last executing test programs: 1m50.358791592s ago: executing program 3 (id=135): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0x30, 0x3, "11b626"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r2, r2, 0x0) setreuid(r2, 0x0) pipe(0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x44, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_connect$uac1(0x3, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902710003010940000904000000010100000a240105000a000201020904010000010200000904010101010200000a2402024a060000ff0a072401098c021009050109ff030509020725010c020000090401fc"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ftruncate(r0, 0x7) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0xc000, 0xfffffffe, 0x3cb}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4705, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x200000, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x5, 0x1, 0x77, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0xfffffffe, 0xffffffff}}], 0x1, 0x0, 0x0) 1m50.116288549s ago: executing program 3 (id=141): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffe44, 0x0, 0x0, 0xffffffffffffff3f) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x7}, 0x14}}, 0x40000) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x80}}, 0x4008000) brk(0x2000000db002) brk(0xaaa) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000), 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)=0x4) 1m50.037981497s ago: executing program 32 (id=141): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffe44, 0x0, 0x0, 0xffffffffffffff3f) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x7}, 0x14}}, 0x40000) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x80}}, 0x4008000) brk(0x2000000db002) brk(0xaaa) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000), 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)=0x4) 1m49.095089179s ago: executing program 33 (id=5): clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x200000000000000, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) 1m32.775750975s ago: executing program 34 (id=160): socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f0000000280)=ANY=[@ANYBLOB="120150020000030107000b080b010101ff20050000000000010120000924010180081500070c240305ff01070200ec000609040100000102200009040101010102200006240201023e102401050103030000000309000000cd09050109000224ff0e082501810c02feff09040210000102200009040201010102200009058209ff030410fc082501820c040700"/157], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000800004801300010062726f61933664636173742d6c696e"], 0x94}}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x63) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x2}, 0x8) close(r6) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027468c0e2193019f27000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x1da) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000005cc0)='./file0\x00') r9 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x1, 0x0, 0x2, 0xa}, {0x0, 0x3, 0x4}, {0x0, 0x80000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)) getsockname(r9, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000440)=0x80) 1m12.55569881s ago: executing program 5 (id=541): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, 0x0) (fail_nth: 1) 1m12.234851926s ago: executing program 5 (id=542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000100)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008"], 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0xc080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m12.182208628s ago: executing program 5 (id=545): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m10.314805078s ago: executing program 6 (id=558): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="030f00000000000000", 0x9) 1m10.314397888s ago: executing program 6 (id=559): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m10.141466859s ago: executing program 5 (id=560): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab28bd70000000000032"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x20004040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x9c940000, 0x2, 0x3, 0x1}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast2}}}]}]}]}, 0xc8}}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x0, 0x2, 0x1}, 0x20) close(r0) r4 = syz_io_uring_setup(0x1870, &(0x7f0000000000)={0x0, 0x5f68, 0x50880, 0x2, 0x33b}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x0, 0x1010, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x99, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)=0x0) syz_ublk_setup_queues(r7, r9, &(0x7f00000003c0)={0x0, 0xcd5e, 0x10000, 0x800001, 0x57}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x61, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) 1m9.972893679s ago: executing program 6 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) io_setup(0x2, &(0x7f0000000080)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x4, 0x20, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x9f, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x50}}, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040)=0xb1, 0x4) getsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003) add_key$keyring(&(0x7f00000009c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) listen(r1, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000200)={0x4, 0xf57c, 0x7, 0x6665dce5, 0x10000, 0x0, 0x600000000}) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4, 0x7, 0x20000000) 1m9.854963266s ago: executing program 6 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1bf) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0xfff4, 0x0) 1m9.778483085s ago: executing program 6 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.707597351s ago: executing program 6 (id=571): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m8.403836859s ago: executing program 35 (id=392): pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x8000, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) 1m8.392740611s ago: executing program 5 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m8.318929899s ago: executing program 5 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/9, 0x1000000, 0x0, 0x2, 0x1}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xcf, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) sendmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) 1m7.151138094s ago: executing program 7 (id=583): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x408f4) 1m7.086830109s ago: executing program 7 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe2) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)={0x7, 0x0, [{0xa, 0x6326, 0x6, 0x7e, 0x8, 0x9e, 0x253}, {0xb, 0x2, 0x0, 0x7, 0x7, 0xffff, 0xf4e7}, {0x7, 0x30, 0x0, 0x2, 0x8001, 0xffff, 0xdf}, {0x4, 0xad2f, 0x3, 0x9, 0x5, 0xe0, 0x307}, {0x0, 0x5, 0x7, 0xfffffffe, 0x0, 0xe, 0x2d9}, {0xb, 0x8000, 0x5, 0x101, 0x1, 0x7, 0x4}, {0x80000000, 0xc307, 0x4, 0x1, 0x0, 0xef02, 0x9}]}) 1m7.014902376s ago: executing program 7 (id=585): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4c, 0x2565}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010000000000000000000a00002c"], 0x20}}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="9fc70eba9970e456f602e731b41a5d69", 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) r5 = dup(r3) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x3) socket(0x1e, 0x2, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') 1m7.014694856s ago: executing program 7 (id=586): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="030f00000000000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy', 0x5) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1m6.979308624s ago: executing program 7 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.86924222s ago: executing program 7 (id=588): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8160}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0xfff, 0x7}}}}}}}, 0x3e) 1m5.418870682s ago: executing program 4 (id=592): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0xfff, 0x7}}}}}}}, 0x3e) 1m5.296179991s ago: executing program 4 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000108001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1m5.236200715s ago: executing program 4 (id=594): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (rerun: 64) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000001c0)={0x38, 0x402, 0x3, 0x1b, 0x0, 0x3, 0x4, 0x110, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) r3 = gettid() (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) (async) fcntl$setsig(r4, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) (async, rerun: 64) dup2(r4, r5) (async, rerun: 64) fcntl$setown(r4, 0x8, r3) r6 = getpid() tkill(r6, 0x13) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100) 1m2.15892746s ago: executing program 4 (id=595): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000003c0)='dummy', 0x5) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1m2.148485993s ago: executing program 4 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m2.048792336s ago: executing program 4 (id=597): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001540)=""/4089, 0xff9}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2a, 0xc00, 0x0) 54.543702865s ago: executing program 36 (id=571): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 52.385621683s ago: executing program 37 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/9, 0x1000000, 0x0, 0x2, 0x1}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xcf, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) sendmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) 51.554109229s ago: executing program 38 (id=588): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8160}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0xfff, 0x7}}}}}}}, 0x3e) 50.820510362s ago: executing program 3 (id=602): r0 = socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1938c1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./dev\x00', 0x20000, 0x41) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02036b9d06ec5111bdba1558aeb0ff03300000002abd7000fb"], 0x180}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000", @ANYRES8, @ANYBLOB='\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x8040) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="02090009080000007c7d04a619d5b112"], 0x10}}, 0x20000804) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=""/258, &(0x7f00000001c0)=0x102) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x50b101, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x0, @multicast1, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x5, 0xc}, 0x2c) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYBLOB="8fead09e29b8b5"], 0x20}}, 0x4000) 50.762358946s ago: executing program 3 (id=604): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000003c0)='dummy', 0x5) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 50.761381866s ago: executing program 3 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 50.688674834s ago: executing program 3 (id=606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010025bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 46.315275974s ago: executing program 39 (id=597): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001540)=""/4089, 0xff9}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2a, 0xc00, 0x0) 35.567962317s ago: executing program 40 (id=606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010025bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 22.006756332s ago: executing program 8 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, 0x0, 0x8c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xf5ff, 0x0, 0x0, 0x2766c2b0}]}) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r5}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 21.211538786s ago: executing program 8 (id=881): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0020002000000000b82100"}) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000140)=""/16, 0x10}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200001425bd7000020000008a000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xb9c483ffa2dcea67) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x5220, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r8, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x306, @local}, 0x78, {0x2, 0x0, @empty}, 'lo\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000240), 0x4) 21.196724109s ago: executing program 8 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200120060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 21.10683679s ago: executing program 8 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24004884) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r2, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) (async) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160016000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 21.10660968s ago: executing program 8 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 21.06325604s ago: executing program 8 (id=885): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x6) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.952869848s ago: executing program 41 (id=885): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x6) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.642760968s ago: executing program 0 (id=984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 4.792593913s ago: executing program 0 (id=993): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.186937232s ago: executing program 2 (id=996): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004840)=[{{&(0x7f00000019c0)={0xa, 0x4e21, 0x8, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1200}}], 0x1, 0x40004) 4.186688792s ago: executing program 2 (id=997): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x200000}, 0x1}}, 0x80, 0x0}, 0xfdef}], 0x1, 0x20008850) 4.186576632s ago: executing program 2 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200050060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 4.170051245s ago: executing program 2 (id=999): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a200000000200fc00000000240009801c00001000000000140005"], 0x40}], 0x1}, 0x0) 4.161128507s ago: executing program 2 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x4000, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.141466042s ago: executing program 2 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x108046, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x4, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x20, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x1, 0x0, 0x0, {0x4, 0x2000000000007, 0x0, 0x7, 0x40000000000003, 0x3, 0x0, 0xc, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.914238274s ago: executing program 0 (id=1002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4) 3.060534569s ago: executing program 0 (id=1013): syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xfffffffffffffffc}, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x13, 0xffffffffffffffff, 0xec776000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x4, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040060, 0x0) 2.774690885s ago: executing program 0 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',version=9']) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.672560828s ago: executing program 0 (id=1015): r0 = fsopen(&(0x7f00000000c0)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='silent\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0xe4) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x0, 0x41) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0xfd, 0x2, 0x5, 0xff, 0xf6, 0x7f, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x79, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.110724187s ago: executing program 1 (id=1023): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)={0x1, 0x0, [{0x80000002, 0x3, 0x6, 0x9, 0xff8000, 0x3ff, 0x3}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8005, 0x3, 0x0, 0x0, 0x3, 0x9c2a}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x6, 0x9, 0x0, 0x300, 0x800, 0x9}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) pwritev2(r2, &(0x7f0000001440)=[{&(0x7f0000000440)='.', 0x1}], 0x1, 0x540f, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x47d, 0xdf1c, 0x9, 0xfffffffffffff7f7}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.307467231s ago: executing program 1 (id=1025): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0xd9, 0x9, 0xe, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x10, 0x0, 0x3, 0x1, 0x1f}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x1f9}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.258336702s ago: executing program 1 (id=1027): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @multicast}, 0x2, {0x2, 0x4e24, @empty}, 'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x9, 0x1, 0x8, 0x8, 0x4, 0x80, 0x11, 0x8, 0xb, 0x6, 0x7, 0x9, 0xf1, 0x7, 0xf, 0xa}}) write(r1, &(0x7f0000000180)='2,0x7f0000000000,0x7f0000400000,0,-', 0x23) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000200)=0x6, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r3, 0x0, 0x0, 0x40000140, 0x0, 0x0) 1.246158125s ago: executing program 1 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, 0x0, 0xffe) 1.102769438s ago: executing program 1 (id=1032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4) 1.070740705s ago: executing program 9 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0xfffffff0) 1.036511263s ago: executing program 9 (id=1035): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000697000/0xe000)=nil, 0xe000, 0x1) setresuid(0x0, 0xee00, 0x0) r1 = inotify_init1(0x800) cachestat(r1, &(0x7f0000000040)={0x5, 0x4}, 0x0, 0x0) 942.846614ms ago: executing program 9 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000600)={0x1, [{0x3, 0x0, 0x4, 0x0}, {0x3, 0x8, 0x4, &(0x7f0000000580)="ef"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x70, 0x0}]}) 292.780893ms ago: executing program 1 (id=1037): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001880), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000018c0)={0x0, 0x5, {0x52, 0x0, 0x401, {0x3, 0xffff}, {0xe, 0xffff}, @ramp={0x9, 0x9, {0x400, 0x7, 0x1000, 0x3}}}, {0x54, 0x0, 0xfa88, {0x9, 0x400}, {0x9, 0x7}, @rumble={0xd, 0x8}}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0, r4}, 0x14) sendto$inet6(r3, &(0x7f0000000200)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000380)={0xa, 0xfffd, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x4400) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000800}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r8, 0xffffffffffff0000, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1101, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e2401", @ANYRESDEC], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf255309000000422c7142dafae2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) pread64(r8, &(0x7f00000002c0)=""/80, 0x50, 0x2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="aadc59fbe97486de02", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf252500000008000200", @ANYRES32=r10, @ANYBLOB="0a0001007770616e34000000050029000100000008002c000001000008002c000300000008002c0005000000"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0xfd2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x8}, {0x35, 0x1, 0x0, 0x7fffffff}, {0x2, 0x4}, {0x6, 0x2, 0x0, 0x1ff}]}) 61.554376ms ago: executing program 9 (id=1038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, 0x0, 0x8c0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xf5ff, 0x0, 0x0, 0x2766c2b0}]}) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 23.972254ms ago: executing program 9 (id=1039): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="030f00000000000000", 0x9) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy', 0x5) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 0s ago: executing program 9 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x128}, 0x4004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="baf80c66b8f4b7ac8d66efbafc0cece1e3b83c018ec8ea00006e00f30f1efa0f00961fae660f388182f000678744e77fba4000ed66b9130400000f32", 0x3c}], 0x1, 0x11, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="360f01c366b8b86aaa8c66efbafc0c66b80c00000066ef66b9800000c00f326635000400000f30f0838dd500060f23590f00d09a0000190066b90e0b000066b88f20000066ba000000000f300f0170ce0f23c10f01d10fe2ca", 0x59}], 0x1, 0x66, 0x0, 0x17) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000007c0)) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0xab2abc8d1ae86c5d, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x2, 0x800003ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80001f6f, 0x2, 0x40000001, 0x10337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='7', 0x1) kernel console output (not intermixed with test programs): c6b9cca8 [ 71.088628][ T1539] [ 71.400597][ T1573] FAULT_INJECTION: forcing a failure. [ 71.400597][ T1573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.434125][ T1573] CPU: 0 UID: 0 PID: 1573 Comm: syz.4.414 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 71.434160][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.434172][ T1573] Call Trace: [ 71.434178][ T1573] [ 71.434186][ T1573] __dump_stack+0x21/0x30 [ 71.434218][ T1573] dump_stack_lvl+0x140/0x1c0 [ 71.434244][ T1573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.434269][ T1573] dump_stack+0x19/0x20 [ 71.434291][ T1573] should_fail_ex+0x3c2/0x510 [ 71.434313][ T1573] should_fail+0xf/0x20 [ 71.434333][ T1573] should_fail_usercopy+0x1e/0x30 [ 71.434355][ T1573] strncpy_from_user+0x29/0x280 [ 71.434376][ T1573] getname_flags+0x106/0x6b0 [ 71.434397][ T1573] ? memdup_user+0xb1/0x170 [ 71.434413][ T1573] user_path_at+0x2b/0x60 [ 71.434435][ T1573] __se_sys_mount+0x28a/0x480 [ 71.434460][ T1573] ? __x64_sys_mount+0xf0/0xf0 [ 71.434479][ T1573] ? __kasan_check_write+0x18/0x20 [ 71.434498][ T1573] ? fpregs_restore_userregs+0x11c/0x260 [ 71.434526][ T1573] __x64_sys_mount+0xc3/0xf0 [ 71.434546][ T1573] x64_sys_call+0x2021/0x2ee0 [ 71.434562][ T1573] do_syscall_64+0x57/0xf0 [ 71.434580][ T1573] ? clear_bhb_loop+0x50/0xa0 [ 71.434604][ T1573] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.434624][ T1573] RIP: 0033:0x7fc504b9e159 [ 71.434641][ T1573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.434665][ T1573] RSP: 002b:00007fc5059ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.434686][ T1573] RAX: ffffffffffffffda RBX: 00007fc504e25fa0 RCX: 00007fc504b9e159 [ 71.434701][ T1573] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 71.434714][ T1573] RBP: 00007fc504c3506b R08: 0000000000000000 R09: 0000000000000000 [ 71.434726][ T1573] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 71.434738][ T1573] R13: 00007fc504e26038 R14: 00007fc504e25fa0 R15: 00007ffcc6b9cca8 [ 71.434755][ T1573] [ 71.640032][ T45] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 71.647087][ T45] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 71.654124][ T45] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 71.661075][ T45] hkems 0003:2006:0118.0008: collection stack underflow [ 71.668044][ T45] hkems 0003:2006:0118.0008: item 0 0 0 12 parsing failed [ 71.675382][ T45] hkems 0003:2006:0118.0008: parse failed [ 71.685046][ T45] hkems 0003:2006:0118.0008: probe with driver hkems failed with error -22 [ 71.685069][ T1577] netlink: 'syz.4.416': attribute type 27 has an invalid length. [ 71.780712][ T1583] [ 71.854323][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.865351][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.879860][ T1172] usb 7-1: USB disconnect, device number 5 [ 72.412108][ T1597] FAULT_INJECTION: forcing a failure. [ 72.412108][ T1597] name failslab, interval 1, probability 0, space 0, times 0 [ 72.424825][ T1597] CPU: 0 UID: 0 PID: 1597 Comm: syz.6.423 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 72.424858][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.424870][ T1597] Call Trace: [ 72.424877][ T1597] [ 72.424885][ T1597] __dump_stack+0x21/0x30 [ 72.424917][ T1597] dump_stack_lvl+0x140/0x1c0 [ 72.424942][ T1597] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.424968][ T1597] dump_stack+0x19/0x20 [ 72.424989][ T1597] should_fail_ex+0x3c2/0x510 [ 72.425011][ T1597] should_failslab+0xac/0x100 [ 72.425034][ T1597] kmem_cache_alloc_noprof+0x42/0x410 [ 72.425053][ T1597] ? getname_flags+0xcc/0x6b0 [ 72.425082][ T1597] getname_flags+0xcc/0x6b0 [ 72.425102][ T1597] ? memdup_user+0xb1/0x170 [ 72.425118][ T1597] user_path_at+0x2b/0x60 [ 72.425139][ T1597] __se_sys_mount+0x28a/0x480 [ 72.425160][ T1597] ? __x64_sys_mount+0xf0/0xf0 [ 72.425179][ T1597] ? __kasan_check_write+0x18/0x20 [ 72.425197][ T1597] ? fpregs_restore_userregs+0x11c/0x260 [ 72.425219][ T1597] __x64_sys_mount+0xc3/0xf0 [ 72.425239][ T1597] x64_sys_call+0x2021/0x2ee0 [ 72.425255][ T1597] do_syscall_64+0x57/0xf0 [ 72.425272][ T1597] ? clear_bhb_loop+0x50/0xa0 [ 72.425294][ T1597] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.425316][ T1597] RIP: 0033:0x7f166a79e159 [ 72.425331][ T1597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.425347][ T1597] RSP: 002b:00007f166b699028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.425368][ T1597] RAX: ffffffffffffffda RBX: 00007f166aa25fa0 RCX: 00007f166a79e159 [ 72.425382][ T1597] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 72.425395][ T1597] RBP: 00007f166a83506b R08: 0000000000000000 R09: 0000000000000000 [ 72.425407][ T1597] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 72.425420][ T1597] R13: 00007f166aa26038 R14: 00007f166aa25fa0 R15: 00007fff3babbd58 [ 72.425435][ T1597] [ 72.738168][ T1593] FAULT_INJECTION: forcing a failure. [ 72.738168][ T1593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.757034][ T1593] CPU: 1 UID: 0 PID: 1593 Comm: syz.5.422 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 72.757064][ T1593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.757075][ T1593] Call Trace: [ 72.757081][ T1593] [ 72.757088][ T1593] __dump_stack+0x21/0x30 [ 72.757113][ T1593] dump_stack_lvl+0x140/0x1c0 [ 72.757134][ T1593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.757157][ T1593] ? handle_mm_fault+0x16fe/0x1ba0 [ 72.757179][ T1593] dump_stack+0x19/0x20 [ 72.757199][ T1593] should_fail_ex+0x3c2/0x510 [ 72.757220][ T1593] should_fail+0xf/0x20 [ 72.757239][ T1593] get_futex_key+0x22c/0x940 [ 72.757260][ T1593] ? __cfi_handle_mm_fault+0x10/0x10 [ 72.757278][ T1593] ? __cfi_get_futex_key+0x10/0x10 [ 72.757299][ T1593] ? find_vma+0xd3/0x120 [ 72.757317][ T1593] futex_wake+0x150/0x950 [ 72.757332][ T1593] ? __cfi_futex_wake+0x10/0x10 [ 72.757348][ T1593] ? do_user_addr_fault+0xbf5/0x1230 [ 72.757369][ T1593] ? __perf_event_period+0x490/0x490 [ 72.757390][ T1593] do_futex+0x37d/0x510 [ 72.757412][ T1593] ? __cfi_do_futex+0x10/0x10 [ 72.757433][ T1593] mm_release+0x15f/0x300 [ 72.757452][ T1593] ? exit_mm_release+0x50/0x50 [ 72.757472][ T1593] ? futex_exit_release+0x11d/0x1f0 [ 72.757494][ T1593] exit_mm_release+0x29/0x50 [ 72.757512][ T1593] do_exit+0x832/0x2850 [ 72.757551][ T1593] ? __fput+0x71e/0xa30 [ 72.757573][ T1593] ? __cfi_do_exit+0x10/0x10 [ 72.757593][ T1593] ? ____fput+0x20/0x30 [ 72.757621][ T1593] ? __kasan_check_write+0x18/0x20 [ 72.757639][ T1593] ? _raw_spin_lock_irq+0x93/0x120 [ 72.757657][ T1593] do_group_exit+0x21f/0x2f0 [ 72.757677][ T1593] ? __kasan_check_write+0x18/0x20 [ 72.757694][ T1593] ? recalc_sigpending+0x16c/0x1d0 [ 72.757713][ T1593] get_signal+0x134c/0x1490 [ 72.757736][ T1593] arch_do_signal_or_restart+0xbc/0x700 [ 72.757755][ T1593] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 72.757775][ T1593] syscall_exit_to_user_mode+0x57/0xb0 [ 72.757797][ T1593] do_syscall_64+0x63/0xf0 [ 72.757812][ T1593] ? clear_bhb_loop+0x50/0xa0 [ 72.757832][ T1593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.757854][ T1593] RIP: 0033:0x7ff3fd19e159 [ 72.757870][ T1593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.757884][ T1593] RSP: 002b:00007ff3fe13b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 72.757904][ T1593] RAX: fffffffffffffe00 RBX: 00007ff3fd425fa0 RCX: 00007ff3fd19e159 [ 72.757917][ T1593] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000004 [ 72.757929][ T1593] RBP: 00007ff3fd23506b R08: 0000000000000000 R09: 0000000000000000 [ 72.757940][ T1593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.757951][ T1593] R13: 00007ff3fd426038 R14: 00007ff3fd425fa0 R15: 00007ffe547ccdb8 [ 72.757966][ T1593] [ 72.952546][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.425'. [ 73.062865][ T1608] x_tables: unsorted underflow at hook 3 [ 73.089861][ T1608] loop8: detected capacity change from 0 to 16384 [ 73.174447][ T1612] overlayfs: workdir and upperdir must reside under the same mount [ 73.192298][ T1608] I/O error, dev loop8, sector 6432 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 2 [ 73.223442][ T1608] I/O error, dev loop8, sector 6688 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 2 [ 73.252294][ T1608] I/O error, dev loop8, sector 6432 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.279126][ T1608] Buffer I/O error on dev loop8, logical block 804, async page read [ 73.287309][ T1608] I/O error, dev loop8, sector 6432 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.297720][ T1608] Buffer I/O error on dev loop8, logical block 804, async page read [ 73.330591][ T1608] I/O error, dev loop8, sector 6432 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.340009][ T1608] Buffer I/O error on dev loop8, logical block 804, async page read [ 73.434212][ T1606] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 73.448129][ T1606] Buffer I/O error on dev loop8, logical block 0, lost async page write [ 73.464396][ T1606] Buffer I/O error on dev loop8, logical block 1, lost async page write [ 73.481554][ T1606] Buffer I/O error on dev loop8, logical block 2, lost async page write [ 73.498729][ T1606] Buffer I/O error on dev loop8, logical block 3, lost async page write [ 73.515084][ T1606] Buffer I/O error on dev loop8, logical block 4, lost async page write [ 73.533683][ T1606] Buffer I/O error on dev loop8, logical block 5, lost async page write [ 73.550509][ T1606] Buffer I/O error on dev loop8, logical block 6, lost async page write [ 73.572885][ T1606] I/O error, dev loop8, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 73.596615][ T1606] I/O error, dev loop8, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 73.620340][ T1606] I/O error, dev loop8, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 73.654001][ T1606] I/O error, dev loop8, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 73.982833][ T1627] tc_dump_action: action bad kind [ 74.060363][ T1630] FAULT_INJECTION: forcing a failure. [ 74.060363][ T1630] name failslab, interval 1, probability 0, space 0, times 0 [ 74.090469][ T1630] CPU: 1 UID: 0 PID: 1630 Comm: syz.4.434 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 74.090503][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.090516][ T1630] Call Trace: [ 74.090522][ T1630] [ 74.090530][ T1630] __dump_stack+0x21/0x30 [ 74.090561][ T1630] dump_stack_lvl+0x140/0x1c0 [ 74.090582][ T1630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.090615][ T1630] dump_stack+0x19/0x20 [ 74.090635][ T1630] should_fail_ex+0x3c2/0x510 [ 74.090655][ T1630] should_failslab+0xac/0x100 [ 74.090677][ T1630] kmem_cache_alloc_noprof+0x42/0x410 [ 74.090694][ T1630] ? getname_flags+0xcc/0x6b0 [ 74.090715][ T1630] getname_flags+0xcc/0x6b0 [ 74.090734][ T1630] ? memdup_user+0xb1/0x170 [ 74.090751][ T1630] user_path_at+0x2b/0x60 [ 74.090772][ T1630] __se_sys_mount+0x28a/0x480 [ 74.090794][ T1630] ? __x64_sys_mount+0xf0/0xf0 [ 74.090813][ T1630] ? __kasan_check_write+0x18/0x20 [ 74.090830][ T1630] ? fpregs_restore_userregs+0x11c/0x260 [ 74.090851][ T1630] __x64_sys_mount+0xc3/0xf0 [ 74.090870][ T1630] x64_sys_call+0x2021/0x2ee0 [ 74.090888][ T1630] do_syscall_64+0x57/0xf0 [ 74.090905][ T1630] ? clear_bhb_loop+0x50/0xa0 [ 74.090928][ T1630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.090949][ T1630] RIP: 0033:0x7fc504b9e159 [ 74.090964][ T1630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.090977][ T1630] RSP: 002b:00007fc5059ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.090996][ T1630] RAX: ffffffffffffffda RBX: 00007fc504e25fa0 RCX: 00007fc504b9e159 [ 74.091010][ T1630] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000300 [ 74.091022][ T1630] RBP: 00007fc504c3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.091034][ T1630] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 74.091045][ T1630] R13: 00007fc504e26038 R14: 00007fc504e25fa0 R15: 00007ffcc6b9cca8 [ 74.091060][ T1630] [ 74.395631][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 74.395645][ T36] audit: type=1400 audit(2000000003.640:320): avc: denied { map } for pid=1649 comm="syz.6.443" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.425235][ T36] audit: type=1400 audit(2000000003.670:321): avc: denied { execute } for pid=1649 comm="syz.6.443" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.470354][ T1659] FAULT_INJECTION: forcing a failure. [ 74.470354][ T1659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.494309][ T1659] CPU: 0 UID: 0 PID: 1659 Comm: syz.4.445 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 74.494343][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.494354][ T1659] Call Trace: [ 74.494359][ T1659] [ 74.494366][ T1659] __dump_stack+0x21/0x30 [ 74.494393][ T1659] dump_stack_lvl+0x140/0x1c0 [ 74.494415][ T1659] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.494436][ T1659] ? lruvec_init+0x1f1/0x280 [ 74.494456][ T1659] dump_stack+0x19/0x20 [ 74.494488][ T1659] should_fail_ex+0x3c2/0x510 [ 74.494508][ T1659] should_fail+0xf/0x20 [ 74.494526][ T1659] should_fail_usercopy+0x1e/0x30 [ 74.494547][ T1659] _copy_from_iter+0x1a6/0x1520 [ 74.494572][ T1659] ? __cfi__copy_from_iter+0x10/0x10 [ 74.494593][ T1659] ? __check_object_size+0x54c/0x870 [ 74.494610][ T1659] ? __cfi___check_object_size+0x10/0x10 [ 74.494627][ T1659] ? skb_page_frag_refill+0x22e/0x4f0 [ 74.494651][ T1659] ? sk_page_frag_refill+0x5d/0x120 [ 74.494673][ T1659] tcp_sendmsg_locked+0x1d98/0x4ac0 [ 74.494702][ T1659] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 74.494726][ T1659] ? __cfi_tcp_sendmsg+0x10/0x10 [ 74.494747][ T1659] tcp_sendmsg+0x3e/0xd0 [ 74.494767][ T1659] ? __cfi_tcp_sendmsg+0x10/0x10 [ 74.494788][ T1659] inet6_sendmsg+0xb7/0x120 [ 74.494804][ T1659] ____sys_sendmsg+0x5d8/0xa00 [ 74.494826][ T1659] ? __import_iovec+0x5b9/0x7d0 [ 74.494841][ T1659] ? __sys_sendmsg_sock+0x50/0x50 [ 74.494864][ T1659] ? import_iovec+0x80/0xb0 [ 74.494879][ T1659] ___sys_sendmsg+0x2a6/0x370 [ 74.494901][ T1659] ? __sys_sendmsg+0x260/0x260 [ 74.494922][ T1659] ? kstrtouint+0x78/0xf0 [ 74.494944][ T1659] ? __fget_files+0x2bc/0x330 [ 74.494964][ T1659] __sys_sendmmsg+0x292/0x490 [ 74.494986][ T1659] ? __cfi___sys_sendmmsg+0x10/0x10 [ 74.495012][ T1659] ? __cfi_ksys_write+0x10/0x10 [ 74.495031][ T1659] __x64_sys_sendmmsg+0xa4/0xc0 [ 74.495054][ T1659] x64_sys_call+0xfec/0x2ee0 [ 74.495069][ T1659] do_syscall_64+0x57/0xf0 [ 74.495085][ T1659] ? clear_bhb_loop+0x50/0xa0 [ 74.495106][ T1659] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.495125][ T1659] RIP: 0033:0x7fc504b9e159 [ 74.495141][ T1659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.495155][ T1659] RSP: 002b:00007fc5059ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 74.495174][ T1659] RAX: ffffffffffffffda RBX: 00007fc504e25fa0 RCX: 00007fc504b9e159 [ 74.495186][ T1659] RDX: 0000000000000002 RSI: 0000200000001200 RDI: 0000000000000004 [ 74.495197][ T1659] RBP: 00007fc5059ec090 R08: 0000000000000000 R09: 0000000000000000 [ 74.495209][ T1659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.495219][ T1659] R13: 00007fc504e26038 R14: 00007fc504e25fa0 R15: 00007ffcc6b9cca8 [ 74.495234][ T1659] [ 74.790695][ T36] audit: type=1400 audit(2000000004.040:322): avc: denied { read write } for pid=1662 comm="syz.6.447" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.816763][ T1663] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 74.831056][ T36] audit: type=1400 audit(2000000004.060:323): avc: denied { open } for pid=1662 comm="syz.6.447" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.888456][ T1670] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 74.910554][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 74.966737][ T1676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 74.999197][ T1678] FAULT_INJECTION: forcing a failure. [ 74.999197][ T1678] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.012181][ T1678] CPU: 1 UID: 0 PID: 1678 Comm: syz.6.453 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 75.012210][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.012223][ T1678] Call Trace: [ 75.012229][ T1678] [ 75.012235][ T1678] __dump_stack+0x21/0x30 [ 75.012264][ T1678] dump_stack_lvl+0x140/0x1c0 [ 75.012287][ T1678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.012309][ T1678] ? unwind_get_return_address+0x51/0x90 [ 75.012331][ T1678] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 75.012355][ T1678] dump_stack+0x19/0x20 [ 75.012376][ T1678] should_fail_ex+0x3c2/0x510 [ 75.012397][ T1678] should_fail+0xf/0x20 [ 75.012415][ T1678] get_futex_key+0x178/0x940 [ 75.012437][ T1678] ? __se_sys_mount+0x28a/0x480 [ 75.012456][ T1678] ? __cfi_get_futex_key+0x10/0x10 [ 75.012476][ T1678] ? kasan_save_track+0x4f/0x80 [ 75.012497][ T1678] futex_wake+0x150/0x950 [ 75.012514][ T1678] ? __cfi_futex_wake+0x10/0x10 [ 75.012531][ T1678] do_futex+0x37d/0x510 [ 75.012553][ T1678] ? __cfi_do_futex+0x10/0x10 [ 75.012575][ T1678] __se_sys_futex+0x13c/0x320 [ 75.012598][ T1678] ? __x64_sys_futex+0x110/0x110 [ 75.012619][ T1678] ? __x64_sys_mount+0xf0/0xf0 [ 75.012639][ T1678] __x64_sys_futex+0xe9/0x110 [ 75.012660][ T1678] x64_sys_call+0x227f/0x2ee0 [ 75.012676][ T1678] do_syscall_64+0x57/0xf0 [ 75.012692][ T1678] ? clear_bhb_loop+0x50/0xa0 [ 75.012714][ T1678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.012734][ T1678] RIP: 0033:0x7f166a79e159 [ 75.012750][ T1678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.012765][ T1678] RSP: 002b:00007f166b6990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.012783][ T1678] RAX: ffffffffffffffda RBX: 00007f166aa25fa8 RCX: 00007f166a79e159 [ 75.012796][ T1678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f166aa25fac [ 75.012807][ T1678] RBP: 00007f166aa25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 75.012820][ T1678] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 75.012832][ T1678] R13: 00007f166aa26038 R14: 00007fff3babbc70 R15: 00007fff3babbd58 [ 75.012848][ T1678] [ 75.061485][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.252016][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.278786][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 0.09 [ 75.312167][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.320192][ T10] usb 6-1: SerialNumber: syz [ 75.337276][ T36] audit: type=1400 audit(2000000004.580:324): avc: denied { sqpoll } for pid=1698 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.341410][ T10] usb-storage 6-1:1.0: USB Mass Storage device detected [ 75.395512][ T36] audit: type=1400 audit(2000000004.580:325): avc: denied { map } for pid=1698 comm="syz.4.457" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 75.508001][ T1715] FAULT_INJECTION: forcing a failure. [ 75.508001][ T1715] name failslab, interval 1, probability 0, space 0, times 0 [ 75.521755][ T1715] CPU: 1 UID: 0 PID: 1715 Comm: syz.6.462 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 75.521788][ T1715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.521801][ T1715] Call Trace: [ 75.521807][ T1715] [ 75.521815][ T1715] __dump_stack+0x21/0x30 [ 75.521847][ T1715] dump_stack_lvl+0x140/0x1c0 [ 75.521872][ T1715] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.521899][ T1715] dump_stack+0x19/0x20 [ 75.521922][ T1715] should_fail_ex+0x3c2/0x510 [ 75.521944][ T1715] should_failslab+0xac/0x100 [ 75.521966][ T1715] kmem_cache_alloc_noprof+0x42/0x410 [ 75.521997][ T1715] ? getname_flags+0xcc/0x6b0 [ 75.522020][ T1715] getname_flags+0xcc/0x6b0 [ 75.522040][ T1715] ? memdup_user+0xb1/0x170 [ 75.522058][ T1715] user_path_at+0x2b/0x60 [ 75.522081][ T1715] __se_sys_mount+0x28a/0x480 [ 75.522102][ T1715] ? __x64_sys_mount+0xf0/0xf0 [ 75.522120][ T1715] ? __kasan_check_write+0x18/0x20 [ 75.522138][ T1715] ? __kasan_check_write+0x18/0x20 [ 75.522155][ T1715] ? fpregs_restore_userregs+0x11c/0x260 [ 75.522178][ T1715] __x64_sys_mount+0xc3/0xf0 [ 75.522196][ T1715] x64_sys_call+0x2021/0x2ee0 [ 75.522213][ T1715] do_syscall_64+0x57/0xf0 [ 75.522230][ T1715] ? clear_bhb_loop+0x50/0xa0 [ 75.522252][ T1715] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.522272][ T1715] RIP: 0033:0x7f166a79e159 [ 75.522288][ T1715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.522304][ T1715] RSP: 002b:00007f166b699028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.522324][ T1715] RAX: ffffffffffffffda RBX: 00007f166aa25fa0 RCX: 00007f166a79e159 [ 75.522336][ T1715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 75.522349][ T1715] RBP: 00007f166a83506b R08: 0000000000000000 R09: 0000000000000000 [ 75.522361][ T1715] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 75.522373][ T1715] R13: 00007f166aa26038 R14: 00007f166aa25fa0 R15: 00007fff3babbd58 [ 75.522389][ T1715] [ 75.527429][ T45] usb 6-1: USB disconnect, device number 13 [ 75.839589][ T1719] rust_binder: 1718:1719 got reply transaction with no transaction stack [ 75.860481][ T1719] rust_binder: 1718:1719 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 75.870156][ T377] rust_binder: 1718: undelivered TRANSACTION_ERROR: 29201 [ 76.012645][ T1733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.470'. [ 76.033111][ T1735] FAULT_INJECTION: forcing a failure. [ 76.033111][ T1735] name fail_futex, interval 1, probability 0, space 0, times 0 [ 76.048008][ T1735] CPU: 0 UID: 0 PID: 1735 Comm: syz.4.471 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 76.048041][ T1735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.048051][ T1735] Call Trace: [ 76.048057][ T1735] [ 76.048064][ T1735] __dump_stack+0x21/0x30 [ 76.048092][ T1735] dump_stack_lvl+0x140/0x1c0 [ 76.048115][ T1735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.048135][ T1735] ? unwind_get_return_address+0x51/0x90 [ 76.048153][ T1735] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 76.048173][ T1735] dump_stack+0x19/0x20 [ 76.048193][ T1735] should_fail_ex+0x3c2/0x510 [ 76.048212][ T1735] should_fail+0xf/0x20 [ 76.048230][ T1735] get_futex_key+0x178/0x940 [ 76.048252][ T1735] ? __se_sys_mount+0x28a/0x480 [ 76.048272][ T1735] ? __cfi_get_futex_key+0x10/0x10 [ 76.048293][ T1735] ? kasan_save_track+0x4f/0x80 [ 76.048314][ T1735] futex_wake+0x150/0x950 [ 76.048332][ T1735] ? __cfi_futex_wake+0x10/0x10 [ 76.048351][ T1735] do_futex+0x37d/0x510 [ 76.048374][ T1735] ? __cfi_do_futex+0x10/0x10 [ 76.048397][ T1735] __se_sys_futex+0x13c/0x320 [ 76.048419][ T1735] ? __x64_sys_futex+0x110/0x110 [ 76.048449][ T1735] ? __x64_sys_mount+0xf0/0xf0 [ 76.048471][ T1735] __x64_sys_futex+0xe9/0x110 [ 76.048495][ T1735] x64_sys_call+0x227f/0x2ee0 [ 76.048512][ T1735] do_syscall_64+0x57/0xf0 [ 76.048529][ T1735] ? clear_bhb_loop+0x50/0xa0 [ 76.048552][ T1735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.048572][ T1735] RIP: 0033:0x7fc504b9e159 [ 76.048587][ T1735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.048603][ T1735] RSP: 002b:00007fc5059ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.048624][ T1735] RAX: ffffffffffffffda RBX: 00007fc504e25fa8 RCX: 00007fc504b9e159 [ 76.048639][ T1735] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc504e25fac [ 76.048652][ T1735] RBP: 00007fc504e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 76.048666][ T1735] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 76.048679][ T1735] R13: 00007fc504e26038 R14: 00007ffcc6b9cbc0 R15: 00007ffcc6b9cca8 [ 76.048696][ T1735] [ 76.285114][ T1740] rust_binder: Write failure EFAULT in pid:284 [ 76.310995][ T36] audit: type=1400 audit(2000000005.550:326): avc: denied { remount } for pid=1747 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.311025][ T1748] ./dev/sda1: Can't lookup blockdev [ 76.610718][ T1769] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.614242][ T1770] rust_binder: Write failure EFAULT in pid:292 [ 76.854462][ T1783] FAULT_INJECTION: forcing a failure. [ 76.854462][ T1783] name failslab, interval 1, probability 0, space 0, times 0 [ 76.889092][ T1783] CPU: 1 UID: 0 PID: 1783 Comm: syz.6.488 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 76.889117][ T1783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.889127][ T1783] Call Trace: [ 76.889132][ T1783] [ 76.889138][ T1783] __dump_stack+0x21/0x30 [ 76.889163][ T1783] dump_stack_lvl+0x140/0x1c0 [ 76.889182][ T1783] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.889202][ T1783] dump_stack+0x19/0x20 [ 76.889219][ T1783] should_fail_ex+0x3c2/0x510 [ 76.889237][ T1783] should_failslab+0xac/0x100 [ 76.889255][ T1783] __kmalloc_node_noprof+0x69/0x500 [ 76.889272][ T1783] ? __kvmalloc_node_noprof+0x128/0x300 [ 76.889287][ T1783] __kvmalloc_node_noprof+0x128/0x300 [ 76.889301][ T1783] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 76.889316][ T1783] ? percpu_ref_init+0x240/0x4d0 [ 76.889333][ T1783] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 76.889349][ T1783] io_ring_ctx_alloc+0x35a/0x1dc0 [ 76.889365][ T1783] io_uring_create+0x2e0/0x13f0 [ 76.889379][ T1783] ? __kasan_check_write+0x18/0x20 [ 76.889395][ T1783] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 76.889416][ T1783] ? __kasan_check_write+0x18/0x20 [ 76.889430][ T1783] ? __x64_sys_io_uring_setup+0x80/0x80 [ 76.889451][ T1783] ? __kasan_check_read+0x15/0x20 [ 76.889465][ T1783] __x64_sys_io_uring_setup+0x5f/0x80 [ 76.889484][ T1783] x64_sys_call+0x22c0/0x2ee0 [ 76.889498][ T1783] do_syscall_64+0x57/0xf0 [ 76.889512][ T1783] ? clear_bhb_loop+0x50/0xa0 [ 76.889530][ T1783] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.889546][ T1783] RIP: 0033:0x7f166a79e159 [ 76.889559][ T1783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.889572][ T1783] RSP: 002b:00007f166b698fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 76.889588][ T1783] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f166a79e159 [ 76.889600][ T1783] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000002bf3 [ 76.889610][ T1783] RBP: 00007f166b699090 R08: 0000000000000000 R09: 0000000000000101 [ 76.889620][ T1783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.889629][ T1783] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3babbd58 [ 76.889640][ T1783] [ 77.159281][ T1805] rust_binder: Write failure EFAULT in pid:127 [ 77.279330][ T1813] pim6reg1: entered promiscuous mode [ 77.290931][ T1813] pim6reg1: entered allmulticast mode [ 77.370506][ T377] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 77.373558][ T36] audit: type=1400 audit(2000000006.620:327): avc: denied { append } for pid=1820 comm="syz.4.505" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.420556][ T36] audit: type=1400 audit(2000000006.650:328): avc: denied { create } for pid=1816 comm="syz.6.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.521196][ T377] usb 6-1: not running at top speed; connect to a high speed hub [ 77.529971][ T377] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 77.546874][ T377] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 77.559736][ T377] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 77.569290][ T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.577716][ T377] usb 6-1: Product: syz [ 77.582191][ T377] usb 6-1: Manufacturer: syz [ 77.586973][ T377] usb 6-1: SerialNumber: syz [ 77.800235][ T377] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.807453][ T377] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 77.817102][ T377] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 77.828882][ T377] usb 6-1: USB disconnect, device number 14 [ 77.852998][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.320303][ T1836] rust_binder: Write failure EFAULT in pid:299 [ 78.342549][ T1825] ptp ptp0: new virtual clock ptp1 [ 78.389396][ T1825] ptp ptp0: guarantee physical clock free running [ 78.413827][ T1838] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 78.428803][ T1838] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 78.436673][ T1838] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 78.444671][ T1838] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 78.452572][ T1838] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 78.460450][ T1838] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 78.468295][ T1838] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 78.476124][ T1838] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 78.484042][ T1838] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 78.491997][ T1838] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 78.772156][ T1172] rust_binder: 1864: undelivered TRANSACTION_ERROR: 29189 [ 78.822437][ T1856] FAULT_INJECTION: forcing a failure. [ 78.822437][ T1856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.850541][ T1856] CPU: 1 UID: 0 PID: 1856 Comm: syz.5.515 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 78.850573][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.850585][ T1856] Call Trace: [ 78.850600][ T1856] [ 78.850609][ T1856] __dump_stack+0x21/0x30 [ 78.850637][ T1856] dump_stack_lvl+0x140/0x1c0 [ 78.850659][ T1856] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.850683][ T1856] ? fpu__alloc_mathframe+0xb7/0x150 [ 78.850705][ T1856] dump_stack+0x19/0x20 [ 78.850726][ T1856] should_fail_ex+0x3c2/0x510 [ 78.850748][ T1856] should_fail+0xf/0x20 [ 78.850767][ T1856] should_fail_usercopy+0x1e/0x30 [ 78.850789][ T1856] _copy_from_user+0x20/0xa0 [ 78.850814][ T1856] restore_altstack+0xaf/0x500 [ 78.850831][ T1856] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 78.850850][ T1856] ? __kasan_check_write+0x18/0x20 [ 78.850868][ T1856] ? __cfi_restore_altstack+0x10/0x10 [ 78.850884][ T1856] ? __set_current_blocked+0x281/0x2d0 [ 78.850910][ T1856] __ia32_sys_rt_sigreturn+0x1cf/0x830 [ 78.850925][ T1856] ? _raw_spin_unlock_irq+0x45/0x70 [ 78.850940][ T1856] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 78.850958][ T1856] ? signal_setup_done+0x201/0x2e0 [ 78.850979][ T1856] ? arch_do_signal_or_restart+0x40a/0x700 [ 78.850995][ T1856] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 78.851010][ T1856] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 78.851030][ T1856] ? __kasan_check_read+0x15/0x20 [ 78.851045][ T1856] x64_sys_call+0x2c14/0x2ee0 [ 78.851061][ T1856] do_syscall_64+0x57/0xf0 [ 78.851077][ T1856] ? clear_bhb_loop+0x50/0xa0 [ 78.851098][ T1856] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.851118][ T1856] RIP: 0033:0x7ff3fd13f4d9 [ 78.851134][ T1856] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 78.851149][ T1856] RSP: 002b:00007ff3fe119a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 78.851169][ T1856] RAX: ffffffffffffffda RBX: 00007ff3fd426090 RCX: 00007ff3fd13f4d9 [ 78.851182][ T1856] RDX: 00007ff3fe119a80 RSI: 00007ff3fe119bb0 RDI: 0000000000000011 [ 78.851193][ T1856] RBP: 00007ff3fd23506b R08: 0000000000000000 R09: 0000000000000000 [ 78.851204][ T1856] R10: 00002000000021c0 R11: 0000000000000246 R12: 0000000000000000 [ 78.851215][ T1856] R13: 00007ff3fd426128 R14: 00007ff3fd426090 R15: 00007ffe547ccdb8 [ 78.851230][ T1856] [ 79.174854][ T1876] kvm: kvm [1875]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 79.204883][ T1876] netlink: 'syz.5.523': attribute type 11 has an invalid length. [ 79.220913][ T1876] incfs: Options parsing error. -22 [ 79.236363][ T1876] incfs: mount failed -22 [ 79.413821][ T1887] futex_wake_op: syz.5.527 tries to shift op by 144; fix this program [ 79.433909][ T1887] futex_wake_op: syz.5.527 tries to shift op by 144; fix this program [ 79.484104][ T1891] FAULT_INJECTION: forcing a failure. [ 79.484104][ T1891] name failslab, interval 1, probability 0, space 0, times 0 [ 79.496857][ T1891] CPU: 1 UID: 0 PID: 1891 Comm: syz.5.529 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 79.496886][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.496897][ T1891] Call Trace: [ 79.496903][ T1891] [ 79.496909][ T1891] __dump_stack+0x21/0x30 [ 79.496937][ T1891] dump_stack_lvl+0x140/0x1c0 [ 79.496959][ T1891] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.496983][ T1891] dump_stack+0x19/0x20 [ 79.497004][ T1891] should_fail_ex+0x3c2/0x510 [ 79.497044][ T1891] should_failslab+0xac/0x100 [ 79.497065][ T1891] __kmalloc_node_noprof+0x69/0x500 [ 79.497084][ T1891] ? __kvmalloc_node_noprof+0x128/0x300 [ 79.497100][ T1891] ? __kasan_kmalloc+0x96/0xb0 [ 79.497120][ T1891] __kvmalloc_node_noprof+0x128/0x300 [ 79.497137][ T1891] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 79.497153][ T1891] ? percpu_ref_init+0x240/0x4d0 [ 79.497171][ T1891] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 79.497190][ T1891] io_ring_ctx_alloc+0x28c/0x1dc0 [ 79.497208][ T1891] io_uring_create+0x2e0/0x13f0 [ 79.497225][ T1891] ? __kasan_check_write+0x18/0x20 [ 79.497242][ T1891] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 79.497267][ T1891] ? __kasan_check_write+0x18/0x20 [ 79.497284][ T1891] ? __x64_sys_io_uring_setup+0x80/0x80 [ 79.497308][ T1891] ? __kasan_check_read+0x15/0x20 [ 79.497325][ T1891] __x64_sys_io_uring_setup+0x5f/0x80 [ 79.497348][ T1891] x64_sys_call+0x22c0/0x2ee0 [ 79.497363][ T1891] do_syscall_64+0x57/0xf0 [ 79.497378][ T1891] ? clear_bhb_loop+0x50/0xa0 [ 79.497399][ T1891] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.497419][ T1891] RIP: 0033:0x7ff3fd19e159 [ 79.497435][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.497448][ T1891] RSP: 002b:00007ff3fe13aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 79.497466][ T1891] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007ff3fd19e159 [ 79.497479][ T1891] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003f7 [ 79.497491][ T1891] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 79.497503][ T1891] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 79.497514][ T1891] R13: 0000200000000b10 R14: 00007ff3fe13afd8 R15: 0000000000000000 [ 79.497528][ T1891] [ 79.821174][ T1898] rust_binder: Write failure EFAULT in pid:311 [ 79.924000][ T36] audit: type=1400 audit(2000000009.170:329): avc: denied { bind } for pid=1899 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.949928][ T36] audit: type=1400 audit(2000000009.200:330): avc: denied { listen } for pid=1899 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.970474][ T36] audit: type=1400 audit(2000000009.200:331): avc: denied { accept } for pid=1899 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.029811][ T1878] FAULT_INJECTION: forcing a failure. [ 80.029811][ T1878] name fail_futex, interval 1, probability 0, space 0, times 0 [ 80.042877][ T1878] CPU: 0 UID: 0 PID: 1878 Comm: syz.6.524 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 80.042907][ T1878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.042918][ T1878] Call Trace: [ 80.042929][ T1878] [ 80.042935][ T1878] __dump_stack+0x21/0x30 [ 80.042963][ T1878] dump_stack_lvl+0x140/0x1c0 [ 80.042985][ T1878] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.043007][ T1878] ? handle_mm_fault+0x16fe/0x1ba0 [ 80.043028][ T1878] dump_stack+0x19/0x20 [ 80.043057][ T1878] should_fail_ex+0x3c2/0x510 [ 80.043078][ T1878] should_fail+0xf/0x20 [ 80.043096][ T1878] get_futex_key+0x22c/0x940 [ 80.043116][ T1878] ? __cfi_handle_mm_fault+0x10/0x10 [ 80.043135][ T1878] ? __cfi_get_futex_key+0x10/0x10 [ 80.043155][ T1878] ? find_vma+0xd3/0x120 [ 80.043172][ T1878] futex_wake+0x150/0x950 [ 80.043189][ T1878] ? __cfi_futex_wake+0x10/0x10 [ 80.043204][ T1878] ? do_user_addr_fault+0xbf5/0x1230 [ 80.043222][ T1878] ? __perf_event_period+0x490/0x490 [ 80.043241][ T1878] do_futex+0x37d/0x510 [ 80.043262][ T1878] ? __cfi_do_futex+0x10/0x10 [ 80.043284][ T1878] mm_release+0x15f/0x300 [ 80.043303][ T1878] ? exit_mm_release+0x50/0x50 [ 80.043322][ T1878] ? futex_exit_release+0x11d/0x1f0 [ 80.043343][ T1878] exit_mm_release+0x29/0x50 [ 80.043362][ T1878] do_exit+0x832/0x2850 [ 80.043382][ T1878] ? __fput+0x71e/0xa30 [ 80.043405][ T1878] ? __cfi_do_exit+0x10/0x10 [ 80.043425][ T1878] ? ____fput+0x20/0x30 [ 80.043446][ T1878] ? __kasan_check_write+0x18/0x20 [ 80.043464][ T1878] ? _raw_spin_lock_irq+0x93/0x120 [ 80.043481][ T1878] do_group_exit+0x21f/0x2f0 [ 80.043502][ T1878] ? __kasan_check_write+0x18/0x20 [ 80.043519][ T1878] ? recalc_sigpending+0x16c/0x1d0 [ 80.043537][ T1878] get_signal+0x134c/0x1490 [ 80.043561][ T1878] arch_do_signal_or_restart+0xbc/0x700 [ 80.043579][ T1878] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 80.043599][ T1878] syscall_exit_to_user_mode+0x57/0xb0 [ 80.043621][ T1878] do_syscall_64+0x63/0xf0 [ 80.043638][ T1878] ? clear_bhb_loop+0x50/0xa0 [ 80.043658][ T1878] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.043678][ T1878] RIP: 0033:0x7f166a79e159 [ 80.043694][ T1878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.043709][ T1878] RSP: 002b:00007f166b699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 80.043729][ T1878] RAX: fffffffffffffe00 RBX: 00007f166aa25fa0 RCX: 00007f166a79e159 [ 80.043742][ T1878] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000004 [ 80.043754][ T1878] RBP: 00007f166a83506b R08: 0000000000000000 R09: 0000000000000000 [ 80.043765][ T1878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.043777][ T1878] R13: 00007f166aa26038 R14: 00007f166aa25fa0 R15: 00007fff3babbd58 [ 80.043792][ T1878] [ 80.108038][ T1911] netlink: 212 bytes leftover after parsing attributes in process `syz.4.538'. [ 80.480462][ T377] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.640441][ T377] usb 7-1: Using ep0 maxpacket: 32 [ 80.651157][ T377] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.659359][ T377] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.680438][ T377] usb 7-1: config 0 has no interface number 0 [ 80.686564][ T377] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.720450][ T377] usb 7-1: config 0 interface 184 has no altsetting 0 [ 80.728748][ T377] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.737854][ T377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.745880][ T377] usb 7-1: Product: syz [ 80.750049][ T377] usb 7-1: Manufacturer: syz [ 80.760439][ T377] usb 7-1: SerialNumber: syz [ 80.770636][ T377] usb 7-1: config 0 descriptor?? [ 80.791028][ T377] smsc75xx v1.0.0 [ 80.794700][ T377] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 80.820484][ T377] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 80.983046][ T921] usb 7-1: USB disconnect, device number 6 [ 81.019692][ T1926] FAULT_INJECTION: forcing a failure. [ 81.019692][ T1926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.033137][ T1926] CPU: 1 UID: 0 PID: 1926 Comm: syz.5.541 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 81.033167][ T1926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.033177][ T1926] Call Trace: [ 81.033183][ T1926] [ 81.033190][ T1926] __dump_stack+0x21/0x30 [ 81.033218][ T1926] dump_stack_lvl+0x140/0x1c0 [ 81.033239][ T1926] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.033263][ T1926] dump_stack+0x19/0x20 [ 81.033284][ T1926] should_fail_ex+0x3c2/0x510 [ 81.033304][ T1926] should_fail+0xf/0x20 [ 81.033322][ T1926] should_fail_usercopy+0x1e/0x30 [ 81.033342][ T1926] _copy_from_user+0x20/0xa0 [ 81.033365][ T1926] hidp_sock_ioctl+0x1d4/0x5f0 [ 81.033386][ T1926] ? __cfi_hidp_sock_ioctl+0x10/0x10 [ 81.033419][ T1926] ? proc_fail_nth_write+0x184/0x220 [ 81.033443][ T1926] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.033468][ T1926] sock_do_ioctl+0x118/0x330 [ 81.033486][ T1926] ? sock_show_fdinfo+0xd0/0xd0 [ 81.033502][ T1926] ? __cfi_vfs_write+0x10/0x10 [ 81.033521][ T1926] ? __kasan_check_write+0x18/0x20 [ 81.033538][ T1926] ? mutex_unlock+0x90/0x240 [ 81.033558][ T1926] sock_ioctl+0x568/0x7e0 [ 81.033574][ T1926] ? __cfi_sock_ioctl+0x10/0x10 [ 81.033591][ T1926] ? __fget_files+0x2bc/0x330 [ 81.033611][ T1926] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.033631][ T1926] ? security_file_ioctl+0x3e/0x110 [ 81.033648][ T1926] ? __cfi_sock_ioctl+0x10/0x10 [ 81.033664][ T1926] __se_sys_ioctl+0x126/0x1b0 [ 81.033685][ T1926] __x64_sys_ioctl+0x7f/0xa0 [ 81.033704][ T1926] x64_sys_call+0x1878/0x2ee0 [ 81.033720][ T1926] do_syscall_64+0x57/0xf0 [ 81.033736][ T1926] ? clear_bhb_loop+0x50/0xa0 [ 81.033758][ T1926] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.033777][ T1926] RIP: 0033:0x7ff3fd19e159 [ 81.033793][ T1926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.033807][ T1926] RSP: 002b:00007ff3fe13b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.033826][ T1926] RAX: ffffffffffffffda RBX: 00007ff3fd425fa0 RCX: 00007ff3fd19e159 [ 81.033839][ T1926] RDX: 0000000000000000 RSI: 00000000800448d3 RDI: 0000000000000004 [ 81.033851][ T1926] RBP: 00007ff3fe13b090 R08: 0000000000000000 R09: 0000000000000000 [ 81.033862][ T1926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.033875][ T1926] R13: 00007ff3fd426038 R14: 00007ff3fd425fa0 R15: 00007ffe547ccdb8 [ 81.033889][ T1926] [ 81.312992][ T1928] rust_binder: Write failure EFAULT in pid:338 [ 81.587003][ T1939] FAULT_INJECTION: forcing a failure. [ 81.587003][ T1939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.630443][ T377] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 81.630442][ T1939] CPU: 0 UID: 0 PID: 1939 Comm: syz.6.546 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 81.630469][ T1939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.630479][ T1939] Call Trace: [ 81.630484][ T1939] [ 81.630491][ T1939] __dump_stack+0x21/0x30 [ 81.630521][ T1939] dump_stack_lvl+0x140/0x1c0 [ 81.630545][ T1939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.630572][ T1939] dump_stack+0x19/0x20 [ 81.630596][ T1939] should_fail_ex+0x3c2/0x510 [ 81.630617][ T1939] should_fail_alloc_page+0xec/0x110 [ 81.630640][ T1939] __alloc_pages_noprof+0x1c0/0x7e0 [ 81.630667][ T1939] ? x64_sys_call+0x1cb3/0x2ee0 [ 81.630684][ T1939] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 81.630710][ T1939] __folio_alloc_noprof+0x14/0x80 [ 81.630733][ T1939] folio_prealloc+0x46/0x220 [ 81.630754][ T1939] do_wp_page+0x187e/0x2e80 [ 81.630784][ T1939] ? __kasan_slab_free+0x6a/0x80 [ 81.630808][ T1939] ? kmem_cache_free+0x1bd/0x4f0 [ 81.630827][ T1939] ? fcntl_setlk+0x408/0x10a0 [ 81.630848][ T1939] ? folio_put+0x90/0x90 [ 81.630867][ T1939] ? __cfi__raw_spin_lock+0x10/0x10 [ 81.630884][ T1939] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 81.630901][ T1939] handle_mm_fault+0x1017/0x1ba0 [ 81.630923][ T1939] ? __cfi_handle_mm_fault+0x10/0x10 [ 81.630941][ T1939] ? lock_vma_under_rcu+0x4cf/0x590 [ 81.630965][ T1939] do_user_addr_fault+0x951/0x1230 [ 81.630987][ T1939] ? fpregs_restore_userregs+0x11c/0x260 [ 81.631009][ T1939] exc_page_fault+0x58/0xc0 [ 81.631032][ T1939] asm_exc_page_fault+0x2b/0x30 [ 81.631054][ T1939] RIP: 0033:0x7f166a664054 [ 81.631069][ T1939] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 74 b1 0d 00 85 c0 0f 84 ec 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 1d 93 0c 00 48 8b 4c 24 08 8b 00 [ 81.631083][ T1939] RSP: 002b:00007f166b699050 EFLAGS: 00010206 [ 81.631100][ T1939] RAX: 0000000000000000 RBX: 00007f166aa25fa0 RCX: 00007f166a83506b [ 81.631113][ T1939] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000004 [ 81.631124][ T1939] RBP: 00007f166a83506b R08: 0000000000000000 R09: 0000000000000000 [ 81.631135][ T1939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.631146][ T1939] R13: 00007f166aa26038 R14: 00007f166aa25fa0 R15: 00007fff3babbd58 [ 81.631162][ T1939] [ 81.631173][ T1939] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 81.801471][ T377] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 81.960447][ T377] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 81.981802][ T377] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 82.000450][ T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.008478][ T377] usb 6-1: Product: syz [ 82.030431][ T377] usb 6-1: Manufacturer: syz [ 82.035077][ T377] usb 6-1: SerialNumber: syz [ 82.050672][ T377] usb 6-1: config 0 descriptor?? [ 82.055940][ T1935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.063148][ T1935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.271578][ T1935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.278941][ T1935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.588128][ T1954] FAULT_INJECTION: forcing a failure. [ 82.588128][ T1954] name failslab, interval 1, probability 0, space 0, times 0 [ 82.612834][ T1954] CPU: 0 UID: 0 PID: 1954 Comm: syz.4.551 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 82.612867][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.612879][ T1954] Call Trace: [ 82.612885][ T1954] [ 82.612892][ T1954] __dump_stack+0x21/0x30 [ 82.612920][ T1954] dump_stack_lvl+0x140/0x1c0 [ 82.612948][ T1954] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.612969][ T1954] ? avc_has_perm+0x155/0x240 [ 82.612990][ T1954] ? __cfi_avc_has_perm+0x10/0x10 [ 82.613010][ T1954] dump_stack+0x19/0x20 [ 82.613031][ T1954] should_fail_ex+0x3c2/0x510 [ 82.613051][ T1954] should_failslab+0xac/0x100 [ 82.613073][ T1954] __kmalloc_cache_noprof+0x41/0x470 [ 82.613092][ T1954] ? vhost_task_create+0x12c/0x3f0 [ 82.613112][ T1954] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 82.613132][ T1954] vhost_task_create+0x12c/0x3f0 [ 82.613150][ T1954] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 82.613171][ T1954] ? __cfi_vhost_task_create+0x10/0x10 [ 82.613187][ T1954] ? __cfi_vhost_task_fn+0x10/0x10 [ 82.613205][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.613221][ T1954] ? mutex_lock+0x97/0x1d0 [ 82.613240][ T1954] ? __cfi_mutex_lock+0x10/0x10 [ 82.613257][ T1954] ? kernel_text_address+0xa9/0xe0 [ 82.613280][ T1954] kvm_mmu_post_init_vm+0x161/0x300 [ 82.613303][ T1954] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 82.613325][ T1954] ? _parse_integer_limit+0x195/0x1e0 [ 82.613345][ T1954] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 82.613368][ T1954] ? kstrtoull+0x13b/0x1e0 [ 82.613385][ T1954] ? kstrtouint+0x78/0xf0 [ 82.613403][ T1954] ? ioctl_has_perm+0x1bc/0x500 [ 82.613420][ T1954] ? __asan_memcpy+0x5a/0x80 [ 82.613437][ T1954] ? ioctl_has_perm+0x408/0x500 [ 82.613454][ T1954] ? has_cap_mac_admin+0xd0/0xd0 [ 82.613471][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.613488][ T1954] ? mutex_lock_killable+0x97/0x1d0 [ 82.613506][ T1954] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.613526][ T1954] ? proc_fail_nth_write+0x184/0x220 [ 82.613550][ T1954] kvm_vcpu_ioctl+0xa43/0x1000 [ 82.613568][ T1954] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.613584][ T1954] ? __cfi_vfs_write+0x10/0x10 [ 82.613602][ T1954] ? __kasan_check_write+0x18/0x20 [ 82.613619][ T1954] ? mutex_unlock+0x90/0x240 [ 82.613638][ T1954] ? __cfi_mutex_unlock+0x10/0x10 [ 82.613658][ T1954] ? __fget_files+0x2bc/0x330 [ 82.613678][ T1954] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.613699][ T1954] ? security_file_ioctl+0x3e/0x110 [ 82.613716][ T1954] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.613732][ T1954] __se_sys_ioctl+0x126/0x1b0 [ 82.613752][ T1954] __x64_sys_ioctl+0x7f/0xa0 [ 82.613772][ T1954] x64_sys_call+0x1878/0x2ee0 [ 82.613787][ T1954] do_syscall_64+0x57/0xf0 [ 82.613801][ T1954] ? clear_bhb_loop+0x50/0xa0 [ 82.613822][ T1954] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.613841][ T1954] RIP: 0033:0x7fc504b9e159 [ 82.613857][ T1954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.613871][ T1954] RSP: 002b:00007fc5059ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.613892][ T1954] RAX: ffffffffffffffda RBX: 00007fc504e25fa0 RCX: 00007fc504b9e159 [ 82.613905][ T1954] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 82.613916][ T1954] RBP: 00007fc5059ec090 R08: 0000000000000000 R09: 0000000000000000 [ 82.613927][ T1954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.613950][ T1954] R13: 00007fc504e26038 R14: 00007fc504e25fa0 R15: 00007ffcc6b9cca8 [ 82.613965][ T1954] [ 82.738260][ T377] Error reading MAC address [ 82.978867][ T377] usb 6-1: USB disconnect, device number 15 [ 83.034225][ T1959] rust_binder: Write failure EFAULT in pid:340 [ 83.039564][ T1961] netlink: 60 bytes leftover after parsing attributes in process `syz.6.554'. [ 83.228044][ T1969] FAULT_INJECTION: forcing a failure. [ 83.228044][ T1969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.247190][ T1969] CPU: 1 UID: 0 PID: 1969 Comm: syz.4.557 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 83.247221][ T1969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.247232][ T1969] Call Trace: [ 83.247239][ T1969] [ 83.247246][ T1969] __dump_stack+0x21/0x30 [ 83.247276][ T1969] dump_stack_lvl+0x140/0x1c0 [ 83.247318][ T1969] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.247353][ T1969] dump_stack+0x19/0x20 [ 83.247377][ T1969] should_fail_ex+0x3c2/0x510 [ 83.247400][ T1969] should_fail_alloc_page+0xec/0x110 [ 83.247433][ T1969] __alloc_pages_noprof+0x1c0/0x7e0 [ 83.247460][ T1969] ? x64_sys_call+0x1cb3/0x2ee0 [ 83.247478][ T1969] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.247506][ T1969] __folio_alloc_noprof+0x14/0x80 [ 83.247536][ T1969] folio_prealloc+0x46/0x220 [ 83.247559][ T1969] do_wp_page+0x187e/0x2e80 [ 83.247580][ T1969] ? __kasan_slab_free+0x6a/0x80 [ 83.247602][ T1969] ? kmem_cache_free+0x1bd/0x4f0 [ 83.247621][ T1969] ? fcntl_setlk+0x408/0x10a0 [ 83.247642][ T1969] ? folio_put+0x90/0x90 [ 83.247661][ T1969] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.247679][ T1969] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 83.247698][ T1969] handle_mm_fault+0x1017/0x1ba0 [ 83.247721][ T1969] ? __cfi_handle_mm_fault+0x10/0x10 [ 83.247740][ T1969] ? lock_vma_under_rcu+0x4cf/0x590 [ 83.247766][ T1969] do_user_addr_fault+0x951/0x1230 [ 83.247783][ T1969] ? fpregs_restore_userregs+0x11c/0x260 [ 83.247806][ T1969] exc_page_fault+0x58/0xc0 [ 83.247827][ T1969] asm_exc_page_fault+0x2b/0x30 [ 83.247847][ T1969] RIP: 0033:0x7fc504a64054 [ 83.247862][ T1969] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 74 b1 0d 00 85 c0 0f 84 ec 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 1d 93 0c 00 48 8b 4c 24 08 8b 00 [ 83.247877][ T1969] RSP: 002b:00007fc5059ec050 EFLAGS: 00010206 [ 83.247893][ T1969] RAX: 0000000000000000 RBX: 00007fc504e25fa0 RCX: 00007fc504c3506b [ 83.247907][ T1969] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000004 [ 83.247918][ T1969] RBP: 00007fc504c3506b R08: 0000000000000000 R09: 0000000000000000 [ 83.247930][ T1969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.247942][ T1969] R13: 00007fc504e26038 R14: 00007fc504e25fa0 R15: 00007ffcc6b9cca8 [ 83.247958][ T1969] [ 83.247970][ T1969] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 83.436107][ T1979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.560'. [ 83.603760][ T1985] 9pnet_fd: Insufficient options for proto=fd [ 83.750455][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 83.875736][ T36] audit: type=1400 audit(2000000013.120:332): avc: denied { ioctl } for pid=1999 comm="syz.4.570" path="/141/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=75 ioctlcmd=0x54a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 83.900463][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 83.911574][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.932731][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.960443][ T10] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 83.980433][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.991575][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 84.020449][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.040996][ T10] usb 6-1: config 0 descriptor?? [ 84.151656][ T2012] overlayfs: cannot append lower layer [ 84.202757][ T2014] overlayfs: cannot append lower layer [ 84.220740][ T2014] overlayfs: cannot append lower layer [ 84.460880][ T2016] incfs: Options parsing error. -22 [ 84.466149][ T2016] incfs: mount failed -22 [ 84.652413][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 84.658392][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 84.677952][ T10] usb 6-1: USB disconnect, device number 16 [ 84.730454][ T377] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 84.901747][ T377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.910132][ T377] usb 5-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 84.930440][ T377] usb 5-1: config 1 interface 0 altsetting 150 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.960442][ T377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 84.969050][ T377] usb 5-1: string descriptor 0 read error: -22 [ 84.980454][ T377] usb 5-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.40 [ 84.989521][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.003226][ T377] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 85.267336][ T2017] overlayfs: overlapping lowerdir path [ 85.317372][ T309] bridge_slave_1: left allmulticast mode [ 85.323083][ T309] bridge_slave_1: left promiscuous mode [ 85.328750][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.341290][ T309] bridge_slave_0: left allmulticast mode [ 85.346965][ T309] bridge_slave_0: left promiscuous mode [ 85.363765][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.506271][ T2024] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.520480][ T2024] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.535189][ T2024] bridge_slave_0: entered allmulticast mode [ 85.548079][ T2024] bridge_slave_0: entered promiscuous mode [ 85.561686][ T309] veth1_macvtap: left promiscuous mode [ 85.570502][ T309] veth0_vlan: left promiscuous mode [ 85.705818][ T2024] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.720427][ T2024] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.735140][ T2024] bridge_slave_1: entered allmulticast mode [ 85.746940][ T2024] bridge_slave_1: entered promiscuous mode [ 85.840140][ T2024] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.847242][ T2024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.854561][ T2024] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.861633][ T2024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.887773][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.902908][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.932941][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.940017][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.961815][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.968912][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.023269][ T2024] veth0_vlan: entered promiscuous mode [ 86.049299][ T2024] veth1_macvtap: entered promiscuous mode [ 86.118641][ T2030] FAULT_INJECTION: forcing a failure. [ 86.118641][ T2030] name failslab, interval 1, probability 0, space 0, times 0 [ 86.147917][ T2030] CPU: 1 UID: 0 PID: 2030 Comm: syz.7.578 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 86.147951][ T2030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.147962][ T2030] Call Trace: [ 86.147968][ T2030] [ 86.147975][ T2030] __dump_stack+0x21/0x30 [ 86.148002][ T2030] dump_stack_lvl+0x140/0x1c0 [ 86.148025][ T2030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.148055][ T2030] ? check_stack_object+0x81/0x150 [ 86.148074][ T2030] ? __virt_addr_valid+0x2a1/0x370 [ 86.148094][ T2030] dump_stack+0x19/0x20 [ 86.148116][ T2030] should_fail_ex+0x3c2/0x510 [ 86.148135][ T2030] should_failslab+0xac/0x100 [ 86.148156][ T2030] __kmalloc_cache_noprof+0x41/0x470 [ 86.148174][ T2030] ? memdup_user+0xb1/0x170 [ 86.148189][ T2030] ? __se_sys_mount+0x15f/0x480 [ 86.148209][ T2030] __se_sys_mount+0x15f/0x480 [ 86.148222][ T2030] ? ksys_write+0x1f3/0x260 [ 86.148237][ T2030] ? __x64_sys_mount+0xf0/0xf0 [ 86.148254][ T2030] __x64_sys_mount+0xc3/0xf0 [ 86.148270][ T2030] x64_sys_call+0x2021/0x2ee0 [ 86.148285][ T2030] do_syscall_64+0x57/0xf0 [ 86.148300][ T2030] ? clear_bhb_loop+0x50/0xa0 [ 86.148319][ T2030] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.148337][ T2030] RIP: 0033:0x7fc33d59e159 [ 86.148351][ T2030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.148363][ T2030] RSP: 002b:00007fc33e3d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.148379][ T2030] RAX: ffffffffffffffda RBX: 00007fc33d825fa0 RCX: 00007fc33d59e159 [ 86.148391][ T2030] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000000 [ 86.148402][ T2030] RBP: 00007fc33e3d3090 R08: 00002000000006c0 R09: 0000000000000000 [ 86.148412][ T2030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.148422][ T2030] R13: 00007fc33d826038 R14: 00007fc33d825fa0 R15: 00007ffe1192f5c8 [ 86.148436][ T2030] [ 87.277484][ T377] usb 5-1: USB disconnect, device number 12 [ 87.326720][ T2063] netlink: 80 bytes leftover after parsing attributes in process `syz.4.589'. [ 88.284329][ T2079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 99.245947][ T341] bridge_slave_1: left allmulticast mode [ 99.252177][ T341] bridge_slave_1: left promiscuous mode [ 99.257814][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.280869][ T341] bridge_slave_0: left allmulticast mode [ 99.286552][ T341] bridge_slave_0: left promiscuous mode [ 99.300692][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.447583][ T341] veth1_macvtap: left promiscuous mode [ 99.460587][ T341] veth0_vlan: left promiscuous mode [ 99.616507][ T2095] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.640437][ T2095] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.647536][ T2095] bridge_slave_0: entered allmulticast mode [ 99.660885][ T2095] bridge_slave_0: entered promiscuous mode [ 99.681045][ T2095] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.688146][ T2095] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.710515][ T2095] bridge_slave_1: entered allmulticast mode [ 99.716867][ T2095] bridge_slave_1: entered promiscuous mode [ 99.788920][ T2095] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.796019][ T2095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.803340][ T2095] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.810376][ T2095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.867700][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.880789][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.912042][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.919115][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.950712][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.957777][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.013281][ T2095] veth0_vlan: entered promiscuous mode [ 100.034528][ T2095] veth1_macvtap: entered promiscuous mode [ 100.195319][ T10] wiimote 0005:057E:0306.0009: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 100.221035][ T10] wiimote 0005:057E:0306.0009: New device registered [ 100.480637][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 100.650460][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 100.661476][ T10] usb 9-1: config 0 has no interfaces? [ 100.668363][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.690440][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.698470][ T10] usb 9-1: Product: syz [ 100.710660][ T10] usb 9-1: Manufacturer: syz [ 100.715292][ T10] usb 9-1: SerialNumber: syz [ 100.732473][ T10] usb 9-1: config 0 descriptor?? [ 101.270649][ T921] wiimote 0005:057E:0306.0009: detected device: Nintendo Wii Remote (Gen 1) [ 101.294453][ T921] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input40 [ 101.351566][ T921] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input41 [ 101.382926][ T921] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input39 [ 101.512546][ T341] veth1_macvtap: left promiscuous mode [ 101.518104][ T341] veth0_vlan: left promiscuous mode [ 101.667840][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.690519][ T2113] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.700478][ T2113] bridge_slave_0: entered allmulticast mode [ 101.706824][ T2113] bridge_slave_0: entered promiscuous mode [ 101.725120][ T2113] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.740642][ T2113] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.756431][ T2113] bridge_slave_1: entered allmulticast mode [ 101.768258][ T2113] bridge_slave_1: entered promiscuous mode [ 101.910997][ T2113] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.918108][ T2113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.925435][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.932492][ T2113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.985304][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.998264][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.018655][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.025762][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.051746][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.058835][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.137607][ T2113] veth0_vlan: entered promiscuous mode [ 102.162062][ T2113] veth1_macvtap: entered promiscuous mode [ 102.184883][ T344] bridge_slave_1: left allmulticast mode [ 102.190835][ T344] bridge_slave_1: left promiscuous mode [ 102.196545][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.205628][ T344] bridge_slave_0: left allmulticast mode [ 102.211798][ T344] bridge_slave_0: left promiscuous mode [ 102.217443][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.345628][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.358639][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.371288][ T2119] bridge_slave_0: entered allmulticast mode [ 102.381080][ T2119] bridge_slave_0: entered promiscuous mode [ 102.387678][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.395527][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.404325][ T2119] bridge_slave_1: entered allmulticast mode [ 102.410839][ T2119] bridge_slave_1: entered promiscuous mode [ 102.421143][ T344] veth1_macvtap: left promiscuous mode [ 102.426681][ T344] veth0_vlan: left promiscuous mode [ 102.582568][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.589726][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.597046][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.604108][ T2119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.628790][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.636376][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.647989][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.655079][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.665013][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.672110][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.702139][ T2119] veth0_vlan: entered promiscuous mode [ 102.719388][ T2119] veth1_macvtap: entered promiscuous mode [ 102.763009][ T2133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 103.198042][ T45] usb 9-1: USB disconnect, device number 2 [ 103.210898][ T2117] wiimote 0005:057E:0306.0009: Device removed [ 103.238459][ T2130] overlayfs: statfs failed on './file0' [ 103.580455][ T1172] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 103.750795][ T1172] usb 10-1: Using ep0 maxpacket: 32 [ 103.761487][ T1172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.780452][ T1172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.801676][ T1172] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.820451][ T1172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.840052][ T1172] usb 10-1: config 0 descriptor?? [ 103.860505][ T1172] hub 10-1:0.0: USB hub found [ 104.067486][ T1172] hub 10-1:0.0: 1 port detected [ 104.269712][ T36] audit: type=1400 audit(2000000033.510:333): avc: denied { setopt } for pid=2144 comm="syz.9.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.831680][ T1172] hub 10-1:0.0: activate --> -90 [ 105.733202][ T10] usb 10-1: USB disconnect, device number 2 [ 105.739204][ T1172] usb 10-1-port1: config error [ 105.778949][ T36] audit: type=1400 audit(2000000035.020:334): avc: denied { ioctl } for pid=2148 comm="syz.9.610" path="socket:[20795]" dev="sockfs" ino=20795 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.911092][ T2151] FAULT_INJECTION: forcing a failure. [ 105.911092][ T2151] name failslab, interval 1, probability 0, space 0, times 0 [ 105.943699][ T2151] CPU: 0 UID: 0 PID: 2151 Comm: syz.9.611 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 105.943734][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.943746][ T2151] Call Trace: [ 105.943752][ T2151] [ 105.943760][ T2151] __dump_stack+0x21/0x30 [ 105.943792][ T2151] dump_stack_lvl+0x140/0x1c0 [ 105.943818][ T2151] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.943842][ T2151] ? vfs_write+0xbcf/0xfd0 [ 105.943863][ T2151] dump_stack+0x19/0x20 [ 105.943886][ T2151] should_fail_ex+0x3c2/0x510 [ 105.943908][ T2151] should_failslab+0xac/0x100 [ 105.943929][ T2151] __kmalloc_cache_noprof+0x41/0x470 [ 105.943949][ T2151] ? __se_sys_timerfd_create+0x1c6/0x590 [ 105.943968][ T2151] __se_sys_timerfd_create+0x1c6/0x590 [ 105.943985][ T2151] ? xfd_validate_state+0x68/0x140 [ 105.944009][ T2151] ? __x64_sys_timerfd_create+0x80/0x80 [ 105.944027][ T2151] ? __kasan_check_write+0x18/0x20 [ 105.944045][ T2151] __x64_sys_timerfd_create+0x5f/0x80 [ 105.944062][ T2151] x64_sys_call+0x2e54/0x2ee0 [ 105.944079][ T2151] do_syscall_64+0x57/0xf0 [ 105.944096][ T2151] ? clear_bhb_loop+0x50/0xa0 [ 105.944117][ T2151] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.944147][ T2151] RIP: 0033:0x7f1fccf9e159 [ 105.944163][ T2151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.944180][ T2151] RSP: 002b:00007f1fcdebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 105.944200][ T2151] RAX: ffffffffffffffda RBX: 00007f1fcd225fa0 RCX: 00007f1fccf9e159 [ 105.944214][ T2151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.944224][ T2151] RBP: 00007f1fcd03506b R08: 0000000000000000 R09: 0000000000000000 [ 105.944236][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.944247][ T2151] R13: 00007f1fcd226038 R14: 00007f1fcd225fa0 R15: 00007fff887ff1b8 [ 105.944263][ T2151] [ 106.480472][ T377] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 106.610458][ T377] usb 10-1: device descriptor read/64, error -71 [ 106.850454][ T377] usb 10-1: device descriptor read/64, error -71 [ 107.090446][ T377] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 107.240442][ T377] usb 10-1: device descriptor read/64, error -71 [ 107.411927][ T309] bridge_slave_1: left allmulticast mode [ 107.417612][ T309] bridge_slave_1: left promiscuous mode [ 107.430727][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.451005][ T309] bridge_slave_0: left allmulticast mode [ 107.456682][ T309] bridge_slave_0: left promiscuous mode [ 107.470667][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.490452][ T377] usb 10-1: device descriptor read/64, error -71 [ 107.596808][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.605904][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.610539][ T377] usb usb10-port1: attempt power cycle [ 107.613267][ T2155] bridge_slave_0: entered allmulticast mode [ 107.624873][ T2155] bridge_slave_0: entered promiscuous mode [ 107.632094][ T309] tipc: Disabling bearer [ 107.647256][ T309] tipc: Left network mode [ 107.652924][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.659983][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.671200][ T2155] bridge_slave_1: entered allmulticast mode [ 107.677619][ T2155] bridge_slave_1: entered promiscuous mode [ 107.699840][ T309] veth1_macvtap: left promiscuous mode [ 107.705912][ T309] veth0_vlan: left promiscuous mode [ 107.846140][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.853243][ T2155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.860580][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.867616][ T2155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.897797][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.905760][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.941378][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.948460][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.956697][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.963777][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.982393][ T377] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 108.005621][ T2155] veth0_vlan: entered promiscuous mode [ 108.017473][ T2155] veth1_macvtap: entered promiscuous mode [ 108.030198][ T377] usb 10-1: device descriptor read/8, error -71 [ 108.161624][ T377] usb 10-1: device descriptor read/8, error -71 [ 108.410528][ T377] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 108.441573][ T377] usb 10-1: device descriptor read/8, error -71 [ 108.480501][ T921] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.571532][ T377] usb 10-1: device descriptor read/8, error -71 [ 108.641206][ T921] usb 2-1: not running at top speed; connect to a high speed hub [ 108.649704][ T921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.660180][ T921] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 108.669452][ T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.681499][ T377] usb usb10-port1: unable to enumerate USB device [ 108.681779][ T921] usb 2-1: Found UVC 1.00 device (046d:0825) [ 109.224438][ T2224] FAULT_INJECTION: forcing a failure. [ 109.224438][ T2224] name failslab, interval 1, probability 0, space 0, times 0 [ 109.237141][ T2224] CPU: 0 UID: 0 PID: 2224 Comm: syz.9.619 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 109.237169][ T2224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.237179][ T2224] Call Trace: [ 109.237184][ T2224] [ 109.237190][ T2224] __dump_stack+0x21/0x30 [ 109.237216][ T2224] dump_stack_lvl+0x140/0x1c0 [ 109.237241][ T2224] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.237263][ T2224] ? up_read+0x26/0x1c0 [ 109.237284][ T2224] ? do_user_addr_fault+0xbf5/0x1230 [ 109.237301][ T2224] dump_stack+0x19/0x20 [ 109.237322][ T2224] should_fail_ex+0x3c2/0x510 [ 109.237342][ T2224] should_failslab+0xac/0x100 [ 109.237363][ T2224] kmem_cache_alloc_noprof+0x42/0x410 [ 109.237381][ T2224] ? getname_flags+0xcc/0x6b0 [ 109.237400][ T2224] ? asm_exc_page_fault+0x2b/0x30 [ 109.237421][ T2224] getname_flags+0xcc/0x6b0 [ 109.237440][ T2224] user_path_at+0x2b/0x60 [ 109.237460][ T2224] __se_sys_mount+0x28a/0x480 [ 109.237479][ T2224] ? ksys_write+0x1f3/0x260 [ 109.237498][ T2224] ? __x64_sys_mount+0xf0/0xf0 [ 109.237517][ T2224] __x64_sys_mount+0xc3/0xf0 [ 109.237535][ T2224] x64_sys_call+0x2021/0x2ee0 [ 109.237560][ T2224] do_syscall_64+0x57/0xf0 [ 109.237576][ T2224] ? clear_bhb_loop+0x50/0xa0 [ 109.237596][ T2224] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.237620][ T2224] RIP: 0033:0x7f1fccf9e159 [ 109.237635][ T2224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.237650][ T2224] RSP: 002b:00007f1fcdebf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.237673][ T2224] RAX: ffffffffffffffda RBX: 00007f1fcd225fa0 RCX: 00007f1fccf9e159 [ 109.237687][ T2224] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000000 [ 109.237699][ T2224] RBP: 00007f1fcdebf090 R08: 00002000000006c0 R09: 0000000000000000 [ 109.237711][ T2224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.237722][ T2224] R13: 00007f1fcd226038 R14: 00007f1fcd225fa0 R15: 00007fff887ff1b8 [ 109.237737][ T2224] [ 109.506986][ T36] audit: type=1400 audit(2000000038.750:335): avc: denied { listen } for pid=2229 comm="syz.9.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.543395][ T36] audit: type=1400 audit(2000000038.770:336): avc: denied { read } for pid=2229 comm="syz.9.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.248817][ T921] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 111.257736][ T921] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 111.274602][ T921] usb 2-1: USB disconnect, device number 2 [ 111.911185][ T36] audit: type=1400 audit(2000000041.150:337): avc: denied { read } for pid=2282 comm="syz.9.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.098546][ T2296] FAULT_INJECTION: forcing a failure. [ 112.098546][ T2296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.130340][ T2296] CPU: 0 UID: 0 PID: 2296 Comm: syz.8.648 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 112.130373][ T2296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.130386][ T2296] Call Trace: [ 112.130391][ T2296] [ 112.130397][ T2296] __dump_stack+0x21/0x30 [ 112.130423][ T2296] dump_stack_lvl+0x140/0x1c0 [ 112.130445][ T2296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.130467][ T2296] ? post_alloc_hook+0x37d/0x3b0 [ 112.130490][ T2296] dump_stack+0x19/0x20 [ 112.130510][ T2296] should_fail_ex+0x3c2/0x510 [ 112.130531][ T2296] should_fail_alloc_page+0xec/0x110 [ 112.130552][ T2296] __alloc_pages_noprof+0x1c0/0x7e0 [ 112.130575][ T2296] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 112.130600][ T2296] ? __cfi_post_alloc_hook+0x10/0x10 [ 112.130621][ T2296] __folio_alloc_noprof+0x14/0x80 [ 112.130643][ T2296] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 112.130667][ T2296] ? shmem_replace_folio+0x9b0/0x9b0 [ 112.130687][ T2296] ? shmem_huge_global_enabled+0x2da/0x360 [ 112.130706][ T2296] ? shmem_allowable_huge_orders+0x405/0x430 [ 112.130727][ T2296] shmem_get_folio_gfp+0x5cd/0x12e0 [ 112.130747][ T2296] ? shmem_get_folio+0xc0/0xc0 [ 112.130764][ T2296] ? pte_alloc_one+0x1ed/0x530 [ 112.130782][ T2296] ? __cfi_filemap_map_pages+0x10/0x10 [ 112.130804][ T2296] shmem_fault+0x17d/0x350 [ 112.130824][ T2296] do_pte_missing+0x364c/0x4440 [ 112.130848][ T2296] ? pte_marker_clear+0x1b0/0x1b0 [ 112.130868][ T2296] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 112.130890][ T2296] ? __kasan_slab_alloc+0x73/0x90 [ 112.130910][ T2296] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 112.130928][ T2296] ? proc_pid_make_inode+0x25/0x140 [ 112.130947][ T2296] ? __cfi___pmd_alloc+0x10/0x10 [ 112.130966][ T2296] ? do_filp_open+0x1f2/0x440 [ 112.130988][ T2296] ? do_syscall_64+0x57/0xf0 [ 112.131004][ T2296] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 112.131028][ T2296] handle_mm_fault+0x1189/0x1ba0 [ 112.131050][ T2296] ? __cfi_handle_mm_fault+0x10/0x10 [ 112.131070][ T2296] ? find_vma+0xd3/0x120 [ 112.131088][ T2296] ? lock_mm_and_find_vma+0xb8/0x390 [ 112.131108][ T2296] do_user_addr_fault+0x4ee/0x1230 [ 112.131127][ T2296] exc_page_fault+0x58/0xc0 [ 112.131147][ T2296] asm_exc_page_fault+0x2b/0x30 [ 112.131168][ T2296] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 112.131191][ T2296] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 3f 6d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 112.131219][ T2296] RSP: 0018:ffffc9000e2cf9b0 EFLAGS: 00050202 [ 112.131235][ T2296] RAX: 00007ffffffff001 RBX: 0000000000000094 RCX: 0000000000000094 [ 112.131246][ T2296] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000e2cfb50 [ 112.131263][ T2296] RBP: ffffc9000e2cf9d0 R08: 0000000000000003 R09: 0000000000000004 [ 112.131274][ T2296] R10: dffffc0000000000 R11: fffff52001c59f7c R12: ffffc9000e2cfb50 [ 112.131287][ T2296] R13: dffffc0000000000 R14: ffffc9000e2cfb50 R15: 0000000000000000 [ 112.131301][ T2296] ? _copy_from_user+0x6d/0xa0 [ 112.131325][ T2296] hidp_sock_ioctl+0x1d4/0x5f0 [ 112.131346][ T2296] ? __cfi_hidp_sock_ioctl+0x10/0x10 [ 112.131372][ T2296] ? proc_fail_nth_write+0x184/0x220 [ 112.131395][ T2296] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 112.131419][ T2296] sock_do_ioctl+0x118/0x330 [ 112.131438][ T2296] ? sock_show_fdinfo+0xd0/0xd0 [ 112.131455][ T2296] ? __cfi_vfs_write+0x10/0x10 [ 112.131473][ T2296] ? __kasan_check_write+0x18/0x20 [ 112.131489][ T2296] ? mutex_unlock+0x90/0x240 [ 112.131508][ T2296] sock_ioctl+0x568/0x7e0 [ 112.131525][ T2296] ? __cfi_sock_ioctl+0x10/0x10 [ 112.131541][ T2296] ? __fget_files+0x2bc/0x330 [ 112.131562][ T2296] ? bpf_lsm_file_ioctl+0xd/0x20 [ 112.131583][ T2296] ? security_file_ioctl+0x3e/0x110 [ 112.131601][ T2296] ? __cfi_sock_ioctl+0x10/0x10 [ 112.131616][ T2296] __se_sys_ioctl+0x126/0x1b0 [ 112.131636][ T2296] __x64_sys_ioctl+0x7f/0xa0 [ 112.131656][ T2296] x64_sys_call+0x1878/0x2ee0 [ 112.131673][ T2296] do_syscall_64+0x57/0xf0 [ 112.131688][ T2296] ? clear_bhb_loop+0x50/0xa0 [ 112.131708][ T2296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.131728][ T2296] RIP: 0033:0x7f847eb9e159 [ 112.131741][ T2296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.131755][ T2296] RSP: 002b:00007f847fad8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.131772][ T2296] RAX: ffffffffffffffda RBX: 00007f847ee25fa0 RCX: 00007f847eb9e159 [ 112.131785][ T2296] RDX: 0000000000000000 RSI: 00000000800448d3 RDI: 0000000000000004 [ 112.131796][ T2296] RBP: 00007f847fad8090 R08: 0000000000000000 R09: 0000000000000000 [ 112.131806][ T2296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.131817][ T2296] R13: 00007f847ee26038 R14: 00007f847ee25fa0 R15: 00007ffe7dedece8 [ 112.131832][ T2296] [ 112.805676][ T2314] netlink: 'syz.8.655': attribute type 6 has an invalid length. [ 112.825424][ T2314] FAULT_INJECTION: forcing a failure. [ 112.825424][ T2314] name failslab, interval 1, probability 0, space 0, times 0 [ 112.838245][ T2314] CPU: 1 UID: 0 PID: 2314 Comm: syz.8.655 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 112.838276][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.838296][ T2314] Call Trace: [ 112.838303][ T2314] [ 112.838309][ T2314] __dump_stack+0x21/0x30 [ 112.838339][ T2314] dump_stack_lvl+0x140/0x1c0 [ 112.838363][ T2314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.838387][ T2314] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 112.838405][ T2314] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 112.838424][ T2314] dump_stack+0x19/0x20 [ 112.838445][ T2314] should_fail_ex+0x3c2/0x510 [ 112.838468][ T2314] should_failslab+0xac/0x100 [ 112.838489][ T2314] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 112.838509][ T2314] ? __sock_create+0x3a5/0x810 [ 112.838527][ T2314] ? __sys_socket+0xe1/0x1c0 [ 112.838546][ T2314] ? __d_alloc+0x42/0x8c0 [ 112.838562][ T2314] ? expand_files+0xda/0x6f0 [ 112.838583][ T2314] __d_alloc+0x42/0x8c0 [ 112.838600][ T2314] d_alloc_pseudo+0x23/0xc0 [ 112.838617][ T2314] alloc_file_pseudo+0xde/0x1f0 [ 112.838640][ T2314] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 112.838662][ T2314] ? _raw_spin_unlock+0x45/0x60 [ 112.838680][ T2314] sock_alloc_file+0xbe/0x2b0 [ 112.838698][ T2314] __sys_socket+0x14c/0x1c0 [ 112.838718][ T2314] __x64_sys_socket+0x7e/0x90 [ 112.838736][ T2314] x64_sys_call+0x2608/0x2ee0 [ 112.838752][ T2314] do_syscall_64+0x57/0xf0 [ 112.838768][ T2314] ? clear_bhb_loop+0x50/0xa0 [ 112.838788][ T2314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.838809][ T2314] RIP: 0033:0x7f847eb9e159 [ 112.838824][ T2314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.838838][ T2314] RSP: 002b:00007f847fad8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.838857][ T2314] RAX: ffffffffffffffda RBX: 00007f847ee25fa0 RCX: 00007f847eb9e159 [ 112.838871][ T2314] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 112.838883][ T2314] RBP: 00007f847ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.838895][ T2314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.838908][ T2314] R13: 00007f847ee26038 R14: 00007f847ee25fa0 R15: 00007ffe7dedece8 [ 112.838925][ T2314] [ 113.322907][ T2340] netlink: 'syz.8.662': attribute type 27 has an invalid length. [ 113.390631][ T36] audit: type=1400 audit(2000000042.640:338): avc: denied { mount } for pid=2345 comm="syz.9.665" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.574674][ T36] audit: type=1400 audit(2000000042.820:339): avc: denied { append } for pid=2354 comm="syz.9.668" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.730465][ T377] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 113.767617][ T2362] overlayfs: failed to resolve 'pper': -2 [ 113.830449][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 113.900557][ T377] usb 9-1: Using ep0 maxpacket: 32 [ 113.906810][ T377] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.915444][ T377] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.925730][ T377] usb 9-1: config 0 has no interface number 0 [ 113.931978][ T377] usb 9-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.945188][ T377] usb 9-1: config 0 interface 184 has no altsetting 0 [ 113.953536][ T377] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.962793][ T377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.971116][ T377] usb 9-1: Product: syz [ 113.975288][ T377] usb 9-1: Manufacturer: syz [ 113.979882][ T377] usb 9-1: SerialNumber: syz [ 113.983810][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.988248][ T377] usb 9-1: config 0 descriptor?? [ 114.001217][ T377] smsc75xx v1.0.0 [ 114.004876][ T377] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 114.010432][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.021095][ T377] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 114.040505][ T10] usb 10-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 114.049755][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.229425][ T2350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.241652][ T2350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.250264][ T377] usb 9-1: USB disconnect, device number 3 [ 114.473798][ T10] hid (null): report_id 0 is invalid [ 114.491010][ T10] hid-sensor-hub 0003:8086:0000.000A: report_id 0 is invalid [ 114.498429][ T10] hid-sensor-hub 0003:8086:0000.000A: item 0 1 1 8 parsing failed [ 114.506535][ T10] hid-sensor-hub 0003:8086:0000.000A: parse failed [ 114.513111][ T10] hid-sensor-hub 0003:8086:0000.000A: probe with driver hid-sensor-hub failed with error -22 [ 114.692992][ T2355] syz.9.668 uses obsolete (PF_INET,SOCK_PACKET) [ 114.778362][ T36] audit: type=1400 audit(2000000044.020:340): avc: denied { write } for pid=2374 comm="syz.8.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.044861][ T36] audit: type=1400 audit(2000000044.290:341): avc: denied { getopt } for pid=2391 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.081252][ T36] audit: type=1400 audit(2000000044.330:342): avc: denied { setattr } for pid=2393 comm="syz.8.685" name="PACKET" dev="sockfs" ino=22799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.105348][ T36] audit: type=1400 audit(2000000044.350:343): avc: denied { setattr } for pid=2393 comm="syz.8.685" name="TIPC" dev="sockfs" ino=22800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.500460][ T1420] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.651616][ T1420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.664163][ T1420] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 115.673628][ T1420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.681973][ T1420] usb 2-1: Product: syz [ 115.686646][ T1420] usb 2-1: Manufacturer: syz [ 115.691592][ T1420] usb 2-1: SerialNumber: syz [ 115.699247][ T1420] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 115.707159][ T1420] cdc_wdm 2-1:1.0: Unknown control protocol [ 115.914254][ T36] audit: type=1400 audit(2000000045.160:344): avc: denied { nlmsg_read } for pid=2404 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.013419][ T36] audit: type=1400 audit(2000000045.260:345): avc: denied { create } for pid=2407 comm="syz.8.689" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.060133][ T36] audit: type=1400 audit(2000000045.290:346): avc: denied { link } for pid=2407 comm="syz.8.689" name="#1c" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.082951][ T36] audit: type=1400 audit(2000000045.290:347): avc: denied { rename } for pid=2407 comm="syz.8.689" name="#1d" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.370304][ T921] usb 2-1: USB disconnect, device number 3 [ 116.589771][ T310] usb 10-1: USB disconnect, device number 7 [ 116.781697][ T36] audit: type=1400 audit(2000000046.030:348): avc: denied { mounton } for pid=2429 comm="syz.9.698" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.135272][ T2454] FAULT_INJECTION: forcing a failure. [ 117.135272][ T2454] name failslab, interval 1, probability 0, space 0, times 0 [ 117.148106][ T2454] CPU: 1 UID: 0 PID: 2454 Comm: syz.8.708 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 117.148143][ T2454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.148155][ T2454] Call Trace: [ 117.148161][ T2454] [ 117.148168][ T2454] __dump_stack+0x21/0x30 [ 117.148201][ T2454] dump_stack_lvl+0x140/0x1c0 [ 117.148226][ T2454] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.148252][ T2454] dump_stack+0x19/0x20 [ 117.148274][ T2454] should_fail_ex+0x3c2/0x510 [ 117.148296][ T2454] should_failslab+0xac/0x100 [ 117.148320][ T2454] kmem_cache_alloc_noprof+0x42/0x410 [ 117.148341][ T2454] ? inc_rlimit_get_ucounts+0x3fb/0x470 [ 117.148359][ T2454] ? __sigqueue_alloc+0x15e/0x2b0 [ 117.148383][ T2454] __sigqueue_alloc+0x15e/0x2b0 [ 117.148405][ T2454] sigqueue_alloc+0x2c/0x50 [ 117.148426][ T2454] do_timer_create+0x1c6/0x1260 [ 117.148447][ T2454] ? do_futex+0x32a/0x510 [ 117.148469][ T2454] ? __cfi_do_futex+0x10/0x10 [ 117.148491][ T2454] ? __ia32_sys_clock_nanosleep_time32+0xc0/0xc0 [ 117.148514][ T2454] ? __kasan_check_write+0x18/0x20 [ 117.148532][ T2454] __x64_sys_timer_create+0x16a/0x1c0 [ 117.148550][ T2454] ? xfd_validate_state+0x68/0x140 [ 117.148572][ T2454] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 117.148592][ T2454] ? fpregs_restore_userregs+0x11c/0x260 [ 117.148614][ T2454] ? switch_fpu_return+0x12/0x20 [ 117.148634][ T2454] x64_sys_call+0x2704/0x2ee0 [ 117.148652][ T2454] do_syscall_64+0x57/0xf0 [ 117.148669][ T2454] ? clear_bhb_loop+0x50/0xa0 [ 117.148690][ T2454] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.148711][ T2454] RIP: 0033:0x7f847eb9e159 [ 117.148727][ T2454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.148742][ T2454] RSP: 002b:00007f847fad8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 117.148763][ T2454] RAX: ffffffffffffffda RBX: 00007f847ee25fa0 RCX: 00007f847eb9e159 [ 117.148778][ T2454] RDX: 0000200000000780 RSI: 0000200000000740 RDI: 0000000000000001 [ 117.148798][ T2454] RBP: 00007f847ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 117.148811][ T2454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.148823][ T2454] R13: 00007f847ee26038 R14: 00007f847ee25fa0 R15: 00007ffe7dedece8 [ 117.148838][ T2454] [ 117.150431][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 117.426655][ T2458] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.445260][ T36] audit: type=1400 audit(2000000046.690:349): avc: denied { name_bind } for pid=2457 comm="syz.8.710" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 117.541487][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.561876][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.572321][ T10] usb 10-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 117.581826][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.711039][ T2473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.990467][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.012130][ T10] hid (null): report_id 0 is invalid [ 118.019107][ T10] hid-sensor-hub 0003:8086:0000.000B: report_id 0 is invalid [ 118.040979][ T10] hid-sensor-hub 0003:8086:0000.000B: item 0 1 1 8 parsing failed [ 118.049195][ T10] hid-sensor-hub 0003:8086:0000.000B: parse failed [ 118.060996][ T10] hid-sensor-hub 0003:8086:0000.000B: probe with driver hid-sensor-hub failed with error -22 [ 118.112187][ T340] bridge_slave_1: left allmulticast mode [ 118.117868][ T340] bridge_slave_1: left promiscuous mode [ 118.123532][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.131077][ T340] bridge_slave_0: left allmulticast mode [ 118.136720][ T340] bridge_slave_0: left promiscuous mode [ 118.142443][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.171827][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.182032][ T310] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 118.191737][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.202430][ T310] ums-sddr55 2-1:1.0: USB Mass Storage device detected [ 118.225176][ T10] usb 10-1: USB disconnect, device number 8 [ 118.233441][ T2491] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.240684][ T2491] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.247859][ T2491] bridge_slave_0: entered allmulticast mode [ 118.254157][ T2491] bridge_slave_0: entered promiscuous mode [ 118.261274][ T2491] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.268314][ T2491] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.275462][ T2491] bridge_slave_1: entered allmulticast mode [ 118.281452][ T1420] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 118.281870][ T2491] bridge_slave_1: entered promiscuous mode [ 118.314750][ T340] veth1_macvtap: left promiscuous mode [ 118.320263][ T340] veth0_vlan: left promiscuous mode [ 118.364079][ T2491] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.371134][ T2491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.378388][ T2491] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.385426][ T2491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.405865][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.416317][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.420433][ T1420] usb 9-1: device descriptor read/64, error -71 [ 118.442510][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.449601][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.462654][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.469749][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.484536][ T2498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.498568][ T2491] veth0_vlan: entered promiscuous mode [ 118.505317][ T2498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.519615][ T2491] veth1_macvtap: entered promiscuous mode [ 118.660599][ T1420] usb 9-1: device descriptor read/64, error -71 [ 118.768545][ T2503] FAULT_INJECTION: forcing a failure. [ 118.768545][ T2503] name failslab, interval 1, probability 0, space 0, times 0 [ 118.781279][ T2503] CPU: 1 UID: 0 PID: 2503 Comm: syz.9.724 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 118.781309][ T2503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.781328][ T2503] Call Trace: [ 118.781333][ T2503] [ 118.781338][ T2503] __dump_stack+0x21/0x30 [ 118.781362][ T2503] dump_stack_lvl+0x140/0x1c0 [ 118.781379][ T2503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.781398][ T2503] dump_stack+0x19/0x20 [ 118.781416][ T2503] should_fail_ex+0x3c2/0x510 [ 118.781435][ T2503] should_failslab+0xac/0x100 [ 118.781455][ T2503] __kmalloc_node_noprof+0x69/0x500 [ 118.781473][ T2503] ? __kvmalloc_node_noprof+0x128/0x300 [ 118.781491][ T2503] __kvmalloc_node_noprof+0x128/0x300 [ 118.781506][ T2503] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 118.781523][ T2503] ? percpu_ref_init+0x240/0x4d0 [ 118.781543][ T2503] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 118.781561][ T2503] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 118.781577][ T2503] io_uring_create+0x2e0/0x13f0 [ 118.781593][ T2503] ? __kasan_check_write+0x18/0x20 [ 118.781610][ T2503] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 118.781634][ T2503] ? __kasan_check_write+0x18/0x20 [ 118.781650][ T2503] ? __x64_sys_io_uring_setup+0x80/0x80 [ 118.781673][ T2503] ? __kasan_check_read+0x15/0x20 [ 118.781688][ T2503] __x64_sys_io_uring_setup+0x5f/0x80 [ 118.781711][ T2503] x64_sys_call+0x22c0/0x2ee0 [ 118.781728][ T2503] do_syscall_64+0x57/0xf0 [ 118.781744][ T2503] ? clear_bhb_loop+0x50/0xa0 [ 118.781765][ T2503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.781785][ T2503] RIP: 0033:0x7f1fccf9e159 [ 118.781801][ T2503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.781815][ T2503] RSP: 002b:00007f1fcdebeee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 118.781834][ T2503] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f1fccf9e159 [ 118.781847][ T2503] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003f7 [ 118.781859][ T2503] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 118.781871][ T2503] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 118.781883][ T2503] R13: 0000200000000b10 R14: 00007f1fcdebefd8 R15: 0000000000000000 [ 118.781897][ T2503] [ 119.070433][ T1420] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 119.200440][ T1420] usb 9-1: device descriptor read/64, error -71 [ 119.340443][ T310] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 119.440432][ T1420] usb 9-1: device descriptor read/64, error -71 [ 119.463999][ T10] usb 2-1: USB disconnect, device number 4 [ 119.490482][ T310] usb 10-1: Using ep0 maxpacket: 8 [ 119.496707][ T310] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 119.505132][ T310] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.514003][ T310] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.523323][ T310] usb 10-1: config 250 has no interface number 0 [ 119.529753][ T310] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.541517][ T310] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.552118][ T310] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.562655][ T1420] usb usb9-port1: attempt power cycle [ 119.568095][ T310] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.578724][ T310] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.592523][ T310] usb 10-1: config 250 interface 228 has no altsetting 0 [ 119.600591][ T310] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 119.609723][ T310] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 119.618088][ T310] usb 10-1: Product: syz [ 119.622383][ T310] usb 10-1: SerialNumber: syz [ 119.628945][ T310] hub 10-1:250.228: bad descriptor, ignoring hub [ 119.635369][ T310] hub 10-1:250.228: probe with driver hub failed with error -5 [ 119.720433][ T65] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.828942][ T310] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.871526][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.881782][ T65] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.894772][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.901452][ T65] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 119.910591][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.919117][ T65] usb 3-1: config 0 descriptor?? [ 119.920478][ T1420] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 119.951445][ T1420] usb 9-1: device descriptor read/8, error -71 [ 120.031656][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.040139][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.050321][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 120.050335][ T36] audit: type=1326 audit(2000000049.290:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.9.730" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fccf9e159 code=0x0 [ 120.111555][ T1420] usb 9-1: device descriptor read/8, error -71 [ 120.129324][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.138326][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.147873][ T65] usb 3-1: string descriptor 0 read error: -71 [ 120.154606][ T65] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 120.164975][ T65] usb 3-1: USB disconnect, device number 11 [ 120.257952][ T2562] overlay: Unknown parameter '\orkdir' [ 120.275179][ T2564] rust_binder: Write failure EFAULT in pid:93 [ 120.340852][ T36] audit: type=1326 audit(2000000049.590:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.372371][ T36] audit: type=1326 audit(2000000049.590:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.380469][ T1420] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 120.405810][ T36] audit: type=1326 audit(2000000049.590:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f710f75e98e code=0x7ffc0000 [ 120.421856][ T2571] tipc: Started in network mode [ 120.431120][ T36] audit: type=1326 audit(2000000049.590:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f710f75e98e code=0x7ffc0000 [ 120.436345][ T2571] tipc: Node identity 76d7c2693898, cluster identity 4711 [ 120.461338][ T36] audit: type=1326 audit(2000000049.590:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.468608][ T2571] tipc: Enabled bearer , priority 10 [ 120.493678][ T36] audit: type=1326 audit(2000000049.590:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.501629][ T1420] usb 9-1: device descriptor read/8, error -71 [ 120.525564][ T36] audit: type=1326 audit(2000000049.590:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.556852][ T36] audit: type=1326 audit(2000000049.590:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.583287][ T36] audit: type=1326 audit(2000000049.590:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710f79e159 code=0x7ffc0000 [ 120.661741][ T1420] usb 9-1: device descriptor read/8, error -71 [ 120.770548][ T1420] usb usb9-port1: unable to enumerate USB device [ 120.867790][ T2589] rust_binder: Write failure EFAULT in pid:17 [ 121.125963][ T2611] rust_binder: Write failure EFAULT in pid:119 [ 121.351800][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 121.374062][ T377] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 121.397110][ T2630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.767'. [ 121.419106][ T2632] rust_binder: 2631:2632 got reply transaction with no transaction stack [ 121.427601][ T2632] rust_binder: 2631:2632 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 121.436966][ T65] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.440942][ T1420] rust_binder: 2631: undelivered TRANSACTION_ERROR: 29201 [ 121.502411][ T2639] rust_binder: Write failure EFAULT in pid:139 [ 121.530453][ T377] usb 9-1: Using ep0 maxpacket: 16 [ 121.543214][ T377] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 121.555906][ T377] usb 9-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice= 0.40 [ 121.565652][ T377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.573691][ T377] usb 9-1: Product: syz [ 121.577864][ T377] usb 9-1: Manufacturer: syz [ 121.582526][ T377] usb 9-1: SerialNumber: syz [ 121.590485][ T1420] tipc: Node number set to 1313849961 [ 121.610470][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 121.617610][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.625952][ T65] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 121.636243][ T65] usb 3-1: config 179 has no interface number 0 [ 121.642535][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.655879][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 121.664995][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.792875][ T377] usb 9-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 121.800365][ T377] usb 9-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 121.809697][ T377] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.820504][ T377] usb 9-1: USB disconnect, device number 8 [ 121.833326][ T2106] udevd[2106]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.883087][ T1420] usb 3-1: USB disconnect, device number 12 [ 122.040468][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.190815][ T65] usb 2-1: too many configurations: 192, using maximum allowed: 8 [ 122.199280][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.209448][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.222342][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.229637][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.230509][ T1420] usb 10-1: USB disconnect, device number 9 [ 122.240466][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.247051][ T1420] usblp0: removed [ 122.262597][ T2663] FAULT_INJECTION: forcing a failure. [ 122.262597][ T2663] name failslab, interval 1, probability 0, space 0, times 0 [ 122.275248][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.280478][ T2663] CPU: 1 UID: 0 PID: 2663 Comm: syz.9.780 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 122.280505][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.280518][ T2663] Call Trace: [ 122.280534][ T2663] [ 122.280541][ T2663] __dump_stack+0x21/0x30 [ 122.280573][ T2663] dump_stack_lvl+0x140/0x1c0 [ 122.280597][ T2663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.280621][ T2663] ? __filename_parentat+0x458/0x660 [ 122.280643][ T2663] dump_stack+0x19/0x20 [ 122.280664][ T2663] should_fail_ex+0x3c2/0x510 [ 122.280685][ T2663] should_failslab+0xac/0x100 [ 122.280706][ T2663] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 122.280725][ T2663] ? __d_alloc+0x42/0x8c0 [ 122.280741][ T2663] ? __d_lookup+0x4e8/0x550 [ 122.280759][ T2663] __d_alloc+0x42/0x8c0 [ 122.280775][ T2663] d_alloc+0x4c/0x1c0 [ 122.280790][ T2663] ? lookup_one_qstr_excl+0xba/0x280 [ 122.280811][ T2663] lookup_one_qstr_excl+0xcf/0x280 [ 122.280832][ T2663] filename_create+0x241/0x450 [ 122.280855][ T2663] ? kern_path_create+0x70/0x70 [ 122.280876][ T2663] ? __cfi___check_object_size+0x10/0x10 [ 122.280895][ T2663] do_mkdirat+0xa9/0x530 [ 122.280917][ T2663] ? __cfi_do_mkdirat+0x10/0x10 [ 122.280939][ T2663] ? __kasan_check_write+0x18/0x20 [ 122.280956][ T2663] ? getname_flags+0x203/0x6b0 [ 122.280973][ T2663] ? __kasan_check_write+0x18/0x20 [ 122.280991][ T2663] __x64_sys_mkdirat+0x8b/0xa0 [ 122.281013][ T2663] x64_sys_call+0x2ba8/0x2ee0 [ 122.281028][ T2663] do_syscall_64+0x57/0xf0 [ 122.281045][ T2663] ? clear_bhb_loop+0x50/0xa0 [ 122.281065][ T2663] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.281085][ T2663] RIP: 0033:0x7f1fccf9e159 [ 122.281101][ T2663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.281117][ T2663] RSP: 002b:00007f1fcde7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 122.281136][ T2663] RAX: ffffffffffffffda RBX: 00007f1fcd226180 RCX: 00007f1fccf9e159 [ 122.281149][ T2663] RDX: 0000000000000100 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 122.281161][ T2663] RBP: 00007f1fcd03506b R08: 0000000000000000 R09: 0000000000000000 [ 122.281173][ T2663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.281183][ T2663] R13: 00007f1fcd226218 R14: 00007f1fcd226180 R15: 00007fff887ff1b8 [ 122.281198][ T2663] [ 122.402775][ T2665] rust_binder: Write failure EFAULT in pid:119 [ 122.406347][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.532921][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.545877][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.560839][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.588505][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.602693][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.609965][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.620204][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.633278][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.641068][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.651298][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.664242][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.677634][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.690473][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.703723][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.711950][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.724576][ T65] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.739051][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.746988][ T2681] process 'syz.8.787' launched '/dev/fd/4' with NULL argv: empty string added [ 122.757018][ T65] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 122.766135][ T65] usb 2-1: New USB device strings: Mfr=4, Product=221, SerialNumber=75 [ 122.774628][ T65] usb 2-1: Product: syz [ 122.779021][ T65] usb 2-1: Manufacturer: syz [ 122.783841][ T65] usb 2-1: SerialNumber: syz [ 122.790858][ T65] usb 2-1: config 0 descriptor?? [ 122.798191][ T65] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 122.815980][ T2686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2686 comm=syz.8.789 [ 123.014472][ T2655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.023085][ T2655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.032938][ T2655] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 123.290460][ T65] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 123.420439][ T65] usb 10-1: device descriptor read/64, error -71 [ 123.640611][ T2702] rust_binder: Write failure EFAULT in pid:49 [ 123.660517][ T65] usb 10-1: device descriptor read/64, error -71 [ 123.693650][ T2705] FAULT_INJECTION: forcing a failure. [ 123.693650][ T2705] name failslab, interval 1, probability 0, space 0, times 0 [ 123.706362][ T2705] CPU: 0 UID: 0 PID: 2705 Comm: syz.8.796 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 123.706394][ T2705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.706407][ T2705] Call Trace: [ 123.706411][ T2705] [ 123.706416][ T2705] __dump_stack+0x21/0x30 [ 123.706435][ T2705] dump_stack_lvl+0x140/0x1c0 [ 123.706449][ T2705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.706463][ T2705] ? __kasan_check_read+0x15/0x20 [ 123.706477][ T2705] ? futex_wake+0x627/0x950 [ 123.706487][ T2705] dump_stack+0x19/0x20 [ 123.706498][ T2705] should_fail_ex+0x3c2/0x510 [ 123.706513][ T2705] should_failslab+0xac/0x100 [ 123.706525][ T2705] kmem_cache_alloc_noprof+0x42/0x410 [ 123.706535][ T2705] ? do_timer_create+0x1a8/0x1260 [ 123.706547][ T2705] do_timer_create+0x1a8/0x1260 [ 123.706558][ T2705] ? do_futex+0x32a/0x510 [ 123.706570][ T2705] ? __cfi_do_futex+0x10/0x10 [ 123.706583][ T2705] ? mutex_unlock+0x90/0x240 [ 123.706594][ T2705] ? __ia32_sys_clock_nanosleep_time32+0xc0/0xc0 [ 123.706632][ T2705] ? __kasan_check_write+0x18/0x20 [ 123.706643][ T2705] __x64_sys_timer_create+0x16a/0x1c0 [ 123.706653][ T2705] ? xfd_validate_state+0x68/0x140 [ 123.706668][ T2705] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 123.706679][ T2705] ? fpregs_restore_userregs+0x11c/0x260 [ 123.706692][ T2705] ? switch_fpu_return+0x12/0x20 [ 123.706704][ T2705] x64_sys_call+0x2704/0x2ee0 [ 123.706715][ T2705] do_syscall_64+0x57/0xf0 [ 123.706724][ T2705] ? clear_bhb_loop+0x50/0xa0 [ 123.706736][ T2705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.706748][ T2705] RIP: 0033:0x7f847eb9e159 [ 123.706758][ T2705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.706767][ T2705] RSP: 002b:00007f847fad8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 123.706779][ T2705] RAX: ffffffffffffffda RBX: 00007f847ee25fa0 RCX: 00007f847eb9e159 [ 123.706788][ T2705] RDX: 0000200000000780 RSI: 0000200000000740 RDI: 0000000000000001 [ 123.706795][ T2705] RBP: 00007f847ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.706802][ T2705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.706808][ T2705] R13: 00007f847ee26038 R14: 00007f847ee25fa0 R15: 00007ffe7dedece8 [ 123.706817][ T2705] [ 124.060529][ T65] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 124.190434][ T65] usb 10-1: device descriptor read/64, error -71 [ 124.250482][ T377] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 124.380447][ T377] usb 9-1: device descriptor read/64, error -71 [ 124.440448][ T65] usb 10-1: device descriptor read/64, error -71 [ 124.550543][ T65] usb usb10-port1: attempt power cycle [ 124.630501][ T377] usb 9-1: device descriptor read/64, error -71 [ 124.792007][ T10] usb 2-1: USB disconnect, device number 5 [ 124.807348][ T2762] rust_binder: Write failure EFAULT in pid:157 [ 124.880480][ T377] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 124.890438][ T65] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 124.932159][ T65] usb 10-1: device descriptor read/8, error -71 [ 124.945572][ T2771] FAULT_INJECTION: forcing a failure. [ 124.945572][ T2771] name failslab, interval 1, probability 0, space 0, times 0 [ 124.958623][ T2771] CPU: 0 UID: 0 PID: 2771 Comm: syz.1.808 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 124.958645][ T2771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.958653][ T2771] Call Trace: [ 124.958657][ T2771] [ 124.958661][ T2771] __dump_stack+0x21/0x30 [ 124.958679][ T2771] dump_stack_lvl+0x140/0x1c0 [ 124.958693][ T2771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.958707][ T2771] dump_stack+0x19/0x20 [ 124.958720][ T2771] should_fail_ex+0x3c2/0x510 [ 124.958744][ T2771] should_failslab+0xac/0x100 [ 124.958758][ T2771] kmem_cache_alloc_node_noprof+0x45/0x420 [ 124.958770][ T2771] ? __alloc_skb+0x10c/0x360 [ 124.958782][ T2771] ? add_uevent_var+0x288/0x470 [ 124.958793][ T2771] __alloc_skb+0x10c/0x360 [ 124.958803][ T2771] ? __kasan_check_write+0x18/0x20 [ 124.958814][ T2771] alloc_uevent_skb+0x85/0x240 [ 124.958825][ T2771] kobject_uevent_net_broadcast+0x356/0x5e0 [ 124.958837][ T2771] kobject_uevent_env+0x551/0x7e0 [ 124.958848][ T2771] kobject_uevent+0x21/0x40 [ 124.958859][ T2771] gadget_bind_driver+0x5e2/0x9c0 [ 124.958871][ T2771] ? __cfi_gadget_bind_driver+0x10/0x10 [ 124.958882][ T2771] really_probe+0x2e4/0x8b0 [ 124.958893][ T2771] __driver_probe_device+0x193/0x280 [ 124.958903][ T2771] driver_probe_device+0x54/0x3f0 [ 124.958915][ T2771] __driver_attach+0x422/0x5e0 [ 124.958929][ T2771] bus_for_each_dev+0x249/0x2d0 [ 124.958948][ T2771] ? __cfi___driver_attach+0x10/0x10 [ 124.958964][ T2771] ? __cfi_bus_for_each_dev+0x10/0x10 [ 124.958981][ T2771] ? __kasan_kmalloc+0x96/0xb0 [ 124.958994][ T2771] ? _raw_spin_unlock+0x45/0x60 [ 124.959003][ T2771] ? klist_add_tail+0x1dd/0x220 [ 124.959016][ T2771] driver_attach+0x46/0x50 [ 124.959025][ T2771] bus_add_driver+0x393/0x730 [ 124.959037][ T2771] driver_register+0x2b7/0x3c0 [ 124.959046][ T2771] usb_gadget_register_driver_owner+0xfc/0x270 [ 124.959058][ T2771] raw_ioctl+0x144c/0x37a0 [ 124.959068][ T2771] ? __cfi_raw_ioctl+0x10/0x10 [ 124.959077][ T2771] ? selinux_file_ioctl+0x732/0x1480 [ 124.959088][ T2771] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 124.959100][ T2771] ? __fget_files+0x2bc/0x330 [ 124.959111][ T2771] ? bpf_lsm_file_ioctl+0xd/0x20 [ 124.959124][ T2771] ? security_file_ioctl+0x3e/0x110 [ 124.959134][ T2771] ? __cfi_raw_ioctl+0x10/0x10 [ 124.959142][ T2771] __se_sys_ioctl+0x126/0x1b0 [ 124.959154][ T2771] __x64_sys_ioctl+0x7f/0xa0 [ 124.959165][ T2771] x64_sys_call+0x1878/0x2ee0 [ 124.959175][ T2771] do_syscall_64+0x57/0xf0 [ 124.959184][ T2771] ? clear_bhb_loop+0x50/0xa0 [ 124.959196][ T2771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.959208][ T2771] RIP: 0033:0x7f710f79ddeb [ 124.959218][ T2771] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 124.959230][ T2771] RSP: 002b:00007f71106b0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.959242][ T2771] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f710f79ddeb [ 124.959249][ T2771] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 124.959255][ T2771] RBP: 00007f71106b1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 124.959262][ T2771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.959268][ T2771] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000000 [ 124.959276][ T2771] [ 125.283786][ T377] usb 9-1: device descriptor read/64, error -71 [ 125.294636][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 125.294652][ T36] audit: type=1400 audit(2000000054.540:450): avc: denied { create } for pid=2772 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.321186][ T36] audit: type=1400 audit(2000000054.540:451): avc: denied { bind } for pid=2772 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.340617][ T36] audit: type=1400 audit(2000000054.540:452): avc: denied { ioctl } for pid=2772 comm="syz.2.809" path="socket:[26991]" dev="sockfs" ino=26991 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.365709][ T36] audit: type=1400 audit(2000000054.550:453): avc: denied { read write } for pid=2772 comm="syz.2.809" name="synthetic_events" dev="tracefs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 125.390446][ T65] usb 10-1: device descriptor read/8, error -71 [ 125.520504][ T377] usb 9-1: device descriptor read/64, error -71 [ 125.530479][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.630446][ T65] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 125.630538][ T377] usb usb9-port1: attempt power cycle [ 125.651374][ T65] usb 10-1: device descriptor read/8, error -71 [ 125.680433][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 125.685636][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.694546][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.702947][ T10] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.715821][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 125.724497][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 125.734518][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.40 [ 125.743597][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.751818][ T10] usb 2-1: Product: syz [ 125.755990][ T10] usb 2-1: Manufacturer: syz [ 125.760741][ T10] usb 2-1: SerialNumber: syz [ 125.781393][ T65] usb 10-1: device descriptor read/8, error -71 [ 125.842278][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.853232][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.862981][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.876417][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.885925][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.894025][ T9] usb 3-1: SerialNumber: syz [ 125.898920][ T65] usb usb10-port1: unable to enumerate USB device [ 125.905651][ T9] usb 3-1: config 0 descriptor?? [ 125.970752][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 125.976726][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 125.985732][ T10] usb 2-1: USB disconnect, device number 6 [ 125.990440][ T377] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 126.011406][ T377] usb 9-1: device descriptor read/8, error -71 [ 126.062121][ T36] audit: type=1400 audit(2000000055.310:454): avc: denied { create } for pid=2778 comm="syz.9.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.082521][ T36] audit: type=1400 audit(2000000055.310:455): avc: denied { bind } for pid=2778 comm="syz.9.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.113419][ T36] audit: type=1400 audit(2000000055.360:456): avc: denied { read write } for pid=2776 comm="syz.2.811" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.136993][ T36] audit: type=1400 audit(2000000055.360:457): avc: denied { open } for pid=2776 comm="syz.2.811" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.137389][ T2777] fuse: Unknown parameter 'userWid' [ 126.177703][ T36] audit: type=1400 audit(2000000055.420:458): avc: denied { create } for pid=2780 comm="syz.9.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.192271][ T2783] rust_binder: Write failure EFAULT in pid:143 [ 126.200330][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 126.201360][ T377] usb 9-1: device descriptor read/8, error -71 [ 126.206892][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.230086][ T9] usb 3-1: USB disconnect, device number 13 [ 126.310184][ T36] audit: type=1400 audit(2000000055.550:459): avc: denied { create } for pid=2785 comm="syz.9.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.321002][ T2786] FAULT_INJECTION: forcing a failure. [ 126.321002][ T2786] name failslab, interval 1, probability 0, space 0, times 0 [ 126.342217][ T2786] CPU: 0 UID: 0 PID: 2786 Comm: syz.9.815 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 126.342245][ T2786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.342256][ T2786] Call Trace: [ 126.342261][ T2786] [ 126.342267][ T2786] __dump_stack+0x21/0x30 [ 126.342293][ T2786] dump_stack_lvl+0x140/0x1c0 [ 126.342313][ T2786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.342336][ T2786] dump_stack+0x19/0x20 [ 126.342357][ T2786] should_fail_ex+0x3c2/0x510 [ 126.342377][ T2786] should_failslab+0xac/0x100 [ 126.342395][ T2786] __kmalloc_node_noprof+0x69/0x500 [ 126.342413][ T2786] ? __kvmalloc_node_noprof+0x128/0x300 [ 126.342427][ T2786] __kvmalloc_node_noprof+0x128/0x300 [ 126.342440][ T2786] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 126.342455][ T2786] ? percpu_ref_init+0x240/0x4d0 [ 126.342473][ T2786] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 126.342490][ T2786] io_ring_ctx_alloc+0x6af/0x1dc0 [ 126.342507][ T2786] io_uring_create+0x2e0/0x13f0 [ 126.342523][ T2786] ? __kasan_check_write+0x18/0x20 [ 126.342538][ T2786] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 126.342561][ T2786] ? __kasan_check_write+0x18/0x20 [ 126.342577][ T2786] ? __x64_sys_io_uring_setup+0x80/0x80 [ 126.342599][ T2786] ? __kasan_check_read+0x15/0x20 [ 126.342610][ T2786] __x64_sys_io_uring_setup+0x5f/0x80 [ 126.342624][ T2786] x64_sys_call+0x22c0/0x2ee0 [ 126.342633][ T2786] do_syscall_64+0x57/0xf0 [ 126.342643][ T2786] ? clear_bhb_loop+0x50/0xa0 [ 126.342657][ T2786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.342668][ T2786] RIP: 0033:0x7f1fccf9e159 [ 126.342678][ T2786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.342695][ T2786] RSP: 002b:00007f1fcdebeee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 126.342707][ T2786] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f1fccf9e159 [ 126.342715][ T2786] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003f7 [ 126.342722][ T2786] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 126.342729][ T2786] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 126.342736][ T2786] R13: 0000200000000b10 R14: 00007f1fcdebefd8 R15: 0000000000000000 [ 126.342744][ T2786] [ 126.630484][ T377] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 126.652061][ T377] usb 9-1: device descriptor read/8, error -71 [ 126.781513][ T377] usb 9-1: device descriptor read/8, error -71 [ 126.790367][ T2796] FAULT_INJECTION: forcing a failure. [ 126.790367][ T2796] name failslab, interval 1, probability 0, space 0, times 0 [ 126.803153][ T2796] CPU: 0 UID: 0 PID: 2796 Comm: syz.1.818 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 126.803173][ T2796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.803181][ T2796] Call Trace: [ 126.803185][ T2796] [ 126.803190][ T2796] __dump_stack+0x21/0x30 [ 126.803210][ T2796] dump_stack_lvl+0x140/0x1c0 [ 126.803224][ T2796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.803238][ T2796] ? __filename_parentat+0x458/0x660 [ 126.803251][ T2796] dump_stack+0x19/0x20 [ 126.803263][ T2796] should_fail_ex+0x3c2/0x510 [ 126.803275][ T2796] should_failslab+0xac/0x100 [ 126.803287][ T2796] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 126.803298][ T2796] ? __d_alloc+0x42/0x8c0 [ 126.803307][ T2796] ? __d_lookup+0x4e8/0x550 [ 126.803318][ T2796] __d_alloc+0x42/0x8c0 [ 126.803327][ T2796] d_alloc+0x4c/0x1c0 [ 126.803336][ T2796] ? lookup_one_qstr_excl+0xba/0x280 [ 126.803348][ T2796] lookup_one_qstr_excl+0xcf/0x280 [ 126.803359][ T2796] filename_create+0x241/0x450 [ 126.803372][ T2796] ? kern_path_create+0x70/0x70 [ 126.803384][ T2796] ? __cfi___check_object_size+0x10/0x10 [ 126.803395][ T2796] do_mkdirat+0xa9/0x530 [ 126.803408][ T2796] ? __cfi_do_mkdirat+0x10/0x10 [ 126.803420][ T2796] ? __kasan_check_write+0x18/0x20 [ 126.803430][ T2796] ? getname_flags+0x203/0x6b0 [ 126.803440][ T2796] ? __kasan_check_write+0x18/0x20 [ 126.803450][ T2796] __x64_sys_mkdirat+0x8b/0xa0 [ 126.803463][ T2796] x64_sys_call+0x2ba8/0x2ee0 [ 126.803472][ T2796] do_syscall_64+0x57/0xf0 [ 126.803482][ T2796] ? clear_bhb_loop+0x50/0xa0 [ 126.803494][ T2796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.803506][ T2796] RIP: 0033:0x7f710f79e159 [ 126.803516][ T2796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.803526][ T2796] RSP: 002b:00007f7110671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.803538][ T2796] RAX: ffffffffffffffda RBX: 00007f710fa26180 RCX: 00007f710f79e159 [ 126.803546][ T2796] RDX: 0000000000000100 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 126.803553][ T2796] RBP: 00007f710f83506b R08: 0000000000000000 R09: 0000000000000000 [ 126.803560][ T2796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.803567][ T2796] R13: 00007f710fa26218 R14: 00007f710fa26180 R15: 00007ffe48431ce8 [ 126.803576][ T2796] [ 126.890547][ T377] usb usb9-port1: unable to enumerate USB device [ 127.269269][ T2809] rust_binder: Write failure EFAULT in pid:85 [ 127.582236][ T2829] rust_binder: Write failure EFAULT in pid:147 [ 127.620445][ T377] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.781141][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 127.787494][ T377] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.795898][ T377] usb 3-1: config 0 has no interface number 0 [ 127.802254][ T377] usb 3-1: config 0 interface 184 has no altsetting 0 [ 127.811827][ T377] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 127.820921][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.828995][ T377] usb 3-1: Product: syz [ 127.830435][ T1172] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 127.833265][ T377] usb 3-1: Manufacturer: syz [ 127.847243][ T377] usb 3-1: SerialNumber: syz [ 127.855487][ T377] usb 3-1: config 0 descriptor?? [ 127.866540][ T377] smsc75xx v1.0.0 [ 127.990425][ T1172] usb 2-1: device descriptor read/64, error -71 [ 128.240426][ T1172] usb 2-1: device descriptor read/64, error -71 [ 128.475305][ T2815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.490512][ T1172] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 128.498177][ T2815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.640472][ T1172] usb 2-1: device descriptor read/64, error -71 [ 128.714530][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 128.733003][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 128.751452][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 128.762511][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 128.776693][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 128.789397][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 128.800429][ T377] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 128.814311][ T377] usb 3-1: USB disconnect, device number 14 [ 128.880535][ T1172] usb 2-1: device descriptor read/64, error -71 [ 128.990610][ T1172] usb usb2-port1: attempt power cycle [ 129.237737][ T2870] rust_binder: Write failure EFAULT in pid:93 [ 129.330432][ T1172] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 129.371407][ T1172] usb 2-1: device descriptor read/8, error -71 [ 129.494612][ T2877] overlayfs: conflicting lowerdir path [ 129.511414][ T1172] usb 2-1: device descriptor read/8, error -71 [ 129.647290][ T2885] printk: legacy console [ttyS0] disabled