last executing test programs: 1m4.984846986s ago: executing program 1 (id=479): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYBLOB="7d341bb502f405a1e397e9bea806b8af1f7722faf42b6c30e6771752503056e77dfc3242ff8e5467386026f67a3627ede6766b092589093df299ce9ecade9f76ad6ba8e3a1e1759cb7189fbaf64b50b64bcf5fa810a09d0e76b4bc086bc1084b5fcd532cbd2056653102d89fa9b55394c305e3d98c161ddeea5eb6c10d96"], 0x108}}, 0x800) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000500), 0x104, 0xaa180) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1c, 0x0, 0x14) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r3, &(0x7f0000000200)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1m2.755811521s ago: executing program 1 (id=489): gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x4, @thr={&(0x7f0000000080)="a564caff5a2f10bd1ee9f5d0e7f18aebacebdb85301e36d41ac3098590", &(0x7f0000000200)="f8fcf6a2c86a09d1f524de12be3269653dd5ffb7b1bf6ddf6f770f0b719f47415db3b76125275682be12ea93521b51cd6990aeb01c3a5b1e6b0b6b6abaf3f17daac9c3aa9ba474b0d69f4810d91936b146cc02b10514f48a027fe43bf84254e50ac51f95759d4282f14c379d87d28681840efb483d0b38dd7de8aa97587c5c191ff443fefecf35fa8ee9c9ed4aa488e1054310fd4c91d9e9832569bb66e141ea12f3779d4afa644ba3d514eafb718c09d19a37e525218ac3dc9c8ee7c889c222dd36fc15c4d3c6ddc7b555e6adb1b867af94644dae5843b941de5189ec"}}, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100") ioctl(r1, 0xc138fd06, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) syslog(0x2, &(0x7f00000000c0)=""/102, 0x66) 1m2.289389092s ago: executing program 1 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000004c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x8, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a", 0x7c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294", 0x72}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76", 0x71}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736", 0x1c}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000000000000000000007000000866a000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0xffffff00, 0x9) writev(r0, 0x0, 0x0) write(r0, &(0x7f0000001e00)="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", 0x35c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0xfffffffffffffffe, 0x7fffd, {0x5, 0x3, 0x101, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x646, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r5, r6, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x5d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef2a70f793503000000b8b242714e0f23d00f21f835100000090f23f8b8908a00000f23d00f21f835200000020f23f80f01c4c16a6332c4e1fc5f28b805000000b90e0000000f01d93d8004101fcccc00800000ba000000000f300f801b14032d", 0x61}], 0x1, 0x0, 0x0, 0x0) 1m1.898284481s ago: executing program 1 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000140)=@ethtool_eeprom={0xa, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000140)=@ethtool_eeprom={0xa, 0x3}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) (async) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x5) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1m1.823424864s ago: executing program 1 (id=497): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x2, 0x100, 0x6, 0x5ff, 0x9, 0x3}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet_udplite(0x2, 0x2, 0x88) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0x7ffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/100, 0x64) ptrace$pokeuser(0x6, r1, 0x358, 0xfffffffffffffffe) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x16, 0x3, 0x0, 0x1}, 0x30, 0x1) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x2, 0x100, 0x6, 0x5ff, 0x9, 0x3}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ptrace$pokeuser(0x6, r1, 0x388, 0x7ffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0) (async) read(r3, &(0x7f0000000500)=""/100, 0x64) (async) ptrace$pokeuser(0x6, r1, 0x358, 0xfffffffffffffffe) (async) landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x16, 0x3, 0x0, 0x1}, 0x30, 0x1) (async) landlock_restrict_self(r4, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) (async) 1m1.808285125s ago: executing program 1 (id=498): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x4}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xae}, {{0x0, 0x0, 0x0}, 0x80}], 0x7, 0x40000020, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x4a02) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) (async) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x764, 0x0, 0x0, 0x1000, 0x58ada363, r6, 0x0, 0x111}}}, &(0x7f0000000300)=0x0) r8 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f00000004c0)={0x0, 0x400042cc, 0x400, 0x0, 0x80, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x19f}}], 0x1, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, r11, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x48800) 1m0.617360591s ago: executing program 3 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x80000000}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="35fc03b2fced9e78e3aabda602a7b6ce011c83185a2058a4d8eb0b083a57c82409f238fd6ec4ebb546352fd4b9c0d21a", 0x30}, {&(0x7f0000000240)="27c9b92de18b35b2f014e2de06c5a4e44d9f857d9af7d3a7370669d044eade392e2781e0059416fa3deb03ffe579dedd61ea2893eec8569dcf12379f8a9ebe58bbf40d161170aeb6924260c939629c7d16071c225dfce9bd0d773c45b42602c64113167372d8ce826effc415b132cc83bf7278a7ce120e442022e441b28e01087231bac2bcd9", 0x86}, {&(0x7f0000000300)="d8c4", 0x2}], 0x3, &(0x7f0000000ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x100, 0x29, 0x37, {0x5e, 0x1c, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x27, 0x9, [0x0, 0x0, 0x95c, 0xb62, 0xffffffff, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x4, 0x8a, "1ab596dff44a6def62ef80c0ffa5029b040a43c7b43a6ad06db4ec8d09d28f1030b665f0471b9e113193cae71cc1ad18e4f0d59bf072b4d58bbf388127aa4a9fd9d864b14bf9501c09a743eeb4b42aa7b9add0ee34256a67febb044402b378fae76a9cdfc2789604b514f69a4d87a68a4e0646f1023d2a8968067f0c27d3b0098e6a2cfa6daa824e45a3"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @private2, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x67, 0x2, 0x1, 0x0, 0x0, [@remote]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x6, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6d, 0x7, [0x2]}}, @generic={0xd, 0x4e, "f3883763c01522acf42d22d61c2056caf567be186815d34174de1c8c68239ac25c1fa69633aef2bfcebd9a2068d9c244d77ead0ede28f7ad2867388af5c8fd30e8fc7791f69834b708f7ffa11772"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x2, 0x3, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @generic={0x1, 0x88, "95d9cf56c3ee7fdd7085babad7af83668bef562165f0ce6f20853f8bb7d5d375f94f41c85b65ffdefeee61c500b0d14e69c63e7cb02190da12e116ddddd555d607b9311983b76cc95e6edf090a354166e0b5d5be3ac5fefc9341d9c36c47a5b2e35263e0725fababebd85cf1f6d4b18188286e243b1d70a23922ec9d70cea9b8acce6ad48eff0bc4"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0xe, [0x2, 0x7fffffff, 0xec]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x440}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0x7, @empty, 0xfffff8e5}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000800)="96c8962b9e6c71051b1ac2717a2618df21e08e0fd0cb84572dfe43e136084a25b3b1d63d932703594beb1cca4033533ad44076c4e55f5366b6f61119be9f00bf60a35a9af6b39af0402bf9697fa11539fd7f804060389a909a9c03fea48db6876254a945ab72f0b3e8eeb0d5e59b7f0c7c6e88928f8d2f07b4cdacf3e8a845c8ed189e415ac29c77", 0x88}, {&(0x7f00000008c0)="dc00da666efaefaaeba653", 0xb}, {&(0x7f0000000900)="153c5ae3fd6316be35813306fbcd421a78ebcc975a344236058e4916d3da80024fdf52e0f9f68f76c63bcaa475178f4efe4c1c85285d215779eee3b1a32f2897ce211b8e8dea2321117c6ac8c8e426b060e1895be1c11272b5b1ba83bd1033bafa0599", 0x63}], 0x3, &(0x7f0000000380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x46cb}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@enc_lim]}}}], 0x78}}], 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b0030001400060063aac5ab00092f0100000000000000002100ffffac141419ff0200000000000000000000000000013b00ff11670000000420655800000003010008000c0086dd080088be000000041807e8070100000000000009480022eb000000042c153707020000000000000000089f1d0800655800000000"], 0x7e) 1m0.551932424s ago: executing program 3 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',ro']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x9, 0xa0, 0x3, 0x40000000000280, 0x106e, 0x10100, 0x8000000000000001, 0x8000000400007c, 0x100380000, 0x200000a, 0x0, 0x4, 0xffffffffffffffff, 0x8000], 0xd000, 0x84401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.322185154s ago: executing program 3 (id=505): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1m0.321938574s ago: executing program 3 (id=506): ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, 0x0) (async, rerun: 64) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x83e127f095c18e9a, 0x0) mlockall(0x3) readahead(0xffffffffffffffff, 0xf, 0x8) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) (rerun: 64) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (rerun: 32) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000d, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) (async) setuid(0xee01) (async) io_setup(0x8000, &(0x7f0000002100)) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) 56.265877335s ago: executing program 3 (id=513): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x2040400) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r5}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340), 0x80000) 54.683211898s ago: executing program 3 (id=518): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\x03\x00\x00\x00\x00\x00\x00\x00B\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\x93\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D3Jzp\a\x1et\xb4X') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 54.577274864s ago: executing program 32 (id=518): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\x03\x00\x00\x00\x00\x00\x00\x00B\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\x93\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D3Jzp\a\x1et\xb4X') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 46.773515609s ago: executing program 33 (id=498): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x4}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xae}, {{0x0, 0x0, 0x0}, 0x80}], 0x7, 0x40000020, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x4a02) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) (async) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x764, 0x0, 0x0, 0x1000, 0x58ada363, r6, 0x0, 0x111}}}, &(0x7f0000000300)=0x0) r8 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f00000004c0)={0x0, 0x400042cc, 0x400, 0x0, 0x80, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x19f}}], 0x1, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, r11, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x48800) 38.204735441s ago: executing program 0 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b0030001400060063aac5ab00092f0100000000000000002100ffffac141419ff0200000000000000000000000000013b00ff11670000000420655800000003010008000c0086dd080088be000000041807e8070100000000000009480022eb000000042c153707020000000000000000089f1d0800655800000000"], 0x7e) 38.147967593s ago: executing program 0 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x80000000}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="35fc03b2fced9e78e3aabda602a7b6ce011c83185a2058a4d8eb0b083a57c82409f238fd6ec4ebb546352fd4b9c0d21a", 0x30}, {&(0x7f0000000240)="27c9b92de18b35b2f014e2de06c5a4e44d9f857d9af7d3a7370669d044eade392e2781e0059416fa3deb03ffe579dedd61ea2893eec8569dcf12379f8a9ebe58bbf40d161170aeb6924260c939629c7d16071c225dfce9bd0d773c45b42602c64113167372d8ce826effc415b132cc83bf7278a7ce120e442022e441b28e01087231bac2bcd9", 0x86}, {&(0x7f0000000300)="d8c4", 0x2}], 0x3, &(0x7f0000000ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x100, 0x29, 0x37, {0x5e, 0x1c, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x27, 0x9, [0x0, 0x0, 0x95c, 0xb62, 0xffffffff, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x4, 0x8a, "1ab596dff44a6def62ef80c0ffa5029b040a43c7b43a6ad06db4ec8d09d28f1030b665f0471b9e113193cae71cc1ad18e4f0d59bf072b4d58bbf388127aa4a9fd9d864b14bf9501c09a743eeb4b42aa7b9add0ee34256a67febb044402b378fae76a9cdfc2789604b514f69a4d87a68a4e0646f1023d2a8968067f0c27d3b0098e6a2cfa6daa824e45a3"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @private2, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x67, 0x2, 0x1, 0x0, 0x0, [@remote]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x6, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6d, 0x7, [0x2]}}, @generic={0xd, 0x4e, "f3883763c01522acf42d22d61c2056caf567be186815d34174de1c8c68239ac25c1fa69633aef2bfcebd9a2068d9c244d77ead0ede28f7ad2867388af5c8fd30e8fc7791f69834b708f7ffa11772"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x2, 0x3, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @generic={0x1, 0x88, "95d9cf56c3ee7fdd7085babad7af83668bef562165f0ce6f20853f8bb7d5d375f94f41c85b65ffdefeee61c500b0d14e69c63e7cb02190da12e116ddddd555d607b9311983b76cc95e6edf090a354166e0b5d5be3ac5fefc9341d9c36c47a5b2e35263e0725fababebd85cf1f6d4b18188286e243b1d70a23922ec9d70cea9b8acce6ad48eff0bc4"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0xe, [0x2, 0x7fffffff, 0xec]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x440}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0x7, @empty, 0xfffff8e5}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000800)="96c8962b9e6c71051b1ac2717a2618df21e08e0fd0cb84572dfe43e136084a25b3b1d63d932703594beb1cca4033533ad44076c4e55f5366b6f61119be9f00bf60a35a9af6b39af0402bf9697fa11539fd7f804060389a909a9c03fea48db6876254a945ab72f0b3e8eeb0d5e59b7f0c7c6e88928f8d2f07b4cdacf3e8a845c8ed189e415ac29c77", 0x88}, {&(0x7f00000008c0)="dc00da666efaefaaeba653", 0xb}, {&(0x7f0000000900)="153c5ae3fd6316be35813306fbcd421a78ebcc975a344236058e4916d3da80024fdf52e0f9f68f76c63bcaa475178f4efe4c1c85285d215779eee3b1a32f2897ce211b8e8dea2321117c6ac8c8e426b060e1895be1c11272b5b1ba83bd1033bafa0599", 0x63}], 0x3, &(0x7f0000000380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x46cb}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@enc_lim]}}}], 0x78}}], 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)) write(r2, &(0x7f0000000300)='p:t-st/event1 ./file0:0', 0x17) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b0030001400060063aac5ab00092f0100000000000000002100ffffac141419ff0200000000000000000000000000013b00ff11670000000420655800000003010008000c0086dd080088be000000041807e8070100000000000009480022eb000000042c153707020000000000000000089f1d0800655800000000"], 0x7e) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESDEC=r5, @ANYRES8=r5, @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000040)=0x18) 37.386754219s ago: executing program 0 (id=620): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x4, 0x694b, 0x27, 0x725}, 0x4d, [0x3, 0x5, 0x3, 0x7ff, 0x8, 0x7, 0x7ff, 0xcd28, 0xffff0000, 0x3, 0x9, 0x2, 0x7, 0xffffffff, 0x80000001, 0x401, 0x550761e4, 0x6, 0x1, 0x1ff, 0x1, 0x3, 0x6, 0x7, 0x9, 0x656, 0x81, 0x80, 0x8000, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x5, 0xb6, 0xbb93, 0x10001, 0x6, 0xffff, 0x400, 0x5, 0xffffff00, 0x4, 0x7, 0xdb, 0xfdc, 0x7, 0x8001, 0x6, 0x3, 0x7fff, 0x9, 0x401, 0x4, 0x2, 0x6, 0x0, 0xfffffff7, 0x1000, 0xfb9, 0xffffffff], [0xffffffff, 0x830, 0x7, 0x5, 0x6, 0x7, 0x1, 0x80000000, 0x9, 0xfffffff9, 0x74, 0x3, 0x39b14d65, 0x9, 0x7, 0xfff, 0x7fff, 0x6, 0x331, 0x8000, 0x0, 0xffffff13, 0x3, 0x1, 0xfffffff8, 0x45b, 0xfffffffd, 0x8, 0x101, 0x5, 0x81, 0xfffffff7, 0x9, 0x7, 0xf4, 0x5, 0xfffffffd, 0x8, 0x52, 0x2, 0x8, 0x8, 0x8, 0x7, 0x0, 0xb, 0x62, 0x2, 0xfffffff9, 0x80007, 0x5, 0xf2b, 0xe, 0x5, 0x1, 0x5, 0x8, 0x36, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8], [0x7ff, 0x5, 0x6b7cc830, 0x40, 0x434, 0x1ff, 0x7fff, 0x8000, 0x7, 0x8, 0x7fff, 0x32, 0x7ff, 0x1, 0x2, 0x8001, 0x0, 0x3, 0xe7a, 0x6, 0x5, 0x9, 0x956e, 0x9, 0x76c, 0x9, 0xff, 0x734, 0x1, 0x5, 0x4, 0x0, 0x19b, 0x800, 0x0, 0x6, 0xa, 0x7fff, 0xcbfd, 0x81, 0x5, 0x1000, 0x1, 0x101, 0xa35, 0x262c, 0xfffffffd, 0x0, 0xe2d, 0x5, 0x4, 0x9, 0x7fffffff, 0x4, 0x4, 0x10000, 0x0, 0x7, 0x0, 0xb715, 0x304, 0x6, 0x5, 0x4], [0xa166, 0x151, 0xd68f, 0x8000, 0x6, 0x6, 0x7, 0x5, 0x2, 0x7, 0xfffffffd, 0x7, 0xfe, 0x7, 0x6, 0x80, 0xfffffff3, 0x7ff, 0x6a1, 0x5, 0x10000, 0x3, 0x2, 0x7, 0x45f2, 0x10, 0x7, 0x98, 0xff, 0x7, 0x3, 0x5, 0x8, 0x0, 0x26, 0x5, 0x3ff, 0xe, 0x9, 0x40, 0x3, 0x7f, 0x1, 0x3, 0x1606d85b, 0x9, 0x8, 0x3, 0x2, 0x20000000, 0x1, 0x8001, 0x8, 0x4062, 0x10, 0x7, 0x80, 0x2, 0x31c, 0x1, 0x7, 0x249, 0x8, 0x5]}, 0x45c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) openat(0xffffffffffffffff, 0x0, 0x200, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000203000000092100000001221800090581030053540000c12285682da37053ddd1abb081b78a9d38d67083"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022190000000501150025ff090491010901a102750896010e09309102c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) preadv(r2, &(0x7f0000001a80)=[{&(0x7f0000000100)=""/148, 0x94}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000001bc0)=""/114, 0x72}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/28, 0x1c}, {&(0x7f0000001880)=""/219, 0xdb}, {&(0x7f0000001980)=""/204, 0xcc}], 0x9, 0x3, 0xe) 34.319995872s ago: executing program 0 (id=648): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x3, 0x10, 0x81, 0x0, 0x2, 0x7, 0x1, 0x3, 0xeb, [0x25, 0x2, 0xfffffffa, 0x3efb, 0x8000, 0x40, 0x3]}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 33.956966869s ago: executing program 0 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x40101, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) (async) ioperm(0x6, 0x6, 0xfb4) 33.662166403s ago: executing program 0 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, 0x0, 0x7e) 33.625727855s ago: executing program 34 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, 0x0, 0x7e) 12.657316557s ago: executing program 4 (id=798): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x2040400) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r6}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340), 0x80000) 12.522569043s ago: executing program 4 (id=799): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000100)={0xc5, 0x0, r2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2e, &(0x7f0000000280)=0x80000005, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000002c0)={{r3}, "116e10b8eaa67136d22ac1c3b264799b4c97a2833df3770d29396f4e7e1e9c2abde550e2f2c4fe24ed9a4fd7b460090cd30f88ec4f0c8368a1f7d67c9a3bb230655924d9ac94f4b0d0d4729a7aee2530ef58341510ef6ccca02ce5bdfb6f56c2c80eca7038f3959f4a828fb61625929431387a753cfbef26bde2dbd536b162bddccb472506759ce9f1e193f7efc4cdbada98106d4e1ca9dc038cf4625b26a80cabb4f4bbf7d443c196a2d60166d72baeedcec7ff2391044ca1ecfe26a8a6ad28cf2dd5945b5439280982b71ccdde51cfbd531795c8660fb5ef31c38a560a8879056b041ef4cbba1b663fb4c26d4ec1fe6d5300185bac1a0b6c7670ed7c73cffcf63c043953a346dee2ca61225d6ef1b42876760630671fc61f849d9a69adcb65a7a0153b189be33739c4e8597e3641498ffb6aed5b4b80fdc0b340c4b0f3668be9c823ac6e04d5c9a55a28377373e9464fd2b1191136a69bd2b174a0712bb6410879b98a0628f25769d78013175cbda8d4b433c07fafdd833b814eb2dd8e1815b4d0a646de8d3105ed115645f0dd13f1df622a38c64134e4e02d049ee25f861562b8be3a3fe091ab169bdd45e063d96b6da71b6e617248fb11725572ba5528a65966ed847f41d66d88d55d07a23a8b76e19005805f559161c75a011b03379a5d95a2d91a965f25cc4339f0b6c201e6c98befb449391735845866fea79dcfc42542ae891d397efa1e58e916d472015f0657eedc1731075c6e9dbc0015e964e2ca95f01baebe396c7ca20345a2c7fc9e6844a819897ed13458f00831696d9f92c8f3c81f1d0f564a87bd382a21dd7d828e2c229d5df3a73e0cdf487bab8ccdbdfab55f8a9cbf826d79c693742704eac603d8abfcf77e7e351b90d925ff32b3877b8e259725857ed4cb1d8b590213e79aec253cbcf65262f6d3fdc48df080a20e794b043cd7cdbbf204b953c87e8d088f756d97cdce2aabac31d8fc58d8b53625a27938185362f612937ea1286c984cea5adfd3dc2a806e68945063ab94b805f7674228b60bf6fc3e83435a51f0dfd1f274f5a51027363f3b2959379c4cdd6b0e927d7fabab1d7cd8cb262f68657fc87db1f30aadadaf3dcb9b0b570fbe7a1f292f332c83376c6b2f66f155d8cdf33b34a01dac86e415cdee5bae668d9bac5076a4d348c60e5538ed9b97a4cb9fb82f9d001bf3e07bc92961b6fe2e26a695ad7a79ca305bf100398621d6406bd81a7e81e6712c66bb03df498dfe632eded4d0506ea4eee7159261b66fe07832a33574fd1776f912f370067c957f5d5009f6797384b448e82bfa272b9b2d26fb01646ae95d4bfc1d4d0d7356c5b62df339aa444998ef2721d4f61c0216085910703573defa56adf997033f7a4d14cc5306fab0629e2a8519bab8b17456a5a6a89c71ccf7d6c96c607d4d2ae01fb047f9344f65e7552cb3df4f08c7eb52c5367d7cafb6d77b3999ee0c1d6678ea3d7ca122baa86ed618e18e2def86ab5371695eb2f805960bbf38ace28cfeccf6c0f270dc048d98c942f6c71c433b9a32959f1d4f9d921a0194889200258abd4501964c686e7c55dfafa5111afac348ba9f140298a7f5b3d168a7488df85da823ddd756543dfc4816d68cdb24f56f5bec904306f5db73389516be7865e6c7b9a67811e2a042c83cf1df96162149ba8d3acda97f2e877808a0a652a6dbd238340be4a9d288ce21649fbdd599ddd07aed1d582b54f82470482143ec1fa0532c3893ef2d584324bdee6d1fedd27e15d80a97d96dcf67ee959d87dae77b6b1dae84721a3397293e804542db05442d383f2f997279c5873cdfdb54ecfa820afab5f9c34e1e0f32b3d45850b351ed510330faf68b66e83a6fa5024da9f40c0e9b571afbb71dfd17b8f06cd8337644a2dfcb81105112e24fadf6028e6f531efe5c7e64f36931ebfabaab2497813f33b07cfe55e3746afbcc31eb2e48ea5c53c158c55e5411afd37db8d124e7feebdeb5f827c39978b6a44990719c65c35c71f0f2e4ca0a521ddfb34551180cdeddcccd9ed362514b44b09ad0dfc958e5c011df4baa718b68f35015db02f2d2d00243a615585a0a4c4f81ec064f07d5cb24919cbc1907eb80870929c875dfec0f2b01b101099c180c21d18eb821d4656632e04385926d89f52977c5e0611a51d0c3127693494ab2991534fb9328de903ff85351a18f05e5c766b26fcb8577ca7c0dcf7927fdcb021c5f8e44a691cfaffeace9f1907d7d0ec2df6ce3ead1432cd3c3aec4c010adc0a160b96fe4afc7364593f491cdbfea32574a4632b5944b2f424ea226c647d1292ae7ae9ab092275e31704c5117f5e8935f168cb674a0c24629788942480319d0bd7061cb834fdce41fabce6bb3c51e838be893a9d7293bdf5c8a79b42b8c165fa9706c7d455f53ac9470ddf2575b1964e798ad1e1725bf78fdf6db0ca29464109f6b8cf80a8fd35a7a198f3b03bd7b37e1a2a4bfe94e65de62a648860b1806982f877ce49d010af6aa8891e778bbb0142aeec11456f513b4fb7c5329fe13cc3a337557fe3ee801c0a3769ee4aec7542e5b6b9e021df8c79c66d8d623cc8eac5d101c5ed7e013a7bbb79bad23a55f91ba3075a2b20294ffee9cd02bffc99b15577c92465a7987581e144f2fcc734582c7f33989f7ef29f2a23c89c12cd1fc595cab1cd2821190e9372ac5599cdbbf0b1f48391a616f09e2dab01ec14f8111eb74f94850fb5b76ee6c3a3587259962ffd0edbb8719bcf028105b634ead3735d56f956e3840a0dab7aa327a88d53390808091946a27296af7d4ecc7215af0ad3f8ecee364de0a456daad451b833d201e876bf73e945ca2f76d24559ce8763c757f4ee86eb343185b4293bd3973a6ad62258b50f3ac235b50de9d377552fbbda0dfc59da8992f31f4df8740d5c9fd4709e342e838a330030bbd2c3e61db43d09d2a17edd58a45125cd92c0f775933dd47a2de41a46274cc000b7e6b84daf2d41789ddc01035ad4d6f965207d14b09136240a80f35727bc93d929e226c5c315bdf71bdd28341d20ceba329b8fdb62bcd6e221c25e8c9d07885b6645fa3e809aa6c1287fd67ec0f33eb8e187990f52cdff20ae54662b3bcc9fa3c12fe9fa47354723a130a62a6cc983276ea34ff51b6c22672cbadca0edd5eb09faf9d4a04f1d04baab67402f1bb950c928453918384fd9419fa45a99d87ecc8b97225e930037ebd2a6e6213f6d94a713967d14c4824c814ae3dd812fc35d6c6511b3b488c2c78036ccc8228d7f228861a159b069ad8bd43ff49406f9a0b7b3974bef4f19ff3339803ea0bb7c95c3d48b35ec53222072b940b443229d41f3b7043039097d81ab436caab461fee32857b6aa3f77a0c66add56a28c9e15594fe78bf5e274a713c35e71587fd8f19510be547d9f810b748b6aeb53867b2a5215e76a210b71b3a8f16834f33e21356db1af431202f31ee3e02b61f29e21888055f32d55b2b299d9ede2569c409bc1a4c325beb7115fb56d8db70f16daba9e1a96bc2663f8647bc618c67f13498c5eb17ebf2334bf52717c0e292402e482a29e249c2b79470688994a3b4e3ae7f556f44e6c38c6cdaa832c6336bcbf616e3bfb5dbdb76efacbc1fcb721f0e05115c2cf9d1517978c3c89bc534801c860334ab6ea195d4e697b0b595aca620dd7f8e404e5255d6c9ca783eb001cb040b18a0046c43aa6d18ebada85e8c9ad2e3b2f57cec6a8e03f04d044e857ce9c22baee2334983640892194a65ca178daaf7d163009799de000033e137c836293a0dc0a0cf2c6cb911764bc35497d5d0b6a31df207c78e37a2a188104f17c6b96190d8449822db16629cb50a34b2558c93df3a17c5d574f584ed3c6632b1012edd78f97c27d379d4ea0ded722cb2a85d3ec3f0fd8bee850eec1f3d3c7389dfae84272d5296639da26692ffdd30c22d052a3d8624296dddd7eb213565956986aeaa2a013312393f12e68afc8f2b87386d7ed668bdb047f852b5bbdefe72e1e1f4eaabcf20397bba70f116c2d8ba7c10df368098f4e0407b342a28782b45b339b69076770d163d071bd80ca2fa8bad7d3c29762f0f794edd8d024e5533d270733ac8bb06bf3b53b2cb994f38d920b698e9a6544476e45bdfad89a3a8b413130e06c6eb577b6e7bd11e8cf4f1c3e47b504a1335b58a0cfc651017d6a86dda702be124f8cce2013347c14b3339602b034e9164a7a0b6772d9e35ca5a06b160e297bfb56db09fbcb45e2453bc37ada2789816a6db0812dd23c8b1aee21e94bad3516d95a686a61eea65272fa33a77cb8a0d2ed2664a842db157ded295d4de1b33883c2f0c561e398890a323065ac2f4639ef062a3d61b8f54851a940c765357f70829db2a804a671c0a5e823bf39b6fff49e3397361ba38257dfdccf64dea99ad0e50fd8eaab2e72a1322d89a9101bfe9681d651fdbd651fd009378b2b4e5c0bf1949223069dec5451a446caf0a650f549f713fea1723a90cb53c446d17d49e5546a56fa988ffe595f1a49411545e59cfc93ed44679a7b9c0c1b7d8577d3083e63654553bd5b9e640a6d239038450cc570b0ed4d7fe49de7bc15bb1884787f5a7ed10bd0399e3f00a81a6d7e3a47c7b786032b786c0b13756925e2487ad7f75d8a1c224678bc73f39ecda37eaa5633c90b41810a3988e6d9d1217d8a7b3898f82436ebfbaaad2a708c7ba6b8790098060c02c1b69241bf3ae8e25905f7c9d8405826c696c2ffdff09297f28717ea306004436fdcc180c38ec1af67dcf7877154fadde0a56c6081dd5d7e480bcd37ebcc6b2289e83b2d420b501fe540e00267b469802377652fe1f911ff71e6531d07cf92c981f9afe1a26bd97dff04bad7d46f1597a2d0f0a40af637db6431735c240bf347d35f8ae693050da1bcd1c3c9a01837669b55b538fe4b0eca9c48b41f8ee01126fda743b4f08c3cda9208e4766d13f81d3b9db8729ad81375a9afa61784e8e818365018a7e4fcfb80b4a7097b79f897f372e0ef23f3d08651f43265b81eac612b507d9e188c3a44a04b0d0488fd35871e900dd9599c1b55e6d5b1217de8cce23a816607121f0453e92147248f0ec18207589cc08d0d041d2d1e1c80d1f161c1c3947617efd21c7cac85137163986577dd9dd746226e6ae034aa9b83733f1226e803444daf3b975a4aa7a558aeeb23502e134e4a1ec6cc16824f4aed1048a0a470ab61d91d252a4bbb3f384c889c77522f7b29fe55526211c2a0bf3d71d7c90d482fd9ec942761d514aac80f1cf7f4f1031fbe0bb95934383a2b66e1dfc8379a0eb899121b58ce544555c796102b7f74a44903453009423083a582af346bb60b0c1cdc0ff302652bd7bc7b2cf0fdd8533f13cee01601431744c2c9edee18758c8537d97b6abf00ec04d66c056df78212a77f0dd93d7d96a767308453114d6ee6756c0ff27640583011ff5929a1d8679dee0aba054712c81ec0675b8eeb4795c5ad80c5a7d3037629007598f3772e7b7de40a0c338ae271ea1f2b3069a42da3a6f8e8d75f2dfc408b5ebe25d31b6c634811e3adf17820c812010221a6f0b4f72511e4a5900959aeae6f884614c550a1c66a066d61b80db7c13d4256237ce9a1bbc10c3ca9c2e31412799f9746afc5d2a6edee9b396e7184e01e1f7700fae962177aeb5aeb4dc5a9541d7b0b68489431b7be851dc8f41469cec62ca8e49ee0bd49f59ef8e4e79ce3bf30875f5a84a3804eaddd0c8119ea3a408f092fd750fbf020269f9eb5731b0ee5d41586938e074fdc27daed"}) r4 = accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c0}, 0x8000) 12.167612429s ago: executing program 4 (id=800): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4c0400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet(0x2, 0x2, 0x3) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private2, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x0, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x32}, 0x8, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x5c, 0xfffffffe}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r5 = dup(r3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$inet(0x2, 0x1, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 12.148510641s ago: executing program 4 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000380)="da25e0df76bfd2089b14391ef37e", 0xe}, {&(0x7f00000003c0)="8d9856f71e211762fa8b1e2a80265ae6adc09e08cf9aad54", 0x18}, {&(0x7f0000001980)="ecb06bd4c1951379dba6a1a7bdd88f3e5d62279815d13580b1726cf04f30e50894dee4da43038220502f7d5b9bd1e1600dc1b4b93ef137d53bd687098cae3c9543beda1867c400dde01f93bef26ba226cb7a634dc7fd", 0x56}, {&(0x7f0000000480)="456e802824bed0a3e48f7b95f633bddc313034f6c4be09a49f721198261cbb7dcfd9a788fc6b4b76243da011988f6f185a37ed55d2f2de89a90b6fb96ee96f23d50b9b92fe3751e6fd108b407a7a8079ae2e661e7539c1f09971a3e8", 0x5c}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="0632d805258b1f38ee6a9001ba148c179d56182ff6d1d0a70759bac249013755b3a8325123c150b67f0ef8a44ffc91a237480b3a69be58e3fe98e94eda4c67ee50d760a5b38451d9f759dc4ecf605a9860ca2f25eb962cf87236592c1cf063da6feffa4e9de221841a4dc85a", 0x6c}, {&(0x7f0000000680)="a06245d1ff6c7eb69c1f8e36130bf003fc6c5dc53f421bd70fd85017716123e2aabc736e7969ea9facb4dea0eb4407c1aa55d87bc27efc74a8a35b9f02233c1c3a", 0x41}, {&(0x7f0000000700)="52b060e5284c1dab6d8b4fbb1007e915d2aeba48c378460654325de2d5bd95ba2fdc8a466586bc17771b9478a2671b4ec67fa1d334405f23c6841de0f7b2ce002d3b8c212424710b2eec54336cc016abbc8353c10d53cc164b8daf2568a1fcf6970eca2a924a8690acbd38e365be2653837a6df60d4719f24a31625b6e42087b2430ad6a5b26387de11372d29d3dca46428c4fbb696f3f1263cf53fa95546f4d9966a41ec27c", 0xa6}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="ba16e2acb0f44e0a0c255880403488d6c3b6d8f782f4acbf9aa49f832ba4d5e0f84a701b93bb510f6b15dfa3b672c4be75673cbb25f598d034f9226b3f488a3a801c2612f0b59eb3285fbf366fe9c20a7694b2b73071abb6b5ea1e0a2a5e9c4ceb781122f465733fb08a98f27367444735fc8c7aa45df7c92c24f889872a39ac4a77ac8de61f12447a7f9bef9cb9ab26b413646490c7b060cba01ca5ad025a48471e1889107c80665bed13b35778ae6f4b09bd6342d8685ecaa515f6864114e9532db16eb39fc84c", 0xc8}], 0xa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000340)={&(0x7f0000000200)='*^\x00', &(0x7f0000000300)='.pending_reads\x00', 0x7}) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r7 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x8) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x2) write$binfmt_format(r8, &(0x7f00000000c0)='-1\x00', 0x3) write$binfmt_format(r8, &(0x7f0000000180)='-1\x00', 0x3) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12}) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) 12.131630531s ago: executing program 4 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x80000000}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="35fc03b2fced9e78e3aabda602a7b6ce011c83185a2058a4d8eb0b083a57c82409f238fd6ec4ebb546352fd4b9c0d21a", 0x30}, {&(0x7f0000000240)="27c9b92de18b35b2f014e2de06c5a4e44d9f857d9af7d3a7370669d044eade392e2781e0059416fa3deb03ffe579dedd61ea2893eec8569dcf12379f8a9ebe58bbf40d161170aeb6924260c939629c7d16071c225dfce9bd0d773c45b42602c64113167372d8ce826effc415b132cc83bf7278a7ce120e442022e441b28e01087231bac2bcd9", 0x86}, {&(0x7f0000000300)="d8c4", 0x2}], 0x3, &(0x7f0000000ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x100, 0x29, 0x37, {0x5e, 0x1c, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x27, 0x9, [0x0, 0x0, 0x95c, 0xb62, 0xffffffff, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x4, 0x8a, "1ab596dff44a6def62ef80c0ffa5029b040a43c7b43a6ad06db4ec8d09d28f1030b665f0471b9e113193cae71cc1ad18e4f0d59bf072b4d58bbf388127aa4a9fd9d864b14bf9501c09a743eeb4b42aa7b9add0ee34256a67febb044402b378fae76a9cdfc2789604b514f69a4d87a68a4e0646f1023d2a8968067f0c27d3b0098e6a2cfa6daa824e45a3"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @private2, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x67, 0x2, 0x1, 0x0, 0x0, [@remote]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x6, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6d, 0x7, [0x2]}}, @generic={0xd, 0x4e, "f3883763c01522acf42d22d61c2056caf567be186815d34174de1c8c68239ac25c1fa69633aef2bfcebd9a2068d9c244d77ead0ede28f7ad2867388af5c8fd30e8fc7791f69834b708f7ffa11772"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x2, 0x3, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @generic={0x1, 0x88, "95d9cf56c3ee7fdd7085babad7af83668bef562165f0ce6f20853f8bb7d5d375f94f41c85b65ffdefeee61c500b0d14e69c63e7cb02190da12e116ddddd555d607b9311983b76cc95e6edf090a354166e0b5d5be3ac5fefc9341d9c36c47a5b2e35263e0725fababebd85cf1f6d4b18188286e243b1d70a23922ec9d70cea9b8acce6ad48eff0bc4"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0xe, [0x2, 0x7fffffff, 0xec]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x440}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0x7, @empty, 0xfffff8e5}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000800)="96c8962b9e6c71051b1ac2717a2618df21e08e0fd0cb84572dfe43e136084a25b3b1d63d932703594beb1cca4033533ad44076c4e55f5366b6f61119be9f00bf60a35a9af6b39af0402bf9697fa11539fd7f804060389a909a9c03fea48db6876254a945ab72f0b3e8eeb0d5e59b7f0c7c6e88928f8d2f07b4cdacf3e8a845c8ed189e415ac29c77", 0x88}, {&(0x7f00000008c0)="dc00da666efaefaaeba653", 0xb}, {&(0x7f0000000900)="153c5ae3fd6316be35813306fbcd421a78ebcc975a344236058e4916d3da80024fdf52e0f9f68f76c63bcaa475178f4efe4c1c85285d215779eee3b1a32f2897ce211b8e8dea2321117c6ac8c8e426b060e1895be1c11272b5b1ba83bd1033bafa0599", 0x63}], 0x3, &(0x7f0000000380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x46cb}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@enc_lim]}}}], 0x78}}], 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000040)=0x18) 11.998162258s ago: executing program 4 (id=804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000300ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r2], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000300ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) (async) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r2], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 11.976200439s ago: executing program 35 (id=804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000300ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r2], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000300ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) (async) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r2], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 4.107859467s ago: executing program 7 (id=842): syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x801) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory2/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='o', 0x1) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d, 0xfffffffc}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xdf09, 0x80000, 0x1, 0x385}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71e2, 0x1000, 0x1, 0x39c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd5c, 0x2000, 0x2, 0x2d0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5046, 0x2, 0x1, 0x2c2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d10, 0x8000, 0x1, 0x286}}], 0x4, &(0x7f0000002380)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff9}, 0x0, 0x0, '\x00', {0x0, 0x2c9, 0x0, &(0x7f0000001380)=@buf_512="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"}}, &(0x7f0000002400)) syz_io_uring_setup(0xec7, &(0x7f0000002440)={0x0, 0xe17b, 0x4000, 0x9, 0xb3, 0x0, r3}, &(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xd, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x808, 0xfffffffffffffffc, 0x4190, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x4b5, 0xffffffffffffffff, 0xfff7ffffffffffff, 0x6}, &(0x7f0000000000)={r4, r5+10000000}, 0x0) 4.029631441s ago: executing program 2 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe8802, 0x10) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x1400) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r1, 0x0, 0x4) 3.970056954s ago: executing program 2 (id=845): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x40, 0xd, 0xe9, {0xe9, 0x6, "4694dd7ebba2b9dfa5125141e28f39a037a2ecd69d7e296ceead16c5de35324d261d23e3818c668415f33021d93ace01237086943e1f99964b24572f15c96038e4426ccc9d0415eac140c29b947d9060a4096ec800b85eb9b91a72a86007fb9c15839a96dae540583b1d8a35812cf53b3759c4855dde3b59607f327023acc8e5638156da97e9b13e0d00070a5cc72d8b18df6192f4a9ab779df2bce1dcba41e5a991ec63fb8aaeb7f018f99f99d15bf81f1c50699013b02a73611c5389f53fcf4ba76add5c94fd08d8e75bafeaa6de1694f048406275b8073790df3ebc235cd2be6d9e16858c27"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000740)={0x0, 0xf, 0x88, {0x5, 0xf, 0x88, 0x2, [@ptm_cap={0x3}, @generic={0x80, 0x10, 0xa, "b46e83c5821282a5c31df6f624365bb6421df23094cbe1d3fd12f2eb8d19a929462cfecec2996aed45c12b833123f1f044b8f627e1fcfb9cf2a4910b97418de0c50ca58d21130cf7fc3558afd115ef1cd8f7e6dca5785d967e4a01789444c1bd3c94c7cc902d03d6840f05d47644c92dc7a3d6f8c39b00e2136f8e828f"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x3, 0x1, "f62601ad", "12ebff16"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x4, 0x0, 0x0, 0x13, 0xb}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0xc, 0x75, "dc19afa9f463463c3dee20a7f6887a1083924d0abfd290fe5196e5ee609acdf291da6cc8e545a23ceaf4b20e8059ad128c809fe45d73a66df9120d2c4abdf8c72f44950b7fa863dbde6342e3df6b7808f96448e2dbccfb7a5323524ce8594ebcab39c08c98b3acf1bd2f7e3a9f9f4fe1f3a87bb90e"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x1000, 0x80}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xc8b}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "100f"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "0586"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0xfc}}) 3.246000018s ago: executing program 7 (id=851): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.179549461s ago: executing program 7 (id=853): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) userfaultfd(0x80001) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) gettid() (async) gettid() write(r3, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.109974194s ago: executing program 7 (id=854): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r1, 0xa70d6000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='./proc/thread-self/fail-nth/file0\x00', &(0x7f0000000240)='gadgetfs\x00', 0x804000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r7 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(r7, 0x0, 0x1f, &(0x7f0000000180)={0x15, 0x3, 0x4}) unshare(0x42040400) 3.109644434s ago: executing program 6 (id=855): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x2040400) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r6}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340), 0x80000) 3.100989145s ago: executing program 7 (id=857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x23, 0x18, {0x18, 0x2, "44f479ce4e535f24fdfc40919612aedaba57aeef3e58"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.288805022s ago: executing program 6 (id=858): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3bdfe6e14c880803d919a4c980359738d0747490d6b525b0ec4b995d39786abfea85933ceed03a2100c74ec22b822036ec26363a8372d70f06e864d1ffbce9f73419d55c6c0f5b2ddbeb052573f9193484c5b3481002dc65ecab670eb87792a030f07c66afeb866a89ec65d9db9460b852f5fcfb4051c45fad11da70dff79d7ee22a13b48ee8"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x3, 0x118, 0x0, r4}, &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x2000, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.48766477s ago: executing program 5 (id=861): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.399727554s ago: executing program 5 (id=862): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047456, &(0x7f0000001200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x12) 1.306073849s ago: executing program 5 (id=863): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) (async) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) getdents(r1, &(0x7f0000000140)=""/59, 0x3b) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1.305271929s ago: executing program 5 (id=864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffff7038}, {0x6}]}, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa4, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x2004c041) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000880)={{r4}, 0x0, 0x6, @inherit={0x0, 0x0}, @name="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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) r8 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00fffffffffc012596848cb37eb413afedffffff630000100000"], 0x20}, 0x1, 0x0, 0x0, 0x1a89c48a8b2da136}, 0x48084) (async) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x20, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x82}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x10, 0x8, 0x3c0, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c19e54e1928cc7ad398db6fd681e89cde3646f369824cd0c2da148a7af8d0006390f479e7446d2253a6efb214a2fa118d0521ec5fcbb72cf"}]}, 0x100}, 0x1, 0x7}, 0x4) (async, rerun: 64) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (rerun: 64) 1.0721087s ago: executing program 2 (id=865): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0xee01, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x4, 0x4) r5 = gettid() ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) rt_sigqueueinfo(r5, 0x34, &(0x7f0000000000)={0x35, 0x9, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000140)='bridge0\x00', 0x200c00, &(0x7f0000000180)={@_ha_fsid={[0x8001, 0x1]}, {0x8, 0x7fff, 0x9, 0x7}}, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x9}) 1.030420312s ago: executing program 2 (id=866): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x2040400) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r6}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340), 0x80000) 870.133259ms ago: executing program 6 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/1000, 0x3e8) syz_clone(0xc881300, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) 864.155259ms ago: executing program 6 (id=868): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x6, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000140)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)={0xac, 0x3f, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8f, 0x15b, 0x0, 0x0, @binary="c8eba8a1622b0af2953acce9710975034492e49c0f5de66cd7f6f62d71b5d6be4c9f88a507375b516c93d36d2f6553daf9a046b28d61b1814d7abe87cdd7521143d4598263d72bad90b656d85f2e2702d2ba26e830fafc48cd751df676c0f69e8244ace24b049fce97c6df03e77595d8767ea00c32cfb86576e84fd6eeb9e0f33368e77c5695ded710aded"}, @nested={0xc, 0x85, 0x0, 0x1, [@nested={0x4, 0x94}, @nested={0x4, 0x14a}]}]}, 0xac}], 0x1, 0x0, 0x0, 0x40}, 0xc040) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048810}, 0x4000) 842.98722ms ago: executing program 6 (id=869): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000040)=0x18) 550.140024ms ago: executing program 5 (id=870): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 507.737536ms ago: executing program 5 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) syz_usb_connect$midi(0x1, 0x6a, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x8, 0xb0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x4, [], [{{0x9, 0x5, 0x2, 0xa, 0x400, 0x40, 0x7, 0x4, {0x5, 0x25, 0x1, 0x1, '>'}}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0xfd, 0x8, {0x14, 0x25, 0x1, 0x10, "9d3eb40f92fb96bf70604cb492148819"}}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x7, 0x0, 0x3, {0x5, 0x25, 0x1, 0x1, "f2"}}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xe, 0x32, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000001c0), 0x410, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x3) 180.490651ms ago: executing program 2 (id=872): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = syz_ublk_setup_io_uring(0x62b2, &(0x7f0000000080)={0x0, 0xf5b5, 0x200, 0x0, 0x39d}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0xfb87, 0x1000, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x2000, 0x6, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda15, 0x4000, 0x1, 0x237}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$HCIINQUIRY(r7, 0x800448f0, 0x0) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000500), 0x4, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000040)={0x2, r11}) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000140)={0x4, r11, 0x1}) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0094199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0x0, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x400, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8, 0x200, 0x2, 0x272}}], 0x1, 0x0, 0x0) 70.141147ms ago: executing program 6 (id=873): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000083, 0x0, 0x1001}]}) (async) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000021f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udp(0xa, 0x2, 0x0) (async) splice(r0, 0x0, r7, 0x0, 0x88000cc, 0x0) (async) fcntl$setpipe(r1, 0x407, 0x4100004) (async) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) 69.782996ms ago: executing program 7 (id=874): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 0s ago: executing program 2 (id=875): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) (async) sendmmsg$unix(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYRESDEC=r1], 0x18}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)="b0", 0x1}, {&(0x7f0000000980)="dad9ddd3bf3c4ad17a6601d985092ea9fb61fba7747c2d22a2302e2b0bb553c571568fad55edf76597bc8738534f9eed7bb60ba815549a5138a1ccdc0caefc9facb0a085961ad6c1385cced518e92e85d586889437ff4f76ed6e8e0667174d6fd5daa7b8227927e7f74b85168d67c9e2cd42e177bbc3", 0x76}, {&(0x7f0000000a00)="eb01bfbeb924ff7c13a61f7059d05e3478d3afefea7c0a1d2a945fab496d4f90dca6f526d9e97542f5b47a71f631732179c5b091785c19300025b6903cd11071edf07a1403534a36d2f121ddcbf778952edb822d9d135e3da5cb818aa5bf5c1d26880c8d983591c3fa13d061dd9dfa21f6d3c86ea53940fb92d234c9281a5808c049a1e9ea84dc36b4", 0x89}], 0x3, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x18, 0x841}}], 0x2, 0x11) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x1, 0x0, {0xa, 0x4e20, 0xffffff7b, @empty, 0x5}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r2}, &(0x7f00000008c0)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r0, 0x12, 0xa6}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha3-224-generic\x00'}}, &(0x7f0000000b00)="28a6014eea5250c2b12f952cd1a4d2f5c8efae5107fd76efbd4022e37510f1c725dd7c434e1d3da3f582ffbe95d5355c0242934a7b71737778ab3c5ed1d1fc859afaf976cc7cd212d575414a64e91036b4392e00007041f6b3660cc1661d40babd8ef56b045460f2b25185842856cb4eed00fd58493ddf06d7d61ccc8a029bad7fb8a6219505d4d8cf47f30b3d29f07fc40957e6", &(0x7f0000000800)=""/166) kernel console output (not intermixed with test programs): __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 94.593732][ T2316] ? alloc_ldt_struct+0xbd/0x2f0 [ 94.593753][ T2316] __vmalloc_noprof+0x104/0x1d0 [ 94.593770][ T2316] ? alloc_ldt_struct+0xbd/0x2f0 [ 94.593791][ T2316] ? __kasan_kmalloc+0x96/0xb0 [ 94.593814][ T2316] ? __cfi___vmalloc_noprof+0x10/0x10 [ 94.593831][ T2316] ? __kmalloc_cache_noprof+0x23c/0x470 [ 94.593850][ T2316] ? alloc_ldt_struct+0x7e/0x2f0 [ 94.593872][ T2316] alloc_ldt_struct+0xbd/0x2f0 [ 94.593893][ T2316] ? __kasan_check_write+0x18/0x20 [ 94.593913][ T2316] write_ldt+0x43d/0x760 [ 94.593932][ T2316] ? native_write_gdt_entry+0x40/0x40 [ 94.593954][ T2316] ? xfd_validate_state+0x68/0x140 [ 94.593981][ T2316] __se_sys_modify_ldt+0x70/0x2e0 [ 94.594003][ T2316] __x64_sys_modify_ldt+0x7f/0xa0 [ 94.594025][ T2316] x64_sys_call+0x143d/0x2ee0 [ 94.594043][ T2316] do_syscall_64+0x57/0xf0 [ 94.594060][ T2316] ? clear_bhb_loop+0x50/0xa0 [ 94.594083][ T2316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.594106][ T2316] RIP: 0033:0x7f036f79e159 [ 94.594121][ T2316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.594138][ T2316] RSP: 002b:00007f03706d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 94.594160][ T2316] RAX: ffffffffffffffda RBX: 00007f036fa25fa0 RCX: 00007f036f79e159 [ 94.594175][ T2316] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 94.594189][ T2316] RBP: 00007f036f83506b R08: 0000000000000000 R09: 0000000000000000 [ 94.594200][ T2316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.594213][ T2316] R13: 00007f036fa26038 R14: 00007f036fa25fa0 R15: 00007fffa087a878 [ 94.594230][ T2316] [ 94.594255][ T2316] syz.4.523: vmalloc error: size 65536, failed to allocated page array size 128, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 94.879245][ T2316] CPU: 0 UID: 0 PID: 2316 Comm: syz.4.523 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 94.879276][ T2316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.879290][ T2316] Call Trace: [ 94.879297][ T2316] [ 94.879304][ T2316] __dump_stack+0x21/0x30 [ 94.879335][ T2316] dump_stack_lvl+0x140/0x1c0 [ 94.879364][ T2316] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.879390][ T2316] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 94.879411][ T2316] dump_stack+0x19/0x20 [ 94.879434][ T2316] warn_alloc+0x1e7/0x2c0 [ 94.879459][ T2316] ? __kasan_check_write+0x18/0x20 [ 94.879478][ T2316] ? __cfi_warn_alloc+0x10/0x10 [ 94.879502][ T2316] ? __kasan_kmalloc+0x28/0xb0 [ 94.879535][ T2316] ? __kmalloc_node_noprof+0x252/0x500 [ 94.879556][ T2316] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 94.879585][ T2316] __vmalloc_node_range_noprof+0x65f/0x1300 [ 94.879611][ T2316] ? __se_sys_modify_ldt+0x70/0x2e0 [ 94.879633][ T2316] ? x64_sys_call+0x143d/0x2ee0 [ 94.879650][ T2316] ? do_syscall_64+0x57/0xf0 [ 94.879671][ T2316] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 94.879698][ T2316] ? alloc_ldt_struct+0xbd/0x2f0 [ 94.879719][ T2316] __vmalloc_noprof+0x104/0x1d0 [ 94.879735][ T2316] ? alloc_ldt_struct+0xbd/0x2f0 [ 94.879754][ T2316] ? __kasan_kmalloc+0x96/0xb0 [ 94.879775][ T2316] ? __cfi___vmalloc_noprof+0x10/0x10 [ 94.879799][ T2316] ? __kmalloc_cache_noprof+0x23c/0x470 [ 94.879820][ T2316] ? alloc_ldt_struct+0x7e/0x2f0 [ 94.879843][ T2316] alloc_ldt_struct+0xbd/0x2f0 [ 94.879864][ T2316] ? __kasan_check_write+0x18/0x20 [ 94.879884][ T2316] write_ldt+0x43d/0x760 [ 94.879904][ T2316] ? native_write_gdt_entry+0x40/0x40 [ 94.879926][ T2316] ? xfd_validate_state+0x68/0x140 [ 94.879952][ T2316] __se_sys_modify_ldt+0x70/0x2e0 [ 94.879974][ T2316] __x64_sys_modify_ldt+0x7f/0xa0 [ 94.879995][ T2316] x64_sys_call+0x143d/0x2ee0 [ 94.880010][ T2316] do_syscall_64+0x57/0xf0 [ 94.880026][ T2316] ? clear_bhb_loop+0x50/0xa0 [ 94.880047][ T2316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.880068][ T2316] RIP: 0033:0x7f036f79e159 [ 94.880085][ T2316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.880101][ T2316] RSP: 002b:00007f03706d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 94.880122][ T2316] RAX: ffffffffffffffda RBX: 00007f036fa25fa0 RCX: 00007f036f79e159 [ 94.880137][ T2316] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 94.880150][ T2316] RBP: 00007f036f83506b R08: 0000000000000000 R09: 0000000000000000 [ 94.880162][ T2316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.880174][ T2316] R13: 00007f036fa26038 R14: 00007f036fa25fa0 R15: 00007fffa087a878 [ 94.880191][ T2316] [ 94.880231][ T2316] Mem-Info: [ 95.160628][ T402] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 95.169639][ T402] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 95.173359][ T2316] active_anon:24073 inactive_anon:9 isolated_anon:0 [ 95.173359][ T2316] active_file:9654 inactive_file:11631 isolated_file:0 [ 95.173359][ T2316] unevictable:0 dirty:141 writeback:0 [ 95.173359][ T2316] slab_reclaimable:3884 slab_unreclaimable:82351 [ 95.173359][ T2316] mapped:24627 shmem:16615 pagetables:861 [ 95.173359][ T2316] sec_pagetables:0 bounce:0 [ 95.173359][ T2316] kernel_misc_reclaimable:0 [ 95.173359][ T2316] free:1490580 free_pcp:2242 free_cma:0 [ 95.261248][ T2316] Node 0 active_anon:96392kB inactive_anon:36kB active_file:38616kB inactive_file:46524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98508kB dirty:564kB writeback:0kB shmem:66460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6432kB pagetables:3544kB sec_pagetables:0kB all_unreclaimable? no [ 95.293531][ T2316] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5212kB free_cma:0kB [ 95.323839][ T2316] lowmem_reserve[]: 0 3921 3921 [ 95.328815][ T2316] Normal free:3029964kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96392kB inactive_anon:36kB active_file:38616kB inactive_file:46524kB unevictable:0kB writepending:564kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:64kB free_cma:0kB [ 95.363605][ T2316] lowmem_reserve[]: 0 0 0 [ 95.368054][ T2316] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 95.387844][ T2316] Normal: 1467*4kB (UME) 1180*8kB (UME) 607*16kB (UME) 412*32kB (UME) 356*64kB (UME) 65*128kB (UME) 73*256kB (UME) 39*512kB (UME) 13*1024kB (UME) 14*2048kB (UM) 703*4096kB (M) = 3029436kB [ 95.432070][ T2316] 37924 total pagecache pages [ 95.436811][ T2316] 27 pages in swap cache [ 95.446069][ T2316] Free swap = 58160kB [ 95.450185][ T2316] Total swap = 124996kB [ 95.454660][ T2316] 2097051 pages RAM [ 95.458484][ T2316] 0 pages HighMem/MovableOnly [ 95.463404][ T2316] 352241 pages reserved [ 95.467648][ T2316] 0 pages cma reserved [ 95.474101][ T2316] Memory allocations: [ 95.478216][ T2316] 0 B 0 init/main.c:1477 func:do_initcalls [ 95.486436][ T2316] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 95.494805][ T2316] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 95.504215][ T2316] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 95.512401][ T2316] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 95.520328][ T2316] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 95.529239][ T2316] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 95.537387][ T2316] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 95.545585][ T2316] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 95.553753][ T2316] 0 B 0 init/initramfs.c:101 func:find_link [ 95.800524][ T36] audit: type=1400 audit(1789864858.249:410): avc: denied { getopt } for pid=2323 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.281204][ T402] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.431364][ T402] usb 5-1: Using ep0 maxpacket: 16 [ 96.437748][ T402] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 96.451749][ T402] usb 5-1: config 1 has no interface number 0 [ 96.458254][ T402] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 96.468625][ T402] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.478995][ T402] usb 5-1: config 1 interface 105 has no altsetting 0 [ 96.487539][ T402] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 96.496919][ T402] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 96.505231][ T402] usb 5-1: Product: syz [ 96.509510][ T402] usb 5-1: Manufacturer: syz [ 96.519383][ T402] usb 5-1: SerialNumber: syz [ 96.525347][ T2333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.534963][ T2333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.947498][ T2333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.955052][ T2333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.974974][ T45] usb 1-1: USB disconnect, device number 35 [ 97.331247][ T45] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 97.372151][ T402] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 97.391821][ T402] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 97.410349][ T402] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:7f:af:a2:2b:17 [ 97.530290][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.561757][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.571304][ T36] audit: type=1400 audit(1789864860.019:411): avc: denied { getopt } for pid=2334 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.593575][ T45] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 97.611874][ T45] usb 1-1: can't read configurations, error -71 [ 97.666779][ T407] usb 5-1: USB disconnect, device number 2 [ 97.675611][ T407] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 97.742518][ T407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.758126][ T407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.768625][ T407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 97.795144][ T2360] tipc: Started in network mode [ 97.810270][ T2360] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.820457][ T2360] tipc: Enabling of bearer rejected, failed to enable media [ 97.880615][ T2382] kernel profiling enabled (shift: 9) [ 97.932735][ T2384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.054920][ T2390] FAULT_INJECTION: forcing a failure. [ 98.054920][ T2390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.068223][ T2390] CPU: 0 UID: 0 PID: 2390 Comm: syz.2.533 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 98.068254][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.068266][ T2390] Call Trace: [ 98.068272][ T2390] [ 98.068280][ T2390] __dump_stack+0x21/0x30 [ 98.068311][ T2390] dump_stack_lvl+0x140/0x1c0 [ 98.068336][ T2390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.068361][ T2390] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 98.068390][ T2390] dump_stack+0x19/0x20 [ 98.068414][ T2390] should_fail_ex+0x3c2/0x510 [ 98.068437][ T2390] should_fail_alloc_page+0xec/0x110 [ 98.068461][ T2390] __alloc_pages_noprof+0x1c0/0x7e0 [ 98.068488][ T2390] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 98.068516][ T2390] ? __kasan_check_write+0x18/0x20 [ 98.068537][ T2390] __pmd_alloc+0xb0/0x9a0 [ 98.068560][ T2390] ? __cfi___pmd_alloc+0x10/0x10 [ 98.068582][ T2390] ? lruvec_init+0x211/0x280 [ 98.068605][ T2390] __get_locked_pte+0x222/0x2a0 [ 98.068626][ T2390] map_ldt_struct+0x413/0x730 [ 98.068650][ T2390] ? alloc_ldt_struct+0x2f0/0x2f0 [ 98.068672][ T2390] ? alloc_ldt_struct+0xf9/0x2f0 [ 98.068692][ T2390] ? __kasan_check_write+0x18/0x20 [ 98.068710][ T2390] write_ldt+0x5fe/0x760 [ 98.068732][ T2390] ? native_write_gdt_entry+0x40/0x40 [ 98.068754][ T2390] ? __x64_sys_futex+0x110/0x110 [ 98.068779][ T2390] ? __cfi_ksys_write+0x10/0x10 [ 98.068799][ T2390] __se_sys_modify_ldt+0x70/0x2e0 [ 98.068822][ T2390] __x64_sys_modify_ldt+0x7f/0xa0 [ 98.068845][ T2390] x64_sys_call+0x143d/0x2ee0 [ 98.068864][ T2390] do_syscall_64+0x57/0xf0 [ 98.068882][ T2390] ? clear_bhb_loop+0x50/0xa0 [ 98.068905][ T2390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.068927][ T2390] RIP: 0033:0x7f898f19e159 [ 98.068944][ T2390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.068962][ T2390] RSP: 002b:00007f899012a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 98.068983][ T2390] RAX: ffffffffffffffda RBX: 00007f898f425fa0 RCX: 00007f898f19e159 [ 98.068998][ T2390] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 98.069013][ T2390] RBP: 00007f898f23506b R08: 0000000000000000 R09: 0000000000000000 [ 98.069026][ T2390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.069038][ T2390] R13: 00007f898f426038 R14: 00007f898f425fa0 R15: 00007fff971a0398 [ 98.069056][ T2390] [ 98.552316][ T2403] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 98.600105][ T36] audit: type=1400 audit(1789864861.049:412): avc: denied { getopt } for pid=2408 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.621215][ T478] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 98.782226][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 98.793370][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 98.804779][ T478] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.817835][ T478] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.827085][ T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.849089][ T478] usb 3-1: config 0 descriptor?? [ 99.259720][ T478] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 99.269983][ T478] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.731098][ T2426] FAULT_INJECTION: forcing a failure. [ 99.731098][ T2426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.752378][ T2426] CPU: 0 UID: 0 PID: 2426 Comm: syz.0.545 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 99.752412][ T2426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.752425][ T2426] Call Trace: [ 99.752433][ T2426] [ 99.752440][ T2426] __dump_stack+0x21/0x30 [ 99.752473][ T2426] dump_stack_lvl+0x140/0x1c0 [ 99.752499][ T2426] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.752521][ T2426] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 99.752547][ T2426] dump_stack+0x19/0x20 [ 99.752570][ T2426] should_fail_ex+0x3c2/0x510 [ 99.752592][ T2426] should_fail_alloc_page+0xec/0x110 [ 99.752616][ T2426] __alloc_pages_noprof+0x1c0/0x7e0 [ 99.752641][ T2426] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 99.752666][ T2426] ? __kasan_check_write+0x18/0x20 [ 99.752701][ T2426] __pmd_alloc+0xb0/0x9a0 [ 99.752724][ T2426] ? __cfi___pmd_alloc+0x10/0x10 [ 99.752743][ T2426] ? lruvec_init+0x211/0x280 [ 99.752756][ T2426] __get_locked_pte+0x222/0x2a0 [ 99.752767][ T2426] map_ldt_struct+0x413/0x730 [ 99.752780][ T2426] ? alloc_ldt_struct+0x2f0/0x2f0 [ 99.752791][ T2426] ? alloc_ldt_struct+0xf9/0x2f0 [ 99.752802][ T2426] ? __kasan_check_write+0x18/0x20 [ 99.752812][ T2426] write_ldt+0x5fe/0x760 [ 99.752823][ T2426] ? native_write_gdt_entry+0x40/0x40 [ 99.752835][ T2426] ? xfd_validate_state+0x68/0x140 [ 99.752848][ T2426] __se_sys_modify_ldt+0x70/0x2e0 [ 99.752860][ T2426] __x64_sys_modify_ldt+0x7f/0xa0 [ 99.752872][ T2426] x64_sys_call+0x143d/0x2ee0 [ 99.752882][ T2426] do_syscall_64+0x57/0xf0 [ 99.752892][ T2426] ? clear_bhb_loop+0x50/0xa0 [ 99.752904][ T2426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.752915][ T2426] RIP: 0033:0x7f4bc1d9e159 [ 99.752926][ T2426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.752936][ T2426] RSP: 002b:00007f4bc2cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 99.752949][ T2426] RAX: ffffffffffffffda RBX: 00007f4bc2025fa0 RCX: 00007f4bc1d9e159 [ 99.752958][ T2426] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 99.752966][ T2426] RBP: 00007f4bc1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 99.752973][ T2426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.752980][ T2426] R13: 00007f4bc2026038 R14: 00007f4bc2025fa0 R15: 00007fff8fd90ab8 [ 99.752989][ T2426] [ 100.013554][ T36] audit: type=1400 audit(1789864862.459:413): avc: denied { accept } for pid=2429 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.048142][ T36] audit: type=1400 audit(1789864862.499:414): avc: denied { getopt } for pid=2436 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.124150][ T2447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2447 comm=syz.0.551 [ 100.136730][ T2447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2447 comm=syz.0.551 [ 100.149168][ T2447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=2447 comm=syz.0.551 [ 100.481232][ T407] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 100.642805][ T407] usb 1-1: Using ep0 maxpacket: 8 [ 100.649223][ T407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 100.660594][ T407] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.673557][ T407] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 100.682719][ T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.691652][ T407] usb 1-1: config 0 descriptor?? [ 101.100586][ T407] smartjoyplus 0003:0925:8866.0017: unknown main item tag 0x2 [ 101.108338][ T407] smartjoyplus 0003:0925:8866.0017: unknown main item tag 0x0 [ 101.118390][ T407] smartjoyplus 0003:0925:8866.0017: hidraw1: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 101.130858][ T407] smartjoyplus 0003:0925:8866.0017: no output reports found [ 101.302178][ T407] usb 1-1: USB disconnect, device number 38 [ 101.385278][ T9] usb 3-1: USB disconnect, device number 32 [ 101.414908][ T2456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.424740][ T2456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.434891][ T36] audit: type=1400 audit(1789864863.889:415): avc: denied { setattr } for pid=2454 comm="syz.2.554" name="UDPLITEv6" dev="sockfs" ino=24300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.595164][ T2459] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.602762][ T2459] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.609885][ T2459] bridge_slave_0: entered allmulticast mode [ 101.616220][ T2459] bridge_slave_0: entered promiscuous mode [ 101.622699][ T2459] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.630254][ T2459] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.637407][ T2459] bridge_slave_1: entered allmulticast mode [ 101.643773][ T2459] bridge_slave_1: entered promiscuous mode [ 101.679877][ T2459] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.686955][ T2459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.694255][ T2459] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.701313][ T2459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.731363][ T620] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.738759][ T620] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.748616][ T620] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.755705][ T620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.773962][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 101.782130][ T620] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.789207][ T620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.810903][ T2459] veth0_vlan: entered promiscuous mode [ 101.822919][ T2459] veth1_macvtap: entered promiscuous mode [ 101.951275][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 101.958229][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 101.970586][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 101.979804][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.987835][ T9] usb 3-1: Product: Х [ 101.992167][ T9] usb 3-1: Manufacturer: 䚀掜벝凥萢걁媦潬덊떉ኤ쟗뤼褷妠ッ면리쌇㥞왏趶糿ୈ⒧ꟗ瘕呹酣J딸⇡ꁢ⮛鳟㟁囼헡帙疿ཷꎂꚠᘂ֙ᮑ쇳餦͹訳淭漇萂筴⛮럇蕐涫㶙弟ଡ଼䢊ᾪ瘐瘜ˤ჊䫛촬폨豋힞铿홷燳ࠞ [ 102.018638][ T9] usb 3-1: SerialNumber: Т [ 102.229500][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 102.239565][ T9] usb 3-1: USB disconnect, device number 33 [ 102.249306][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.787306][ T36] audit: type=1400 audit(1789864865.239:416): avc: denied { setattr } for pid=2503 comm="syz.5.569" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.861255][ T407] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.971421][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 102.981327][ T402] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 103.012326][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 103.023452][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 103.034621][ T339] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.042160][ T407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.055308][ T407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.064506][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.073104][ T407] usb 5-1: config 0 descriptor?? [ 103.142237][ T9] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.154530][ T402] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 103.165391][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.176577][ T402] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 103.187320][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 103.199142][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.208300][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.216371][ T9] usb 3-1: Manufacturer: syz [ 103.221923][ T2498] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.232845][ T339] usb 6-1: config 1 interface 0 has no altsetting 0 [ 103.240741][ T339] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40 [ 103.249861][ T339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.257890][ T339] usb 6-1: Product: Ф [ 103.261992][ T339] usb 6-1: Manufacturer: 捍뇉팺灬狎钸셙淵ᵟҍ⯚＃心⒔ၶ㾘㛇퐤⁍靘쉐녏熻畱߿꿝陿৷뮧땉濶뽹ా꧜쪏蟹녡䜃Ɣ璘ϙ蠩狭醪久ۿ왩寶롪᫈ẽ퍋팧읍憎㆛틮䥶羙淆䥵阅㜍⁌ꙣ콡嵸ሀ鳕᳐핣䒌❆㘮䂣忞⣷弟䢥੮⟓ㆶ슣䏱탌ԕ懃箞贼乽׺趯澖ﶵ륖㌌耢㣘뗴 [ 103.294508][ T339] usb 6-1: SerialNumber: 衢厨휘ﰳ㻭朕ᑷꨊ淁⊈䮥쥸큟実ᢞ펼鍅䚞菬ت멷Ჱ炯嘤䔨홃᤭෩ᑸ꼢엵茕鍠î呦Ӝ糠ᙈ峦蜺ী癩懔蹷™㼟 [ 103.430585][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 103.438279][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input31 [ 103.449464][ T9] usb 3-1: USB disconnect, device number 34 [ 103.449475][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 103.497131][ T407] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 103.508812][ T407] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 103.527954][ T339] usbhid 6-1:1.0: can't add hid device: -71 [ 103.535139][ T339] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 103.545750][ T339] usb 6-1: USB disconnect, device number 2 [ 104.059256][ T2520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.371238][ T339] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 104.521188][ T339] usb 6-1: Using ep0 maxpacket: 16 [ 104.528741][ T339] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 104.538216][ T339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.546330][ T339] usb 6-1: Product: syz [ 104.550554][ T339] usb 6-1: Manufacturer: syz [ 104.555171][ T339] usb 6-1: SerialNumber: syz [ 105.634597][ T478] usb 5-1: USB disconnect, device number 3 [ 105.654153][ T2542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.581'. [ 105.761263][ T402] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 105.772444][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.786683][ T402] usb 1-1: can't set config #1, error -71 [ 105.803409][ T402] usb 1-1: USB disconnect, device number 39 [ 106.101192][ T402] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 106.251230][ T402] usb 1-1: Using ep0 maxpacket: 32 [ 106.257496][ T402] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.265779][ T402] usb 1-1: config 0 has no interface number 0 [ 106.272337][ T402] usb 1-1: config 0 interface 184 has no altsetting 0 [ 106.280530][ T402] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.289773][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.297877][ T402] usb 1-1: Product: syz [ 106.302094][ T402] usb 1-1: Manufacturer: syz [ 106.306714][ T402] usb 1-1: SerialNumber: syz [ 106.312587][ T402] usb 1-1: config 0 descriptor?? [ 106.318726][ T402] smsc75xx v1.0.0 [ 106.373612][ T339] usb 6-1: MIDIStreaming interface descriptor not found [ 106.521740][ T2563] loop0: detected capacity change from 0 to 1 [ 106.550463][ T2569] FAULT_INJECTION: forcing a failure. [ 106.550463][ T2569] name failslab, interval 1, probability 0, space 0, times 0 [ 106.563200][ T2569] CPU: 1 UID: 0 PID: 2569 Comm: syz.4.588 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 106.563232][ T2569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.563242][ T2569] Call Trace: [ 106.563248][ T2569] [ 106.563256][ T2569] __dump_stack+0x21/0x30 [ 106.563283][ T2569] dump_stack_lvl+0x140/0x1c0 [ 106.563306][ T2569] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.563327][ T2569] ? bpf_lsm_file_permission+0xd/0x20 [ 106.563348][ T2569] ? vfs_write+0xbcf/0xfd0 [ 106.563369][ T2569] dump_stack+0x19/0x20 [ 106.563390][ T2569] should_fail_ex+0x3c2/0x510 [ 106.563410][ T2569] should_failslab+0xac/0x100 [ 106.563440][ T2569] __kmalloc_cache_noprof+0x41/0x470 [ 106.563459][ T2569] ? __se_sys_mount+0x15f/0x480 [ 106.563479][ T2569] __se_sys_mount+0x15f/0x480 [ 106.563497][ T2569] ? ksys_write+0x1f3/0x260 [ 106.563516][ T2569] ? __x64_sys_mount+0xf0/0xf0 [ 106.563536][ T2569] __x64_sys_mount+0xc3/0xf0 [ 106.563555][ T2569] x64_sys_call+0x2021/0x2ee0 [ 106.563571][ T2569] do_syscall_64+0x57/0xf0 [ 106.563589][ T2569] ? clear_bhb_loop+0x50/0xa0 [ 106.563612][ T2569] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.563632][ T2569] RIP: 0033:0x7f036f79e159 [ 106.563649][ T2569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.563665][ T2569] RSP: 002b:00007f03706d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.563685][ T2569] RAX: ffffffffffffffda RBX: 00007f036fa25fa0 RCX: 00007f036f79e159 [ 106.563697][ T2569] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 106.563708][ T2569] RBP: 00007f03706d3090 R08: 0000200000000500 R09: 0000000000000000 [ 106.563721][ T2569] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 106.563732][ T2569] R13: 00007f036fa26038 R14: 00007f036fa25fa0 R15: 00007fffa087a878 [ 106.563747][ T2569] [ 106.565110][ T2563] loop0: [ 106.576821][ T478] usb 6-1: USB disconnect, device number 3 [ 106.870245][ T2573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 106.870249][ T36] audit: type=1400 audit(1789864869.319:417): avc: denied { nlmsg_read } for pid=2572 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.923812][ T36] audit: type=1400 audit(1789864869.379:418): avc: denied { setopt } for pid=2576 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.021195][ T339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.133458][ T36] audit: type=1400 audit(1789864869.589:419): avc: denied { create } for pid=2580 comm="syz.5.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 107.202334][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 107.216349][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 107.232564][ T339] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.251391][ T339] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.264572][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.279886][ T339] usb 5-1: config 0 descriptor?? [ 107.615156][ T402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -61 [ 107.626236][ T402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 107.692264][ T339] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 107.701315][ T339] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 108.027456][ T402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 108.038369][ T110] loop0: [ 108.045079][ T402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 108.055006][ T402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.064510][ T402] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.073811][ T402] usb 1-1: USB disconnect, device number 40 [ 108.401231][ T371] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 108.553394][ T36] audit: type=1400 audit(1789864871.009:420): avc: denied { watch_reads } for pid=2622 comm="syz.0.603" path="/130" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.554096][ T371] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 108.577811][ T402] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 108.585109][ T371] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.599211][ T371] usb 3-1: can't read configurations, error -61 [ 108.731259][ T371] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 108.741201][ T402] usb 6-1: Using ep0 maxpacket: 16 [ 108.752228][ T402] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 108.761496][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.771117][ T402] usb 6-1: Product: syz [ 108.775676][ T402] usb 6-1: Manufacturer: syz [ 108.780577][ T402] usb 6-1: SerialNumber: syz [ 108.794812][ T2638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 108.901555][ T371] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 108.910456][ T371] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.918259][ T371] usb 3-1: can't read configurations, error -61 [ 108.924823][ T371] usb usb3-port1: attempt power cycle [ 109.261198][ T371] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 109.281891][ T371] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 109.290721][ T371] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 109.298394][ T371] usb 3-1: can't read configurations, error -61 [ 109.427633][ T2645] FAULT_INJECTION: forcing a failure. [ 109.427633][ T2645] name failslab, interval 1, probability 0, space 0, times 0 [ 109.440374][ T371] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 109.448038][ T2645] CPU: 0 UID: 0 PID: 2645 Comm: syz.0.609 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 109.448073][ T2645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.448086][ T2645] Call Trace: [ 109.448092][ T2645] [ 109.448099][ T2645] __dump_stack+0x21/0x30 [ 109.448125][ T2645] dump_stack_lvl+0x140/0x1c0 [ 109.448139][ T2645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.448163][ T2645] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 109.448182][ T2645] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 109.448200][ T2645] dump_stack+0x19/0x20 [ 109.448226][ T2645] should_fail_ex+0x3c2/0x510 [ 109.448250][ T2645] should_failslab+0xac/0x100 [ 109.448273][ T2645] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 109.448288][ T2645] ? __d_alloc+0x42/0x8c0 [ 109.448299][ T2645] ? expand_files+0xda/0x6f0 [ 109.448311][ T2645] __d_alloc+0x42/0x8c0 [ 109.448322][ T2645] d_alloc_pseudo+0x23/0xc0 [ 109.448332][ T2645] alloc_file_pseudo+0xde/0x1f0 [ 109.448345][ T2645] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 109.448358][ T2645] ? _raw_spin_unlock+0x45/0x60 [ 109.448368][ T2645] sock_alloc_file+0xbe/0x2b0 [ 109.448379][ T2645] __sys_socket+0x14c/0x1c0 [ 109.448390][ T2645] __x64_sys_socket+0x7e/0x90 [ 109.448402][ T2645] x64_sys_call+0x2608/0x2ee0 [ 109.448412][ T2645] do_syscall_64+0x57/0xf0 [ 109.448422][ T2645] ? clear_bhb_loop+0x50/0xa0 [ 109.448434][ T2645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.448446][ T2645] RIP: 0033:0x7f4bc1d9e159 [ 109.448457][ T2645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.448467][ T2645] RSP: 002b:00007f4bc2cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.448481][ T2645] RAX: ffffffffffffffda RBX: 00007f4bc2025fa0 RCX: 00007f4bc1d9e159 [ 109.448489][ T2645] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 109.448496][ T2645] RBP: 00007f4bc1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 109.448504][ T2645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.448511][ T2645] R13: 00007f4bc2026038 R14: 00007f4bc2025fa0 R15: 00007fff8fd90ab8 [ 109.448521][ T2645] [ 109.461936][ T371] usb 3-1: too many configurations: 188, using maximum allowed: 8 [ 109.674511][ T371] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 109.679881][ T2647] FAULT_INJECTION: forcing a failure. [ 109.679881][ T2647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.687771][ T371] usb 3-1: can't read configurations, error -61 [ 109.695665][ T2647] CPU: 0 UID: 0 PID: 2647 Comm: syz.0.610 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 109.695693][ T2647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.695707][ T2647] Call Trace: [ 109.695714][ T2647] [ 109.695721][ T2647] __dump_stack+0x21/0x30 [ 109.695751][ T2647] dump_stack_lvl+0x140/0x1c0 [ 109.695775][ T2647] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.695799][ T2647] dump_stack+0x19/0x20 [ 109.695821][ T2647] should_fail_ex+0x3c2/0x510 [ 109.695843][ T2647] should_fail+0xf/0x20 [ 109.695862][ T2647] should_fail_usercopy+0x1e/0x30 [ 109.695884][ T2647] _copy_from_user+0x20/0xa0 [ 109.695908][ T2647] __se_sys_mount+0x182/0x480 [ 109.695928][ T2647] ? ksys_write+0x1f3/0x260 [ 109.695947][ T2647] ? __x64_sys_mount+0xf0/0xf0 [ 109.695967][ T2647] __x64_sys_mount+0xc3/0xf0 [ 109.695986][ T2647] x64_sys_call+0x2021/0x2ee0 [ 109.696002][ T2647] do_syscall_64+0x57/0xf0 [ 109.696019][ T2647] ? clear_bhb_loop+0x50/0xa0 [ 109.696040][ T2647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.696061][ T2647] RIP: 0033:0x7f4bc1d9e159 [ 109.696078][ T2647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.696094][ T2647] RSP: 002b:00007f4bc2cba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.696115][ T2647] RAX: ffffffffffffffda RBX: 00007f4bc2025fa0 RCX: 00007f4bc1d9e159 [ 109.696129][ T2647] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 109.696141][ T2647] RBP: 00007f4bc2cba090 R08: 0000200000000500 R09: 0000000000000000 [ 109.696154][ T2647] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 109.696167][ T2647] R13: 00007f4bc2026038 R14: 00007f4bc2025fa0 R15: 00007fff8fd90ab8 [ 109.696183][ T2647] [ 109.782632][ T339] usb 5-1: USB disconnect, device number 4 [ 109.785075][ T371] usb usb3-port1: unable to enumerate USB device [ 109.901440][ T2652] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 109.910499][ T2652] overlayfs: missing 'lowerdir' [ 110.597965][ T402] usb 6-1: MIDIStreaming interface descriptor not found [ 110.806341][ T402] usb 6-1: USB disconnect, device number 4 [ 110.984550][ T2681] FAULT_INJECTION: forcing a failure. [ 110.984550][ T2681] name failslab, interval 1, probability 0, space 0, times 0 [ 110.997219][ T2681] CPU: 1 UID: 0 PID: 2681 Comm: syz.4.621 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 110.997250][ T2681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.997262][ T2681] Call Trace: [ 110.997266][ T2681] [ 110.997271][ T2681] __dump_stack+0x21/0x30 [ 110.997290][ T2681] dump_stack_lvl+0x140/0x1c0 [ 110.997304][ T2681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.997317][ T2681] ? up_read+0x26/0x1c0 [ 110.997332][ T2681] ? do_user_addr_fault+0xbf5/0x1230 [ 110.997343][ T2681] dump_stack+0x19/0x20 [ 110.997356][ T2681] should_fail_ex+0x3c2/0x510 [ 110.997369][ T2681] should_failslab+0xac/0x100 [ 110.997381][ T2681] kmem_cache_alloc_noprof+0x42/0x410 [ 110.997398][ T2681] ? getname_flags+0xcc/0x6b0 [ 110.997410][ T2681] ? asm_exc_page_fault+0x2b/0x30 [ 110.997424][ T2681] getname_flags+0xcc/0x6b0 [ 110.997435][ T2681] user_path_at+0x2b/0x60 [ 110.997447][ T2681] __se_sys_mount+0x28a/0x480 [ 110.997458][ T2681] ? ksys_write+0x1f3/0x260 [ 110.997470][ T2681] ? __x64_sys_mount+0xf0/0xf0 [ 110.997481][ T2681] __x64_sys_mount+0xc3/0xf0 [ 110.997492][ T2681] x64_sys_call+0x2021/0x2ee0 [ 110.997501][ T2681] do_syscall_64+0x57/0xf0 [ 110.997511][ T2681] ? clear_bhb_loop+0x50/0xa0 [ 110.997523][ T2681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.997535][ T2681] RIP: 0033:0x7f036f79e159 [ 110.997546][ T2681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.997555][ T2681] RSP: 002b:00007f03706d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.997568][ T2681] RAX: ffffffffffffffda RBX: 00007f036fa25fa0 RCX: 00007f036f79e159 [ 110.997577][ T2681] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 110.997584][ T2681] RBP: 00007f03706d3090 R08: 0000200000000500 R09: 0000000000000000 [ 110.997592][ T2681] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 110.997599][ T2681] R13: 00007f036fa26038 R14: 00007f036fa25fa0 R15: 00007fffa087a878 [ 110.997609][ T2681] [ 111.118022][ T36] audit: type=1400 audit(1789864873.569:421): avc: denied { read } for pid=2682 comm="syz.4.622" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.251237][ T371] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 111.298007][ T2693] netlink: 176 bytes leftover after parsing attributes in process `syz.4.623'. [ 111.309542][ T2693] futex_wake_op: syz.4.623 tries to shift op by 144; fix this program [ 111.382140][ T2700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 111.398749][ T2701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 111.412261][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 111.425494][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 111.436800][ T371] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.457757][ T371] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.470370][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.481586][ T371] usb 1-1: config 0 descriptor?? [ 111.493221][ T2710] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 111.515331][ T2713] FAULT_INJECTION: forcing a failure. [ 111.515331][ T2713] name failslab, interval 1, probability 0, space 0, times 0 [ 111.516961][ T36] audit: type=1400 audit(1789864873.959:422): avc: denied { relabelto } for pid=2709 comm="syz.5.630" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 111.534283][ T2713] CPU: 1 UID: 0 PID: 2713 Comm: syz.2.631 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 111.534312][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.534325][ T2713] Call Trace: [ 111.534331][ T2713] [ 111.534340][ T2713] __dump_stack+0x21/0x30 [ 111.534369][ T2713] dump_stack_lvl+0x140/0x1c0 [ 111.534393][ T2713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.534423][ T2713] ? avc_has_perm_noaudit+0x289/0x360 [ 111.534447][ T2713] dump_stack+0x19/0x20 [ 111.534468][ T2713] should_fail_ex+0x3c2/0x510 [ 111.534491][ T2713] should_failslab+0xac/0x100 [ 111.534512][ T2713] __kmalloc_cache_noprof+0x41/0x470 [ 111.534533][ T2713] ? alloc_fs_context+0x6f/0x800 [ 111.534556][ T2713] ? __cfi_selinux_mount+0x10/0x10 [ 111.534580][ T2713] alloc_fs_context+0x6f/0x800 [ 111.534602][ T2713] ? security_capable+0x44/0x130 [ 111.534622][ T2713] fs_context_for_reconfigure+0x77/0x90 [ 111.534645][ T2713] path_mount+0xb52/0xff0 [ 111.534664][ T2713] __se_sys_mount+0x2bf/0x480 [ 111.534682][ T2713] ? ksys_write+0x1f3/0x260 [ 111.534702][ T2713] ? __x64_sys_mount+0xf0/0xf0 [ 111.534722][ T2713] __x64_sys_mount+0xc3/0xf0 [ 111.534741][ T2713] x64_sys_call+0x2021/0x2ee0 [ 111.534757][ T2713] do_syscall_64+0x57/0xf0 [ 111.534774][ T2713] ? clear_bhb_loop+0x50/0xa0 [ 111.534796][ T2713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.534817][ T2713] RIP: 0033:0x7f898f19e159 [ 111.534834][ T2713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.534850][ T2713] RSP: 002b:00007f899012a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.534871][ T2713] RAX: ffffffffffffffda RBX: 00007f898f425fa0 RCX: 00007f898f19e159 [ 111.534885][ T2713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 111.534897][ T2713] RBP: 00007f899012a090 R08: 0000200000000500 R09: 0000000000000000 [ 111.534910][ T2713] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 111.534923][ T2713] R13: 00007f898f426038 R14: 00007f898f425fa0 R15: 00007fff971a0398 [ 111.534939][ T2713] [ 111.780851][ T36] audit: type=1400 audit(1789864873.969:423): avc: denied { associate } for pid=2709 comm="syz.5.630" name="17" dev="tmpfs" ino=106 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbmon_device_t:s0" [ 111.811400][ T36] audit: type=1400 audit(1789864873.989:424): avc: denied { write } for pid=2459 comm="syz-executor" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 111.838239][ T36] audit: type=1400 audit(1789864873.989:425): avc: denied { remove_name } for pid=2459 comm="syz-executor" name="binderfs" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 111.865501][ T36] audit: type=1400 audit(1789864873.989:426): avc: denied { rmdir } for pid=2459 comm="syz-executor" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 111.894149][ T371] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 111.903107][ T371] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.931022][ T36] audit: type=1400 audit(1789864874.379:427): avc: denied { create } for pid=2728 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.011206][ T402] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.034778][ T2731] overlayfs: conflicting lowerdir path [ 112.181220][ T402] usb 6-1: Using ep0 maxpacket: 16 [ 112.188815][ T402] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 112.198010][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.206265][ T402] usb 6-1: Product: syz [ 112.210474][ T402] usb 6-1: Manufacturer: syz [ 112.215076][ T402] usb 6-1: SerialNumber: syz [ 112.441185][ T36] audit: type=1400 audit(1789864874.889:428): avc: denied { execute } for pid=2732 comm="syz.4.638" name="file0" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.656391][ T2753] FAULT_INJECTION: forcing a failure. [ 112.656391][ T2753] name failslab, interval 1, probability 0, space 0, times 0 [ 112.669077][ T2753] CPU: 0 UID: 0 PID: 2753 Comm: syz.4.641 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 112.669096][ T2753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.669104][ T2753] Call Trace: [ 112.669108][ T2753] [ 112.669113][ T2753] __dump_stack+0x21/0x30 [ 112.669132][ T2753] dump_stack_lvl+0x140/0x1c0 [ 112.669146][ T2753] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.669173][ T2753] ? avc_has_perm_noaudit+0x289/0x360 [ 112.669197][ T2753] dump_stack+0x19/0x20 [ 112.669219][ T2753] should_fail_ex+0x3c2/0x510 [ 112.669233][ T2753] should_failslab+0xac/0x100 [ 112.669246][ T2753] __kmalloc_cache_noprof+0x41/0x470 [ 112.669258][ T2753] ? alloc_fs_context+0x6f/0x800 [ 112.669271][ T2753] ? __cfi_selinux_mount+0x10/0x10 [ 112.669285][ T2753] alloc_fs_context+0x6f/0x800 [ 112.669297][ T2753] ? security_capable+0x44/0x130 [ 112.669310][ T2753] fs_context_for_reconfigure+0x77/0x90 [ 112.669323][ T2753] path_mount+0xb52/0xff0 [ 112.669334][ T2753] __se_sys_mount+0x2bf/0x480 [ 112.669345][ T2753] ? ksys_write+0x1f3/0x260 [ 112.669362][ T2753] ? __x64_sys_mount+0xf0/0xf0 [ 112.669373][ T2753] __x64_sys_mount+0xc3/0xf0 [ 112.669383][ T2753] x64_sys_call+0x2021/0x2ee0 [ 112.669393][ T2753] do_syscall_64+0x57/0xf0 [ 112.669403][ T2753] ? clear_bhb_loop+0x50/0xa0 [ 112.669416][ T2753] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.669429][ T2753] RIP: 0033:0x7f036f79e159 [ 112.669439][ T2753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.669449][ T2753] RSP: 002b:00007f03706d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.669462][ T2753] RAX: ffffffffffffffda RBX: 00007f036fa25fa0 RCX: 00007f036f79e159 [ 112.669470][ T2753] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 112.669478][ T2753] RBP: 00007f03706d3090 R08: 0000200000000500 R09: 0000000000000000 [ 112.669485][ T2753] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 112.669493][ T2753] R13: 00007f036fa26038 R14: 00007f036fa25fa0 R15: 00007fffa087a878 [ 112.669502][ T2753] [ 112.998880][ T36] audit: type=1400 audit(1789864875.449:429): avc: denied { setopt } for pid=2761 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.141176][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.271218][ T9] usb 5-1: device descriptor read/64, error -71 [ 113.511191][ T9] usb 5-1: device descriptor read/64, error -71 [ 113.751188][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.881190][ T9] usb 5-1: device descriptor read/64, error -71 [ 113.895254][ T407] usb 1-1: USB disconnect, device number 41 [ 114.023186][ T36] audit: type=1326 audit(1789864876.479:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.054737][ T36] audit: type=1326 audit(1789864876.479:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.080165][ T36] audit: type=1326 audit(1789864876.479:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.105800][ T402] usb 6-1: MIDIStreaming interface descriptor not found [ 114.111200][ T36] audit: type=1326 audit(1789864876.479:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.113638][ T2793] FAULT_INJECTION: forcing a failure. [ 114.113638][ T2793] name failslab, interval 1, probability 0, space 0, times 0 [ 114.138840][ T36] audit: type=1326 audit(1789864876.479:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.150799][ T9] usb 5-1: device descriptor read/64, error -71 [ 114.176028][ T2793] CPU: 1 UID: 0 PID: 2793 Comm: syz.2.651 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 114.176059][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.176072][ T2793] Call Trace: [ 114.176078][ T2793] [ 114.176085][ T2793] __dump_stack+0x21/0x30 [ 114.176115][ T2793] dump_stack_lvl+0x140/0x1c0 [ 114.176138][ T2793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.176163][ T2793] dump_stack+0x19/0x20 [ 114.176184][ T2793] should_fail_ex+0x3c2/0x510 [ 114.176207][ T2793] should_failslab+0xac/0x100 [ 114.176229][ T2793] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 114.176251][ T2793] ? selinux_sb_eat_lsm_opts+0x9fd/0xad0 [ 114.176270][ T2793] ? vfs_parse_monolithic_sep+0x243/0x360 [ 114.176295][ T2793] kmemdup_nul+0x5a/0x1a0 [ 114.176312][ T2793] vfs_parse_monolithic_sep+0x243/0x360 [ 114.176335][ T2793] ? __cfi_vfs_parse_comma_sep+0x10/0x10 [ 114.176358][ T2793] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 114.176381][ T2793] ? tracefs_init_fs_context+0x73/0x1a0 [ 114.176401][ T2793] ? __cfi_tracefs_init_fs_context+0x10/0x10 [ 114.176422][ T2793] generic_parse_monolithic+0x28/0x40 [ 114.176444][ T2793] parse_monolithic_mount_data+0x7f/0x90 [ 114.176469][ T2793] path_mount+0xba5/0xff0 [ 114.176487][ T2793] __se_sys_mount+0x2bf/0x480 [ 114.176506][ T2793] ? ksys_write+0x1f3/0x260 [ 114.176524][ T2793] ? __x64_sys_mount+0xf0/0xf0 [ 114.176544][ T2793] __x64_sys_mount+0xc3/0xf0 [ 114.176563][ T2793] x64_sys_call+0x2021/0x2ee0 [ 114.176579][ T2793] do_syscall_64+0x57/0xf0 [ 114.176596][ T2793] ? clear_bhb_loop+0x50/0xa0 [ 114.176617][ T2793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.176638][ T2793] RIP: 0033:0x7f898f19e159 [ 114.176654][ T2793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.176676][ T2793] RSP: 002b:00007f899012a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.176698][ T2793] RAX: ffffffffffffffda RBX: 00007f898f425fa0 RCX: 00007f898f19e159 [ 114.176711][ T2793] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 114.176723][ T2793] RBP: 00007f899012a090 R08: 0000200000000500 R09: 0000000000000000 [ 114.176736][ T2793] R10: 00000000001e6062 R11: 0000000000000246 R12: 0000000000000001 [ 114.176748][ T2793] R13: 00007f898f426038 R14: 00007f898f425fa0 R15: 00007fff971a0398 [ 114.176764][ T2793] [ 114.176990][ T36] audit: type=1326 audit(1789864876.479:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.205211][ T402] usb 6-1: USB disconnect, device number 5 [ 114.234881][ T36] audit: type=1326 audit(1789864876.479:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2778 comm="syz.0.648" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc1d9e159 code=0x7fc00000 [ 114.291299][ T9] usb usb5-port1: attempt power cycle [ 114.544350][ T623] bridge_slave_1: left allmulticast mode [ 114.550144][ T623] bridge_slave_1: left promiscuous mode [ 114.556412][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.564466][ T623] bridge_slave_0: left allmulticast mode [ 114.570184][ T623] bridge_slave_0: left promiscuous mode [ 114.576224][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.660826][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 114.683251][ T2801] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 114.703868][ T623] veth1_macvtap: left promiscuous mode [ 114.709413][ T623] veth0_vlan: left promiscuous mode [ 114.813734][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.834559][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.841719][ T2803] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.842260][ T9] usb 5-1: device descriptor read/8, error -71 [ 114.848793][ T2803] bridge_slave_0: entered allmulticast mode [ 114.861487][ T2803] bridge_slave_0: entered promiscuous mode [ 114.868104][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.875199][ T2803] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.882307][ T2803] bridge_slave_1: entered allmulticast mode [ 114.888643][ T2803] bridge_slave_1: entered promiscuous mode [ 114.953472][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.960587][ T2803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.967901][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.974958][ T2803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.982818][ T402] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 115.002277][ T9] usb 5-1: device descriptor read/8, error -71 [ 115.016630][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.024439][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.034861][ T598] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.041943][ T598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.064878][ T598] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.071983][ T598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.087322][ T2803] veth0_vlan: entered promiscuous mode [ 115.098316][ T2803] veth1_macvtap: entered promiscuous mode [ 115.131228][ T402] usb 3-1: Using ep0 maxpacket: 8 [ 115.137424][ T402] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 115.150121][ T402] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 115.159702][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.167906][ T402] usb 3-1: Product: syz [ 115.172392][ T402] usb 3-1: Manufacturer: syz [ 115.176988][ T402] usb 3-1: SerialNumber: syz [ 115.241233][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.262109][ T9] usb 5-1: device descriptor read/8, error -71 [ 115.386727][ T402] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.397048][ T9] usb 5-1: device descriptor read/8, error -71 [ 115.403961][ T402] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 115.416146][ T402] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 115.426031][ T402] usb 3-1: USB disconnect, device number 39 [ 115.434048][ T1322] udevd[1322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.511391][ T9] usb usb5-port1: unable to enumerate USB device [ 115.602349][ T2813] FAULT_INJECTION: forcing a failure. [ 115.602349][ T2813] name failslab, interval 1, probability 0, space 0, times 0 [ 115.615324][ T2813] CPU: 1 UID: 0 PID: 2813 Comm: syz.5.659 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 115.615357][ T2813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.615371][ T2813] Call Trace: [ 115.615378][ T2813] [ 115.615383][ T2813] __dump_stack+0x21/0x30 [ 115.615403][ T2813] dump_stack_lvl+0x140/0x1c0 [ 115.615418][ T2813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.615432][ T2813] dump_stack+0x19/0x20 [ 115.615446][ T2813] should_fail_ex+0x3c2/0x510 [ 115.615472][ T2813] should_failslab+0xac/0x100 [ 115.615486][ T2813] kmem_cache_alloc_noprof+0x42/0x410 [ 115.615498][ T2813] ? security_inode_alloc+0x51/0x230 [ 115.615513][ T2813] ? __cfi_make_kgid+0x10/0x10 [ 115.615527][ T2813] security_inode_alloc+0x51/0x230 [ 115.615541][ T2813] inode_init_always_gfp+0x756/0x9e0 [ 115.615554][ T2813] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 115.615567][ T2813] alloc_inode+0xc5/0x270 [ 115.615579][ T2813] ? __cfi__raw_spin_lock+0x10/0x10 [ 115.615590][ T2813] new_inode+0x25/0x1e0 [ 115.615611][ T2813] shmem_get_inode+0x352/0xc10 [ 115.615626][ T2813] shmem_mknod+0x63/0x200 [ 115.615641][ T2813] shmem_mkdir+0x3b/0x80 [ 115.615656][ T2813] vfs_mkdir+0x591/0x810 [ 115.615671][ T2813] do_mkdirat+0x240/0x530 [ 115.615686][ T2813] ? __cfi_do_mkdirat+0x10/0x10 [ 115.615699][ T2813] ? __kasan_check_write+0x18/0x20 [ 115.615710][ T2813] ? getname_flags+0x203/0x6b0 [ 115.615721][ T2813] ? __kasan_check_write+0x18/0x20 [ 115.615732][ T2813] __x64_sys_mkdirat+0x8b/0xa0 [ 115.615745][ T2813] x64_sys_call+0x2ba8/0x2ee0 [ 115.615756][ T2813] do_syscall_64+0x57/0xf0 [ 115.615765][ T2813] ? clear_bhb_loop+0x50/0xa0 [ 115.615778][ T2813] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.615791][ T2813] RIP: 0033:0x7f4cecd9e159 [ 115.615802][ T2813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.615812][ T2813] RSP: 002b:00007f4cedca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 115.615825][ T2813] RAX: ffffffffffffffda RBX: 00007f4ced025fa0 RCX: 00007f4cecd9e159 [ 115.615834][ T2813] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 115.615842][ T2813] RBP: 00007f4cece3506b R08: 0000000000000000 R09: 0000000000000000 [ 115.615849][ T2813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.615856][ T2813] R13: 00007f4ced026038 R14: 00007f4ced025fa0 R15: 00007ffd2d272a18 [ 115.615865][ T2813] [ 115.627292][ T2815] FAULT_INJECTION: forcing a failure. [ 115.627292][ T2815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.876509][ T2815] CPU: 1 UID: 0 PID: 2815 Comm: syz.5.660 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 115.876539][ T2815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.876550][ T2815] Call Trace: [ 115.876556][ T2815] [ 115.876562][ T2815] __dump_stack+0x21/0x30 [ 115.876589][ T2815] dump_stack_lvl+0x140/0x1c0 [ 115.876612][ T2815] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.876637][ T2815] ? check_stack_object+0x138/0x150 [ 115.876659][ T2815] dump_stack+0x19/0x20 [ 115.876682][ T2815] should_fail_ex+0x3c2/0x510 [ 115.876705][ T2815] should_fail+0xf/0x20 [ 115.876725][ T2815] should_fail_usercopy+0x1e/0x30 [ 115.876748][ T2815] _copy_to_user+0x24/0xa0 [ 115.876773][ T2815] simple_read_from_buffer+0xed/0x160 [ 115.876799][ T2815] proc_fail_nth_read+0x1aa/0x220 [ 115.876826][ T2815] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.876851][ T2815] ? bpf_lsm_file_permission+0xd/0x20 [ 115.876874][ T2815] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.876899][ T2815] vfs_read+0x288/0xc70 [ 115.876926][ T2815] ? __cfi_vfs_read+0x10/0x10 [ 115.876945][ T2815] ? __kasan_check_write+0x18/0x20 [ 115.876965][ T2815] ? mutex_lock+0x97/0x1d0 [ 115.876986][ T2815] ? __cfi_mutex_lock+0x10/0x10 [ 115.877009][ T2815] ksys_read+0x145/0x260 [ 115.877028][ T2815] ? __cfi_ksys_read+0x10/0x10 [ 115.877049][ T2815] ? __kasan_check_read+0x15/0x20 [ 115.877068][ T2815] __x64_sys_read+0x7f/0x90 [ 115.877091][ T2815] x64_sys_call+0x2638/0x2ee0 [ 115.877109][ T2815] do_syscall_64+0x57/0xf0 [ 115.877128][ T2815] ? clear_bhb_loop+0x50/0xa0 [ 115.877151][ T2815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.877173][ T2815] RIP: 0033:0x7f4cecd5e98e [ 115.877190][ T2815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.877206][ T2815] RSP: 002b:00007f4cedca7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.877229][ T2815] RAX: ffffffffffffffda RBX: 00007f4cedca86c0 RCX: 00007f4cecd5e98e [ 115.877244][ T2815] RDX: 000000000000000f RSI: 00007f4cedca80a0 RDI: 0000000000000003 [ 115.877258][ T2815] RBP: 00007f4cedca8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.877271][ T2815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.877283][ T2815] R13: 00007f4ced026038 R14: 00007f4ced025fa0 R15: 00007ffd2d272a18 [ 115.877296][ T2815] [ 116.411279][ T402] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.561201][ T402] usb 6-1: Using ep0 maxpacket: 16 [ 116.568710][ T402] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 116.577910][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.586204][ T402] usb 6-1: Product: syz [ 116.590381][ T402] usb 6-1: Manufacturer: syz [ 116.595000][ T402] usb 6-1: SerialNumber: syz [ 116.621236][ T45] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 116.711214][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 116.772279][ T45] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.783469][ T45] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.796376][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.803034][ T45] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 116.812332][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.821091][ T45] usb 3-1: config 0 descriptor?? [ 116.841448][ T9] usb 7-1: device descriptor read/64, error -71 [ 117.081216][ T9] usb 7-1: device descriptor read/64, error -71 [ 117.187542][ T2850] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 117.228219][ T45] hid (null): global environment stack underflow [ 117.236394][ T45] uclogic 0003:28BD:0074.001B: interface is invalid, ignoring [ 117.341208][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.428460][ T407] usb 3-1: USB disconnect, device number 40 [ 117.471341][ T9] usb 7-1: device descriptor read/64, error -71 [ 117.711188][ T9] usb 7-1: device descriptor read/64, error -71 [ 117.821286][ T9] usb usb7-port1: attempt power cycle [ 117.997518][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 117.997574][ T36] audit: type=1400 audit(1789864880.449:498): avc: denied { append } for pid=2864 comm="syz.2.676" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.031212][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.161192][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 118.182265][ T9] usb 7-1: device descriptor read/8, error -71 [ 118.191227][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 118.198066][ T45] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 118.206271][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.216380][ T45] usb 5-1: config 0 has no interface number 0 [ 118.223611][ T45] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.236891][ T45] usb 5-1: config 0 interface 196 has no altsetting 0 [ 118.245118][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 118.254191][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.262202][ T45] usb 5-1: Product: syz [ 118.266363][ T45] usb 5-1: Manufacturer: syz [ 118.270940][ T45] usb 5-1: SerialNumber: syz [ 118.276579][ T45] usb 5-1: config 0 descriptor?? [ 118.282679][ T45] ipheth 5-1:0.196: Unable to find endpoints [ 118.312262][ T9] usb 7-1: device descriptor read/8, error -71 [ 118.445817][ T402] usb 6-1: MIDIStreaming interface descriptor not found [ 118.457087][ T402] usb 6-1: USB disconnect, device number 6 [ 118.469092][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.485788][ T2887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.494610][ T2887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.504042][ T65] usb 5-1: USB disconnect, device number 9 [ 118.551239][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 118.572190][ T9] usb 7-1: device descriptor read/8, error -71 [ 118.702237][ T9] usb 7-1: device descriptor read/8, error -71 [ 118.811296][ T9] usb usb7-port1: unable to enumerate USB device [ 118.964631][ T36] audit: type=1400 audit(1789864881.419:499): avc: denied { nlmsg_read } for pid=2888 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 119.061685][ T36] audit: type=1400 audit(1789864881.519:500): avc: denied { setopt } for pid=2898 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.081328][ T36] audit: type=1400 audit(1789864881.519:501): avc: denied { setopt } for pid=2898 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.100672][ T36] audit: type=1400 audit(1789864881.549:502): avc: denied { mounton } for pid=2898 comm="syz.4.687" path="/43/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 119.511202][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.541212][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.548760][ T402] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 119.588896][ T2928] overlayfs: failed to resolve './file1': -2 [ 119.614810][ T36] audit: type=1400 audit(1789864882.069:503): avc: denied { getattr } for pid=2929 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.634673][ T36] audit: type=1400 audit(1789864882.089:504): avc: denied { write } for pid=2929 comm="syz.6.698" name="instances" dev="tracefs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.658328][ T36] audit: type=1400 audit(1789864882.089:505): avc: denied { add_name } for pid=2929 comm="syz.6.698" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.678562][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 119.680322][ T36] audit: type=1400 audit(1789864882.089:506): avc: denied { create } for pid=2929 comm="syz.6.698" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 119.686224][ T65] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 119.713470][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.721612][ T65] usb 5-1: Product: syz [ 119.725771][ T65] usb 5-1: Manufacturer: syz [ 119.730337][ T65] usb 5-1: SerialNumber: syz [ 119.736153][ T402] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.747388][ T402] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.760523][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.767378][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.777543][ T402] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 119.786801][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.795952][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.804353][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 119.816677][ T402] usb 3-1: config 0 descriptor?? [ 119.822730][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.833105][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.841501][ T9] usb 6-1: Product: syz [ 119.845697][ T9] usb 6-1: Manufacturer: syz [ 119.850316][ T9] usb 6-1: SerialNumber: syz [ 120.062335][ T9] usb 6-1: 1:1 : invalid UAC_AS_GENERAL desc [ 120.068767][ T9] usb 6-1: 0:2 : does not exist [ 120.081650][ T9] usb 6-1: USB disconnect, device number 7 [ 120.112744][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.389236][ T2946] syz.6.702 uses obsolete (PF_INET,SOCK_PACKET) [ 120.397578][ T36] audit: type=1400 audit(1789864882.849:507): avc: denied { relabelfrom } for pid=2945 comm="syz.6.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.425809][ T402] usbhid 3-1:0.0: can't add hid device: -71 [ 120.432086][ T402] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.440747][ T402] usb 3-1: USB disconnect, device number 41 [ 120.563074][ T2951] FAULT_INJECTION: forcing a failure. [ 120.563074][ T2951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.576428][ T2951] CPU: 0 UID: 0 PID: 2951 Comm: syz.6.704 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 120.576460][ T2951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.576474][ T2951] Call Trace: [ 120.576481][ T2951] [ 120.576489][ T2951] __dump_stack+0x21/0x30 [ 120.576526][ T2951] dump_stack_lvl+0x140/0x1c0 [ 120.576554][ T2951] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.576580][ T2951] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 120.576610][ T2951] dump_stack+0x19/0x20 [ 120.576634][ T2951] should_fail_ex+0x3c2/0x510 [ 120.576659][ T2951] should_fail_alloc_page+0xec/0x110 [ 120.576684][ T2951] __alloc_pages_noprof+0x1c0/0x7e0 [ 120.576711][ T2951] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 120.576739][ T2951] ? __kasan_check_write+0x18/0x20 [ 120.576759][ T2951] __pmd_alloc+0xb0/0x9a0 [ 120.576780][ T2951] ? __cfi___pmd_alloc+0x10/0x10 [ 120.576799][ T2951] ? lruvec_init+0x211/0x280 [ 120.576819][ T2951] __get_locked_pte+0x222/0x2a0 [ 120.576838][ T2951] map_ldt_struct+0x413/0x730 [ 120.576860][ T2951] ? alloc_ldt_struct+0x2f0/0x2f0 [ 120.576882][ T2951] ? alloc_ldt_struct+0xf9/0x2f0 [ 120.576899][ T2951] ? __kasan_check_write+0x18/0x20 [ 120.576919][ T2951] write_ldt+0x5fe/0x760 [ 120.576939][ T2951] ? native_write_gdt_entry+0x40/0x40 [ 120.576959][ T2951] ? __x64_sys_futex+0x110/0x110 [ 120.576982][ T2951] ? __cfi_ksys_write+0x10/0x10 [ 120.577002][ T2951] __se_sys_modify_ldt+0x70/0x2e0 [ 120.577023][ T2951] __x64_sys_modify_ldt+0x7f/0xa0 [ 120.577044][ T2951] x64_sys_call+0x143d/0x2ee0 [ 120.577061][ T2951] do_syscall_64+0x57/0xf0 [ 120.577078][ T2951] ? clear_bhb_loop+0x50/0xa0 [ 120.577103][ T2951] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.577125][ T2951] RIP: 0033:0x7f108119e159 [ 120.577143][ T2951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.577161][ T2951] RSP: 002b:00007f1082148028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 120.577183][ T2951] RAX: ffffffffffffffda RBX: 00007f1081425fa0 RCX: 00007f108119e159 [ 120.577200][ T2951] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 120.577214][ T2951] RBP: 00007f108123506b R08: 0000000000000000 R09: 0000000000000000 [ 120.577228][ T2951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.577241][ T2951] R13: 00007f1081426038 R14: 00007f1081425fa0 R15: 00007ffd4942ffe8 [ 120.577259][ T2951] [ 120.881196][ T371] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 121.032263][ T371] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 121.041415][ T371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.207960][ T2976] syzkaller1: entered promiscuous mode [ 121.213682][ T2976] syzkaller1: entered allmulticast mode [ 121.230971][ T2977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.712'. [ 121.252529][ T371] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 121.433632][ T2996] FAULT_INJECTION: forcing a failure. [ 121.433632][ T2996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.448350][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: syz.2.715 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 121.448384][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.448398][ T2996] Call Trace: [ 121.448405][ T2996] [ 121.448414][ T2996] __dump_stack+0x21/0x30 [ 121.448449][ T2996] dump_stack_lvl+0x140/0x1c0 [ 121.448476][ T2996] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.448504][ T2996] dump_stack+0x19/0x20 [ 121.448530][ T2996] should_fail_ex+0x3c2/0x510 [ 121.448554][ T2996] should_fail_alloc_page+0xec/0x110 [ 121.448579][ T2996] __alloc_pages_noprof+0x1c0/0x7e0 [ 121.448608][ T2996] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 121.448634][ T2996] ? selinux_file_ioctl+0x732/0x1480 [ 121.448655][ T2996] ? kasan_save_alloc_info+0x3a/0x50 [ 121.448673][ T2996] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.448693][ T2996] ? alloc_ldt_struct+0x7e/0x2f0 [ 121.448717][ T2996] get_zeroed_page_noprof+0x1f/0x50 [ 121.448745][ T2996] alloc_ldt_struct+0xd3/0x2f0 [ 121.448766][ T2996] ? __kasan_check_write+0x18/0x20 [ 121.448787][ T2996] write_ldt+0x43d/0x760 [ 121.448808][ T2996] ? native_write_gdt_entry+0x40/0x40 [ 121.448843][ T2996] ? xfd_validate_state+0x68/0x140 [ 121.448871][ T2996] __se_sys_modify_ldt+0x70/0x2e0 [ 121.448894][ T2996] __x64_sys_modify_ldt+0x7f/0xa0 [ 121.448916][ T2996] x64_sys_call+0x143d/0x2ee0 [ 121.448935][ T2996] do_syscall_64+0x57/0xf0 [ 121.448953][ T2996] ? clear_bhb_loop+0x50/0xa0 [ 121.448977][ T2996] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.449000][ T2996] RIP: 0033:0x7f898f19e159 [ 121.449018][ T2996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.449035][ T2996] RSP: 002b:00007f8990109028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 121.449059][ T2996] RAX: ffffffffffffffda RBX: 00007f898f426090 RCX: 00007f898f19e159 [ 121.449074][ T2996] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 121.449090][ T2996] RBP: 00007f898f23506b R08: 0000000000000000 R09: 0000000000000000 [ 121.449104][ T2996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.449117][ T2996] R13: 00007f898f426128 R14: 00007f898f426090 R15: 00007fff971a0398 [ 121.449134][ T2996] [ 121.677654][ T65] usb 5-1: MIDIStreaming interface descriptor not found [ 121.737984][ T65] usb 5-1: USB disconnect, device number 10 [ 122.204063][ T3011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3011 comm=syz.4.720 [ 122.217702][ T3011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3011 comm=syz.4.720 [ 122.232894][ T3011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3011 comm=syz.4.720 [ 122.271188][ T478] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 122.422162][ T478] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.432681][ T478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.441588][ T478] usb 3-1: config 1 has no interface number 0 [ 122.448034][ T478] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.459958][ T478] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 122.470654][ T478] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.479754][ T478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.487777][ T478] usb 3-1: Product: syz [ 122.491959][ T478] usb 3-1: Manufacturer: syz [ 122.496552][ T478] usb 3-1: SerialNumber: syz [ 123.305919][ T478] cdc_ncm 3-1:1.1: bind() failure [ 123.341265][ T371] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 123.471255][ T371] usb 5-1: device descriptor read/64, error -71 [ 123.513179][ T3009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.522232][ T3009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.532808][ T407] usb 3-1: USB disconnect, device number 42 [ 123.721209][ T371] usb 5-1: device descriptor read/64, error -71 [ 123.871191][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 123.961193][ T371] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.022217][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.031945][ T65] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.043101][ T65] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 124.052215][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.060242][ T65] usb 7-1: Product: syz [ 124.064495][ T65] usb 7-1: Manufacturer: syz [ 124.069105][ T65] usb 7-1: SerialNumber: syz [ 124.071552][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 124.071568][ T36] audit: type=1400 audit(1789864886.519:513): avc: denied { watch watch_reads } for pid=3025 comm="syz.2.727" path="/160/file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.103405][ T371] usb 5-1: device descriptor read/64, error -71 [ 124.279153][ T65] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 124.280100][ T3030] FAULT_INJECTION: forcing a failure. [ 124.280100][ T3030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.303253][ T3030] CPU: 1 UID: 0 PID: 3030 Comm: syz.2.728 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 124.303273][ T3030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.303281][ T3030] Call Trace: [ 124.303285][ T3030] [ 124.303290][ T3030] __dump_stack+0x21/0x30 [ 124.303310][ T3030] dump_stack_lvl+0x140/0x1c0 [ 124.303325][ T3030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.303344][ T3030] dump_stack+0x19/0x20 [ 124.303358][ T3030] should_fail_ex+0x3c2/0x510 [ 124.303371][ T3030] should_fail_alloc_page+0xec/0x110 [ 124.303384][ T3030] __alloc_pages_noprof+0x1c0/0x7e0 [ 124.303400][ T3030] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 124.303416][ T3030] ? __alloc_pages_noprof+0x35a/0x7e0 [ 124.303432][ T3030] pte_alloc_one+0x92/0x530 [ 124.303444][ T3030] ? __cfi_pte_alloc_one+0x10/0x10 [ 124.303455][ T3030] ? _raw_spin_unlock+0x45/0x60 [ 124.303465][ T3030] ? __pmd_alloc+0x5a6/0x9a0 [ 124.303478][ T3030] __pte_alloc+0x79/0x440 [ 124.303488][ T3030] ? lruvec_init+0x211/0x280 [ 124.303499][ T3030] ? __cfi___pte_alloc+0x10/0x10 [ 124.303511][ T3030] __get_locked_pte+0x246/0x2a0 [ 124.303523][ T3030] map_ldt_struct+0x413/0x730 [ 124.303537][ T3030] ? alloc_ldt_struct+0x2f0/0x2f0 [ 124.303549][ T3030] ? alloc_ldt_struct+0xf9/0x2f0 [ 124.303561][ T3030] ? __kasan_check_write+0x18/0x20 [ 124.303600][ T3030] write_ldt+0x5fe/0x760 [ 124.303613][ T3030] ? native_write_gdt_entry+0x40/0x40 [ 124.303626][ T3030] ? xfd_validate_state+0x68/0x140 [ 124.303642][ T3030] __se_sys_modify_ldt+0x70/0x2e0 [ 124.303654][ T3030] __x64_sys_modify_ldt+0x7f/0xa0 [ 124.303668][ T3030] x64_sys_call+0x143d/0x2ee0 [ 124.303678][ T3030] do_syscall_64+0x57/0xf0 [ 124.303688][ T3030] ? clear_bhb_loop+0x50/0xa0 [ 124.303701][ T3030] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.303713][ T3030] RIP: 0033:0x7f898f19e159 [ 124.303723][ T3030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.303733][ T3030] RSP: 002b:00007f899012a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 124.303746][ T3030] RAX: ffffffffffffffda RBX: 00007f898f425fa0 RCX: 00007f898f19e159 [ 124.303755][ T3030] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 124.303762][ T3030] RBP: 00007f898f23506b R08: 0000000000000000 R09: 0000000000000000 [ 124.303770][ T3030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.303777][ T3030] R13: 00007f898f426038 R14: 00007f898f425fa0 R15: 00007fff971a0398 [ 124.303786][ T3030] [ 124.480581][ T407] usb 7-1: USB disconnect, device number 6 [ 124.484979][ T371] usb 5-1: device descriptor read/64, error -71 [ 124.509847][ T407] usblp0: removed [ 124.621249][ T371] usb usb5-port1: attempt power cycle [ 124.751182][ T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 124.901242][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 124.908627][ T45] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 124.917760][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.925821][ T45] usb 3-1: Product: syz [ 124.929988][ T45] usb 3-1: Manufacturer: syz [ 124.934698][ T45] usb 3-1: SerialNumber: syz [ 124.961177][ T371] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.982120][ T371] usb 5-1: device descriptor read/8, error -71 [ 125.112239][ T371] usb 5-1: device descriptor read/8, error -71 [ 125.351199][ T371] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.372138][ T371] usb 5-1: device descriptor read/8, error -71 [ 125.381184][ T478] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 125.502122][ T371] usb 5-1: device descriptor read/8, error -71 [ 125.531170][ T478] usb 7-1: Using ep0 maxpacket: 16 [ 125.537525][ T478] usb 7-1: unable to get BOS descriptor or descriptor too short [ 125.545895][ T478] usb 7-1: config index 0 descriptor too short (expected 11538, got 18) [ 125.554317][ T478] usb 7-1: config 82 has too many interfaces: 145, using maximum allowed: 32 [ 125.563145][ T478] usb 7-1: config 82 has an invalid interface number: 191 but max is 144 [ 125.571749][ T478] usb 7-1: config 82 has 1 interface, different from the descriptor's value: 145 [ 125.580894][ T478] usb 7-1: config 82 has no interface number 0 [ 125.587099][ T478] usb 7-1: config 82 interface 191 has no altsetting 0 [ 125.595287][ T478] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=88.be [ 125.604388][ T478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.612506][ T478] usb 7-1: Product: syz [ 125.616675][ T478] usb 7-1: Manufacturer: syz [ 125.621312][ T371] usb usb5-port1: unable to enumerate USB device [ 125.628314][ T478] usb 7-1: SerialNumber: syz [ 126.749388][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 126.758622][ T45] usb 3-1: USB disconnect, device number 43 [ 126.769273][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.963681][ T3061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.972442][ T3061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.991983][ T407] usb 6-1: USB disconnect, device number 8 [ 127.201203][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 127.352201][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 127.365956][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.375041][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.383072][ T45] usb 5-1: SerialNumber: syz [ 127.389147][ T45] usb 5-1: bad CDC descriptors [ 127.511184][ T407] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 127.589817][ T65] usb 5-1: USB disconnect, device number 15 [ 127.641185][ T407] usb 3-1: device descriptor read/64, error -71 [ 127.881183][ T407] usb 3-1: device descriptor read/64, error -71 [ 128.106987][ T3107] incfs: Options parsing error. -22 [ 128.114583][ T3107] incfs: mount failed -22 [ 128.131189][ T407] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 128.165217][ T478] usb 7-1: bad CDC descriptors [ 128.174158][ T3109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.175530][ T478] usb 7-1: USB disconnect, device number 7 [ 128.190439][ T3109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.271460][ T407] usb 3-1: device descriptor read/64, error -71 [ 128.411223][ T1172] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 128.491204][ T478] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.511209][ T407] usb 3-1: device descriptor read/64, error -71 [ 128.541194][ T1172] usb 5-1: device descriptor read/64, error -71 [ 128.621312][ T407] usb usb3-port1: attempt power cycle [ 128.651225][ T478] usb 7-1: Using ep0 maxpacket: 16 [ 128.657520][ T478] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 128.665686][ T478] usb 7-1: config 0 has no interface number 0 [ 128.671831][ T478] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 128.681964][ T478] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 128.693270][ T478] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 128.702367][ T478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.710380][ T478] usb 7-1: Product: syz [ 128.714594][ T478] usb 7-1: Manufacturer: syz [ 128.719826][ T478] usb 7-1: SerialNumber: syz [ 128.725160][ T478] usb 7-1: config 0 descriptor?? [ 128.730352][ T3114] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 128.737547][ T3114] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 128.781186][ T1172] usb 5-1: device descriptor read/64, error -71 [ 128.945860][ T3114] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 128.953147][ T3114] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 128.961213][ T407] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 128.982253][ T407] usb 3-1: device descriptor read/8, error -71 [ 129.041191][ T1172] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 129.112154][ T407] usb 3-1: device descriptor read/8, error -71 [ 129.161407][ T478] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 129.171270][ T1172] usb 5-1: device descriptor read/64, error -71 [ 129.361176][ T407] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 129.392908][ T407] usb 3-1: device descriptor read/8, error -71 [ 129.411186][ T1172] usb 5-1: device descriptor read/64, error -71 [ 129.522127][ T1172] usb usb5-port1: attempt power cycle [ 129.522224][ T407] usb 3-1: device descriptor read/8, error -71 [ 129.569468][ T478] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 129.579669][ T478] asix 7-1:0.34: probe with driver asix failed with error -61 [ 129.641283][ T407] usb usb3-port1: unable to enumerate USB device [ 129.721219][ T65] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.861210][ T1172] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 129.871189][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 129.878598][ T65] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 129.887685][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.892212][ T1172] usb 5-1: device descriptor read/8, error -71 [ 129.895738][ T65] usb 6-1: Product: syz [ 129.906044][ T65] usb 6-1: Manufacturer: syz [ 129.910624][ T65] usb 6-1: SerialNumber: syz [ 130.032239][ T1172] usb 5-1: device descriptor read/8, error -71 [ 130.275069][ T1172] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 130.302198][ T1172] usb 5-1: device descriptor read/8, error -71 [ 130.432319][ T1172] usb 5-1: device descriptor read/8, error -71 [ 130.541297][ T1172] usb usb5-port1: unable to enumerate USB device [ 131.082339][ T3163] netlink: 84 bytes leftover after parsing attributes in process `syz.2.757'. [ 131.100068][ T36] audit: type=1400 audit(1789864893.549:514): avc: denied { relabelfrom } for pid=3164 comm="syz.2.758" name="NETLINK" dev="sockfs" ino=32007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.100081][ T3165] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 131.133979][ T36] audit: type=1400 audit(1789864893.549:515): avc: denied { relabelto } for pid=3164 comm="syz.2.758" name="NETLINK" dev="sockfs" ino=32007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 131.251450][ T36] audit: type=1400 audit(1789864893.709:516): avc: denied { unmount } for pid=2281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 131.331199][ T478] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 131.491171][ T478] usb 3-1: Using ep0 maxpacket: 8 [ 131.497271][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.509523][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.522352][ T478] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.537507][ T478] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 131.546598][ T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.558404][ T478] usb 3-1: config 0 descriptor?? [ 131.726263][ T65] usb 6-1: MIDIStreaming interface descriptor not found [ 131.735513][ T65] usb 6-1: USB disconnect, device number 9 [ 131.912261][ T45] usb 7-1: USB disconnect, device number 8 [ 131.942472][ T3208] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 131.992736][ T65] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 132.003818][ T65] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.371171][ T36] audit: type=1400 audit(1789864894.819:517): avc: denied { read } for pid=3164 comm="syz.2.758" path="socket:[32008]" dev="sockfs" ino=32008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.433918][ T478] sony 0003:054C:042F.001C: can't set operational mode: step 1 [ 132.450464][ T478] sony 0003:054C:042F.001C: Failed to set controller into operational mode [ 132.483601][ T478] sony 0003:054C:042F.001C: hidraw1: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 132.502798][ T478] sony 0003:054C:042F.001C: failed to claim input [ 132.517102][ T478] usb 3-1: USB disconnect, device number 48 [ 132.729112][ T3254] No source specified [ 132.742147][ T3254] .Nail-nth: renamed from veth0_to_bond (while UP) [ 132.831206][ T478] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 133.002999][ T478] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 133.012135][ T478] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 133.020220][ T478] usb 3-1: Product: syz [ 133.025052][ T478] usb 3-1: config 0 descriptor?? [ 133.031021][ T478] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 133.038923][ T478] usb 3-1: Detected FT232H [ 133.061203][ T65] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 133.111229][ T402] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 133.211188][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 133.218723][ T65] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 133.227808][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.235941][ T65] usb 6-1: Product: syz [ 133.238548][ T478] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 133.240180][ T65] usb 6-1: Manufacturer: syz [ 133.251596][ T65] usb 6-1: SerialNumber: syz [ 133.272182][ T402] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.283121][ T402] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.295956][ T402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.302604][ T402] usb 5-1: New USB device found, idVendor=fd79, idProduct=0006, bcdDevice= 0.00 [ 133.311733][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.320419][ T402] usb 5-1: config 0 descriptor?? [ 133.527763][ T402] hid (null): report_id 869136096 is invalid [ 133.534819][ T402] hid-generic 0003:FD79:0006.001E: unexpected long global item [ 133.542649][ T402] hid-generic 0003:FD79:0006.001E: probe with driver hid-generic failed with error -22 [ 133.650381][ T478] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.727911][ T402] usb 5-1: USB disconnect, device number 20 [ 133.850481][ T3244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.859082][ T3244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.867597][ T478] usb 3-1: USB disconnect, device number 49 [ 133.878303][ T478] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.888018][ T478] ftdi_sio 3-1:0.0: device disconnected [ 134.422037][ T478] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 134.584148][ T478] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 134.593448][ T478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.603688][ T478] usb 7-1: Product: syz [ 134.607917][ T478] usb 7-1: Manufacturer: syz [ 134.612819][ T478] usb 7-1: SerialNumber: syz [ 134.671190][ T1172] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 134.842189][ T1172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 134.852207][ T1172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 134.862300][ T1172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.873404][ T1172] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 134.883077][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.891201][ T478] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 134.901017][ T478] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 134.911213][ T478] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 134.911462][ T3291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 134.922972][ T478] usb 7-1: USB disconnect, device number 9 [ 134.932469][ T3291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 134.940959][ T1172] pl2303 3-1:1.0: pl2303 converter detected [ 134.948510][ T1172] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 135.070519][ T65] usb 6-1: MIDIStreaming interface descriptor not found [ 135.081219][ T65] usb 6-1: USB disconnect, device number 10 [ 135.180127][ T3295] cgroup: fork rejected by pids controller in /syz2 [ 135.357035][ T65] usb 3-1: USB disconnect, device number 50 [ 135.365172][ T65] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 135.373354][ T65] pl2303 3-1:1.0: device disconnected [ 135.392908][ T36] audit: type=1400 audit(1789864897.849:518): avc: denied { ioctl } for pid=3354 comm="syz.6.792" path="socket:[31531]" dev="sockfs" ino=31531 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.421182][ T36] audit: type=1400 audit(1789864897.849:519): avc: denied { setopt } for pid=3354 comm="syz.6.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.612665][ T3374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.742411][ T36] audit: type=1400 audit(1789864898.199:520): avc: denied { accept } for pid=3401 comm="syz.4.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 135.814678][ T3404] FAULT_INJECTION: forcing a failure. [ 135.814678][ T3404] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.831021][ T3404] CPU: 1 UID: 0 PID: 3404 Comm: syz.4.800 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 135.831058][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.831073][ T3404] Call Trace: [ 135.831081][ T3404] [ 135.831089][ T3404] __dump_stack+0x21/0x30 [ 135.831128][ T3404] dump_stack_lvl+0x140/0x1c0 [ 135.831152][ T3404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.831178][ T3404] ? __kasan_check_write+0x18/0x20 [ 135.831200][ T3404] dump_stack+0x19/0x20 [ 135.831225][ T3404] should_fail_ex+0x3c2/0x510 [ 135.831247][ T3404] should_fail+0xf/0x20 [ 135.831270][ T3404] get_futex_key+0x178/0x940 [ 135.831296][ T3404] ? __sched_text_start+0x10/0x10 [ 135.831318][ T3404] ? __cfi_get_futex_key+0x10/0x10 [ 135.831343][ T3404] futex_wait_setup+0xae/0x260 [ 135.831363][ T3404] ? __cfi___futex_queue+0x10/0x10 [ 135.831387][ T3404] ? __cfi_futex_wait_setup+0x10/0x10 [ 135.831406][ T3404] ? __asan_memcpy+0x5a/0x80 [ 135.831425][ T3404] __futex_wait+0x12c/0x3d0 [ 135.831456][ T3404] ? __cfi___futex_wait+0x10/0x10 [ 135.831475][ T3404] ? __cfi_futex_wake_mark+0x10/0x10 [ 135.831495][ T3404] ? __kasan_check_read+0x15/0x20 [ 135.831517][ T3404] ? futex_wake+0x627/0x950 [ 135.831534][ T3404] futex_wait+0x128/0x7c0 [ 135.831553][ T3404] ? __cfi_futex_wait+0x10/0x10 [ 135.831572][ T3404] ? selinux_file_ioctl+0x732/0x1480 [ 135.831593][ T3404] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 135.831613][ T3404] do_futex+0x32a/0x510 [ 135.831638][ T3404] ? __cfi_do_futex+0x10/0x10 [ 135.831663][ T3404] __se_sys_futex+0x13c/0x320 [ 135.831685][ T3404] ? __x64_sys_futex+0x110/0x110 [ 135.831708][ T3404] __x64_sys_futex+0xe9/0x110 [ 135.831730][ T3404] x64_sys_call+0x227f/0x2ee0 [ 135.831747][ T3404] do_syscall_64+0x57/0xf0 [ 135.831764][ T3404] ? clear_bhb_loop+0x50/0xa0 [ 135.831787][ T3404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.831809][ T3404] RIP: 0033:0x7f036f79e159 [ 135.831825][ T3404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.831842][ T3404] RSP: 002b:00007f03706d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.831863][ T3404] RAX: ffffffffffffffda RBX: 00007f036fa25fa8 RCX: 00007f036f79e159 [ 135.831877][ T3404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f036fa25fa8 [ 135.831890][ T3404] RBP: 00007f036fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 135.831904][ T3404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.831916][ T3404] R13: 00007f036fa26038 R14: 00007fffa087a790 R15: 00007fffa087a878 [ 135.831935][ T3404] [ 136.088680][ T1172] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 136.124429][ T36] audit: type=1400 audit(1789864898.579:521): avc: denied { remove_name } for pid=2281 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.148937][ T36] audit: type=1400 audit(1789864898.579:522): avc: denied { unlink } for pid=2281 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.214330][ T617] bridge_slave_1: left allmulticast mode [ 136.220019][ T617] bridge_slave_1: left promiscuous mode [ 136.225871][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.233799][ T617] bridge_slave_0: left allmulticast mode [ 136.239468][ T617] bridge_slave_0: left promiscuous mode [ 136.241172][ T1172] usb 6-1: device descriptor read/64, error -71 [ 136.245418][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.355961][ T617] veth1_macvtap: left promiscuous mode [ 136.361527][ T617] veth0_vlan: left promiscuous mode [ 136.419750][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.426876][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.435119][ T3416] bridge_slave_0: entered allmulticast mode [ 136.441930][ T3416] bridge_slave_0: entered promiscuous mode [ 136.449308][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.456468][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.463658][ T3416] bridge_slave_1: entered allmulticast mode [ 136.469909][ T3416] bridge_slave_1: entered promiscuous mode [ 136.508328][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.515409][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.522690][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.529717][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.537123][ T1172] usb 6-1: device descriptor read/64, error -71 [ 136.554747][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.562040][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.572129][ T624] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.579228][ T624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.588416][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.595503][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.617959][ T3416] veth0_vlan: entered promiscuous mode [ 136.628373][ T3416] veth1_macvtap: entered promiscuous mode [ 136.657471][ T3423] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 136.671209][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 136.774191][ T3431] tmpfs: Unknown parameter 'huahwa' [ 136.781191][ T1172] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 136.841788][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 136.852682][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 136.860904][ T3440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.811'. [ 136.861907][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.878981][ T9] usb 7-1: Product: syz [ 136.887566][ T9] usb 7-1: Manufacturer: syz [ 136.892488][ T9] usb 7-1: SerialNumber: syz [ 136.921189][ T1172] usb 6-1: device descriptor read/64, error -71 [ 137.161241][ T1172] usb 6-1: device descriptor read/64, error -71 [ 137.271259][ T1172] usb usb6-port1: attempt power cycle [ 137.611185][ T1172] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 137.633145][ T1172] usb 6-1: device descriptor read/8, error -71 [ 137.762167][ T1172] usb 6-1: device descriptor read/8, error -71 [ 137.791217][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 137.804345][ T3459] FAULT_INJECTION: forcing a failure. [ 137.804345][ T3459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.817574][ T3459] CPU: 1 UID: 0 PID: 3459 Comm: syz.7.815 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 137.817607][ T3459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.817621][ T3459] Call Trace: [ 137.817628][ T3459] [ 137.817636][ T3459] __dump_stack+0x21/0x30 [ 137.817669][ T3459] dump_stack_lvl+0x140/0x1c0 [ 137.817695][ T3459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.817722][ T3459] ? restore_altstack+0x2d5/0x500 [ 137.817743][ T3459] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 137.817765][ T3459] dump_stack+0x19/0x20 [ 137.817798][ T3459] should_fail_ex+0x3c2/0x510 [ 137.817823][ T3459] should_fail+0xf/0x20 [ 137.817845][ T3459] should_fail_usercopy+0x1e/0x30 [ 137.817868][ T3459] _copy_from_user+0x20/0xa0 [ 137.817895][ T3459] __ia32_sys_rt_sigreturn+0x272/0x830 [ 137.817914][ T3459] ? _raw_spin_unlock_irq+0x45/0x70 [ 137.817931][ T3459] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 137.817954][ T3459] ? __kasan_check_read+0x15/0x20 [ 137.817974][ T3459] x64_sys_call+0x2c14/0x2ee0 [ 137.817993][ T3459] do_syscall_64+0x57/0xf0 [ 137.818011][ T3459] ? clear_bhb_loop+0x50/0xa0 [ 137.818035][ T3459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.818060][ T3459] RIP: 0033:0x7fdd28f3f4d9 [ 137.818078][ T3459] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 137.818095][ T3459] RSP: 002b:00007fdd29ee6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 137.818115][ T3459] RAX: ffffffffffffffda RBX: 00007fdd29225fa0 RCX: 00007fdd28f3f4d9 [ 137.818124][ T3459] RDX: 00007fdd29ee6a80 RSI: 00007fdd29ee6bb0 RDI: 0000000000000011 [ 137.818132][ T3459] RBP: 00007fdd2903506b R08: 0000000000000000 R09: 0000000000000000 [ 137.818140][ T3459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.818148][ T3459] R13: 00007fdd29226038 R14: 00007fdd29225fa0 R15: 00007fffbe816b08 [ 137.818158][ T3459] [ 138.034011][ T3463] netlink: 'syz.7.816': attribute type 12 has an invalid length. [ 138.092239][ T45] usb 3-1: config 0 has no interfaces? [ 138.097768][ T45] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 138.106867][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.115713][ T45] usb 3-1: config 0 descriptor?? [ 138.141194][ T1172] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 138.162244][ T1172] usb 6-1: device descriptor read/8, error -71 [ 138.292220][ T1172] usb 6-1: device descriptor read/8, error -71 [ 138.321486][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.330413][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.338682][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.347308][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.355483][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.364080][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.372160][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.380636][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.388812][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.397808][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.405923][ T1172] usb usb6-port1: unable to enumerate USB device [ 138.415664][ T1172] usb 3-1: USB disconnect, device number 51 [ 138.834236][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 138.844136][ T9] usb 7-1: USB disconnect, device number 10 [ 138.854725][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.021225][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 139.171227][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 139.177897][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 139.186433][ T65] usb 6-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 139.196743][ T65] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.209782][ T65] usb 6-1: config 1 interface 0 has no altsetting 0 [ 139.217748][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.226934][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.231206][ T1172] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 139.234993][ T65] usb 6-1: Product: syz [ 139.246848][ T65] usb 6-1: Manufacturer: syz [ 139.251485][ T65] usb 6-1: SerialNumber: syz [ 139.354127][ T3473] overlayfs: conflicting options: nfs_export=on,index=off [ 139.400353][ T1172] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 139.409482][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.417769][ T1172] usb 3-1: Product: syz [ 139.422210][ T1172] usb 3-1: Manufacturer: syz [ 139.426820][ T1172] usb 3-1: SerialNumber: syz [ 139.433848][ T1172] ums-jumpshot 3-1:1.0: USB Mass Storage device detected [ 139.441942][ T1172] ums-jumpshot 3-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 139.457515][ T3467] Invalid argument reading file caps for ./file0 [ 139.466426][ T65] cdc_ether 6-1:1.0: skipping garbage [ 139.472520][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 139.483365][ T65] usb 6-1: USB disconnect, device number 15 [ 139.621227][ T45] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 139.633305][ T3471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.641863][ T3471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.650594][ T1172] usb 3-1: USB disconnect, device number 52 [ 139.772269][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.782453][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.792806][ T45] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 139.801933][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.809922][ T45] usb 7-1: Product: syz [ 139.814173][ T45] usb 7-1: Manufacturer: syz [ 139.818813][ T45] usb 7-1: SerialNumber: syz [ 140.027084][ T3475] tipc: Started in network mode [ 140.032055][ T3475] tipc: Node identity b21881a970f9, cluster identity 4711 [ 140.039358][ T3475] tipc: Enabled bearer , priority 0 [ 140.047275][ T3475] syzkaller0: MTU too low for tipc bearer [ 140.053124][ T3475] tipc: Disabling bearer [ 140.060835][ T3475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.070103][ T3475] fuse: Bad value for 'fd' [ 140.117903][ T45] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 140.131899][ T45] usb 7-1: USB disconnect, device number 11 [ 140.930720][ T3513] Invalid logical block size (2) [ 141.085366][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 141.251183][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 141.263531][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 141.271202][ T1172] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 141.272721][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.291192][ T65] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 141.311263][ T9] usb 6-1: Product: syz [ 141.323745][ T9] usb 6-1: Manufacturer: syz [ 141.328416][ T9] usb 6-1: SerialNumber: syz [ 141.431190][ T1172] usb 3-1: Using ep0 maxpacket: 8 [ 141.441873][ T1172] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 141.450938][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.471943][ T65] usb 7-1: device descriptor read/64, error -71 [ 141.481879][ T1172] usb 3-1: config 0 descriptor?? [ 141.711359][ T65] usb 7-1: device descriptor read/64, error -71 [ 141.951290][ T65] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 142.081189][ T65] usb 7-1: device descriptor read/64, error -71 [ 142.321199][ T65] usb 7-1: device descriptor read/64, error -71 [ 142.431451][ T65] usb usb7-port1: attempt power cycle [ 142.771241][ T65] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 142.792169][ T65] usb 7-1: device descriptor read/8, error -71 [ 142.932230][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.152637][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 143.163922][ T9] usb 6-1: USB disconnect, device number 16 [ 143.171260][ T65] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 143.202206][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.332223][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.441250][ T65] usb usb7-port1: unable to enumerate USB device [ 143.680254][ T3535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.038212][ T1172] usb 3-1: string descriptor 0 read error: -71 [ 144.053262][ T1172] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 144.060071][ T1172] usb 3-1: Found UVC 0.00 device (2833:0201) [ 144.067247][ T1172] usb 3-1: No valid video chain found. [ 144.082464][ T1172] usb 3-1: USB disconnect, device number 53 [ 144.123154][ T36] audit: type=1400 audit(1789864906.579:523): avc: denied { write } for pid=3558 comm="syz.7.842" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.551207][ T1172] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 144.677208][ T3570] rust_binder: 3569:3570 got reply transaction with no transaction stack [ 144.685739][ T3570] rust_binder: 3569:3570 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 [ 144.711174][ T1172] usb 3-1: Using ep0 maxpacket: 16 [ 144.719618][ T1172] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 144.728828][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.737166][ T1172] usb 3-1: Product: syz [ 144.741534][ T1172] usb 3-1: Manufacturer: syz [ 144.746144][ T1172] usb 3-1: SerialNumber: syz [ 144.942862][ T3583] kvm: pic: non byte read [ 144.947352][ T3583] kvm: pic: non byte read [ 144.951862][ T3583] kvm: pic: non byte read [ 144.956553][ T3583] kvm: pic: non byte read [ 144.964545][ T3583] kvm: pic: non byte read [ 144.969466][ T3583] kvm: pic: non byte read [ 144.974081][ T3583] kvm: pic: non byte read [ 144.978660][ T3583] kvm: pic: non byte read [ 144.983213][ T3583] kvm: pic: non byte read [ 144.987803][ T3583] kvm: pic: non byte read [ 145.177737][ T3611] FAULT_INJECTION: forcing a failure. [ 145.177737][ T3611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.203395][ T3611] CPU: 0 UID: 0 PID: 3611 Comm: syz.5.856 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 145.203433][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.203448][ T3611] Call Trace: [ 145.203455][ T3611] [ 145.203464][ T3611] __dump_stack+0x21/0x30 [ 145.203500][ T3611] dump_stack_lvl+0x140/0x1c0 [ 145.203526][ T3611] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.203553][ T3611] ? __kasan_check_write+0x18/0x20 [ 145.203574][ T3611] dump_stack+0x19/0x20 [ 145.203599][ T3611] should_fail_ex+0x3c2/0x510 [ 145.203623][ T3611] should_fail_alloc_page+0xec/0x110 [ 145.203648][ T3611] __alloc_pages_noprof+0x1c0/0x7e0 [ 145.203676][ T3611] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 145.203705][ T3611] ? folio_add_lru+0x116/0x400 [ 145.203730][ T3611] ? __cfi_folio_add_lru+0x10/0x10 [ 145.203755][ T3611] __folio_alloc_noprof+0x14/0x80 [ 145.203782][ T3611] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 145.203809][ T3611] ? shmem_replace_folio+0x9b0/0x9b0 [ 145.203834][ T3611] ? shmem_huge_global_enabled+0x2da/0x360 [ 145.203857][ T3611] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 145.203882][ T3611] shmem_get_folio_gfp+0x5cd/0x12e0 [ 145.203907][ T3611] ? shmem_get_folio+0xc0/0xc0 [ 145.203928][ T3611] ? __cfi_folio_unlock+0x10/0x10 [ 145.203950][ T3611] ? __kasan_check_write+0x18/0x20 [ 145.203971][ T3611] ? noop_dirty_folio+0x81/0xa0 [ 145.203998][ T3611] shmem_fallocate+0x8df/0xcb0 [ 145.204027][ T3611] ? __cfi_shmem_fallocate+0x10/0x10 [ 145.204054][ T3611] ? __se_sys_futex+0x13c/0x320 [ 145.204091][ T3611] ? fput+0x1a4/0x230 [ 145.204119][ T3611] vfs_fallocate+0x533/0x620 [ 145.204143][ T3611] __x64_sys_fallocate+0xc3/0x110 [ 145.204168][ T3611] x64_sys_call+0x2e48/0x2ee0 [ 145.204188][ T3611] do_syscall_64+0x57/0xf0 [ 145.204207][ T3611] ? clear_bhb_loop+0x50/0xa0 [ 145.204231][ T3611] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.204255][ T3611] RIP: 0033:0x7f4cecd9e159 [ 145.204273][ T3611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.204292][ T3611] RSP: 002b:00007f4cedca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 145.204314][ T3611] RAX: ffffffffffffffda RBX: 00007f4ced025fa0 RCX: 00007f4cecd9e159 [ 145.204331][ T3611] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 145.204344][ T3611] RBP: 00007f4cece3506b R08: 0000000000000000 R09: 0000000000000000 [ 145.204357][ T3611] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 145.204371][ T3611] R13: 00007f4ced026038 R14: 00007f4ced025fa0 R15: 00007ffd2d272a18 [ 145.204390][ T3611] [ 146.078667][ T36] audit: type=1326 audit(1789864908.529:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3626 comm="syz.6.858" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f108119e159 code=0x0 [ 146.673293][ T1172] usb 3-1: MIDIStreaming interface descriptor not found [ 146.682748][ T1172] usb 3-1: USB disconnect, device number 54 [ 146.692458][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.912768][ T36] audit: type=1400 audit(1789864909.369:525): avc: denied { add_name } for pid=3640 comm="syz.5.863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.933483][ T36] audit: type=1400 audit(1789864909.369:526): avc: denied { create } for pid=3640 comm="syz.5.863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 146.953571][ T36] audit: type=1400 audit(1789864909.369:527): avc: denied { associate } for pid=3640 comm="syz.5.863" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.975169][ T36] audit: type=1400 audit(1789864909.369:528): avc: denied { rename } for pid=3640 comm="syz.5.863" name="file1" dev="incremental-fs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.998180][ T36] audit: type=1400 audit(1789864909.369:529): avc: denied { rmdir } for pid=3640 comm="syz.5.863" name="file0" dev="incremental-fs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.004141][ T3649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3649 comm=syz.5.864 [ 147.033703][ T36] audit: type=1400 audit(1789864909.489:530): avc: denied { bpf } for pid=3643 comm="syz.5.864" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.189188][ T3657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3657 comm=syz.2.865 [ 147.202536][ T3657] bridge0: entered allmulticast mode [ 147.208283][ T3657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.865'. [ 147.991229][ T45] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 148.135488][ T3685] futex_wake_op: syz.2.872 tries to shift op by 148; fix this program [ 148.151478][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.159950][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 148.169961][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 148.197972][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 148.207916][ T45] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.226964][ T45] usb 6-1: string descriptor 0 read error: -22 [ 148.233220][ T45] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 148.242330][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.259811][ T3697] ------------[ cut here ]------------ [ 148.265368][ T3697] WARNING: CPU: 0 PID: 3697 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 148.271553][ T3674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 148.274904][ T3697] Modules linked in: [ 148.282208][ T3674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 148.285894][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.2.875 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 148.293380][ T3674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 148.304510][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.314397][ T45] usb 6-1: MIDIStreaming interface descriptor not found [ 148.321708][ T3697] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 148.331421][ T45] usb 6-1: too many endpoints [ 148.334217][ T3697] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2a 20 06 ff 0f 0b b8 ea ff ff ff eb de e8 1c 20 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 148.358561][ T3697] RSP: 0018:ffffc9000325f728 EFLAGS: 00010293 [ 148.364684][ T3697] RAX: ffffffff82815a54 RBX: ffff88811ed1a000 RCX: ffff888123efb900 [ 148.372698][ T3697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.380712][ T3697] RBP: ffffc9000325f770 R08: ffffc9000325f82f R09: 0000000000000000 [ 148.388768][ T3697] R10: 0000000000000000 R11: ffffffff82815570 R12: ffff88811a9ee388 [ 148.396811][ T3697] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88811ed1a038 [ 148.404831][ T3697] FS: 00007f89900c76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 148.413793][ T3697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.420378][ T3697] CR2: 00007f898f1eb840 CR3: 0000000127794000 CR4: 00000000003526b0 [ 148.428388][ T3697] Call Trace: [ 148.431689][ T3697] [ 148.434615][ T3697] ? __asan_memcpy+0x5a/0x80 [ 148.439204][ T3697] crypto_sig_verify+0x1d0/0x260 [ 148.444184][ T3697] ? __cfi_crypto_sig_verify+0x10/0x10 [ 148.449691][ T3697] ? crypto_sig_set_pubkey+0x9d/0xb0 [ 148.455040][ T3697] public_key_verify_signature+0x654/0xa40 [ 148.460861][ T3697] ? __cfi_public_key_verify_signature+0x10/0x10 [ 148.467223][ T3697] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 148.472801][ T3697] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 148.479334][ T3697] public_key_verify_signature_2+0x47/0x60 [ 148.485183][ T3697] verify_signature+0xf3/0x120 [ 148.489996][ T3697] asymmetric_key_verify_signature+0x160/0x200 [ 148.496219][ T3697] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 148.502968][ T3697] ? should_fail+0xf/0x20 [ 148.507295][ T3697] ? __kasan_check_write+0x18/0x20 [ 148.512464][ T3697] ? _copy_from_user+0x87/0xa0 [ 148.517248][ T3697] ? memdup_user+0xb1/0x170 [ 148.521814][ T3697] keyctl_pkey_verify+0x203/0x290 [ 148.526776][ T3674] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 148.526853][ T3697] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 148.540743][ T3697] __se_sys_keyctl+0x743/0xe40 [ 148.545565][ T3697] ? __x64_sys_keyctl+0xf0/0xf0 [ 148.550423][ T3697] ? __kasan_check_write+0x18/0x20 [ 148.555561][ T3697] ? __cfi_do_futex+0x10/0x10 [ 148.559112][ T3674] pim6reg1: entered promiscuous mode [ 148.560266][ T3697] ? _raw_spin_unlock_irq+0x45/0x70 [ 148.560294][ T3697] ? __se_sys_futex+0x13c/0x320 [ 148.565964][ T3674] pim6reg1: entered allmulticast mode [ 148.570787][ T3697] ? xfd_validate_state+0x68/0x140 [ 148.570822][ T3697] ? __kasan_check_write+0x18/0x20 [ 148.591295][ T3697] ? fpregs_restore_userregs+0x11c/0x260 [ 148.596960][ T3697] __x64_sys_keyctl+0xc3/0xf0 [ 148.601714][ T3697] x64_sys_call+0x996/0x2ee0 [ 148.606324][ T3697] do_syscall_64+0x57/0xf0 [ 148.610764][ T3697] ? clear_bhb_loop+0x50/0xa0 [ 148.615486][ T3697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.621421][ T3697] RIP: 0033:0x7f898f19e159 [ 148.625839][ T3697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.645475][ T3697] RSP: 002b:00007f89900c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 148.653927][ T3697] RAX: ffffffffffffffda RBX: 00007f898f426270 RCX: 00007f898f19e159 [ 148.661937][ T3697] RDX: 00002000000008c0 RSI: 0000200000000000 RDI: 000000000000001c [ 148.669915][ T3697] RBP: 00007f898f23506b R08: 0000000000000000 R09: 0000000000000000 [ 148.678103][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.686273][ T3697] R13: 00007f898f426308 R14: 00007f898f426270 R15: 00007fff971a0398 [ 148.694294][ T3697] [ 148.697314][ T3697] ---[ end trace 0000000000000000 ]--- [ 148.733317][ T9] usb 6-1: USB disconnect, device number 17