last executing test programs: 8.81133807s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000e}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x2}]}, 0x34}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pwritev2(r4, &(0x7f00000014c0)=[{&(0x7f00000002c0)='=', 0x1}], 0x1, 0xff, 0x1, 0x24) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="3acd0400000000000000bbbbbbbbbbbbf6356744f11e000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.299974543s ago: executing program 0 (id=7): syz_open_procfs$userns(0x0, &(0x7f0000000000)) (async) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) (async, rerun: 64) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (rerun: 64) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x100580, 0x0, 0x49, 0x0, 0x0, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) getdents(r4, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x670, 0x0, 0x5, 0x7, 0x3}, 0x14) (async, rerun: 64) landlock_restrict_self(r2, 0x0) (async, rerun: 64) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) (async) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) 8.269885744s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount$incfs(&(0x7f00000002c0)='dev\x00', &(0x7f00000004c0)='dev\x00', &(0x7f0000000540), 0x490, &(0x7f0000000ac0)={[], [{@fowner_lt={'fowner<', 0xee01}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r5, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10001, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x800, 0x70bd27, 0x25dfdafe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4674}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) 8.166011687s ago: executing program 0 (id=10): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x4000000000000000, 0x12) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3, 0xd, 0x3}}) epoll_create1(0x80000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x9, 0x9, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x2e, 0x19, 0x3}, {0x60000, 0xffffffff, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x100000, 0x1, 0x8, 0x5, 0x0, 0x42, 0xb, 0x0, 0x6, 0x4, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0x10, 0xa3, 0xad, 0x8, 0x3, 0xf8, 0x8, 0x5, 0xff}, {0x54000, 0xa000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x82, 0x81, 0xcf, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x1, 0xf8, 0x2, 0xb, 0x3, 0x5}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xeeee0000, 0x2424, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000740)=ANY=[@ANYBLOB="ad3399d237a6b7d1bc0cf6bc0f4a2d50935cd2c5784910cca4d68ce8b149680f07808f103b7e95911db7d9ca44b714a3832cf7f76abe59a5c31d7eb2cf7a881b02daa96983a6e6575b79de6f2488f77f883490902ee7d1939ebadbd13d18a8b7d8e8c21b6ff63b4cb8bc78479d5b6ad5eb5c8a25977700ea7a58402631b6cc8ae04732118331a3e8b377dd222cea2bf2bdc165fe2dccf1afd6d82c7506ac9f903646fd65125837a708b40a40f0e150c5c8f410b54fc793d2404d13b20ba36fbd9d5af63d9e803f602f79eb4743c6069d750227535059de40c41ca20788eb93dc8ba6c86b0333397cce59da2edf67188f7791"], 0x0) close(0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000040)=0x7) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000100)={0x2a, 0x6, 0xffff}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0xff, 0x4, 0x7, 0x6e8}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f0000000100)={0x4, 0x0, [{0x4, 0x6, 0xa, 0x4, 0x2, 0x7fff, 0x8}, {0xd, 0x7ff, 0x6, 0xfffffffe, 0x1000, 0xa, 0x7}, {0x4, 0x6, 0x3, 0x6, 0x0, 0x5, 0x3}, {0xb, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) waitid(0x20, 0x0, 0x0, 0x8, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r8, 0x4018aee2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x7, 0x12) 5.152785032s ago: executing program 0 (id=19): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x9, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x6, 0x4) syz_usb_connect(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e40e2c1e228d5561483014bf5718b1f72554b100708240201000400a800e6f2aa1a1754e6f43a10524ff6e0bc87a226450b36e4c42f007ab96b30", @ANYRES8=r0], 0x0) sendto$inet6(r0, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 4.712356913s ago: executing program 3 (id=25): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x1c0}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="02011001eeef3508c40709a109580102030109021200019a06060f099016e40200000000"], &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000001280)=@string={0x2}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)="6ec51ae8d114181e1f1ecd9a161ca5da67a6b74ff39637e0fd5ad787affd7aa61ea099cd7c5731f82c971c92077c4a68f2d840b334d6a54c0a", 0x39) 3.447731204s ago: executing program 3 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x10) (fail_nth: 5) 3.386824136s ago: executing program 3 (id=32): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_dir\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x3020, {0x80}, 0x5, r2, r6, 0xd8fa, 0x9, 0xc, 0x5, 0x400, 0x5, 0x3ff, 0x1, 0xe7, 0x7, 0xb, 0x9, 0x4769, 0x5, 0x4}}, 0xa0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r7, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x1000, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) r9 = accept$inet(r7, 0x0, 0x0) close(r9) sendto$inet(r8, &(0x7f0000000200)='00', 0x20000, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001000)=""/145, 0x91}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x340000, 0x4d2, 0xde, 0x84, 0x16, "bc113800000000000000000600"}) 3.283627289s ago: executing program 3 (id=35): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000800)="8a0efd464f0749c83e3c0a7cbe0ff6212ac148bea01515b162f733a92ad30a6813f3aab91b371cb1bdc015a36c1bdbd01f91a476394348fd4dfd8b520e08ad30514705fe1052ba481dfd26c80bad647ef2150675863dbc025b853b1456d9c1adbcf6b00b8f167f8c743b13623579c6d5d5f134fcd57949978bbe9688911fd457e30fe6fa08312b7d180338bcbfcd7a7a1d03a476a2e2d89d6aafd64f6ccaaaccb3b088845be51219e5d7d02f7ed5e6635d053db1520c09ebedf0133968c249414cfa301c8fb1cde2a1bd8bae337db3e1877f53e231e917c04aa8fe941480587ea19b97755ba6c198fb6e4e2339117af647090039a4e6d4e5e6f777d4ca93b17163dce76769ff7751060c9b846928d90b95a6f681b9bb3e9f98a2e777579f276b015747283bcdf5c2e0b9c1d2aed11c329afc1b1b4493c573a6e764a72051f5168ada612f9c7254d259c1e03ce44a3d2e4a372aacc22239889bb538122153d1a5193b2bcc578d323b1e52df924c9d73d91ef677bde136e500330e649ea3cc1c17a7f5d2a093266112832fc04b4f6bb835c0170c0be07cf8694e19f39d73f0fe619a4db81c11108be681b57cf8e8ce33bbd11bf6a99f82483373fcc4657d88a1b20a12d6ad36fb59f16e8df9927428703a404c71ba302170ddb3fdcb96ec4ed116bb733e28fab47e23bf15f18ba243b7f9cc0f7cd5b15345816aad4c205460371b9fc6b777d3bf2811e9f71fad47eca94fd9c9d570561411872451690aa9375c2c835bf5c4d1bdf7a9224b76d3d6f7078c00842512ab075b350912c29392422271923d333d4bc6c9b259e05cda592dcd6cea9ef92e2c46198661cb1b9cfa41d6c73c477e79b30bea77c4a631f7221775fc6661f9cbe26c3f943252fb0a66570687ccc8b092f4fde8a2c149b2d0ba7e9d3ca84c6b0ce3db24ae0f0f82cf53fc9c097cc5151d5e9bc4166674e1fe4ad76ff076a0c23e5acd13e66bbcc9d3d2a97bf0b1822786bf1f0ebc6f875efade445d76a33f0eac268092e4af05158ab1487f534927467aeb5c9f89e1ebba8a6466c9ee195feae00bd352e9d396655d564d106aa95494d7bac46d2a583adccaf63bc39520dd770a83ddab1602fc318870912df64a0ae5642123f7b244b0ff9c885c19e3acd73d26aee87d415220e08b542f75a92798f980b96d9f56a45836fba50d396a7a9376d82420acafaad1b4276d0b9e3049d106632ea4981f92fd5085c4d34d6c6e33c93735f1ab821aab1d899749837654ae893498d72e204ef325a9db828aa183e8e3f426b9708e8926f0d221b09427160a7b087e38ad7d6ff04b6619912be640a772d83f972460cb9f8603521c7d882ba16d19cc8c0932384b4f167046829ae6293f08bca42041cad42601c7fb5b046c76dfa1d287921614705064f66a7e3f6a553227f6e4c5eda2d4892d7a62c8633bd27cfbf196b9d39f4f8f4d2b8a08e185a0fd335a02f7e1261da0595297edcea7f78aad05ddce19a4fb8fa5b0e0cb6e42bbc416859201aaaf1047ebeb5a73d457eb0038db2d0b3d5743ab83ce0b2842b8a36eabd4feee0a03f0788a5cdc28d830320a4a974c3195a7ca7efc13165a78fa1e425c783f2cbc70fc08f9bc2100d0c763f89af42c9bcdce907ff4809ed584fb7ac0353cf30d37321087b7ebfef41ddeb7262fbaef6cc96ee6004affef1c7fc50f39a84e98bf0f488b8c45a8f059682ebf2125e4290ee806fd96a81ac819e4e9246d4f850b203c843455b56e77cd4e6396bc3305a447e18b7ca5e18064370350d883c37df636a2259640a4619373fa05807291c3bbfa2b6284d3d305e9523e03fe11d6c9057d2590692262f6a77aba63ac26bd5368bf676884187e9eb00e910db6a3b02e98c17e1eb98640ee303414968936b073251be396699aab52b4488d3341cc0b0b2d16dfd3bca102d0de75d2964d7b296f41284745dfbb6ec6207249b6a83c8e2743633492d952ee8d410da482e08363806ff1716d6f999056d604ada7058aa683726eededae1bd423f647fd1cf5fb79a2db4ab18f680c2dc425696fb0548f4a4f679f179b230d6e559e206651cc73674ce6b7510c98115119f55cc79bf7f757178fac289423862df29d3f6d9273590627b42b6f30a9dd3138f8185137478ae2ed7533d0077c4ec791158b4d0ecbe002fc2a73a69271fd59358d79b4a27758b228e71bc6cbe88726f083727ee07117dd62d237b671df8093a8794161e3a2b4e26273aa893b8e86df79f9b57a07ec587637c0aed6ee6e1e7daa6c6f9f6ac9b12d943812beb82097150e1a178460af3dbda2c501b62e6209cd8cd8c0fb729480d52c67224e65e5390d06b4ee19404056426bf55c072f217f03cf58b04f6046f709f5811aa081b45b84eac9aa5c98a83e65d38fafc5309931eadf4c3800a18aa0cf7890e64da208f3690aecfe9aa1bb9e279681fd47e1191f2084af161b849328eba678a3284e1491ce721ac6242b9392ec83b25c7bb9131707ccc7223ae753a896fa35ec5d7fb861c92f2c15f7095d7645d25a3fa1b608c64eb6ae94515d47732e9abb39bc321fb6a54a8ff5a873c49d3cdc36cf22c36191a2ee09675ba34ec19de9830fbcebc695ee0b76c7a5f79fd6ba87a9553506e06f0644b1fd05528ab0d56c6d63d46d2f1380101e67751fdd5a74e88f6474428bf49dff60591b82718507c320eb911f51c40074069324a89852d43debce8bd37d64d7be1445fbd0e4f084da2d737bc0b6626d33036d46d996f76a2e1064b10a1b60ad393357de9e65b34993ea6e8281d19b01c9551ecf4d1cb30f11a0d82b2d5d77b9897c35b442de49c66af9b590203408ad62915398fb08f6a95a97ea1098e7a5e7a477c76d29b539155ef2a04929d5e73bfd13c53e2fe2cd4a7244e67cc58ce525ee999bc54c98a7c6ad7271dac4c4761becd714e51dd0afc015520c46544371d09ba757919f6b1bb5cb895f63464a8f83402e76facffd54e85114f23f66c9f8cde723c7feec8282c32fba7a5db154a7011cd0fe0bd1328dac00e013f6456b88490d8ad20aec788f825b04552f5dcab2e42071de3a8d9a4fe7dafbd75d719fe46d79b667", 0x88f}], 0x1}}], 0x1, 0x4010) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xd6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001080)={0x5, 0xfffeffff, 0xff7ffff0, 0x6, 0x26, "5865677990831a243d4f25b9b8489e9a1cebb1"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xffe, 0x80000009, 0x5, 0x2f, 0x40, "9614f403854fe9798da11806ce94cb15ea6264", 0x3, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201108100000040c50f80b0000000000001090224000100009009fe0122280009058103200039c804cc0f8568e7b0ca"], 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) syz_io_uring_setup(0x48cc, &(0x7f0000000140)={0x0, 0x5e99, 0x1, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000380), &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000480)=ANY=[@ANYBLOB="12011001020000082505a1a440e20002030109026900020107a0060904000001020d000005240600010524007f000d240f0105000000050005000306241a001010052415400008241ced000301010905810300020700080904010000020d00000904010102020d00000905820200040a040509050302ff030005802d48ef4bc7305f2e28d63474832d3967971f6f100d0a450c1e92c427bf5c20255b5d416c5d0bcdf09ce9c7a48d17a31d23c78c140508eaeca43c4f"], &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xff, 0x2, 0x7, 0x20, 0x1}, 0xbe, &(0x7f0000000200)={0x5, 0xf, 0xbe, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x9, 0xf0, 0xe352}, @generic={0x9f, 0x10, 0x3, "0cf9b046b8b7057c4261be9d30ad993524b517a22afe7c408ebe18cac9cb9bef3582883aa24247e3692c6d249037b9a315a8239c13ff0e906f62a28d5ef563157a2b254088876199d18850541f0a60ec4b5d90a3bbe34b3593b844825ab86e825bc7e1a02638b92324ab618c26ded017d2211ea9f169f42e2d235c42ca16c84ea110580d0bc795c8dc2ddd55da65ec7d9894bee7ef6d00795681e4e0"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x7, 0x33}, @ptm_cap={0x3}]}, 0x4, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x47e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x437}}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "33e87a66d6b84427c2789554aa0aef56ea4199b1619e5adc041fb3b972b1108ee7dddafaae9c4ef8545105b458185919bce37d747d8618cd4cbc95bb152f6eadddfc3c12ec0479919bed7dc1b09ddc3e0289f4efa794529e755bad00752543"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 2.539822837s ago: executing program 1 (id=44): futex(&(0x7f0000000140), 0x9, 0x2, &(0x7f00000001c0), 0x0, 0x1) 2.515761428s ago: executing program 1 (id=45): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x2, 0x4}, 0x6) (async) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hostfs\x00', 0x80, &(0x7f0000000200)='\x00') (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x5ef) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0xadc7, 0x1, 0x1, 0x0, 0x0, [{{r0}, 0xb}]}) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x8, &(0x7f0000000300)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r3, 0x134, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}}, 0x4048084) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x80800, 0x8c) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) move_mount(r4, &(0x7f0000000500)='./file0\x00', r5, &(0x7f0000000580)='./file1\x00', 0x22) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000005c0)=@arm64={0xff, 0xe, 0x3}) (async) r6 = socket(0xb, 0xa, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) shutdown(r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x4e08c4, 0x2) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) fdatasync(r4) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) getpeername$unix(r6, &(0x7f0000000900), &(0x7f0000000980)=0x6e) (async) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000bc0)={&(0x7f00000009c0)=0x4, 0x3ff, &(0x7f0000000a00)=[{}, {}], &(0x7f0000000b80)}) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000c00)) 2.501696188s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xfffd) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r6, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$getflags(r1, 0x3) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1010801, &(0x7f00000002c0)=ANY=[@ANYBLOB="747261b2567ceb67c743adf880921b6e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES8=r4, @ANYBLOB=',cache=mmap,privport,\x00']) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@verity_require}, {@volatile}, {@metacopy_on}], [{@flag='lazytime'}, {@obj_user={'obj_user', 0x3d, '>\x00\t\xb5\xb3\xe9Hg\x1fHE\x162\xcb\xd7a\xc6\x98\x99wb\xb1VP\x9fr+\xf9\xfe\xb1\x06{\xf4V\xc8\x05\xcc\xaf\x19\xe2dI\xa5\xd0\xf7\x84\x02.\x13T:\fO\xc8\xe8\x88q\xe3\x91u#\xa3\r\xbc\xc6\xee;\\uah\t\xd7\x9f|:\x9cQj\xabs\xd4G\xe2\xdb\xe3\xf8\"\x92\xc0\xcbX\x01\x1b(\xbemTa\"\x82\n\xf1B\x0f\x87\xa3\xbe\x16\x86b\x1e}H\x8e\xc0\xa1\x85#\x1bpe6\xcf\xc5\x87\xa4\xa57[\x10\xa8\xac\xe5O\x9bW4I\x05\xb69\x9a\xe8(\xdf\x04\xff\xeeQ\xb8\x03\xb2\xa4H\xb9[^\xb4\'V\xd0y\xa6\xe1l\xea9\x19H'}}]}) 2.385757781s ago: executing program 1 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100070000000900020073797a30000000000c000780080012400000000016000300686173683a6e65742c706f72742c6e65740000000500043d0000000000"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000c00)="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", 0xffb}], 0x1) 2.358426361s ago: executing program 1 (id=49): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x10) (fail_nth: 7) 2.300397013s ago: executing program 1 (id=50): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8=0x0], 0x0) 2.091829588s ago: executing program 0 (id=54): memfd_create(0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0xb3cc1715c9ff4f8}, 0xe) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r2, &(0x7f0000000340)=""/72, 0x48) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x5}, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000220003050000800ce271aa5b81"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080), 0xa6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x64, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast}, {0x11, 0x1, 0x0, @empty}}}}}}, 0x2e) unshare(0x24020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='never', 0x5) write$tun(r7, &(0x7f0000000240)={@val={0x0, 0x11}, @void, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x16, 0x2c, 0x66, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x20, 0x0, 0x2, 0x1, 0x2, 0x0, 0x9, 0x23a, 0x2, 0x4e20, 0x4e20}}}}}, 0x30) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0xee, 0x1, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x0, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x8, 0x1, 0x100000001, 0x2, 0xf64d}) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) 173.223226ms ago: executing program 2 (id=68): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000002040)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0, &(0x7f0000000b00)) 172.711026ms ago: executing program 2 (id=69): sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0x0, 0x951, 0x0}) 161.930136ms ago: executing program 2 (id=70): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) statx(0xffffffffffffff9c, &(0x7f000000a840)='./file0\x00', 0x1000, 0x0, &(0x7f000000a880)) 147.347497ms ago: executing program 2 (id=71): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df25000000f1090004007770616e33000001080003000000000000000000978625a211", @ANYRES32=r4, @ANYBLOB="0800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x280, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x154, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7631d855}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xb0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x40001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf34d}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7c}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x280}}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000004400)="17ad0000b3d4b73e75b490942a0000000000", 0x12}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f00000000c0)='./file0\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x7, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r10, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x10) 25.21034ms ago: executing program 2 (id=72): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x460c0) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) pipe(0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000200)=0x10001, 0x4) sendto$packet(r4, &(0x7f0000000180)="3f031c000300140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) mount$overlay(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000180)={[{@userxattr}, {@metacopy_on}]}) 24.84895ms ago: executing program 3 (id=73): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, 0x0, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98d2, 0x1, 0x3, 0x316, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f33, 0x800, 0x1, 0x378, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd93d, 0x8000, 0x3, 0x353}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x800, 0x2, 0x100}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xffff}, 0x0, r6, '\x00', {0x3, 0x42b, 0x0, &(0x7f0000000dc0)=@buf_1k="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"}}, &(0x7f0000001e40)) syz_ublk_setup_queues(r8, r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000002040)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8000000}}], 0x1, &(0x7f0000000900)={0x2e, 0x1e, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 8.48233ms ago: executing program 2 (id=74): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa5, 0x80, 0xe7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x12d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x6, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd, 0xd, 0xc1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x7, 0x2, 0x20, 0xfa}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x1, [@generic={0x2c, 0x10, 0x2, "f814f8d88e89194c6b7ed93bb41e333544422b989684bb5825aa1cb43a1fb10e08e4c07374b4d414ef"}]}, 0x3, [{0xf4, &(0x7f00000000c0)=@string={0xf4, 0x3, "86aacc77eb38745c6e683ec18adf776629a8dfb5969c423f2bc2f43e3ff82c0112a8f532caca9f73598973a9f671fe86e1cc4a5bb75bc910919b8b89facd2d289e1e442cef2941e623db92e17ddcfd838e1101596e22f7eace11c9fb8601068ef58b242a43da3bdda9f174000d5a7bb2c3eda0cff555613eff7c13a575dfdcf38e4bac8cd6ecd4dba2921b38b1e796bc391ab7a85443b120be04badb96a2f8147b842684daa9930c44de910eaa73eca8e3a3d0ca79b3f158b2dc552c8ee7c112b467b76ced0aa06e1783d0333489c32f65965a79f40deb4a4bf4ddda0c2a868afbed784e14f866e10984daadd14fd056d8d4"}}, {0x49, &(0x7f00000001c0)=@string={0x49, 0x3, "41a1b9df9c91c692f0438409b02535ecf020d8ac51b63cec65206d66c89b8a13d872263024f08fde8e28bdb49043ee8e8a1f26f79a1cd0b115be434e72760db67fa4866437237e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x6648559db4190ede}}]}) r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0xff01, 0x0, 0x1, {0x22, 0x70a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x3, 0xfc, 0x4}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xfb, 0xf, 0x2, 0x30, 0x6}, 0x30, &(0x7f0000000380)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "25cf63f67f319d7d7c31e3c878a950df"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ae6856bdd8028c243222978dc1ba39c1"}, @ptm_cap={0x3}]}, 0x2, [{0x3, &(0x7f00000003c0)=@string={0x3, 0x3, '|'}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81d}}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000b00)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000480), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x400d4) 0s ago: executing program 3 (id=75): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x40, 0x3, 0x4, "534ee99c"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x58, 0x1, 0x2, 0x305, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c040) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000010c0)={0x2c, &(0x7f0000000f80)={0x40, 0x31, 0x4, "c1cda2d9"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd, 0x0, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 27.874223][ T36] audit: type=1400 audit(1786197454.760:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.875273][ T286] cgroup: Unknown subsys name 'net' [ 27.896894][ T36] audit: type=1400 audit(1786197454.760:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.924198][ T36] audit: type=1400 audit(1786197454.790:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.924380][ T286] cgroup: Unknown subsys name 'devices' [ 28.050747][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.056365][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.149768][ T36] audit: type=1400 audit(1786197455.040:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.172963][ T36] audit: type=1400 audit(1786197455.040:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.195184][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.197839][ T36] audit: type=1400 audit(1786197455.040:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.229431][ T36] audit: type=1400 audit(1786197455.090:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.254962][ T36] audit: type=1400 audit(1786197455.090:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.299566][ T36] audit: type=1400 audit(1786197455.190:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.300073][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.325089][ T36] audit: type=1400 audit(1786197455.190:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.140433][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147499][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.154718][ T294] bridge_slave_0: entered allmulticast mode [ 29.161120][ T294] bridge_slave_0: entered promiscuous mode [ 29.167586][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.174675][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.181765][ T294] bridge_slave_1: entered allmulticast mode [ 29.188100][ T294] bridge_slave_1: entered promiscuous mode [ 29.280054][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.287126][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.294322][ T293] bridge_slave_0: entered allmulticast mode [ 29.300551][ T293] bridge_slave_0: entered promiscuous mode [ 29.309672][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.316726][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.323854][ T296] bridge_slave_0: entered allmulticast mode [ 29.330121][ T296] bridge_slave_0: entered promiscuous mode [ 29.336406][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343524][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.350673][ T293] bridge_slave_1: entered allmulticast mode [ 29.356889][ T293] bridge_slave_1: entered promiscuous mode [ 29.371421][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.378482][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.385596][ T296] bridge_slave_1: entered allmulticast mode [ 29.391814][ T296] bridge_slave_1: entered promiscuous mode [ 29.425280][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.432437][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.439570][ T295] bridge_slave_0: entered allmulticast mode [ 29.445756][ T295] bridge_slave_0: entered promiscuous mode [ 29.452290][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.459365][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.466429][ T295] bridge_slave_1: entered allmulticast mode [ 29.472852][ T295] bridge_slave_1: entered promiscuous mode [ 29.560271][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.567346][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.574670][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.581721][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.630714][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.637783][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.645098][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.652156][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.686833][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.693942][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.701269][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.708307][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.722240][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.729321][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.736599][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.743644][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.760615][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.767976][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.775659][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.782945][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.790527][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.797721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.804998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.812344][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.828140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.835213][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.843815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.850883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.876921][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.884028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.902661][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.909730][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.922651][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.929739][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.944821][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.951915][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.965628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.972733][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.980453][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.987504][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.014899][ T294] veth0_vlan: entered promiscuous mode [ 30.036884][ T294] veth1_macvtap: entered promiscuous mode [ 30.057681][ T295] veth0_vlan: entered promiscuous mode [ 30.072369][ T293] veth0_vlan: entered promiscuous mode [ 30.087604][ T296] veth0_vlan: entered promiscuous mode [ 30.101807][ T295] veth1_macvtap: entered promiscuous mode [ 30.127950][ T296] veth1_macvtap: entered promiscuous mode [ 30.135200][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.135242][ T293] veth1_macvtap: entered promiscuous mode [ 30.206336][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.273100][ T323] FAULT_INJECTION: forcing a failure. [ 30.273100][ T323] name failslab, interval 1, probability 0, space 0, times 1 [ 30.286288][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz.1.2 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 30.286319][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.286330][ T323] Call Trace: [ 30.286337][ T323] [ 30.286344][ T323] __dump_stack+0x21/0x30 [ 30.286373][ T323] dump_stack_lvl+0x140/0x1c0 [ 30.286394][ T323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.286415][ T323] ? release_sock+0x171/0x1f0 [ 30.286440][ T323] dump_stack+0x19/0x20 [ 30.286464][ T323] should_fail_ex+0x3c2/0x510 [ 30.286486][ T323] should_failslab+0xac/0x100 [ 30.286509][ T323] kmem_cache_alloc_node_noprof+0x45/0x420 [ 30.286530][ T323] ? netlink_data_ready+0x20/0x20 [ 30.286547][ T323] ? __alloc_skb+0x10c/0x360 [ 30.286571][ T323] __alloc_skb+0x10c/0x360 [ 30.286594][ T323] netlink_alloc_large_skb+0xf7/0x1b0 [ 30.286622][ T323] netlink_sendmsg+0x576/0xad0 [ 30.286644][ T323] ? __cfi_netlink_sendmsg+0x10/0x10 [ 30.286664][ T323] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 30.286684][ T323] ? security_socket_sendmsg+0x3d/0x100 [ 30.286709][ T323] ____sys_sendmsg+0x9a1/0xa00 [ 30.286728][ T323] ? __import_iovec+0x5b9/0x7d0 [ 30.286753][ T323] ? __sys_sendmsg_sock+0x50/0x50 [ 30.286773][ T323] ? import_iovec+0x80/0xb0 [ 30.286798][ T323] ___sys_sendmsg+0x2a6/0x370 [ 30.286817][ T323] ? __sys_sendmsg+0x2a0/0x2a0 [ 30.286836][ T323] ? proc_fail_nth_write+0x184/0x220 [ 30.286861][ T323] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 30.286891][ T323] ? __fget_files+0x2bc/0x330 [ 30.286913][ T323] __x64_sys_sendmsg+0x206/0x2e0 [ 30.286932][ T323] ? fput+0x1a4/0x230 [ 30.286955][ T323] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 30.286974][ T323] ? ksys_write+0x1f3/0x260 [ 30.286995][ T323] ? __kasan_check_read+0x15/0x20 [ 30.287015][ T323] x64_sys_call+0x2a4c/0x2ee0 [ 30.287031][ T323] do_syscall_64+0x57/0xf0 [ 30.287053][ T323] ? clear_bhb_loop+0x50/0xa0 [ 30.287089][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.287113][ T323] RIP: 0033:0x7fb90759e0d9 [ 30.287130][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.287145][ T323] RSP: 002b:00007fb9083ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.287166][ T323] RAX: ffffffffffffffda RBX: 00007fb907825fa0 RCX: 00007fb90759e0d9 [ 30.287181][ T323] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000004 [ 30.287193][ T323] RBP: 00007fb9083ff090 R08: 0000000000000000 R09: 0000000000000000 [ 30.287206][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.287218][ T323] R13: 00007fb907826038 R14: 00007fb907825fa0 R15: 00007ffcdc1abc28 [ 30.287234][ T323] [ 30.560834][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.615581][ T327] capability: warning: `syz.1.5' uses 32-bit capabilities (legacy support in use) [ 30.625997][ T327] ======================================================= [ 30.625997][ T327] WARNING: The mand mount option has been deprecated and [ 30.625997][ T327] and is ignored by this kernel. Remove the mand [ 30.625997][ T327] option from the mount to silence this warning. [ 30.625997][ T327] ======================================================= [ 30.698799][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.740218][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 30.745485][ T341] incfs: Options parsing error. -22 [ 30.758884][ T341] incfs: mount failed -22 [ 30.763819][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.781898][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 30.799098][ T10] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 30.815668][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.829171][ T45] usb 4-1: device descriptor read/64, error -71 [ 30.832582][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 30.854907][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.867576][ T10] usb 3-1: config 0 descriptor?? [ 30.978808][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.078814][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.078814][ T314] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 31.139993][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.152795][ T65] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 31.164266][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.173369][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.181446][ T65] usb 2-1: Product: syz [ 31.185929][ T65] usb 2-1: Manufacturer: syz [ 31.190830][ T65] usb 2-1: SerialNumber: syz [ 31.218844][ T314] usb 1-1: device descriptor read/64, error -71 [ 31.318853][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.397144][ T342] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.448811][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.468928][ T314] usb 1-1: device descriptor read/64, error -71 [ 31.688811][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.708924][ T314] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 31.798984][ T45] usb usb4-port1: attempt power cycle [ 31.848813][ T314] usb 1-1: device descriptor read/64, error -71 [ 32.005649][ T342] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 32.088800][ T314] usb 1-1: device descriptor read/64, error -71 [ 32.138844][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.159762][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.198871][ T314] usb usb1-port1: attempt power cycle [ 32.213732][ T65] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 32.220264][ T65] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 32.227732][ T65] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 32.299812][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.414266][ T65] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 32.421426][ T65] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 32.434205][ T65] usb 2-1: USB disconnect, device number 2 [ 32.440488][ T65] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 32.538805][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.548835][ T314] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.559860][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.569971][ T314] usb 1-1: device descriptor read/8, error -71 [ 32.689952][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.719969][ T314] usb 1-1: device descriptor read/8, error -71 [ 32.798969][ T45] usb usb4-port1: unable to enumerate USB device [ 32.968803][ T314] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.009951][ T314] usb 1-1: device descriptor read/8, error -71 [ 33.149991][ T314] usb 1-1: device descriptor read/8, error -71 [ 33.178833][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.259771][ T314] usb usb1-port1: unable to enumerate USB device [ 33.267482][ T310] usb 3-1: USB disconnect, device number 2 [ 33.285275][ T383] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 33.294200][ T386] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 33.328793][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.336471][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.347952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.357879][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.367234][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.389014][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 33.389033][ T36] audit: type=1400 audit(1786197460.280:145): avc: denied { create } for pid=389 comm="syz.3.14" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.399704][ T10] usb 2-1: config 0 descriptor?? [ 33.423794][ T36] audit: type=1400 audit(1786197460.300:146): avc: denied { ioctl } for pid=389 comm="syz.3.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4461 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.451335][ T36] audit: type=1400 audit(1786197460.300:147): avc: denied { create } for pid=389 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 33.457468][ T10] hub 2-1:0.0: USB hub found [ 33.470911][ T36] audit: type=1400 audit(1786197460.300:148): avc: denied { bind } for pid=389 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.497983][ T36] audit: type=1400 audit(1786197460.300:149): avc: denied { read write } for pid=389 comm="syz.3.14" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.520982][ T36] audit: type=1400 audit(1786197460.300:150): avc: denied { open } for pid=389 comm="syz.3.14" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.544205][ T36] audit: type=1400 audit(1786197460.300:151): avc: denied { ioctl } for pid=389 comm="syz.3.14" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.570545][ T395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 33.580701][ T36] audit: type=1400 audit(1786197460.470:152): avc: denied { accept } for pid=394 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 33.599115][ T395] netlink: 'syz.2.16': attribute type 64 has an invalid length. [ 33.608719][ T395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16'. [ 33.650174][ T10] hub 2-1:0.0: 1 port detected [ 33.674870][ T398] rust_binder: 397:398 error while translating object: EPERM [ 33.678826][ T36] audit: type=1400 audit(1786197460.560:153): avc: denied { write } for pid=397 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 33.682423][ T398] rust_binder: Failure in copy_transaction_data: EPERM [ 33.701370][ T398] rust_binder: 397:398 transaction call to 397:0 failed EPERM, code 0 size 96-24 [ 33.705198][ T36] audit: type=1400 audit(1786197460.560:154): avc: denied { ioctl } for pid=397 comm="syz.3.17" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.842372][ T65] rust_binder: 397: undelivered TRANSACTION_ERROR: 29201 [ 33.904039][ T412] FAULT_INJECTION: forcing a failure. [ 33.904039][ T412] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.917258][ T412] CPU: 0 UID: 0 PID: 412 Comm: syz.3.22 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 33.917288][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.917295][ T412] Call Trace: [ 33.917300][ T412] [ 33.917305][ T412] __dump_stack+0x21/0x30 [ 33.917330][ T412] dump_stack_lvl+0x140/0x1c0 [ 33.917345][ T412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.917361][ T412] dump_stack+0x19/0x20 [ 33.917374][ T412] should_fail_ex+0x3c2/0x510 [ 33.917387][ T412] should_fail+0xf/0x20 [ 33.917399][ T412] should_fail_usercopy+0x1e/0x30 [ 33.917411][ T412] _copy_from_iter+0x1a6/0x1520 [ 33.917426][ T412] ? __virt_addr_valid+0x2a1/0x370 [ 33.917440][ T412] ? __cfi__copy_from_iter+0x10/0x10 [ 33.917453][ T412] ? __check_object_size+0x54c/0x870 [ 33.917466][ T412] ? __cfi___check_object_size+0x10/0x10 [ 33.917477][ T412] ? skb_put+0x10e/0x200 [ 33.917493][ T412] netlink_sendmsg+0x66d/0xad0 [ 33.917505][ T412] ? __cfi_netlink_sendmsg+0x10/0x10 [ 33.917517][ T412] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 33.917530][ T412] ? security_socket_sendmsg+0x3d/0x100 [ 33.917545][ T412] ____sys_sendmsg+0x9a1/0xa00 [ 33.917557][ T412] ? __import_iovec+0x5b9/0x7d0 [ 33.917608][ T412] ? __sys_sendmsg_sock+0x50/0x50 [ 33.917620][ T412] ? import_iovec+0x80/0xb0 [ 33.917634][ T412] ___sys_sendmsg+0x2a6/0x370 [ 33.917646][ T412] ? __sys_sendmsg+0x2a0/0x2a0 [ 33.917657][ T412] ? proc_fail_nth_write+0x184/0x220 [ 33.917673][ T412] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.917690][ T412] ? __fget_files+0x2bc/0x330 [ 33.917704][ T412] __x64_sys_sendmsg+0x206/0x2e0 [ 33.917715][ T412] ? fput+0x1a4/0x230 [ 33.917728][ T412] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 33.917740][ T412] ? ksys_write+0x1f3/0x260 [ 33.917752][ T412] ? __kasan_check_read+0x15/0x20 [ 33.917764][ T412] x64_sys_call+0x2a4c/0x2ee0 [ 33.917775][ T412] do_syscall_64+0x57/0xf0 [ 33.917788][ T412] ? clear_bhb_loop+0x50/0xa0 [ 33.917802][ T412] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.917816][ T412] RIP: 0033:0x7feaf4d9e0d9 [ 33.917828][ T412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.917837][ T412] RSP: 002b:00007feaf5d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.917852][ T412] RAX: ffffffffffffffda RBX: 00007feaf5025fa0 RCX: 00007feaf4d9e0d9 [ 33.917860][ T412] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000004 [ 33.917868][ T412] RBP: 00007feaf5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 33.917876][ T412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.917883][ T412] R13: 00007feaf5026038 R14: 00007feaf5025fa0 R15: 00007ffd1fd75d28 [ 33.917892][ T412] [ 34.211978][ T415] fuse: Unknown parameter 'd' [ 34.358830][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.498808][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.538902][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.608849][ T381] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.669670][ T10] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 34.676068][ T10] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 34.684883][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 34.690929][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 34.699521][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 34.709681][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 34.721757][ T314] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 34.730871][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.747747][ T314] usb 4-1: Product: syz [ 34.748776][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.752022][ T314] usb 4-1: Manufacturer: syz [ 34.762880][ T314] usb 4-1: SerialNumber: syz [ 34.768329][ T424] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.771268][ T381] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.775663][ T424] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.784109][ T381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.801052][ T314] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 34.812312][ T381] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.821298][ T314] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 34.832274][ T381] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 34.843113][ T314] usbserial_generic 4-1:1.0: generic converter detected [ 34.851313][ T314] usb 4-1: generic converter now attached to ttyUSB0 [ 34.858108][ T381] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 34.871269][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.880152][ T381] usb 3-1: Product: syz [ 34.884387][ T381] usb 3-1: Manufacturer: syz [ 34.889181][ T381] usb 3-1: SerialNumber: syz [ 34.998833][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.014626][ T343] usb 4-1: USB disconnect, device number 6 [ 35.021794][ T343] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 35.030034][ T343] usbserial_generic 4-1:1.0: device disconnected [ 35.097927][ T381] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 35.106086][ T381] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 35.113386][ T381] usb 3-1: 1:1 : unsupported format bits 0x7b6c0006 [ 35.120481][ T381] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 35.131633][ T381] usb 3-1: unit 2 not found! [ 35.136376][ T381] usb 3-1: unit 236 not found! [ 35.144123][ T381] usb 3-1: USB disconnect, device number 3 [ 35.159912][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.162133][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.349113][ T314] usb 2-1: USB disconnect, device number 3 [ 35.408844][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.477491][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 35.509780][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 35.519063][ T45] usb usb1-port1: attempt power cycle [ 35.531202][ T437] netlink: 'syz.1.30': attribute type 12 has an invalid length. [ 35.552812][ T440] FAULT_INJECTION: forcing a failure. [ 35.552812][ T440] name failslab, interval 1, probability 0, space 0, times 0 [ 35.568800][ T440] CPU: 1 UID: 0 PID: 440 Comm: syz.3.31 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 35.568831][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.568842][ T440] Call Trace: [ 35.568848][ T440] [ 35.568856][ T440] __dump_stack+0x21/0x30 [ 35.568886][ T440] dump_stack_lvl+0x140/0x1c0 [ 35.568913][ T440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.568938][ T440] dump_stack+0x19/0x20 [ 35.568960][ T440] should_fail_ex+0x3c2/0x510 [ 35.568980][ T440] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 35.569004][ T440] should_failslab+0xac/0x100 [ 35.569025][ T440] __kmalloc_noprof+0x69/0x510 [ 35.569043][ T440] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 35.569066][ T440] ? cred_has_capability+0x296/0x3a0 [ 35.569084][ T440] genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 35.569107][ T440] genl_family_rcv_msg_doit+0xe3/0x360 [ 35.569129][ T440] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 35.569151][ T440] ? selinux_capable+0x38/0x50 [ 35.569172][ T440] ? bpf_lsm_capable+0xd/0x20 [ 35.569202][ T440] ? ns_capable+0x90/0xf0 [ 35.569228][ T440] genl_rcv_msg+0x60f/0x7b0 [ 35.569249][ T440] ? __cfi_genl_rcv_msg+0x10/0x10 [ 35.569269][ T440] ? __cfi_nfc_genl_dev_up+0x10/0x10 [ 35.569291][ T440] netlink_rcv_skb+0x24d/0x4e0 [ 35.569308][ T440] ? __cfi_genl_rcv_msg+0x10/0x10 [ 35.569330][ T440] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 35.569349][ T440] ? down_read+0x7f/0xe0 [ 35.569374][ T440] ? __cfi_down_read+0x10/0x10 [ 35.569400][ T440] genl_rcv+0x2c/0x40 [ 35.569421][ T440] netlink_unicast+0x8bc/0xa70 [ 35.569450][ T440] netlink_sendmsg+0x7d1/0xad0 [ 35.569470][ T440] ? __cfi_netlink_sendmsg+0x10/0x10 [ 35.569491][ T440] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 35.569512][ T440] ? security_socket_sendmsg+0x3d/0x100 [ 35.569551][ T440] ____sys_sendmsg+0x9a1/0xa00 [ 35.569570][ T440] ? __import_iovec+0x5b9/0x7d0 [ 35.569594][ T440] ? __sys_sendmsg_sock+0x50/0x50 [ 35.569613][ T440] ? import_iovec+0x80/0xb0 [ 35.569645][ T440] ___sys_sendmsg+0x2a6/0x370 [ 35.569664][ T440] ? __sys_sendmsg+0x2a0/0x2a0 [ 35.569681][ T440] ? proc_fail_nth_write+0x184/0x220 [ 35.569707][ T440] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 35.569736][ T440] ? __fget_files+0x2bc/0x330 [ 35.569759][ T440] __x64_sys_sendmsg+0x206/0x2e0 [ 35.569778][ T440] ? fput+0x1a4/0x230 [ 35.569801][ T440] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 35.569818][ T440] ? ksys_write+0x1f3/0x260 [ 35.569839][ T440] ? __kasan_check_read+0x15/0x20 [ 35.569848][ T437] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 35.569858][ T440] x64_sys_call+0x2a4c/0x2ee0 [ 35.569877][ T440] do_syscall_64+0x57/0xf0 [ 35.569895][ T440] ? clear_bhb_loop+0x50/0xa0 [ 35.569918][ T440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.569940][ T440] RIP: 0033:0x7feaf4d9e0d9 [ 35.569956][ T440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.569971][ T440] RSP: 002b:00007feaf5d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.569992][ T440] RAX: ffffffffffffffda RBX: 00007feaf5025fa0 RCX: 00007feaf4d9e0d9 [ 35.570006][ T440] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000004 [ 35.570018][ T440] RBP: 00007feaf5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.570029][ T440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.570040][ T440] R13: 00007feaf5026038 R14: 00007feaf5025fa0 R15: 00007ffd1fd75d28 [ 35.570055][ T440] [ 35.888765][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.953129][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.966334][ T456] device-mapper: table: 252:0: zero-length target [ 35.972857][ T456] device-mapper: ioctl: error adding target to table [ 36.060306][ T472] incfs: ino conflict with backing FS 1 [ 36.067575][ T474] FAULT_INJECTION: forcing a failure. [ 36.067575][ T474] name failslab, interval 1, probability 0, space 0, times 0 [ 36.080538][ T474] CPU: 1 UID: 0 PID: 474 Comm: syz.2.40 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 36.080567][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.080578][ T474] Call Trace: [ 36.080594][ T474] [ 36.080602][ T474] __dump_stack+0x21/0x30 [ 36.080634][ T474] dump_stack_lvl+0x140/0x1c0 [ 36.080659][ T474] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.080684][ T474] ? genl_family_rcv_msg_doit+0x2a4/0x360 [ 36.080711][ T474] dump_stack+0x19/0x20 [ 36.080736][ T474] should_fail_ex+0x3c2/0x510 [ 36.080758][ T474] should_failslab+0xac/0x100 [ 36.080782][ T474] kmem_cache_alloc_node_noprof+0x45/0x420 [ 36.080803][ T474] ? __alloc_skb+0x10c/0x360 [ 36.080825][ T474] __alloc_skb+0x10c/0x360 [ 36.080848][ T474] netlink_ack+0x155/0xa50 [ 36.080864][ T474] ? __cfi_genl_rcv_msg+0x10/0x10 [ 36.080889][ T474] netlink_rcv_skb+0x2cb/0x4e0 [ 36.080907][ T474] ? __cfi_genl_rcv_msg+0x10/0x10 [ 36.080928][ T474] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 36.080947][ T474] ? down_read+0x7f/0xe0 [ 36.080974][ T474] ? __cfi_down_read+0x10/0x10 [ 36.081006][ T474] genl_rcv+0x2c/0x40 [ 36.081026][ T474] netlink_unicast+0x8bc/0xa70 [ 36.081053][ T474] netlink_sendmsg+0x7d1/0xad0 [ 36.081071][ T474] ? __cfi_netlink_sendmsg+0x10/0x10 [ 36.081089][ T474] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 36.081108][ T474] ? security_socket_sendmsg+0x3d/0x100 [ 36.081133][ T474] ____sys_sendmsg+0x9a1/0xa00 [ 36.081154][ T474] ? __import_iovec+0x5b9/0x7d0 [ 36.081179][ T474] ? __sys_sendmsg_sock+0x50/0x50 [ 36.081199][ T474] ? import_iovec+0x80/0xb0 [ 36.081225][ T474] ___sys_sendmsg+0x2a6/0x370 [ 36.081244][ T474] ? __sys_sendmsg+0x2a0/0x2a0 [ 36.081263][ T474] ? proc_fail_nth_write+0x184/0x220 [ 36.081289][ T474] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 36.081318][ T474] ? __fget_files+0x2bc/0x330 [ 36.081341][ T474] __x64_sys_sendmsg+0x206/0x2e0 [ 36.081360][ T474] ? fput+0x1a4/0x230 [ 36.081384][ T474] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 36.081403][ T474] ? ksys_write+0x1f3/0x260 [ 36.081424][ T474] ? __kasan_check_read+0x15/0x20 [ 36.081444][ T474] x64_sys_call+0x2a4c/0x2ee0 [ 36.081461][ T474] do_syscall_64+0x57/0xf0 [ 36.081483][ T474] ? clear_bhb_loop+0x50/0xa0 [ 36.081508][ T474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.081532][ T474] RIP: 0033:0x7f2793b9e0d9 [ 36.081550][ T474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.081566][ T474] RSP: 002b:00007f27949fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.081595][ T474] RAX: ffffffffffffffda RBX: 00007f2793e25fa0 RCX: 00007f2793b9e0d9 [ 36.081610][ T474] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000004 [ 36.081622][ T474] RBP: 00007f27949fb090 R08: 0000000000000000 R09: 0000000000000000 [ 36.081635][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.081646][ T474] R13: 00007f2793e26038 R14: 00007f2793e25fa0 R15: 00007ffc216ade08 [ 36.081662][ T474] [ 36.397242][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.448840][ T343] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.571325][ T493] netlink: 44 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.580284][ T493] netlink: 43 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.589152][ T493] netlink: 'syz.1.47': attribute type 6 has an invalid length. [ 36.589273][ T343] usb 4-1: device descriptor read/64, error -71 [ 36.596851][ T493] netlink: 43 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.617469][ T493] Zero length message leads to an empty skb [ 36.638797][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.650906][ T497] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 36.661797][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.691247][ T502] veth0: entered allmulticast mode [ 36.789845][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.838810][ T343] usb 4-1: device descriptor read/64, error -71 [ 36.888891][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.899073][ T45] usb usb1-port1: unable to enumerate USB device [ 37.028826][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.078806][ T343] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.098828][ T348] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.188800][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.208804][ T343] usb 4-1: device descriptor read/64, error -71 [ 37.250208][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.258584][ T348] usb 3-1: config 1 has an invalid interface number: 8 but max is 2 [ 37.266744][ T348] usb 3-1: config 1 has no interface number 0 [ 37.272990][ T348] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 37.285347][ T348] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 37.288767][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.294461][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.308708][ T348] usb 3-1: Product: syz [ 37.312942][ T348] usb 3-1: Manufacturer: syz [ 37.317526][ T348] usb 3-1: SerialNumber: syz [ 37.328834][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.448800][ T343] usb 4-1: device descriptor read/64, error -71 [ 37.525105][ T348] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.533438][ T348] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 37.539396][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.557045][ T348] usb 3-1: USB disconnect, device number 4 [ 37.563125][ T343] usb usb4-port1: attempt power cycle [ 37.564451][ T517] capability: warning: `syz.2.55' uses deprecated v2 capabilities in a way that may be insecure [ 37.581071][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.597308][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.642564][ T525] FAULT_INJECTION: forcing a failure. [ 37.642564][ T525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.655681][ T525] CPU: 0 UID: 0 PID: 525 Comm: syz.2.58 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 37.655711][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.655721][ T525] Call Trace: [ 37.655728][ T525] [ 37.655736][ T525] __dump_stack+0x21/0x30 [ 37.655768][ T525] dump_stack_lvl+0x140/0x1c0 [ 37.655791][ T525] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.655816][ T525] ? check_stack_object+0x138/0x150 [ 37.655837][ T525] dump_stack+0x19/0x20 [ 37.655861][ T525] should_fail_ex+0x3c2/0x510 [ 37.655883][ T525] should_fail+0xf/0x20 [ 37.655901][ T525] should_fail_usercopy+0x1e/0x30 [ 37.655924][ T525] _copy_to_user+0x24/0xa0 [ 37.655949][ T525] simple_read_from_buffer+0xed/0x160 [ 37.655976][ T525] proc_fail_nth_read+0x1aa/0x220 [ 37.656003][ T525] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 37.656029][ T525] ? bpf_lsm_file_permission+0xd/0x20 [ 37.656065][ T525] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 37.656087][ T525] vfs_read+0x288/0xc70 [ 37.656099][ T525] ? __cfi_vfs_read+0x10/0x10 [ 37.656110][ T525] ? __kasan_check_write+0x18/0x20 [ 37.656121][ T525] ? mutex_lock+0x97/0x1d0 [ 37.656136][ T525] ? __cfi_mutex_lock+0x10/0x10 [ 37.656150][ T525] ksys_read+0x145/0x260 [ 37.656161][ T525] ? __cfi_ksys_read+0x10/0x10 [ 37.656173][ T525] ? __kasan_check_read+0x15/0x20 [ 37.656183][ T525] __x64_sys_read+0x7f/0x90 [ 37.656194][ T525] x64_sys_call+0x2638/0x2ee0 [ 37.656205][ T525] do_syscall_64+0x57/0xf0 [ 37.656217][ T525] ? clear_bhb_loop+0x50/0xa0 [ 37.656232][ T525] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.656246][ T525] RIP: 0033:0x7f2793b5e90e [ 37.656257][ T525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 37.656267][ T525] RSP: 002b:00007f27949fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.656281][ T525] RAX: ffffffffffffffda RBX: 00007f27949fb6c0 RCX: 00007f2793b5e90e [ 37.656290][ T525] RDX: 000000000000000f RSI: 00007f27949fb0a0 RDI: 0000000000000003 [ 37.656298][ T525] RBP: 00007f27949fb090 R08: 0000000000000000 R09: 0000000000000000 [ 37.656305][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.656312][ T525] R13: 00007f2793e26038 R14: 00007f2793e25fa0 R15: 00007ffc216ade08 [ 37.656321][ T525] [ 37.838787][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.842207][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.918945][ T343] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.939981][ T343] usb 4-1: device descriptor read/8, error -71 [ 37.978803][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.991810][ T537] tipc: Started in network mode [ 37.996692][ T537] tipc: Node identity 4, cluster identity 4711 [ 38.003071][ T537] tipc: Node number set to 4 [ 38.080030][ T343] usb 4-1: device descriptor read/8, error -71 [ 38.138835][ T310] usb 2-1: device descriptor read/64, error -71 [ 38.218803][ T45] usb 1-1: device descriptor read/64, error -71 [ 38.248981][ T310] usb usb2-port1: attempt power cycle [ 38.318861][ T343] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.328890][ T45] usb usb1-port1: attempt power cycle [ 38.339948][ T343] usb 4-1: device descriptor read/8, error -71 [ 38.479975][ T343] usb 4-1: device descriptor read/8, error -71 [ 38.575840][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 38.575857][ T36] audit: type=1400 audit(1786197465.460:217): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 38.588980][ T343] usb usb4-port1: unable to enumerate USB device [ 38.601951][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.623843][ T36] audit: type=1400 audit(1786197465.510:218): avc: denied { write } for pid=542 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.644205][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.658427][ T545] device-mapper: ioctl: Invalid ioctl structure: name my, dev fc01 [ 38.668815][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.689963][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.778456][ T36] audit: type=1400 audit(1786197465.660:219): avc: denied { cmd } for pid=550 comm="syz.2.68" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 38.782760][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.807820][ T36] audit: type=1400 audit(1786197465.670:220): avc: denied { map } for pid=550 comm="syz.2.68" path="/dev/ublkc0" dev="devtmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.830564][ T36] audit: type=1400 audit(1786197465.710:221): avc: denied { write } for pid=553 comm="syz.2.69" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.869936][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.908620][ T36] audit: type=1400 audit(1786197465.790:222): avc: denied { ioctl } for pid=559 comm="syz.2.72" path="socket:[8217]" dev="sockfs" ino=8217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.909767][ T560] overlayfs: conflicting options: userxattr,metacopy=on [ 38.933100][ T36] audit: type=1400 audit(1786197465.790:223): avc: denied { mounton } for pid=559 comm="syz.2.72" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.980526][ T315] ------------[ cut here ]------------ [ 38.986066][ T315] WARNING: CPU: 1 PID: 315 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 38.996642][ T315] Modules linked in: [ 39.000607][ T315] CPU: 1 UID: 0 PID: 315 Comm: kworker/u8:4 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 39.012276][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.022362][ T315] Workqueue: iou_exit io_ring_exit_work [ 39.027930][ T315] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 39.034298][ T315] Code: 5d e9 c3 bc 52 02 cc e8 9d 8f 33 fe 0f 0b eb e3 e8 94 8f 33 fe 0f 0b eb da e8 8b 8f 33 fe 0f 0b e9 4d fe ff ff e8 7f 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 39.054003][ T315] RSP: 0018:ffffc9000b7df990 EFLAGS: 00010293 [ 39.060125][ T315] RAX: ffffffff8353e241 RBX: 1ffff11022fe1795 RCX: ffff888107362600 [ 39.068136][ T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 39.076155][ T315] RBP: ffffc9000b7df9e0 R08: 0000000000000003 R09: 0000000000000004 [ 39.084166][ T315] R10: 0000000000000000 R11: ffffffff8353d220 R12: ffff88811a120000 [ 39.092195][ T315] R13: ffff888117f0bc80 R14: ffff888119eb8e00 R15: ffff888119eb8e10 [ 39.099133][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.100202][ T315] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.116607][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.123217][ T315] CR2: 0000000000000000 CR3: 00000001152fe000 CR4: 00000000003526b0 [ 39.129885][ T310] usb 2-1: device descriptor read/8, error -71 [ 39.131236][ T315] Call Trace: [ 39.140661][ T315] [ 39.143590][ T315] ublk_ch_uring_cmd+0x6f/0xa0 [ 39.148369][ T315] io_uring_try_cancel_uring_cmd+0x196/0x280 [ 39.154718][ T315] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 39.160676][ T315] ? io_uring_cancel_generic+0x6eb/0x6eb [ 39.166333][ T315] io_ring_exit_work+0x23d/0x83b [ 39.171301][ T315] ? finish_task_switch+0x139/0x770 [ 39.176518][ T315] ? __cfi_io_ring_exit_work+0x10/0x10 [ 39.182003][ T315] ? kick_pool+0xb9/0x540 [ 39.186423][ T315] process_scheduled_works+0x7f7/0x1060 [ 39.192015][ T315] worker_thread+0xc99/0x13f0 [ 39.196736][ T315] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 39.202483][ T315] ? __kasan_check_read+0x15/0x20 [ 39.207532][ T315] kthread+0x2c7/0x360 [ 39.211634][ T315] ? __cfi_worker_thread+0x10/0x10 [ 39.216784][ T315] ? __cfi_kthread+0x10/0x10 [ 39.221393][ T315] ret_from_fork+0x67/0xa0 [ 39.225832][ T315] ? __cfi_kthread+0x10/0x10 [ 39.228780][ T314] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 39.230448][ T315] ret_from_fork_asm+0x1a/0x30 [ 39.242690][ T315] [ 39.245704][ T315] ---[ end trace 0000000000000000 ]--- [ 39.270099][ T310] usb 2-1: device descriptor read/8, error -71 [ 39.308782][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 39.329902][ T45] usb 1-1: device descriptor read/8, error -71 [ 39.378968][ T310] usb usb2-port1: unable to enumerate USB device [ 39.400516][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.418818][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.428572][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.458824][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.459890][ T45] usb 1-1: device descriptor read/8, error -71 [ 39.478994][ T314] usb 3-1: config 0 descriptor?? [ 39.485006][ T314] hub 3-1:0.0: USB hub found [ 39.568797][ T343] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.579052][ T45] usb usb1-port1: unable to enumerate USB device [ 39.686337][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.695118][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.706051][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.715426][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.725451][ T314] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 39.729103][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 39.737531][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 39.739708][ T343] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.752529][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.752629][ T343] usb 4-1: config 0 has no interface number 0 [ 39.768190][ T343] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.777497][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.785637][ T343] usb 4-1: Product: syz [ 39.790044][ T343] usb 4-1: Manufacturer: syz [ 39.790378][ T314] usb 3-1: USB disconnect, device number 5 [ 39.794662][ T343] usb 4-1: SerialNumber: syz [ 39.798690][ T343] usb 4-1: config 0 descriptor?? [ 39.815711][ T343] smsc95xx v2.0.0 [ 40.215839][ T343] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 40.226707][ T343] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.638386][ T567] cgroup: fork rejected by pids controller in /syz3 [ 41.449072][ T343] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 41.461652][ T343] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.474924][ T343] usb 4-1: USB disconnect, device number 11