last executing test programs: 47.463452592s ago: executing program 0 (id=366): r0 = creat(&(0x7f0000004740)='./file1\x00', 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x3}, 0x1c) connect$pppl2tp(r3, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000440)='{bw', 0x3}, {&(0x7f0000000480)="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", 0x58c}], 0x2) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffc, @local}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="580000000000000029000000370000002c070000000000000502fffc01050000000000000100c910fc02000000e8ffff0300000000000000c20400000005c91000000000000200000000ffffac14143ff7010000000000001400000000000000290000003e0000000000010000"], 0x70}}], 0x2, 0x801) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f0000000140)) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000008050000040000000800489d00a21549000005069078ffffffff0a01010100830909006e147727e800004e204e22", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="b00800039078fffa0003035b051600000003000000090000007f0000007d000000400204f7fffe10f989c860c2743753f6cf365a9b4305060000ffff03090d072fcb40f69a1e1810003a6a03e171a72793b4528d28825b2f1bc4145748000000f56dfb750a0bed4f5da560836f66e98c8756ed5fdcd9"], 0xae) io_setup(0x200, &(0x7f0000004780)=0x0) io_submit(r6, 0x1, &(0x7f00000047c0)=[&(0x7f0000004800)={0x25, 0x0, 0x2, 0x3, 0x0, r0, 0x0, 0x0, 0xb000000}]) 47.352026073s ago: executing program 0 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000003c0)=0x2000000) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x20001) 47.351468533s ago: executing program 0 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)='X\x00\x00', 0x3}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0xc, 0x2, 0x0, 0x1, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) write(r4, &(0x7f0000000140)='jiffies', 0x7) bind$inet(r3, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @local, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r3, 0x0, 0x0) 47.335185834s ago: executing program 0 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000700)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000780)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000007c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @timestamp, @window={0x3, 0x5, 0x1}, @timestamp, @sack_perm, @mss={0x2, 0x3}], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000800), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0xfffffffffffffeaf}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendto$inet(r3, 0x0, 0x21, 0x20000000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000580)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async) open(&(0x7f0000000040)='./file0\x00', 0x48141, 0x8) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x42cc, 0x100, 0x1, 0x7f}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800e706, 0x4, 0x1000002, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7774, 0x8, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x2, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38a9, 0x800, 0x0, 0x230, 0x0, r7}}], 0x1, 0x0, 0x0) 47.206289968s ago: executing program 0 (id=376): sched_setscheduler(0x0, 0x1, &(0x7f0000002e80)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000003040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000003080)='./proc_mnt\x00', &(0x7f00000030c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000003100)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000003140)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000003180)={'lo\x00', {0x2, 0xfd, @rand_addr=0xff}}) 47.148003933s ago: executing program 0 (id=377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$MSR(&(0x7f0000000080), 0xff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x50) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xfffa, [0x0, 0x4], 0x2004}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2702, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x0, 0x80000) r7 = eventfd2(0xfffffffc, 0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, 0x14) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x0, 0x2, r7}) 34.278297728s ago: executing program 1 (id=478): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000440)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 34.278071038s ago: executing program 1 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)='X\x00\x00', 0x3}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0xc, 0x2, 0x0, 0x1, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @local, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(0xffffffffffffffff, 0x0, 0x0) 34.215066255s ago: executing program 1 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r2 = open(&(0x7f0000000140)='./bus\x00', 0x4ca7e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r6], 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40c1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0x9, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41810828}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x90) 34.214620985s ago: executing program 1 (id=483): syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') write$tcp_congestion(r0, &(0x7f0000000380)='veno\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1005c48, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x262) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000a00)='4', 0x4b) socket$inet6_tcp(0xa, 0x1, 0x0) 34.201048356s ago: executing program 1 (id=484): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="0958e9429d", 0x5e0, 0x100400c1, &(0x7f0000000300)={0x11, 0x8100, r1, 0x1, 0x87, 0x6, @random="ca339e8922a4"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000580)={0xfffffffffffffffd, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x1dc, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 34.027523134s ago: executing program 1 (id=485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x3, 0xffe0000c}, {0x16, 0x0, 0x40}]}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=',', 0x1}, {&(0x7f0000000440)="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", 0x585}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) accept4$inet6_tcp(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x609f, 0x40000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x24000805}, 0x44801) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000140)={0x1f, @none, 0x3}, 0xffffffffffffff78) 33.990889828s ago: executing program 32 (id=485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x3, 0xffe0000c}, {0x16, 0x0, 0x40}]}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=',', 0x1}, {&(0x7f0000000440)="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", 0x585}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) accept4$inet6_tcp(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x609f, 0x40000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x24000805}, 0x44801) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000140)={0x1f, @none, 0x3}, 0xffffffffffffff78) 32.180515743s ago: executing program 33 (id=377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$MSR(&(0x7f0000000080), 0xff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x50) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xfffa, [0x0, 0x4], 0x2004}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2702, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x0, 0x80000) r7 = eventfd2(0xfffffffc, 0x1) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, 0x14) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x0, 0x2, r7}) 27.337039788s ago: executing program 4 (id=577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x6, 0x0, 0xfd, 0xe}, 0x20) close(0x3) r1 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x64000600) r2 = socket(0x10, 0x3, 0x0) unshare(0x8000000) sendto$inet6(r2, &(0x7f0000000080)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) accept$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) rt_sigqueueinfo(r1, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) r3 = gettid() tkill(r3, 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000180)) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000300)=0x10001, 0x4) 27.293659632s ago: executing program 4 (id=578): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0xf0ffffff, 0x0, 0x4004800}, 0x40000) 27.239879547s ago: executing program 4 (id=580): socketpair(0x10, 0x800, 0x1, &(0x7f00000000c0)) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000440)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000041000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 26.413413831s ago: executing program 4 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x10b643, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) socket$inet_udp(0x2, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xa1480d, 0x0) setfsuid(0xee01) setfsuid(0xee01) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x6d, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='new_name\x00') r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x1c, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f00000003c0)="66b9200001c00f324f3066b9800000c00f326635008000000f300f01d72e363e0f01ca0fbb9d0e0066b9820000c00f32440f20c066350d000000440f22c03e3e0f01c4c1ef00", 0x79}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)={0x3000, 0xd000, 0x1}) listen(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26.175901306s ago: executing program 4 (id=585): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xc, 0x3, 0x10000000000080, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x2, 0x8000000000b, 0x1, 0x200cc0, 0x1, 0x5, 0x4, 0xfffffffffffffffc, 0x0, 0x809, 0x3, 0x5, 0x6, 0x9}) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f000060c000/0xb000)=nil, 0xb000, 0x2, 0x13, r2, 0x2000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0x90000010}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 26.165101537s ago: executing program 4 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4100) 26.13016088s ago: executing program 34 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4100) 23.645483764s ago: executing program 3 (id=622): r0 = memfd_secret(0x0) ftruncate(r0, 0x3) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0xc0000}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010401f007000000000000010100000506000640000000000a000200fffffffe08000a000500010001"], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x24004000) 23.630623506s ago: executing program 3 (id=623): unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e"], 0xf0}}, 0x804) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000014140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 23.558326963s ago: executing program 3 (id=624): getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 23.558154093s ago: executing program 3 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x42, 0x1ff) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c4607fc3c40010001000000000002003e0007000000940200000000000040000000000000002b0100000000000013000000000238000100000033030000030000000000000004000000000000000000000001000000c801000000000000e80000000000000004000000000000000300"/376], 0x178) lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="00d02171966d44bff86a99a073f3e267f49f6249554c7d1b292904cd45f8f547518216a9551ad8b683f4c208a359f386959ade91679061a34debc32fe633f6c651ca8ae65e7bf2955655d3258594f03531005730a540d198dc74ac182a1d04954f0da5093706c3b21feb242084daaf7385082ae681560223e4fd4dda248d32f7384bd6042d228cab87ef07c3770325f454d7d0fc886e093c22b4ce61e1f5048daac7eb7bd192314b74bfd85a78e60d221d7ef321624d268268cd73ed1a4bb1464c90b8d81b87218e26e83b014d0f7c95efa49c0085c4ba7e12ad9c8f33254805e631be"], 0x1, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "63f1c9b4047bd0b80aef33667422a189dc126459"}, 0x15, 0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000080)=0x7ffffffd, 0x4) sendto$inet(r4, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000380)=0x80000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r5, &(0x7f0000000580)=[{0x0}, {&(0x7f00000005c0)=""/105, 0x69}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0, 0x0, 0x1000) 23.557772203s ago: executing program 3 (id=627): socketpair(0x10, 0x800, 0x1, &(0x7f00000000c0)) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000440)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000041000/0x3000)=nil, 0x3000, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x8000000, 0x0, 0x2, 0x4, 0xe9e, 0x4}, 0x20) 23.29342561s ago: executing program 3 (id=629): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x80, r1}) 23.214544358s ago: executing program 35 (id=629): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x80, r1}) 19.245887494s ago: executing program 7 (id=670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) socketpair(0x1e, 0x801, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8020}, 0x4910) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x200007, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.194616019s ago: executing program 7 (id=671): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010700}}}}) (fail_nth: 3) 19.107969638s ago: executing program 7 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) mkdir(&(0x7f00000000c0)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000002440)='ocfs2_dlmfs\x00', 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x0) mount(&(0x7f0000002040)=@filename='./dev/sda1\x00', &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000002140)=ANY=[@ANYBLOB="000000004c90020001000000030001000000000000000000000058"]) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001f80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d40)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r1, @ANYBLOB="02002abd700008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d4}}, 0x20) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000180)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002180)=0x1, 0x4) connect$inet(r5, &(0x7f00000021c0)={0x2, 0x4e24, @remote}, 0x10) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000024c0)=@new_dev={0x2, 0xb52, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc8}}}, &(0x7f0000002580)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000025c0)={0x0, 0x366c, 0x0, 0x2, 0x18f, 0x0, r3}, &(0x7f0000002640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6663, 0x1, 0x0, 0x42, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x662c, 0x2, 0x2, 0x2e2, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10e4, 0x1, 0x3, 0x39b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6861, 0x2, 0x0, 0xee, 0x0, r3}}], 0x4, &(0x7f00000038c0)={0x2e, 0x20, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x35e}, 0x0, 0x0, '\x00', {0x0, 0x655, 0x0, &(0x7f00000028c0)=@buf_512="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"}}, &(0x7f0000003940)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002200)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005000000dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002400)="94", 0x1}], 0x1, &(0x7f0000003980)=ANY=[@ANYBLOB="0c000000000000000900110040cfad3f0000000000000000000000000100d4262d90e183f89a4553a174fc7f6151e1451e72fd54e6894c70918ddf4661b973017f539c0526d5db1c67eee3d6bc7ef90e81cb430d00"/95], 0xc}}], 0x2, 0x4000045) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000140)={'veth0\x00'}) 18.267329624s ago: executing program 7 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0x0, 0xffffffff000) 18.267105644s ago: executing program 7 (id=676): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/181) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0xa, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(0x0, r2) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, r3, 0x0) (async) close_range(r3, r3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000003c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_dir\x00', 0x0) mount(0x0, &(0x7f0000000440)='./proc_dir\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './proc_dir/acpi/wakeup'}, 0x1a) inotify_init() (async) inotify_init() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') r9 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace(0x10, r9) ptrace$cont(0x19, r9, 0x8d, 0x40000000000000) (async) ptrace$cont(0x19, r9, 0x8d, 0x40000000000000) syz_ublk_setup_queues(r8, r5, 0x0, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x800, 0x1000000, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfffffff, 0x20, 0x0, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2075, 0x1000, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0xfffffffe, 0x115, 0x0, r4}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r8, r5, 0x0, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x800, 0x1000000, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfffffff, 0x20, 0x0, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2075, 0x1000, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0xfffffffe, 0x115, 0x0, r4}}], 0x1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x2}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x20, 0x0, 0x0, 0x8}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x20, 0x0, 0x0, 0x8}]}) 17.441188448s ago: executing program 7 (id=692): mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e1", 0x5603d}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x5db) tee(r1, r2, 0x1, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 3.608350841s ago: executing program 5 (id=799): mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x9}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000002ac0)={0x50, 0x0, r1, {0x7, 0x1f, 0x10000, 0x10400, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002b40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004c40)="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", 0x2000, &(0x7f0000006c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)={0x150, 0x0, r1, [{{0x4, 0x0, 0x10000, 0xffffffffffffffff, 0x8001, 0x4, {0x0, 0x4, 0xfff, 0x1, 0x6, 0x0, 0x0, 0x4, 0x5, 0x4000, 0xb97, r2, r3, 0x0, 0x9}}, {0x5, 0xfff, 0x2, 0x6, '{&'}}, {{0x0, 0x2, 0x2, 0x200, 0x1, 0x8, {0x5, 0x8, 0x7, 0x2, 0x5a0, 0x9, 0x0, 0x9, 0x81, 0xa000, 0x0, r2, r3, 0xffffffff, 0x8}}, {0x4, 0x1, 0x1, 0x6, '^'}}]}, 0x150) 3.540026488s ago: executing program 2 (id=800): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') write$tcp_congestion(r0, &(0x7f0000000340)='veno\x00', 0x5) 3.539787258s ago: executing program 2 (id=801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x0, 0xc}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000100)="7573623000000000000000000000000003") 2.751956518s ago: executing program 5 (id=808): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x62020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2.53837691s ago: executing program 5 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) 2.463935068s ago: executing program 5 (id=810): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x4) r2 = syz_vhost_vsock_setup(0x0, &(0x7f0000c00000/0x21000)=nil) syz_vhost_vsock_send(r2, &(0x7f0000000100)={0x3e8, 0x2710, 0xd6, 0x1, 0x5, 0x0, 0x3, 0x0, "bc190ca645f8b6121f07054418d648b6682b295bc07e82b23a9f08476662d59d00bf8220cd5b41d05533b6ea29892654f090c86455f91bc7451c77b797aa7fe9a301a43c55d4d8db95002f9577c82e2453730189819e2d1c853b0f8b8b85e09fc4633a7c045c7ffa6906d4a037d48174f9ffc9cfb1a907e200de6e8e4615a12f6a6d926327a65d9a150b3373ee796622e31593af93d56fb2b2e90e36ab1894fea6b3974ecfae78c6adae54fb2db6e00be616073f5cb30bf023b27fb45bb5bec1ea5780648770e01370699fe7cb463dad494316039e55"}, 0xf2) 2.463799868s ago: executing program 36 (id=692): mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e1", 0x5603d}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x5db) tee(r1, r2, 0x1, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 1.980951517s ago: executing program 5 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0xf6ffffff) 1.928025472s ago: executing program 5 (id=813): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x0, 0xc}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000100)="7573623000000000000000000000000003") (fail_nth: 2) 1.843873251s ago: executing program 2 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='3', 0x4e) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0xd4, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 1.828070803s ago: executing program 2 (id=815): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000000400)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x103381) setxattr$trusted_overlay_redirect(&(0x7f0000000a40)='./dev/sda1\x00', &(0x7f0000000a80), &(0x7f0000000ac0)='./dev/sda1\x00', 0xb, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x18000) 1.827712123s ago: executing program 6 (id=816): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x62020600) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1f00, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.7559957s ago: executing program 2 (id=817): setresgid(0xee00, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="b5", 0x1}, {&(0x7f0000000480)="c9", 0x1}, {&(0x7f00000004c0)="01", 0x1}, {&(0x7f0000000500)='Q', 0x1}, {&(0x7f0000000540)="c5", 0x1}, {&(0x7f0000000580)='J', 0x1}, {&(0x7f00000005c0)=')', 0x1}, {&(0x7f0000000600)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)="db", 0x1}, {&(0x7f0000000700)='\\', 0x1}, {&(0x7f0000000740)="f2", 0x1}, {&(0x7f0000000780)='\x00', 0x1}, {&(0x7f00000007c0)='k', 0x1}, {&(0x7f0000000800)="c8", 0x1}, {&(0x7f0000000840)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="b2", 0x1}, {&(0x7f0000000900)="af", 0x1}], 0x2}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f0000000a80)=0x5c0d, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, &(0x7f00000009c0)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1c4e2791828c7442400654d0000c7442402f9ca00000f011424", 0x79}], 0x1, 0x48, &(0x7f0000000a40)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setgid(0x0) 1.703384406s ago: executing program 6 (id=818): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000025c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002600)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002740), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0x4004480d, &(0x7f0000002780)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/4\x00') r2 = socket(0x10, 0x3, 0x9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) ioctl$VHOST_VDPA_SET_STATUS(r3, 0x4001af72, &(0x7f00000028c0)=0x1) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000040)={&(0x7f0000000080)="98", 0x1}) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000002780)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000440)='./mnt\x00') r4 = open(&(0x7f0000000480)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x808410, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)={0x34, r5, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}}, 0x400c814) openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x519001, 0x10) 898.985868ms ago: executing program 2 (id=819): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='@\x00@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 807.015107ms ago: executing program 6 (id=820): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x4) r2 = syz_vhost_vsock_setup(0x0, &(0x7f0000c00000/0x21000)=nil) syz_vhost_vsock_send(r2, &(0x7f0000000100)={0x3e8, 0x2710, 0xd6, 0x1, 0x5, 0x0, 0x3, 0x0, "bc190ca645f8b6121f07054418d648b6682b295bc07e82b23a9f08476662d59d00bf8220cd5b41d05533b6ea29892654f090c86455f91bc7451c77b797aa7fe9a301a43c55d4d8db95002f9577c82e2453730189819e2d1c853b0f8b8b85e09fc4633a7c045c7ffa6906d4a037d48174f9ffc9cfb1a907e200de6e8e4615a12f6a6d926327a65d9a150b3373ee796622e31593af93d56fb2b2e90e36ab1894fea6b3974ecfae78c6adae54fb2db6e00be616073f5cb30bf023b27fb45bb5bec1ea5780648770e01370699fe7cb463dad494316039e55"}, 0xf2) 289.49439ms ago: executing program 8 (id=825): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x62020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4007bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x2, 0x1, 0x230}}], 0x1, 0x0, 0x0) (fail_nth: 3) 289.32385ms ago: executing program 8 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='bfs\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f00000002c0)='6', 0x32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) 289.12022ms ago: executing program 6 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='|omm', 0x4) (fail_nth: 4) 243.972675ms ago: executing program 8 (id=828): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x345, 0x120) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', r3, &(0x7f0000000080)='\x00', 0x174) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100e0000010000000000000000000000000ff020000000000000000000000000001e0000001000000000000000000000000000000001400000000006d00000000013c030000000000000a000200a70f2087c82691355df1b683c0043c4a1241fd1c20c040f52882d14556545f28442090d07a9b149efe5c898c2810c69d0e4794b93acce08067674828a19d3ae25b56f2a3dcf6804151c9b7bdc47a5eef8f2c34e06689d2c58244e0fa7a9cdc0c5d709a76ff725231fef0c356cf543e02de27d84153ca6e48dd8e9cba177f4b25004f2edffaaea435f738722d4023a2b2eaaf3f6fdbcd3d91bc4fb8"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 243.864075ms ago: executing program 8 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'vxcan1\x00', 0x3}) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r1, &(0x7f0000000080)='algo=zstd dict=di', 0x11) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0xb}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/file0\x00', 0x8100, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1) 243.730235ms ago: executing program 6 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x80) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)=""/4112, 0x101d}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x2}, 0xb}], 0x1, 0x140, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x5836, 0x7, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x80000000000, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000000)=0x5) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x2402, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000c00)) 243.503404ms ago: executing program 8 (id=831): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@nested_amd_vmload={0x182, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x28, @unmapped=0xfffffffe9998f003}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xb3, 0x3, 0x7}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0xfffffffffffffe9f, {0x1, 0x98, 0x5, 0xd}}, @nested_vmlaunch={0x12f, 0x18, 0x10000000}, @out_dx={0x6a, 0x28, {0x541b, 0x3, 0x80800}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0xa, @gpa=0x8080000}}, @out_dx={0x6a, 0x28, {0x69ad, 0x6, 0x1}}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x14, @gpa=0xeeee0000}}, @cpuid={0x64, 0x18, {0x8, 0x94e6}}], 0x1d0}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x8000000000000000, 0x8, 0x8, 0x2, 0x5, 0xf526, 0x7, 0x150, 0x3, 0x5, 0x3, 0x9, 0xffffffffffff2558, 0xfffffffffffffffe, 0x9, 0x8], 0x2ffc, 0x84}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x440, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006d00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000006d40)={0x0, 0x0}, &(0x7f0000006d80)=0xc) sendmmsg$unix(r4, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006e40)='[', 0x1}], 0x1, &(0x7f0000006e80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) lstat(&(0x7f0000006ec0)='./file0\x00', &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000007080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="fbb188275f7a3a5eaddd0e25f777b0e656675a548b655cba31055442122421a33846213e6305fda134d9d463a8762e7920e14e22e54711fc50fee4c798c5e8caac40411d7446cdefdbc27862316b50abda46df07163cf2c580ba71caa5aa0eae8dac23e9f9c28ebc15b8a9aa376e5035a1bceb287848bbb264522c1cff66a9821a4eb9506bfb4f4404f52ca7d5a2053e94f16d3e91dd7760dd43b103857b9d9ee8e5f29e6a990ec14582", 0xaa}], 0x1, &(0x7f0000006f80)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r1, r2, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}], 0xe8, 0x20008000}, 0x8800) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendfile(r8, r8, 0x0, 0x2000007ff) r9 = epoll_create1(0x0) fgetxattr(r9, &(0x7f0000000400)=@known='security.selinux\x00', 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$ARCH_SET_GS(0x1e, r10, 0x0, 0x1001) ptrace$peek(0x1, 0xffffffffffffffff, &(0x7f0000000080)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x702, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000480)={'pim6reg0\x00', 0x400}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40800, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local}) write$cgroup_int(r11, &(0x7f0000000580)=0x7, 0x12) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x59) 22.350187ms ago: executing program 8 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x82c1, 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x1) (async, rerun: 64) mount$incfs(&(0x7f0000000380)='\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0xc002, 0x0) (async, rerun: 64) chdir(&(0x7f0000000440)='./bus\x00') (async) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) setns(0xc9, 0x0) (rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r12, &(0x7f0000001dc0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2976e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1ab041583db6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff085319cdd6bd368e6283625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) (async, rerun: 32) r13 = getegid() (rerun: 32) sendmsg$unix(r12, &(0x7f00000032c0)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002e00)="ea4a544b15338e2dd05d3ab426b8f682492afaa51197d9f69756825bf3b7422b94f7632f028a20aff965", 0x2a}, {&(0x7f0000002e40)="01f7672a4ca1e3098a4577d2e109e98243b372590e62ae6a3421a89d9583224729c2b61463e3b8d289942c9c957a3b0428f69fec2e8a4e10019d6669cce01b549af35410026297cd6a6773dce78c47256a6c45a8a5a5f09774c7430c6aca7154dc29a9757bfbb475388c8d6e4646768fd6c1ce539f55f645a392230f", 0x7c}, {&(0x7f0000002ec0)="4124b7de870ca6855e4c4951d14282577ebae43bfd1d68ced458cf855fa01dedaab0887085114f6eca1845b60e6470cc598379b4ea40776cdbcfce340ad4b173b11124d3fdccd8247b51308166c17f954eb9eb8eba35b241b24e0cdc95fddfdc8816fd7f139af6dd2d0fc05e2d61194a6d8b3fa48ae730b089ac95707a9318b94dccd4618604fe2e3494f34db6a50e5a19918aade13ed6e7737985044f153490756c7e28fe545c43acc9955a71a911f1175d600b8df8b4c28c5aad9c96843e6fdac12618e418a3144ff837081ba79b894ea1604f0adb3e0878595fa06eb09f091cdd6c1c599718a532ba4940dd14a7aa4aa6", 0xf2}, {&(0x7f0000002fc0)="7bb060", 0x3}, {&(0x7f0000003000)="0fed2a639e707df41c969594", 0xc}, {&(0x7f0000003040)="a1317d42291f1cbf899a9181eb74e7de3e0f2558", 0x14}, {&(0x7f0000003080)="4f5b7bfeabe06c24a464f3d0bf4d9b5bf68991b06e1c4e7c253992ff3b5521291183be46d5c4e98c1149c83cbac65335e68ce278", 0x34}, {&(0x7f00000030c0)="1e6412643e588065a1bc38e041074986a0e11b61017253b1db189f00b25af7c7b28ebc79d468b49a43770954f4d71ca3335c722cb5892571148b3e0bec997501591a8e171f733dcd983d9a61b27827aa52496aaa788b180f4cba97697253a072763af765b7ab5d37aa0de0a936879dc559655044f319e032261cedba104848a69f70a7316d4dfe188b46088a9cabbf4893bed131817799214cd04fc62bbc4583d95463e6d56037efd40d5d9c4fe63383eaf4baa8a4686567c6661ce14a20e4a498847b0afe5e5d7eba10139a9df319b9df4e511bf7b2a0704da0940320a3", 0xde}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000081369824c6d1f6cbc3eab26b9067382771efd6cbd80bd32efffa7d73bf0e767c3b92bd5ed67ca717a915f3eac9729332c219c22046b6080f8ecbf8"], 0x78, 0x400c0}, 0x20000004) (async, rerun: 64) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) sendto$inet(r14, 0x0, 0x0, 0x28040041, &(0x7f00000000c0)={0x2, 0x24e23, @local}, 0x10) r15 = dup(r11) (async) r16 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x101042, 0x15) pwrite64(r16, &(0x7f0000000580)='2', 0xfdef, 0xe7c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r16, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwrite64(r16, &(0x7f00000006c0)="313948cf322b2bc48505457b480071a379bd0c831f9318a1d23ce4222a0a942b6cf233b3babcf4ea0000005634c9c601885696da94251c6977db3cf2a3e44f7b00f6e2", 0x43, 0x7) syz_ublk_add_dev(r8, 0x0, r10, 0x0, &(0x7f0000000140)={0x2e, 0x4, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x72d1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x1, 0xaef, 0x0, 0x0, 0x1000, 0xb, r1, 0x0, 0x60}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r15, r17, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1045, 0x20, 0x1, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x338, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce81, 0x20, 0x1, 0xf4}}], 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=833): r0 = fsopen(&(0x7f0000000dc0)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000e00)='iocharset', &(0x7f0000000e40)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000e80)='iocharset', &(0x7f0000000ec0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendto$inet6(r1, &(0x7f0000001400)="1564a8f3e8425d44", 0x8, 0x4085, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x60) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0xffff5d05, 0x9}, {0x10, 0x9}]}, 0x14, 0x0) ftruncate(r4, 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20004ffd, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b60b23cc613b68fcfdb27d4015a8e7fea999a9686fb7e607a98e8f21e41cd1ac96628e66378f4cea241309cd125d29cdcc73f1e02cbb7a655c", 0x177}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="32d33a47d96cea09000000f837ae05b96c2dc595b8a5423ec7526e7d80ccfa4ea8a931ead2a18c44af9cb0baf3675ab63acd86e4aa50366b0ad9811098fa5c6edafe2e8d5c0ead1973cec4ebf941c403fab2e86ebeb88f757f46eb94fa8881a1b3dca90148c7265f92a032bddccbd35eafbd010aef5602148284aef7eb72b9a2b911db74d6c524dfe62ccf32eee3eb2b4975768070bb12308a319fc69c3a54393201f59b7bebaa286db986266d9f58f1b78d06ff0835bbdd43ddd18f0700a47e0b23c80d9466842b560e559f98", 0xcd}, {&(0x7f0000000940)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36", 0x6f}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a4c6fa0c957ff0d22fe96e18a1dc336e07bff7110ff62d1aa60026f3a0544ed831e7a3da3822491b0620435ac17a6203eecf22a612b3528b75d94396972269e44b6eb0aa963f66f98891724b4dbd4fd792d31e3785b5727cda9a", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='P(', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\r', 0x1}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000b80)=0xdf8, 0x4) writev(r6, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1", 0x1bd}], 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. [ 22.834121][ T36] audit: type=1400 audit(1794557246.080:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.857206][ T36] audit: type=1400 audit(1794557246.100:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.859379][ T287] cgroup: Unknown subsys name 'net' [ 22.885029][ T36] audit: type=1400 audit(1794557246.130:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.885376][ T287] cgroup: Unknown subsys name 'devices' [ 23.005598][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.011282][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.125609][ T36] audit: type=1400 audit(1794557246.370:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.148905][ T36] audit: type=1400 audit(1794557246.370:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.173728][ T36] audit: type=1400 audit(1794557246.370:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.197347][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.206148][ T36] audit: type=1400 audit(1794557246.450:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.231573][ T36] audit: type=1400 audit(1794557246.450:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.285234][ T36] audit: type=1400 audit(1794557246.530:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.310801][ T36] audit: type=1400 audit(1794557246.530:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.311317][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.775955][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.783123][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.790237][ T297] bridge_slave_0: entered allmulticast mode [ 24.796594][ T297] bridge_slave_0: entered promiscuous mode [ 24.806969][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.814149][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.821181][ T297] bridge_slave_1: entered allmulticast mode [ 24.827466][ T297] bridge_slave_1: entered promiscuous mode [ 24.840200][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.847309][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.854409][ T296] bridge_slave_0: entered allmulticast mode [ 24.860594][ T296] bridge_slave_0: entered promiscuous mode [ 24.869889][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.876962][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.884023][ T296] bridge_slave_1: entered allmulticast mode [ 24.890206][ T296] bridge_slave_1: entered promiscuous mode [ 24.920864][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.927975][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.935067][ T295] bridge_slave_0: entered allmulticast mode [ 24.941232][ T295] bridge_slave_0: entered promiscuous mode [ 24.949879][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.956940][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.964013][ T295] bridge_slave_1: entered allmulticast mode [ 24.970243][ T295] bridge_slave_1: entered promiscuous mode [ 24.992274][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.999432][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.006703][ T294] bridge_slave_0: entered allmulticast mode [ 25.012915][ T294] bridge_slave_0: entered promiscuous mode [ 25.024366][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031405][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.038521][ T294] bridge_slave_1: entered allmulticast mode [ 25.044806][ T294] bridge_slave_1: entered promiscuous mode [ 25.165565][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.172650][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.179936][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.186977][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.198349][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.205430][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.212726][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.219793][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.234853][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.241898][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.249172][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.256213][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.269408][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.276496][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.283810][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.290857][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.329366][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.336891][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.344558][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.351716][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.359695][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.367130][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.374361][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.381541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.395786][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.403005][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.419069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.426123][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.433915][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.440945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.455023][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.462064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.469641][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.476689][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.484260][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.491309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.502810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.509875][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.527468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.534603][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.580634][ T297] veth0_vlan: entered promiscuous mode [ 25.587062][ T294] veth0_vlan: entered promiscuous mode [ 25.597384][ T296] veth0_vlan: entered promiscuous mode [ 25.606987][ T295] veth0_vlan: entered promiscuous mode [ 25.619275][ T294] veth1_macvtap: entered promiscuous mode [ 25.632291][ T297] veth1_macvtap: entered promiscuous mode [ 25.640930][ T296] veth1_macvtap: entered promiscuous mode [ 25.653603][ T295] veth1_macvtap: entered promiscuous mode [ 25.701565][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.746340][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.750080][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.761504][ T46] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 25.987689][ T328] ./dev/sda1: Can't lookup blockdev [ 26.046716][ T332] FAULT_INJECTION: forcing a failure. [ 26.046716][ T332] name failslab, interval 1, probability 0, space 0, times 1 [ 26.084425][ T332] CPU: 1 UID: 0 PID: 332 Comm: syz.2.6 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 26.084458][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.084488][ T332] Call Trace: [ 26.084495][ T332] [ 26.084503][ T332] __dump_stack+0x21/0x30 [ 26.084526][ T332] dump_stack_lvl+0x140/0x1c0 [ 26.084545][ T332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.084566][ T332] dump_stack+0x19/0x20 [ 26.084584][ T332] should_fail_ex+0x3c2/0x510 [ 26.084603][ T332] should_failslab+0xac/0x100 [ 26.084625][ T332] kmem_cache_alloc_noprof+0x42/0x410 [ 26.084655][ T332] ? alloc_empty_file+0xbf/0x270 [ 26.084681][ T332] ? _raw_spin_unlock+0x45/0x60 [ 26.084703][ T332] alloc_empty_file+0xbf/0x270 [ 26.084725][ T332] ? _raw_spin_unlock+0x45/0x60 [ 26.084746][ T332] alloc_file_pseudo+0x142/0x1f0 [ 26.084771][ T332] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 26.084798][ T332] sock_alloc_file+0xbe/0x2b0 [ 26.084819][ T332] __sys_socket+0x14c/0x1c0 [ 26.084841][ T332] __x64_sys_socket+0x7e/0x90 [ 26.084863][ T332] x64_sys_call+0x2608/0x2ee0 [ 26.084885][ T332] do_syscall_64+0x57/0xf0 [ 26.084904][ T332] ? clear_bhb_loop+0x50/0xa0 [ 26.084934][ T332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.084959][ T332] RIP: 0033:0x7fa99d1a94d9 [ 26.084983][ T332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.085001][ T332] RSP: 002b:00007fa99e090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 26.085027][ T332] RAX: ffffffffffffffda RBX: 00007fa99d425fa0 RCX: 00007fa99d1a94d9 [ 26.085042][ T332] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 26.085054][ T332] RBP: 00007fa99d23804e R08: 0000000000000000 R09: 0000000000000000 [ 26.085068][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.085080][ T332] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 26.085102][ T332] [ 26.093812][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.443938][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 26.450580][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.473734][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 26.483561][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 26.493584][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.507394][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.516608][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.524900][ T10] usb 4-1: SerialNumber: syz [ 26.534259][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.541459][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.555276][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 26.561195][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 26.583875][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 26.628174][ T311] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 26.643875][ T311] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 26.757396][ T10] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 26.794469][ T10] usb 4-1: USB disconnect, device number 2 [ 26.851003][ T344] FAULT_INJECTION: forcing a failure. [ 26.851003][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 26.863683][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz.3.10 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 26.863716][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.863729][ T344] Call Trace: [ 26.863735][ T344] [ 26.863743][ T344] __dump_stack+0x21/0x30 [ 26.863766][ T344] dump_stack_lvl+0x140/0x1c0 [ 26.863784][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.863805][ T344] dump_stack+0x19/0x20 [ 26.863822][ T344] should_fail_ex+0x3c2/0x510 [ 26.863843][ T344] should_failslab+0xac/0x100 [ 26.863864][ T344] kmem_cache_alloc_noprof+0x42/0x410 [ 26.863886][ T344] ? security_inode_alloc+0x51/0x230 [ 26.863912][ T344] ? __cfi_make_kgid+0x10/0x10 [ 26.863926][ T344] security_inode_alloc+0x51/0x230 [ 26.863942][ T344] inode_init_always_gfp+0x756/0x9e0 [ 26.863957][ T344] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 26.863974][ T344] alloc_inode+0xc5/0x270 [ 26.863989][ T344] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.864003][ T344] new_inode+0x25/0x1e0 [ 26.864019][ T344] shmem_get_inode+0x352/0xc10 [ 26.864034][ T344] shmem_mknod+0x63/0x200 [ 26.864054][ T344] shmem_rename2+0x258/0x3c0 [ 26.864072][ T344] ? __cfi_shmem_rename2+0x10/0x10 [ 26.864089][ T344] vfs_rename+0xd59/0x1100 [ 26.864110][ T344] ? __cfi_vfs_rename+0x10/0x10 [ 26.864129][ T344] ? hook_path_rename+0x44/0x60 [ 26.864146][ T344] ? bpf_lsm_path_rename+0xd/0x20 [ 26.864167][ T344] ? security_path_rename+0x143/0x2a0 [ 26.864184][ T344] do_renameat2+0x85d/0xc30 [ 26.864203][ T344] ? __check_object_size+0x99/0x870 [ 26.864225][ T344] ? __cfi_do_renameat2+0x10/0x10 [ 26.864246][ T344] ? __kasan_check_write+0x18/0x20 [ 26.864266][ T344] ? getname_flags+0x203/0x6b0 [ 26.864279][ T344] ? fpregs_restore_userregs+0x11c/0x260 [ 26.864299][ T344] __x64_sys_renameat2+0xdc/0x100 [ 26.864319][ T344] x64_sys_call+0x2e18/0x2ee0 [ 26.864334][ T344] do_syscall_64+0x57/0xf0 [ 26.864348][ T344] ? clear_bhb_loop+0x50/0xa0 [ 26.864368][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.864386][ T344] RIP: 0033:0x7f7c94ba94d9 [ 26.864400][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.864411][ T344] RSP: 002b:00007f7c959a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 26.864426][ T344] RAX: ffffffffffffffda RBX: 00007f7c94e25fa0 RCX: 00007f7c94ba94d9 [ 26.864437][ T344] RDX: ffffffffffffff9c RSI: 0000200000001940 RDI: ffffffffffffff9c [ 26.864447][ T344] RBP: 00007f7c94c3804e R08: 0000000000000004 R09: 0000000000000000 [ 26.864456][ T344] R10: 0000200000001980 R11: 0000000000000246 R12: 0000000000000000 [ 26.864465][ T344] R13: 00007f7c94e26038 R14: 00007f7c94e25fa0 R15: 00007ffe68a34658 [ 26.864477][ T344] [ 27.241345][ T354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=354 comm=syz.1.13 [ 27.453760][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.473748][ T68] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.604881][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.615216][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.627038][ T68] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.628226][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 27.637603][ T68] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.646939][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.656962][ T68] usb 1-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 27.664738][ T10] usb 4-1: Product: syz [ 27.673018][ T68] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.677194][ T10] usb 4-1: Manufacturer: syz [ 27.684953][ T68] usb 1-1: SerialNumber: syz [ 27.689556][ T10] usb 4-1: SerialNumber: syz [ 27.900939][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 27.900969][ T36] audit: type=1400 audit(1794557251.140:169): avc: denied { create } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.927443][ T36] audit: type=1400 audit(1794557251.170:170): avc: denied { write } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.947755][ T10] usb 4-1: 1:1 : unsupported format bits 0x20000 [ 27.951520][ T352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.954341][ T36] audit: type=1400 audit(1794557251.170:171): avc: denied { nlmsg_write } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.968130][ T352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.983005][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 27.998564][ T10] usb 4-1: 2:1 : unsupported format bits 0x20000 [ 28.005119][ T36] audit: type=1400 audit(1794557251.170:172): avc: denied { bind } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.030880][ T36] audit: type=1400 audit(1794557251.170:173): avc: denied { create } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.052783][ T10] usb 4-1: USB disconnect, device number 3 [ 28.053869][ T36] audit: type=1400 audit(1794557251.170:174): avc: denied { connect } for pid=351 comm="syz.0.12" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.080852][ T36] audit: type=1400 audit(1794557251.170:175): avc: denied { setopt } for pid=351 comm="syz.0.12" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.104435][ T68] usb 1-1: 0:2 : does not exist [ 28.107262][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.133834][ T68] usb 1-1: USB disconnect, device number 2 [ 28.139768][ T36] audit: type=1400 audit(1794557251.180:176): avc: denied { accept } for pid=351 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.168485][ T36] audit: type=1400 audit(1794557251.180:177): avc: denied { write } for pid=351 comm="syz.0.12" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.481159][ T372] ./dev/sda1: Can't lookup blockdev [ 28.487088][ T372] ./dev/sda1: Can't lookup blockdev [ 28.504517][ T374] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 28.513755][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.673764][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 28.680047][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.690230][ T46] usb 2-1: config 0 has no interfaces? [ 28.695773][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.704935][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.713490][ T46] usb 2-1: config 0 descriptor?? [ 28.863774][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.920898][ T46] usb 2-1: USB disconnect, device number 2 [ 29.014163][ T10] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 29.022822][ T10] usb 1-1: config 0 has no interfaces? [ 29.029762][ T10] usb 1-1: config 0 has no interfaces? [ 29.036036][ T10] usb 1-1: config 0 has no interfaces? [ 29.043768][ T10] usb 1-1: config 0 has no interfaces? [ 29.050185][ T10] usb 1-1: config 0 has no interfaces? [ 29.056578][ T10] usb 1-1: config 0 has no interfaces? [ 29.063164][ T10] usb 1-1: config 0 has no interfaces? [ 29.069517][ T10] usb 1-1: config 0 has no interfaces? [ 29.076456][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.085568][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.093641][ T10] usb 1-1: Product: syz [ 29.097846][ T10] usb 1-1: Manufacturer: syz [ 29.102447][ T10] usb 1-1: SerialNumber: syz [ 29.112813][ T10] usb 1-1: config 0 descriptor?? [ 29.325596][ T10] usb 1-1: USB disconnect, device number 3 [ 29.448181][ T398] FAULT_INJECTION: forcing a failure. [ 29.448181][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 29.461244][ T398] CPU: 1 UID: 0 PID: 398 Comm: syz.1.27 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 29.461274][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.461287][ T398] Call Trace: [ 29.461294][ T398] [ 29.461302][ T398] __dump_stack+0x21/0x30 [ 29.461327][ T398] dump_stack_lvl+0x140/0x1c0 [ 29.461347][ T398] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.461368][ T398] dump_stack+0x19/0x20 [ 29.461386][ T398] should_fail_ex+0x3c2/0x510 [ 29.461405][ T398] ? security_inode_init_security+0x11c/0x600 [ 29.461432][ T398] should_failslab+0xac/0x100 [ 29.461454][ T398] __kmalloc_noprof+0x69/0x510 [ 29.461486][ T398] ? security_inode_init_security+0x11c/0x600 [ 29.461511][ T398] ? get_inode_acl+0x50/0x50 [ 29.461537][ T398] ? __cfi_shmem_initxattrs+0x10/0x10 [ 29.461573][ T398] security_inode_init_security+0x11c/0x600 [ 29.461600][ T398] ? current_umask+0x1a/0x80 [ 29.461619][ T398] ? __cfi_security_inode_init_security+0x10/0x10 [ 29.461645][ T398] ? __kasan_check_write+0x18/0x20 [ 29.461676][ T398] ? set_cached_acl+0xe1/0x1a0 [ 29.461704][ T398] ? simple_acl_create+0x190/0x1c0 [ 29.461734][ T398] shmem_mknod+0xd5/0x200 [ 29.461759][ T398] shmem_rename2+0x258/0x3c0 [ 29.461785][ T398] ? __cfi_shmem_rename2+0x10/0x10 [ 29.461811][ T398] vfs_rename+0xd59/0x1100 [ 29.461842][ T398] ? __cfi_vfs_rename+0x10/0x10 [ 29.461870][ T398] ? hook_path_rename+0x44/0x60 [ 29.461896][ T398] ? bpf_lsm_path_rename+0xd/0x20 [ 29.461927][ T398] ? security_path_rename+0x143/0x2a0 [ 29.461953][ T398] do_renameat2+0x85d/0xc30 [ 29.461980][ T398] ? __check_object_size+0x99/0x870 [ 29.462014][ T398] ? __cfi_do_renameat2+0x10/0x10 [ 29.462045][ T398] ? __kasan_check_write+0x18/0x20 [ 29.462074][ T398] ? getname_flags+0x203/0x6b0 [ 29.462094][ T398] ? fpregs_restore_userregs+0x11c/0x260 [ 29.462123][ T398] __x64_sys_renameat2+0xdc/0x100 [ 29.462152][ T398] x64_sys_call+0x2e18/0x2ee0 [ 29.462174][ T398] do_syscall_64+0x57/0xf0 [ 29.462195][ T398] ? clear_bhb_loop+0x50/0xa0 [ 29.462224][ T398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.462252][ T398] RIP: 0033:0x7f0a4c9a94d9 [ 29.462268][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.462286][ T398] RSP: 002b:00007f0a4d7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 29.462308][ T398] RAX: ffffffffffffffda RBX: 00007f0a4cc25fa0 RCX: 00007f0a4c9a94d9 [ 29.462323][ T398] RDX: ffffffffffffff9c RSI: 0000200000001940 RDI: ffffffffffffff9c [ 29.462339][ T398] RBP: 00007f0a4ca3804e R08: 0000000000000004 R09: 0000000000000000 [ 29.462352][ T398] R10: 0000200000001980 R11: 0000000000000246 R12: 0000000000000000 [ 29.462365][ T398] R13: 00007f0a4cc26038 R14: 00007f0a4cc25fa0 R15: 00007fff17621e48 [ 29.462383][ T398] [ 29.803900][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 29.860981][ T400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1869770799.1634742115.1953068146), cmd(2) [ 29.933767][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.983766][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.160798][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.181224][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 30.183818][ T68] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.210259][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 30.233723][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.233733][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.263718][ T311] usb 2-1: Product: syz [ 30.267910][ T311] usb 2-1: Manufacturer: syz [ 30.282806][ T311] usb 2-1: SerialNumber: syz [ 30.365117][ T68] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.383759][ T68] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 30.401631][ T68] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.473731][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 30.505922][ T311] usb 2-1: 1:1 : unsupported format bits 0x20000 [ 30.513003][ T311] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 30.521076][ T311] usb 2-1: 2:1 : unsupported format bits 0x20000 [ 30.535580][ T311] usb 2-1: USB disconnect, device number 3 [ 30.548976][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.623751][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.836532][ T68] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 30.853899][ T68] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 30.865056][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.883866][ T68] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0003/input/input4 [ 31.000159][ T31] usb usb4-port1: attempt power cycle [ 31.045505][ T412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 31.313742][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.353732][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 31.385008][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.474809][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.485363][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.494289][ T10] usb 3-1: config 1 has no interface number 0 [ 31.500473][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.524806][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.533897][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.541888][ T10] usb 3-1: Product: syz [ 31.545451][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.563734][ T10] usb 3-1: Manufacturer: syz [ 31.568371][ T10] usb 3-1: SerialNumber: syz [ 31.574966][ T10] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 31.582374][ T10] cdc_ncm 3-1:1.1: bind() failure [ 31.645736][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.654726][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.793736][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 31.824958][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.956705][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.084171][ T31] usb usb4-port1: unable to enumerate USB device [ 32.135385][ T424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 32.292500][ T434] tipc: Started in network mode [ 32.297527][ T434] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 32.306703][ T434] tipc: Enabled bearer , priority 10 [ 32.395264][ T440] cgroup: none used incorrectly [ 32.399271][ T438] netlink: 'syz.1.42': attribute type 4 has an invalid length. [ 32.417030][ T442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.461261][ T438] kvm: kvm [437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 32.470125][ T438] kvm: kvm [437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 32.884198][ T10] usb 1-1: USB disconnect, device number 4 [ 32.924640][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 33.074728][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 33.074745][ T36] audit: type=1400 audit(1794557256.320:203): avc: denied { read } for pid=464 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.115206][ T36] audit: type=1400 audit(1794557256.360:204): avc: denied { setopt } for pid=468 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.142713][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 33.152871][ T36] audit: type=1400 audit(1794557256.390:205): avc: denied { map } for pid=468 comm="syz.1.55" path="socket:[4659]" dev="sockfs" ino=4659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.214439][ T479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.271124][ T482] FAULT_INJECTION: forcing a failure. [ 33.271124][ T482] name failslab, interval 1, probability 0, space 0, times 0 [ 33.273806][ T36] audit: type=1400 audit(1794557256.510:206): avc: denied { write } for pid=481 comm="syz.1.58" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.283923][ T482] CPU: 1 UID: 0 PID: 482 Comm: syz.1.58 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 33.283950][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 33.283962][ T482] Call Trace: [ 33.283969][ T482] [ 33.283976][ T482] __dump_stack+0x21/0x30 [ 33.284062][ T482] dump_stack_lvl+0x140/0x1c0 [ 33.284117][ T482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.284197][ T482] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 33.284286][ T482] dump_stack+0x19/0x20 [ 33.284327][ T482] should_fail_ex+0x3c2/0x510 [ 33.284378][ T482] should_failslab+0xac/0x100 [ 33.284433][ T482] kmem_cache_alloc_noprof+0x42/0x410 [ 33.284506][ T482] ? __kernfs_new_node+0xf1/0x740 [ 33.284563][ T482] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 33.284618][ T482] __kernfs_new_node+0xf1/0x740 [ 33.284680][ T482] ? __kasan_check_write+0x18/0x20 [ 33.284750][ T482] ? kernfs_new_node+0x280/0x280 [ 33.284803][ T482] ? down_write+0xee/0x2b0 [ 33.284870][ T482] ? __cfi_down_write+0x10/0x10 [ 33.284936][ T482] ? __kasan_check_write+0x18/0x20 [ 33.285006][ T482] ? up_write+0x66/0x280 [ 33.285061][ T482] ? kernfs_activate+0x1ee/0x200 [ 33.285129][ T482] kernfs_new_node+0x154/0x280 [ 33.285173][ T482] __kernfs_create_file+0x52/0x280 [ 33.285237][ T482] sysfs_add_file_mode_ns+0x1d2/0x280 [ 33.285311][ T482] internal_create_group+0x66c/0xe70 [ 33.285358][ T482] ? __kasan_check_write+0x18/0x20 [ 33.285445][ T482] ? sysfs_create_group+0x40/0x40 [ 33.285509][ T482] ? kernfs_activate+0x1ee/0x200 [ 33.285604][ T482] sysfs_create_groups+0x5c/0x130 [ 33.285660][ T482] device_add_attrs+0x12d/0x850 [ 33.285726][ T482] ? device_add_class_symlinks+0x260/0x260 [ 33.285799][ T482] ? __kasan_check_write+0x18/0x20 [ 33.285867][ T482] ? kobject_put+0x1cc/0x2a0 [ 33.285922][ T482] ? device_add_class_symlinks+0x22e/0x260 [ 33.285999][ T482] device_add+0x4db/0xbf0 [ 33.286076][ T482] input_register_device+0x9af/0x1080 [ 33.286145][ T482] uinput_create_device+0x416/0x670 [ 33.286218][ T482] uinput_ioctl_handler+0x3ea/0x1360 [ 33.286307][ T482] ? uinput_release+0x70/0x70 [ 33.286385][ T482] ? mutex_unlock+0x90/0x240 [ 33.286472][ T482] ? __fget_files+0x2bc/0x330 [ 33.286531][ T482] uinput_ioctl+0x2c/0x40 [ 33.286611][ T482] ? __cfi_uinput_ioctl+0x10/0x10 [ 33.286698][ T482] __se_sys_ioctl+0x123/0x1b0 [ 33.286765][ T482] __x64_sys_ioctl+0x7f/0xa0 [ 33.286821][ T482] x64_sys_call+0x1878/0x2ee0 [ 33.286894][ T482] do_syscall_64+0x57/0xf0 [ 33.286972][ T482] ? clear_bhb_loop+0x50/0xa0 [ 33.287058][ T482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.287120][ T482] RIP: 0033:0x7f0a4c9a94d9 [ 33.287160][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.287200][ T482] RSP: 002b:00007f0a4d7ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.287259][ T482] RAX: ffffffffffffffda RBX: 00007f0a4cc25fa0 RCX: 00007f0a4c9a94d9 [ 33.287297][ T482] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 33.287334][ T482] RBP: 00007f0a4d7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 33.287365][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.287400][ T482] R13: 00007f0a4cc26038 R14: 00007f0a4cc25fa0 R15: 00007fff17621e48 [ 33.287441][ T482] [ 33.639273][ T10] tipc: Node number set to 4269801488 [ 33.644940][ T36] audit: type=1400 audit(1794557256.510:207): avc: denied { ioctl } for pid=481 comm="syz.1.58" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.680184][ T36] audit: type=1400 audit(1794557256.920:208): avc: denied { write } for pid=485 comm="syz.1.59" name="ip6_mr_cache" dev="proc" ino=4026532559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.854994][ T496] syzkaller0: entered promiscuous mode [ 33.860633][ T496] syzkaller0: entered allmulticast mode [ 33.931655][ T500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 33.986387][ T36] audit: type=1400 audit(1794557257.230:209): avc: denied { ioctl } for pid=504 comm="syz.0.65" path="socket:[4719]" dev="sockfs" ino=4719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.037029][ T36] audit: type=1400 audit(1794557257.280:210): avc: denied { mounton } for pid=508 comm="syz.0.67" path="/13/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.086625][ T68] usb 3-1: USB disconnect, device number 2 [ 34.193765][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.334714][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 34.365112][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.376143][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.385400][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.402926][ T31] usb 2-1: config 0 descriptor?? [ 34.532815][ T36] audit: type=1400 audit(1794557257.770:211): avc: denied { write } for pid=538 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.811529][ T31] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 34.821218][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input8 [ 34.887231][ T31] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 35.093757][ T68] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.245463][ T68] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 35.263330][ T68] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.271578][ T31] usb 2-1: USB disconnect, device number 4 [ 35.282077][ T68] usb 4-1: config 0 descriptor?? [ 35.293185][ T68] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 35.313619][ T68] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 35.434490][ T68] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 35.442663][ T68] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.493811][ T545] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.502671][ T31] usb 4-1: USB disconnect, device number 8 [ 35.514339][ T31] ftdi_sio 4-1:0.0: device disconnected [ 35.565926][ T566] ./dev/sda1: Can't lookup blockdev [ 35.782432][ T31] kernel write not supported for file /rfkill (pid: 31 comm: kworker/1:0) [ 36.023939][ T572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 36.047525][ T36] audit: type=1400 audit(1794557259.290:212): avc: denied { create } for pid=573 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.073774][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.088936][ T576] FAULT_INJECTION: forcing a failure. [ 36.088936][ T576] name failslab, interval 1, probability 0, space 0, times 0 [ 36.101714][ T576] CPU: 1 UID: 0 PID: 576 Comm: syz.3.92 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 36.101746][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.101759][ T576] Call Trace: [ 36.101765][ T576] [ 36.101772][ T576] __dump_stack+0x21/0x30 [ 36.101798][ T576] dump_stack_lvl+0x140/0x1c0 [ 36.101816][ T576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.101834][ T576] ? kasan_save_track+0x4f/0x80 [ 36.101853][ T576] ? kasan_save_alloc_info+0x3a/0x50 [ 36.101880][ T576] dump_stack+0x19/0x20 [ 36.101897][ T576] should_fail_ex+0x3c2/0x510 [ 36.101916][ T576] should_failslab+0xac/0x100 [ 36.101937][ T576] kmem_cache_alloc_noprof+0x42/0x410 [ 36.101965][ T576] ? mas_wr_store_type+0x13f3/0x1b40 [ 36.101991][ T576] ? mas_alloc_nodes+0x254/0x9d0 [ 36.102020][ T576] mas_alloc_nodes+0x254/0x9d0 [ 36.102049][ T576] mas_preallocate+0x79b/0xc90 [ 36.102076][ T576] ? __cfi_mas_preallocate+0x10/0x10 [ 36.102103][ T576] ? __kasan_check_read+0x15/0x20 [ 36.102130][ T576] ? anon_vma_name+0x51/0xa0 [ 36.102155][ T576] ? vm_area_dup+0x415/0x560 [ 36.102180][ T576] __split_vma+0x449/0xc10 [ 36.102198][ T576] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 36.102218][ T576] ? mas_find+0x415/0x620 [ 36.102244][ T576] vms_gather_munmap_vmas+0x446/0xd90 [ 36.102265][ T576] do_vmi_align_munmap+0x251/0x5f0 [ 36.102293][ T576] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 36.102317][ T576] do_vmi_munmap+0x245/0x2e0 [ 36.102336][ T576] __vm_munmap+0x25b/0x3d0 [ 36.102355][ T576] ? vm_munmap+0x40/0x40 [ 36.102371][ T576] ? __se_sys_futex+0x13c/0x320 [ 36.102394][ T576] ? xfd_validate_state+0x68/0x140 [ 36.102413][ T576] ? blocking_notifier_call_chain+0x7c/0x90 [ 36.102438][ T576] __se_sys_munmap+0xb4/0x390 [ 36.102455][ T576] __x64_sys_munmap+0x5f/0x80 [ 36.102471][ T576] x64_sys_call+0x9c6/0x2ee0 [ 36.102493][ T576] do_syscall_64+0x57/0xf0 [ 36.102512][ T576] ? clear_bhb_loop+0x50/0xa0 [ 36.102539][ T576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.102565][ T576] RIP: 0033:0x7f7c94ba94d9 [ 36.102580][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.102596][ T576] RSP: 002b:00007f7c959a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 36.102617][ T576] RAX: ffffffffffffffda RBX: 00007f7c94e25fa0 RCX: 00007f7c94ba94d9 [ 36.102632][ T576] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000002000 [ 36.102646][ T576] RBP: 00007f7c94c3804e R08: 0000000000000000 R09: 0000000000000000 [ 36.102658][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.102671][ T576] R13: 00007f7c94e26038 R14: 00007f7c94e25fa0 R15: 00007ffe68a34658 [ 36.102688][ T576] [ 36.452430][ T586] FAULT_INJECTION: forcing a failure. [ 36.452430][ T586] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.465817][ T586] CPU: 0 UID: 0 PID: 586 Comm: syz.2.96 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 36.465846][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.465859][ T586] Call Trace: [ 36.465865][ T586] [ 36.465873][ T586] __dump_stack+0x21/0x30 [ 36.465897][ T586] dump_stack_lvl+0x140/0x1c0 [ 36.465916][ T586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.465935][ T586] ? check_stack_object+0x138/0x150 [ 36.465968][ T586] dump_stack+0x19/0x20 [ 36.465986][ T586] should_fail_ex+0x3c2/0x510 [ 36.466006][ T586] should_fail+0xf/0x20 [ 36.466023][ T586] should_fail_usercopy+0x1e/0x30 [ 36.466044][ T586] _copy_to_user+0x24/0xa0 [ 36.466068][ T586] simple_read_from_buffer+0xed/0x160 [ 36.466095][ T586] proc_fail_nth_read+0x1aa/0x220 [ 36.466122][ T586] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.466149][ T586] ? do_splice_direct+0x1ad/0x290 [ 36.466173][ T586] ? bpf_lsm_file_permission+0xd/0x20 [ 36.466196][ T586] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.466222][ T586] vfs_read+0x288/0xc70 [ 36.466261][ T586] ? fput+0x1a4/0x230 [ 36.466284][ T586] ? __cfi_vfs_read+0x10/0x10 [ 36.466313][ T586] ? __kasan_check_write+0x18/0x20 [ 36.466352][ T586] ? mutex_lock+0x97/0x1d0 [ 36.466377][ T586] ? __cfi_mutex_lock+0x10/0x10 [ 36.466405][ T586] ksys_read+0x145/0x260 [ 36.466422][ T586] ? __cfi_ksys_read+0x10/0x10 [ 36.466437][ T586] ? __x64_sys_sendfile64+0x19d/0x200 [ 36.466459][ T586] ? __kasan_check_read+0x15/0x20 [ 36.466487][ T586] __x64_sys_read+0x7f/0x90 [ 36.466504][ T586] x64_sys_call+0x2638/0x2ee0 [ 36.466524][ T586] do_syscall_64+0x57/0xf0 [ 36.466544][ T586] ? clear_bhb_loop+0x50/0xa0 [ 36.466571][ T586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.466597][ T586] RIP: 0033:0x7fa99d169d0e [ 36.466612][ T586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.466627][ T586] RSP: 002b:00007fa99e08ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.466648][ T586] RAX: ffffffffffffffda RBX: 00007fa99e0906c0 RCX: 00007fa99d169d0e [ 36.466663][ T586] RDX: 000000000000000f RSI: 00007fa99e0900a0 RDI: 0000000000000004 [ 36.466675][ T586] RBP: 00007fa99e090090 R08: 0000000000000000 R09: 0000000000000000 [ 36.466686][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.466697][ T586] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 36.466714][ T586] [ 36.469991][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 36.726999][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.735034][ T31] usb 2-1: Product: syz [ 36.735540][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.739217][ T31] usb 2-1: Manufacturer: syz [ 36.751367][ T31] usb 2-1: SerialNumber: syz [ 36.761229][ T590] random: crng reseeded on system resumption [ 36.893841][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 36.901482][ T10] usb 4-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 36.910599][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.918626][ T10] usb 4-1: Product: syz [ 36.922817][ T10] usb 4-1: Manufacturer: syz [ 36.927477][ T10] usb 4-1: SerialNumber: syz [ 36.941468][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 36.965847][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.972917][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 36.983601][ T31] usb 2-1: USB disconnect, device number 5 [ 36.995640][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.097624][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 37.114271][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.136664][ T588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 37.257770][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.271566][ T10] usb 4-1: unit 5 not found! [ 37.277587][ T10] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 37.286398][ T611] ./dev/sda1: Can't lookup blockdev [ 37.295319][ T10] usb 4-1: USB disconnect, device number 9 [ 37.328668][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.424734][ T616] loop5: detected capacity change from 0 to 7 [ 37.520164][ T622] netlink: 9 bytes leftover after parsing attributes in process `syz.1.109'. [ 37.529308][ T622] gretap0: entered promiscuous mode [ 37.535004][ T622] netlink: 5 bytes leftover after parsing attributes in process `syz.1.109'. [ 37.543877][ T622] 0ªî{X¹¦: renamed from gretap0 [ 37.549525][ T622] 0ªî{X¹¦: left promiscuous mode [ 37.554641][ T622] 0ªî{X¹¦: entered allmulticast mode [ 37.560414][ T622] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 37.743859][ T356] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 37.818651][ T635] FAULT_INJECTION: forcing a failure. [ 37.818651][ T635] name failslab, interval 1, probability 0, space 0, times 0 [ 37.827296][ T638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 37.831497][ T635] CPU: 0 UID: 0 PID: 635 Comm: syz.3.115 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 37.831570][ T635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.831599][ T635] Call Trace: [ 37.831611][ T635] [ 37.831630][ T635] __dump_stack+0x21/0x30 [ 37.831696][ T635] dump_stack_lvl+0x140/0x1c0 [ 37.831748][ T635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.831794][ T635] ? prep_new_page+0x42/0x180 [ 37.831857][ T635] ? get_page_from_freelist+0x4aea/0x4ba0 [ 37.831929][ T635] dump_stack+0x19/0x20 [ 37.831975][ T635] should_fail_ex+0x3c2/0x510 [ 37.832026][ T635] should_failslab+0xac/0x100 [ 37.832091][ T635] kmem_cache_alloc_node_noprof+0x45/0x420 [ 37.832166][ T635] ? __alloc_skb+0x10c/0x360 [ 37.832210][ T635] ? mas_parent_type+0x9b/0x130 [ 37.832257][ T635] __alloc_skb+0x10c/0x360 [ 37.832305][ T635] netlink_ack+0x155/0xa50 [ 37.832389][ T635] ? avc_has_perm_noaudit+0x289/0x360 [ 37.832462][ T635] ? cred_has_capability+0x296/0x3a0 [ 37.832537][ T635] netlink_rcv_skb+0x2cb/0x4e0 [ 37.832611][ T635] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 37.832709][ T635] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 37.832829][ T635] ? security_capable+0x44/0x130 [ 37.832935][ T635] ? ns_capable+0x90/0xf0 [ 37.833014][ T635] ? netlink_net_capable+0x129/0x160 [ 37.833102][ T635] nfnetlink_rcv+0x2c2/0x2940 [ 37.833175][ T635] ? stack_trace_save+0xaa/0x100 [ 37.833236][ T635] ? stack_depot_save_flags+0x38/0x800 [ 37.833307][ T635] ? kasan_save_track+0x4f/0x80 [ 37.833362][ T635] ? kasan_save_track+0x3e/0x80 [ 37.833424][ T635] ? kasan_save_alloc_info+0x3a/0x50 [ 37.833509][ T635] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 37.833574][ T635] ? __alloc_skb+0x13f/0x360 [ 37.833631][ T635] ? netlink_alloc_large_skb+0xf7/0x1b0 [ 37.833715][ T635] ? netlink_sendmsg+0x576/0xad0 [ 37.833798][ T635] ? ____sys_sendmsg+0x9a1/0xa00 [ 37.833880][ T635] ? ___sys_sendmsg+0x2a6/0x370 [ 37.833954][ T635] ? __x64_sys_sendmsg+0x1be/0x2a0 [ 37.834036][ T635] ? x64_sys_call+0x2a4c/0x2ee0 [ 37.834116][ T635] ? do_syscall_64+0x57/0xf0 [ 37.834203][ T635] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.834321][ T635] ? selinux_nlmsg_lookup+0x10a/0x960 [ 37.834400][ T635] ? selinux_netlink_send+0x7df/0x8b0 [ 37.834471][ T635] ? __asan_memset+0x39/0x50 [ 37.834563][ T635] ? __netlink_lookup+0x43a/0x4a0 [ 37.834643][ T635] ? netlink_autobind+0x1c0/0x1c0 [ 37.834744][ T635] ? is_vmalloc_addr+0x11/0x40 [ 37.834815][ T635] netlink_unicast+0x8bf/0xa70 [ 37.834904][ T635] netlink_sendmsg+0x7d1/0xad0 [ 37.834979][ T635] ? __cfi_netlink_sendmsg+0x10/0x10 [ 37.835055][ T635] ? __futex_queue+0x19f/0x350 [ 37.835137][ T635] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 37.835200][ T635] ? security_socket_sendmsg+0x3d/0x100 [ 37.835273][ T635] ____sys_sendmsg+0x9a1/0xa00 [ 37.835362][ T635] ? __import_iovec+0x5b9/0x7d0 [ 37.835432][ T635] ? __sys_sendmsg_sock+0x50/0x50 [ 37.835520][ T635] ? import_iovec+0x80/0xb0 [ 37.835604][ T635] ___sys_sendmsg+0x2a6/0x370 [ 37.835706][ T635] ? __sys_sendmsg+0x260/0x260 [ 37.835786][ T635] ? __cfi_futex_wait+0x10/0x10 [ 37.835867][ T635] ? __fget_files+0x2bc/0x330 [ 37.835935][ T635] __x64_sys_sendmsg+0x1be/0x2a0 [ 37.836022][ T635] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 37.836099][ T635] ? __kasan_check_write+0x18/0x20 [ 37.836189][ T635] ? fpregs_restore_userregs+0x11c/0x260 [ 37.836270][ T635] ? switch_fpu_return+0x12/0x20 [ 37.836361][ T635] x64_sys_call+0x2a4c/0x2ee0 [ 37.836426][ T635] do_syscall_64+0x57/0xf0 [ 37.836483][ T635] ? clear_bhb_loop+0x50/0xa0 [ 37.836552][ T635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.836631][ T635] RIP: 0033:0x7f7c94ba94d9 [ 37.836666][ T635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.836713][ T635] RSP: 002b:00007f7c959a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.836771][ T635] RAX: ffffffffffffffda RBX: 00007f7c94e25fa0 RCX: 00007f7c94ba94d9 [ 37.836809][ T635] RDX: 0000000020040024 RSI: 0000200000000440 RDI: 0000000000000005 [ 37.836847][ T635] RBP: 00007f7c94c3804e R08: 0000000000000000 R09: 0000000000000000 [ 37.836883][ T635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.836914][ T635] R13: 00007f7c94e26038 R14: 00007f7c94e25fa0 R15: 00007ffe68a34658 [ 37.836981][ T635] [ 38.053900][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.084743][ T356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 38.088119][ T639] netlink: 188 bytes leftover after parsing attributes in process `syz.1.114'. [ 38.092621][ T356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 38.255258][ T311] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.261872][ T356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 38.270623][ T311] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.272957][ T356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 38.281831][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.299993][ T356] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 38.355902][ T311] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 38.362632][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.372915][ T645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 38.387650][ T356] usb 1-1: Product: syz [ 38.390160][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.397650][ T356] usb 1-1: Manufacturer: syz [ 38.417116][ T311] usb 2-1: config 0 descriptor?? [ 38.424349][ T648] ./dev/sda1: Can't lookup blockdev [ 38.436571][ T356] usb 1-1: SerialNumber: syz [ 38.445285][ T619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.453067][ T619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.463522][ T356] pl2303 1-1:1.0: pl2303 converter detected [ 38.468571][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 38.468606][ T36] audit: type=1400 audit(1794557261.700:231): avc: denied { read } for pid=649 comm="syz.3.118" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.469811][ T356] pl2303 1-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 38.656938][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 38.663302][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 38.673306][ T31] usb 1-1: USB disconnect, device number 5 [ 38.674879][ T311] usb 2-1: USB disconnect, device number 6 [ 38.863766][ T356] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.014874][ T356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.021513][ T356] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 39.030613][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.039202][ T356] usb 4-1: config 0 descriptor?? [ 39.174382][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 39.192088][ T36] audit: type=1400 audit(1794557262.430:232): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.267610][ T377] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 39.283869][ T377] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.326782][ T311] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 39.335023][ T311] usb 3-1: config 0 has no interface number 0 [ 39.341153][ T311] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.352658][ T311] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 39.369016][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.377350][ T311] usb 3-1: Product: syz [ 39.381536][ T311] usb 3-1: Manufacturer: syz [ 39.386548][ T311] usb 3-1: SerialNumber: syz [ 39.395458][ T667] FAULT_INJECTION: forcing a failure. [ 39.395458][ T667] name failslab, interval 1, probability 0, space 0, times 0 [ 39.408251][ T311] usb 3-1: config 0 descriptor?? [ 39.413337][ T667] CPU: 0 UID: 0 PID: 667 Comm: syz.0.125 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 39.413368][ T667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.413382][ T667] Call Trace: [ 39.413390][ T667] [ 39.413399][ T667] __dump_stack+0x21/0x30 [ 39.413431][ T667] dump_stack_lvl+0x140/0x1c0 [ 39.413463][ T667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.413485][ T667] ? prep_new_page+0x42/0x180 [ 39.413515][ T667] ? get_page_from_freelist+0x4aea/0x4ba0 [ 39.413547][ T667] dump_stack+0x19/0x20 [ 39.413568][ T667] should_fail_ex+0x3c2/0x510 [ 39.413591][ T667] should_failslab+0xac/0x100 [ 39.413616][ T667] kmem_cache_alloc_node_noprof+0x45/0x420 [ 39.413652][ T667] ? __alloc_skb+0x10c/0x360 [ 39.413677][ T667] ? mas_parent_type+0x9b/0x130 [ 39.413700][ T667] __alloc_skb+0x10c/0x360 [ 39.413729][ T667] netlink_ack+0x155/0xa50 [ 39.413759][ T667] ? avc_has_perm_noaudit+0x289/0x360 [ 39.413787][ T667] ? cred_has_capability+0x296/0x3a0 [ 39.413824][ T667] netlink_rcv_skb+0x2cb/0x4e0 [ 39.413857][ T667] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 39.413894][ T667] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 39.413923][ T667] ? security_capable+0x44/0x130 [ 39.413944][ T667] ? ns_capable+0x90/0xf0 [ 39.413965][ T667] ? netlink_net_capable+0x129/0x160 [ 39.413990][ T667] nfnetlink_rcv+0x2c2/0x2940 [ 39.414013][ T667] ? stack_trace_save+0xaa/0x100 [ 39.414032][ T667] ? stack_depot_save_flags+0x38/0x800 [ 39.414054][ T667] ? kasan_save_track+0x4f/0x80 [ 39.414072][ T667] ? kasan_save_track+0x3e/0x80 [ 39.414091][ T667] ? kasan_save_alloc_info+0x3a/0x50 [ 39.414118][ T667] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 39.414140][ T667] ? __alloc_skb+0x13f/0x360 [ 39.414161][ T667] ? netlink_alloc_large_skb+0xf7/0x1b0 [ 39.414185][ T667] ? netlink_sendmsg+0x576/0xad0 [ 39.414212][ T667] ? ____sys_sendmsg+0x9a1/0xa00 [ 39.414240][ T667] ? ___sys_sendmsg+0x2a6/0x370 [ 39.414267][ T667] ? __x64_sys_sendmsg+0x1be/0x2a0 [ 39.414294][ T667] ? x64_sys_call+0x2a4c/0x2ee0 [ 39.414315][ T667] ? do_syscall_64+0x57/0xf0 [ 39.414336][ T667] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.414367][ T667] ? selinux_nlmsg_lookup+0x10a/0x960 [ 39.414394][ T667] ? selinux_netlink_send+0x7df/0x8b0 [ 39.414419][ T667] ? __asan_memset+0x39/0x50 [ 39.414458][ T667] ? __netlink_lookup+0x43a/0x4a0 [ 39.414489][ T667] ? netlink_autobind+0x1c0/0x1c0 [ 39.414520][ T667] ? is_vmalloc_addr+0x11/0x40 [ 39.414543][ T667] netlink_unicast+0x8bf/0xa70 [ 39.414569][ T667] netlink_sendmsg+0x7d1/0xad0 [ 39.414597][ T667] ? __cfi_netlink_sendmsg+0x10/0x10 [ 39.414625][ T667] ? __futex_queue+0x19f/0x350 [ 39.414648][ T667] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 39.414666][ T667] ? security_socket_sendmsg+0x3d/0x100 [ 39.414692][ T667] ____sys_sendmsg+0x9a1/0xa00 [ 39.414721][ T667] ? __import_iovec+0x5b9/0x7d0 [ 39.414745][ T667] ? __sys_sendmsg_sock+0x50/0x50 [ 39.414791][ T667] ? import_iovec+0x80/0xb0 [ 39.414818][ T667] ___sys_sendmsg+0x2a6/0x370 [ 39.414847][ T667] ? __sys_sendmsg+0x260/0x260 [ 39.414877][ T667] ? __cfi_futex_wait+0x10/0x10 [ 39.414908][ T667] ? __fget_files+0x2bc/0x330 [ 39.414933][ T667] __x64_sys_sendmsg+0x1be/0x2a0 [ 39.414961][ T667] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 39.414993][ T667] ? __kasan_check_write+0x18/0x20 [ 39.415025][ T667] ? fpregs_restore_userregs+0x11c/0x260 [ 39.415056][ T667] ? switch_fpu_return+0x12/0x20 [ 39.415086][ T667] x64_sys_call+0x2a4c/0x2ee0 [ 39.415109][ T667] do_syscall_64+0x57/0xf0 [ 39.415130][ T667] ? clear_bhb_loop+0x50/0xa0 [ 39.415160][ T667] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.415189][ T667] RIP: 0033:0x7fb00a1a94d9 [ 39.415207][ T667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.415224][ T667] RSP: 002b:00007fb00b011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.415245][ T667] RAX: ffffffffffffffda RBX: 00007fb00a425fa0 RCX: 00007fb00a1a94d9 [ 39.415260][ T667] RDX: 0000000020040024 RSI: 0000200000000440 RDI: 0000000000000005 [ 39.415274][ T667] RBP: 00007fb00a23804e R08: 0000000000000000 R09: 0000000000000000 [ 39.415286][ T667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.415298][ T667] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 39.415316][ T667] [ 39.462729][ T665] ./dev/sda1: Can't lookup blockdev [ 39.469454][ T311] asix 3-1:0.251: probe with driver asix failed with error -22 [ 39.740977][ T356] usbhid 4-1:0.0: can't add hid device: -71 [ 39.866698][ T356] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.877611][ T356] usb 4-1: USB disconnect, device number 10 [ 40.106735][ T669] ./dev/sda1: Can't lookup blockdev [ 40.251385][ T36] audit: type=1400 audit(1794557263.490:233): avc: denied { create } for pid=675 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.270623][ T36] audit: type=1400 audit(1794557263.500:234): avc: denied { read } for pid=675 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.533751][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.683740][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 40.691999][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.700250][ T311] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 40.707980][ T311] usb 4-1: can't read configurations, error -71 [ 40.967277][ T36] audit: type=1400 audit(1794557264.210:235): avc: denied { ioctl } for pid=680 comm="syz.1.131" path="socket:[6725]" dev="sockfs" ino=6725 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.991683][ T36] audit: type=1400 audit(1794557264.210:236): avc: denied { setopt } for pid=680 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.056633][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 41.074347][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.198446][ T697] ./dev/sda1: Can't lookup blockdev [ 41.244771][ T701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 41.318697][ T707] EXT4-fs: Invalid want_extra_isize 1 [ 41.369930][ T711] input: syz0 as /devices/virtual/input/input10 [ 41.379098][ T711] FAULT_INJECTION: forcing a failure. [ 41.379098][ T711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.396193][ T711] CPU: 1 UID: 0 PID: 711 Comm: syz.1.142 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 41.396218][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.396230][ T711] Call Trace: [ 41.396236][ T711] [ 41.396243][ T711] __dump_stack+0x21/0x30 [ 41.396265][ T711] dump_stack_lvl+0x140/0x1c0 [ 41.396283][ T711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.396301][ T711] ? check_stack_object+0x138/0x150 [ 41.396330][ T711] dump_stack+0x19/0x20 [ 41.396347][ T711] should_fail_ex+0x3c2/0x510 [ 41.396365][ T711] should_fail+0xf/0x20 [ 41.396381][ T711] should_fail_usercopy+0x1e/0x30 [ 41.396400][ T711] _copy_to_user+0x24/0xa0 [ 41.396422][ T711] simple_read_from_buffer+0xed/0x160 [ 41.396447][ T711] proc_fail_nth_read+0x1aa/0x220 [ 41.396471][ T711] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.396495][ T711] ? __check_object_size+0x54c/0x870 [ 41.396524][ T711] ? bpf_lsm_file_permission+0xd/0x20 [ 41.396546][ T711] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 41.396570][ T711] vfs_read+0x288/0xc70 [ 41.396597][ T711] ? _copy_to_user+0x7d/0xa0 [ 41.396619][ T711] ? __cfi_vfs_read+0x10/0x10 [ 41.396646][ T711] ? __kasan_check_write+0x18/0x20 [ 41.396683][ T711] ? mutex_lock+0x97/0x1d0 [ 41.396708][ T711] ? __cfi_mutex_lock+0x10/0x10 [ 41.396735][ T711] ksys_read+0x145/0x260 [ 41.396750][ T711] ? __cfi_ksys_read+0x10/0x10 [ 41.396766][ T711] ? __kasan_check_write+0x18/0x20 [ 41.396792][ T711] ? fput+0x1a4/0x230 [ 41.396814][ T711] ? __kasan_check_read+0x15/0x20 [ 41.396840][ T711] __x64_sys_read+0x7f/0x90 [ 41.396857][ T711] x64_sys_call+0x2638/0x2ee0 [ 41.396877][ T711] do_syscall_64+0x57/0xf0 [ 41.396894][ T711] ? clear_bhb_loop+0x50/0xa0 [ 41.396924][ T711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.396948][ T711] RIP: 0033:0x7f0a4c969d0e [ 41.396964][ T711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.396978][ T711] RSP: 002b:00007f0a4d7ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.396997][ T711] RAX: ffffffffffffffda RBX: 00007f0a4d7ec6c0 RCX: 00007f0a4c969d0e [ 41.397011][ T711] RDX: 000000000000000f RSI: 00007f0a4d7ec0a0 RDI: 0000000000000004 [ 41.397023][ T711] RBP: 00007f0a4d7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 41.397035][ T711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.397046][ T711] R13: 00007f0a4cc26038 R14: 00007f0a4cc25fa0 R15: 00007fff17621e48 [ 41.397063][ T711] [ 41.751685][ T36] audit: type=1400 audit(1794557264.990:237): avc: denied { read } for pid=712 comm="syz.1.143" path="socket:[7959]" dev="sockfs" ino=7959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.777419][ T713] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 41.939078][ T9] usb 3-1: USB disconnect, device number 3 [ 42.007975][ T725] FAULT_INJECTION: forcing a failure. [ 42.007975][ T725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.021182][ T725] CPU: 0 UID: 0 PID: 725 Comm: syz.0.147 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 42.021208][ T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.021220][ T725] Call Trace: [ 42.021225][ T725] [ 42.021232][ T725] __dump_stack+0x21/0x30 [ 42.021254][ T725] dump_stack_lvl+0x140/0x1c0 [ 42.021272][ T725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.021291][ T725] dump_stack+0x19/0x20 [ 42.021307][ T725] should_fail_ex+0x3c2/0x510 [ 42.021324][ T725] should_fail+0xf/0x20 [ 42.021340][ T725] should_fail_usercopy+0x1e/0x30 [ 42.021360][ T725] strncpy_from_user+0x29/0x280 [ 42.021378][ T725] getname_flags+0x106/0x6b0 [ 42.021395][ T725] ? __cfi_mutex_unlock+0x10/0x10 [ 42.021420][ T725] user_path_at+0x2b/0x60 [ 42.021441][ T725] __se_sys_mount+0x28a/0x480 [ 42.021457][ T725] ? ksys_write+0x1f3/0x260 [ 42.021474][ T725] ? __x64_sys_mount+0xf0/0xf0 [ 42.021491][ T725] __x64_sys_mount+0xc3/0xf0 [ 42.021506][ T725] x64_sys_call+0x2021/0x2ee0 [ 42.021525][ T725] do_syscall_64+0x57/0xf0 [ 42.021543][ T725] ? clear_bhb_loop+0x50/0xa0 [ 42.021569][ T725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.021594][ T725] RIP: 0033:0x7fb00a1a94d9 [ 42.021610][ T725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.021625][ T725] RSP: 002b:00007fb00b011028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.021644][ T725] RAX: ffffffffffffffda RBX: 00007fb00a425fa0 RCX: 00007fb00a1a94d9 [ 42.021659][ T725] RDX: 0000000000000000 RSI: 0000200000002800 RDI: 0000000000000000 [ 42.021671][ T725] RBP: 00007fb00b011090 R08: 0000000000000000 R09: 0000000000000000 [ 42.021683][ T725] R10: 00000000020040ac R11: 0000000000000246 R12: 0000000000000001 [ 42.021695][ T725] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 42.021712][ T725] [ 42.062619][ T729] ./dev/sda1: Can't lookup blockdev [ 42.243177][ T736] ./dev/sda1: Can't lookup blockdev [ 42.266000][ T36] audit: type=1400 audit(1794557265.500:238): avc: denied { ioctl } for pid=733 comm="syz.0.150" path="socket:[7992]" dev="sockfs" ino=7992 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.296707][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 42.315552][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.463366][ T756] FAULT_INJECTION: forcing a failure. [ 42.463366][ T756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.476617][ T756] CPU: 1 UID: 0 PID: 756 Comm: syz.0.158 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 42.476643][ T756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.476655][ T756] Call Trace: [ 42.476661][ T756] [ 42.476667][ T756] __dump_stack+0x21/0x30 [ 42.476690][ T756] dump_stack_lvl+0x140/0x1c0 [ 42.476708][ T756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.476727][ T756] dump_stack+0x19/0x20 [ 42.476744][ T756] should_fail_ex+0x3c2/0x510 [ 42.476762][ T756] should_fail+0xf/0x20 [ 42.476777][ T756] should_fail_usercopy+0x1e/0x30 [ 42.476797][ T756] strncpy_from_user+0x29/0x280 [ 42.476815][ T756] getname_flags+0x106/0x6b0 [ 42.476833][ T756] ? __cfi_mutex_unlock+0x10/0x10 [ 42.476859][ T756] user_path_at+0x2b/0x60 [ 42.476879][ T756] __se_sys_mount+0x28a/0x480 [ 42.476896][ T756] ? ksys_write+0x1f3/0x260 [ 42.476914][ T756] ? __x64_sys_mount+0xf0/0xf0 [ 42.476932][ T756] __x64_sys_mount+0xc3/0xf0 [ 42.476949][ T756] x64_sys_call+0x2021/0x2ee0 [ 42.476969][ T756] do_syscall_64+0x57/0xf0 [ 42.476988][ T756] ? clear_bhb_loop+0x50/0xa0 [ 42.477015][ T756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.477040][ T756] RIP: 0033:0x7fb00a1a94d9 [ 42.477055][ T756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.477069][ T756] RSP: 002b:00007fb00b011028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.477089][ T756] RAX: ffffffffffffffda RBX: 00007fb00a425fa0 RCX: 00007fb00a1a94d9 [ 42.477104][ T756] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000000 [ 42.477116][ T756] RBP: 00007fb00b011090 R08: 0000000000000000 R09: 0000000000000000 [ 42.477128][ T756] R10: 0000000000030024 R11: 0000000000000246 R12: 0000000000000001 [ 42.477139][ T756] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 42.477155][ T756] [ 42.478660][ T751] ./dev/sda1: Can't lookup blockdev [ 42.711524][ T767] ./dev/sda1: Can't lookup blockdev [ 43.163787][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 43.197005][ T790] ./dev/sda1: Can't lookup blockdev [ 43.235167][ T796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=796 comm=syz.1.174 [ 43.331126][ T799] FAULT_INJECTION: forcing a failure. [ 43.331126][ T799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.344252][ T799] CPU: 0 UID: 0 PID: 799 Comm: syz.2.175 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 43.344281][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.344292][ T799] Call Trace: [ 43.344298][ T799] [ 43.344305][ T799] __dump_stack+0x21/0x30 [ 43.344329][ T799] dump_stack_lvl+0x140/0x1c0 [ 43.344341][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.344354][ T799] ? check_stack_object+0x138/0x150 [ 43.344375][ T799] dump_stack+0x19/0x20 [ 43.344402][ T799] should_fail_ex+0x3c2/0x510 [ 43.344421][ T799] should_fail+0xf/0x20 [ 43.344436][ T799] should_fail_usercopy+0x1e/0x30 [ 43.344454][ T799] _copy_to_user+0x24/0xa0 [ 43.344475][ T799] simple_read_from_buffer+0xed/0x160 [ 43.344499][ T799] proc_fail_nth_read+0x1aa/0x220 [ 43.344527][ T799] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.344545][ T799] ? bpf_lsm_file_permission+0xd/0x20 [ 43.344577][ T799] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 43.344600][ T799] vfs_read+0x288/0xc70 [ 43.344626][ T799] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 43.344656][ T799] ? __cfi_vfs_read+0x10/0x10 [ 43.344682][ T799] ? __kasan_check_write+0x18/0x20 [ 43.344708][ T799] ? mutex_lock+0x97/0x1d0 [ 43.344734][ T799] ? __cfi_mutex_lock+0x10/0x10 [ 43.344753][ T799] ksys_read+0x145/0x260 [ 43.344764][ T799] ? __cfi_ksys_read+0x10/0x10 [ 43.344790][ T799] ? __kasan_check_write+0x18/0x20 [ 43.344817][ T799] ? fput+0x1a4/0x230 [ 43.344839][ T799] ? __kasan_check_read+0x15/0x20 [ 43.344864][ T799] __x64_sys_read+0x7f/0x90 [ 43.344879][ T799] x64_sys_call+0x2638/0x2ee0 [ 43.344899][ T799] do_syscall_64+0x57/0xf0 [ 43.344912][ T799] ? clear_bhb_loop+0x50/0xa0 [ 43.344946][ T799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.344978][ T799] RIP: 0033:0x7fa99d169d0e [ 43.344994][ T799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.345009][ T799] RSP: 002b:00007fa99e08ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.345028][ T799] RAX: ffffffffffffffda RBX: 00007fa99e0906c0 RCX: 00007fa99d169d0e [ 43.345042][ T799] RDX: 000000000000000f RSI: 00007fa99e0900a0 RDI: 0000000000000004 [ 43.345053][ T799] RBP: 00007fa99e090090 R08: 0000000000000000 R09: 0000000000000000 [ 43.345068][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.345076][ T799] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 43.345088][ T799] [ 43.346765][ T31] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 43.604423][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.612455][ T31] usb 4-1: Product: syz [ 43.616673][ T31] usb 4-1: Manufacturer: syz [ 43.621321][ T31] usb 4-1: SerialNumber: syz [ 43.627045][ T803] ./dev/sda1: Can't lookup blockdev [ 43.647218][ T356] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 43.655709][ T356] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.784901][ T807] ./dev/sda1: Can't lookup blockdev [ 43.845196][ T31] usb 4-1: USB disconnect, device number 13 [ 44.420118][ T816] ./dev/sda1: Can't lookup blockdev [ 44.439355][ T36] audit: type=1400 audit(1794557267.680:239): avc: denied { create } for pid=817 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.473736][ T36] audit: type=1400 audit(1794557267.680:240): avc: denied { setopt } for pid=817 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.555574][ T821] FAULT_INJECTION: forcing a failure. [ 44.555574][ T821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.569242][ T821] CPU: 1 UID: 0 PID: 821 Comm: syz.2.182 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 44.569270][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.569283][ T821] Call Trace: [ 44.569289][ T821] [ 44.569297][ T821] __dump_stack+0x21/0x30 [ 44.569320][ T821] dump_stack_lvl+0x140/0x1c0 [ 44.569339][ T821] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.569360][ T821] dump_stack+0x19/0x20 [ 44.569376][ T821] should_fail_ex+0x3c2/0x510 [ 44.569395][ T821] should_fail+0xf/0x20 [ 44.569428][ T821] should_fail_usercopy+0x1e/0x30 [ 44.569461][ T821] _copy_from_user+0x20/0xa0 [ 44.569483][ T821] ip_tunnel_parm_from_user+0xbe/0x3b0 [ 44.569506][ T821] ? __cfi_ip_tunnel_parm_from_user+0x10/0x10 [ 44.569529][ T821] ? has_cap_mac_admin+0xd0/0xd0 [ 44.569548][ T821] ip_tunnel_siocdevprivate+0xb1/0x1e0 [ 44.569570][ T821] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.569595][ T821] ? __cfi_ip_tunnel_siocdevprivate+0x10/0x10 [ 44.569618][ T821] ? full_name_hash+0xa1/0xf0 [ 44.569639][ T821] dev_ifsioc+0x951/0xc10 [ 44.569662][ T821] dev_ioctl+0xa62/0x1000 [ 44.569686][ T821] sock_ioctl+0x74e/0x7e0 [ 44.569703][ T821] ? __cfi_sock_ioctl+0x10/0x10 [ 44.569720][ T821] ? __fget_files+0x2bc/0x330 [ 44.569741][ T821] ? bpf_lsm_file_ioctl+0xd/0x20 [ 44.569761][ T821] ? security_file_ioctl+0x3e/0x110 [ 44.569795][ T821] ? __cfi_sock_ioctl+0x10/0x10 [ 44.569811][ T821] __se_sys_ioctl+0x123/0x1b0 [ 44.569831][ T821] __x64_sys_ioctl+0x7f/0xa0 [ 44.569850][ T821] x64_sys_call+0x1878/0x2ee0 [ 44.569869][ T821] do_syscall_64+0x57/0xf0 [ 44.569888][ T821] ? clear_bhb_loop+0x50/0xa0 [ 44.569913][ T821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.569937][ T821] RIP: 0033:0x7fa99d1a94d9 [ 44.569952][ T821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.569968][ T821] RSP: 002b:00007fa99e090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.569989][ T821] RAX: ffffffffffffffda RBX: 00007fa99d425fa0 RCX: 00007fa99d1a94d9 [ 44.570002][ T821] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 44.570014][ T821] RBP: 00007fa99e090090 R08: 0000000000000000 R09: 0000000000000000 [ 44.570026][ T821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.570037][ T821] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 44.570052][ T821] [ 44.620927][ T36] audit: type=1400 audit(1794557267.860:241): avc: denied { ioctl } for pid=822 comm="syz.3.183" path="/48/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=93 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.773973][ T773] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 44.776937][ T36] audit: type=1400 audit(1794557267.890:242): avc: denied { mounton } for pid=822 comm="syz.3.183" path="/48/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.801576][ T828] FAULT_INJECTION: forcing a failure. [ 44.801576][ T828] name fail_futex, interval 1, probability 0, space 0, times 1 [ 44.808616][ T36] audit: type=1400 audit(1794557267.890:243): avc: denied { append } for pid=822 comm="syz.3.183" name="uprobe_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.832705][ T828] CPU: 1 UID: 0 PID: 828 Comm: syz.2.186 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 44.832790][ T828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.832826][ T828] Call Trace: [ 44.832845][ T828] [ 44.832864][ T828] __dump_stack+0x21/0x30 [ 44.832919][ T828] dump_stack_lvl+0x140/0x1c0 [ 44.832978][ T828] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.833033][ T828] dump_stack+0x19/0x20 [ 44.833083][ T828] should_fail_ex+0x3c2/0x510 [ 44.833132][ T828] should_fail+0xf/0x20 [ 44.833179][ T828] get_futex_key+0x22c/0x940 [ 44.833243][ T828] ? __cfi_futex_setup_timer+0x10/0x10 [ 44.833325][ T828] ? __cfi_get_futex_key+0x10/0x10 [ 44.833407][ T828] futex_wait_requeue_pi+0x28d/0x9a0 [ 44.833483][ T828] ? __cfi_futex_wait_requeue_pi+0x10/0x10 [ 44.833550][ T828] ? kstrtouint_from_user+0x117/0x170 [ 44.833643][ T828] ? __kasan_check_write+0x18/0x20 [ 44.833721][ T828] ? __cfi_futex_wake_mark+0x10/0x10 [ 44.833789][ T828] ? vfs_write+0xbd2/0xfd0 [ 44.833838][ T828] do_futex+0x16d/0x510 [ 44.833901][ T828] ? __cfi_do_futex+0x10/0x10 [ 44.833965][ T828] ? mutex_unlock+0x90/0x240 [ 44.834032][ T828] __se_sys_futex+0x13c/0x320 [ 44.834089][ T828] ? fput+0x1a4/0x230 [ 44.834154][ T828] ? __x64_sys_futex+0x110/0x110 [ 44.834213][ T828] ? __cfi_ksys_write+0x10/0x10 [ 44.834279][ T828] __x64_sys_futex+0xe9/0x110 [ 44.834365][ T828] x64_sys_call+0x227f/0x2ee0 [ 44.834421][ T828] do_syscall_64+0x57/0xf0 [ 44.834479][ T828] ? clear_bhb_loop+0x50/0xa0 [ 44.834574][ T828] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.834663][ T828] RIP: 0033:0x7fa99d1a94d9 [ 44.834728][ T828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.834793][ T828] RSP: 002b:00007fa99e090028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 44.834849][ T828] RAX: ffffffffffffffda RBX: 00007fa99d425fa0 RCX: 00007fa99d1a94d9 [ 44.834889][ T828] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000680 [ 44.834926][ T828] RBP: 00007fa99e090090 R08: 0000000000000000 R09: 0000000000000000 [ 44.834965][ T828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.834995][ T828] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 44.835041][ T828] [ 44.854880][ T830] ./dev/sda1: Can't lookup blockdev [ 44.907781][ T832] FAULT_INJECTION: forcing a failure. [ 44.907781][ T832] name fail_futex, interval 1, probability 0, space 0, times 0 [ 45.161470][ T832] CPU: 1 UID: 0 PID: 832 Comm: syz.2.187 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 45.161502][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.161516][ T832] Call Trace: [ 45.161522][ T832] [ 45.161531][ T832] __dump_stack+0x21/0x30 [ 45.161555][ T832] dump_stack_lvl+0x140/0x1c0 [ 45.161575][ T832] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.161594][ T832] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 45.161615][ T832] dump_stack+0x19/0x20 [ 45.161631][ T832] should_fail_ex+0x3c2/0x510 [ 45.161652][ T832] should_fail+0xf/0x20 [ 45.161669][ T832] get_futex_key+0x178/0x940 [ 45.161691][ T832] ? __cfi_get_futex_key+0x10/0x10 [ 45.161711][ T832] ? import_iovec+0x80/0xb0 [ 45.161749][ T832] futex_wake+0x150/0x950 [ 45.161776][ T832] ? __cfi_futex_wake+0x10/0x10 [ 45.161804][ T832] do_futex+0x37d/0x510 [ 45.161827][ T832] ? __cfi_do_futex+0x10/0x10 [ 45.161850][ T832] __se_sys_futex+0x13c/0x320 [ 45.161872][ T832] ? __x64_sys_futex+0x110/0x110 [ 45.161894][ T832] ? __kasan_check_write+0x18/0x20 [ 45.161922][ T832] __x64_sys_futex+0xe9/0x110 [ 45.161943][ T832] x64_sys_call+0x227f/0x2ee0 [ 45.161963][ T832] do_syscall_64+0x57/0xf0 [ 45.161982][ T832] ? clear_bhb_loop+0x50/0xa0 [ 45.162008][ T832] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.162033][ T832] RIP: 0033:0x7fa99d1a94d9 [ 45.162049][ T832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.162064][ T832] RSP: 002b:00007fa99e0900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.162084][ T832] RAX: ffffffffffffffda RBX: 00007fa99d425fa8 RCX: 00007fa99d1a94d9 [ 45.162097][ T832] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa99d425fac [ 45.162110][ T832] RBP: 00007fa99d425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 45.162122][ T832] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 45.162134][ T832] R13: 00007fa99d426038 R14: 00007ffe54ba5060 R15: 00007ffe54ba5148 [ 45.162149][ T832] [ 45.638260][ T841] ./dev/sda1: Can't lookup blockdev [ 45.654943][ T36] audit: type=1400 audit(1794557268.900:244): avc: denied { write } for pid=842 comm="syz.1.191" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.678636][ T36] audit: type=1400 audit(1794557268.920:245): avc: denied { mounton } for pid=842 comm="syz.1.191" path="/53/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 45.809286][ T861] ./dev/sda1: Can't lookup blockdev [ 46.064088][ T356] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 46.210647][ T356] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 46.218949][ T356] usb 4-1: config 0 has no interface number 0 [ 46.226511][ T356] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 46.235624][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.243641][ T356] usb 4-1: Product: syz [ 46.247812][ T356] usb 4-1: Manufacturer: syz [ 46.252443][ T356] usb 4-1: SerialNumber: syz [ 46.257614][ T356] usb 4-1: config 0 descriptor?? [ 46.653015][ T356] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 46.663285][ T356] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 46.673014][ T356] asix 4-1:0.251: probe with driver asix failed with error -5 [ 46.681382][ T356] usb 4-1: USB disconnect, device number 14 [ 46.810860][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.811367][ T865] Bluetooth: hci0: command 0x0c20 tx timeout [ 46.834798][ T874] ./dev/sda1: Can't lookup blockdev [ 46.853312][ T876] FAULT_INJECTION: forcing a failure. [ 46.853312][ T876] name failslab, interval 1, probability 0, space 0, times 0 [ 46.865986][ T876] CPU: 0 UID: 0 PID: 876 Comm: syz.0.200 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 46.866022][ T876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 46.866035][ T876] Call Trace: [ 46.866041][ T876] [ 46.866049][ T876] __dump_stack+0x21/0x30 [ 46.866072][ T876] dump_stack_lvl+0x140/0x1c0 [ 46.866085][ T876] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.866098][ T876] ? prep_new_page+0x42/0x180 [ 46.866115][ T876] ? get_page_from_freelist+0x4aea/0x4ba0 [ 46.866136][ T876] dump_stack+0x19/0x20 [ 46.866148][ T876] should_fail_ex+0x3c2/0x510 [ 46.866161][ T876] should_failslab+0xac/0x100 [ 46.866176][ T876] kmem_cache_alloc_node_noprof+0x45/0x420 [ 46.866198][ T876] ? __alloc_skb+0x10c/0x360 [ 46.866213][ T876] ? mas_parent_type+0x9b/0x130 [ 46.866227][ T876] __alloc_skb+0x10c/0x360 [ 46.866242][ T876] netlink_ack+0x155/0xa50 [ 46.866260][ T876] ? avc_has_perm_noaudit+0x289/0x360 [ 46.866278][ T876] ? cred_has_capability+0x296/0x3a0 [ 46.866300][ T876] netlink_rcv_skb+0x2cb/0x4e0 [ 46.866319][ T876] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 46.866335][ T876] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 46.866355][ T876] ? security_capable+0x44/0x130 [ 46.866369][ T876] ? ns_capable+0x90/0xf0 [ 46.866384][ T876] ? netlink_net_capable+0x129/0x160 [ 46.866401][ T876] nfnetlink_rcv+0x2c2/0x2940 [ 46.866418][ T876] ? stack_trace_save+0xaa/0x100 [ 46.866431][ T876] ? stack_depot_save_flags+0x38/0x800 [ 46.866446][ T876] ? kasan_save_track+0x4f/0x80 [ 46.866460][ T876] ? kasan_save_track+0x3e/0x80 [ 46.866472][ T876] ? kasan_save_alloc_info+0x3a/0x50 [ 46.866490][ T876] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 46.866505][ T876] ? __alloc_skb+0x13f/0x360 [ 46.866522][ T876] ? netlink_alloc_large_skb+0xf7/0x1b0 [ 46.866539][ T876] ? netlink_sendmsg+0x576/0xad0 [ 46.866558][ T876] ? ____sys_sendmsg+0x9a1/0xa00 [ 46.866577][ T876] ? ___sys_sendmsg+0x2a6/0x370 [ 46.866596][ T876] ? __x64_sys_sendmsg+0x1be/0x2a0 [ 46.866615][ T876] ? x64_sys_call+0x2a4c/0x2ee0 [ 46.866629][ T876] ? do_syscall_64+0x57/0xf0 [ 46.866644][ T876] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.866667][ T876] ? selinux_nlmsg_lookup+0x10a/0x960 [ 46.866685][ T876] ? selinux_netlink_send+0x7df/0x8b0 [ 46.866702][ T876] ? __asan_memset+0x39/0x50 [ 46.866722][ T876] ? __netlink_lookup+0x43a/0x4a0 [ 46.866742][ T876] ? netlink_autobind+0x1c0/0x1c0 [ 46.866762][ T876] ? is_vmalloc_addr+0x11/0x40 [ 46.866778][ T876] netlink_unicast+0x8bf/0xa70 [ 46.866796][ T876] netlink_sendmsg+0x7d1/0xad0 [ 46.866816][ T876] ? __cfi_netlink_sendmsg+0x10/0x10 [ 46.866835][ T876] ? __futex_queue+0x19f/0x350 [ 46.866851][ T876] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 46.866864][ T876] ? security_socket_sendmsg+0x3d/0x100 [ 46.866882][ T876] ____sys_sendmsg+0x9a1/0xa00 [ 46.866902][ T876] ? __import_iovec+0x5b9/0x7d0 [ 46.866919][ T876] ? __sys_sendmsg_sock+0x50/0x50 [ 46.866939][ T876] ? import_iovec+0x80/0xb0 [ 46.866956][ T876] ___sys_sendmsg+0x2a6/0x370 [ 46.866976][ T876] ? __sys_sendmsg+0x260/0x260 [ 46.866996][ T876] ? __cfi_futex_wait+0x10/0x10 [ 46.867021][ T876] ? __fget_files+0x2bc/0x330 [ 46.867038][ T876] __x64_sys_sendmsg+0x1be/0x2a0 [ 46.867059][ T876] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 46.867080][ T876] ? __kasan_check_write+0x18/0x20 [ 46.867100][ T876] ? fpregs_restore_userregs+0x11c/0x260 [ 46.867121][ T876] ? switch_fpu_return+0x12/0x20 [ 46.867140][ T876] x64_sys_call+0x2a4c/0x2ee0 [ 46.867155][ T876] do_syscall_64+0x57/0xf0 [ 46.867170][ T876] ? clear_bhb_loop+0x50/0xa0 [ 46.867189][ T876] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.867208][ T876] RIP: 0033:0x7fb00a1a94d9 [ 46.867220][ T876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.867232][ T876] RSP: 002b:00007fb00b011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.867247][ T876] RAX: ffffffffffffffda RBX: 00007fb00a425fa0 RCX: 00007fb00a1a94d9 [ 46.867258][ T876] RDX: 0000000020040024 RSI: 0000200000000440 RDI: 0000000000000004 [ 46.867267][ T876] RBP: 00007fb00a23804e R08: 0000000000000000 R09: 0000000000000000 [ 46.867276][ T876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.867284][ T876] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 46.867297][ T876] [ 47.310923][ T36] audit: type=1400 audit(1794557270.597:246): avc: denied { write } for pid=879 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.597879][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.743639][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 47.750376][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.758841][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 47.771191][ T311] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 47.780321][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.788345][ T311] usb 1-1: Product: syz [ 47.792578][ T311] usb 1-1: Manufacturer: syz [ 47.797181][ T311] usb 1-1: SerialNumber: syz [ 47.821558][ T775] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 47.821576][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 48.000736][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.008019][ T311] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 48.015427][ T311] usb 1-1: 2:1 : sample bitwidth 255 in over sample bytes 3 [ 48.022823][ T311] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 48.033028][ T311] usb 1-1: USB disconnect, device number 6 [ 48.047498][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.181855][ T36] audit: type=1400 audit(1794557271.481:247): avc: denied { ioctl } for pid=892 comm="syz.3.207" path="socket:[8732]" dev="sockfs" ino=8732 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.214502][ T897] ./dev/sda1: Can't lookup blockdev [ 48.233460][ T36] audit: type=1400 audit(1794557271.543:248): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.345021][ T906] netlink: 'syz.2.211': attribute type 32 has an invalid length. [ 48.362279][ T908] FAULT_INJECTION: forcing a failure. [ 48.362279][ T908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.375490][ T908] CPU: 1 UID: 0 PID: 908 Comm: syz.1.213 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 48.375524][ T908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 48.375538][ T908] Call Trace: [ 48.375546][ T908] [ 48.375555][ T908] __dump_stack+0x21/0x30 [ 48.375581][ T908] dump_stack_lvl+0x140/0x1c0 [ 48.375601][ T908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.375622][ T908] dump_stack+0x19/0x20 [ 48.375641][ T908] should_fail_ex+0x3c2/0x510 [ 48.375661][ T908] should_fail+0xf/0x20 [ 48.375679][ T908] should_fail_usercopy+0x1e/0x30 [ 48.375700][ T908] _copy_from_iter+0x1a6/0x1520 [ 48.375725][ T908] ? __cfi__copy_from_iter+0x10/0x10 [ 48.375747][ T908] ? __check_object_size+0x54c/0x870 [ 48.375779][ T908] ? __cfi___check_object_size+0x10/0x10 [ 48.375810][ T908] ? skb_put+0x10e/0x200 [ 48.375834][ T908] netlink_sendmsg+0x66d/0xad0 [ 48.375863][ T908] ? __cfi_netlink_sendmsg+0x10/0x10 [ 48.375893][ T908] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 48.375913][ T908] ? security_socket_sendmsg+0x3d/0x100 [ 48.375940][ T908] ____sys_sendmsg+0x9a1/0xa00 [ 48.375970][ T908] ? __import_iovec+0x5b9/0x7d0 [ 48.375995][ T908] ? __sys_sendmsg_sock+0x50/0x50 [ 48.376024][ T908] ? import_iovec+0x80/0xb0 [ 48.376049][ T908] ___sys_sendmsg+0x2a6/0x370 [ 48.376078][ T908] ? __sys_sendmsg+0x260/0x260 [ 48.376106][ T908] ? proc_fail_nth_write+0x184/0x220 [ 48.376133][ T908] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 48.376164][ T908] ? __fget_files+0x2bc/0x330 [ 48.376187][ T908] __x64_sys_sendmsg+0x1be/0x2a0 [ 48.376218][ T908] ? fput+0x1a4/0x230 [ 48.376241][ T908] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 48.376272][ T908] ? ksys_write+0x1f3/0x260 [ 48.376292][ T908] ? __kasan_check_read+0x15/0x20 [ 48.376323][ T908] x64_sys_call+0x2a4c/0x2ee0 [ 48.376345][ T908] do_syscall_64+0x57/0xf0 [ 48.376379][ T908] ? clear_bhb_loop+0x50/0xa0 [ 48.376407][ T908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.376435][ T908] RIP: 0033:0x7f0a4c9a94d9 [ 48.376452][ T908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.376471][ T908] RSP: 002b:00007f0a4d7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.376494][ T908] RAX: ffffffffffffffda RBX: 00007f0a4cc25fa0 RCX: 00007f0a4c9a94d9 [ 48.376511][ T908] RDX: 00000000200040c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 48.376525][ T908] RBP: 00007f0a4d7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 48.376539][ T908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.376552][ T908] R13: 00007f0a4cc26038 R14: 00007f0a4cc25fa0 R15: 00007fff17621e48 [ 48.376570][ T908] [ 48.528489][ T912] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 48.598292][ T31] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 48.616473][ T912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=912 comm=syz.0.215 [ 48.680774][ T919] ./dev/sda1: Can't lookup blockdev [ 48.767013][ T31] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 48.775352][ T31] usb 4-1: config 0 has no interface number 0 [ 48.782923][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 48.792016][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.800133][ T31] usb 4-1: Product: syz [ 48.803489][ T927] netlink: 'syz.0.219': attribute type 12 has an invalid length. [ 48.804510][ T31] usb 4-1: Manufacturer: syz [ 48.816742][ T31] usb 4-1: SerialNumber: syz [ 48.824621][ T31] usb 4-1: config 0 descriptor?? [ 48.937730][ T933] netlink: 'syz.0.223': attribute type 32 has an invalid length. [ 48.976998][ T938] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 48.978567][ T938] FAULT_INJECTION: forcing a failure. [ 48.978567][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 49.003472][ T940] FAULT_INJECTION: forcing a failure. [ 49.003472][ T940] name failslab, interval 1, probability 0, space 0, times 0 [ 49.070715][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.0.225 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 49.070824][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.070850][ T938] Call Trace: [ 49.070868][ T938] [ 49.070887][ T938] __dump_stack+0x21/0x30 [ 49.070959][ T938] dump_stack_lvl+0x140/0x1c0 [ 49.071006][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.071059][ T938] dump_stack+0x19/0x20 [ 49.071103][ T938] should_fail_ex+0x3c2/0x510 [ 49.071149][ T938] should_failslab+0xac/0x100 [ 49.071197][ T938] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 49.071271][ T938] ? sidtab_sid2str_get+0x135/0x360 [ 49.071366][ T938] kmemdup_noprof+0x31/0x80 [ 49.071434][ T938] sidtab_sid2str_get+0x135/0x360 [ 49.071506][ T938] security_sid_to_context_core+0x30d/0x5d0 [ 49.071577][ T938] security_sid_to_context+0x2e/0x50 [ 49.071655][ T938] avc_audit_post_callback+0x117/0x790 [ 49.071722][ T938] ? _raw_spin_unlock+0x45/0x60 [ 49.071784][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.071845][ T938] ? audit_log_untrustedstring+0xea/0x100 [ 49.071916][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.071973][ T938] common_lsm_audit+0x1b9/0x220 [ 49.072026][ T938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.072080][ T938] ? __cfi_common_lsm_audit+0x10/0x10 [ 49.072135][ T938] slow_avc_audit+0x19f/0x220 [ 49.072187][ T938] ? __cfi_slow_avc_audit+0x10/0x10 [ 49.072273][ T938] ? __asan_memcpy+0x5a/0x80 [ 49.072347][ T938] ? avc_has_perm_noaudit+0x21f/0x360 [ 49.072409][ T938] avc_has_perm+0x1ec/0x240 [ 49.072462][ T938] ? __cfi_avc_has_perm+0x10/0x10 [ 49.072539][ T938] ? avc_has_perm_noaudit+0x26b/0x360 [ 49.072616][ T938] may_create+0x5ab/0x820 [ 49.072668][ T938] ? show_sid+0x1e0/0x1e0 [ 49.072783][ T938] ? generic_permission+0x1ec/0x590 [ 49.072858][ T938] selinux_inode_create+0x26/0x30 [ 49.072921][ T938] security_inode_create+0xbe/0x180 [ 49.072985][ T938] path_openat+0x1ae5/0x35a0 [ 49.073068][ T938] ? do_filp_open+0x440/0x440 [ 49.073130][ T938] do_filp_open+0x1f2/0x440 [ 49.073191][ T938] ? __cfi_do_filp_open+0x10/0x10 [ 49.073255][ T938] ? alloc_fd+0x4c1/0x570 [ 49.073298][ T938] do_sys_openat2+0x134/0x1d0 [ 49.073370][ T938] ? fput+0x1a4/0x230 [ 49.073423][ T938] ? do_sys_open+0x100/0x100 [ 49.073479][ T938] ? ksys_write+0x1f3/0x260 [ 49.073537][ T938] ? __cfi_ksys_write+0x10/0x10 [ 49.073583][ T938] __x64_sys_openat+0x13a/0x170 [ 49.073646][ T938] x64_sys_call+0xe69/0x2ee0 [ 49.073699][ T938] do_syscall_64+0x57/0xf0 [ 49.073751][ T938] ? clear_bhb_loop+0x50/0xa0 [ 49.073816][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.073885][ T938] RIP: 0033:0x7fb00a1a94d9 [ 49.073923][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.073968][ T938] RSP: 002b:00007fb00b011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.074024][ T938] RAX: ffffffffffffffda RBX: 00007fb00a425fa0 RCX: 00007fb00a1a94d9 [ 49.074078][ T938] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 49.074133][ T938] RBP: 00007fb00b011090 R08: 0000000000000000 R09: 0000000000000000 [ 49.074176][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.074211][ T938] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 49.074255][ T938] [ 49.431963][ T940] CPU: 0 UID: 0 PID: 940 Comm: syz.2.226 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 49.432000][ T940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.432026][ T940] Call Trace: [ 49.432034][ T940] [ 49.432043][ T940] __dump_stack+0x21/0x30 [ 49.432076][ T940] dump_stack_lvl+0x140/0x1c0 [ 49.432095][ T940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.432113][ T940] ? kasan_save_track+0x4f/0x80 [ 49.432133][ T940] ? kasan_save_alloc_info+0x3a/0x50 [ 49.432160][ T940] ? __kasan_kmalloc+0x96/0xb0 [ 49.432180][ T940] dump_stack+0x19/0x20 [ 49.432197][ T940] should_fail_ex+0x3c2/0x510 [ 49.432217][ T940] should_failslab+0xac/0x100 [ 49.432239][ T940] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 49.432269][ T940] ? __d_alloc+0x42/0x8c0 [ 49.432297][ T940] ? expand_files+0xda/0x6f0 [ 49.432319][ T940] __d_alloc+0x42/0x8c0 [ 49.432346][ T940] d_alloc_pseudo+0x23/0xc0 [ 49.432374][ T940] alloc_file_pseudo+0xde/0x1f0 [ 49.432397][ T940] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 49.432420][ T940] ? _raw_spin_unlock+0x45/0x60 [ 49.432441][ T940] anon_inode_getfile+0xaa/0x190 [ 49.432465][ T940] __se_sys_timerfd_create+0x31d/0x590 [ 49.432492][ T940] ? __x64_sys_timerfd_create+0x80/0x80 [ 49.432518][ T940] ? __kasan_check_write+0x18/0x20 [ 49.432546][ T940] __x64_sys_timerfd_create+0x5f/0x80 [ 49.432572][ T940] x64_sys_call+0x2e54/0x2ee0 [ 49.432593][ T940] do_syscall_64+0x57/0xf0 [ 49.432612][ T940] ? clear_bhb_loop+0x50/0xa0 [ 49.432641][ T940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.432668][ T940] RIP: 0033:0x7fa99d1a94d9 [ 49.432684][ T940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.432702][ T940] RSP: 002b:00007fa99e090028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 49.432731][ T940] RAX: ffffffffffffffda RBX: 00007fa99d425fa0 RCX: 00007fa99d1a94d9 [ 49.432746][ T940] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000001 [ 49.432759][ T940] RBP: 00007fa99d23804e R08: 0000000000000000 R09: 0000000000000000 [ 49.432772][ T940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.432784][ T940] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 49.432801][ T940] [ 49.433438][ T31] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 49.449776][ T36] kauditd_printk_skb: 1340 callbacks suppressed [ 49.449818][ T36] audit: type=1400 audit(1794557272.774:1589): avc: denied { rmdir } for pid=297 comm="syz-executor" name="mnt" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 49.455352][ T31] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 49.781007][ T31] asix 4-1:0.251: probe with driver asix failed with error -5 [ 49.790234][ T31] usb 4-1: USB disconnect, device number 15 [ 49.809196][ T946] ./dev/sda1: Can't lookup blockdev [ 49.849218][ T950] FAULT_INJECTION: forcing a failure. [ 49.849218][ T950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.862560][ T950] CPU: 1 UID: 0 PID: 950 Comm: syz.0.230 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 49.862590][ T950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.862604][ T950] Call Trace: [ 49.862610][ T950] [ 49.862617][ T950] __dump_stack+0x21/0x30 [ 49.862641][ T950] dump_stack_lvl+0x140/0x1c0 [ 49.862660][ T950] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.862679][ T950] ? check_stack_object+0x138/0x150 [ 49.862711][ T950] dump_stack+0x19/0x20 [ 49.862734][ T950] should_fail_ex+0x3c2/0x510 [ 49.862749][ T950] should_fail+0xf/0x20 [ 49.862761][ T950] should_fail_usercopy+0x1e/0x30 [ 49.862776][ T950] _copy_to_user+0x24/0xa0 [ 49.862793][ T950] simple_read_from_buffer+0xed/0x160 [ 49.862811][ T950] proc_fail_nth_read+0x1aa/0x220 [ 49.862830][ T950] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.862849][ T950] ? bpf_lsm_file_permission+0xd/0x20 [ 49.862866][ T950] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.862884][ T950] vfs_read+0x288/0xc70 [ 49.862905][ T950] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.862928][ T950] ? __cfi_vfs_read+0x10/0x10 [ 49.862947][ T950] ? __kasan_check_write+0x18/0x20 [ 49.862968][ T950] ? mutex_lock+0x97/0x1d0 [ 49.862986][ T950] ? __cfi_mutex_lock+0x10/0x10 [ 49.863006][ T950] ksys_read+0x145/0x260 [ 49.863019][ T950] ? __cfi_ksys_read+0x10/0x10 [ 49.863030][ T950] ? __kasan_check_write+0x18/0x20 [ 49.863050][ T950] ? fput+0x1a4/0x230 [ 49.863066][ T950] ? __kasan_check_read+0x15/0x20 [ 49.863086][ T950] __x64_sys_read+0x7f/0x90 [ 49.863099][ T950] x64_sys_call+0x2638/0x2ee0 [ 49.863114][ T950] do_syscall_64+0x57/0xf0 [ 49.863129][ T950] ? clear_bhb_loop+0x50/0xa0 [ 49.863148][ T950] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.863173][ T950] RIP: 0033:0x7fb00a169d0e [ 49.863186][ T950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.863198][ T950] RSP: 002b:00007fb00b010fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.863213][ T950] RAX: ffffffffffffffda RBX: 00007fb00b0116c0 RCX: 00007fb00a169d0e [ 49.863225][ T950] RDX: 000000000000000f RSI: 00007fb00b0110a0 RDI: 0000000000000004 [ 49.863234][ T950] RBP: 00007fb00b011090 R08: 0000000000000000 R09: 0000000000000000 [ 49.863243][ T950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.863253][ T950] R13: 00007fb00a426038 R14: 00007fb00a425fa0 R15: 00007ffcc853f4a8 [ 49.863265][ T950] [ 50.138732][ T36] audit: type=1400 audit(1794557273.492:1590): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.162300][ T36] audit: type=1400 audit(1794557273.512:1591): avc: denied { read } for pid=150 comm="dhcpcd" name="n16" dev="tmpfs" ino=960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.210891][ T36] audit: type=1400 audit(1794557273.512:1592): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.234551][ T36] audit: type=1400 audit(1794557273.512:1593): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.258070][ T36] audit: type=1400 audit(1794557273.563:1594): avc: denied { search } for pid=951 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.349653][ T967] ./dev/sda1: Can't lookup blockdev [ 50.371611][ T970] FAULT_INJECTION: forcing a failure. [ 50.371611][ T970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.376150][ T36] audit: type=1400 audit(1794557273.748:1595): avc: denied { setcheckreqprot } for pid=969 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.384705][ T970] CPU: 0 UID: 0 PID: 970 Comm: syz.3.238 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 50.384792][ T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.384842][ T970] Call Trace: [ 50.384866][ T970] [ 50.384890][ T970] __dump_stack+0x21/0x30 [ 50.384989][ T970] dump_stack_lvl+0x140/0x1c0 [ 50.385033][ T970] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.385088][ T970] ? check_stack_object+0x138/0x150 [ 50.385169][ T970] dump_stack+0x19/0x20 [ 50.385215][ T970] should_fail_ex+0x3c2/0x510 [ 50.385270][ T970] should_fail+0xf/0x20 [ 50.385336][ T970] should_fail_usercopy+0x1e/0x30 [ 50.385390][ T970] _copy_to_user+0x24/0xa0 [ 50.385460][ T970] simple_read_from_buffer+0xed/0x160 [ 50.385532][ T970] proc_fail_nth_read+0x1aa/0x220 [ 50.385604][ T970] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.385679][ T970] ? bpf_lsm_file_permission+0xd/0x20 [ 50.385739][ T970] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 50.385809][ T970] vfs_read+0x288/0xc70 [ 50.385895][ T970] ? __cfi_vfs_read+0x10/0x10 [ 50.385963][ T970] ? __kasan_check_write+0x18/0x20 [ 50.386051][ T970] ? mutex_lock+0x97/0x1d0 [ 50.386116][ T970] ? __cfi_mutex_lock+0x10/0x10 [ 50.386209][ T970] ksys_read+0x145/0x260 [ 50.386282][ T970] ? __cfi_ksys_read+0x10/0x10 [ 50.386350][ T970] ? __kasan_check_write+0x18/0x20 [ 50.386425][ T970] ? fput+0x1a4/0x230 [ 50.386482][ T970] ? __kasan_check_read+0x15/0x20 [ 50.386558][ T970] __x64_sys_read+0x7f/0x90 [ 50.386607][ T970] x64_sys_call+0x2638/0x2ee0 [ 50.386664][ T970] do_syscall_64+0x57/0xf0 [ 50.386714][ T970] ? clear_bhb_loop+0x50/0xa0 [ 50.386787][ T970] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.386855][ T970] RIP: 0033:0x7f7c94b69d0e [ 50.386908][ T970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.386954][ T970] RSP: 002b:00007f7c959a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.387012][ T970] RAX: ffffffffffffffda RBX: 00007f7c959a26c0 RCX: 00007f7c94b69d0e [ 50.387054][ T970] RDX: 000000000000000f RSI: 00007f7c959a20a0 RDI: 0000000000000004 [ 50.387085][ T970] RBP: 00007f7c959a2090 R08: 0000000000000000 R09: 0000000000000000 [ 50.387131][ T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.387166][ T970] R13: 00007f7c94e26038 R14: 00007f7c94e25fa0 R15: 00007ffe68a34658 [ 50.387213][ T970] [ 50.727789][ T982] FAULT_INJECTION: forcing a failure. [ 50.727789][ T982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.740989][ T311] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 50.741078][ T982] CPU: 1 UID: 0 PID: 982 Comm: syz.1.244 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 50.741186][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.741231][ T982] Call Trace: [ 50.741250][ T982] [ 50.741270][ T982] __dump_stack+0x21/0x30 [ 50.741329][ T982] dump_stack_lvl+0x140/0x1c0 [ 50.741379][ T982] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.741436][ T982] ? check_stack_object+0x81/0x150 [ 50.741514][ T982] dump_stack+0x19/0x20 [ 50.741562][ T982] should_fail_ex+0x3c2/0x510 [ 50.741627][ T982] should_fail+0xf/0x20 [ 50.741668][ T982] should_fail_usercopy+0x1e/0x30 [ 50.741726][ T982] _copy_from_user+0x20/0xa0 [ 50.741786][ T982] memdup_user+0x81/0x170 [ 50.741852][ T982] ? strndup_user+0x40/0xd0 [ 50.741928][ T982] strndup_user+0x6c/0xd0 [ 50.741995][ T982] __se_sys_mount+0x9f/0x480 [ 50.742043][ T982] ? ksys_write+0x1f3/0x260 [ 50.742082][ T982] ? __x64_sys_mount+0xf0/0xf0 [ 50.742147][ T982] __x64_sys_mount+0xc3/0xf0 [ 50.742191][ T982] x64_sys_call+0x2021/0x2ee0 [ 50.742239][ T982] do_syscall_64+0x57/0xf0 [ 50.742292][ T982] ? clear_bhb_loop+0x50/0xa0 [ 50.742365][ T982] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.742428][ T982] RIP: 0033:0x7f0a4c9a94d9 [ 50.742465][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.742521][ T982] RSP: 002b:00007f0a4d7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.742602][ T982] RAX: ffffffffffffffda RBX: 00007f0a4cc25fa0 RCX: 00007f0a4c9a94d9 [ 50.742640][ T982] RDX: 0000200000003c80 RSI: 0000200000003c40 RDI: 0000000000000000 [ 50.742675][ T982] RBP: 00007f0a4d7ec090 R08: 0000200000003cc0 R09: 0000000000000000 [ 50.742712][ T982] R10: 0000000001000003 R11: 0000000000000246 R12: 0000000000000001 [ 50.742742][ T982] R13: 00007f0a4cc26038 R14: 00007f0a4cc25fa0 R15: 00007fff17621e48 [ 50.742786][ T982] [ 50.767315][ T356] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.820865][ T984] ./dev/sda1: Can't lookup blockdev [ 50.992302][ T356] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 51.001519][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.014127][ T356] usb-storage 3-1:1.0: USB Mass Storage device detected [ 51.031517][ T311] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 51.039800][ T311] usb 4-1: config 0 has no interface number 0 [ 51.047541][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 51.056864][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.064911][ T311] usb 4-1: Product: syz [ 51.069133][ T311] usb 4-1: Manufacturer: syz [ 51.073866][ T311] usb 4-1: SerialNumber: syz [ 51.079336][ T311] usb 4-1: config 0 descriptor?? [ 51.118405][ T36] audit: type=1400 audit(1794557274.505:1596): avc: denied { write } for pid=996 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.149306][ T999] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 51.160299][ T999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=999 comm=syz.1.250 [ 51.187967][ T1004] ./dev/sda1: Can't lookup blockdev [ 51.198674][ T36] audit: type=1400 audit(1794557274.587:1597): avc: denied { connect } for pid=1002 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.234146][ T36] audit: type=1400 audit(1794557274.617:1598): avc: denied { create } for pid=1002 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.311977][ T1011] ./dev/sda1: Can't lookup blockdev [ 51.405481][ T356] scsi host1: usb-storage 3-1:1.0 [ 51.430211][ T1026] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 51.441278][ T1026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1026 comm=syz.0.262 [ 51.480012][ T311] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 51.490363][ T311] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 51.500108][ T311] asix 4-1:0.251: probe with driver asix failed with error -5 [ 51.510652][ T311] usb 4-1: USB disconnect, device number 16 [ 51.580072][ T1030] ./dev/sda1: Can't lookup blockdev [ 51.615997][ T356] usb 3-1: USB disconnect, device number 4 [ 51.761358][ T1051] ./dev/sda1: Can't lookup blockdev [ 52.005035][ T1058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1058 comm=syz.3.275 [ 52.008833][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.018763][ T1058] netlink: 5 bytes leftover after parsing attributes in process `syz.3.275'. [ 52.034001][ T1058] 0ªî{X¹¦: renamed from gretap0 [ 52.039591][ T1058] 0ªî{X¹¦: entered allmulticast mode [ 52.045050][ T1058] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 52.127700][ T1062] device-mapper: table: 252:0: verity: Not enough arguments (-EINVAL) [ 52.136046][ T1062] device-mapper: ioctl: error adding target to table [ 52.151843][ T1065] FAULT_INJECTION: forcing a failure. [ 52.151843][ T1065] name failslab, interval 1, probability 0, space 0, times 0 [ 52.164490][ T1065] CPU: 0 UID: 0 PID: 1065 Comm: syz.2.278 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 52.164517][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.164530][ T1065] Call Trace: [ 52.164537][ T1065] [ 52.164544][ T1065] __dump_stack+0x21/0x30 [ 52.164567][ T1065] dump_stack_lvl+0x140/0x1c0 [ 52.164580][ T1065] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.164594][ T1065] dump_stack+0x19/0x20 [ 52.164605][ T1065] should_fail_ex+0x3c2/0x510 [ 52.164619][ T1065] should_failslab+0xac/0x100 [ 52.164634][ T1065] kmem_cache_alloc_noprof+0x42/0x410 [ 52.164655][ T1065] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 52.164668][ T1065] ? alloc_empty_file+0xbf/0x270 [ 52.164684][ T1065] ? arch_stack_walk+0x10a/0x170 [ 52.164700][ T1065] alloc_empty_file+0xbf/0x270 [ 52.164716][ T1065] path_openat+0xf4/0x35a0 [ 52.164732][ T1065] ? stack_depot_save_flags+0x38/0x800 [ 52.164747][ T1065] ? kasan_save_track+0x4f/0x80 [ 52.164760][ T1065] ? kasan_save_track+0x3e/0x80 [ 52.164772][ T1065] ? kasan_save_alloc_info+0x3a/0x50 [ 52.164791][ T1065] ? __kasan_slab_alloc+0x73/0x90 [ 52.164805][ T1065] ? getname+0x1b/0x30 [ 52.164817][ T1065] ? do_sys_openat2+0xda/0x1d0 [ 52.164833][ T1065] ? __x64_sys_openat+0x13a/0x170 [ 52.164851][ T1065] ? x64_sys_call+0xe69/0x2ee0 [ 52.164865][ T1065] ? do_syscall_64+0x57/0xf0 [ 52.164881][ T1065] ? do_filp_open+0x440/0x440 [ 52.164898][ T1065] do_filp_open+0x1f2/0x440 [ 52.164914][ T1065] ? __cfi_do_filp_open+0x10/0x10 [ 52.164937][ T1065] ? alloc_fd+0x4c1/0x570 [ 52.164951][ T1065] do_sys_openat2+0x134/0x1d0 [ 52.164968][ T1065] ? fput+0x1a4/0x230 [ 52.164983][ T1065] ? do_sys_open+0x100/0x100 [ 52.165000][ T1065] ? ksys_write+0x1f3/0x260 [ 52.165012][ T1065] ? __cfi_ksys_write+0x10/0x10 [ 52.165024][ T1065] __x64_sys_openat+0x13a/0x170 [ 52.165042][ T1065] x64_sys_call+0xe69/0x2ee0 [ 52.165057][ T1065] do_syscall_64+0x57/0xf0 [ 52.165070][ T1065] ? clear_bhb_loop+0x50/0xa0 [ 52.165090][ T1065] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.165108][ T1065] RIP: 0033:0x7fa99d1a94d9 [ 52.165120][ T1065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.165131][ T1065] RSP: 002b:00007fa99e090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.165146][ T1065] RAX: ffffffffffffffda RBX: 00007fa99d425fa0 RCX: 00007fa99d1a94d9 [ 52.165157][ T1065] RDX: 0000000000020203 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 52.165167][ T1065] RBP: 00007fa99e090090 R08: 0000000000000000 R09: 0000000000000000 [ 52.165176][ T1065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.165185][ T1065] R13: 00007fa99d426038 R14: 00007fa99d425fa0 R15: 00007ffe54ba5148 [ 52.165196][ T1065] [ 52.440965][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 52.447507][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.455968][ T311] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 52.465801][ T311] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 52.478576][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.487671][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.495716][ T311] usb 2-1: Product: syz [ 52.499923][ T311] usb 2-1: Manufacturer: syz [ 52.504617][ T311] usb 2-1: SerialNumber: syz [ 52.559396][ T1069] ======================================================= [ 52.559396][ T1069] WARNING: The mand mount option has been deprecated and [ 52.559396][ T1069] and is ignored by this kernel. Remove the mand [ 52.559396][ T1069] option from the mount to silence this warning. [ 52.559396][ T1069] ======================================================= [ 52.714669][ T311] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 52.715729][ T356] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.721496][ T311] cdc_ncm 2-1:1.0: bind() failure [ 52.735356][ T311] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 52.742207][ T311] cdc_ncm 2-1:1.1: bind() failure [ 52.750740][ T311] usb 2-1: USB disconnect, device number 7 [ 52.870761][ T356] usb 3-1: device descriptor read/64, error -71 [ 53.106097][ T356] usb 3-1: device descriptor read/64, error -71 [ 53.261769][ T1095] printk: legacy console [ttyS0] disabled [ 54.405026][ T1108] printk: legacy console [ttyS0] enabled [ 54.411036][ T9] usb 4-1: config 0 descriptor?? [ 54.416715][ T31] usb 2-1: string descriptor 0 read error: -71 [ 54.423398][ T31] uclogic 0003:5543:004D.000B: failed retrieving string descriptor #200: -71 [ 54.427376][ T1131] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.433113][ T31] uclogic 0003:5543:004D.000B: failed retrieving pen parameters: -71 [ 54.439645][ T1131] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.448107][ T31] uclogic 0003:5543:004D.000B: failed probing pen v2 parameters: -71 [ 54.462745][ T31] uclogic 0003:5543:004D.000B: failed probing parameters: -71 [ 54.470292][ T31] uclogic 0003:5543:004D.000B: probe with driver uclogic failed with error -71 [ 54.480393][ T31] usb 2-1: USB disconnect, device number 8 [ 54.548657][ T356] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 54.569519][ T356] usb 3-1: device descriptor read/8, error -71 [ 54.654495][ T1131] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.661811][ T1131] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.678947][ T1141] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 54.699970][ T356] usb 3-1: device descriptor read/8, error -71 [ 54.814242][ T356] usb usb3-port1: unable to enumerate USB device [ 54.843927][ T311] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 54.862093][ T311] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.975678][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 54.975696][ T36] audit: type=1400 audit(1794557278.432:1610): avc: denied { mounton } for pid=1149 comm="syz.0.314" path="/85/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 54.977716][ T1152] ./dev/sda1: Can't lookup blockdev [ 55.069105][ T9] Error reading MAC address [ 55.459143][ T1159] netlink: 'syz.2.317': attribute type 4 has an invalid length. [ 55.466885][ T1159] netlink: 17 bytes leftover after parsing attributes in process `syz.2.317'. [ 55.480114][ T1159] printk: legacy console [ttyS0] disabled