last executing test programs: 9.552292622s ago: executing program 1 (id=2): memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06m\xbe\x0e\xc2y\x1a\\\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xfc}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5vZg5\r\xfb#;\x98q\xb3o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi', 0x2) setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0307fafff8fffddbdf253d000000"], 0x14}}, 0x40040) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd700000006c000005000000180073797a5f74750100000000000000000005000200fc000000050000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4a, 0x1800007, 0x81, 0x4, 0xfff8, 0x0, 0x1000, 0x4000000000a, 0x4bfb, 0x4, 0x200000000002, 0xffff, 0x3, 0x4, 0x9, 0x100000090], 0x0, 0x28657}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x5, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0xfe3b) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r6 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x4, 0x7a, [0x4, 0x7, 0x0, 0xb, 0x3, 0x76f5], 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/122}, &(0x7f0000000380)=0x78) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fdf0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000020103000000000000000000020000001800018014000180080001"], 0x38}}, 0x4) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0xff9e) 8.823786527s ago: executing program 1 (id=5): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="08000000001f", 0x6}, {0x0}], 0x2}}], 0x2, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x3, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0xf3dd]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x5, 0x0, [{0x4b564d04, 0xec000000, 0xcf}, {0x96d, 0x0, 0x100000001}, {0x571, 0x0, 0x8001}, {0x2b7, 0x0, 0x5}, {0xb31, 0x0, 0x7}]}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r8, 0x770a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfe, {0x6, 0x1b, './proc', './proc/thread-self/fail-nth'}}, 0x3c}}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x3}}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r7) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r11, 0xb08, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) 7.782680885s ago: executing program 1 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540100001000050000000000000000007f000001000000000000000000000000000000000000000000000000000000004e210000000000000200a02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200"], 0x154}}, 0x4044010) 7.700312919s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001280)=ANY=[@ANYBLOB="e01000001000010000000000fedbdf25070000001300000008000000ffffffffc0101a80bc1007"], 0x10e0}], 0x1}, 0x4004080) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x5fda9137}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x5fda9137}}]}}) 1.9078945s ago: executing program 2 (id=33): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.869158902s ago: executing program 2 (id=35): r0 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x8010, r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000005c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"f8bc0fa2011a51a1dc26f7c9d62636d6", r2, r3, {0x4, 0x5}, {0x0, 0x44}, 0xf, [0xfffffffffffffbff, 0x4, 0x3, 0x3ad, 0xfffffffffffffff6, 0x100, 0x1, 0xa, 0x400, 0x3, 0x3, 0x9, 0x5, 0x7, 0xd, 0xc25]}) r4 = dup(r1) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000005f00)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0xfc}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004021200180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000080)={0x2, 0x3, 0x1}) 1.788191216s ago: executing program 3 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5001000010000100010000000000fc0000010000000000000000000000000000000000790158eae840a10e9930de350000000000000000fab922100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000000102030405060708090a0b0c0d0e0f00010203"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0x1}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x4000001) r1 = socket$inet6(0xa, 0x2, 0x11) sendmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000040)=@phonet={0x23, 0x9, 0x1, 0x91}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000001940)="304af27290cd635b4f335375c4d8", 0xe}, {&(0x7f0000001980)="1b8603e84fc4018a09216fc343815240001967cdd1ec57802baafbc4eb6ba96aef3834d398c8c87a71372086ea994818f5784e50cae114d47c029c96551102d41c91e79632b9f090d581f44a0d121cf098aaa40456dab62bbe131cc8014f3a2f478839430b4c8d12ca976b3418094bf7fb87789d068b7b876236b7c9e969ca7be53b80e74565534bb8694c413a3ce9a43ed52c0a5e9f47ec02", 0x99}, {&(0x7f0000001a40)="54327948dc27f31850d6c06ddd875b9bbc06c177cb866ecfe9af7231cc2bfc1fffb4637a06f26f749ff862d4828aa5240cbb8dad0221825cf30f402996ac7ad6dd444dc3fc9fe4960def666b9baa895564a6f86a2fd461e51c6af4cd53377c81ba1e38c8389a308b823aa7309b7d52eebf66ee3a9ae04269912bfca106960eb9828f9b20bde90f2d30501593a31a248e31ba3330b841792be342818b58c844068210f10acb962c", 0xa7}, {&(0x7f0000001b00)="04ced257e1628bed53a8", 0xa}], 0x5, &(0x7f0000001cc0)=[{0x28, 0x110, 0x5c, "e1d5ea542c2856c10f93d7b4419ce9d20c723fd0cbcbd6d6"}, {0xd0, 0x110, 0xd0a, "a62e8e7d7e12f13cf853485bfa0a2dd10e110af911dc631155e2b65cae0b4936c3f9e3c0dfd1a84c27e455f4633fb2006bc17a0265553177b8440caff1c554ecfd606faffb0a41033fcced35a84e87ad5b07eff7b32ac6e4fb62b3b6d2db83ad558523c67ac523d0d48d09cb4379b647b09ab6b0bfad2946eabc08050f8a979e35bde913c989bb66bd878c5b57672a4cfdc69b51e687a52fe969ef63887ac52d21914b3aed06889da5e4c7ee9800f004068ab923603650f23ffe1678e164"}, {0xf0, 0x107, 0x9, "25646a3f4315a6ae074e6a9de37e44ef8d3e7ce10bdbe754ff25d03c56efd6b2ac25b58c41e415fdcfee77670d240347589192883dba1d07b974b7de071b46f81c4de46d4d8c1d3abcda87f7ab34681ccb8c89adfd21fb650fe6adc49fed51e887147b1201608da10f3937e4cb0bc9b0c8fc125760fc0de4478fbaf5932744dec3fa9d4fb3d04a11bcd6f3b61917651418b3f4f7adbb43d7e5140544b411e7ac75bc3af3543f5d4f7f105ebefbde79990a9393e79b8c3ec531cbbd6532e60a109c626d3696ce62625a5aeebab61f2005e11a73c62c2c2d747d"}, {0x10, 0x10a, 0xfffffffc}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)="fe50043d88c3baf4ef53e5d734a3b7221d8b2641a7ed81ad9f5452e295cc675f82bfb376ac81bda39264efbc6c65982007da04e15273af3f97fcc210c6616d584fcf84d0411d112649012a279950e1d7484f98e3d6ad0878c5c5ef154302130e260b98273ec600b876edd40f7808d141e143ddc28839162128f0c77af039ada72d14699c194e25ea852cb3", 0x8b}, {&(0x7f00000020c0)="b7a1af4ff63fe574185d6e550432721f41ae591aa8e6e06cf4ad8c54f045f4fc97d78d790367ade0e058c03ccd5f92de", 0x30}], 0x2}}], 0x2, 0x42051) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x4001) r4 = socket$inet(0x2, 0x1, 0xfffffff9) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000021c0)={0xec1, {{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x1, 0x9, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @remote}}]}, 0x510) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/89], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.787967816s ago: executing program 2 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540100001000050000000000000000007f000001000000000000000000000000000000000000000000000000000000004e210000000000000200a02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200"], 0x154}}, 0x4044010) 1.787274656s ago: executing program 3 (id=38): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getrlimit(0xc, &(0x7f0000000140)) 1.784043857s ago: executing program 2 (id=39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00090000007c00000000000000400000000000000002000000000000007f000000060038000100feff0300030003"], 0x9e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x149240, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000040)=0xf, 0x4) timer_create(0x3, &(0x7f0000000280)={0x0, 0x17, 0x1}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x800) 1.761466387s ago: executing program 3 (id=40): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 1.72028698s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x8, 0x0) (async) poll(0x0, 0x0, 0x403) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)) (async) write(r0, &(0x7f0000000180)='common_pid ~ 0', 0xe) (async) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) syz_io_uring_setup(0x75a5, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r5, 0xbb04, 0x0) 1.720049049s ago: executing program 3 (id=42): r0 = gettid() pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpgid(r0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x20, 0x37, 0x2, {0x1, 0x4, 0x8001, r0, 0x2, '{\xd6'}}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x3ed4, 0xb43}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getuid() r2 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0xe88, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, &(0x7f0000000200)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x4008080, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000040)='\x00']}, 0x0) 1.593936275s ago: executing program 3 (id=43): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa0000000000000000000000140000000000000000920100000000000f0100000000000000ffff0000000000003c250800000000000a0e000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0000000000000000000800000000000001000000000000000300000008000000000000002cbd700004350000020001002000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000080018"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.563715507s ago: executing program 3 (id=44): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0xc}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xbe89, 0xb, 0x8, 0xa, 0x9259, 0x98d2, 0x153, 0x88d, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 756.850434ms ago: executing program 2 (id=47): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="120101020000004035120c8040000102030109026e0003017f5016080b0002012230230904000000010130000a2401100a00090000000904010000010330"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x6, 0x30, 0x80, "", [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x9, 0x24, 0x6, 0x0, 0x0, "bb067fb3"}, {0x5, 0x24, 0x0, 0x794}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x6, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5b, 0x0, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb9, 0x3, 0xc5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xb, 0x81}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xf7, 0x28, 0x6, 0x20, 0x4}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x401}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc00}}, {0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "02fc33d343c293f82a501e209a10ecc0f61c6514681cf8676d8fe392e4835953cbe3306f1189bdbc6a5018ef9bdefe63f18172341d6166e1582a026d5745559a019057bd646119a035c326999db52aed410ecb519703f5c5571a7c788dde60f1b6c0f41c1f3001a474f210c3f1199fdc2116eadbc6d6f6e2b29051ba6406b373c94faf4e25c64259ac249811db181f360b86551eceb6dcfb0a5686a867f35c3120e99ee03da3e5557daa18d0be8bd2b0a5b55502414c126471053adf264f93710598abd83a8fb716e7eb623c96aa83510da8b958f59b4f16d136f7dfe548dbf4e075c1c9000a5d4a0726f1dfa94ccb20234b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x6005}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44b}}]}) 299.049916ms ago: executing program 0 (id=53): sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x44040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x191}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x120}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x605}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x41}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x3c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x80}]}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xd}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x7}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1000}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x76}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048855}, 0x80800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x80442, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xa) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000580)) r7 = memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000780)={r5, &(0x7f0000000680)='/dev/kvm\x00', 0x200, &(0x7f00000006c0)={@_ha_fsid={[0x10000, 0x6]}, {0x1, 0x3ff, 0x7, 0x7}}, 0x4, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x5}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000880)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80004) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000ec0)={&(0x7f00000009c0)=0x5, 0x7, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000e80)}) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f80), 0x40000, 0x0) r14 = memfd_create(&(0x7f0000000fc0)='wpan0\x00', 0x0) r15 = syz_open_dev$usbmon(&(0x7f0000001000), 0x401, 0x4000) r16 = accept4$unix(r7, &(0x7f0000001040), &(0x7f00000010c0)=0x6e, 0x0) poll(&(0x7f0000001100)=[{r6, 0x201}, {r13, 0x2}, {r14, 0x2}, {r5, 0x400}, {r15, 0x10}, {r5}, {r3, 0x4120}, {r5, 0x2000}, {r16, 0x1082}], 0x9, 0x9) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000001180)={0x20000, 0x0, {[0x3, 0x80000001, 0x6, 0x8, 0xfff, 0x5, 0x6, 0x40f49e6e]}}) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_register(r13, &(0x7f0000001200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, '@-t#%', 0x3a, '/dev/hwrng\x00', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x50]}, 0x3a) 266.550337ms ago: executing program 0 (id=54): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet6(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1400c810) r4 = socket(0x28, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000300)={{r7, r8+10000000}, {0x0, 0x3938700}}, &(0x7f0000000340)) sendmsg$netlink(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf2508000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c001a8008000a"], 0x2c}], 0x1}, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r10, &(0x7f00000003c0)={0x2c, 0x2, r12, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40490}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250500000005000200f700000005000600e10000003c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="14000200687372300000000000000000000000009400020076657468305f746f5f6261746164760008000500080000000800050005000000"], 0x70}, 0x1, 0x0, 0x0, 0x24040084}, 0x20008000) 243.850048ms ago: executing program 0 (id=55): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 156.282793ms ago: executing program 0 (id=56): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000002180)={0x1f, @none}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x5d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef2a70f793503000000b8b242714e0f23d00f21f835100000090f23f8b8908a00000f23d00f21f835200000020f23f80f01c4c16a6332c4e1fc5f28b805000000b90e0000000f01d93d8004101fcccc00800000ba000000000f300f801b14032d", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 123.350854ms ago: executing program 0 (id=57): r0 = open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) chdir(&(0x7f00000003c0)='./bus\x00') epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) chmod(&(0x7f0000000880)='./file1\x00', 0x50) 0s ago: executing program 0 (id=58): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122350007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) mprotect(&(0x7f00009e4000/0x2000)=nil, 0x2000, 0x5) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) (async) tee(r2, r3, 0x8f5, 0xb) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) r5 = syz_usb_connect$uac2(0x5, 0xd4, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x8, 0x50, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x0, 0x16, 0x1}, [@selector_unit={0xd, 0x24, 0xb, 0x5, 0x8, "2e8f3d7a6ac2ea5a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x68, 0x5, 0x2, 0xb95fea8e710bfa03, 0x7, 0x8, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xcb, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xfff, 0xf, "0f69f6179bf8"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x81, 0x4, "1dac"}, @as_header={0x10, 0x24, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc6, 0xfffffff3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x81}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x7, 0xc0, 0xf}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0xc1, {0x8, 0x25, 0x1, 0x1, 0xc, 0x3, 0x1000}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x201, 0xec, 0x6, 0x5, 0x8, 0x6}, 0x29, &(0x7f00000009c0)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "1f2eec58f6a5790dc51eee41ee5a4c18"}, @ssp_cap={0x10, 0x10, 0xa, 0x2b, 0x1, 0x6, 0x1e0f, 0x10, [0xffffc0]}]}, 0x7, [{0x38, &(0x7f0000000a00)=@string={0x38, 0x3, "629399574f51f7afe10ca659aaa6780f9f586cb9ab14f2fcea3f7cb1eda8b9d687b91dba77117bbc5a31aa7d5ee37b1d97b806a7832e"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x813}}, {0x5d, &(0x7f0000000a80)=@string={0x5d, 0x3, "ec8c5762ec6cebbd2d0f595fb76b82a28823d4eef060ddf518ea0faaa215df7edc2961e3392658dfdebd1ee1523cb668191910d22ffbe59ca7e120fbcf302f60fa7fe02bd89212f2382302ed50dcd2a22c7b24773eaec75dadf98b"}}, {0x6c, &(0x7f0000000b00)=@string={0x6c, 0x3, "0d82eaa2b0c702b62b142b850235ecfaaacbf501696fa8ade17fb5e9043ed6a504ae163b46190989db19c1de54c03c043a3cbb402c41e90f70702a9392d4b8d276266a437c96ba2855d6332fd1e340bcdd90735b3f8dd41f4a985597603f060f3e8bdb46220ff795f0e8"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$uac2(r5, &(0x7f0000000d80)={0x14, &(0x7f0000000cc0)={0x0, 0x31, 0x53, {0x53, 0x10, "b3a73238602755bf73e7478b877b71d3f629ccdbf0202fe47ab510b277c368f7605ea014fb2b913515fbaa3b3126dbda602de65cb2acd32ccc927eada2bae05012a62e56251c5c30f73071a3e8d45ac5ed"}}, &(0x7f0000000d40)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "ca96576e2a3c2286376d4a8e72e661fa7da06c609797791d70494cf835b317db2b2ee71b4a58a63d"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x0, 0x9, 0xb4, "030f0fd4976e7b0ab8a8786396d98c14c69b5d56814fe755c7238eebcb8d4aebcda550c70c7bb611a3face2b187a8726337dad64666416a543a166e8ed431ab3469d084d3a38d7998e6a0900fb0b93af4ce7d40f06930bef1526e9ff67326650fc508c96615acd6dd627b35f1ad04de72695eca2c8da8c80caf410fdd7c4dff1684fc4ffd0e1f5f9d264de71656ad649f715205aac7e8bacc64886b5d3422ca2b13f409d4ee8b5d4a07f928d24ce6c4bfc32e007"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f00)={0x20, 0x81, 0x3, "1fccc4"}, &(0x7f0000000f40)={0x20, 0x82, 0x2, "a415"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "1fa42e"}, &(0x7f0000000fc0)={0x20, 0x84, 0x4, "c345a244"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "58164a"}}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x7, 0x20, {0x54, 0xa, "9d778fef2e7eb4ff73627418b9d6f61b69acd2e7a70e9877c5f8f9364cfc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x8, 0x3, 0x3, "3e6452ba", "ddc44498"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x60, 0x9, 0x2, 0x81, 0x9, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0xb, 0xee, "7658c19a9e00208e37f19c6138be27599d7fde43f547b4427a8abc1372fe1d5b9723a05261e366e6e41dbd425e106257aef141a77fa1cfbfc1cfc10ee1530d8a9a8cc6698b50d8bb1d664bf83916d1f0f2578f73a339d7d20f19b3e4100975e6039009eb2d3ef436d815cbb99f6701477d1ea20551c1b665551137c17de0fded46f856865d5b629d3f73ccdf4dcd35f2c992bbc3379991a8f11d9be206d34273e0eab628294ce0da2d52f5696952774ab8293badab7e8072529598d8ba89ebd2b88d39933bf1b06cfd32ef9ee03047e4a5e0f1611ac892bf20f2e1a872e999e3ed74d672a88415e3e1cb489c2367"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xdd}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x5}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xc0, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c178"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "cfef"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000006c0)={0x40, 0x1e, 0x0, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0xffb1, 0x6}}) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x0, 0x30, 0x4, "e8a90471"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff00a4089502810285210903150026ff0062089501810285910904150026ff00750895019102c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.621742][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.621759][ T36] audit: type=1400 audit(1790005391.650:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.627325][ T36] audit: type=1400 audit(1790005391.650:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.631540][ T36] audit: type=1400 audit(1790005391.660:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[1664]" dev="pipefs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.634916][ T36] audit: type=1400 audit(1790005391.660:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.638080][ T36] audit: type=1400 audit(1790005391.660:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 29.940469][ T36] audit: type=1400 audit(1790005399.970:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.943892][ T286] cgroup: Unknown subsys name 'net' [ 29.963159][ T36] audit: type=1400 audit(1790005399.970:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.990624][ T36] audit: type=1400 audit(1790005400.000:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.991163][ T286] cgroup: Unknown subsys name 'devices' [ 30.099487][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.105138][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.220677][ T36] audit: type=1400 audit(1790005400.250:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.243908][ T36] audit: type=1400 audit(1790005400.250:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.268866][ T36] audit: type=1400 audit(1790005400.250:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.303377][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.312282][ T36] audit: type=1400 audit(1790005400.340:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.337907][ T36] audit: type=1400 audit(1790005400.340:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.371692][ T36] audit: type=1400 audit(1790005400.400:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.397406][ T36] audit: type=1400 audit(1790005400.400:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.398157][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.195958][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.203162][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.210888][ T293] bridge_slave_0: entered allmulticast mode [ 31.217594][ T293] bridge_slave_0: entered promiscuous mode [ 31.224326][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.232208][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.239375][ T293] bridge_slave_1: entered allmulticast mode [ 31.245646][ T293] bridge_slave_1: entered promiscuous mode [ 31.389222][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.396388][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.403585][ T299] bridge_slave_0: entered allmulticast mode [ 31.409994][ T299] bridge_slave_0: entered promiscuous mode [ 31.416456][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.423588][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.430717][ T299] bridge_slave_1: entered allmulticast mode [ 31.437032][ T299] bridge_slave_1: entered promiscuous mode [ 31.443140][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.450236][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.457365][ T298] bridge_slave_0: entered allmulticast mode [ 31.463591][ T298] bridge_slave_0: entered promiscuous mode [ 31.470542][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477612][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.484696][ T298] bridge_slave_1: entered allmulticast mode [ 31.491060][ T298] bridge_slave_1: entered promiscuous mode [ 31.524188][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.531279][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.538463][ T296] bridge_slave_0: entered allmulticast mode [ 31.544778][ T296] bridge_slave_0: entered promiscuous mode [ 31.569189][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.576269][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.583454][ T296] bridge_slave_1: entered allmulticast mode [ 31.589786][ T296] bridge_slave_1: entered promiscuous mode [ 31.613818][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620909][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.628269][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.635310][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.734948][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.742324][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.761814][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.768921][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.776602][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.783674][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.850109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.857205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.870594][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.877675][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.900152][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.907245][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.915571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.922627][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.938829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.945897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.957252][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.964329][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.976362][ T293] veth0_vlan: entered promiscuous mode [ 31.994520][ T298] veth0_vlan: entered promiscuous mode [ 32.021612][ T293] veth1_macvtap: entered promiscuous mode [ 32.039927][ T299] veth0_vlan: entered promiscuous mode [ 32.048505][ T298] veth1_macvtap: entered promiscuous mode [ 32.069528][ T299] veth1_macvtap: entered promiscuous mode [ 32.088955][ T296] veth0_vlan: entered promiscuous mode [ 32.110727][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.123047][ T296] veth1_macvtap: entered promiscuous mode [ 32.185744][ T313] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.201845][ T317] overlayfs: missing 'lowerdir' [ 32.214436][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.567049][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.718018][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.730624][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 32.740024][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.756931][ T31] usb 4-1: Product: syz [ 32.761200][ T31] usb 4-1: Manufacturer: syz [ 32.766066][ T31] usb 4-1: SerialNumber: syz [ 32.781506][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 32.787795][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 33.098740][ T329] FAULT_INJECTION: forcing a failure. [ 33.098740][ T329] name failslab, interval 1, probability 0, space 0, times 1 [ 33.139835][ T329] CPU: 1 UID: 0 PID: 329 Comm: syz.2.6 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 33.139880][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.139903][ T329] Call Trace: [ 33.139910][ T329] [ 33.139919][ T329] __dump_stack+0x21/0x30 [ 33.139966][ T329] dump_stack_lvl+0x140/0x1c0 [ 33.139997][ T329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.140030][ T329] dump_stack+0x19/0x20 [ 33.140061][ T329] should_fail_ex+0x3c2/0x510 [ 33.140089][ T329] should_failslab+0xac/0x100 [ 33.140115][ T329] kmem_cache_alloc_noprof+0x42/0x410 [ 33.140138][ T329] ? security_inode_alloc+0x51/0x230 [ 33.140165][ T329] ? __cfi_make_kgid+0x10/0x10 [ 33.140203][ T329] security_inode_alloc+0x51/0x230 [ 33.140232][ T329] inode_init_always_gfp+0x756/0x9e0 [ 33.140257][ T329] ? __cfi_sock_alloc_inode+0x10/0x10 [ 33.140279][ T329] alloc_inode+0xc5/0x270 [ 33.140304][ T329] ? bpf_lsm_socket_create+0xd/0x20 [ 33.140326][ T329] new_inode_pseudo+0x19/0x40 [ 33.140354][ T329] sock_create_lite+0x8f/0x500 [ 33.140378][ T329] __netlink_kernel_create+0xcf/0x8a0 [ 33.140406][ T329] ? __cfi___netlink_kernel_create+0x10/0x10 [ 33.140434][ T329] ? __asan_memcpy+0x5a/0x80 [ 33.140454][ T329] rtnetlink_net_init+0xb2/0x140 [ 33.140477][ T329] ? __cfi_rtnetlink_net_init+0x10/0x10 [ 33.140499][ T329] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 33.140520][ T329] ? __cfi_rtnetlink_bind+0x10/0x10 [ 33.140541][ T329] ? __kasan_check_write+0x18/0x20 [ 33.140561][ T329] ? __mutex_init+0xa6/0x1a0 [ 33.140589][ T329] ops_init+0x302/0x5d0 [ 33.140609][ T329] ? __kasan_check_write+0x18/0x20 [ 33.140630][ T329] ? rwsem_read_trylock+0x275/0x5a0 [ 33.140660][ T329] setup_net+0x227/0x9b0 [ 33.140678][ T329] ? copy_net_ns+0xa20/0xa20 [ 33.140695][ T329] ? down_read_killable+0x7f/0x100 [ 33.140721][ T329] ? __cfi_down_read_killable+0x10/0x10 [ 33.140752][ T329] copy_net_ns+0x4fc/0xa20 [ 33.140770][ T329] create_new_namespaces+0x390/0x6f0 [ 33.140801][ T329] unshare_nsproxy_namespaces+0x124/0x180 [ 33.140831][ T329] ksys_unshare+0x4f9/0x920 [ 33.140857][ T329] ? fput+0x1a4/0x230 [ 33.140895][ T329] ? __cfi_ksys_unshare+0x10/0x10 [ 33.140923][ T329] ? __kasan_check_write+0x18/0x20 [ 33.140945][ T329] __x64_sys_unshare+0x3c/0x50 [ 33.140973][ T329] x64_sys_call+0x2998/0x2ee0 [ 33.140992][ T329] do_syscall_64+0x57/0xf0 [ 33.141012][ T329] ? clear_bhb_loop+0x50/0xa0 [ 33.141040][ T329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.141064][ T329] RIP: 0033:0x7fe7b1b9e159 [ 33.141088][ T329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.141106][ T329] RSP: 002b:00007fe7b2a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.141137][ T329] RAX: ffffffffffffffda RBX: 00007fe7b1e25fa0 RCX: 00007fe7b1b9e159 [ 33.141154][ T329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 33.141168][ T329] RBP: 00007fe7b1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 33.141181][ T329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.141194][ T329] R13: 00007fe7b1e26038 R14: 00007fe7b1e25fa0 R15: 00007ffe32260f98 [ 33.141212][ T329] [ 33.503383][ T336] FAULT_INJECTION: forcing a failure. [ 33.503383][ T336] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.516373][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz.1.5 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 33.516407][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.516423][ T336] Call Trace: [ 33.516430][ T336] [ 33.516446][ T336] __dump_stack+0x21/0x30 [ 33.516477][ T336] dump_stack_lvl+0x140/0x1c0 [ 33.516501][ T336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.516526][ T336] dump_stack+0x19/0x20 [ 33.516548][ T336] should_fail_ex+0x3c2/0x510 [ 33.516568][ T336] should_fail+0xf/0x20 [ 33.516586][ T336] get_futex_key+0x178/0x940 [ 33.516608][ T336] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 33.516630][ T336] ? __cfi_get_futex_key+0x10/0x10 [ 33.516652][ T336] futex_wake+0x150/0x950 [ 33.516666][ T336] ? __cfi_mutex_unlock+0x10/0x10 [ 33.516686][ T336] ? futex_wait+0x2b8/0x7c0 [ 33.516700][ T336] ? __cfi_futex_wake+0x10/0x10 [ 33.516715][ T336] ? netdev_run_todo+0xc62/0xce0 [ 33.516733][ T336] ? check_stack_object+0x138/0x150 [ 33.516772][ T336] ? __check_object_size+0xdc/0x870 [ 33.516805][ T336] do_futex+0x37d/0x510 [ 33.516828][ T336] ? __cfi_do_futex+0x10/0x10 [ 33.516850][ T336] ? put_user_ifreq+0x89/0xc0 [ 33.516872][ T336] __se_sys_futex+0x13c/0x320 [ 33.516915][ T336] ? __x64_sys_futex+0x110/0x110 [ 33.516947][ T336] ? __kasan_check_write+0x18/0x20 [ 33.516975][ T336] ? __kasan_check_write+0x18/0x20 [ 33.516992][ T336] __x64_sys_futex+0xe9/0x110 [ 33.517014][ T336] x64_sys_call+0x227f/0x2ee0 [ 33.517030][ T336] do_syscall_64+0x57/0xf0 [ 33.517044][ T336] ? clear_bhb_loop+0x50/0xa0 [ 33.517065][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.517105][ T336] RIP: 0033:0x7fb703f9e159 [ 33.517125][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.517150][ T336] RSP: 002b:00007fb704ee60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.517168][ T336] RAX: ffffffffffffffda RBX: 00007fb704225fa8 RCX: 00007fb703f9e159 [ 33.517180][ T336] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb704225fac [ 33.517191][ T336] RBP: 00007fb704225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 33.517202][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.517212][ T336] R13: 00007fb704226038 R14: 00007ffc4ad49a60 R15: 00007ffc4ad49b48 [ 33.517226][ T336] [ 33.597086][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.912899][ T66] usb 1-1: no configurations [ 33.918288][ T66] usb 1-1: can't read configurations, error -22 [ 33.931223][ T342] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.956021][ T345] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 33.956021][ T344] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 34.057232][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.208151][ T66] usb 1-1: no configurations [ 34.212821][ T66] usb 1-1: can't read configurations, error -22 [ 34.219554][ T66] usb usb1-port1: attempt power cycle [ 34.566990][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.588711][ T66] usb 1-1: no configurations [ 34.593363][ T66] usb 1-1: can't read configurations, error -22 [ 34.726991][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.748529][ T66] usb 1-1: no configurations [ 34.753237][ T66] usb 1-1: can't read configurations, error -22 [ 34.759746][ T66] usb usb1-port1: unable to enumerate USB device [ 35.243197][ T66] usb 4-1: USB disconnect, device number 2 [ 35.246725][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 35.246775][ T36] audit: type=1400 audit(1790005405.270:146): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.596989][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.715909][ T36] audit: type=1400 audit(1790005405.740:147): avc: denied { ioctl } for pid=365 comm="syz.2.16" path="socket:[4532]" dev="sockfs" ino=4532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.748826][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 35.762825][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 35.774376][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.787512][ T66] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.796767][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.806081][ T66] usb 4-1: config 0 descriptor?? [ 35.816930][ T369] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 35.823684][ T36] audit: type=1400 audit(1790005405.850:148): avc: denied { create } for pid=368 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.843550][ T36] audit: type=1400 audit(1790005405.850:149): avc: denied { ioctl } for pid=368 comm="syz.2.17" path="socket:[4540]" dev="sockfs" ino=4540 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.876281][ T371] netlink: 100 bytes leftover after parsing attributes in process `syz.2.18'. [ 35.952353][ T373] kvm: kvm [372]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 35.961035][ T373] kvm: kvm [372]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 36.121631][ T36] audit: type=1400 audit(1790005406.150:150): avc: denied { write } for pid=375 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.215028][ T66] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 36.225437][ T66] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.240148][ T376] FAULT_INJECTION: forcing a failure. [ 36.240148][ T376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.254126][ T376] CPU: 0 UID: 0 PID: 376 Comm: syz.2.20 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 36.254160][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.254175][ T376] Call Trace: [ 36.254182][ T376] [ 36.254191][ T376] __dump_stack+0x21/0x30 [ 36.254232][ T376] dump_stack_lvl+0x140/0x1c0 [ 36.254263][ T376] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.254292][ T376] ? exc_page_fault+0x65/0xc0 [ 36.254320][ T376] dump_stack+0x19/0x20 [ 36.254349][ T376] should_fail_ex+0x3c2/0x510 [ 36.254376][ T376] should_fail+0xf/0x20 [ 36.254400][ T376] should_fail_usercopy+0x1e/0x30 [ 36.254427][ T376] copy_fpstate_to_sigframe+0x906/0xbb0 [ 36.254456][ T376] ? __kasan_slab_free+0x5f/0x80 [ 36.254483][ T376] ? kmem_cache_free+0x1bd/0x4f0 [ 36.254506][ T376] ? __dequeue_signal+0x50e/0x680 [ 36.254535][ T376] ? copy_fpstate_to_sigframe+0x177/0xbb0 [ 36.254568][ T376] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 36.254603][ T376] ? fpu__alloc_mathframe+0xb7/0x150 [ 36.254633][ T376] get_sigframe+0x604/0x830 [ 36.254655][ T376] ? __cfi_get_sigframe+0x10/0x10 [ 36.254680][ T376] ? kmem_cache_free+0x1bd/0x4f0 [ 36.254715][ T376] ? __dequeue_signal+0x50e/0x680 [ 36.254747][ T376] x64_setup_rt_frame+0x162/0xc20 [ 36.254771][ T376] ? __asan_memcpy+0x5a/0x80 [ 36.254795][ T376] ? _raw_spin_unlock_irq+0x45/0x70 [ 36.254817][ T376] ? get_signal+0x120a/0x1490 [ 36.254852][ T376] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 36.254878][ T376] arch_do_signal_or_restart+0x328/0x700 [ 36.254901][ T376] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.254925][ T376] ? __kasan_check_write+0x18/0x20 [ 36.254949][ T376] syscall_exit_to_user_mode+0x57/0xb0 [ 36.254983][ T376] do_syscall_64+0x63/0xf0 [ 36.255004][ T376] ? clear_bhb_loop+0x50/0xa0 [ 36.255034][ T376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.255061][ T376] RIP: 0033:0x7fe7b1b9e159 [ 36.255079][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.255097][ T376] RSP: 002b:00007fe7b2a78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 36.255127][ T376] RAX: 0000000000000001 RBX: 00007fe7b1e25fa0 RCX: 00007fe7b1b9e159 [ 36.255142][ T376] RDX: 00002000000011c0 RSI: 0000000000000002 RDI: 00007fe7b2a57000 [ 36.255153][ T376] RBP: 00007fe7b1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 36.255164][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.255173][ T376] R13: 00007fe7b1e26038 R14: 00007fe7b1e25fa0 R15: 00007ffe32260f98 [ 36.255187][ T376] [ 36.580750][ T36] audit: type=1400 audit(1790005406.610:151): avc: denied { append } for pid=384 comm="syz.2.22" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.730368][ T36] audit: type=1400 audit(1790005406.760:152): avc: denied { read append } for pid=391 comm="syz.2.23" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.753354][ T36] audit: type=1400 audit(1790005406.760:153): avc: denied { open } for pid=391 comm="syz.2.23" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.805952][ T36] audit: type=1400 audit(1790005406.830:154): avc: denied { read append } for pid=362 comm="syz.3.15" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.827206][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.831121][ T36] audit: type=1400 audit(1790005406.830:155): avc: denied { ioctl open } for pid=362 comm="syz.3.15" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.846490][ T395] netlink: 'syz.3.15': attribute type 16 has an invalid length. [ 36.868442][ T395] netlink: 62914 bytes leftover after parsing attributes in process `syz.3.15'. [ 36.988516][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.997276][ T311] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 37.006189][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.016523][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.031068][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.040176][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.048251][ T311] usb 1-1: Product: syz [ 37.052477][ T311] usb 1-1: Manufacturer: syz [ 37.057153][ T311] usb 1-1: SerialNumber: syz [ 37.180824][ T10] usb 4-1: USB disconnect, device number 3 [ 37.288290][ T381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 37.697339][ T405] cgroup: release_agent respecified [ 37.702924][ T405] cgroup: release_agent respecified [ 37.703352][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.708831][ T405] cgroup: release_agent respecified [ 37.722756][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.731600][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.740556][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.748827][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.757450][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.765766][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.774682][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.783188][ T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.791859][ T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.897525][ T382] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.946969][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.057641][ T382] usb 3-1: Using ep0 maxpacket: 16 [ 38.063863][ T382] usb 3-1: config 1 interface 0 has no altsetting 0 [ 38.071941][ T382] usb 3-1: New USB device found, idVendor=138c, idProduct=0102, bcdDevice= 0.40 [ 38.081253][ T382] usb 3-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 38.089531][ T382] usb 3-1: Product: syz [ 38.093729][ T382] usb 3-1: Manufacturer: syz [ 38.098375][ T382] usb 3-1: SerialNumber: syz [ 38.106949][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 38.113444][ T66] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 38.123369][ T66] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 38.132617][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.140722][ T66] usb 4-1: Product: syz [ 38.144936][ T66] usb 4-1: Manufacturer: syz [ 38.149590][ T66] usb 4-1: SerialNumber: syz [ 38.157444][ T66] r8152-cfgselector 4-1: Unknown version 0x0000 [ 38.163754][ T66] r8152-cfgselector 4-1: config 0 descriptor?? [ 38.342267][ T382] usb 3-1: MIDIStreaming interface descriptor not found [ 38.352192][ T382] usb 3-1: USB disconnect, device number 2 [ 38.370341][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.388035][ T66] r8152-cfgselector 4-1: Unknown version 0x0000 [ 38.394414][ T66] r8152-cfgselector 4-1: bad CDC descriptors [ 38.403222][ T66] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 38.902262][ T411] netlink: 100 bytes leftover after parsing attributes in process `syz.3.27'. [ 39.172073][ T311] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 39.186975][ T311] cdc_ncm 1-1:1.0: bind() failure [ 39.194179][ T311] usb 1-1: USB disconnect, device number 6 [ 39.566985][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.718143][ T311] usb 1-1: config index 0 descriptor too short (expected 4257, got 161) [ 39.726797][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.737083][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.746513][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.762338][ T463] Zero length message leads to an empty skb [ 39.841886][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 39.867530][ T474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.887842][ T492] netlink: 100 bytes leftover after parsing attributes in process `syz.2.37'. [ 40.037728][ T513] overlayfs: unescaped trailing colons in lowerdir mount option. [ 40.208569][ T311] usb 1-1: string descriptor 0 read error: -71 [ 40.215773][ T311] uvcvideo 1-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 40.224847][ T311] usb 1-1: Found UVC 1.00 device (046d:0825) [ 40.231884][ T311] uvcvideo 1-1:1.1: No supported video formats found. [ 40.239020][ T311] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 40.247922][ T311] usb 1-1: USB disconnect, device number 7 [ 40.367017][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.518182][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.529972][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.539145][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.547209][ T10] usb 4-1: Product: syz [ 40.551411][ T10] usb 4-1: Manufacturer: syz [ 40.556022][ T10] usb 4-1: SerialNumber: syz [ 40.718885][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 40.718901][ T36] audit: type=1400 audit(1790005410.750:191): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.750631][ T36] audit: type=1400 audit(1790005410.780:192): avc: denied { create } for pid=526 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.770878][ T36] audit: type=1400 audit(1790005410.780:193): avc: denied { read } for pid=526 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.795332][ T36] audit: type=1400 audit(1790005410.780:194): avc: denied { setopt } for pid=526 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.814782][ T36] audit: type=1400 audit(1790005410.820:195): avc: denied { getopt } for pid=526 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.833953][ T36] audit: type=1400 audit(1790005410.820:196): avc: denied { lock } for pid=526 comm="syz.0.45" path="socket:[3981]" dev="sockfs" ino=3981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.933356][ T36] audit: type=1400 audit(1790005410.960:197): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.962188][ T537] mmap: syz.0.46 (537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.963255][ T36] audit: type=1400 audit(1790005410.990:198): avc: denied { read write } for pid=530 comm="syz.0.46" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.002492][ T36] audit: type=1400 audit(1790005410.990:199): avc: denied { open } for pid=530 comm="syz.0.46" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.026612][ T36] audit: type=1400 audit(1790005411.030:200): avc: denied { ioctl } for pid=530 comm="syz.0.46" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.104439][ T540] netlink: 100 bytes leftover after parsing attributes in process `syz.0.48'. [ 41.133928][ T542] Config c/1 of g1 needs at least one function. [ 41.140434][ T542] udc dummy_udc.0: failed to start g1: -22 [ 41.146274][ T542] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 41.156657][ T542] UDC core: g1: couldn't find an available UDC or it's busy [ 41.202489][ T550] tipc: Started in network mode [ 41.207475][ T354] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.207596][ T550] tipc: Node identity 46272df2af7c, cluster identity 4711 [ 41.222376][ T550] tipc: Enabled bearer , priority 0 [ 41.282570][ T549] tipc: Disabling bearer [ 41.361276][ T354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.369816][ T354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.380253][ T354] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.391390][ T354] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 41.400649][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.408944][ T354] usb 3-1: Product: syz [ 41.413140][ T354] usb 3-1: Manufacturer: syz [ 41.418298][ T354] usb 3-1: SerialNumber: syz [ 41.631923][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.641135][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.652419][ T10] cdc_ncm 4-1:1.0: bind() failure [ 41.659599][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 41.664168][ T354] usb 3-1: MIDIStreaming interface descriptor not found [ 41.666606][ T10] cdc_ncm 4-1:1.1: bind() failure [ 41.679674][ T10] usb 4-1: USB disconnect, device number 5 [ 41.689651][ T298] ------------[ cut here ]------------ [ 41.695169][ T298] WARNING: CPU: 0 PID: 298 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 41.703157][ T298] Modules linked in: [ 41.707113][ T298] CPU: 0 UID: 0 PID: 298 Comm: syz-executor Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 41.718826][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.728955][ T298] RIP: 0010:drop_nlink+0xce/0x110 [ 41.734005][ T298] Code: 04 00 00 be 08 00 00 00 e8 0f 0d ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 26 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 41.753679][ T298] RSP: 0018:ffffc9000b69fc88 EFLAGS: 00010293 [ 41.759853][ T298] RAX: ffffffff81f253fe RBX: ffff888118240428 RCX: ffff888103f34c00 [ 41.767919][ T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.775933][ T298] RBP: ffffc9000b69fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 41.783983][ T298] R10: dffffc0000000000 R11: fffff520016d3f80 R12: dffffc0000000000 [ 41.792046][ T298] R13: 1ffff1102304808e R14: ffff888118240470 R15: 0000000000000000 [ 41.800089][ T298] FS: 0000555555f6b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.809341][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.815936][ T298] CR2: 0000555555f8e958 CR3: 0000000100eb2000 CR4: 00000000003526b0 [ 41.824000][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008a90 [ 41.832019][ T298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 41.840056][ T298] Call Trace: [ 41.843350][ T298] [ 41.846286][ T298] shmem_rmdir+0x5f/0x90 [ 41.850595][ T298] vfs_rmdir+0x3db/0x560 [ 41.854878][ T298] incfs_kill_sb+0x102/0x220 [ 41.859521][ T298] deactivate_locked_super+0xd2/0x270 [ 41.864936][ T298] deactivate_super+0xb8/0xe0 [ 41.869673][ T298] cleanup_mnt+0x438/0x4d0 [ 41.874129][ T298] __cleanup_mnt+0x1d/0x40 [ 41.878586][ T298] task_work_run+0x1e5/0x260 [ 41.883210][ T298] ? __cfi_task_work_run+0x10/0x10 [ 41.888475][ T298] ? __x64_sys_umount+0x12e/0x180 [ 41.893587][ T298] ? __cfi___x64_sys_umount+0x10/0x10 [ 41.899066][ T298] ? __kasan_check_read+0x15/0x20 [ 41.904121][ T298] resume_user_mode_work+0x35/0x50 [ 41.909287][ T298] syscall_exit_to_user_mode+0x63/0xb0 [ 41.914786][ T298] do_syscall_64+0x63/0xf0 [ 41.919263][ T298] ? clear_bhb_loop+0x50/0xa0 [ 41.924073][ T298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.930016][ T298] RIP: 0033:0x7fdf0b59f397 [ 41.934450][ T298] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 41.954108][ T298] RSP: 002b:00007ffffc8067d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 41.962615][ T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf0b59f397 [ 41.970731][ T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffc806890 [ 41.978786][ T298] RBP: 00007ffffc806890 R08: 00007ffffc807890 R09: 00000000ffffffff [ 41.986937][ T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffc807920 [ 41.994935][ T298] R13: 00007fdf0b6344bb R14: 000000000000a2a4 R15: 00007ffffc807960 [ 42.002962][ T298] [ 42.006003][ T298] ---[ end trace 0000000000000000 ]--- [ 42.011668][ T298] ================================================================== [ 42.019788][ T298] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 42.026077][ T298] Write of size 4 at addr 0000000000000168 by task syz-executor/298 [ 42.034075][ T298] [ 42.036414][ T298] CPU: 1 UID: 0 PID: 298 Comm: syz-executor Tainted: G W syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 42.036443][ T298] Tainted: [W]=WARN [ 42.036449][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.036460][ T298] Call Trace: [ 42.036467][ T298] [ 42.036475][ T298] __dump_stack+0x21/0x30 [ 42.036503][ T298] dump_stack_lvl+0x140/0x1c0 [ 42.036529][ T298] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.036557][ T298] print_report+0x3d/0x70 [ 42.036583][ T298] kasan_report+0x162/0x1a0 [ 42.036608][ T298] ? ihold+0x24/0x70 [ 42.036631][ T298] ? ihold+0x24/0x70 [ 42.036653][ T298] kasan_check_range+0x25a/0x2b0 [ 42.036678][ T298] __kasan_check_write+0x18/0x20 [ 42.036697][ T298] ihold+0x24/0x70 [ 42.036718][ T298] vfs_rmdir+0x25c/0x560 [ 42.036746][ T298] incfs_kill_sb+0x102/0x220 [ 42.036766][ T298] deactivate_locked_super+0xd2/0x270 [ 42.036794][ T298] deactivate_super+0xb8/0xe0 [ 42.036821][ T298] cleanup_mnt+0x438/0x4d0 [ 42.036844][ T298] __cleanup_mnt+0x1d/0x40 [ 42.036866][ T298] task_work_run+0x1e5/0x260 [ 42.036893][ T298] ? __cfi_task_work_run+0x10/0x10 [ 42.036919][ T298] ? __x64_sys_umount+0x12e/0x180 [ 42.036936][ T298] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.036954][ T298] ? __kasan_check_read+0x15/0x20 [ 42.036972][ T298] resume_user_mode_work+0x35/0x50 [ 42.036989][ T298] syscall_exit_to_user_mode+0x63/0xb0 [ 42.037015][ T298] do_syscall_64+0x63/0xf0 [ 42.037032][ T298] ? clear_bhb_loop+0x50/0xa0 [ 42.037062][ T298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.037084][ T298] RIP: 0033:0x7fdf0b59f397 [ 42.037100][ T298] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.037116][ T298] RSP: 002b:00007ffffc8067d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.037135][ T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf0b59f397 [ 42.037147][ T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffc806890 [ 42.037159][ T298] RBP: 00007ffffc806890 R08: 00007ffffc807890 R09: 00000000ffffffff [ 42.037172][ T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffc807920 [ 42.037183][ T298] R13: 00007fdf0b6344bb R14: 000000000000a2a4 R15: 00007ffffc807960 [ 42.037199][ T298] [ 42.037206][ T298] ================================================================== [ 42.277792][ T298] Disabling lock debugging due to kernel taint [ 42.284629][ T298] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 42.292471][ T298] #PF: supervisor write access in kernel mode [ 42.298564][ T298] #PF: error_code(0x0002) - not-present page [ 42.304576][ T298] PGD 800000010f734067 P4D 800000010f734067 PUD 0 [ 42.308430][ T354] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.311139][ T298] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 42.311167][ T298] CPU: 0 UID: 0 PID: 298 Comm: syz-executor Tainted: G B W syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 42.326788][ T354] usb 3-1: USB disconnect, device number 3 [ 42.339288][ T298] Tainted: [B]=BAD_PAGE, [W]=WARN [ 42.339300][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.339314][ T298] RIP: 0010:ihold+0x2a/0x70 [ 42.339348][ T298] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 42.339367][ T298] RSP: 0018:ffffc9000b69fcc8 EFLAGS: 00010246 [ 42.377305][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.384393][ T298] [ 42.384402][ T298] RAX: ffff888103f34c00 RBX: 0000000000000000 RCX: ffff888103f34c00 [ 42.416457][ T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.424470][ T298] RBP: ffffc9000b69fcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 42.432922][ T298] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 42.440939][ T298] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 42.448988][ T298] FS: 0000555555f6b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.457964][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.464710][ T298] CR2: 0000000000000168 CR3: 0000000100eb2000 CR4: 00000000003526b0 [ 42.472724][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008a90 [ 42.480736][ T298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 42.488746][ T298] Call Trace: [ 42.492046][ T298] [ 42.495036][ T298] vfs_rmdir+0x25c/0x560 [ 42.499342][ T298] incfs_kill_sb+0x102/0x220 [ 42.503970][ T298] deactivate_locked_super+0xd2/0x270 [ 42.509406][ T298] deactivate_super+0xb8/0xe0 [ 42.514182][ T298] cleanup_mnt+0x438/0x4d0 [ 42.518669][ T298] __cleanup_mnt+0x1d/0x40 [ 42.523111][ T298] task_work_run+0x1e5/0x260 [ 42.527776][ T298] ? __cfi_task_work_run+0x10/0x10 [ 42.532901][ T298] ? __x64_sys_umount+0x12e/0x180 [ 42.537946][ T298] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.543380][ T298] ? __kasan_check_read+0x15/0x20 [ 42.548589][ T298] resume_user_mode_work+0x35/0x50 [ 42.553808][ T298] syscall_exit_to_user_mode+0x63/0xb0 [ 42.559459][ T298] do_syscall_64+0x63/0xf0 [ 42.564013][ T298] ? clear_bhb_loop+0x50/0xa0 [ 42.568719][ T298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.574670][ T298] RIP: 0033:0x7fdf0b59f397 [ 42.579096][ T298] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.598747][ T298] RSP: 002b:00007ffffc8067d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.607281][ T298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf0b59f397 [ 42.615269][ T298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffc806890 [ 42.623337][ T298] RBP: 00007ffffc806890 R08: 00007ffffc807890 R09: 00000000ffffffff [ 42.631323][ T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffc807920 [ 42.639305][ T298] R13: 00007fdf0b6344bb R14: 000000000000a2a4 R15: 00007ffffc807960 [ 42.647291][ T298] [ 42.650317][ T298] Modules linked in: [ 42.654235][ T298] CR2: 0000000000000168 [ 42.658390][ T298] ---[ end trace 0000000000000000 ]--- [ 42.663852][ T298] RIP: 0010:ihold+0x2a/0x70 [ 42.668395][ T298] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 1d 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 03 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 42.688020][ T298] RSP: 0018:ffffc9000b69fcc8 EFLAGS: 00010246 [ 42.694099][ T298] RAX: ffff888103f34c00 RBX: 0000000000000000 RCX: ffff888103f34c00 [ 42.702081][ T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.710069][ T298] RBP: ffffc9000b69fcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 42.718052][ T298] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 42.726035][ T298] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 42.734015][ T298] FS: 0000555555f6b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.742956][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.749552][ T298] CR2: 0000000000000168 CR3: 0000000100eb2000 CR4: 00000000003526b0 [ 42.757736][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008a90 [ 42.765710][ T298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 42.773691][ T298] Kernel panic - not syncing: Fatal exception [ 42.780346][ T298] Kernel Offset: disabled [ 42.784677][ T298] Rebooting in 86400 seconds..