPU: 1 UID: 0 PID: 1735 Comm: syz.2.464 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 79.638541][ T1735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.638557][ T1735] Call Trace: [ 79.638564][ T1735] [ 79.638572][ T1735] __dump_stack+0x21/0x30 [ 79.638610][ T1735] dump_stack_lvl+0x140/0x1c0 [ 79.638642][ T1735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.638697][ T1735] dump_stack+0x19/0x20 [ 79.638730][ T1735] should_fail_ex+0x3c2/0x510 [ 79.638767][ T1735] should_fail+0xf/0x20 [ 79.638794][ T1735] should_fail_usercopy+0x1e/0x30 [ 79.638826][ T1735] strncpy_from_user+0x29/0x280 [ 79.638856][ T1735] getname_flags+0x106/0x6b0 [ 79.638884][ T1735] getname+0x1b/0x30 [ 79.638910][ T1735] do_sys_openat2+0xda/0x1d0 [ 79.638943][ T1735] ? fput+0x1a4/0x230 [ 79.638973][ T1735] ? do_sys_open+0x100/0x100 [ 79.639011][ T1735] __x64_sys_openat+0x13a/0x170 [ 79.639046][ T1735] x64_sys_call+0xe69/0x2ee0 [ 79.639068][ T1735] do_syscall_64+0x57/0xf0 [ 79.639090][ T1735] ? clear_bhb_loop+0x50/0xa0 [ 79.639119][ T1735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.639148][ T1735] RIP: 0033:0x7f9ab359e159 [ 79.639167][ T1735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.639188][ T1735] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.639214][ T1735] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 79.639233][ T1735] RDX: 00000000000026e1 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 79.639250][ T1735] RBP: 00007f9ab363506b R08: 0000000000000000 R09: 0000000000000000 [ 79.639265][ T1735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.639280][ T1735] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 79.639301][ T1735] [ 79.841178][ T1080] rss 299008 [ 79.844542][ T1080] rss_huge 0 [ 79.847768][ T1080] shmem 314253312 [ 79.851471][ T1080] mapped_file 0 [ 79.854982][ T1080] dirty 0 [ 79.857952][ T1080] writeback 0 [ 79.861265][ T1080] workingset_refault_anon 141 [ 79.866503][ T1080] workingset_refault_file 14754 [ 79.871402][ T1080] swap 127967232 [ 79.874994][ T1080] swapcached 20480 [ 79.878778][ T1080] pgpgin 208174 [ 79.882293][ T1080] pgpgout 131374 [ 79.885857][ T1080] pgfault 21969 [ 79.889376][ T1080] pgmajfault 562 [ 79.892964][ T1080] inactive_anon 188141568 [ 79.897394][ T1080] active_anon 126427136 [ 79.901605][ T1080] inactive_file 0 [ 79.905366][ T1080] active_file 0 [ 79.908857][ T1080] unevictable 0 [ 79.912394][ T1080] hierarchical_memory_limit 314572800 [ 79.917817][ T1080] hierarchical_memsw_limit 9223372036854771712 [ 79.924041][ T1080] total_cache 314253312 [ 79.928229][ T1080] total_rss 299008 [ 79.931971][ T1080] total_rss_huge 0 [ 79.935771][ T1080] total_shmem 314253312 [ 79.939946][ T1080] total_mapped_file 0 [ 79.943968][ T1080] total_dirty 0 [ 79.947473][ T1080] total_writeback 0 [ 79.951295][ T1080] total_workingset_refault_anon 141 [ 79.956559][ T1080] total_workingset_refault_file 14754 [ 79.961996][ T1080] total_swap 127967232 [ 79.966153][ T1080] total_swapcached 20480 [ 79.970429][ T1080] total_pgpgin 208174 [ 79.972602][ T493] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 79.974587][ T1080] total_pgpgout 131374 [ 79.986093][ T1080] total_pgfault 21969 [ 79.990170][ T1080] total_pgmajfault 562 [ 79.994277][ T1080] total_inactive_anon 188141568 [ 79.999223][ T1080] total_active_anon 126427136 [ 80.003943][ T1080] total_inactive_file 0 [ 80.008120][ T1080] total_active_file 0 [ 80.012181][ T1080] total_unevictable 0 [ 80.016192][ T1080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.244,pid=1076,uid=0 [ 80.031124][ T1080] Memory cgroup out of memory: Killed process 1076 (syz.1.244) total-vm:90924kB, anon-rss:1176kB, file-rss:23972kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 80.123137][ T1747] FAULT_INJECTION: forcing a failure. [ 80.123137][ T1747] name failslab, interval 1, probability 0, space 0, times 0 [ 80.156088][ T1747] CPU: 0 UID: 0 PID: 1747 Comm: syz.3.469 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 80.156122][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.156138][ T1747] Call Trace: [ 80.156146][ T1747] [ 80.156154][ T1747] __dump_stack+0x21/0x30 [ 80.156200][ T1747] dump_stack_lvl+0x140/0x1c0 [ 80.156232][ T1747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.156266][ T1747] dump_stack+0x19/0x20 [ 80.156297][ T1747] should_fail_ex+0x3c2/0x510 [ 80.156326][ T1747] should_failslab+0xac/0x100 [ 80.156355][ T1747] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 80.156382][ T1747] ? __kasan_kmalloc+0x96/0xb0 [ 80.156410][ T1747] ? alloc_event_probe+0x1b7/0x5b0 [ 80.156436][ T1747] kstrdup+0x4d/0x130 [ 80.156456][ T1747] alloc_event_probe+0x1b7/0x5b0 [ 80.156479][ T1747] ? find_and_get_event+0x28e/0x2c0 [ 80.156504][ T1747] __trace_eprobe_create+0x6c7/0xda0 [ 80.156528][ T1747] ? do_syscall_64+0x57/0xf0 [ 80.156551][ T1747] ? __cfi___trace_eprobe_create+0x10/0x10 [ 80.156594][ T1747] ? kasan_save_alloc_info+0x3a/0x50 [ 80.156617][ T1747] ? __kmalloc_noprof+0x261/0x510 [ 80.156643][ T1747] ? argv_split+0x361/0x4a0 [ 80.156676][ T1747] trace_probe_create+0xdd/0x140 [ 80.156713][ T1747] ? __cfi___trace_eprobe_create+0x10/0x10 [ 80.156739][ T1747] ? __cfi_trace_probe_create+0x10/0x10 [ 80.156767][ T1747] ? mutex_lock+0x97/0x1d0 [ 80.156795][ T1747] ? __cfi_mutex_lock+0x10/0x10 [ 80.156828][ T1747] ? __cfi___check_object_size+0x10/0x10 [ 80.156854][ T1747] eprobe_dyn_event_create+0x20/0x30 [ 80.156879][ T1747] create_dyn_event+0xbf/0x160 [ 80.156903][ T1747] trace_parse_run_command+0x219/0x420 [ 80.156935][ T1747] ? __cfi_create_dyn_event+0x10/0x10 [ 80.156960][ T1747] dyn_event_write+0x38/0x50 [ 80.156982][ T1747] ? __cfi_dyn_event_write+0x10/0x10 [ 80.157005][ T1747] vfs_write+0x3c1/0xfd0 [ 80.157030][ T1747] ? __cfi_vfs_write+0x10/0x10 [ 80.157055][ T1747] ? __kasan_check_write+0x18/0x20 [ 80.157078][ T1747] ? mutex_lock+0x97/0x1d0 [ 80.157105][ T1747] ? __cfi_mutex_lock+0x10/0x10 [ 80.157135][ T1747] ksys_write+0x145/0x260 [ 80.157160][ T1747] ? __cfi_ksys_write+0x10/0x10 [ 80.157194][ T1747] ? __kasan_check_read+0x15/0x20 [ 80.157218][ T1747] __x64_sys_write+0x7f/0x90 [ 80.157244][ T1747] x64_sys_call+0x271c/0x2ee0 [ 80.157265][ T1747] do_syscall_64+0x57/0xf0 [ 80.157287][ T1747] ? clear_bhb_loop+0x50/0xa0 [ 80.157316][ T1747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.157344][ T1747] RIP: 0033:0x7f746859e159 [ 80.157363][ T1747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.157383][ T1747] RSP: 002b:00007f7469411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.157409][ T1747] RAX: ffffffffffffffda RBX: 00007f7468825fa0 RCX: 00007f746859e159 [ 80.157427][ T1747] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 80.157442][ T1747] RBP: 00007f7469411090 R08: 0000000000000000 R09: 0000000000000000 [ 80.157456][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.157469][ T1747] R13: 00007f7468826038 R14: 00007f7468825fa0 R15: 00007ffdb8df2828 [ 80.157489][ T1747] [ 80.443033][ T36] audit: type=1400 audit(1700000005.200:358): avc: denied { create } for pid=1743 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 80.502057][ T1748] sit0: entered promiscuous mode [ 80.508700][ T1748] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 80.521451][ T1045] syz.1.244 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 80.531429][ T1748] netlink: 1 bytes leftover after parsing attributes in process `syz.2.467'. [ 80.718636][ T1756] ./dev/sda1: Can't lookup blockdev [ 80.825125][ T1045] CPU: 1 UID: 0 PID: 1045 Comm: syz.1.244 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 80.825164][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.825179][ T1045] Call Trace: [ 80.825187][ T1045] [ 80.825197][ T1045] __dump_stack+0x21/0x30 [ 80.825236][ T1045] dump_stack_lvl+0x140/0x1c0 [ 80.825269][ T1045] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.825301][ T1045] ? ___ratelimit+0x41c/0x5c0 [ 80.825328][ T1045] ? __kasan_check_write+0x18/0x20 [ 80.825354][ T1045] dump_stack+0x19/0x20 [ 80.825385][ T1045] dump_header+0xd9/0x460 [ 80.825416][ T1045] oom_kill_process+0x35d/0x640 [ 80.825463][ T1045] out_of_memory+0x5d1/0xa20 [ 80.825492][ T1045] ? __cfi_out_of_memory+0x10/0x10 [ 80.825524][ T1045] ? mutex_lock_killable+0x97/0x1d0 [ 80.825555][ T1045] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.825588][ T1045] mem_cgroup_out_of_memory+0x2c5/0x390 [ 80.825616][ T1045] ? css_next_descendant_pre+0x1ec/0x210 [ 80.825647][ T1045] ? __kasan_check_write+0x18/0x20 [ 80.825672][ T1045] ? drain_obj_stock+0xec0/0xec0 [ 80.825700][ T1045] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 80.825727][ T1045] try_charge_memcg+0x925/0xe10 [ 80.825762][ T1045] ? static_key_count+0x45/0x70 [ 80.825795][ T1045] ? lruvec_init+0x211/0x280 [ 80.825823][ T1045] ? __cfi_try_charge_memcg+0x10/0x10 [ 80.825859][ T1045] ? __alloc_pages_noprof+0x35a/0x7e0 [ 80.825896][ T1045] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 80.825934][ T1045] __mem_cgroup_charge+0xfc/0x420 [ 80.825958][ T1045] ? folio_add_lru+0x116/0x400 [ 80.825991][ T1045] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 80.826017][ T1045] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 80.826051][ T1045] ? shmem_replace_folio+0x9b0/0x9b0 [ 80.826083][ T1045] ? shmem_huge_global_enabled+0x2da/0x360 [ 80.826114][ T1045] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 80.826150][ T1045] ? __kasan_check_write+0x18/0x20 [ 80.826175][ T1045] ? _raw_spin_lock+0x92/0x120 [ 80.826199][ T1045] shmem_get_folio_gfp+0x5cd/0x12e0 [ 80.826230][ T1045] ? shmem_get_folio+0xc0/0xc0 [ 80.826257][ T1045] ? follow_page_pte+0x8fb/0xba0 [ 80.826293][ T1045] ? inode_to_bdi+0x6d/0x100 [ 80.826340][ T1045] shmem_write_begin+0xf4/0x260 [ 80.826369][ T1045] generic_perform_write+0x32c/0x970 [ 80.826404][ T1045] ? __cfi_generic_perform_write+0x10/0x10 [ 80.826436][ T1045] ? generic_write_checks_count+0x426/0x540 [ 80.826468][ T1045] ? file_update_time+0xa3/0x210 [ 80.826503][ T1045] shmem_file_write_iter+0x105/0x130 [ 80.826535][ T1045] __kernel_write_iter+0x462/0x900 [ 80.826561][ T1045] ? __cfi___kernel_write_iter+0x10/0x10 [ 80.826586][ T1045] ? get_dump_page+0x165/0x220 [ 80.826616][ T1045] ? __asan_memset+0x39/0x50 [ 80.826639][ T1045] ? iov_iter_bvec+0xc0/0x180 [ 80.826672][ T1045] dump_user_range+0xb8b/0xe60 [ 80.826700][ T1045] ? __cfi_dump_user_range+0x10/0x10 [ 80.826726][ T1045] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 80.826762][ T1045] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 80.826797][ T1045] ? elf_core_dump+0x23cf/0x3840 [ 80.826828][ T1045] elf_core_dump+0x2d61/0x3840 [ 80.826861][ T1045] ? __cfi_elf_core_dump+0x10/0x10 [ 80.826891][ T1045] ? mas_next_slot+0xf01/0xfd0 [ 80.826927][ T1045] ? dump_interrupted+0xf0/0xf0 [ 80.826952][ T1045] ? 0xffffffffff600000 [ 80.826969][ T1045] ? put_dmabuf_info+0xf5/0x200 [ 80.827005][ T1045] do_coredump+0x20d2/0x3050 [ 80.827032][ T1045] ? __cfi_do_coredump+0x10/0x10 [ 80.827055][ T1045] ? asm_exc_general_protection+0x2b/0x30 [ 80.827125][ T1045] ? __kasan_slab_free+0x6a/0x80 [ 80.827157][ T1045] ? get_signal+0xa2a/0x1490 [ 80.827190][ T1045] get_signal+0x11bf/0x1490 [ 80.827228][ T1045] arch_do_signal_or_restart+0xbc/0x700 [ 80.827253][ T1045] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 80.827280][ T1045] ? fixup_iopl_exception+0xe2/0x2e0 [ 80.827307][ T1045] irqentry_exit_to_user_mode+0x4d/0xb0 [ 80.827342][ T1045] irqentry_exit+0x16/0x60 [ 80.827384][ T1045] exc_general_protection+0x152/0x1e0 [ 80.827410][ T1045] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 80.827442][ T1045] asm_exc_general_protection+0x2b/0x30 [ 80.827469][ T1045] RIP: 0033:0x7fd089d9e161 [ 80.827488][ T1045] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 80.827508][ T1045] RSP: 002b:00002000000000b0 EFLAGS: 00010217 [ 80.827531][ T1045] RAX: 0000000000000000 RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 80.827548][ T1045] RDX: 00002000000000c0 RSI: 00002000000000b0 RDI: 0000000000180400 [ 80.827565][ T1045] RBP: 00007fd089e3506b R08: 0000200000000140 R09: 0000200000000140 [ 80.827582][ T1045] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 80.827597][ T1045] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 80.827617][ T1045] [ 80.882204][ T493] usb 5-1: Using ep0 maxpacket: 32 [ 81.074358][ T1045] memory: usage 306084kB, limit 307200kB, failcnt 61783 [ 81.193675][ T493] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.202121][ T45] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 81.203658][ T493] usb 5-1: config 0 has no interface number 0 [ 81.382074][ T493] usb 5-1: config 0 interface 184 has no altsetting 0 [ 81.390346][ T493] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.399637][ T493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.407786][ T493] usb 5-1: Product: syz [ 81.412160][ T493] usb 5-1: Manufacturer: syz [ 81.416795][ T493] usb 5-1: SerialNumber: syz [ 81.422408][ T493] usb 5-1: config 0 descriptor?? [ 81.432558][ T493] smsc75xx v1.0.0 [ 81.446990][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.492030][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 81.501113][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.540264][ T45] usb 4-1: config 0 descriptor?? [ 81.670612][ T1045] memory+swap: usage 426280kB, limit 9007199254740988kB, failcnt 0 [ 81.719052][ T1045] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.741969][ T1045] Memory cgroup stats for /syz1: [ 81.742164][ T1045] cache 311357440 [ 81.781302][ T1045] rss 311296 [ 81.801491][ T1045] rss_huge 0 [ 81.821667][ T1045] shmem 311357440 [ 81.841838][ T1045] mapped_file 0 [ 81.891960][ T1045] dirty 0 [ 81.902108][ T1045] writeback 0 [ 81.912088][ T1045] workingset_refault_anon 145 [ 81.926982][ T1045] workingset_refault_file 14757 [ 81.951963][ T1045] swap 124583936 [ 81.955589][ T1045] swapcached 36864 [ 81.968771][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 81.972641][ T1045] pgpgin 219082 [ 81.981994][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 81.998532][ T1045] pgpgout 142978 [ 82.002350][ T45] usb 4-1: USB disconnect, device number 27 [ 82.023588][ T1045] pgfault 22085 [ 82.033167][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 82.046236][ T1045] pgmajfault 565 [ 82.055241][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.067696][ T1045] inactive_anon 196403200 [ 82.080751][ T1045] active_anon 115228672 [ 82.094650][ T1045] inactive_file 0 [ 82.105946][ T1045] active_file 0 [ 82.118057][ T1045] unevictable 0 [ 82.130228][ T1045] hierarchical_memory_limit 314572800 [ 82.148536][ T1045] hierarchical_memsw_limit 9223372036854771712 [ 82.168741][ T1045] total_cache 311357440 [ 82.204086][ T1045] total_rss 311296 [ 82.228173][ T1045] total_rss_huge 0 [ 82.234162][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 82.265722][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 82.275770][ T1045] total_shmem 311357440 [ 82.279954][ T1045] total_mapped_file 0 [ 82.284145][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 82.301942][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 82.321767][ T493] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 82.331932][ T1045] total_dirty 0 [ 82.335426][ T1045] total_writeback 0 [ 82.339242][ T1045] total_workingset_refault_anon 145 [ 82.374848][ T1045] total_workingset_refault_file 14757 [ 82.395421][ T1045] total_swap 124583936 [ 82.399654][ T1045] total_swapcached 36864 [ 82.416283][ T1770] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 82.443303][ T1045] total_pgpgin 219082 [ 82.451056][ T1045] total_pgpgout 142978 [ 82.471279][ T1045] total_pgfault 22085 [ 82.487738][ T1045] total_pgmajfault 565 [ 82.492281][ T1772] FAULT_INJECTION: forcing a failure. [ 82.492281][ T1772] name failslab, interval 1, probability 0, space 0, times 0 [ 82.531958][ T1045] total_inactive_anon 196403200 [ 82.537037][ T1772] CPU: 0 UID: 0 PID: 1772 Comm: syz.2.479 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 82.537068][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.537083][ T1772] Call Trace: [ 82.537091][ T1772] [ 82.537100][ T1772] __dump_stack+0x21/0x30 [ 82.537136][ T1772] dump_stack_lvl+0x140/0x1c0 [ 82.537175][ T1772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.537209][ T1772] dump_stack+0x19/0x20 [ 82.537240][ T1772] should_fail_ex+0x3c2/0x510 [ 82.537269][ T1772] should_failslab+0xac/0x100 [ 82.537297][ T1772] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 82.537325][ T1772] ? alloc_event_probe+0x1f8/0x5b0 [ 82.537366][ T1772] ? kstrdup+0x7b/0x130 [ 82.537387][ T1772] kstrdup+0x4d/0x130 [ 82.537408][ T1772] alloc_event_probe+0x1f8/0x5b0 [ 82.537433][ T1772] ? find_and_get_event+0x28e/0x2c0 [ 82.537459][ T1772] __trace_eprobe_create+0x6c7/0xda0 [ 82.537484][ T1772] ? do_syscall_64+0x57/0xf0 [ 82.537508][ T1772] ? __cfi___trace_eprobe_create+0x10/0x10 [ 82.537540][ T1772] ? kasan_save_alloc_info+0x3a/0x50 [ 82.537563][ T1772] ? __kmalloc_noprof+0x261/0x510 [ 82.537588][ T1772] ? argv_split+0x361/0x4a0 [ 82.537619][ T1772] trace_probe_create+0xdd/0x140 [ 82.537647][ T1772] ? __cfi___trace_eprobe_create+0x10/0x10 [ 82.537685][ T1772] ? __cfi_trace_probe_create+0x10/0x10 [ 82.537712][ T1772] ? mutex_lock+0x97/0x1d0 [ 82.537738][ T1772] ? __cfi_mutex_lock+0x10/0x10 [ 82.537784][ T1772] ? __cfi___check_object_size+0x10/0x10 [ 82.537810][ T1772] eprobe_dyn_event_create+0x20/0x30 [ 82.537835][ T1772] create_dyn_event+0xbf/0x160 [ 82.537858][ T1772] trace_parse_run_command+0x219/0x420 [ 82.537890][ T1772] ? __cfi_create_dyn_event+0x10/0x10 [ 82.537915][ T1772] dyn_event_write+0x38/0x50 [ 82.537937][ T1772] ? __cfi_dyn_event_write+0x10/0x10 [ 82.537960][ T1772] vfs_write+0x3c1/0xfd0 [ 82.537986][ T1772] ? __cfi_vfs_write+0x10/0x10 [ 82.538011][ T1772] ? __kasan_check_write+0x18/0x20 [ 82.538034][ T1772] ? mutex_lock+0x97/0x1d0 [ 82.538062][ T1772] ? __cfi_mutex_lock+0x10/0x10 [ 82.538092][ T1772] ksys_write+0x145/0x260 [ 82.538117][ T1772] ? __cfi_ksys_write+0x10/0x10 [ 82.538143][ T1772] ? __kasan_check_read+0x15/0x20 [ 82.538175][ T1772] __x64_sys_write+0x7f/0x90 [ 82.538200][ T1772] x64_sys_call+0x271c/0x2ee0 [ 82.538233][ T1772] do_syscall_64+0x57/0xf0 [ 82.538253][ T1772] ? clear_bhb_loop+0x50/0xa0 [ 82.538281][ T1772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.538308][ T1772] RIP: 0033:0x7f9ab359e159 [ 82.538327][ T1772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.538347][ T1772] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.538370][ T1772] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 82.538386][ T1772] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 82.538401][ T1772] RBP: 00007f9ab4392090 R08: 0000000000000000 R09: 0000000000000000 [ 82.538416][ T1772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.538430][ T1772] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 82.538449][ T1772] [ 82.948404][ T1045] total_active_anon 115228672 [ 82.953218][ T1045] total_inactive_file 0 [ 82.957401][ T1045] total_active_file 0 [ 82.961432][ T1045] total_unevictable 0 [ 82.965464][ T1045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.244,pid=1045,uid=0 [ 82.980298][ T1045] Memory cgroup out of memory: Killed process 1045 (syz.1.244) total-vm:90660kB, anon-rss:1408kB, file-rss:22140kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 83.045007][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.058701][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.102768][ T1777] netlink: 92 bytes leftover after parsing attributes in process `syz.3.481'. [ 83.382742][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 83.562930][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.573210][ T45] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.591908][ T45] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.611742][ T45] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.639733][ T45] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 83.648940][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.657002][ T45] usb 4-1: Product: syz [ 83.670691][ T45] usb 4-1: Manufacturer: syz [ 83.681294][ T45] usb 4-1: SerialNumber: syz [ 83.692681][ T45] usb-storage 4-1:1.0: USB Mass Storage device detected [ 83.710701][ T45] scsi host1: usb-storage 4-1:1.0 [ 83.854565][ T36] audit: type=1400 audit(1700000008.630:359): avc: denied { accept } for pid=1790 comm="syz.2.483" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.894378][ T45] usb 4-1: USB disconnect, device number 28 [ 83.978506][ T1795] FAULT_INJECTION: forcing a failure. [ 83.978506][ T1795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.006428][ T1795] CPU: 1 UID: 0 PID: 1795 Comm: syz.2.485 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 84.006464][ T1795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.006479][ T1795] Call Trace: [ 84.006487][ T1795] [ 84.006496][ T1795] __dump_stack+0x21/0x30 [ 84.006534][ T1795] dump_stack_lvl+0x140/0x1c0 [ 84.006585][ T1795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.006622][ T1795] dump_stack+0x19/0x20 [ 84.006654][ T1795] should_fail_ex+0x3c2/0x510 [ 84.006685][ T1795] should_fail+0xf/0x20 [ 84.006712][ T1795] should_fail_usercopy+0x1e/0x30 [ 84.006743][ T1795] strncpy_from_user+0x29/0x280 [ 84.006773][ T1795] getname_flags+0x106/0x6b0 [ 84.006800][ T1795] getname+0x1b/0x30 [ 84.006826][ T1795] do_sys_openat2+0xda/0x1d0 [ 84.006860][ T1795] ? fput+0x1a4/0x230 [ 84.006890][ T1795] ? do_sys_open+0x100/0x100 [ 84.006925][ T1795] __x64_sys_openat+0x13a/0x170 [ 84.006962][ T1795] x64_sys_call+0xe69/0x2ee0 [ 84.006983][ T1795] do_syscall_64+0x57/0xf0 [ 84.007006][ T1795] ? clear_bhb_loop+0x50/0xa0 [ 84.007036][ T1795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.007064][ T1795] RIP: 0033:0x7f9ab359e159 [ 84.007093][ T1795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.007115][ T1795] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.007142][ T1795] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 84.007162][ T1795] RDX: 00000000000026e1 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 84.007179][ T1795] RBP: 00007f9ab363506b R08: 0000000000000000 R09: 0000000000000000 [ 84.007195][ T1795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.007210][ T1795] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 84.007232][ T1795] [ 84.262003][ T493] usb 5-1: USB disconnect, device number 18 [ 84.354584][ T1801] FAULT_INJECTION: forcing a failure. [ 84.354584][ T1801] name failslab, interval 1, probability 0, space 0, times 0 [ 84.396211][ T36] audit: type=1400 audit(1700000009.170:360): avc: denied { connect } for pid=1802 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.415689][ T1801] CPU: 0 UID: 0 PID: 1801 Comm: syz.4.488 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 84.415722][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.415738][ T1801] Call Trace: [ 84.415746][ T1801] [ 84.415756][ T1801] __dump_stack+0x21/0x30 [ 84.415801][ T1801] dump_stack_lvl+0x140/0x1c0 [ 84.415833][ T1801] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.415868][ T1801] dump_stack+0x19/0x20 [ 84.415899][ T1801] should_fail_ex+0x3c2/0x510 [ 84.415928][ T1801] ? trace_probe_init+0x72/0x4d0 [ 84.415955][ T1801] should_failslab+0xac/0x100 [ 84.415985][ T1801] __kmalloc_noprof+0x69/0x510 [ 84.416010][ T1801] ? trace_probe_init+0x72/0x4d0 [ 84.416036][ T1801] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 84.416064][ T1801] trace_probe_init+0x72/0x4d0 [ 84.416098][ T1801] ? kstrdup+0x7b/0x130 [ 84.416119][ T1801] alloc_event_probe+0x23d/0x5b0 [ 84.416144][ T1801] ? find_and_get_event+0x28e/0x2c0 [ 84.416169][ T1801] __trace_eprobe_create+0x6c7/0xda0 [ 84.416194][ T1801] ? do_syscall_64+0x57/0xf0 [ 84.416218][ T1801] ? __cfi___trace_eprobe_create+0x10/0x10 [ 84.416249][ T1801] ? kasan_save_alloc_info+0x3a/0x50 [ 84.416272][ T1801] ? __kmalloc_noprof+0x261/0x510 [ 84.416298][ T1801] ? argv_split+0x361/0x4a0 [ 84.416331][ T1801] trace_probe_create+0xdd/0x140 [ 84.416359][ T1801] ? __cfi___trace_eprobe_create+0x10/0x10 [ 84.416383][ T1801] ? __cfi_trace_probe_create+0x10/0x10 [ 84.416411][ T1801] ? mutex_lock+0x97/0x1d0 [ 84.416438][ T1801] ? __cfi_mutex_lock+0x10/0x10 [ 84.416465][ T1801] ? __cfi___check_object_size+0x10/0x10 [ 84.416492][ T1801] eprobe_dyn_event_create+0x20/0x30 [ 84.416536][ T1801] create_dyn_event+0xbf/0x160 [ 84.416574][ T1801] trace_parse_run_command+0x219/0x420 [ 84.416607][ T1801] ? __cfi_create_dyn_event+0x10/0x10 [ 84.416632][ T1801] dyn_event_write+0x38/0x50 [ 84.416654][ T1801] ? __cfi_dyn_event_write+0x10/0x10 [ 84.416677][ T1801] vfs_write+0x3c1/0xfd0 [ 84.416703][ T1801] ? __cfi_vfs_write+0x10/0x10 [ 84.416727][ T1801] ? __kasan_check_write+0x18/0x20 [ 84.416755][ T1801] ? mutex_lock+0x97/0x1d0 [ 84.416806][ T1801] ? __cfi_mutex_lock+0x10/0x10 [ 84.416838][ T1801] ksys_write+0x145/0x260 [ 84.416887][ T1801] ? __cfi_ksys_write+0x10/0x10 [ 84.416933][ T1801] ? __kasan_check_read+0x15/0x20 [ 84.416960][ T1801] __x64_sys_write+0x7f/0x90 [ 84.416988][ T1801] x64_sys_call+0x271c/0x2ee0 [ 84.417024][ T1801] do_syscall_64+0x57/0xf0 [ 84.417047][ T1801] ? clear_bhb_loop+0x50/0xa0 [ 84.417080][ T1801] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.417156][ T1801] RIP: 0033:0x7fb38999e159 [ 84.417177][ T1801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.417223][ T1801] RSP: 002b:00007fb38a7d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.417251][ T1801] RAX: ffffffffffffffda RBX: 00007fb389c25fa0 RCX: 00007fb38999e159 [ 84.417275][ T1801] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 84.417293][ T1801] RBP: 00007fb38a7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 84.417311][ T1801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.417327][ T1801] R13: 00007fb389c26038 R14: 00007fb389c25fa0 R15: 00007ffcfe9bbe38 [ 84.417350][ T1801] [ 84.572031][ T36] audit: type=1326 audit(1700000009.300:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1798 comm="syz.1.486" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd089d9e159 code=0x0 [ 84.925622][ T1807] 9p: Unknown uid 00000000004294967295 [ 85.213246][ T493] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 85.251751][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 85.322880][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.351931][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.378163][ T493] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.403216][ T493] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 85.421783][ T493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.442224][ T493] usb 5-1: config 0 descriptor?? [ 85.448140][ T45] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 85.456337][ T45] usb 4-1: config 1 has no interface number 0 [ 85.473221][ T45] usb 4-1: config 1 interface 93 has no altsetting 0 [ 85.491786][ T45] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 85.521240][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.641246][ T1827] FAULT_INJECTION: forcing a failure. [ 85.641246][ T1827] name failslab, interval 1, probability 0, space 0, times 0 [ 85.660694][ T1827] CPU: 0 UID: 0 PID: 1827 Comm: syz.1.498 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 85.660735][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.660752][ T1827] Call Trace: [ 85.660764][ T1827] [ 85.660776][ T1827] __dump_stack+0x21/0x30 [ 85.660816][ T1827] dump_stack_lvl+0x140/0x1c0 [ 85.660848][ T1827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.660881][ T1827] dump_stack+0x19/0x20 [ 85.660911][ T1827] should_fail_ex+0x3c2/0x510 [ 85.660939][ T1827] should_failslab+0xac/0x100 [ 85.660969][ T1827] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 85.660999][ T1827] ? __kasan_kmalloc+0x96/0xb0 [ 85.661030][ T1827] ? trace_probe_init+0x32b/0x4d0 [ 85.661062][ T1827] kstrdup+0x4d/0x130 [ 85.661084][ T1827] trace_probe_init+0x32b/0x4d0 [ 85.661114][ T1827] alloc_event_probe+0x23d/0x5b0 [ 85.661140][ T1827] ? find_and_get_event+0x28e/0x2c0 [ 85.661177][ T1827] __trace_eprobe_create+0x6c7/0xda0 [ 85.661204][ T1827] ? do_syscall_64+0x57/0xf0 [ 85.661229][ T1827] ? __cfi___trace_eprobe_create+0x10/0x10 [ 85.661262][ T1827] ? kasan_save_alloc_info+0x3a/0x50 [ 85.661287][ T1827] ? __kmalloc_noprof+0x261/0x510 [ 85.661314][ T1827] ? argv_split+0x361/0x4a0 [ 85.661349][ T1827] trace_probe_create+0xdd/0x140 [ 85.661378][ T1827] ? __cfi___trace_eprobe_create+0x10/0x10 [ 85.661406][ T1827] ? __cfi_trace_probe_create+0x10/0x10 [ 85.661435][ T1827] ? mutex_lock+0x97/0x1d0 [ 85.661464][ T1827] ? __cfi_mutex_lock+0x10/0x10 [ 85.661493][ T1827] ? __cfi___check_object_size+0x10/0x10 [ 85.661521][ T1827] eprobe_dyn_event_create+0x20/0x30 [ 85.661547][ T1827] create_dyn_event+0xbf/0x160 [ 85.661573][ T1827] trace_parse_run_command+0x219/0x420 [ 85.661607][ T1827] ? __cfi_create_dyn_event+0x10/0x10 [ 85.661633][ T1827] dyn_event_write+0x38/0x50 [ 85.661658][ T1827] ? __cfi_dyn_event_write+0x10/0x10 [ 85.661682][ T1827] vfs_write+0x3c1/0xfd0 [ 85.661706][ T1827] ? __cfi_vfs_write+0x10/0x10 [ 85.661729][ T1827] ? __kasan_check_write+0x18/0x20 [ 85.661755][ T1827] ? mutex_lock+0x97/0x1d0 [ 85.661783][ T1827] ? __cfi_mutex_lock+0x10/0x10 [ 85.661815][ T1827] ksys_write+0x145/0x260 [ 85.661841][ T1827] ? __cfi_ksys_write+0x10/0x10 [ 85.661869][ T1827] ? __kasan_check_read+0x15/0x20 [ 85.661893][ T1827] __x64_sys_write+0x7f/0x90 [ 85.661920][ T1827] x64_sys_call+0x271c/0x2ee0 [ 85.661944][ T1827] do_syscall_64+0x57/0xf0 [ 85.661967][ T1827] ? clear_bhb_loop+0x50/0xa0 [ 85.661998][ T1827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.662027][ T1827] RIP: 0033:0x7fd089d9e159 [ 85.662048][ T1827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.662069][ T1827] RSP: 002b:00007fd08ab86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.662097][ T1827] RAX: ffffffffffffffda RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 85.662116][ T1827] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 85.662133][ T1827] RBP: 00007fd08ab86090 R08: 0000000000000000 R09: 0000000000000000 [ 85.662149][ T1827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.662165][ T1827] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 85.662195][ T1827] [ 86.173888][ T36] audit: type=1400 audit(1700000010.950:362): avc: denied { watch watch_reads } for pid=1839 comm="syz.1.502" path="/74" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.202415][ T493] usbhid 5-1:0.0: can't add hid device: -71 [ 86.208418][ T493] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 86.217105][ T493] usb 5-1: USB disconnect, device number 19 [ 86.230267][ T1842] fuse: Bad value for 'fd' [ 86.270173][ T45] usb 4-1: string descriptor 0 read error: -71 [ 86.281891][ T45] gl620a 4-1:1.93: probe with driver gl620a failed with error -22 [ 86.315635][ T45] usb 4-1: USB disconnect, device number 29 [ 86.377362][ T1846] tipc: Started in network mode [ 86.382552][ T1846] tipc: Node identity d23b1f51a037, cluster identity 4711 [ 86.389854][ T1846] tipc: Enabled bearer , priority 0 [ 86.415394][ T1846] syzkaller0: entered promiscuous mode [ 86.421015][ T1846] syzkaller0: entered allmulticast mode [ 86.427186][ T1846] tipc: Resetting bearer [ 86.441682][ T36] audit: type=1326 audit(1700000011.210:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1845 comm="syz.1.504" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd089d9e159 code=0x0 [ 86.458287][ T1848] 9p: Unknown uid 00000000004294967295 [ 86.817218][ T1856] FAULT_INJECTION: forcing a failure. [ 86.817218][ T1856] name failslab, interval 1, probability 0, space 0, times 0 [ 86.830150][ T1856] CPU: 0 UID: 0 PID: 1856 Comm: syz.4.508 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 86.830185][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.830201][ T1856] Call Trace: [ 86.830209][ T1856] [ 86.830219][ T1856] __dump_stack+0x21/0x30 [ 86.830257][ T1856] dump_stack_lvl+0x140/0x1c0 [ 86.830289][ T1856] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.830325][ T1856] dump_stack+0x19/0x20 [ 86.830376][ T1856] should_fail_ex+0x3c2/0x510 [ 86.830407][ T1856] should_failslab+0xac/0x100 [ 86.830439][ T1856] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 86.830469][ T1856] ? trace_probe_init+0x366/0x4d0 [ 86.830499][ T1856] ? kstrdup+0x7b/0x130 [ 86.830521][ T1856] kstrdup+0x4d/0x130 [ 86.830543][ T1856] trace_probe_init+0x366/0x4d0 [ 86.830643][ T1856] alloc_event_probe+0x23d/0x5b0 [ 86.830692][ T1856] ? find_and_get_event+0x28e/0x2c0 [ 86.830720][ T1856] __trace_eprobe_create+0x6c7/0xda0 [ 86.830747][ T1856] ? do_syscall_64+0x57/0xf0 [ 86.830772][ T1856] ? __cfi___trace_eprobe_create+0x10/0x10 [ 86.830801][ T1856] ? kasan_save_alloc_info+0x3a/0x50 [ 86.830824][ T1856] ? __kmalloc_noprof+0x261/0x510 [ 86.830851][ T1856] ? argv_split+0x361/0x4a0 [ 86.830885][ T1856] trace_probe_create+0xdd/0x140 [ 86.830916][ T1856] ? __cfi___trace_eprobe_create+0x10/0x10 [ 86.830943][ T1856] ? __cfi_trace_probe_create+0x10/0x10 [ 86.830973][ T1856] ? mutex_lock+0x97/0x1d0 [ 86.831002][ T1856] ? __cfi_mutex_lock+0x10/0x10 [ 86.831031][ T1856] ? __cfi___check_object_size+0x10/0x10 [ 86.831070][ T1856] eprobe_dyn_event_create+0x20/0x30 [ 86.831097][ T1856] create_dyn_event+0xbf/0x160 [ 86.831122][ T1856] trace_parse_run_command+0x219/0x420 [ 86.831158][ T1856] ? __cfi_create_dyn_event+0x10/0x10 [ 86.831184][ T1856] dyn_event_write+0x38/0x50 [ 86.831208][ T1856] ? __cfi_dyn_event_write+0x10/0x10 [ 86.831233][ T1856] vfs_write+0x3c1/0xfd0 [ 86.831262][ T1856] ? __cfi_vfs_write+0x10/0x10 [ 86.831287][ T1856] ? __kasan_check_write+0x18/0x20 [ 86.831312][ T1856] ? mutex_lock+0x97/0x1d0 [ 86.831340][ T1856] ? __cfi_mutex_lock+0x10/0x10 [ 86.831372][ T1856] ksys_write+0x145/0x260 [ 86.831399][ T1856] ? __cfi_ksys_write+0x10/0x10 [ 86.831427][ T1856] ? __kasan_check_read+0x15/0x20 [ 86.831453][ T1856] __x64_sys_write+0x7f/0x90 [ 86.831479][ T1856] x64_sys_call+0x271c/0x2ee0 [ 86.831503][ T1856] do_syscall_64+0x57/0xf0 [ 86.831527][ T1856] ? clear_bhb_loop+0x50/0xa0 [ 86.831557][ T1856] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.831586][ T1856] RIP: 0033:0x7fb38999e159 [ 86.831609][ T1856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.831630][ T1856] RSP: 002b:00007fb38a7d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.831655][ T1856] RAX: ffffffffffffffda RBX: 00007fb389c25fa0 RCX: 00007fb38999e159 [ 86.831673][ T1856] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 86.831691][ T1856] RBP: 00007fb38a7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 86.831709][ T1856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.831724][ T1856] R13: 00007fb389c26038 R14: 00007fb389c25fa0 R15: 00007ffcfe9bbe38 [ 86.831747][ T1856] [ 87.187218][ T1845] tipc: Resetting bearer [ 87.208457][ T1845] tipc: Disabling bearer [ 87.212079][ T493] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 87.347279][ T36] audit: type=1400 audit(1700000012.120:364): avc: denied { mount } for pid=1864 comm="syz.1.511" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 87.373307][ T493] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.398554][ T493] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.408766][ T493] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.419769][ T493] usb 4-1: string descriptor 0 read error: -22 [ 87.426061][ T493] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 87.435145][ T493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.458931][ T493] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 87.551499][ T642] udevd[642]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.610250][ T1874] FAULT_INJECTION: forcing a failure. [ 87.610250][ T1874] name failslab, interval 1, probability 0, space 0, times 0 [ 87.628187][ T1872] 9p: Unknown uid 00000000004294967295 [ 87.638785][ T1874] CPU: 0 UID: 0 PID: 1874 Comm: syz.1.515 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 87.638819][ T1874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.638834][ T1874] Call Trace: [ 87.638842][ T1874] [ 87.638852][ T1874] __dump_stack+0x21/0x30 [ 87.638890][ T1874] dump_stack_lvl+0x140/0x1c0 [ 87.638923][ T1874] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.638958][ T1874] dump_stack+0x19/0x20 [ 87.638990][ T1874] should_fail_ex+0x3c2/0x510 [ 87.639020][ T1874] should_failslab+0xac/0x100 [ 87.639050][ T1874] kmem_cache_alloc_noprof+0x42/0x410 [ 87.639076][ T1874] ? security_inode_alloc+0x51/0x230 [ 87.639109][ T1874] security_inode_alloc+0x51/0x230 [ 87.639140][ T1874] inode_init_always_gfp+0x756/0x9e0 [ 87.639170][ T1874] ? __cfi_proc_alloc_inode+0x10/0x10 [ 87.639195][ T1874] alloc_inode+0xc5/0x270 [ 87.639227][ T1874] new_inode+0x25/0x1e0 [ 87.639257][ T1874] proc_pid_make_inode+0x25/0x140 [ 87.639285][ T1874] proc_pident_instantiate+0x6d/0x2c0 [ 87.639315][ T1874] proc_pident_lookup+0x1c7/0x270 [ 87.639346][ T1874] proc_tgid_base_lookup+0x2f/0x40 [ 87.639375][ T1874] __lookup_slow+0x2e5/0x420 [ 87.639405][ T1874] ? lookup_one_len+0x300/0x300 [ 87.639434][ T1874] ? down_read+0x7f/0xe0 [ 87.639476][ T1874] ? __cfi_proc_pid_permission+0x10/0x10 [ 87.639506][ T1874] lookup_slow+0x57/0x80 [ 87.639534][ T1874] link_path_walk+0x991/0xeb0 [ 87.639560][ T1874] path_openat+0x298/0x35a0 [ 87.639592][ T1874] ? schedule+0xc5/0x240 [ 87.639617][ T1874] ? kasan_save_alloc_info+0x3a/0x50 [ 87.639639][ T1874] ? __kasan_slab_alloc+0x73/0x90 [ 87.639671][ T1874] ? getname+0x1b/0x30 [ 87.639698][ T1874] ? x64_sys_call+0xe69/0x2ee0 [ 87.639723][ T1874] ? do_syscall_64+0x57/0xf0 [ 87.639750][ T1874] ? do_filp_open+0x440/0x440 [ 87.639788][ T1874] do_filp_open+0x1f2/0x440 [ 87.639823][ T1874] ? __cfi_do_filp_open+0x10/0x10 [ 87.639860][ T1874] ? __cfi_kfree_link+0x10/0x10 [ 87.639899][ T1874] ? alloc_fd+0x4c1/0x570 [ 87.639930][ T1874] do_sys_openat2+0x134/0x1d0 [ 87.639965][ T1874] ? fput+0x1a4/0x230 [ 87.639998][ T1874] ? do_sys_open+0x100/0x100 [ 87.640037][ T1874] __x64_sys_openat+0x13a/0x170 [ 87.640075][ T1874] x64_sys_call+0xe69/0x2ee0 [ 87.640098][ T1874] do_syscall_64+0x57/0xf0 [ 87.640121][ T1874] ? clear_bhb_loop+0x50/0xa0 [ 87.640154][ T1874] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.640184][ T1874] RIP: 0033:0x7fd089d5e98e [ 87.640206][ T1874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.640229][ T1874] RSP: 002b:00007fd08ab85f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.640257][ T1874] RAX: ffffffffffffffda RBX: 00007fd08ab866c0 RCX: 00007fd089d5e98e [ 87.640276][ T1874] RDX: 0000000000000002 RSI: 00007fd089e34972 RDI: ffffffffffffff9c [ 87.640295][ T1874] RBP: 00007fd089e3506b R08: 0000000000000000 R09: 0000000000000000 [ 87.640312][ T1874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.640328][ T1874] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 87.640351][ T1874] [ 87.711051][ T45] usb 4-1: USB disconnect, device number 30 [ 87.998723][ T1883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 88.123590][ T1891] FAULT_INJECTION: forcing a failure. [ 88.123590][ T1891] name failslab, interval 1, probability 0, space 0, times 0 [ 88.136438][ T1891] CPU: 0 UID: 0 PID: 1891 Comm: syz.2.522 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 88.136474][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.136490][ T1891] Call Trace: [ 88.136499][ T1891] [ 88.136509][ T1891] __dump_stack+0x21/0x30 [ 88.136550][ T1891] dump_stack_lvl+0x140/0x1c0 [ 88.136584][ T1891] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.136619][ T1891] ? snprintf+0xe9/0x140 [ 88.136657][ T1891] dump_stack+0x19/0x20 [ 88.136690][ T1891] should_fail_ex+0x3c2/0x510 [ 88.136731][ T1891] ? traceprobe_set_print_fmt+0x6e/0x190 [ 88.136760][ T1891] should_failslab+0xac/0x100 [ 88.136790][ T1891] __kmalloc_noprof+0x69/0x510 [ 88.136815][ T1891] ? traceprobe_set_print_fmt+0x6e/0x190 [ 88.136843][ T1891] traceprobe_set_print_fmt+0x6e/0x190 [ 88.136871][ T1891] ? find_and_get_event+0x28e/0x2c0 [ 88.136896][ T1891] __trace_eprobe_create+0x9ac/0xda0 [ 88.136921][ T1891] ? do_syscall_64+0x57/0xf0 [ 88.136945][ T1891] ? __cfi___trace_eprobe_create+0x10/0x10 [ 88.136976][ T1891] ? kasan_save_alloc_info+0x3a/0x50 [ 88.136999][ T1891] ? __kmalloc_noprof+0x261/0x510 [ 88.137025][ T1891] ? argv_split+0x361/0x4a0 [ 88.137058][ T1891] trace_probe_create+0xdd/0x140 [ 88.137086][ T1891] ? __cfi___trace_eprobe_create+0x10/0x10 [ 88.137112][ T1891] ? __cfi_trace_probe_create+0x10/0x10 [ 88.137140][ T1891] ? mutex_lock+0x97/0x1d0 [ 88.137167][ T1891] ? __cfi_mutex_lock+0x10/0x10 [ 88.137194][ T1891] ? __cfi___check_object_size+0x10/0x10 [ 88.137221][ T1891] eprobe_dyn_event_create+0x20/0x30 [ 88.137245][ T1891] create_dyn_event+0xbf/0x160 [ 88.137269][ T1891] trace_parse_run_command+0x219/0x420 [ 88.137303][ T1891] ? __cfi_create_dyn_event+0x10/0x10 [ 88.137327][ T1891] dyn_event_write+0x38/0x50 [ 88.137350][ T1891] ? __cfi_dyn_event_write+0x10/0x10 [ 88.137373][ T1891] vfs_write+0x3c1/0xfd0 [ 88.137399][ T1891] ? __cfi_vfs_write+0x10/0x10 [ 88.137423][ T1891] ? __kasan_check_write+0x18/0x20 [ 88.137454][ T1891] ? mutex_lock+0x97/0x1d0 [ 88.137481][ T1891] ? __cfi_mutex_lock+0x10/0x10 [ 88.137511][ T1891] ksys_write+0x145/0x260 [ 88.137536][ T1891] ? __cfi_ksys_write+0x10/0x10 [ 88.137562][ T1891] ? __kasan_check_read+0x15/0x20 [ 88.137586][ T1891] __x64_sys_write+0x7f/0x90 [ 88.137611][ T1891] x64_sys_call+0x271c/0x2ee0 [ 88.137633][ T1891] do_syscall_64+0x57/0xf0 [ 88.137654][ T1891] ? clear_bhb_loop+0x50/0xa0 [ 88.137683][ T1891] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.137712][ T1891] RIP: 0033:0x7f9ab359e159 [ 88.137731][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.137752][ T1891] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.137777][ T1891] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 88.137795][ T1891] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 88.137811][ T1891] RBP: 00007f9ab4392090 R08: 0000000000000000 R09: 0000000000000000 [ 88.137827][ T1891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.137841][ T1891] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 88.137861][ T1891] [ 88.401681][ T341] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 88.502465][ T36] audit: type=1400 audit(1700000001.490:365): avc: denied { map } for pid=1892 comm="syz.3.524" path="socket:[16768]" dev="sockfs" ino=16768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.578808][ T36] audit: type=1400 audit(1700000001.490:366): avc: denied { accept } for pid=1892 comm="syz.3.524" path="socket:[16768]" dev="sockfs" ino=16768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.761525][ T341] usb 2-1: Using ep0 maxpacket: 8 [ 88.764108][ T1908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 88.772138][ T341] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 88.792068][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.801384][ T341] usb 2-1: Product: syz [ 88.811039][ T341] usb 2-1: Manufacturer: syz [ 88.818322][ T341] usb 2-1: SerialNumber: syz [ 89.045824][ T341] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.063264][ T341] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 89.078368][ T341] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 89.081619][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 89.098952][ T341] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.111742][ T341] usb 2-1: USB disconnect, device number 20 [ 89.127222][ T642] udevd[642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.241513][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 89.248426][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.256659][ T10] usb 5-1: config 0 has no interface number 0 [ 89.267236][ T1915] 9p: Unknown uid 00000000004294967295 [ 89.274439][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.283673][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.291880][ T10] usb 5-1: Product: syz [ 89.296312][ T10] usb 5-1: Manufacturer: syz [ 89.300978][ T10] usb 5-1: SerialNumber: syz [ 89.307049][ T10] usb 5-1: config 0 descriptor?? [ 89.313686][ T10] smsc95xx v2.0.0 [ 89.860981][ T1937] FAULT_INJECTION: forcing a failure. [ 89.860981][ T1937] name failslab, interval 1, probability 0, space 0, times 0 [ 89.891488][ T1937] CPU: 1 UID: 0 PID: 1937 Comm: syz.1.537 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 89.891531][ T1937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.891547][ T1937] Call Trace: [ 89.891557][ T1937] [ 89.891568][ T1937] __dump_stack+0x21/0x30 [ 89.891619][ T1937] dump_stack_lvl+0x140/0x1c0 [ 89.891664][ T1937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.891711][ T1937] dump_stack+0x19/0x20 [ 89.891751][ T1937] should_fail_ex+0x3c2/0x510 [ 89.891788][ T1937] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 89.891820][ T1937] should_failslab+0xac/0x100 [ 89.891859][ T1937] __kmalloc_noprof+0x69/0x510 [ 89.891892][ T1937] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 89.891922][ T1937] ? kasan_save_alloc_info+0x3a/0x50 [ 89.891954][ T1937] security_tun_dev_alloc_security+0x51/0x2b0 [ 89.891985][ T1937] tun_net_init+0x7b/0x400 [ 89.892021][ T1937] register_netdevice+0x3f6/0x1a80 [ 89.892054][ T1937] ? __kmalloc_cache_noprof+0x23c/0x470 [ 89.892089][ T1937] ? __cfi_register_netdevice+0x10/0x10 [ 89.892132][ T1937] ? alloc_netdev_mqs+0xd45/0x13d0 [ 89.892166][ T1937] tun_set_iff+0x828/0xec0 [ 89.892198][ T1937] __tun_chr_ioctl+0x852/0x1fb0 [ 89.892229][ T1937] ? tun_flow_create+0x400/0x400 [ 89.892276][ T1937] ? __fget_files+0x2bc/0x330 [ 89.892317][ T1937] tun_chr_ioctl+0x2e/0x40 [ 89.892349][ T1937] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 89.892379][ T1937] __se_sys_ioctl+0x123/0x1b0 [ 89.892417][ T1937] __x64_sys_ioctl+0x7f/0xa0 [ 89.892453][ T1937] x64_sys_call+0x1878/0x2ee0 [ 89.892482][ T1937] do_syscall_64+0x57/0xf0 [ 89.892511][ T1937] ? clear_bhb_loop+0x50/0xa0 [ 89.892568][ T1937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.892605][ T1937] RIP: 0033:0x7fd089d9e159 [ 89.892632][ T1937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.892659][ T1937] RSP: 002b:00007fd08ab86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.892693][ T1937] RAX: ffffffffffffffda RBX: 00007fd08a025fa0 RCX: 00007fd089d9e159 [ 89.892717][ T1937] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 89.892737][ T1937] RBP: 00007fd089e3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.892759][ T1937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.892778][ T1937] R13: 00007fd08a026038 R14: 00007fd08a025fa0 R15: 00007ffe237faf68 [ 89.892805][ T1937] [ 90.317978][ T1939] SELinux: failed to load policy [ 90.341437][ T36] audit: type=1400 audit(1700000002.540:367): avc: denied { load_policy } for pid=1910 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.431484][ T493] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 90.592451][ T493] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.605476][ T493] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 90.614891][ T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.623476][ T1950] 9p: Unknown uid 00000000004294967295 [ 90.628655][ T493] usb 2-1: Product: syz [ 90.638667][ T493] usb 2-1: Manufacturer: syz [ 90.648728][ T493] usb 2-1: SerialNumber: syz [ 90.665762][ T493] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 90.677894][ T493] cdc_wdm 2-1:1.0: Unknown control protocol [ 90.864263][ T36] audit: type=1400 audit(1700000003.090:368): avc: denied { read write } for pid=1940 comm="syz.1.538" name="cdc-wdm0" dev="devtmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.919482][ T36] audit: type=1400 audit(1700000003.090:369): avc: denied { open } for pid=1940 comm="syz.1.538" path="/dev/cdc-wdm0" dev="devtmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.964542][ T36] audit: type=1400 audit(1700000003.190:370): avc: denied { write } for pid=1962 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.281362][ T493] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 91.441358][ T493] usb 4-1: Using ep0 maxpacket: 32 [ 91.453170][ T493] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 91.461721][ T493] usb 4-1: config 0 has no interface number 0 [ 91.471078][ T493] usb 4-1: config 0 interface 184 has no altsetting 0 [ 91.487096][ T493] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 91.496435][ T493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.508836][ T493] usb 4-1: Product: syz [ 91.518500][ T493] usb 4-1: Manufacturer: syz [ 91.523334][ T493] usb 4-1: SerialNumber: syz [ 91.530405][ T493] usb 4-1: config 0 descriptor?? [ 91.538379][ T493] smsc75xx v1.0.0 [ 91.589414][ T1974] FAULT_INJECTION: forcing a failure. [ 91.589414][ T1974] name failslab, interval 1, probability 0, space 0, times 0 [ 91.611364][ T1974] CPU: 1 UID: 0 PID: 1974 Comm: syz.2.549 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 91.611402][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.611420][ T1974] Call Trace: [ 91.611430][ T1974] [ 91.611441][ T1974] __dump_stack+0x21/0x30 [ 91.611486][ T1974] dump_stack_lvl+0x140/0x1c0 [ 91.611521][ T1974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.611562][ T1974] dump_stack+0x19/0x20 [ 91.611599][ T1974] should_fail_ex+0x3c2/0x510 [ 91.611650][ T1974] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 91.611677][ T1974] should_failslab+0xac/0x100 [ 91.611712][ T1974] __kmalloc_noprof+0x69/0x510 [ 91.611742][ T1974] ? security_tun_dev_alloc_security+0x51/0x2b0 [ 91.611768][ T1974] ? kasan_save_alloc_info+0x3a/0x50 [ 91.611794][ T1974] security_tun_dev_alloc_security+0x51/0x2b0 [ 91.611822][ T1974] tun_net_init+0x7b/0x400 [ 91.611852][ T1974] register_netdevice+0x3f6/0x1a80 [ 91.611880][ T1974] ? __kmalloc_cache_noprof+0x23c/0x470 [ 91.611911][ T1974] ? __cfi_register_netdevice+0x10/0x10 [ 91.611939][ T1974] ? alloc_netdev_mqs+0xd45/0x13d0 [ 91.611971][ T1974] tun_set_iff+0x828/0xec0 [ 91.612001][ T1974] __tun_chr_ioctl+0x852/0x1fb0 [ 91.612031][ T1974] ? tun_flow_create+0x400/0x400 [ 91.612063][ T1974] ? __fget_files+0x2bc/0x330 [ 91.612098][ T1974] tun_chr_ioctl+0x2e/0x40 [ 91.612125][ T1974] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 91.612152][ T1974] __se_sys_ioctl+0x123/0x1b0 [ 91.612193][ T1974] __x64_sys_ioctl+0x7f/0xa0 [ 91.612230][ T1974] x64_sys_call+0x1878/0x2ee0 [ 91.612256][ T1974] do_syscall_64+0x57/0xf0 [ 91.612283][ T1974] ? clear_bhb_loop+0x50/0xa0 [ 91.612319][ T1974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.612352][ T1974] RIP: 0033:0x7f9ab359e159 [ 91.612375][ T1974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.612400][ T1974] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.612430][ T1974] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 91.612451][ T1974] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 91.612471][ T1974] RBP: 00007f9ab363506b R08: 0000000000000000 R09: 0000000000000000 [ 91.612489][ T1974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.612505][ T1974] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 91.612529][ T1974] [ 91.929946][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 91.963842][ T36] audit: type=1400 audit(1700000004.190:371): avc: denied { append } for pid=1979 comm="syz.4.552" name="sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.992061][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 92.001606][ T1980] Invalid argument reading file caps for ./file0 [ 92.008804][ T1980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.027410][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 92.058623][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 92.095116][ T10] usb 5-1: USB disconnect, device number 20 [ 92.142912][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 92.174228][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.238096][ T1990] 9pnet_fd: Insufficient options for proto=fd [ 92.244542][ T36] audit: type=1400 audit(1700000004.480:372): avc: denied { read } for pid=1987 comm="syz.4.554" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 92.272312][ T36] audit: type=1400 audit(1700000004.480:373): avc: denied { open } for pid=1987 comm="syz.4.554" path="/130/proc/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 92.343124][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 92.354511][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 92.365283][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 92.376380][ T36] audit: type=1400 audit(1700000004.610:374): avc: denied { bind } for pid=1995 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.379005][ T1996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 92.411354][ T493] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 92.420830][ T493] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 92.421523][ T36] audit: type=1400 audit(1700000004.610:375): avc: denied { setopt } for pid=1995 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.480512][ T1996] 9pnet_fd: Insufficient options for proto=fd [ 93.180733][ T493] usb 2-1: USB disconnect, device number 21 [ 93.355741][ T2018] FAULT_INJECTION: forcing a failure. [ 93.355741][ T2018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.383395][ T2018] CPU: 0 UID: 0 PID: 2018 Comm: syz.2.561 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 93.383428][ T2018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.383466][ T2018] Call Trace: [ 93.383475][ T2018] [ 93.383484][ T2018] __dump_stack+0x21/0x30 [ 93.383524][ T2018] dump_stack_lvl+0x140/0x1c0 [ 93.383556][ T2018] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.383600][ T2018] ? vsnprintf+0x7b4/0x1ad0 [ 93.383632][ T2018] ? check_stack_object+0x10f/0x150 [ 93.383657][ T2018] dump_stack+0x19/0x20 [ 93.383686][ T2018] should_fail_ex+0x3c2/0x510 [ 93.383731][ T2018] should_fail+0xf/0x20 [ 93.383757][ T2018] should_fail_usercopy+0x1e/0x30 [ 93.383790][ T2018] _copy_from_user+0x20/0xa0 [ 93.383823][ T2018] kstrtouint_from_user+0xde/0x170 [ 93.383851][ T2018] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 93.383878][ T2018] ? selinux_file_permission+0x318/0xb60 [ 93.383905][ T2018] ? __cfi_selinux_file_permission+0x10/0x10 [ 93.383930][ T2018] proc_fail_nth_write+0x8f/0x220 [ 93.383964][ T2018] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 93.383999][ T2018] ? bpf_lsm_file_permission+0xd/0x20 [ 93.384029][ T2018] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 93.384064][ T2018] vfs_write+0x3c1/0xfd0 [ 93.384089][ T2018] ? __cfi_vfs_write+0x10/0x10 [ 93.384113][ T2018] ? __kasan_check_write+0x18/0x20 [ 93.384136][ T2018] ? mutex_lock+0x97/0x1d0 [ 93.384163][ T2018] ? __cfi_mutex_lock+0x10/0x10 [ 93.384193][ T2018] ksys_write+0x145/0x260 [ 93.384217][ T2018] ? xfd_validate_state+0x68/0x140 [ 93.384249][ T2018] ? __cfi_ksys_write+0x10/0x10 [ 93.384275][ T2018] ? __kasan_check_read+0x15/0x20 [ 93.384299][ T2018] __x64_sys_write+0x7f/0x90 [ 93.384325][ T2018] x64_sys_call+0x271c/0x2ee0 [ 93.384346][ T2018] do_syscall_64+0x57/0xf0 [ 93.384368][ T2018] ? clear_bhb_loop+0x50/0xa0 [ 93.384397][ T2018] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.384426][ T2018] RIP: 0033:0x7f9ab355e98e [ 93.384453][ T2018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.384473][ T2018] RSP: 002b:00007f9ab4391fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.384499][ T2018] RAX: ffffffffffffffda RBX: 00007f9ab43926c0 RCX: 00007f9ab355e98e [ 93.384518][ T2018] RDX: 0000000000000001 RSI: 00007f9ab43920a0 RDI: 0000000000000006 [ 93.384534][ T2018] RBP: 00007f9ab4392090 R08: 0000000000000000 R09: 0000000000000000 [ 93.384550][ T2018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.384565][ T2018] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 93.384586][ T2018] [ 93.732222][ T2021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.760956][ T2021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.773302][ T36] audit: type=1400 audit(1700000006.000:376): avc: denied { ioctl } for pid=2020 comm="syz.2.562" path="net:[4026532481]" dev="nsfs" ino=4026532481 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.781261][ T493] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 93.951201][ T493] usb 2-1: Using ep0 maxpacket: 32 [ 93.958187][ T493] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.966871][ T493] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 93.975154][ T493] usb 2-1: config 0 has no interface number 0 [ 93.981664][ T493] usb 2-1: config 0 interface 185 has no altsetting 0 [ 93.990218][ T493] usb 2-1: New USB device found, idVendor=0403, idProduct=ea90, bcdDevice=27.a1 [ 93.999647][ T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.007848][ T493] usb 2-1: Product: syz [ 94.012262][ T493] usb 2-1: Manufacturer: syz [ 94.016921][ T493] usb 2-1: SerialNumber: syz [ 94.032705][ T493] usb 2-1: config 0 descriptor?? [ 94.081959][ T10] usb 4-1: USB disconnect, device number 31 [ 94.345033][ T2030] FAULT_INJECTION: forcing a failure. [ 94.345033][ T2030] name failslab, interval 1, probability 0, space 0, times 0 [ 94.391205][ T2030] CPU: 1 UID: 0 PID: 2030 Comm: syz.4.566 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 94.391243][ T2030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.391260][ T2030] Call Trace: [ 94.391268][ T2030] [ 94.391279][ T2030] __dump_stack+0x21/0x30 [ 94.391319][ T2030] dump_stack_lvl+0x140/0x1c0 [ 94.391355][ T2030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.391403][ T2030] dump_stack+0x19/0x20 [ 94.391436][ T2030] should_fail_ex+0x3c2/0x510 [ 94.391463][ T2030] ? x509_get_sig_params+0x250/0x6a0 [ 94.391487][ T2030] should_failslab+0xac/0x100 [ 94.391515][ T2030] __kmalloc_noprof+0x69/0x510 [ 94.391540][ T2030] ? x509_get_sig_params+0x250/0x6a0 [ 94.391564][ T2030] x509_get_sig_params+0x250/0x6a0 [ 94.391587][ T2030] x509_cert_parse+0x53e/0xbd0 [ 94.391621][ T2030] x509_key_preparse+0x6a/0x880 [ 94.391643][ T2030] ? __cfi_down_read+0x10/0x10 [ 94.391674][ T2030] asymmetric_key_preparse+0xb6/0x100 [ 94.391704][ T2030] __key_create_or_update+0x430/0xa90 [ 94.391725][ T2030] ? security_key_permission+0x3d/0x100 [ 94.391749][ T2030] ? key_create_or_update+0x70/0x70 [ 94.391769][ T2030] ? __kasan_kmalloc+0x96/0xb0 [ 94.391800][ T2030] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 94.391859][ T2030] key_create_or_update+0x47/0x70 [ 94.391882][ T2030] __se_sys_add_key+0x355/0x4b0 [ 94.391909][ T2030] ? __x64_sys_add_key+0xf0/0xf0 [ 94.391937][ T2030] ? __kasan_check_write+0x18/0x20 [ 94.391961][ T2030] ? fpregs_restore_userregs+0x11c/0x260 [ 94.391991][ T2030] __x64_sys_add_key+0xc3/0xf0 [ 94.392018][ T2030] x64_sys_call+0x195f/0x2ee0 [ 94.392040][ T2030] do_syscall_64+0x57/0xf0 [ 94.392063][ T2030] ? clear_bhb_loop+0x50/0xa0 [ 94.392093][ T2030] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.392121][ T2030] RIP: 0033:0x7fb38999e159 [ 94.392141][ T2030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.392163][ T2030] RSP: 002b:00007fb38a7d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 94.392190][ T2030] RAX: ffffffffffffffda RBX: 00007fb389c25fa0 RCX: 00007fb38999e159 [ 94.392209][ T2030] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 94.392226][ T2030] RBP: 00007fb389a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 94.392244][ T2030] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 94.392259][ T2030] R13: 00007fb389c26038 R14: 00007fb389c25fa0 R15: 00007ffcfe9bbe38 [ 94.392280][ T2030] [ 94.440671][ T493] ftdi_sio 2-1:0.185: FTDI USB Serial Device converter detected [ 94.718623][ T493] ftdi_sio ttyUSB1: unknown device type: 0x27a1 [ 94.733239][ T493] usb 2-1: USB disconnect, device number 22 [ 94.739883][ T493] ftdi_sio 2-1:0.185: device disconnected [ 94.821135][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 94.992523][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.000768][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 95.009443][ T10] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 95.020089][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.044327][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 95.055875][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.081113][ T10] usb 4-1: Product: syz [ 95.085351][ T10] usb 4-1: Manufacturer: syz [ 95.090103][ T10] usb 4-1: SerialNumber: syz [ 95.291138][ T493] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 95.307557][ T2035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.331146][ T2035] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 95.340313][ T2035] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 95.371107][ T2035] overlayfs: missing 'lowerdir' [ 95.471129][ T493] usb 5-1: Using ep0 maxpacket: 32 [ 95.479649][ T493] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.487948][ T711] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 95.501082][ T493] usb 5-1: config 0 has no interface number 0 [ 95.507229][ T493] usb 5-1: config 0 interface 184 has no altsetting 0 [ 95.531767][ T493] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.540864][ T493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.571083][ T493] usb 5-1: Product: syz [ 95.575330][ T493] usb 5-1: Manufacturer: syz [ 95.579965][ T493] usb 5-1: SerialNumber: syz [ 95.598566][ T493] usb 5-1: config 0 descriptor?? [ 95.612090][ T493] smsc75xx v1.0.0 [ 95.682188][ T711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.694350][ T711] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 95.716026][ T711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.725269][ T711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.745132][ T711] usb 2-1: Product: syz [ 95.759530][ T711] usb 2-1: Manufacturer: syz [ 95.764224][ T711] usb 2-1: SerialNumber: syz [ 95.775848][ T711] cdc_mbim 2-1:1.0: skipping garbage [ 95.843218][ T2069] FAULT_INJECTION: forcing a failure. [ 95.843218][ T2069] name failslab, interval 1, probability 0, space 0, times 0 [ 95.876218][ T2069] CPU: 1 UID: 0 PID: 2069 Comm: syz.2.578 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 95.876259][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.876275][ T2069] Call Trace: [ 95.876285][ T2069] [ 95.876296][ T2069] __dump_stack+0x21/0x30 [ 95.876340][ T2069] dump_stack_lvl+0x140/0x1c0 [ 95.876376][ T2069] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.876416][ T2069] dump_stack+0x19/0x20 [ 95.876452][ T2069] should_fail_ex+0x3c2/0x510 [ 95.876484][ T2069] ? x509_get_sig_params+0x250/0x6a0 [ 95.876510][ T2069] should_failslab+0xac/0x100 [ 95.876544][ T2069] __kmalloc_noprof+0x69/0x510 [ 95.876572][ T2069] ? x509_get_sig_params+0x250/0x6a0 [ 95.876598][ T2069] x509_get_sig_params+0x250/0x6a0 [ 95.876625][ T2069] x509_cert_parse+0x53e/0xbd0 [ 95.876673][ T2069] x509_key_preparse+0x6a/0x880 [ 95.876696][ T2069] ? __cfi_down_read+0x10/0x10 [ 95.876729][ T2069] asymmetric_key_preparse+0xb6/0x100 [ 95.876782][ T2069] __key_create_or_update+0x430/0xa90 [ 95.876819][ T2069] ? security_key_permission+0x3d/0x100 [ 95.876845][ T2069] ? key_create_or_update+0x70/0x70 [ 95.876885][ T2069] ? __kasan_kmalloc+0x96/0xb0 [ 95.876919][ T2069] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 95.876955][ T2069] key_create_or_update+0x47/0x70 [ 95.876979][ T2069] __se_sys_add_key+0x355/0x4b0 [ 95.877009][ T2069] ? __x64_sys_add_key+0xf0/0xf0 [ 95.877039][ T2069] ? __kasan_check_write+0x18/0x20 [ 95.877065][ T2069] ? fpregs_restore_userregs+0x11c/0x260 [ 95.877097][ T2069] __x64_sys_add_key+0xc3/0xf0 [ 95.877126][ T2069] x64_sys_call+0x195f/0x2ee0 [ 95.877158][ T2069] do_syscall_64+0x57/0xf0 [ 95.877182][ T2069] ? clear_bhb_loop+0x50/0xa0 [ 95.877216][ T2069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.877248][ T2069] RIP: 0033:0x7f9ab359e159 [ 95.877270][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.877295][ T2069] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.877324][ T2069] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 95.877344][ T2069] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 95.877362][ T2069] RBP: 00007f9ab363506b R08: ffffffffffffffff R09: 0000000000000000 [ 95.877381][ T2069] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 95.877397][ T2069] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 95.877420][ T2069] [ 95.975933][ T2059] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 96.377340][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 96.388333][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.396631][ T2058] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 96.405823][ T711] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 96.413273][ T711] wwan wwan0: port wwan0mbim0 attached [ 96.421654][ T711] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:23:1c:dd:18:2a [ 96.453912][ T711] usb 2-1: USB disconnect, device number 23 [ 96.460122][ T36] audit: type=1400 audit(1700000008.680:377): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 96.470684][ T711] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 96.481356][ T2080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.582'. [ 96.533512][ T36] audit: type=1400 audit(1700000008.680:378): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 96.556965][ T36] audit: type=1400 audit(1700000008.680:379): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.589200][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 96.602246][ T36] audit: type=1400 audit(1700000008.680:380): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=3505 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.624203][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 96.635651][ T711] wwan wwan0: port wwan0mbim0 disconnected [ 96.641745][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 96.663133][ T493] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 96.678720][ T493] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 96.777207][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 96.796515][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 96.822193][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 96.836037][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 96.852781][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 96.874841][ T10] usb 4-1: USB disconnect, device number 32 [ 96.950946][ T642] udevd[642]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.332053][ T2124] FAULT_INJECTION: forcing a failure. [ 97.332053][ T2124] name failslab, interval 1, probability 0, space 0, times 0 [ 97.346788][ T2123] netlink: 104 bytes leftover after parsing attributes in process `syz.3.587'. [ 97.360968][ T2124] CPU: 1 UID: 0 PID: 2124 Comm: syz.2.588 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 97.361006][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.361023][ T2124] Call Trace: [ 97.361034][ T2124] [ 97.361045][ T2124] __dump_stack+0x21/0x30 [ 97.361092][ T2124] dump_stack_lvl+0x140/0x1c0 [ 97.361130][ T2124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.361170][ T2124] ? crypto_shash_init_tfm+0x1ef/0x350 [ 97.361214][ T2124] dump_stack+0x19/0x20 [ 97.361249][ T2124] should_fail_ex+0x3c2/0x510 [ 97.361283][ T2124] ? x509_get_sig_params+0x1fe/0x6a0 [ 97.361311][ T2124] should_failslab+0xac/0x100 [ 97.361345][ T2124] __kmalloc_noprof+0x69/0x510 [ 97.361374][ T2124] ? x509_get_sig_params+0x1fe/0x6a0 [ 97.361403][ T2124] x509_get_sig_params+0x1fe/0x6a0 [ 97.361431][ T2124] x509_cert_parse+0x53e/0xbd0 [ 97.361472][ T2124] x509_key_preparse+0x6a/0x880 [ 97.361499][ T2124] ? __cfi_down_read+0x10/0x10 [ 97.361535][ T2124] asymmetric_key_preparse+0xb6/0x100 [ 97.361572][ T2124] __key_create_or_update+0x430/0xa90 [ 97.361598][ T2124] ? security_key_permission+0x3d/0x100 [ 97.361627][ T2124] ? key_create_or_update+0x70/0x70 [ 97.361652][ T2124] ? __kasan_kmalloc+0x96/0xb0 [ 97.361689][ T2124] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 97.361729][ T2124] key_create_or_update+0x47/0x70 [ 97.361765][ T2124] __se_sys_add_key+0x355/0x4b0 [ 97.361796][ T2124] ? __x64_sys_add_key+0xf0/0xf0 [ 97.361829][ T2124] ? __kasan_check_write+0x18/0x20 [ 97.361857][ T2124] ? fpregs_restore_userregs+0x11c/0x260 [ 97.361892][ T2124] __x64_sys_add_key+0xc3/0xf0 [ 97.361923][ T2124] x64_sys_call+0x195f/0x2ee0 [ 97.361950][ T2124] do_syscall_64+0x57/0xf0 [ 97.361975][ T2124] ? clear_bhb_loop+0x50/0xa0 [ 97.362010][ T2124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.362042][ T2124] RIP: 0033:0x7f9ab359e159 [ 97.362066][ T2124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.362087][ T2124] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 97.362117][ T2124] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 97.362139][ T2124] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 97.362159][ T2124] RBP: 00007f9ab363506b R08: ffffffffffffffff R09: 0000000000000000 [ 97.362179][ T2124] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 97.362198][ T2124] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 97.362223][ T2124] [ 97.704275][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 97.704296][ T36] audit: type=1400 audit(1700000009.930:393): avc: denied { append } for pid=2132 comm="syz.3.592" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.870882][ T2143] cgroup2: Unknown parameter 'memory°ľK' [ 97.959356][ T2148] netlink: 104 bytes leftover after parsing attributes in process `syz.2.597'. [ 98.071859][ T10] usb 5-1: USB disconnect, device number 21 [ 98.569547][ T2169] kvm: kvm [2168]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 98.589182][ T2169] kvm: kvm [2168]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 98.691078][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 98.819678][ T36] audit: type=1326 audit(1700000011.040:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2175 comm="syz.4.608" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb38999e159 code=0x0 [ 98.882038][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 98.892072][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 98.919719][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 98.929812][ T711] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 98.946079][ T10] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 98.955404][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.971968][ T10] usb 2-1: Product: syz [ 98.976326][ T10] usb 2-1: Manufacturer: syz [ 98.981388][ T10] usb 2-1: SerialNumber: syz [ 98.990914][ T2166] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.000380][ T2166] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.025481][ T10] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 99.050484][ T10] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 99.073062][ T10] usbserial_generic 2-1:1.0: generic converter detected [ 99.100881][ T711] usb 4-1: Using ep0 maxpacket: 32 [ 99.108310][ T10] usb 2-1: generic converter now attached to ttyUSB1 [ 99.120707][ T711] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.132080][ T711] usb 4-1: config 0 has no interface number 0 [ 99.138197][ T711] usb 4-1: config 0 interface 184 has no altsetting 0 [ 99.173545][ T711] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.190841][ T711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.209045][ T711] usb 4-1: Product: syz [ 99.214388][ T711] usb 4-1: Manufacturer: syz [ 99.219012][ T711] usb 4-1: SerialNumber: syz [ 99.231664][ T2165] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 99.236473][ T711] usb 4-1: config 0 descriptor?? [ 99.245795][ T2165] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 99.256360][ T711] smsc75xx v1.0.0 [ 99.261455][ T2165] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 99.293395][ T2166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.310995][ T2166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.390295][ T2193] incfs_lookup_dentry err:-107 [ 99.397196][ T2193] incfs: Can't find or create .index dir in ./file0 [ 99.403960][ T2193] incfs: mount failed -107 [ 99.655004][ T36] audit: type=1400 audit(1700000011.880:395): avc: denied { mounton } for pid=2209 comm="syz.2.616" path="/210/file0" dev="tmpfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.732198][ T2210] incfs: Error accessing: ./file0. [ 99.733311][ T36] audit: type=1400 audit(1700000011.960:396): avc: denied { mounton } for pid=2209 comm="syz.2.616" path="/210/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 99.750047][ T2210] incfs: mount failed -20 [ 99.840999][ T2216] FAULT_INJECTION: forcing a failure. [ 99.840999][ T2216] name failslab, interval 1, probability 0, space 0, times 0 [ 99.857379][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 99.870551][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.870952][ T2216] CPU: 1 UID: 0 PID: 2216 Comm: syz.2.617 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 99.871043][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.871085][ T2216] Call Trace: [ 99.871106][ T2216] [ 99.871134][ T2216] __dump_stack+0x21/0x30 [ 99.871234][ T2216] dump_stack_lvl+0x140/0x1c0 [ 99.871331][ T2216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.871418][ T2216] dump_stack+0x19/0x20 [ 99.871501][ T2216] should_fail_ex+0x3c2/0x510 [ 99.871573][ T2216] should_failslab+0xac/0x100 [ 99.871657][ T2216] __kmalloc_cache_noprof+0x41/0x470 [ 99.871727][ T2216] ? register_netdevice+0x2c4/0x1a80 [ 99.871801][ T2216] register_netdevice+0x2c4/0x1a80 [ 99.871877][ T2216] ? __kmalloc_cache_noprof+0x23c/0x470 [ 99.871941][ T2216] ? alloc_netdev_mqs+0xc3d/0x13d0 [ 99.872013][ T2216] ? tun_net_initialize+0x183/0x430 [ 99.872100][ T2216] ? __cfi_register_netdevice+0x10/0x10 [ 99.872188][ T2216] ? alloc_netdev_mqs+0xd45/0x13d0 [ 99.872266][ T2216] tun_set_iff+0x828/0xec0 [ 99.872345][ T2216] __tun_chr_ioctl+0x852/0x1fb0 [ 99.872416][ T2216] ? tun_flow_create+0x400/0x400 [ 99.872487][ T2216] ? __fget_files+0x2bc/0x330 [ 99.872567][ T2216] tun_chr_ioctl+0x2e/0x40 [ 99.872630][ T2216] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 99.872691][ T2216] __se_sys_ioctl+0x123/0x1b0 [ 99.872769][ T2216] __x64_sys_ioctl+0x7f/0xa0 [ 99.872841][ T2216] x64_sys_call+0x1878/0x2ee0 [ 99.872893][ T2216] do_syscall_64+0x57/0xf0 [ 99.872953][ T2216] ? clear_bhb_loop+0x50/0xa0 [ 99.873026][ T2216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.873098][ T2216] RIP: 0033:0x7f9ab359e159 [ 99.873147][ T2216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.873205][ T2216] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.873282][ T2216] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 99.873325][ T2216] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 99.873373][ T2216] RBP: 00007f9ab363506b R08: 0000000000000000 R09: 0000000000000000 [ 99.873415][ T2216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.873456][ T2216] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 99.873534][ T2216] [ 100.120859][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 100.141890][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 100.160795][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 100.180815][ T711] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 100.190275][ T711] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 100.278705][ T2222] loop2: detected capacity change from 0 to 7 [ 100.313021][ T2220] bpf: Bad value for 'gid' [ 100.534298][ T36] audit: type=1400 audit(1700000012.760:397): avc: denied { cmd } for pid=2231 comm="iou-wrk-2232" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 100.646797][ T2237] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.901070][ T2250] FAULT_INJECTION: forcing a failure. [ 100.901070][ T2250] name failslab, interval 1, probability 0, space 0, times 0 [ 101.023849][ T2250] CPU: 1 UID: 0 PID: 2250 Comm: syz.2.627 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 101.023888][ T2250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.023904][ T2250] Call Trace: [ 101.023912][ T2250] [ 101.023922][ T2250] __dump_stack+0x21/0x30 [ 101.023962][ T2250] dump_stack_lvl+0x140/0x1c0 [ 101.023997][ T2250] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.024033][ T2250] dump_stack+0x19/0x20 [ 101.024065][ T2250] should_fail_ex+0x3c2/0x510 [ 101.024094][ T2250] ? x509_get_sig_params+0x250/0x6a0 [ 101.024119][ T2250] should_failslab+0xac/0x100 [ 101.024150][ T2250] __kmalloc_noprof+0x69/0x510 [ 101.024175][ T2250] ? x509_get_sig_params+0x250/0x6a0 [ 101.024200][ T2250] x509_get_sig_params+0x250/0x6a0 [ 101.024237][ T2250] x509_cert_parse+0x53e/0xbd0 [ 101.024274][ T2250] x509_key_preparse+0x6a/0x880 [ 101.024296][ T2250] ? __cfi_down_read+0x10/0x10 [ 101.024330][ T2250] asymmetric_key_preparse+0xb6/0x100 [ 101.024374][ T2250] __key_create_or_update+0x430/0xa90 [ 101.024396][ T2250] ? security_key_permission+0x3d/0x100 [ 101.024424][ T2250] ? key_create_or_update+0x70/0x70 [ 101.024446][ T2250] ? __kasan_kmalloc+0x96/0xb0 [ 101.024480][ T2250] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 101.024516][ T2250] key_create_or_update+0x47/0x70 [ 101.024539][ T2250] __se_sys_add_key+0x355/0x4b0 [ 101.024568][ T2250] ? __x64_sys_add_key+0xf0/0xf0 [ 101.024597][ T2250] ? __kasan_check_write+0x18/0x20 [ 101.024621][ T2250] ? fpregs_restore_userregs+0x11c/0x260 [ 101.024653][ T2250] __x64_sys_add_key+0xc3/0xf0 [ 101.024681][ T2250] x64_sys_call+0x195f/0x2ee0 [ 101.024705][ T2250] do_syscall_64+0x57/0xf0 [ 101.024726][ T2250] ? clear_bhb_loop+0x50/0xa0 [ 101.024757][ T2250] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.024786][ T2250] RIP: 0033:0x7f9ab359e159 [ 101.024807][ T2250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.024830][ T2250] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 101.024857][ T2250] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 101.024876][ T2250] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.024912][ T2250] RBP: 00007f9ab363506b R08: ffffffffffffffff R09: 0000000000000000 [ 101.024932][ T2250] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 101.024949][ T2250] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 101.024972][ T2250] [ 101.482961][ T2186] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 101.489942][ T2186] ftdi_sio ttyUSB0: error from flowcontrol urb [ 101.503313][ T711] usb 2-1: USB disconnect, device number 24 [ 101.513235][ T711] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 101.542348][ T711] usbserial_generic 2-1:1.0: device disconnected [ 101.563459][ T2269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 101.734425][ T10] usb 4-1: USB disconnect, device number 33 [ 101.865066][ T2283] FAULT_INJECTION: forcing a failure. [ 101.865066][ T2283] name failslab, interval 1, probability 0, space 0, times 0 [ 101.898272][ T2283] CPU: 0 UID: 0 PID: 2283 Comm: syz.2.637 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 101.898316][ T2283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.898335][ T2283] Call Trace: [ 101.898345][ T2283] [ 101.898356][ T2283] __dump_stack+0x21/0x30 [ 101.898407][ T2283] dump_stack_lvl+0x140/0x1c0 [ 101.898446][ T2283] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.898485][ T2283] ? __kasan_check_write+0x18/0x20 [ 101.898513][ T2283] ? rwsem_read_trylock+0x275/0x5a0 [ 101.898555][ T2283] dump_stack+0x19/0x20 [ 101.898626][ T2283] should_fail_ex+0x3c2/0x510 [ 101.898660][ T2283] should_failslab+0xac/0x100 [ 101.898694][ T2283] __kmalloc_node_noprof+0x69/0x500 [ 101.898724][ T2283] ? crypto_create_tfm_node+0xa0/0x4d0 [ 101.898751][ T2283] ? __kasan_check_write+0x18/0x20 [ 101.898778][ T2283] ? up_read+0x26/0x1c0 [ 101.898817][ T2283] crypto_create_tfm_node+0xa0/0x4d0 [ 101.898845][ T2283] crypto_alloc_tfm_node+0x166/0x350 [ 101.898872][ T2283] ? kmemdup_noprof+0x5b/0x80 [ 101.898897][ T2283] crypto_alloc_shash+0x34/0x40 [ 101.898937][ T2283] x509_get_sig_params+0x110/0x6a0 [ 101.898966][ T2283] x509_cert_parse+0x53e/0xbd0 [ 101.899006][ T2283] x509_key_preparse+0x6a/0x880 [ 101.899033][ T2283] ? __cfi_down_read+0x10/0x10 [ 101.899068][ T2283] asymmetric_key_preparse+0xb6/0x100 [ 101.899105][ T2283] __key_create_or_update+0x430/0xa90 [ 101.899130][ T2283] ? security_key_permission+0x3d/0x100 [ 101.899159][ T2283] ? key_create_or_update+0x70/0x70 [ 101.899184][ T2283] ? __kasan_kmalloc+0x96/0xb0 [ 101.899220][ T2283] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 101.899259][ T2283] key_create_or_update+0x47/0x70 [ 101.899284][ T2283] __se_sys_add_key+0x355/0x4b0 [ 101.899315][ T2283] ? __x64_sys_add_key+0xf0/0xf0 [ 101.899347][ T2283] ? __kasan_check_write+0x18/0x20 [ 101.899374][ T2283] ? fpregs_restore_userregs+0x11c/0x260 [ 101.899407][ T2283] __x64_sys_add_key+0xc3/0xf0 [ 101.899438][ T2283] x64_sys_call+0x195f/0x2ee0 [ 101.899462][ T2283] do_syscall_64+0x57/0xf0 [ 101.899487][ T2283] ? clear_bhb_loop+0x50/0xa0 [ 101.899522][ T2283] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.899554][ T2283] RIP: 0033:0x7f9ab359e159 [ 101.899585][ T2283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.899609][ T2283] RSP: 002b:00007f9ab4392028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 101.899640][ T2283] RAX: ffffffffffffffda RBX: 00007f9ab3825fa0 RCX: 00007f9ab359e159 [ 101.899661][ T2283] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.899680][ T2283] RBP: 00007f9ab363506b R08: ffffffffffffffff R09: 0000000000000000 [ 101.899700][ T2283] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 101.899717][ T2283] R13: 00007f9ab3826038 R14: 00007f9ab3825fa0 R15: 00007ffd262a0898 [ 101.899742][ T2283] [ 102.010745][ T341] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 102.245268][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 102.350660][ T341] usb 2-1: device descriptor read/64, error -71 [ 102.378429][ T2289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 102.390739][ T10] usb 4-1: device descriptor read/64, error -71 [ 102.485613][ T2297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.494965][ T2297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.590655][ T341] usb 2-1: device descriptor read/64, error -71 [ 102.612852][ T2302] FAULT_INJECTION: forcing a failure. [ 102.612852][ T2302] name failslab, interval 1, probability 0, space 0, times 0 [ 102.626406][ T2302] CPU: 0 UID: 0 PID: 2302 Comm: syz.4.646 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 102.626447][ T2302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.626466][ T2302] Call Trace: [ 102.626475][ T2302] [ 102.626485][ T2302] __dump_stack+0x21/0x30 [ 102.626550][ T2302] dump_stack_lvl+0x140/0x1c0 [ 102.626589][ T2302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.626631][ T2302] dump_stack+0x19/0x20 [ 102.626668][ T2302] should_fail_ex+0x3c2/0x510 [ 102.626702][ T2302] ? x509_get_sig_params+0x250/0x6a0 [ 102.626730][ T2302] should_failslab+0xac/0x100 [ 102.626765][ T2302] __kmalloc_noprof+0x69/0x510 [ 102.626794][ T2302] ? x509_get_sig_params+0x250/0x6a0 [ 102.626822][ T2302] x509_get_sig_params+0x250/0x6a0 [ 102.626851][ T2302] x509_cert_parse+0x53e/0xbd0 [ 102.626891][ T2302] x509_key_preparse+0x6a/0x880 [ 102.626929][ T2302] ? __cfi_down_read+0x10/0x10 [ 102.626965][ T2302] asymmetric_key_preparse+0xb6/0x100 [ 102.627001][ T2302] __key_create_or_update+0x430/0xa90 [ 102.627035][ T2302] ? security_key_permission+0x3d/0x100 [ 102.627063][ T2302] ? key_create_or_update+0x70/0x70 [ 102.627088][ T2302] ? __kasan_kmalloc+0x96/0xb0 [ 102.627141][ T2302] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 102.627181][ T2302] key_create_or_update+0x47/0x70 [ 102.627206][ T2302] __se_sys_add_key+0x355/0x4b0 [ 102.627237][ T2302] ? __x64_sys_add_key+0xf0/0xf0 [ 102.627268][ T2302] ? __kasan_check_write+0x18/0x20 [ 102.627296][ T2302] ? fpregs_restore_userregs+0x11c/0x260 [ 102.627331][ T2302] __x64_sys_add_key+0xc3/0xf0 [ 102.627361][ T2302] x64_sys_call+0x195f/0x2ee0 [ 102.627386][ T2302] do_syscall_64+0x57/0xf0 [ 102.627410][ T2302] ? clear_bhb_loop+0x50/0xa0 [ 102.627444][ T2302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.627475][ T2302] RIP: 0033:0x7fb38999e159 [ 102.627496][ T2302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.627520][ T2302] RSP: 002b:00007fb38a7d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 102.627549][ T2302] RAX: ffffffffffffffda RBX: 00007fb389c25fa0 RCX: 00007fb38999e159 [ 102.627571][ T2302] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 102.627591][ T2302] RBP: 00007fb389a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 102.627612][ T2302] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 102.627630][ T2302] R13: 00007fb389c26038 R14: 00007fb389c25fa0 R15: 00007ffcfe9bbe38 [ 102.627655][ T2302] [ 102.831001][ T341] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 102.838100][ T10] usb 4-1: device descriptor read/64, error -71 [ 102.990640][ T341] usb 2-1: device descriptor read/64, error -71 [ 103.130630][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 103.140737][ T711] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 103.260607][ T341] usb 2-1: device descriptor read/64, error -71 [ 103.260607][ T10] usb 4-1: device descriptor read/64, error -71 [ 103.300582][ T711] usb 5-1: Using ep0 maxpacket: 32 [ 103.313492][ T711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.321963][ T711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.335449][ T711] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.348131][ T711] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.374284][ T711] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 103.383449][ T711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.390929][ T341] usb usb2-port1: attempt power cycle [ 103.391670][ T711] usb 5-1: Product: syz [ 103.401081][ T711] usb 5-1: Manufacturer: syz [ 103.405716][ T711] usb 5-1: SerialNumber: syz [ 103.500588][ T10] usb 4-1: device descriptor read/64, error -71 [ 103.610750][ T10] usb usb4-port1: attempt power cycle [ 103.645055][ T2304] kvm: kvm [2303]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 103.706334][ T711] usb 5-1: USB disconnect, device number 22 [ 103.716532][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.760559][ T341] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 103.781656][ T341] usb 2-1: device descriptor read/8, error -71 [ 103.921712][ T341] usb 2-1: device descriptor read/8, error -71 [ 103.950567][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 103.971656][ T10] usb 4-1: device descriptor read/8, error -71 [ 104.101652][ T10] usb 4-1: device descriptor read/8, error -71 [ 104.170568][ T341] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 104.191674][ T341] usb 2-1: device descriptor read/8, error -71 [ 104.331580][ T341] usb 2-1: device descriptor read/8, error -71 [ 104.341007][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 104.381374][ T36] audit: type=1400 audit(1700000003.000:398): avc: denied { map } for pid=2311 comm="syz.4.650" path="/proc/487/fdinfo" dev="proc" ino=20780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.391794][ T10] usb 4-1: device descriptor read/8, error -71 [ 104.469498][ T341] usb usb2-port1: unable to enumerate USB device [ 104.551559][ T10] usb 4-1: device descriptor read/8, error -71 [ 104.665116][ T10] usb usb4-port1: unable to enumerate USB device [ 104.679309][ T2334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 104.865668][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 104.979030][ T36] audit: type=1400 audit(1700000001.100:399): avc: denied { read } for pid=2347 comm="syz.3.660" name="protocol" dev="configfs" ino=21794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 105.080725][ T36] audit: type=1400 audit(1700000001.100:400): avc: denied { create } for pid=2347 comm="syz.3.660" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 105.160586][ T36] audit: type=1400 audit(1700000001.160:401): avc: denied { create } for pid=2356 comm="syz.1.662" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.210514][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.228276][ T36] audit: type=1400 audit(1700000001.180:402): avc: denied { write } for pid=2356 comm="syz.1.662" name="file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.262697][ T36] audit: type=1400 audit(1700000001.180:403): avc: denied { open } for pid=2356 comm="syz.1.662" path="/98/file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.311732][ T36] audit: type=1400 audit(1700000001.180:404): avc: denied { read } for pid=2356 comm="syz.1.662" name="file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.340372][ T36] audit: type=1400 audit(1700000001.180:405): avc: denied { ioctl } for pid=2356 comm="syz.1.662" path="/98/file2" dev="tmpfs" ino=602 ioctlcmd=0x4c09 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.370870][ T36] audit: type=1400 audit(1700000001.180:406): avc: denied { setattr } for pid=2356 comm="syz.1.662" path="/98/file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.426219][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.436211][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.450485][ T36] audit: type=1400 audit(1700000001.190:407): avc: denied { mount } for pid=2356 comm="syz.1.662" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.490830][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 105.497049][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 105.507275][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.521462][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 105.530959][ C0] ------------[ cut here ]------------ [ 105.536461][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 105.543353][ C0] WARNING: CPU: 0 PID: 2326 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x210/0x3c0 [ 105.553379][ C0] Modules linked in: [ 105.557297][ C0] CPU: 0 UID: 0 PID: 2326 Comm: syz.4.650 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d [ 105.568875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.578967][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 105.584394][ C0] Code: 4d 00 48 c7 c0 e0 63 6d 86 49 c7 c0 00 64 6d 86 4c 0f 44 c0 48 c7 c7 a0 63 6d 86 48 c7 c6 9d 67 1d 87 44 89 f2 e8 80 30 4b fd <0f> 0b e9 4c ff ff ff e8 a4 60 ce fd 49 bc 00 00 00 00 00 fc ff df [ 105.604041][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 105.610143][ C0] RAX: e8cd111d4dc2b200 RBX: ffff888102b780b0 RCX: ffff88811def8000 [ 105.618161][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 105.626194][ C0] RBP: ffffc900000078a0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 105.634210][ C0] R10: dffffc0000000000 R11: ffffed103edc529b R12: dffffc0000000000 [ 105.642228][ C0] R13: ffff888102b780b8 R14: 0000000000000081 R15: ffff88811d4c68ba [ 105.650238][ C0] FS: 00007fb387d476c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 105.659194][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.665823][ C0] CR2: 00007fb389d50300 CR3: 0000000131766000 CR4: 00000000003526b0 [ 105.673833][ C0] Call Trace: [ 105.677140][ C0] [ 105.680096][ C0] hidg_set_alt+0x138/0xa70 [ 105.684650][ C0] set_config+0x80f/0xd10 [ 105.689024][ C0] composite_setup+0x1885/0x32f0 [ 105.694012][ C0] ? __kasan_check_write+0x18/0x20 [ 105.699172][ C0] configfs_composite_setup+0xc6/0x110 [ 105.704711][ C0] dummy_timer+0x2eeb/0x4900 [ 105.709340][ C0] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 105.715540][ C0] ? probe_sched_wakeup+0x62/0x90 [ 105.720606][ C0] ? ttwu_do_activate+0x5a8/0x620 [ 105.725683][ C0] ? try_to_wake_up+0x111a/0x1fd0 [ 105.730755][ C0] ? psi_account_irqtime+0x307/0x9a0 [ 105.736086][ C0] ? run_posix_cpu_timers+0x2d1/0x620 [ 105.741493][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 105.746480][ C0] ? timerqueue_del+0xd7/0x130 [ 105.751282][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 105.756690][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 105.761662][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 105.766910][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 105.772066][ C0] ? read_tsc+0xd/0x20 [ 105.776175][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 105.782286][ C0] hrtimer_run_softirq+0x159/0x560 [ 105.787428][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 105.792667][ C0] handle_softirqs+0x1aa/0x620 [ 105.797463][ C0] __irq_exit_rcu+0x47/0xb0 [ 105.802022][ C0] irq_exit_rcu+0xd/0x30 [ 105.806338][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 105.812037][ C0] [ 105.815042][ C0] [ 105.818013][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 105.824041][ C0] RIP: 0010:shmem_write_end+0x38d/0x410 [ 105.829646][ C0] Code: ff 31 ff 89 de e8 33 a1 be ff 84 db 74 0f e8 2a 9e be ff 4c 89 f7 e8 52 fa f9 ff eb 05 e8 1b 9e be ff 44 89 f8 48 83 c4 18 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ff 9d be ff be 00 [ 105.849297][ C0] RSP: 0018:ffffc9000b89f0a8 EFLAGS: 00000296 [ 105.855419][ C0] RAX: 0000000000001000 RBX: ffffffff8634b7f0 RCX: ffff88811def8000 [ 105.863442][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.871529][ C0] RBP: ffffc9000b89f0c8 R08: ffffea0004e16af7 R09: 1ffffd40009c2d5e [ 105.879535][ C0] R10: dffffc0000000000 R11: fffff940009c2d5f R12: dffffc0000000000 [ 105.887546][ C0] R13: 1ffffd40009c2d58 R14: ffffea0004e16ac0 R15: 0000000000001000 [ 105.895649][ C0] generic_perform_write+0x5d9/0x970 [ 105.900992][ C0] ? __cfi_generic_perform_write+0x10/0x10 [ 105.906861][ C0] ? generic_write_checks_count+0x426/0x540 [ 105.912797][ C0] ? file_update_time+0xa3/0x210 [ 105.917767][ C0] shmem_file_write_iter+0x105/0x130 [ 105.923092][ C0] __kernel_write_iter+0x462/0x900 [ 105.928247][ C0] ? __cfi___kernel_write_iter+0x10/0x10 [ 105.933917][ C0] ? get_dump_page+0x165/0x220 [ 105.938714][ C0] ? __asan_memset+0x39/0x50 [ 105.943345][ C0] ? iov_iter_bvec+0xc0/0x180 [ 105.948073][ C0] dump_user_range+0xb8b/0xe60 [ 105.952876][ C0] ? __cfi_dump_user_range+0x10/0x10 [ 105.958200][ C0] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 105.964587][ C0] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 105.971221][ C0] ? elf_core_dump+0x23cf/0x3840 [ 105.976196][ C0] elf_core_dump+0x2d61/0x3840 [ 105.981012][ C0] ? __cfi_elf_core_dump+0x10/0x10 [ 105.986163][ C0] ? mas_next_slot+0xf01/0xfd0 [ 105.991000][ C0] ? dump_interrupted+0xf0/0xf0 [ 105.995886][ C0] ? filp_open+0x199/0x1f0 [ 106.000349][ C0] ? 0xffffffffff600000 [ 106.004535][ C0] do_coredump+0x20d2/0x3050 [ 106.009168][ C0] ? __cfi_do_coredump+0x10/0x10 [ 106.014139][ C0] ? asm_exc_page_fault+0x2b/0x30 [ 106.019219][ C0] ? __kasan_slab_free+0x6a/0x80 [ 106.024197][ C0] ? get_signal+0xa2a/0x1490 [ 106.028825][ C0] get_signal+0x11bf/0x1490 [ 106.033395][ C0] arch_do_signal_or_restart+0xbc/0x700 [ 106.038987][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 106.045174][ C0] ? __kasan_check_read+0x15/0x20 [ 106.050214][ C0] irqentry_exit_to_user_mode+0x4d/0xb0 [ 106.055779][ C0] irqentry_exit+0x16/0x60 [ 106.060217][ C0] exc_page_fault+0x65/0xc0 [ 106.064733][ C0] asm_exc_page_fault+0x2b/0x30 [ 106.069600][ C0] RIP: 0033:0x7fb389853bd0 [ 106.074030][ C0] Code: Unable to access opcode bytes at 0x7fb389853ba6. [ 106.081058][ C0] RSP: 002b:00007fb387d28178 EFLAGS: 00010206 [ 106.087140][ C0] RAX: 0000000000000000 RBX: 00007fb389c26180 RCX: 00007fb38999e159 [ 106.095122][ C0] RDX: 00007fb387d28180 RSI: 00007fb387d282b0 RDI: 000000000000000b [ 106.103103][ C0] RBP: 00007fb389a3506b R08: 0000000000000000 R09: 0000000000000000 [ 106.111083][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.119068][ C0] R13: 00007fb389c26218 R14: 00007fb389c26180 R15: 00007ffcfe9bbe38 [ 106.127050][ C0] [ 106.130075][ C0] ---[ end trace 0000000000000000 ]--- [ 106.135547][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 106.144302][ T10] usb 1-1: can't set config #1, error -32 [ 106.174087][ T2381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 106.460410][ T711] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 106.610397][ T711] usb 5-1: Using ep0 maxpacket: 16 [ 106.616824][ T711] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.624911][ T711] usb 5-1: config 0 has no interface number 0 [ 106.631042][ T711] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.641946][ T711] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.653003][ T711] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 106.662148][ T711] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 106.670245][ T711] usb 5-1: Product: syz [ 106.674440][ T711] usb 5-1: SerialNumber: syz [ 106.680484][ T711] usb 5-1: config 0 descriptor?? [ 108.453184][ T711] usb 5-1: USB disconnect, device number 23