last executing test programs: 26.744322716s ago: executing program 1 (id=73): r0 = socket(0x11, 0xa, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 26.744211686s ago: executing program 1 (id=74): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 25.790315029s ago: executing program 1 (id=83): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x3a, 0xd0, 0x0, 0x0) 25.74910617s ago: executing program 1 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 25.592237584s ago: executing program 1 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300500000000802110000010802110000"], 0x3c}}, 0x10) 25.049056007s ago: executing program 1 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x44, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 25.044664537s ago: executing program 32 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x44, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 10.559713736s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) 8.760946059s ago: executing program 0 (id=159): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x3004, 0x2c}, 0x44004) 8.760509699s ago: executing program 0 (id=160): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x1ff, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0xc0000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x9, 0xfffffffb, 0x39, 0x747d5e13, 0x803, 0xfffffb9a, 0xfffffffe, 0x5, 0xfffffbfb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x6, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0x1a, 0x8da8, 0x2, 0x200, 0x6, 0x5, 0x8, 0x4, 0x2, 0x6, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x2, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffa, 0x3, 0x3, 0x297, 0x8, 0x0, 0x200000a, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x2000001, 0xffffffff, 0x6, 0x2000008, 0x800, 0x4fdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x400004, 0x5, 0x200003, 0x100, 0x5, 0x4, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x9, 0xb, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x8, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x8, 0x5, 0x3fa6, 0x4, 0x5, 0x5, 0x8003, 0x4, 0xe48, 0x4, 0x3, 0x4, 0x0, 0x7, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0x1, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0x3, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/203, 0xcb}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000200)={0xffffffffffffffff, 0xe}) fcntl$setpipe(r1, 0x407, 0x7000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x0, 0x7f, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2f, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x182, 0x1, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x8000000002004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x8, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0xa, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x6, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x0, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x3c2, 0x6, 0x100000000001], 0x8000000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000000380)={0x1, 0xc}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 8.72191213s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) 6.954438842s ago: executing program 0 (id=162): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xde) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='.\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='r:_est/event1 ./file0:0x0 a-g2=', 0x1f) 6.882729834s ago: executing program 0 (id=166): r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971b", 0x5f}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x0, 0x10) pread64(r9, &(0x7f000001a240)=""/102384, 0x15a0b, 0xc) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf251f00000008000200", @ANYRES32=r3, @ANYBLOB="0d040200", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="0a0001007770616e330000000a0001007770616e3300000008000200", @ANYRES32=r7, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=r8, @ANYBLOB="0a0001007770616e31000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r12, 0x540a, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r13, 0x4008ae93, &(0x7f0000000040)=0x4) syz_kvm_setup_cpu$x86(r11, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) r15 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000084f0453b6000000000001092224000100000700090400fb0203000100092108004101221800090581034000102400"], 0x0) syz_usb_control_io$hid(r15, 0x0, 0x0) 6.803314636s ago: executing program 3 (id=171): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) 6.802667976s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) 6.802282896s ago: executing program 3 (id=173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xecff) 4.923612241s ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev/sda1\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4048050) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1e) read$FUSE(r1, &(0x7f0000002700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file1', [{0x20, '.){\'+&+-^'}, {0x20, 'devtmpfs\x00'}, {0x20, '#! '}, {0x20, 'cpuset.effective_cpus\x00'}]}, 0x3a) clock_gettime(0x0, &(0x7f0000001bc0)) chdir(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x2004000) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/150, 0x96) prlimit64(r4, 0xc, &(0x7f0000000140)={0xffffffff, 0x8b}, 0x0) write(r3, &(0x7f0000000240)="6c4e7739a7cd571078b0751f0eb88b872b12db0f6c914e5b9f3b0f97b95528537008ed39239e4cbcbc928f39e7bad156ceb9422e0b5dca01cb13e4bb884985b12f12106544790101465d561de772eace76d4aee99655d723fb0387dc5a2dd28c9fd8de8b9babc0f6995b8756153b43ec5cbcc46af4e2bc33e012e547fb263c4ba819cbeed3f6bbcc847911292f2256ebbd7fb6c6eb8dd9e94bafc1", 0x9b) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 4.893504272s ago: executing program 2 (id=175): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x3) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 4.893078972s ago: executing program 3 (id=176): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=@hopopts={0x5c, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x20) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) syz_io_uring_setup(0x2250, &(0x7f00000000c0)={0x0, 0xce38, 0x8, 0x0, 0x2ba}, 0x0, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) pselect6(0x40, &(0x7f0000000000)={0x1000, 0x6, 0x4, 0x9, 0x4, 0x1e2, 0x8, 0xe45c}, &(0x7f0000000080)={0x8000000000000000, 0x5, 0x9c, 0x0, 0x9, 0xfffffffffffffff8, 0x9, 0x5}, &(0x7f0000000140)={0x0, 0x3, 0x32a, 0x2, 0x75, 0x57e, 0x2, 0x100}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x101]}, 0x8}) 4.759079995s ago: executing program 2 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000700000002000000010000000000000000000000c756a17f0000ffffffffffffffffffff0000e0b60e9f7aea9d2b1f78687139854bf710000000000000000000006f2fa303de5da55f03cb2002000000000000f0fffffffffffffffffe"], 0xb8}}, 0x4004) 4.595022919s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) 2.661685406s ago: executing program 0 (id=178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) truncate(0x0, 0x8) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 2.661468106s ago: executing program 2 (id=179): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x2, r0, 0x4007) getrusage(0x0, &(0x7f0000000040)) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xc4001, 0x0) fchdir(r1) getrusage(0xb90420c9a9a9a948, &(0x7f0000000180)) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000024c0)={0x6, 0x0, [{0x5000, 0xb5, &(0x7f0000000240)=""/181}, {0xdddd1000, 0x1000, &(0x7f0000000300)=""/4096}, {0xe000, 0xbc, &(0x7f0000001300)=""/188}, {0x1000, 0x1000, &(0x7f00000013c0)=""/4096}, {0xe000, 0x1b, &(0x7f00000023c0)=""/27}, {0x58000, 0xab, &(0x7f0000002400)=""/171}]}) r3 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r3, 0x4, 0x10001) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000025c0)) ioctl(r1, 0x3b, &(0x7f0000002600)="fa71bf66cb8caadf8d8951b332b5c6f510cedd81c7191a85b9a4a3b092b5dffc49f9315dd64df28223bee2b928ca52993d96f5421b023d796fe980f709d7d4b6b0e6d6ebfb2f1061247870d369228c98c84a77f5ac9963bfa4b7c5ef24563867b80c2a62df2f6d7a6235483ef70faed2e95fe2d097bd70514caf9e6f9a0736bd8773a96f99cc7365e90eb549c06c9496388cc202b8b58f897b0a6b6964874c542ff7ff80456826f8a3695fc914d04a85e735b33f129248cc49c9e14490df00dd01bc2c3fd3d431011e279ecdd4afcd0b8fb0ecd6ca03359e0db29f4f875619d7b3ad128166") r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000002740)) waitid(0x0, r3, &(0x7f0000002780), 0x1, &(0x7f0000002800)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000028c0)={@id={0x2, 0x0, @d}}) accept4$packet(r5, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002980)=0x14, 0x80800) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r6 = creat(&(0x7f00000029c0)='./file0\x00', 0x8) mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000002a00)={0x0, 0x0, @pic={0x0, 0xe, 0xa, 0x6, 0x1, 0xfc, 0xff, 0x3, 0x1, 0x5, 0xfb, 0xfd, 0xa5, 0x4b, 0x5, 0x20}}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002c40), &(0x7f0000002c80)=0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', 0x204080, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, &(0x7f0000002d00)={r2}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000002d40)={0xffffffff, 0x30000, 0x1, 0x0, 0x93}) waitid(0x2, r3, &(0x7f0000002d80), 0x40000000, &(0x7f0000002e00)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000002f00)={'sit0\x00', &(0x7f0000002ec0)={@private=0xa010102, 0x1, 0x0, 0x10, 0x0, [{@initdev}]}}) 2.661404056s ago: executing program 3 (id=180): r0 = socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 2.634660217s ago: executing program 2 (id=181): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) (async) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904214000020d00"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904214000020d00"], 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) dup3(r0, r1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x586d8000) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x586d8000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000000240)=[{0xfffffffffffffffc, 0x4}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x2}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8982, &(0x7f0000000b40)={'bridge_slave_0\x00'}) mmap(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xffffb000) 2.570762478s ago: executing program 3 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff0000000705810240000007050202", @ANYRES64], 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002000)={'batadv0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r5 = syz_usb_connect$cdc_ncm(0x4, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x5, 0x40, 0x8b, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "dc1a043469cf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xe, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x8, 0x6, 0x1, 0x6, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x60, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x9, 0x5}}}}}}}]}}, &(0x7f0000002900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x1, 0x2, 0xe, 0x8, 0xf}, 0x8, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "007937a8ba712fd6a5bd792aed34d51b229c4311dec9fece84789aea2ddb4305fbbcc426a8e259339dbd9ba9529de13674d9e9b87a9a89299c063f6db1c41d9995c49950c3437d58e97711ea158c98230744094c07640958aa66ffd5fc"}}, {0xc2, &(0x7f00000027c0)=@string={0xc2, 0x3, "b38e97004c00c55b927a26872b48e47e3d7d88c0010b7673e8b7441896ae425cf34920eb8fad0691c1a6e1148b00e1dcdbbd4a317c8335a1cbd63c9d156e2b786740c4167334d88d330be4b9217371c57e2dbf9da7663b0f8c5b91ffb33a633536283610d162d1095ee52727d37243e82971a201c378880345772a1714c6ed3e8a183dd10c61859c120fc04c6991076b3c730e4bb78cf1b64af698adf30eac9075c77328e60701955331a4965693b23a2cdf32b864a2c572d5aefa7ad330ee90"}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000002ac0)={0x14, &(0x7f0000002940)={0x20, 0x0, 0x101, {0x101, 0xc, "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"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d00)={0x44, &(0x7f0000002b00)={0x0, 0x15, 0x32, "a60a18d6703051fcb368abc7fb7de1dca0054083acf0e44de8c675d16c68126fa4f5a4c9e964a90b2dda2ccdbb112f991cd1"}, &(0x7f0000002b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002b80)={0x0, 0x8, 0x1}, &(0x7f0000002bc0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x2, 0x1ff, 0x2, 0x8, 0x381b, 0xe, 0x9, 0xfff, 0x7, 0x6fb4}}, &(0x7f0000002c00)={0x20, 0x85, 0x4, 0x9b}, &(0x7f0000002c40)={0x20, 0x83, 0x2}, &(0x7f0000002c80)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000002cc0)={0x20, 0x89, 0x2, 0x1}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r7, 0x1, 0xc, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000080)="5ce9fab8eee90326b6cd24dbd11710299a61572148eaee4d808787011b026d0f2d08f88d85fef4baed4227dcd591647d6088d0815803be7aa83fae314ced69bf215a77413904", 0x46}, {&(0x7f0000000100)="185c609870cb9a10ae87a3b6225c19de4896bbbbacd60da1871d519b6ab96da2f0345acb63adae5a01d00dc7427cb88201662df5892bcbbb4b34cb7d305e5036f45f99ecb4ae13360d5b3f29653b629a9984bf4edb88be9d241b559031d8b78447da92b3b715c59761232974fb47d8d92b4ef1c3bee3", 0x76}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="fc978e084dffe037afedeec40bdbe49d1f6054f0694c795419b3f0b756950a252c76d34b91965829d56f309a86c58d63ed74426052daddafff3350d7e9abc634633d31d992ae612e", 0x48}, {&(0x7f00000016c0)="f7635994430a676ffd372ad4ba973a1d7a072b93229d98bef7e62d4746f7d02a2ca522c1eca37f7d1ded1db63ee2efa995f82930653f8efe386a09b5e91a8b9f0242754541704ce1a44a8a08372869445d6f9c278d256138709a630a4f8729c21e6cc3bfc60513cb4689bd4d48a8065ee2707df777c8717751815b00c42e6a8042d57602a0071ad224ceadcfced92baf66f8d45e3202b0e5fe65171c00601450c10bdfebe2300b7b2f08f29ad7308fa13c8270d4a2241a7c369686d0b14c2cc716869ce3afbe8a2335fbddbc6cdd754877a47f769ac19ee33906e29c9ae1d181e1a39e060fea293eafa09a8badb651bf74fc78", 0xf3}, {&(0x7f00000017c0)="1bcb0c56407b108a718568bd2f032391d717dc1409697c9fb9acf36d78776f93feed9d58106c93d39a288625dba6f4b7ce1f9f3eb2eb453a6949bd01e9aa9813029507b95c4a131896e6003840ad0c6b61156da0a60fe9ef7e3855581ad371d4884f0318aee16f2e8489f5be78237ac09d1673aea7674472b6a76c071419258abd0616100487ab0a16d70832f7cb392793e33531e1fad7839ede3e8f175e010d0ef6290de0f9ef8c312ddb1c42ff4a9d52798a3cce83a19c0c11cab41657037f728d0376eea4718f57e8be8bebeec800821f4e4f9f5a77abbbda78848e583364081c4f07ca5b0a4302f6ca407b8a9eca89e3c086", 0xf4}], 0x6, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0x50}}, {{&(0x7f0000001a40)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001a80)="7db8cf511697d0e7ee57e9d2658647c3517f1c2f00d26b8b1ab03697dcc0b46a03cf828f4c970d5562e7e1970c4a47696dcfabfe7411499c3aa71c01d5a131e2769caeec5dded84386872eec6979aa4bff9020519ac1127e95fca1f6ee5e149de24d8ec801bca407dbf333c642699bb3abcf31635d0bc826cb4d3ee7cb156322a021b3d559ce4eefb341b41617", 0x8d}, {&(0x7f0000001b40)="8f9c7844cf24acd6c213ee471d0bca5e2a7d8d73dc5c174ab917c1c4364c78ed39583b8363b63977d4a0a9506389e12bfdb0ee872f5f4e362debfcd7993535f269ef9f9eae8d4fb08849d8a3b9d67084aeef18091a5d74b36b41d7658b385a920ab73326928b1c5c6fe07437b2ed75cede73bcb9d9368add55db4199611e8eb205223745ebd835b420f539866d4658c8a4f51d223febfba93bba4bc144921274dfff48a81741b2d862b8275ca797bbcdd12affaf2106e860794fb1857d745aded6e315255cf1dcc5e0df979b803c13d2", 0xd0}, {&(0x7f0000001c40)="c6465290311ed4af8c3b28c85d5ae436396015be3a0f95507ed95bff81b3e310df70c86cdd946cf44dd1ba949c78f93b87462d579ef2ccef958546a6e2c54e159bbe8fc2c34a71bb558b90c272cb3192a799671a1d60c91b486f41634ff66c5007bc8b491cad0682a327e727", 0x6c}, {&(0x7f0000001cc0)="c84c893c6e455f3bccf6c6256762ce85319ee94cdfc83bc4185c4455e3824e63056f0d99d002b7e1307cd61a90425095a321ee930d3babbe7fceaf5da95046630214ec3d3fa72d5ca69da3a521847c469dc1e4b6621974a7aeb0e2a0333b01c22d4a8c7727358e056e548c355f483631f0afaaf879fcc6cab8c9a6af5ea8eca75477b0dc26c8c55544f29ee7", 0x8c}, {&(0x7f0000001d80)="a5342bbc2cd8cb1dcab1fc21c8006551ee536d99b1ddabe2546b8b4df093cb2ddd7383d06e6b2021f12c5cc820c56d515fe185f1b964a785b06dc9ef029c0a3826e599651f71de2520b9590e2f92a572e69fb05dd00e57bfeb68a9b4a02ea4bf5afa94633e6ff61194905eb10af40e1f27cfad1384b11569ebed4db98b0ac7e11e62211bd72b22861351e3181ff6f6ff47c901c39622", 0x96}, {&(0x7f0000001e40)="0b35670fb40d00dbd7e2cc24e48a1978a667c94e07c99a8c1906d8280be2dc540fe2579189a60035eb", 0x29}, {&(0x7f0000001e80)="736c9229333fd2d8988a731be54c4e3366ea634d4a67875224e22b19cb48a7002b9276656af98de6c76aff6a57823ac655e8dc3a026bb71b7e3d1b", 0x3b}, {0xfffffffffffffffe}, {&(0x7f0000001ec0)="ba7ba406efa6112c9907fbcdeb2004f2e0f9c156501f437990a45b6f119358945b18652e16b01d5f6472cb76858bc48346ced9494ed4f483ed96", 0x3a}, {&(0x7f0000001f00)="038cd91addf73636eb3e49e073ed4d", 0xf}], 0xa, &(0x7f0000002040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x86, 0x3, "a4"}, @noop, @cipso={0x86, 0x1b, 0x3, [{0x2, 0xe, "b08ca8f22f073f7580624581"}, {0x7, 0x7, "c11da5a84f"}]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x4, [0x1, 0x80000000]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xd8}}, {{&(0x7f0000002140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000002180)="fba1ae7ba98fbd6ad473453189d9e27803e274a7e141131d281800a38c4615480200a75b09b1c8606bc4a01dbd4d", 0x2e}, {&(0x7f00000021c0)="e7d84aa4924b32b1164d988fcfd7660c55a0700732c076b5926788b99e0b7fcae91ed382a2e67da79ba3bb2530833e800d989112f483522cda3eecc9bfe0b2a2df333c29d5d3402276182279096e630d021c6fbadc02958753541d4b4698e098e38198fac59465482b66fc7a64c915439a70b8bedb8a7e1dde08d4b5f8f9da27e7f6ef2728c1a45760a9a6b70bc8c0519b3ea8cfb706bd6474a2e4c53f57a0dd19577c3f3337f4ce41da3827e6afb9dc54d9e39472209c3bbd250598a75a4336aea3d5acb1c2d447341295eb9d4c990506e7f942371a5b303aadd9a67c64bad0d7cb", 0xe2}, {&(0x7f00000022c0)="9e7177d44f1c1355fec6021d5a1a0eab90", 0x11}, {&(0x7f0000002300)="a519aa646e202adf55b63e614351066cfa8b4e3189de5a75100c8a776be3bd253132e5dd033d506fa3ebd78e85e558e0ab33d1619f3611414f89cd0f88aee8a705fb3e5ff6d9275d479afdc910019047839f1a77fa9a2e46e522e23a026c481d4403437dfc4f5ccf586c8ffd56923ae2c366b1a4dbf3f9fe1197481825f9d713a1eb883ee80fe31ce3be8db25f7815b53017d841d213b71f1d2dda6572a11744adf5e8424dad110e58fae165d908232e524fcbc72d59cc0988cf2011b0357d57386d93", 0xc3}, {&(0x7f0000002400)="3868b6ec4d4e23ac452ded2d450e27bc88b80cdd94b3feea560851b83e3a10c2b7f47c90d06df61c", 0x28}, {&(0x7f0000002440)="90613802bd27e46e4a51773b1ff1b667d18d5d3b400b56531b2fb6d72e191cae39ee3c85b4d8123d4eed08e0954539367c00bc1409b202d43007efb1a74acdcaeb017d0cffdfffeb4c7b94f859589e", 0x4f}], 0x6, &(0x7f0000002540)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x1, 0x5, "4254a7"}, {0x0, 0xb, "2a7cc6316440ec8564"}, {0x2, 0xc, "95b6d3d31ae408a5fd3f"}, {0x6, 0x12, "6b7c04bc23a5dd18d294392f96cd947b"}, {0x0, 0x8, "7baef6b31005"}, {0x6, 0x11, "f374f2eb5b4602ada59418306627ff"}, {0x1, 0x5, "d7e3fa"}, {0x7, 0x9, "a8c53c4da18395"}, {0x6, 0x5, "d25ce6"}, {0x5, 0xe, "4d01a2253ee84fa47fa73405"}]}, @noop, @generic={0x89, 0x8, "fa615df69c4c"}, @ssrr={0x89, 0x2b, 0x18, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102, @private=0xa010101, @local, @remote, @rand_addr=0x64010102, @broadcast, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x67, 0x3, 0xa, [{@local, 0x7fffffff}, {@loopback, 0xa}, {@remote, 0x1}, {@rand_addr=0x64010102, 0x80}, {@rand_addr=0x64010101, 0x715}, {@local, 0xbd7}]}, @end]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0x1, [{0x6, 0x12, "e133ca94233a7a52ecf1c49a71e36d92"}, {0x6, 0xe, "f398ef84a4e1f3a9cfe958ed"}, {0x7, 0x5, 'A1$'}, {0x6, 0xa, "c9946c9c0bdcc781"}, {0x0, 0x2}]}]}}}], 0x188}}], 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000001080)=ANY=[], 0xa20) 2.352574983s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) 311.215802ms ago: executing program 3 (id=183): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x1ff, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0xc0000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x9, 0xfffffffb, 0x39, 0x747d5e13, 0x803, 0xfffffb9a, 0xfffffffe, 0x5, 0xfffffbfb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x6, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0x1a, 0x8da8, 0x2, 0x200, 0x6, 0x5, 0x8, 0x4, 0x2, 0x6, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x2, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffa, 0x3, 0x3, 0x297, 0x8, 0x0, 0x200000a, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x2000001, 0xffffffff, 0x6, 0x2000008, 0x800, 0x4fdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x400004, 0x5, 0x200003, 0x100, 0x5, 0x4, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x9, 0xb, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x8, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x8, 0x5, 0x3fa6, 0x4, 0x5, 0x5, 0x8003, 0x4, 0xe48, 0x4, 0x3, 0x4, 0x0, 0x7, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0x1, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0x3, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/203, 0xcb}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000200)={0xffffffffffffffff, 0xe}) fcntl$setpipe(r1, 0x407, 0x7000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x0, 0x7f, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2f, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x182, 0x1, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x8000000002004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x8, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0xa, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x6, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x0, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x3c2, 0x6, 0x100000000001], 0x8000000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000000380)={0x1, 0xc}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 310.768192ms ago: executing program 0 (id=191): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = memfd_secret(0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYRES64=r0], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 310.523162ms ago: executing program 2 (id=184): mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@rnullb, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000200)='affs\x00', 0x10000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f00004e1000/0x3000)=nil, 0x3000, 0x3000001) mkdirat(0xffffffffffffff9c, 0x0, 0x150) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f00004df000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4048050) socket$inet6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x22, 0x2, "cfa7"}, 0x22, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffe, @empty, 0x7}, 0x1c) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file1'}, 0xb) clock_gettime(0x0, &(0x7f0000001bc0)) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2004000) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/150, 0x96) 0s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a25239"], 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 21.751895][ T36] audit: type=1400 audit(1788876488.279:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.753021][ T286] cgroup: Unknown subsys name 'net' [ 21.774573][ T36] audit: type=1400 audit(1788876488.279:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.801841][ T36] audit: type=1400 audit(1788876488.309:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.821726][ T286] cgroup: Unknown subsys name 'devices' [ 21.921686][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.927276][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.019260][ T36] audit: type=1400 audit(1788876488.539:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.042448][ T36] audit: type=1400 audit(1788876488.539:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.066042][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.067344][ T36] audit: type=1400 audit(1788876488.539:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.098774][ T36] audit: type=1400 audit(1788876488.609:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.106789][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.124143][ T36] audit: type=1400 audit(1788876488.609:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.158359][ T36] audit: type=1400 audit(1788876488.639:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.183877][ T36] audit: type=1400 audit(1788876488.639:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.945392][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.952463][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.959503][ T293] bridge_slave_0: entered allmulticast mode [ 22.965800][ T293] bridge_slave_0: entered promiscuous mode [ 22.976553][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.983613][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.990704][ T293] bridge_slave_1: entered allmulticast mode [ 22.996860][ T293] bridge_slave_1: entered promiscuous mode [ 23.027128][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.034239][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.041367][ T295] bridge_slave_0: entered allmulticast mode [ 23.047477][ T295] bridge_slave_0: entered promiscuous mode [ 23.053911][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.060959][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.068000][ T295] bridge_slave_1: entered allmulticast mode [ 23.074302][ T295] bridge_slave_1: entered promiscuous mode [ 23.080353][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.087420][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.094488][ T296] bridge_slave_0: entered allmulticast mode [ 23.100641][ T296] bridge_slave_0: entered promiscuous mode [ 23.112921][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.119987][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.127016][ T294] bridge_slave_0: entered allmulticast mode [ 23.133257][ T294] bridge_slave_0: entered promiscuous mode [ 23.142388][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.149412][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.156458][ T294] bridge_slave_1: entered allmulticast mode [ 23.162659][ T294] bridge_slave_1: entered promiscuous mode [ 23.168636][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.175712][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.182779][ T296] bridge_slave_1: entered allmulticast mode [ 23.188927][ T296] bridge_slave_1: entered promiscuous mode [ 23.340537][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.347589][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.354876][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.361910][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.380893][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.387933][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.395206][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.402233][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.410815][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.417842][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.425110][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.432134][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.460651][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.467701][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.474985][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.482014][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.510043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.517283][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.524791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.532013][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.539238][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.546788][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.553993][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.561310][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.581426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.588444][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.595966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.603011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.621964][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.628987][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.636502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.643547][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.651061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.658066][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.665549][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.672573][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.700858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.707906][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.718830][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.725890][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.747794][ T296] veth0_vlan: entered promiscuous mode [ 23.769742][ T296] veth1_macvtap: entered promiscuous mode [ 23.779434][ T295] veth0_vlan: entered promiscuous mode [ 23.799658][ T293] veth0_vlan: entered promiscuous mode [ 23.818315][ T294] veth0_vlan: entered promiscuous mode [ 23.830872][ T293] veth1_macvtap: entered promiscuous mode [ 23.837323][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.854765][ T295] veth1_macvtap: entered promiscuous mode [ 23.875705][ T294] veth1_macvtap: entered promiscuous mode [ 23.953930][ T316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=316 comm=syz.0.1 [ 23.963906][ T323] FAULT_INJECTION: forcing a failure. [ 23.963906][ T323] name failslab, interval 1, probability 0, space 0, times 1 [ 23.983322][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.1.2 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 23.983353][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.983373][ T323] Call Trace: [ 23.983379][ T323] [ 23.983388][ T323] __dump_stack+0x21/0x30 [ 23.983425][ T323] dump_stack_lvl+0x140/0x1c0 [ 23.983452][ T323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.983480][ T323] ? cred_has_capability+0x296/0x3a0 [ 23.983501][ T323] dump_stack+0x19/0x20 [ 23.983527][ T323] should_fail_ex+0x3c2/0x510 [ 23.983551][ T323] should_failslab+0xac/0x100 [ 23.983575][ T323] __kmalloc_cache_noprof+0x41/0x470 [ 23.983596][ T323] ? fuse_get_tree+0x82/0x640 [ 23.983616][ T323] fuse_get_tree+0x82/0x640 [ 23.983634][ T323] vfs_get_tree+0x9e/0x290 [ 23.983660][ T323] do_new_mount+0x251/0xb40 [ 23.983681][ T323] ? security_capable+0x44/0x130 [ 23.983705][ T323] path_mount+0x66a/0xff0 [ 23.983725][ T323] ? putname+0x113/0x150 [ 23.983748][ T323] __se_sys_mount+0x2bf/0x480 [ 23.983770][ T323] ? __x64_sys_mount+0xf0/0xf0 [ 23.983792][ T323] ? __kasan_check_write+0x18/0x20 [ 23.983812][ T323] ? fpregs_restore_userregs+0x11c/0x260 [ 23.983837][ T323] __x64_sys_mount+0xc3/0xf0 [ 23.983858][ T323] x64_sys_call+0x2021/0x2ee0 [ 23.983876][ T323] do_syscall_64+0x57/0xf0 [ 23.983903][ T323] ? clear_bhb_loop+0x50/0xa0 [ 23.983926][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.983947][ T323] RIP: 0033:0x7fdb53b9e159 [ 23.983968][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.983984][ T323] RSP: 002b:00007fdb54b20028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 23.984012][ T323] RAX: ffffffffffffffda RBX: 00007fdb53e25fa0 RCX: 00007fdb53b9e159 [ 23.984028][ T323] RDX: 0000200000002100 RSI: 0000200000000200 RDI: 0000000000000000 [ 23.984042][ T323] RBP: 00007fdb53c35024 R08: 00002000000002c0 R09: 0000000000000000 [ 23.984057][ T323] R10: 0000000000014081 R11: 0000000000000246 R12: 0000000000000000 [ 23.984070][ T323] R13: 00007fdb53e26038 R14: 00007fdb53e25fa0 R15: 00007ffdcdbac278 [ 23.984087][ T323] [ 24.256867][ T328] ======================================================= [ 24.256867][ T328] WARNING: The mand mount option has been deprecated and [ 24.256867][ T328] and is ignored by this kernel. Remove the mand [ 24.256867][ T328] option from the mount to silence this warning. [ 24.256867][ T328] ======================================================= [ 24.314744][ T317] udevd[317]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 24.352384][ T317] udevd[317]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 24.569951][ T311] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.720819][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 24.733521][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.735897][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 24.748064][ T311] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 24.762414][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.767508][ T317] udevd[317]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 24.780022][ T311] usb 1-1: Found UVC 1.00 device (0000:0000) [ 24.786977][ T311] usb 1-1: No streaming interface found for terminal 2. [ 24.865176][ T370] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(1) [ 24.979932][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.992712][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.001333][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.018734][ T311] usb 1-1: USB disconnect, device number 2 [ 25.129882][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 25.136044][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.147191][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.156983][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.166180][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.174809][ T310] usb 3-1: config 0 descriptor?? [ 25.180834][ T310] hub 3-1:0.0: USB hub found [ 25.360385][ T344] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 25.366562][ T297] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.382242][ T310] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 25.659859][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.995182][ T310] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 26.006877][ T310] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 26.012193][ T391] udevd[391]: open /dev/null failed: No such file or directory [ 26.030451][ T310] usb 3-1: USB disconnect, device number 2 [ 26.110987][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.122224][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 26.136941][ T311] usb 4-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 26.146208][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.154431][ T311] usb 4-1: Product: syz [ 26.158683][ T311] usb 4-1: Manufacturer: syz [ 26.163507][ T311] usb 4-1: SerialNumber: syz [ 26.212417][ T394] FAULT_INJECTION: forcing a failure. [ 26.212417][ T394] name failslab, interval 1, probability 0, space 0, times 0 [ 26.225084][ T394] CPU: 1 UID: 0 PID: 394 Comm: syz.0.33 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 26.225113][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.225125][ T394] Call Trace: [ 26.225131][ T394] [ 26.225139][ T394] __dump_stack+0x21/0x30 [ 26.225172][ T394] dump_stack_lvl+0x140/0x1c0 [ 26.225197][ T394] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.225221][ T394] ? __x64_sys_mount+0xc3/0xf0 [ 26.225240][ T394] dump_stack+0x19/0x20 [ 26.225263][ T394] should_fail_ex+0x3c2/0x510 [ 26.225286][ T394] should_failslab+0xac/0x100 [ 26.225309][ T394] __kmalloc_cache_node_noprof+0x46/0x430 [ 26.225326][ T394] ? bdi_alloc+0x62/0x1d0 [ 26.225340][ T394] bdi_alloc+0x62/0x1d0 [ 26.225353][ T394] super_setup_bdi_name+0xbf/0x210 [ 26.225364][ T394] ? _raw_spin_lock+0x92/0x120 [ 26.225378][ T394] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 26.225390][ T394] ? _raw_spin_unlock+0x45/0x60 [ 26.225412][ T394] ? fuse_dev_install+0x17a/0x1b0 [ 26.225427][ T394] fuse_fill_super_common+0x6d1/0x1450 [ 26.225442][ T394] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 26.225456][ T394] ? _raw_spin_lock+0x92/0x120 [ 26.225471][ T394] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.225486][ T394] ? __kasan_check_write+0x18/0x20 [ 26.225496][ T394] ? shrinker_register+0x162/0x220 [ 26.225508][ T394] fuse_fill_super+0x71/0x250 [ 26.225518][ T394] get_tree_nodev+0xcb/0x170 [ 26.225527][ T394] ? __cfi_fuse_fill_super+0x10/0x10 [ 26.225536][ T394] fuse_get_tree+0x2cb/0x640 [ 26.225545][ T394] vfs_get_tree+0x9e/0x290 [ 26.225556][ T394] do_new_mount+0x251/0xb40 [ 26.225566][ T394] ? security_capable+0x44/0x130 [ 26.225578][ T394] path_mount+0x66a/0xff0 [ 26.225587][ T394] ? putname+0x113/0x150 [ 26.225599][ T394] __se_sys_mount+0x2bf/0x480 [ 26.225609][ T394] ? __x64_sys_mount+0xf0/0xf0 [ 26.225620][ T394] ? __kasan_check_write+0x18/0x20 [ 26.225630][ T394] ? fpregs_restore_userregs+0x11c/0x260 [ 26.225643][ T394] __x64_sys_mount+0xc3/0xf0 [ 26.225654][ T394] x64_sys_call+0x2021/0x2ee0 [ 26.225663][ T394] do_syscall_64+0x57/0xf0 [ 26.225677][ T394] ? clear_bhb_loop+0x50/0xa0 [ 26.225689][ T394] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.225700][ T394] RIP: 0033:0x7f7405b9e159 [ 26.225710][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.225719][ T394] RSP: 002b:00007f74069b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.225732][ T394] RAX: ffffffffffffffda RBX: 00007f7405e25fa0 RCX: 00007f7405b9e159 [ 26.225740][ T394] RDX: 0000200000002100 RSI: 0000200000000200 RDI: 0000000000000000 [ 26.225747][ T394] RBP: 00007f7405c35024 R08: 00002000000002c0 R09: 0000000000000000 [ 26.225754][ T394] R10: 0000000000014081 R11: 0000000000000246 R12: 0000000000000000 [ 26.225760][ T394] R13: 00007f7405e26038 R14: 00007f7405e25fa0 R15: 00007fff383b7338 [ 26.225769][ T394] [ 26.372632][ T311] usb 4-1: USB disconnect, device number 2 [ 26.674166][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.879859][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 26.886046][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.896345][ T310] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.905316][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.914394][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.925245][ T310] usb 3-1: config 0 descriptor?? [ 26.932501][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 26.932515][ T36] audit: type=1400 audit(1788876493.459:164): avc: denied { read } for pid=401 comm="syz.3.36" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.932956][ T402] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.938597][ T36] audit: type=1400 audit(1788876493.459:165): avc: denied { open } for pid=401 comm="syz.3.36" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.938623][ T36] audit: type=1400 audit(1788876493.459:166): avc: denied { ioctl } for pid=401 comm="syz.3.36" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.078102][ T36] audit: type=1400 audit(1788876493.599:167): avc: denied { read write } for pid=404 comm="syz.3.37" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.081064][ T310] kernel write not supported for file /ppp (pid: 310 comm: kworker/0:2) [ 27.100959][ T36] audit: type=1400 audit(1788876493.599:168): avc: denied { open } for pid=404 comm="syz.3.37" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.131933][ T36] audit: type=1400 audit(1788876493.599:169): avc: denied { ioctl } for pid=404 comm="syz.3.37" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.147280][ T310] usb 3-1: USB disconnect, device number 3 [ 27.188223][ T36] audit: type=1400 audit(1788876493.709:170): avc: denied { read } for pid=406 comm="syz.3.38" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.226697][ T36] audit: type=1400 audit(1788876493.749:171): avc: denied { read } for pid=412 comm="syz.3.41" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.247544][ T36] audit: type=1400 audit(1788876493.749:172): avc: denied { open } for pid=412 comm="syz.3.41" path="net:[4026532469]" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.270638][ T36] audit: type=1400 audit(1788876493.749:173): avc: denied { setopt } for pid=412 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.300461][ T417] FAULT_INJECTION: forcing a failure. [ 27.300461][ T417] name failslab, interval 1, probability 0, space 0, times 0 [ 27.313120][ T417] CPU: 1 UID: 0 PID: 417 Comm: syz.3.43 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 27.313149][ T417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.313161][ T417] Call Trace: [ 27.313168][ T417] [ 27.313176][ T417] __dump_stack+0x21/0x30 [ 27.313207][ T417] dump_stack_lvl+0x140/0x1c0 [ 27.313232][ T417] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.313262][ T417] ? netlink_unicast+0x8bf/0xa70 [ 27.313286][ T417] ? __x64_sys_sendmsg+0x1be/0x2a0 [ 27.313312][ T417] ? do_syscall_64+0x57/0xf0 [ 27.313338][ T417] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.313360][ T417] dump_stack+0x19/0x20 [ 27.313383][ T417] should_fail_ex+0x3c2/0x510 [ 27.313413][ T417] should_failslab+0xac/0x100 [ 27.313437][ T417] __kmalloc_node_noprof+0x69/0x500 [ 27.313459][ T417] ? down_read+0x7f/0xe0 [ 27.313481][ T417] ? crypto_create_tfm_node+0xa0/0x4d0 [ 27.313500][ T417] ? __cfi_down_read+0x10/0x10 [ 27.313523][ T417] crypto_create_tfm_node+0xa0/0x4d0 [ 27.313540][ T417] ? up_read+0x26/0x1c0 [ 27.313566][ T417] crypto_spawn_tfm2+0x60/0x90 [ 27.313595][ T417] crypto_authenc_init_tfm+0x4b/0x1d0 [ 27.313617][ T417] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 27.313638][ T417] crypto_aead_init_tfm+0x11e/0x1a0 [ 27.313665][ T417] crypto_create_tfm_node+0x199/0x4d0 [ 27.313684][ T417] crypto_alloc_tfm_node+0x166/0x350 [ 27.313704][ T417] crypto_alloc_aead+0x34/0x40 [ 27.313729][ T417] esp_init_state+0x621/0x1280 [ 27.313751][ T417] ? x64_sys_call+0x2a4c/0x2ee0 [ 27.313769][ T417] ? do_syscall_64+0x57/0xf0 [ 27.313794][ T417] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.313816][ T417] ? __cfi_esp_init_state+0x10/0x10 [ 27.313842][ T417] ? kasan_save_alloc_info+0x3a/0x50 [ 27.313860][ T417] ? __xfrm_init_state+0x3db/0xf70 [ 27.313878][ T417] ? __asan_memcpy+0x5a/0x80 [ 27.313897][ T417] __xfrm_init_state+0xaf9/0xf70 [ 27.313916][ T417] xfrm_add_sa+0x2560/0x37b0 [ 27.313941][ T417] ? __cfi_xfrm_add_sa+0x10/0x10 [ 27.313966][ T417] xfrm_user_rcv_msg+0x699/0x900 [ 27.313991][ T417] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 27.314019][ T417] ? __asan_memcpy+0x5a/0x80 [ 27.314038][ T417] ? avc_has_perm_noaudit+0x289/0x360 [ 27.314063][ T417] ? avc_has_perm+0x155/0x240 [ 27.314085][ T417] netlink_rcv_skb+0x24d/0x4e0 [ 27.314111][ T417] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 27.314136][ T417] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 27.314160][ T417] ? __kasan_check_write+0x18/0x20 [ 27.314178][ T417] ? mutex_lock+0x97/0x1d0 [ 27.314196][ T417] ? __cfi_mutex_lock+0x10/0x10 [ 27.314215][ T417] ? netlink_autobind+0x1c0/0x1c0 [ 27.314233][ T417] xfrm_netlink_rcv+0x76/0x90 [ 27.314246][ T417] netlink_unicast+0x8bf/0xa70 [ 27.314258][ T417] netlink_sendmsg+0x7d1/0xad0 [ 27.314271][ T417] ? __cfi_netlink_sendmsg+0x10/0x10 [ 27.314284][ T417] ? __futex_queue+0x19f/0x350 [ 27.314297][ T417] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 27.314309][ T417] ? security_socket_sendmsg+0x3d/0x100 [ 27.314323][ T417] ____sys_sendmsg+0x99e/0xa00 [ 27.314336][ T417] ? __import_iovec+0x5b9/0x7d0 [ 27.314350][ T417] ? __sys_sendmsg_sock+0x50/0x50 [ 27.314364][ T417] ? import_iovec+0x80/0xb0 [ 27.314378][ T417] ___sys_sendmsg+0x2a6/0x370 [ 27.314391][ T417] ? __sys_sendmsg+0x260/0x260 [ 27.314411][ T417] ? __cfi_futex_wait+0x10/0x10 [ 27.314423][ T417] ? __fget_files+0x2bc/0x330 [ 27.314437][ T417] __x64_sys_sendmsg+0x1be/0x2a0 [ 27.314451][ T417] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 27.314465][ T417] ? __kasan_check_write+0x18/0x20 [ 27.314476][ T417] ? fpregs_restore_userregs+0x11c/0x260 [ 27.314489][ T417] ? switch_fpu_return+0x12/0x20 [ 27.314501][ T417] x64_sys_call+0x2a4c/0x2ee0 [ 27.314511][ T417] do_syscall_64+0x57/0xf0 [ 27.314525][ T417] ? clear_bhb_loop+0x50/0xa0 [ 27.314537][ T417] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.314548][ T417] RIP: 0033:0x7f492399e159 [ 27.314559][ T417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.314568][ T417] RSP: 002b:00007f49248a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 27.314580][ T417] RAX: ffffffffffffffda RBX: 00007f4923c25fa0 RCX: 00007f492399e159 [ 27.314588][ T417] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000005 [ 27.314594][ T417] RBP: 00007f4923a35024 R08: 0000000000000000 R09: 0000000000000000 [ 27.314601][ T417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.314607][ T417] R13: 00007f4923c26038 R14: 00007f4923c25fa0 R15: 00007ffcc7ecb758 [ 27.314616][ T417] [ 27.490043][ T346] Bluetooth: hci0: command 0x0401 tx timeout [ 27.508234][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.878030][ T428] syzkaller0: entered promiscuous mode [ 27.887351][ T428] syzkaller0: entered allmulticast mode [ 29.929620][ T317] udevd[317]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 29.967420][ T317] udevd[317]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 30.441352][ T45] bridge_slave_1: left allmulticast mode [ 30.479838][ T45] bridge_slave_1: left promiscuous mode [ 30.485489][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.512363][ T45] bridge_slave_0: left allmulticast mode [ 30.518023][ T45] bridge_slave_0: left promiscuous mode [ 30.549898][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.783441][ T45] veth1_macvtap: left promiscuous mode [ 30.788992][ T45] veth0_vlan: left promiscuous mode [ 31.129851][ T50] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.291084][ T50] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 31.322192][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.341654][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.351696][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.379387][ T50] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 31.398625][ T50] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 31.408712][ T50] usb 4-1: Manufacturer: syz [ 31.442021][ T50] usb 4-1: config 0 descriptor?? [ 31.647500][ T562] SELinux: failed to load policy [ 32.128707][ T50] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 32.136348][ T50] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 32.144900][ T50] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 32.149574][ T567] udevd[567]: open /dev/null failed: No such file or directory [ 32.157519][ T50] usb 4-1: USB disconnect, device number 3 [ 32.325194][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 32.325209][ T36] audit: type=1400 audit(1788876498.849:200): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.432449][ T576] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure [ 33.209881][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.239849][ T371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.360846][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.370968][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.380614][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.390284][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.402366][ T371] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 33.403063][ T311] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 33.412318][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.421083][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.429275][ T371] usb 1-1: Product: syz [ 33.441292][ T371] usb 1-1: Manufacturer: syz [ 33.445888][ T371] usb 1-1: SerialNumber: syz [ 33.717057][ T36] audit: type=1400 audit(1788876500.239:201): avc: denied { write } for pid=604 comm="syz.2.115" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.751163][ T607] capability: warning: `syz.2.116' uses 32-bit capabilities (legacy support in use) [ 33.772114][ T36] audit: type=1400 audit(1788876500.299:202): avc: denied { create } for pid=609 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.793245][ T36] audit: type=1400 audit(1788876500.329:203): avc: denied { write } for pid=609 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.727162][ T36] audit: type=1400 audit(1788876501.249:204): avc: denied { connect } for pid=618 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.747105][ T36] audit: type=1400 audit(1788876501.269:205): avc: denied { ioctl } for pid=618 comm="syz.2.119" path="socket:[3921]" dev="sockfs" ino=3921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.780036][ T36] audit: type=1400 audit(1788876501.269:206): avc: denied { write } for pid=618 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.984101][ T371] usb 4-1: USB disconnect, device number 4 [ 36.006192][ T311] usb 1-1: USB disconnect, device number 3 [ 36.618063][ T36] audit: type=1400 audit(1788876503.139:207): avc: denied { read } for pid=632 comm="syz.3.125" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.711335][ T36] audit: type=1400 audit(1788876503.139:208): avc: denied { open } for pid=632 comm="syz.3.125" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.734602][ T36] audit: type=1400 audit(1788876503.219:209): avc: denied { ioctl } for pid=632 comm="syz.3.125" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.049887][ T371] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.200844][ T371] usb 4-1: config 7 has an invalid interface number: 177 but max is 1 [ 37.209021][ T371] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 37.219137][ T371] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 37.228014][ T371] usb 4-1: config 7 has no interface number 0 [ 37.234106][ T371] usb 4-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 37.247144][ T371] usb 4-1: config 7 interface 177 has no altsetting 0 [ 37.255257][ T371] usb 4-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 37.264330][ T371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.272337][ T371] usb 4-1: Product: syz [ 37.276488][ T371] usb 4-1: Manufacturer: syz [ 37.281676][ T371] usb 4-1: SerialNumber: syz [ 37.490457][ T371] usb 4-1: bad CDC descriptors [ 37.496143][ T371] usb 4-1: USB disconnect, device number 5 [ 37.933182][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 37.933198][ T36] audit: type=1400 audit(1788876504.459:211): avc: denied { create } for pid=657 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.959665][ T36] audit: type=1400 audit(1788876504.479:212): avc: denied { bind } for pid=657 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.979270][ T36] audit: type=1400 audit(1788876504.479:213): avc: denied { listen } for pid=657 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.015984][ T36] audit: type=1400 audit(1788876504.479:214): avc: denied { connect } for pid=657 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.159903][ T371] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.310916][ T371] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.322248][ T371] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.335028][ T371] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.341674][ T371] usb 1-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 38.350701][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.359142][ T371] usb 1-1: config 0 descriptor?? [ 38.931244][ T36] audit: type=1400 audit(1788876505.439:215): avc: denied { map } for pid=648 comm="syz.0.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.959365][ T36] audit: type=1400 audit(1788876505.439:216): avc: denied { write } for pid=648 comm="syz.0.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.983421][ T36] audit: type=1400 audit(1788876505.439:217): avc: denied { map } for pid=648 comm="syz.0.129" path="socket:[4027]" dev="sockfs" ino=4027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.185227][ T36] audit: type=1400 audit(1788876505.709:218): avc: denied { create } for pid=663 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.206828][ T36] audit: type=1400 audit(1788876505.739:219): avc: denied { bind } for pid=663 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.226604][ T36] audit: type=1400 audit(1788876505.739:220): avc: denied { connect } for pid=663 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.389871][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.549842][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 39.556095][ T311] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.565900][ T311] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 39.575663][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.583716][ T311] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 39.592792][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.600825][ T311] usb 4-1: Product: syz [ 39.604984][ T311] usb 4-1: Manufacturer: syz [ 39.609563][ T311] usb 4-1: SerialNumber: syz [ 39.615280][ T311] usb 4-1: config 0 descriptor?? [ 40.888622][ T371] usbhid 1-1:0.0: can't add hid device: -71 [ 40.896786][ T371] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 40.906608][ T371] usb 1-1: USB disconnect, device number 4 [ 42.166801][ T310] usb 4-1: USB disconnect, device number 6 [ 42.209840][ T311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 42.380947][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.391997][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.405045][ T311] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 42.414215][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.423088][ T311] usb 3-1: config 0 descriptor?? [ 42.834635][ T311] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0003/input/input4 [ 42.847171][ T311] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0003/input/input5 [ 42.864012][ T311] kye 0003:0458:5005.0003: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 42.868389][ T693] udevd[693]: open /dev/null failed: No such file or directory [ 43.093165][ T36] audit: type=1400 audit(1788876509.619:221): avc: denied { bind } for pid=689 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.114066][ T50] usb 3-1: USB disconnect, device number 4 [ 43.513736][ T36] audit: type=1400 audit(1788876510.039:222): avc: denied { append } for pid=696 comm="syz.3.144" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.642935][ T36] audit: type=1400 audit(1788876510.169:223): avc: denied { shutdown } for pid=696 comm="syz.3.144" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.769892][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.919900][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 43.926324][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.934800][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 43.947262][ T311] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 43.956330][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.964355][ T311] usb 1-1: Product: syz [ 43.968494][ T311] usb 1-1: Manufacturer: syz [ 43.973181][ T311] usb 1-1: SerialNumber: syz [ 44.180013][ T699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.188643][ T699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.197654][ T699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.206149][ T699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.217308][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.224228][ T311] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.234140][ T311] usb 1-1: USB disconnect, device number 5 [ 44.243469][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.117816][ T706] netlink: 'syz.0.145': attribute type 3 has an invalid length. [ 45.118544][ T36] audit: type=1400 audit(1788876511.639:224): avc: denied { ioctl } for pid=705 comm="syz.3.147" path="socket:[5184]" dev="sockfs" ino=5184 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.149837][ T706] netlink: 'syz.0.145': attribute type 3 has an invalid length. [ 45.184212][ T36] audit: type=1400 audit(1788876511.709:225): avc: denied { read } for pid=713 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.305047][ T36] audit: type=1326 audit(1788876511.829:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.2.149" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97b19e159 code=0x0 [ 46.924490][ T36] audit: type=1400 audit(1788876513.449:227): avc: denied { write } for pid=726 comm="syz.0.152" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.962071][ T733] MTRR 1 not used [ 46.963889][ T36] audit: type=1400 audit(1788876513.489:228): avc: denied { read write } for pid=732 comm="syz.3.155" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 47.000290][ T36] audit: type=1400 audit(1788876513.489:229): avc: denied { open } for pid=732 comm="syz.3.155" path="/47/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 47.033564][ T36] audit: type=1400 audit(1788876513.489:230): avc: denied { ioctl } for pid=732 comm="syz.3.155" path="/47/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 47.040541][ T750] input: syz1 as /devices/virtual/input/input6 [ 47.159538][ T750] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 47.167798][ T750] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 47.175978][ T750] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 47.184085][ T750] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 47.192333][ T750] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 47.200216][ T50] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.208195][ T750] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 47.349914][ T50] usb 3-1: Using ep0 maxpacket: 32 [ 47.356050][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.366972][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.376756][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.385803][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.394304][ T50] usb 3-1: config 0 descriptor?? [ 47.400816][ T50] hub 3-1:0.0: USB hub found [ 47.601450][ T50] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 48.005069][ T50] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 48.013487][ T50] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 48.017393][ T757] udevd[757]: open /dev/null failed: No such file or directory [ 48.206101][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 48.206116][ T36] audit: type=1400 audit(1788876514.729:238): avc: denied { append } for pid=734 comm="syz.2.156" name="hidraw0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.359985][ T311] usb 3-1: USB disconnect, device number 5 [ 48.989832][ T36] audit: type=1400 audit(1788876515.509:239): avc: denied { mounton } for pid=782 comm="syz.3.171" path="/proc/133/cgroup" dev="proc" ino=5400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 49.029932][ T788] input: syz1 as /devices/virtual/input/input7 [ 49.051986][ T36] audit: type=1400 audit(1788876515.509:240): avc: denied { remount } for pid=782 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.122907][ T788] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 49.130963][ T788] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 49.138923][ T788] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 49.147046][ T788] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 49.249884][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.329895][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.399864][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 49.406019][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.416932][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.426705][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.435749][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.444330][ T311] usb 4-1: config 0 descriptor?? [ 49.450176][ T311] hub 4-1:0.0: USB hub found [ 49.479868][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 49.486337][ T50] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 49.493975][ T50] usb 1-1: can't read configurations, error -61 [ 49.629939][ T50] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.650770][ T311] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 49.779895][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 49.786413][ T50] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 49.794019][ T50] usb 1-1: can't read configurations, error -61 [ 49.800409][ T50] usb usb1-port1: attempt power cycle [ 50.052689][ T311] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 50.061089][ T311] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 50.064782][ T793] udevd[793]: open /dev/null failed: No such file or directory [ 50.139901][ T50] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.160195][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 50.166563][ T50] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 50.174200][ T50] usb 1-1: can't read configurations, error -61 [ 50.309888][ T50] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.330229][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 50.336612][ T50] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 50.344232][ T50] usb 1-1: can't read configurations, error -61 [ 50.350592][ T50] usb usb1-port1: unable to enumerate USB device [ 50.399999][ T311] usb 4-1: USB disconnect, device number 7 [ 50.870588][ T796] ./dev/sda1: Can't lookup blockdev [ 50.902039][ T798] FAULT_INJECTION: forcing a failure. [ 50.902039][ T798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.915530][ T802] fuse: Bad value for 'fd' [ 50.919890][ T36] audit: type=1400 audit(1788876517.439:241): avc: denied { mounton } for pid=799 comm="syz.3.176" path="/56/file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 50.920715][ T798] CPU: 0 UID: 0 PID: 798 Comm: syz.2.175 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 50.920745][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.920757][ T798] Call Trace: [ 50.920763][ T798] [ 50.920771][ T798] __dump_stack+0x21/0x30 [ 50.920804][ T798] dump_stack_lvl+0x140/0x1c0 [ 50.920830][ T798] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.920854][ T798] ? __kasan_check_write+0x18/0x20 [ 50.920874][ T798] ? prep_new_page+0x42/0x180 [ 50.920898][ T798] dump_stack+0x19/0x20 [ 50.920920][ T798] should_fail_ex+0x3c2/0x510 [ 50.920942][ T798] should_fail_alloc_page+0xec/0x110 [ 50.920972][ T798] __alloc_pages_noprof+0x1c0/0x7e0 [ 50.921000][ T798] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 50.921030][ T798] __pud_alloc+0xb0/0x8f0 [ 50.921052][ T798] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 50.921078][ T798] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 50.921098][ T798] ? __cfi___pud_alloc+0x10/0x10 [ 50.921128][ T798] ? lruvec_init+0x261/0x280 [ 50.921152][ T798] __get_locked_pte+0x1fe/0x2a0 [ 50.921172][ T798] map_ldt_struct+0x413/0x730 [ 50.921197][ T798] ? alloc_ldt_struct+0x2f0/0x2f0 [ 50.921218][ T798] ? alloc_ldt_struct+0xf9/0x2f0 [ 50.921238][ T798] ? __kasan_check_write+0x18/0x20 [ 50.921257][ T798] write_ldt+0x5fe/0x760 [ 50.921277][ T798] ? native_write_gdt_entry+0x40/0x40 [ 50.921300][ T798] ? xfd_validate_state+0x68/0x140 [ 50.921329][ T798] __se_sys_modify_ldt+0x70/0x2e0 [ 50.921350][ T798] __x64_sys_modify_ldt+0x7f/0xa0 [ 50.921371][ T798] x64_sys_call+0x143d/0x2ee0 [ 50.921389][ T798] do_syscall_64+0x57/0xf0 [ 50.921415][ T798] ? clear_bhb_loop+0x50/0xa0 [ 50.921436][ T798] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.921456][ T798] RIP: 0033:0x7fe97b19e159 [ 50.921473][ T798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.921489][ T798] RSP: 002b:00007fe97c0d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 50.921508][ T798] RAX: ffffffffffffffda RBX: 00007fe97b425fa0 RCX: 00007fe97b19e159 [ 50.921523][ T798] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 50.921535][ T798] RBP: 00007fe97b235024 R08: 0000000000000000 R09: 0000000000000000 [ 50.921548][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.921559][ T798] R13: 00007fe97b426038 R14: 00007fe97b425fa0 R15: 00007ffde4d67a28 [ 50.921575][ T798] [ 53.139037][ T818] FAULT_INJECTION: forcing a failure. [ 53.139037][ T818] name failslab, interval 1, probability 0, space 0, times 0 [ 53.154936][ T818] CPU: 1 UID: 0 PID: 818 Comm: syz.0.178 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 53.154973][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.154986][ T818] Call Trace: [ 53.154992][ T818] [ 53.155001][ T818] __dump_stack+0x21/0x30 [ 53.155035][ T818] dump_stack_lvl+0x140/0x1c0 [ 53.155063][ T818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.155092][ T818] ? kasan_save_alloc_info+0x3a/0x50 [ 53.155112][ T818] dump_stack+0x19/0x20 [ 53.155137][ T818] should_fail_ex+0x3c2/0x510 [ 53.155160][ T818] should_failslab+0xac/0x100 [ 53.155185][ T818] __kmalloc_cache_noprof+0x41/0x470 [ 53.155206][ T818] ? file_init_path+0x3b/0x590 [ 53.155231][ T818] ? io_uring_alloc_task_context+0xbe/0x6b0 [ 53.155252][ T818] ? __asan_memcpy+0x5a/0x80 [ 53.155272][ T818] io_uring_alloc_task_context+0xbe/0x6b0 [ 53.155294][ T818] ? alloc_file_pseudo+0x191/0x1f0 [ 53.155319][ T818] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 53.155341][ T818] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 53.155366][ T818] ? anon_inode_make_secure_inode+0xf5/0x150 [ 53.155394][ T818] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 53.155423][ T818] __io_uring_add_tctx_node+0x324/0x590 [ 53.155447][ T818] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 53.155471][ T818] ? anon_inode_create_getfile+0x3f/0x50 [ 53.155508][ T818] io_uring_create+0xc78/0x13f0 [ 53.155529][ T818] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 53.155556][ T818] ? __se_sys_futex+0x13c/0x320 [ 53.155582][ T818] ? __x64_sys_io_uring_setup+0x80/0x80 [ 53.155610][ T818] ? __kasan_check_write+0x18/0x20 [ 53.155631][ T818] __x64_sys_io_uring_setup+0x5f/0x80 [ 53.155657][ T818] x64_sys_call+0x22c0/0x2ee0 [ 53.155676][ T818] do_syscall_64+0x57/0xf0 [ 53.155703][ T818] ? clear_bhb_loop+0x50/0xa0 [ 53.155726][ T818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.155747][ T818] RIP: 0033:0x7f7405b9e159 [ 53.155764][ T818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.155781][ T818] RSP: 002b:00007f74069b1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 53.155803][ T818] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f7405b9e159 [ 53.155819][ T818] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000020 [ 53.155833][ T818] RBP: 00007f7405c35024 R08: 0000000000000000 R09: 0000000000000000 [ 53.155846][ T818] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 53.155860][ T818] R13: 0000200000000140 R14: 0000200000000000 R15: 00007fff383b7338 [ 53.155877][ T818] [ 53.251216][ T824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.428427][ T824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.549851][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.557408][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.710988][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 53.720933][ T311] usb 3-1: config 1 has an invalid interface number: 33 but max is 1 [ 53.729001][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.739196][ T310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 53.750265][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 53.760189][ T311] usb 3-1: config 1 has no interface number 1 [ 53.766268][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.777230][ T311] usb 3-1: config 1 interface 33 has no altsetting 0 [ 53.785271][ T310] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 53.794383][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.802444][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.811508][ T310] usb 4-1: Product: syz [ 53.815656][ T310] usb 4-1: Manufacturer: syz [ 53.820294][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.828278][ T311] usb 3-1: Product: syz [ 53.832466][ T310] usb 4-1: SerialNumber: syz [ 53.837319][ T311] usb 3-1: Manufacturer: syz [ 53.842210][ T311] usb 3-1: SerialNumber: syz [ 53.846911][ T821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.850153][ T311] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 53.854322][ T821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.861149][ T311] cdc_ncm 3-1:1.0: bind() failure [ 53.873542][ T310] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 53.886910][ T310] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 53.897662][ T310] usbserial_generic 4-1:1.0: generic converter detected [ 53.905299][ T310] usb 4-1: generic converter now attached to ttyUSB0 [ 54.051334][ T50] usb 3-1: USB disconnect, device number 6 [ 54.110874][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.120322][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.129809][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.139206][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.148688][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.158099][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 54.204010][ T31] usb 4-1: USB disconnect, device number 8 [ 54.210674][ T31] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 54.218818][ T31] usbserial_generic 4-1:1.0: device disconnected [ 55.490118][ T829] input: syz1 as /devices/virtual/input/input8 [ 55.497808][ T831] FAULT_INJECTION: forcing a failure. [ 55.497808][ T831] name failslab, interval 1, probability 0, space 0, times 0 [ 55.519773][ T831] CPU: 1 UID: 0 PID: 831 Comm: syz.2.184 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 55.519807][ T831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.519819][ T831] Call Trace: [ 55.519824][ T831] [ 55.519833][ T831] __dump_stack+0x21/0x30 [ 55.519867][ T831] dump_stack_lvl+0x140/0x1c0 [ 55.519894][ T831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.519921][ T831] dump_stack+0x19/0x20 [ 55.519945][ T831] should_fail_ex+0x3c2/0x510 [ 55.519968][ T831] should_failslab+0xac/0x100 [ 55.519992][ T831] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 55.520014][ T831] ? kmemdup_nul+0x98/0x1a0 [ 55.520031][ T831] ? security_context_to_sid_core+0x153/0x5c0 [ 55.520058][ T831] ? __asan_memcpy+0x5a/0x80 [ 55.520077][ T831] kstrdup+0x4d/0x130 [ 55.520103][ T831] ? security_context_to_sid_core+0x13e/0x5c0 [ 55.520129][ T831] security_context_to_sid_core+0x153/0x5c0 [ 55.520155][ T831] ? security_context_to_sid+0x60/0x60 [ 55.520183][ T831] security_context_to_sid_force+0x37/0x50 [ 55.520230][ T831] selinux_lsm_setattr+0x43b/0x8e0 [ 55.520252][ T831] ? selinux_lsm_getattr+0x380/0x380 [ 55.520272][ T831] ? __kasan_check_write+0x18/0x20 [ 55.520292][ T831] ? _copy_from_user+0x87/0xa0 [ 55.520320][ T831] selinux_setselfattr+0x50/0x70 [ 55.520342][ T831] security_setselfattr+0x49e/0x4e0 [ 55.520367][ T831] __x64_sys_lsm_set_self_attr+0xfb/0x140 [ 55.520388][ T831] x64_sys_call+0x1214/0x2ee0 [ 55.520406][ T831] do_syscall_64+0x57/0xf0 [ 55.520433][ T831] ? clear_bhb_loop+0x50/0xa0 [ 55.520455][ T831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.520476][ T831] RIP: 0033:0x7fe97b19e159 [ 55.520493][ T831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.520509][ T831] RSP: 002b:00007fe97c0d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 55.520530][ T831] RAX: ffffffffffffffda RBX: 00007fe97b425fa0 RCX: 00007fe97b19e159 [ 55.520545][ T831] RDX: 0000000000000022 RSI: 0000200000000440 RDI: 0000000000000066 [ 55.520558][ T831] RBP: 00007fe97b235024 R08: 0000000000000000 R09: 0000000000000000 [ 55.520571][ T831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.520583][ T831] R13: 00007fe97b426038 R14: 00007fe97b425fa0 R15: 00007ffde4d67a28 [ 55.520599][ T831] SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=95 state=3 status=67 (errno 32: Broken pipe) [ 55.831794][ T36] audit: type=1400 audit(1788876522.359:242): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2911]" dev="pipefs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.993650][ T12] bridge_slave_1: left allmulticast mode [ 55.999335][ T12] bridge_slave_1: left promiscuous mode [ 56.005248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.012838][ T12] bridge_slave_0: left allmulticast mode [ 56.018469][ T12] bridge_slave_0: left promiscuous mode [ 56.024097][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.151666][ T12] veth1_macvtap: left promiscuous mode [ 56.157188][ T12] veth0_vlan: left promiscuous mode [ 56.361624][ T12] bridge_slave_1: left allmulticast mode [ 56.367276][ T12] bridge_slave_1: left promiscuous mode [ 56.372928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.380299][ T12] bridge_slave_0: left allmulticast mode [ 56.385918][ T12] bridge_slave_0: left promiscuous mode [ 56.391696][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.399241][ T12] bridge_slave_1: left allmulticast mode [ 56.405022][ T12] bridge_slave_1: left promiscuous mode [ 56.410673][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.418009][ T12] bridge_slave_0: left allmulticast mode [ 56.423779][ T12] bridge_slave_0: left promiscuous mode [ 56.429364][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.592955][ T12] veth1_macvtap: left promiscuous mode [ 56.598465][ T12] veth0_vlan: left promiscuous mode [ 56.604070][ T12] veth1_macvtap: left promiscuous mode [ 56.609565][ T12] veth0_vlan: left promiscuous mode