last executing test programs: 36.697577529s ago: executing program 2 (id=3): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000180)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) fchown(r4, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) sendfile(r6, r6, 0x0, 0x1000000201005) 36.358323897s ago: executing program 1 (id=10): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') lseek(r0, 0x1, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000180)=0x100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x3a, 0x408c4) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "ec538d05bc4d8153", "94f9d901dcbe4621f083554f00", "c01437ba"}, 0x28) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x0, @local, 0xfffffe01}}}, 0x108) r8 = socket$inet6(0x10, 0x3, 0x2) write(r8, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 36.221425999s ago: executing program 1 (id=12): gettid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f616"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$inet6(0xa, 0x80000, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket(0x28, 0x80000, 0x7fffffff) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[], 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x811) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @none, 0x18, 0x2}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x2, &(0x7f00000000c0)=[{0xffff, 0x7, 0x16, 0x7}, {0x0, 0xff, 0x1, 0x1000}]}) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x0, 0x1000000, 0x50, 0xffffffffffffffff, 0x0) shutdown(r4, 0x1) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000e7b000/0x3000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) 35.761710525s ago: executing program 2 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(r4) kcmp(r5, r4, 0x0, r3, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r2, &(0x7f0000000200)='2', 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x18, 0x8001, &(0x7f0000000000)="3ca221"}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000000300)="32b9"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_io_uring_setup(0x17fb, &(0x7f0000000100)={0x0, 0x2f31, 0x8000, 0x0, 0x97, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000280)={0x0, 0xf9ed, 0x4000, 0x2, 0x3bd, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ad2, 0x8a52d5aefc397ff4, 0x1, 0x2f2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70f5, 0x20, 0x1, 0x298}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2e1, 0x8, 0x0, 0x3db, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e, 0x400, 0x3, 0xe3, 0x0, r2}}], 0x4, &(0x7f0000001e00)={0x2e, 0x5, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x6b9, 0x0, &(0x7f0000000e00)=@buf_max_buf="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"}}, &(0x7f0000001e80)) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000001ec0)={0x0, 0x99a3, 0x800, 0x2, 0x3c7, 0x0, r2}, &(0x7f0000001f40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc72f, 0x200, 0x2, 0x3a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5d5, 0x80, 0x3, 0x2ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc40c, 0x200, 0x1, 0xca, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd710, 0x40, 0x0, 0x189, 0x0, r2}}], 0x4, &(0x7f00000031c0)={0x2e, 0x10, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0xf37, 0x0, &(0x7f00000021c0)=@buf_4k="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"}}, &(0x7f0000003240)) r11 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380)={0x53, 0x3}, 0x2) ioctl$SIOCGETMIFCNT_IN6(r11, 0x89e0, &(0x7f00000000c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003280)={0x0}, &(0x7f00000032c0)=0xc) syz_ublk_add_dev(r2, r7, r9, r10, &(0x7f0000003340)={0x2e, 0x2c, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003300)=@new_dev={0x4, 0x651, 0x0, 0x0, 0x1000, 0xffffffff, r12}}}, &(0x7f00000033c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 35.714950665s ago: executing program 2 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x1700, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 35.358104118s ago: executing program 1 (id=20): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x44420, 0x0) copy_file_range(r6, &(0x7f0000000280)=0x2, r7, &(0x7f0000000400)=0x7, 0x8, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000040)='\x00', 0xc2800, &(0x7f0000000080)={@align=0xe12, {0x1, 0x1, 0xd6, 0x2}}, 0x9c, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x9, 0x40000) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x10337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 35.150620706s ago: executing program 1 (id=23): unshare(0x64000600) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) getrusage(0x1, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) unshare(0x40400) (async) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001400010004000000000000000a0000ef03000000140001"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 35.04033904s ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(r4) kcmp(r5, r4, 0x0, r3, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r2, &(0x7f0000000200)='2', 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x18, 0x8001, &(0x7f0000000000)="3ca221"}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000000300)="32b9"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 35.016902836s ago: executing program 1 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20.690983939s ago: executing program 32 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x1700, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19.764632133s ago: executing program 33 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.976067159s ago: executing program 4 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x46503, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xf7f, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x20}}}, &(0x7f0000000300)=0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d, 0xfffffffc}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r10, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x7, 0x5}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x2d, 0x1}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x402, 0x6, 0x6, 0xc, 0xd, 0x9}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x401, 0x8b, 0x4, 0x8, 0xffff}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x401, 0x80, 0x1, 0x9, 0x5, 0xd7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x80, 0x0, 0xaa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x3, 0x5, 0x5}}}}}}}}]}}, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000000, 0x10000002, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x0, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x0, 0x35c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r12, 0x0, 0x2c, &(0x7f0000000340)={0x1000002, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e32, @broadcast}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) lseek(r13, 0x7fffdfff, 0x2) ioctl$VT_RESIZEX(r12, 0x560a, &(0x7f0000000080)={0x800, 0x10b, 0x5, 0x6, 0xb2, 0xd}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x1f0003, 0x0, {[0xffffffffffffffff, 0x3, 0x83, 0xffffffffefffff15, 0x33f41b25, 0x4, 0xd, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.947607387s ago: executing program 4 (id=199): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000094000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="ba4200b8f06def0ff40766b92308000066b89de52df666babdb2fc650f300fc5db0166f082158465660f388061b6d1aa0200f20f1ae98fe9c001ce67622a", 0x3e}], 0x1, 0xe, &(0x7f00000000c0)=[@cstype0={0x4, 0x5}, @vmwrite={0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}], 0x2) 7.89202274s ago: executing program 4 (id=201): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ptrace(0x10, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) (async) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='4', 0x1f) 7.035731078s ago: executing program 4 (id=218): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x200780, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6d73697a653d307830303030303030304000000000006d33015ee49aee0212aedf8378445d4500002c0053fc2656ff13c60ecfb505e41a72275a71a5013a7103c105f1fc76d0123971a5127bbaee627434dc8ad419fd9231368264e670662deddad6ff491f5744f6ffa2be05b5500df84df427cf98a8148ff65d853eb5bdbe370c13b654ad2f63049241a7d54641c33cc278d855e83ca85dbd919bd8d9a2ac6f15b81e964f2db9db4aa3023df8f2441f33c8e71f420c7336a989292e759e92cc57db22ffb02bd32416"]) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(r0, &(0x7f00000004c0)='./file0\x00', 0x121c01, 0x190) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r1, r8, 0x0) 6.784291726s ago: executing program 4 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, r2, r2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x18, 0x8001, &(0x7f0000000000)="3ca221"}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000000300)="32b9"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.753954133s ago: executing program 4 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+cpuset', 0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) 6.232395223s ago: executing program 5 (id=228): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000094000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="ba4200b8f06def0ff40766b92308000066b89de52df666babdb2fc650f300fc5db0166f082158465660f388061b6d1aa0200f20f1ae98fe9c001ce67622a", 0x3e}], 0x1, 0xe, &(0x7f00000000c0)=[@cstype0={0x4, 0x5}, @vmwrite={0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}], 0x2) 6.232014913s ago: executing program 5 (id=229): setns(0xc9, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) close(r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000002"], 0x2c}], 0x1}, 0x0) 6.170815757s ago: executing program 5 (id=230): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) 6.075308309s ago: executing program 5 (id=231): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163142, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163142, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x64c1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 5.816104269s ago: executing program 5 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, r2, r2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x18, 0x8001, &(0x7f0000000000)="3ca221"}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000000300)="32b9"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.7659986s ago: executing program 5 (id=236): r0 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='uid\'\xb5\xbb\x05\x15ym\xab\xc0Ia\x99\xa9\xc3gQ\x00\x0f\x9a\x06c\xb9\xe4\xaa\xec\xf3\x05en\xd9O\xccr\xdf\xb7|\v4\xeb\"aE23y{\xbdO\xa9\xc0i\x8a%1q\xb0\xd8\xe6\xdd\x82\xb9\xf3G\x15\xa2Xf\xd7\x8c\x88@\x0f\xf3\x14q\x1a\xcc\xde\xc5\xf70\xd1u\xa0\x1b\x9a\xb8\xf2\xb8\\\xa4\x1f\x9c1\xb6\xb2\xbai\xc5\x8f\x067\xccXz\xf1.\x01\xf1\xa8\xb2S\xc7,\xa8A\x1f4};k\x13\t\x91\x83\x15\xd5\x14\xb0nA`K\xc0L+\xc2\xa6\x8f\xdd\xfa=\xdb\x1b\n\'s[\xde\x94T\xf8I(\xd2`g\xc1', &(0x7f0000000600)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v62\fW\xbe\x15J\x1c\x12\x84l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) inotify_init1(0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0x9, 0xbf, 0x0, 0xffff, 0x2, 0x10000, '\x00', 0x19}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.876017695s ago: executing program 3 (id=238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r2, 0x7fffffffffffffff, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.660413905s ago: executing program 0 (id=240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r2, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a1", 0x28}, {&(0x7f0000000280)="8bcceb216f624c06f5ff", 0xa}, {&(0x7f00000005c0)="c0b9a0089e7eec0b24e15ac3", 0xc}], 0x3) (rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5801000010000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecdf070000000a00000000c6846a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000fdfffffffffffffffcffffffffffffff00000000000000000400000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000008000000ffffffff2abd7000000080000a000400e5000000000000001c001700000000002ebd70000000000027bd700000000000000000004c001400686d6163287368613235362900"/272], 0x158}}, 0x24004000) 4.631166892s ago: executing program 0 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0xc00) fcntl$getflags(r2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private, @loopback}, &(0x7f0000000400)=0xc) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) chdir(&(0x7f0000000540)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) lseek(r7, 0x7fffdfff, 0x2) getdents64(r7, 0x0, 0xfb) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000a80)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x77, 0x9, 0x0, [{0x4, 0x80, 0x7f}, {0x5, 0x8, 0x9, '\x00', 0x10}, {0x2, 0x3, 0x8, '\x00', 0x1}, {0xc, 0x1, 0xa, '\x00', 0x5}, {0x4d, 0xaa, 0xde, '\x00', 0xf}, {0x3, 0x3f, 0x1, '\x00', 0x6}, {0x1, 0x61, 0x4, '\x00', 0xc3}, {0xb, 0x4, 0x9d, '\x00', 0x9}, {0x4, 0x9, 0x0, '\x00', 0xfa}, {0x2, 0x3, 0x3a}, {0x6, 0x9, 0x1, '\x00', 0x7f}, {0xfd, 0x0, 0x1, '\x00', 0x1}, {0x9, 0x80, 0x3, '\x00', 0x4}, {0xf4, 0x0, 0x0, '\x00', 0x2}, {0x8, 0xb7, 0x4e, '\x00', 0x6}, {0xc, 0x1, 0x9, '\x00', 0xf8}, {0x8, 0x7b, 0x1, '\x00', 0x1}, {0x2, 0xf7, 0xde, '\x00', 0x4}, {0x4, 0x6, 0x1, '\x00', 0x81}, {0x2, 0x3, 0xc, '\x00', 0x5}, {0xff, 0xff, 0x0, '\x00', 0x2}, {0x5, 0x0, 0x0, '\x00', 0x93}, {0xd, 0x0, 0x14, '\x00', 0xe}, {0x9, 0x7f, 0x2, '\x00', 0x6}]}}) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffff08ffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) recvmmsg(r8, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f40)=""/4071, 0xfe7}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/271, 0x10f}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000980)=""/227, 0xe3}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000100)=""/94, 0x5e}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a3f3410f1efa440f20c03588001d00445b66baf80cb88cf4b684ef663efc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x54}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 4.442234166s ago: executing program 0 (id=242): syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e", @ANYRESDEC], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e", @ANYRESDEC], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0xcb, &(0x7f0000000100)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x1, 0x1, 0x8, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xfe, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0x9}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x8, 0x6, [{0x2, 0x9}, {0x6, 0x7f}, {0xc, 0x8}, {0x34, 0x1}, {0x7, 0xf}, {0x1, 0x6}], 0xe}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x9, 0x3, [{0xff, 0x2}, {0x4f, 0xff}, {0x9, 0x8}], 0x3}], [{{0x9, 0x5, 0x7, 0x1, 0x40, 0x81, 0x9, 0x6, {0x12, 0x25, 0x1, 0xe, "a9b060771158c711fb12f216eaa1"}}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x40, 0x30, 0x3, {0xe, 0x25, 0x1, 0xa, "233dfc94ccbf64efecfc"}}}, {{0x9, 0x5, 0x86, 0x8, 0x20, 0x2b, 0x4b, 0x8, {0xc, 0x25, 0x1, 0x8, "456c36ef6dd5f330"}}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x0, 0x7, 0x7f, {0x8, 0x25, 0x1, 0x4, '(=t~'}}}, {{0x9, 0x5, 0xad58f9f370f5a8d5, 0x10, 0x200, 0x0, 0xf4, 0x5, {0xd, 0x25, 0x1, 0x9, "48a81a8960ea241b1f"}}}]}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x3b, 0x0, 0x80, 0x10, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0xa, [{0x0, 0xfffffffffffffffc}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "84e2e2e9941b9c6022e77c750d0d20a0176b38432a0ce0c390e930a0d56e4cb1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3406}}, {0xac, &(0x7f0000000440)=@string={0xac, 0x3, "648286d9bdb8eed7a9fcf5a63c3c8ce19ac459886240b4c0812a42589f31a50a9f3ed3684d52b21037379d748c45f24cff7b77eaee7f926fb352ba0fe2677c98a3e97e10f8b976920c4de26c3cee552ca501c295b9fb4fbd9d6b89c533ba8578af7a8ae1296044012eaea7f45baf2f1e5de042ce7575314d4fa7ba86256f219b0b163ce7fe02f098872aecaaac35c9f3fc2fc5f5613399108439bd59d89919edfcd3ca75d3893337980a"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1001}}]}) 3.768384061s ago: executing program 0 (id=243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4a1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpriority(0x0, r1) syz_usb_control_io(r0, 0x0, 0x0) open(0x0, 0x20000, 0x0) 3.066636643s ago: executing program 0 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, r2, r2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x18, 0x8001, &(0x7f0000000000)="3ca221"}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000000300)="32b9"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.974765574s ago: executing program 0 (id=245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0xfffffffffffffde3) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) unshare(0x60000600) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900010000000000000000000000003200f112215f00000000", 0x39}], 0x1) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) keyctl$negate(0xd, 0x0, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x10018, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_on}]}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x0, r1, 0x100000000000019) 1.680415622s ago: executing program 3 (id=246): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x108046, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0xd, 0x20, 0x55, 0x8, 0x403, 0xda70, 0x7f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x90, 0x3b, "", [{{0x9, 0x4, 0x63, 0xf, 0x0, 0x90, 0x92, 0x8d, 0x80}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x457}}, {0x37, &(0x7f0000000040)=@string={0x37, 0x3, "dea11139b0cec645e324f61ae760f3ff5e2154cfbcc3e4f72d3edf142118e5db1ede84cf9431844db15d4b31deb343318f54e27384"}}]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) setregid(0x0, 0xee00) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRES32=r6]) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRES32=r6]) 236.291545ms ago: executing program 3 (id=247): capset(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf5, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x192, 0x1000, 0xfffffffe, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x0, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x200005, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0xa, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='pipefs\x00', 0x0, &(0x7f0000000180)='/dev/kvm\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 126.21099ms ago: executing program 3 (id=248): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x60e4, @loopback, 0xfffffffe}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x659f, 0x1) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013105b310fe"}) recvmmsg(r1, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000140)={{r1}, "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"}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @none, 0x18, 0x2}, 0xe) shutdown(r4, 0x1) 64.365315ms ago: executing program 3 (id=249): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup(r1) r3 = dup(r2) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r3, 0x8, 0xa2ae, 0x6771}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f0000000240)='./file0\x00', 0x0) geteuid() socket$pptp(0x18, 0x1, 0x2) (async) socket$inet6(0xa, 0x3, 0xff) (async) dup(r1) (async) dup(r2) (async) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r3, 0x8, 0xa2ae, 0x6771}) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) geteuid() (async) 0s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x18a) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x400, 0x56) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00') r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000040)=""/25, 0x19, 0x10000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 22.615251][ T36] audit: type=1400 audit(1790318756.159:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.616442][ T286] cgroup: Unknown subsys name 'net' [ 22.638007][ T36] audit: type=1400 audit(1790318756.159:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.665364][ T36] audit: type=1400 audit(1790318756.199:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.665543][ T286] cgroup: Unknown subsys name 'devices' [ 22.790992][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.796611][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.918666][ T36] audit: type=1400 audit(1790318756.459:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.941861][ T36] audit: type=1400 audit(1790318756.459:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.960946][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.966733][ T36] audit: type=1400 audit(1790318756.459:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.998233][ T36] audit: type=1400 audit(1790318756.529:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.005251][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.023752][ T36] audit: type=1400 audit(1790318756.529:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.057985][ T36] audit: type=1400 audit(1790318756.559:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.083604][ T36] audit: type=1400 audit(1790318756.559:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.839453][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.846528][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.853779][ T294] bridge_slave_0: entered allmulticast mode [ 23.860114][ T294] bridge_slave_0: entered promiscuous mode [ 23.866468][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.873693][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881057][ T294] bridge_slave_1: entered allmulticast mode [ 23.887194][ T294] bridge_slave_1: entered promiscuous mode [ 23.924702][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.931926][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.938980][ T293] bridge_slave_0: entered allmulticast mode [ 23.945289][ T293] bridge_slave_0: entered promiscuous mode [ 23.952990][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.960093][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.967148][ T293] bridge_slave_1: entered allmulticast mode [ 23.973385][ T293] bridge_slave_1: entered promiscuous mode [ 23.996314][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.003390][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.010492][ T295] bridge_slave_0: entered allmulticast mode [ 24.016630][ T295] bridge_slave_0: entered promiscuous mode [ 24.025537][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.032625][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.039693][ T295] bridge_slave_1: entered allmulticast mode [ 24.045940][ T295] bridge_slave_1: entered promiscuous mode [ 24.067602][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074744][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.081979][ T296] bridge_slave_0: entered allmulticast mode [ 24.088175][ T296] bridge_slave_0: entered promiscuous mode [ 24.100181][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.107258][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.114479][ T296] bridge_slave_1: entered allmulticast mode [ 24.120769][ T296] bridge_slave_1: entered promiscuous mode [ 24.247562][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.254652][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.261974][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.269006][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.293187][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.300278][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.307556][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.314604][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.344893][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.351987][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.359267][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.366377][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.382644][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.390297][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.397540][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.405243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.412858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.420231][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.436811][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.443902][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.457468][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.464739][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.483910][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.490987][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.498591][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.505701][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.534644][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.541737][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.562006][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.569059][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.577289][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.584363][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.599710][ T293] veth0_vlan: entered promiscuous mode [ 24.614339][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.621409][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.631472][ T293] veth1_macvtap: entered promiscuous mode [ 24.657208][ T295] veth0_vlan: entered promiscuous mode [ 24.672913][ T296] veth0_vlan: entered promiscuous mode [ 24.687002][ T295] veth1_macvtap: entered promiscuous mode [ 24.697555][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.718943][ T294] veth0_vlan: entered promiscuous mode [ 24.737027][ T296] veth1_macvtap: entered promiscuous mode [ 24.755208][ T294] veth1_macvtap: entered promiscuous mode [ 24.762431][ T315] rust_binder: Failed to allocate buffer. len:216172782113783832, is_oneway:true [ 24.762493][ T315] rust_binder: Failure in copy_transaction_data: ENOSPC [ 24.778347][ T315] rust_binder: 314:315 transaction async to 314:0 failed ENOSPC, code 0 size 0-0 [ 24.797309][ T9] rust_binder: 314: undelivered TRANSACTION_ERROR: 29201 [ 24.834861][ T320] rust_binder: 319:320 no such ref 0 [ 24.843599][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.850125][ T320] rust_binder: 319:320 got transaction to invalid handle 1 [ 24.889660][ T320] rust_binder: 319:320 transaction async to 0:0 failed ENOENT, code 0 size 5888-0 [ 24.917398][ T311] rust_binder: 319: undelivered TRANSACTION_ERROR: 29201 [ 24.919748][ T327] rust_binder: 326:327 no such ref 0 [ 24.951290][ T327] rust_binder: 326:327 got transaction to invalid handle 1 [ 24.970075][ T327] rust_binder: 326:327 transaction async to 0:0 failed ENOENT, code 0 size 0-23 [ 24.981991][ T311] rust_binder: 326: undelivered TRANSACTION_ERROR: 29201 [ 25.049416][ T329] mmap: syz.0.7 (329) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.055695][ T336] overlayfs: failed to resolve './bus/file0': -2 [ 25.170519][ T340] rust_binder: Failure in copy_transaction_data: EINVAL [ 25.170551][ T340] rust_binder: 339:340 transaction async to 339:0 failed EINVAL, code 0 size 0-0 [ 25.217977][ T311] rust_binder: 339: undelivered TRANSACTION_ERROR: 29201 [ 25.398373][ T349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.808842][ T356] rust_binder: 355:356 no such ref 0 [ 25.829840][ T356] rust_binder: 355:356 got transaction to invalid handle 1 [ 25.837174][ T356] rust_binder: 355:356 transaction async to 0:0 failed ENOENT, code 0 size 0-23 [ 25.884263][ T9] rust_binder: 355: undelivered TRANSACTION_ERROR: 29201 [ 25.966747][ T360] rust_binder: Failed to allocate buffer. len:576460752303423512, is_oneway:true [ 25.966777][ T360] rust_binder: Failure in copy_transaction_data: ENOSPC [ 25.992649][ T360] rust_binder: 359:360 transaction async to 359:0 failed ENOSPC, code 0 size 0-0 [ 26.026292][ T66] rust_binder: 359: undelivered TRANSACTION_ERROR: 29201 [ 26.419246][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.569281][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 26.583352][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.605309][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.625271][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 26.649376][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.669414][ T9] usb 1-1: config 0 descriptor?? [ 27.099909][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.119498][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.200722][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 27.209188][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 27.229724][ T9] usb 1-1: USB disconnect, device number 2 [ 27.705662][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 27.705678][ T36] audit: type=1400 audit(1790318761.249:139): avc: denied { create } for pid=387 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.737029][ T36] audit: type=1400 audit(1790318761.279:140): avc: denied { write } for pid=387 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.803966][ T392] rust_binder: Failed to allocate buffer. len:1657324662872342552, is_oneway:true [ 27.803996][ T392] rust_binder: Failure in copy_transaction_data: ENOSPC [ 27.809219][ T36] audit: type=1400 audit(1790318761.279:141): avc: denied { nlmsg_write } for pid=387 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.819315][ T392] rust_binder: 391:392 transaction async to 391:0 failed ENOSPC, code 0 size 0-0 [ 27.867524][ T9] rust_binder: 391: undelivered TRANSACTION_ERROR: 29201 [ 28.104330][ T399] ======================================================= [ 28.104330][ T399] WARNING: The mand mount option has been deprecated and [ 28.104330][ T399] and is ignored by this kernel. Remove the mand [ 28.104330][ T399] option from the mount to silence this warning. [ 28.104330][ T399] ======================================================= [ 28.160656][ T36] audit: type=1400 audit(1790318761.709:142): avc: denied { write } for pid=398 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.169319][ T399] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 28.209175][ T36] audit: type=1400 audit(1790318761.739:143): avc: denied { read } for pid=398 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.209366][ T399] overlayfs: missing 'lowerdir' [ 28.248440][ T36] audit: type=1400 audit(1790318761.739:144): avc: denied { ioctl } for pid=398 comm="syz.3.32" path="socket:[4592]" dev="sockfs" ino=4592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.405211][ T36] audit: type=1400 audit(1790318761.949:145): avc: denied { create } for pid=404 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.741102][ T416] rust_binder: Failed to allocate buffer. len:1729382256910270488, is_oneway:true [ 28.741133][ T416] rust_binder: Failure in copy_transaction_data: ENOSPC [ 28.759220][ T416] rust_binder: 415:416 transaction async to 415:0 failed ENOSPC, code 0 size 0-0 [ 28.804217][ T45] rust_binder: 415: undelivered TRANSACTION_ERROR: 29201 [ 28.820543][ T36] audit: type=1400 audit(1790318762.369:146): avc: denied { read append } for pid=417 comm="syz.0.40" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.899196][ T36] audit: type=1400 audit(1790318762.369:147): avc: denied { open } for pid=417 comm="syz.0.40" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.943521][ T36] audit: type=1400 audit(1790318762.399:148): avc: denied { map } for pid=417 comm="syz.0.40" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.359172][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.509178][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 29.538082][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.556086][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.566158][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.593220][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 29.605127][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.614095][ T45] usb 1-1: config 0 descriptor?? [ 30.033563][ T45] hid (null): report_id 0 is invalid [ 30.038933][ T45] hid (null): unknown global tag 0xe [ 30.080378][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input4 [ 30.114570][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5 [ 30.171770][ T45] kye 0003:0458:5011.0001: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 30.275961][ T422] syzkaller1: entered promiscuous mode [ 30.287526][ T422] syzkaller1: entered allmulticast mode [ 30.920539][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.949198][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.969887][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.989240][ T445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.990092][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.010112][ T445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.419208][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.596565][ T311] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 31.616597][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 31.629336][ T311] usb 4-1: Product: syz [ 31.633547][ T311] usb 4-1: Manufacturer: syz [ 32.220408][ T311] scsi host1: uas [ 32.233639][ C1] usb 4-1: stat urb: no pending cmd for uas-tag 78 [ 32.434974][ C1] usb 4-1: cmd cmplt err -71 [ 32.435430][ T311] usb 4-1: USB disconnect, device number 2 [ 32.449820][ T311] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 32.457618][ T311] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 32.594019][ T455] netlink: 'syz.0.52': attribute type 298 has an invalid length. [ 32.603469][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.619284][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.636520][ T455] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.660015][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.668595][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.238947][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 33.238964][ T36] audit: type=1400 audit(1790318766.779:165): avc: denied { read write } for pid=460 comm="syz.0.55" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.289197][ T383] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.309196][ T36] audit: type=1400 audit(1790318766.829:166): avc: denied { open } for pid=460 comm="syz.0.55" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.321972][ T461] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 33.359172][ T36] audit: type=1400 audit(1790318766.849:167): avc: denied { ioctl } for pid=460 comm="syz.0.55" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.450901][ T383] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.466988][ T383] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.489160][ T383] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.505997][ T383] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 33.526194][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.539100][ T383] usb 4-1: config 0 descriptor?? [ 33.949327][ T36] audit: type=1400 audit(1790318767.499:168): avc: denied { create } for pid=458 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.951701][ T383] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:06A3:0CD0.0002/input/input6 [ 34.027782][ T383] saitek 0003:06A3:0CD0.0002: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input0 [ 34.312519][ T466] FAULT_INJECTION: forcing a failure. [ 34.312519][ T466] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.339322][ T466] CPU: 0 UID: 0 PID: 466 Comm: syz.0.56 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 34.339353][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.339373][ T466] Call Trace: [ 34.339379][ T466] [ 34.339386][ T466] __dump_stack+0x21/0x30 [ 34.339424][ T466] dump_stack_lvl+0x140/0x1c0 [ 34.339446][ T466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.339468][ T466] ? _raw_spin_lock_bh+0x96/0x130 [ 34.339486][ T466] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 34.339502][ T466] ? avc_has_perm+0x155/0x240 [ 34.339523][ T466] dump_stack+0x19/0x20 [ 34.339544][ T466] should_fail_ex+0x3c2/0x510 [ 34.339565][ T466] should_fail+0xf/0x20 [ 34.339584][ T466] get_futex_key+0x22c/0x940 [ 34.339606][ T466] ? __cfi_get_futex_key+0x10/0x10 [ 34.339627][ T466] ? release_sock+0x171/0x1f0 [ 34.339647][ T466] futex_wake+0x150/0x950 [ 34.339663][ T466] ? __kasan_check_write+0x18/0x20 [ 34.339681][ T466] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.339698][ T466] ? __cfi_futex_wake+0x10/0x10 [ 34.339713][ T466] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 34.339736][ T466] ? perf_lock_task_context+0x398/0x450 [ 34.339756][ T466] ? __perf_event_period+0x490/0x490 [ 34.339774][ T466] ? mutex_unlock+0x90/0x240 [ 34.339796][ T466] do_futex+0x37d/0x510 [ 34.339816][ T466] ? __kasan_check_read+0x15/0x20 [ 34.339832][ T466] ? __cfi_do_futex+0x10/0x10 [ 34.339853][ T466] ? __kasan_check_write+0x18/0x20 [ 34.339871][ T466] mm_release+0x15f/0x300 [ 34.339890][ T466] ? exit_mm_release+0x50/0x50 [ 34.339910][ T466] ? futex_exit_release+0x11d/0x1f0 [ 34.339932][ T466] exit_mm_release+0x29/0x50 [ 34.339959][ T466] do_exit+0x832/0x2850 [ 34.339983][ T466] ? __cfi_do_exit+0x10/0x10 [ 34.340003][ T466] ? ___sys_recvmsg+0x223/0x590 [ 34.340027][ T466] ? __kasan_check_write+0x18/0x20 [ 34.340045][ T466] ? __kasan_check_write+0x18/0x20 [ 34.340062][ T466] ? _raw_spin_lock_irq+0x93/0x120 [ 34.340079][ T466] do_group_exit+0x21f/0x2f0 [ 34.340100][ T466] ? __kasan_check_write+0x18/0x20 [ 34.340114][ T466] ? recalc_sigpending+0x16c/0x1d0 [ 34.340130][ T466] get_signal+0x134c/0x1490 [ 34.340151][ T466] arch_do_signal_or_restart+0xbc/0x700 [ 34.340167][ T466] ? fput+0x1a4/0x230 [ 34.340187][ T466] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.340203][ T466] ? ksys_write+0x1f3/0x260 [ 34.340219][ T466] ? __kasan_check_read+0x15/0x20 [ 34.340235][ T466] syscall_exit_to_user_mode+0x57/0xb0 [ 34.340254][ T466] do_syscall_64+0x63/0xf0 [ 34.340269][ T466] ? clear_bhb_loop+0x50/0xa0 [ 34.340288][ T466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.340307][ T466] RIP: 0033:0x7f210f19e159 [ 34.340329][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.340341][ T466] RSP: 002b:00007f2110102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 34.340366][ T466] RAX: 0000000000000000 RBX: 00007f210f426180 RCX: 00007f210f19e159 [ 34.340379][ T466] RDX: 0000000000000700 RSI: 0000200000000580 RDI: 0000000000000003 [ 34.340389][ T466] RBP: 00007f2110102090 R08: 0000000000000000 R09: 0000000000000000 [ 34.340399][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.340409][ T466] R13: 00007f210f426218 R14: 00007f210f426180 R15: 00007ffe1bd36748 [ 34.340424][ T466] [ 34.413140][ T36] audit: type=1400 audit(1790318767.959:169): avc: denied { create } for pid=468 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.564892][ T469] futex_wake_op: syz.0.57 tries to shift op by 144; fix this program [ 34.871106][ T475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=475 comm=syz.0.58 [ 34.887440][ T475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 34.951174][ T36] audit: type=1400 audit(1790318768.499:170): avc: denied { append } for pid=477 comm="syz.0.59" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.669378][ C1] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 35.799190][ T66] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 35.940432][ T66] usb 1-1: device descriptor read/64, error -32 [ 36.189194][ T66] usb 1-1: device descriptor read/64, error -32 [ 36.266499][ T485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 36.339365][ T485] ip6gretap0: entered promiscuous mode [ 36.344907][ T485] ip6gretap0: entered allmulticast mode [ 36.351829][ T36] audit: type=1400 audit(1790318769.899:171): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.401866][ T36] audit: type=1400 audit(1790318769.949:172): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.429170][ T66] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 36.459471][ T36] audit: type=1400 audit(1790318769.949:173): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=792 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.506985][ T36] audit: type=1400 audit(1790318769.949:174): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=792 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.579880][ T66] usb 1-1: device descriptor read/64, error -32 [ 36.698049][ T9] usb 4-1: USB disconnect, device number 3 [ 36.829215][ T66] usb 1-1: device descriptor read/64, error -32 [ 37.019241][ T66] raw-gadget.0 gadget.0: failed to queue resume event [ 37.030752][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.099220][ T66] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 37.139343][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.146623][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.153887][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.161187][ T66] usb 1-1: device descriptor read/8, error -32 [ 37.169179][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.289325][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.296773][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.304221][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.311371][ T66] usb 1-1: device descriptor read/8, error -32 [ 37.419221][ T66] raw-gadget.0 gadget.0: failed to queue suspend event [ 37.433465][ T66] raw-gadget.0 gadget.0: failed to queue reset event [ 37.449231][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.519211][ T66] raw-gadget.0 gadget.0: failed to queue resume event [ 37.589191][ T66] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 37.619334][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.626631][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.634687][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.641842][ T66] usb 1-1: device descriptor read/8, error -32 [ 37.704490][ T510] process 'syz.0.67' launched './file0' with NULL argv: empty string added [ 37.713265][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 37.769344][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.776759][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.784052][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 37.791329][ T66] usb 1-1: device descriptor read/8, error -32 [ 37.859222][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.899471][ T66] raw-gadget.0 gadget.0: failed to queue suspend event [ 37.909368][ T45] usb 1-1: USB disconnect, device number 3 [ 37.963511][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 38.040438][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 38.109182][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.116876][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.124423][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.129197][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.131717][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.144975][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 38.219263][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 38.243114][ T9] usb usb4-port1: attempt power cycle [ 38.279193][ T45] usb 1-1: device descriptor read/64, error -32 [ 38.399347][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.406628][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.414141][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.421506][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 38.489210][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 38.559217][ T45] usb 1-1: device descriptor read/64, error -32 [ 38.599199][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 38.639578][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.669189][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 38.688652][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 38.759224][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 38.770167][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.829176][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.839332][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.846625][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.854036][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.861262][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 38.929200][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 38.999595][ T45] usb 1-1: device descriptor read/64, error -32 [ 39.029189][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.062296][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.109314][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.116652][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.123923][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.131141][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 39.190201][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.199183][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 39.259415][ T45] usb 1-1: device descriptor read/64, error -32 [ 39.299268][ T9] usb usb4-port1: unable to enumerate USB device [ 39.378068][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 39.385142][ T45] usb usb1-port1: attempt power cycle [ 39.399211][ T45] raw-gadget.0 gadget.0: failed to queue disconnect event [ 39.408119][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 39.479235][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 39.497643][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 39.709216][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 39.779179][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.817222][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.824868][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.832231][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.839338][ T45] usb 1-1: device descriptor read/8, error -32 [ 39.969359][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.976662][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.984187][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.991312][ T45] usb 1-1: device descriptor read/8, error -32 [ 40.108853][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 40.116101][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 40.139171][ T66] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.207363][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 40.279184][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.297949][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 40.304495][ T66] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 40.319466][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.326788][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.334135][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.341387][ T45] usb 1-1: device descriptor read/8, error -32 [ 40.351639][ T66] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 40.369161][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.389200][ T66] usb 4-1: Product: syz [ 40.393404][ T66] usb 4-1: Manufacturer: syz [ 40.409196][ T66] usb 4-1: SerialNumber: syz [ 40.429107][ T515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 40.469319][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.476652][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.484006][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 40.491172][ T45] usb 1-1: device descriptor read/8, error -32 [ 40.599195][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 40.609413][ T45] usb usb1-port1: unable to enumerate USB device [ 40.726340][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 40.726356][ T36] audit: type=1400 audit(1790318774.269:185): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.883189][ T474] bridge_slave_1: left allmulticast mode [ 40.899154][ T474] bridge_slave_1: left promiscuous mode [ 40.904863][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.925054][ T474] bridge_slave_0: left allmulticast mode [ 40.937128][ T474] bridge_slave_0: left promiscuous mode [ 40.949254][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.991261][ T36] audit: type=1400 audit(1790318774.539:186): avc: denied { mounton } for pid=520 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.129800][ T474] veth1_macvtap: left promiscuous mode [ 41.140495][ T474] veth0_vlan: left promiscuous mode [ 41.365331][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.381364][ T520] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.397173][ T520] bridge_slave_0: entered allmulticast mode [ 41.410343][ T520] bridge_slave_0: entered promiscuous mode [ 41.425185][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.440923][ T520] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.456725][ T520] bridge_slave_1: entered allmulticast mode [ 41.469743][ T520] bridge_slave_1: entered promiscuous mode [ 41.627388][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.634523][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.641839][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.648868][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.764992][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.788656][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.807477][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.814599][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.851742][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.858815][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.877885][ T530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.888417][ T12] bridge_slave_1: left allmulticast mode [ 41.894967][ T12] bridge_slave_1: left promiscuous mode [ 41.899274][ T530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.900778][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.916683][ T12] bridge_slave_0: left allmulticast mode [ 41.923005][ T12] bridge_slave_0: left promiscuous mode [ 41.929824][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.937186][ T530] exfat: Deprecated parameter 'debug' [ 41.942810][ T530] No source specified [ 42.044513][ T12] veth1_macvtap: left promiscuous mode [ 42.050390][ T12] veth0_vlan: left promiscuous mode [ 42.110489][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.117594][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.128596][ T528] bridge_slave_0: entered allmulticast mode [ 42.135044][ T528] bridge_slave_0: entered promiscuous mode [ 42.147379][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.157652][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.164964][ T528] bridge_slave_1: entered allmulticast mode [ 42.171359][ T528] bridge_slave_1: entered promiscuous mode [ 42.198344][ T520] veth0_vlan: entered promiscuous mode [ 42.228237][ T520] veth1_macvtap: entered promiscuous mode [ 42.272503][ T36] audit: type=1400 audit(1790318775.819:187): avc: denied { mounton } for pid=520 comm="syz-executor" path="/root/syzkaller.4UudE2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.295931][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.306086][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.344999][ T535] sda1: Can't mount, would change RO state [ 42.347431][ T36] audit: type=1400 audit(1790318775.889:188): avc: denied { mount } for pid=534 comm="syz.4.70" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.378850][ T36] audit: type=1400 audit(1790318775.909:189): avc: denied { unmount } for pid=520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.379255][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.405795][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.432182][ T537] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 42.432624][ T36] audit: type=1400 audit(1790318775.979:190): avc: denied { mounton } for pid=536 comm="syz.4.74" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 42.440585][ T528] veth0_vlan: entered promiscuous mode [ 42.482636][ T528] veth1_macvtap: entered promiscuous mode [ 42.522234][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.526042][ T36] audit: type=1400 audit(1790318776.069:191): avc: denied { ioctl } for pid=538 comm="syz.0.75" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5630 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.536749][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.595437][ T36] audit: type=1400 audit(1790318776.139:192): avc: denied { create } for pid=540 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 42.669482][ T36] audit: type=1400 audit(1790318776.219:193): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.694104][ T546] Zero length message leads to an empty skb [ 42.715762][ T36] audit: type=1400 audit(1790318776.249:194): avc: denied { listen } for pid=552 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.797976][ T66] usb 4-1: invalid MIDI in EP 0 [ 42.818624][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.832136][ T66] usb 4-1: USB disconnect, device number 8 [ 42.855545][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.939657][ T575] netlink: 'syz.4.85': attribute type 7 has an invalid length. [ 42.963027][ T575] netlink: 'syz.4.85': attribute type 5 has an invalid length. [ 42.979154][ T575] netlink: 17 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.018357][ T581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.84'. [ 43.022550][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.038878][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.048583][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.076623][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.087508][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.097053][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.112159][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.130839][ T576] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.85'. [ 43.578905][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.588406][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.604880][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 43.618817][ T610] input: syz1 as /devices/virtual/input/input7 [ 43.769217][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 43.774951][ T616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=616 comm=syz.5.94 [ 43.774960][ T615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=615 comm=syz.5.94 [ 43.800721][ T312] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.816460][ T312] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.827508][ T615] futex_wake_op: syz.5.94 tries to shift op by 144; fix this program [ 43.828662][ T312] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.850878][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 43.857523][ T312] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 43.870498][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.884651][ T312] usb 5-1: config 0 descriptor?? [ 43.891607][ T312] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 44.090744][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.099605][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.107679][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.116177][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.124425][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.132978][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.141521][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.150005][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.158020][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.166832][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.174602][ T312] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 44.178208][ T311] usb 5-1: USB disconnect, device number 2 [ 44.288457][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.297065][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.330197][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.340405][ T312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.350667][ T312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.359949][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.367975][ T312] usb 4-1: Product: syz [ 44.372163][ T312] usb 4-1: Manufacturer: syz [ 44.376750][ T312] usb 4-1: SerialNumber: syz [ 44.601633][ T312] usb 4-1: 0:2 : does not exist [ 44.606598][ T312] usb 4-1: unit 9 not found! [ 44.611392][ T312] usb 4-1: unit 0 not found! [ 44.618965][ T312] usb 4-1: USB disconnect, device number 9 [ 44.626541][ T436] udevd[436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.671110][ T474] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.677563][ T474] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.701652][ T634] input: syz1 as /devices/virtual/input/input8 [ 45.224532][ T672] capability: warning: `syz.0.111' uses deprecated v2 capabilities in a way that may be insecure [ 45.236618][ T672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.245570][ T672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.352887][ T684] capability: warning: `syz.3.115' uses 32-bit capabilities (legacy support in use) [ 45.649183][ T312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.799644][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 45.805857][ T312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.816134][ T312] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 45.825401][ T312] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 45.834894][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.839246][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 45.839262][ T36] audit: type=1400 audit(1790318779.379:220): avc: denied { bind } for pid=693 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.879350][ T312] usb 5-1: config 0 descriptor?? [ 46.090499][ T489] usb 5-1: USB disconnect, device number 3 [ 46.220616][ T699] FAULT_INJECTION: forcing a failure. [ 46.220616][ T699] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.233865][ T699] CPU: 1 UID: 0 PID: 699 Comm: syz.3.119 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 46.233892][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.233902][ T699] Call Trace: [ 46.233908][ T699] [ 46.233915][ T699] __dump_stack+0x21/0x30 [ 46.233942][ T699] dump_stack_lvl+0x140/0x1c0 [ 46.233964][ T699] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.233984][ T699] ? check_stack_object+0x138/0x150 [ 46.234003][ T699] dump_stack+0x19/0x20 [ 46.234029][ T699] should_fail_ex+0x3c2/0x510 [ 46.234050][ T699] should_fail+0xf/0x20 [ 46.234068][ T699] should_fail_usercopy+0x1e/0x30 [ 46.234092][ T699] _copy_to_user+0x24/0xa0 [ 46.234115][ T699] simple_read_from_buffer+0xed/0x160 [ 46.234138][ T699] proc_fail_nth_read+0x1aa/0x220 [ 46.234163][ T699] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.234186][ T699] ? bpf_lsm_file_permission+0xd/0x20 [ 46.234210][ T699] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.234231][ T699] vfs_read+0x28b/0xc70 [ 46.234248][ T699] ? __cfi_vfs_read+0x10/0x10 [ 46.234264][ T699] ? __kasan_check_write+0x18/0x20 [ 46.234280][ T699] ? mutex_lock+0x97/0x1d0 [ 46.234299][ T699] ? __cfi_mutex_lock+0x10/0x10 [ 46.234318][ T699] ksys_read+0x145/0x260 [ 46.234332][ T699] ? __cfi_ksys_read+0x10/0x10 [ 46.234342][ T699] ? __kasan_check_read+0x15/0x20 [ 46.234352][ T699] __x64_sys_read+0x7f/0x90 [ 46.234362][ T699] x64_sys_call+0x2638/0x2ee0 [ 46.234371][ T699] do_syscall_64+0x57/0xf0 [ 46.234380][ T699] ? clear_bhb_loop+0x50/0xa0 [ 46.234393][ T699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.234405][ T699] RIP: 0033:0x7f145d75e98e [ 46.234416][ T699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.234424][ T699] RSP: 002b:00007f145e71cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.234436][ T699] RAX: ffffffffffffffda RBX: 00007f145e71d6c0 RCX: 00007f145d75e98e [ 46.234443][ T699] RDX: 000000000000000f RSI: 00007f145e71d0a0 RDI: 0000000000000003 [ 46.234450][ T699] RBP: 00007f145e71d090 R08: 0000000000000000 R09: 0000000000000000 [ 46.234456][ T699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.234462][ T699] R13: 00007f145da26038 R14: 00007f145da25fa0 R15: 00007fff21d856d8 [ 46.234470][ T699] [ 46.245113][ T36] audit: type=1400 audit(1790318779.789:221): avc: denied { read write } for pid=700 comm="syz.3.120" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 46.498321][ T36] audit: type=1400 audit(1790318779.789:222): avc: denied { open } for pid=700 comm="syz.3.120" path="/35/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 46.523369][ T36] audit: type=1400 audit(1790318779.819:223): avc: denied { ioctl } for pid=700 comm="syz.3.120" path="/35/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 46.594579][ T703] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 46.699312][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.699552][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 46.714896][ T36] audit: type=1400 audit(1790318780.259:224): avc: denied { setopt } for pid=714 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.827690][ T36] audit: type=1400 audit(1790318780.369:225): avc: denied { bind } for pid=721 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.849569][ T36] audit: type=1400 audit(1790318780.399:226): avc: denied { setopt } for pid=721 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.870895][ T36] audit: type=1400 audit(1790318780.399:227): avc: denied { write } for pid=721 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.899232][ T36] audit: type=1400 audit(1790318780.399:228): avc: denied { bind } for pid=728 comm="syz.4.129" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.926752][ T36] audit: type=1400 audit(1790318780.399:229): avc: denied { name_bind } for pid=728 comm="syz.4.129" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 47.189256][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.208626][ T769] FAULT_INJECTION: forcing a failure. [ 47.208626][ T769] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.222031][ T769] CPU: 0 UID: 0 PID: 769 Comm: syz.5.134 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 47.222062][ T769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.222073][ T769] Call Trace: [ 47.222078][ T769] [ 47.222086][ T769] __dump_stack+0x21/0x30 [ 47.222117][ T769] dump_stack_lvl+0x140/0x1c0 [ 47.222143][ T769] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.222160][ T769] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 47.222171][ T769] ? __x64_sys_clone+0x1b7/0x230 [ 47.222183][ T769] ? do_syscall_64+0x57/0xf0 [ 47.222193][ T769] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.222206][ T769] dump_stack+0x19/0x20 [ 47.222217][ T769] should_fail_ex+0x3c2/0x510 [ 47.222230][ T769] should_fail_alloc_page+0xec/0x110 [ 47.222244][ T769] __alloc_pages_noprof+0x1c0/0x7e0 [ 47.222259][ T769] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.222273][ T769] ? kasan_save_alloc_info+0x3a/0x50 [ 47.222282][ T769] get_free_pages_noprof+0x14/0x40 [ 47.222295][ T769] pgd_alloc+0x3c/0x350 [ 47.222306][ T769] mm_init+0x530/0xbf0 [ 47.222317][ T769] copy_mm+0x1f4/0x1da0 [ 47.222330][ T769] ? copy_signal+0x6a0/0x6a0 [ 47.222341][ T769] ? __kasan_check_write+0x18/0x20 [ 47.222354][ T769] ? _raw_spin_lock+0x92/0x120 [ 47.222364][ T769] ? __asan_memset+0x39/0x50 [ 47.222373][ T769] ? __init_rwsem+0x110/0x1f0 [ 47.222386][ T769] ? copy_signal+0x4d5/0x6a0 [ 47.222397][ T769] copy_process+0x12a4/0x3350 [ 47.222410][ T769] ? __cfi_copy_process+0x10/0x10 [ 47.222422][ T769] kernel_clone+0x233/0x810 [ 47.222434][ T769] ? __cfi_kernel_clone+0x10/0x10 [ 47.222445][ T769] ? do_futex+0x32a/0x510 [ 47.222457][ T769] ? __kasan_check_write+0x18/0x20 [ 47.222468][ T769] __x64_sys_clone+0x1b7/0x230 [ 47.222480][ T769] ? __cfi___x64_sys_clone+0x10/0x10 [ 47.222493][ T769] ? __kasan_check_write+0x18/0x20 [ 47.222503][ T769] ? fpregs_restore_userregs+0x11c/0x260 [ 47.222515][ T769] ? switch_fpu_return+0x12/0x20 [ 47.222526][ T769] x64_sys_call+0x2b3c/0x2ee0 [ 47.222535][ T769] do_syscall_64+0x57/0xf0 [ 47.222544][ T769] ? clear_bhb_loop+0x50/0xa0 [ 47.222555][ T769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.222567][ T769] RIP: 0033:0x7f262519e159 [ 47.222577][ T769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.222585][ T769] RSP: 002b:00007f26260f1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.222596][ T769] RAX: ffffffffffffffda RBX: 00007f2625425fa0 RCX: 00007f262519e159 [ 47.222604][ T769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002008400 [ 47.222610][ T769] RBP: 00007f262523506b R08: 0000000000000000 R09: 0000000000000000 [ 47.222616][ T769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 47.222622][ T769] R13: 00007f2625426038 R14: 00007f2625425fa0 R15: 00007fffd56cbd38 [ 47.222631][ T769] [ 47.610338][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 47.618412][ T9] usb 5-1: config 0 has no interface number 0 [ 47.624632][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.635568][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.646919][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 47.656179][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.692781][ T9] usb 5-1: config 0 descriptor?? [ 47.766521][ T785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.767315][ T784] rust_binder: 783:784 FDA parent offset not aligned correctly [ 47.781534][ T784] rust_binder: 783:784 error while translating object: EINVAL [ 47.789505][ T784] rust_binder: Failure in copy_transaction_data: EINVAL [ 47.789528][ T784] rust_binder: 783:784 transaction async to 783:0 failed EINVAL, code 0 size 80-24 [ 47.806090][ T45] rust_binder: 783: undelivered TRANSACTION_ERROR: 29201 [ 47.846732][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.855754][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.864653][ T789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.873460][ T789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.989175][ T489] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.109185][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.139363][ T489] usb 6-1: Using ep0 maxpacket: 32 [ 48.145676][ T489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 48.156778][ T489] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.168280][ T489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.179264][ T489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.191966][ T489] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 48.201064][ T489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.209063][ T489] usb 6-1: Product: syz [ 48.213446][ T489] usb 6-1: Manufacturer: syz [ 48.218064][ T489] usb 6-1: SerialNumber: syz [ 48.226996][ T489] usb 6-1: config 0 descriptor?? [ 48.232524][ T782] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 48.241390][ T489] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 [ 48.269179][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 48.275598][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.286838][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.297646][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.307049][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.318350][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 48.326899][ T45] usb 4-1: config 0 descriptor?? [ 48.338205][ T45] hub 4-1:0.0: USB hub found [ 48.397047][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.405712][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.416239][ T808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.424952][ T808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.443534][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.452847][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.462194][ T807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60490 sclass=netlink_route_socket pid=807 comm=syz.0.144 [ 48.475451][ T311] usb 6-1: USB disconnect, device number 2 [ 48.475581][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 48.507668][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.516364][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.535695][ T45] hub 4-1:0.0: 1 port detected [ 48.727466][ T9] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 48.739419][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 48.739419][ T9] [ 48.927377][ T311] usb 5-1: USB disconnect, device number 4 [ 48.939766][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.948354][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.141000][ T825] overlayfs: failed to resolve './file1': -2 [ 49.160134][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.177472][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.187253][ T45] hub 4-1:0.0: activate --> -90 [ 49.289969][ T830] netlink: 'syz.5.152': attribute type 27 has an invalid length. [ 49.395723][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.412420][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.424786][ T45] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 49.431811][ T489] usb 4-1: USB disconnect, device number 10 [ 49.569267][ T850] ./dev/sda1: Can't lookup blockdev [ 49.730569][ T871] bpf: Bad value for 'gid' [ 50.007607][ T876] 9pnet_fd: Insufficient options for proto=fd [ 50.218593][ T884] __nla_validate_parse: 28 callbacks suppressed [ 50.218611][ T884] netlink: 112 bytes leftover after parsing attributes in process `syz.3.167'. [ 50.622737][ T911] zero sized request [ 50.689257][ T489] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.769632][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.849202][ T489] usb 4-1: Using ep0 maxpacket: 32 [ 50.855399][ T489] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.863675][ T489] usb 4-1: config 0 has no interface number 0 [ 50.869927][ T489] usb 4-1: config 0 interface 184 has no altsetting 0 [ 50.878147][ T489] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.887449][ T489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.895679][ T489] usb 4-1: Product: syz [ 50.899971][ T489] usb 4-1: Manufacturer: syz [ 50.904613][ T489] usb 4-1: SerialNumber: syz [ 50.909953][ T489] usb 4-1: config 0 descriptor?? [ 50.915738][ T489] smsc75xx v1.0.0 [ 50.919467][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 50.925537][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 50.938008][ T45] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 50.947302][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.955398][ T66] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.962940][ T45] usb 5-1: Product: syz [ 50.967098][ T45] usb 5-1: Manufacturer: syz [ 50.971800][ T45] usb 5-1: SerialNumber: syz [ 51.129193][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 51.135426][ T66] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 51.143616][ T66] usb 6-1: config 0 has no interface number 0 [ 51.151069][ T66] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 51.160199][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.168204][ T66] usb 6-1: Product: syz [ 51.172389][ T66] usb 6-1: Manufacturer: syz [ 51.176987][ T66] usb 6-1: SerialNumber: syz [ 51.184048][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 51.184061][ T36] audit: type=1400 audit(1790318784.739:269): avc: denied { cmd } for pid=898 comm="iou-wrk-905" path="socket:[9205]" dev="sockfs" ino=9205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.213040][ T66] usb 6-1: config 0 descriptor?? [ 51.219628][ T66] smsc95xx v2.0.0 [ 51.467042][ T933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.475737][ T933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.619496][ T66] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 51.630263][ T66] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.716846][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 51.727725][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.737216][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 51.748072][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 51.757903][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 51.768241][ T489] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 51.777697][ T489] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 51.787107][ T489] usb 4-1: USB disconnect, device number 11 [ 51.840439][ T66] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 51.851281][ T66] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 52.043712][ T36] audit: type=1400 audit(1790318785.589:270): avc: denied { module_load } for pid=920 comm="syz.5.183" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 52.043799][ T921] Invalid ELF header magic: != ELF [ 52.120810][ T937] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.120832][ T937] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.134325][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.140453][ T36] audit: type=1400 audit(1790318785.689:271): avc: denied { getopt } for pid=936 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.155691][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.170907][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.177492][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.185795][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.192384][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.200468][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.206966][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.215060][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.221596][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.229667][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.238578][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.248079][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.252877][ T36] audit: type=1400 audit(1790318785.799:272): avc: denied { read } for pid=943 comm="syz.3.186" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.254653][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.262940][ T36] audit: type=1400 audit(1790318785.799:273): avc: denied { open } for pid=943 comm="syz.3.186" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.309241][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.315499][ T36] audit: type=1400 audit(1790318785.839:274): avc: denied { ioctl } for pid=943 comm="syz.3.186" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.319190][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.323774][ T36] audit: type=1400 audit(1790318785.839:275): avc: denied { map } for pid=943 comm="syz.3.186" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.372209][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.377962][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.386219][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.392965][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.401258][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.407854][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.416193][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.422954][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.436600][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.443530][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.452708][ T946] netlink: 'syz.5.183': attribute type 1 has an invalid length. [ 52.454110][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.479224][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.487382][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.495482][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.505817][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.512636][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.528149][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.534957][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.543471][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.551172][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.560775][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.567385][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.577339][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.584169][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.592590][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.599336][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.618570][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.628123][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.630886][ T955] batadv_slave_1: entered promiscuous mode [ 52.638579][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.643448][ T955] batadv_slave_1: left promiscuous mode [ 52.659495][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.662304][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.668954][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.677083][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.683763][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.692301][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.698848][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.706933][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.713577][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.721950][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.728584][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.737497][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.744788][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.753732][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.760676][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.769030][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.775900][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.784009][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.790675][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.798751][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.805319][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.813547][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.820208][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.828297][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.835046][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.843107][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.849679][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.857717][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.864274][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.872354][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.878978][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.887064][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.893624][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.901708][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.908244][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.916320][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.922901][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.930985][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.937521][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 52.946126][ T941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.952760][ T941] rust_binder: Read failure Err(EFAULT) in pid:168 [ 53.193755][ T36] audit: type=1400 audit(1790318786.739:276): avc: denied { ioctl } for pid=974 comm="syz.0.195" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.366824][ T985] can0: slcan on ttynull. [ 53.411840][ T985] can0 (unregistered): slcan off ttynull. [ 53.471406][ T1002] exFAT-fs (rnullb0): invalid boot record signature [ 53.478697][ T1002] exFAT-fs (rnullb0): failed to read boot sector [ 53.490823][ T1002] exFAT-fs (rnullb0): failed to recognize exfat type [ 53.503951][ T45] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.515183][ T45] usb 5-1: unit 6: unexpected type 0x03 [ 53.527970][ T45] usb 5-1: unit 12 not found! [ 53.538338][ T45] usb 5-1: unit 4 not found! [ 53.549548][ T45] usb 5-1: unit 8 not found! [ 53.563173][ T45] usb 5-1: unit 1 not found! [ 53.568295][ T45] usb 5-1: unit 9 not found! [ 53.590198][ T45] usb 5-1: USB disconnect, device number 5 [ 53.601871][ T436] udevd[436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.763828][ T489] usb 6-1: USB disconnect, device number 3 [ 53.799211][ T311] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.832398][ T1028] netlink: 9 bytes leftover after parsing attributes in process `syz.5.203'. [ 53.842038][ T1028] gretap0: entered promiscuous mode [ 53.858388][ T36] audit: type=1400 audit(1790318787.399:277): avc: denied { watch } for pid=1029 comm="syz.5.204" path="/37" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.949231][ T311] usb 4-1: device descriptor read/64, error -71 [ 53.976639][ T36] audit: type=1400 audit(1790318787.519:278): avc: denied { name_bind } for pid=1041 comm="syz.5.208" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.006537][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.015285][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.199224][ T311] usb 4-1: device descriptor read/64, error -71 [ 54.406957][ T1063] kvm: kvm [1062]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 54.449191][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 54.536303][ T1068] 9pnet_fd: Insufficient options for proto=fd [ 54.599171][ T311] usb 4-1: device descriptor read/64, error -71 [ 54.848300][ T311] usb 4-1: device descriptor read/64, error -71 [ 54.857925][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.882646][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.959278][ T311] usb usb4-port1: attempt power cycle [ 54.981797][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 55.011792][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 55.291991][ T1110] GUP no longer grows the stack in syz.5.230 (1110): 200000006000-200000008000 (200000004000) [ 55.302436][ T1110] CPU: 1 UID: 0 PID: 1110 Comm: syz.5.230 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 55.302469][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.302481][ T1110] Call Trace: [ 55.302487][ T1110] [ 55.302495][ T1110] __dump_stack+0x21/0x30 [ 55.302526][ T1110] dump_stack_lvl+0x140/0x1c0 [ 55.302552][ T1110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.302576][ T1110] ? find_vma+0xd3/0x120 [ 55.302598][ T1110] dump_stack+0x19/0x20 [ 55.302620][ T1110] fixup_user_fault+0x616/0x6a0 [ 55.302644][ T1110] fault_in_user_writeable+0x75/0xe0 [ 55.302668][ T1110] futex_lock_pi+0x2ed/0xa70 [ 55.302692][ T1110] ? plist_check_list+0x2a8/0x2c0 [ 55.302711][ T1110] ? __cfi_futex_lock_pi+0x10/0x10 [ 55.302736][ T1110] ? plist_del+0x3f0/0x410 [ 55.302754][ T1110] ? __kasan_check_write+0x18/0x20 [ 55.302773][ T1110] ? wake_up_q+0x10a/0x1c0 [ 55.302791][ T1110] ? __cfi_futex_wake_mark+0x10/0x10 [ 55.302811][ T1110] do_futex+0x270/0x510 [ 55.302835][ T1110] ? __cfi_do_futex+0x10/0x10 [ 55.302870][ T1110] ? __vm_munmap+0x30d/0x3d0 [ 55.302891][ T1110] __se_sys_futex+0x13c/0x320 [ 55.302917][ T1110] ? __x64_sys_futex+0x110/0x110 [ 55.302942][ T1110] ? __kasan_check_write+0x18/0x20 [ 55.302961][ T1110] __x64_sys_futex+0xe9/0x110 [ 55.302984][ T1110] x64_sys_call+0x227f/0x2ee0 [ 55.303002][ T1110] do_syscall_64+0x57/0xf0 [ 55.303019][ T1110] ? clear_bhb_loop+0x50/0xa0 [ 55.303041][ T1110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.303063][ T1110] RIP: 0033:0x7f262519e159 [ 55.303079][ T1110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.303095][ T1110] RSP: 002b:00007f26260f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.303116][ T1110] RAX: ffffffffffffffda RBX: 00007f2625425fa0 RCX: 00007f262519e159 [ 55.303130][ T1110] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 55.303142][ T1110] RBP: 00007f262523506b R08: 0000000000000000 R09: 0000000000000001 [ 55.303155][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.303166][ T1110] R13: 00007f2625426038 R14: 00007f2625425fa0 R15: 00007fffd56cbd38 [ 55.303182][ T1110] [ 55.369320][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.571231][ T311] usb 4-1: device descriptor read/8, error -71 [ 55.703028][ T311] usb 4-1: device descriptor read/8, error -71 [ 55.959181][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.992256][ T311] usb 4-1: device descriptor read/8, error -71 [ 56.120149][ T311] usb 4-1: device descriptor read/8, error -71 [ 56.230777][ T311] usb usb4-port1: unable to enumerate USB device [ 56.534700][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 56.534718][ T36] audit: type=1400 audit(2000000002.229:289): avc: denied { mount } for pid=1126 comm="syz.0.237" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.593317][ T36] audit: type=1400 audit(2000000002.289:290): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.640552][ T36] audit: type=1400 audit(2000000002.339:291): avc: denied { connect } for pid=1132 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.661541][ T311] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.682612][ T36] audit: type=1400 audit(2000000002.369:292): avc: denied { ioctl } for pid=1132 comm="syz.0.239" path="socket:[11716]" dev="sockfs" ino=11716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.717399][ T311] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.746118][ T36] audit: type=1400 audit(2000000002.379:293): avc: denied { setopt } for pid=1132 comm="syz.0.239" laddr=fe80::b836:c6ff:fe84:4489 lport=2 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.761563][ T1136] syzkaller1: left promiscuous mode [ 56.790188][ T1136] syzkaller1: left allmulticast mode [ 56.790851][ T1134] fido_id[1134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.829348][ T36] audit: type=1400 audit(2000000002.379:294): avc: denied { read } for pid=1132 comm="syz.0.239" laddr=fe80::b836:c6ff:fe84:4489 lport=2 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.855875][ T36] audit: type=1400 audit(2000000002.379:295): avc: denied { getopt } for pid=1132 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.979223][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.012430][ T1144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.040020][ T1144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.040053][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.090004][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.099695][ T1144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.109609][ T1144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.130228][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.141257][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.159187][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.180442][ T45] usb 4-1: config 0 descriptor?? [ 57.401231][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 57.407230][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 57.418674][ T45] usb 4-1: USB disconnect, device number 16 [ 57.652795][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.680118][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.869204][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 58.030216][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.041285][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 58.058027][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.077019][ T45] usb 4-1: config 0 descriptor?? [ 58.899898][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 58.929917][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 59.236405][ T489] usb 4-1: USB disconnect, device number 17 [ 59.236512][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 60.029197][ T311] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 60.210237][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.229201][ T311] usb 4-1: not running at top speed; connect to a high speed hub [ 60.259197][ T311] usb 4-1: config 1 has an invalid interface number: 99 but max is 0 [ 60.267328][ T311] usb 4-1: config 1 has no interface number 0 [ 60.279204][ T311] usb 4-1: config 1 interface 99 has no altsetting 0 [ 60.302203][ T311] usb 4-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 60.311350][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.328328][ T311] usb 4-1: Product: syz [ 60.339177][ T311] usb 4-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 60.359170][ T311] usb 4-1: SerialNumber: syz [ 60.600601][ T311] usb 4-1: NDI device with a latency value of 1 [ 60.622830][ T311] ftdi_sio 4-1:1.99: FTDI USB Serial Device converter detected [ 60.631051][ T311] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 60.649746][ T311] usb 4-1: USB disconnect, device number 18 [ 60.656305][ T311] ftdi_sio 4-1:1.99: device disconnected [ 61.351224][ T1165] : renamed from bond_slave_0 [ 61.356412][ T36] audit: type=1400 audit(2000000007.049:296): avc: denied { connect } for pid=1164 comm="syz.3.248" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.390873][ T36] audit: type=1400 audit(2000000007.069:297): avc: denied { read } for pid=1164 comm="syz.3.248" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.419324][ T36] audit: type=1400 audit(2000000007.109:298): avc: denied { create } for pid=1166 comm="syz.3.249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.459964][ T1170] BUG: scheduling while atomic: syz.3.250/1170/0x00000002 [ 61.467165][ T1170] Modules linked in: [ 61.471171][ T1170] CPU: 1 UID: 0 PID: 1170 Comm: syz.3.250 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 61.471207][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.471220][ T1170] Call Trace: [ 61.471226][ T1170] [ 61.471234][ T1170] __dump_stack+0x21/0x30 [ 61.471267][ T1170] dump_stack_lvl+0x140/0x1c0 [ 61.471292][ T1170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.471321][ T1170] dump_stack+0x19/0x20 [ 61.471345][ T1170] __schedule_bug+0x12b/0x200 [ 61.471365][ T1170] ? find_proxy_task+0x2460/0x2460 [ 61.471386][ T1170] ? __kasan_check_read+0x15/0x20 [ 61.471404][ T1170] ? psi_group_change+0xab6/0x10a0 [ 61.471429][ T1170] __schedule+0xb85/0x20b0 [ 61.471450][ T1170] ? update_curr+0xf1/0x9c0 [ 61.471469][ T1170] ? __sched_text_start+0x10/0x10 [ 61.471487][ T1170] ? __kasan_check_read+0x15/0x20 [ 61.471505][ T1170] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 61.471531][ T1170] ? __kasan_check_write+0x18/0x20 [ 61.471550][ T1170] ? _raw_spin_lock_irq+0x93/0x120 [ 61.471567][ T1170] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 61.471586][ T1170] schedule+0xc5/0x240 [ 61.471604][ T1170] schedule_preempt_disabled+0x14/0x30 [ 61.471624][ T1170] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 61.471649][ T1170] ? activate_task+0x43b/0x480 [ 61.471668][ T1170] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 61.471691][ T1170] ? try_to_wake_up+0x111a/0x1fd0 [ 61.471712][ T1170] ? __kasan_check_write+0x18/0x20 [ 61.471729][ T1170] ? wake_q_add_safe+0x29/0x100 [ 61.471746][ T1170] ? cpus_share_resources+0x120/0x130 [ 61.471767][ T1170] ? rwsem_mark_wake+0x507/0x770 [ 61.471793][ T1170] ? rwsem_read_trylock+0x275/0x5a0 [ 61.471818][ T1170] ? wake_up_q+0x10a/0x1c0 [ 61.471834][ T1170] ? downgrade_write+0x470/0x470 [ 61.471860][ T1170] down_write+0x163/0x2b0 [ 61.471882][ T1170] ? __cfi_down_write+0x10/0x10 [ 61.471904][ T1170] ? down_read+0x7f/0xe0 [ 61.471925][ T1170] ? __cfi_down_read+0x10/0x10 [ 61.471948][ T1170] kernfs_remove_by_name_ns+0x8c/0x180 [ 61.471973][ T1170] sysfs_unmerge_group+0xd7/0x130 [ 61.472005][ T1170] dpm_sysfs_remove+0x7b/0xd0 [ 61.472031][ T1170] device_del+0x241/0xcf0 [ 61.472049][ T1170] ? __cfi_class_find_device+0x10/0x10 [ 61.472071][ T1170] ? __cfi_device_del+0x10/0x10 [ 61.472087][ T1170] ? __kasan_check_write+0x18/0x20 [ 61.472105][ T1170] ? kobject_put+0x1cc/0x2a0 [ 61.472123][ T1170] device_destroy+0xb0/0x100 [ 61.472141][ T1170] ? __cfi_device_destroy+0x10/0x10 [ 61.472158][ T1170] ? __kasan_check_write+0x18/0x20 [ 61.472178][ T1170] android_device_destroy+0x118/0x180 [ 61.472205][ T1170] gadgets_drop+0x1d/0x30 [ 61.472223][ T1170] ? __cfi_gadgets_drop+0x10/0x10 [ 61.472242][ T1170] configfs_rmdir+0x8b7/0x9b0 [ 61.472268][ T1170] vfs_rmdir+0x3de/0x560 [ 61.472291][ T1170] do_rmdir+0x29a/0x590 [ 61.472315][ T1170] ? __cfi_do_rmdir+0x10/0x10 [ 61.472339][ T1170] ? __kasan_check_write+0x18/0x20 [ 61.472358][ T1170] __x64_sys_rmdir+0x4b/0x60 [ 61.472383][ T1170] x64_sys_call+0xaf7/0x2ee0 [ 61.472400][ T1170] do_syscall_64+0x57/0xf0 [ 61.472417][ T1170] ? clear_bhb_loop+0x50/0xa0 [ 61.472440][ T1170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.472460][ T1170] RIP: 0033:0x7f145d79e159 [ 61.472478][ T1170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.472493][ T1170] RSP: 002b:00007f145e71d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 61.472514][ T1170] RAX: ffffffffffffffda RBX: 00007f145da25fa0 RCX: 00007f145d79e159 [ 61.472529][ T1170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 61.472542][ T1170] RBP: 00007f145d83506b R08: 0000000000000000 R09: 0000000000000000 [ 61.472554][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.472566][ T1170] R13: 00007f145da26038 R14: 00007f145da25fa0 R15: 00007fff21d856d8 [ 61.472584][ T1170] [ 61.549550][ T1170] ------------[ cut here ]------------ [ 61.869562][ T1170] WARNING: CPU: 0 PID: 1170 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 61.879289][ T1170] Modules linked in: [ 61.883199][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: syz.3.250 Tainted: G W syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 61.896212][ T1170] Tainted: [W]=WARN [ 61.900072][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.910172][ T1170] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 61.916354][ T1170] Code: 48 83 3d b4 fd db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 2e 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 61.936068][ T1170] RSP: 0018:ffffc9000b84f980 EFLAGS: 00010206 [ 61.942180][ T1170] RAX: 000000007fffffff RBX: ffff8881f565e740 RCX: 000000000045e740 [ 61.950188][ T1170] RDX: ffff8881f565e740 RSI: 0000000000000001 RDI: 00000000733ca9e8 [ 61.958185][ T1170] RBP: ffffc9000b84f9e0 R08: 00000000f98ea09e R09: 00000000257cecd2 [ 61.966210][ T1170] R10: 000000000000000d R11: ffffffff8175a7c0 R12: 0000000078345e74 [ 61.974228][ T1170] R13: 0000000000000000 R14: ffffc9000b84f9f0 R15: 000000000000000d [ 61.982257][ T1170] FS: 00007f145e71d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.991228][ T1170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.997829][ T1170] CR2: 0000200000000040 CR3: 000000011906a000 CR4: 00000000003526b0 [ 62.005848][ T1170] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 62.013859][ T1170] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 62.021881][ T1170] Call Trace: [ 62.025173][ T1170] [ 62.028113][ T1170] ? do_syscall_64+0x57/0xf0 [ 62.032740][ T1170] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.038831][ T1170] kasan_save_track+0x4f/0x80 [ 62.043551][ T1170] ? kasan_save_track+0x3e/0x80 [ 62.048433][ T1170] ? kasan_save_free_info+0x44/0x50 [ 62.053671][ T1170] ? __kasan_slab_free+0x5f/0x80 [ 62.058630][ T1170] ? kfree+0x158/0x440 [ 62.062762][ T1170] ? gadget_info_attr_release+0xcb/0x130 [ 62.068421][ T1170] ? config_item_put+0x178/0x240 [ 62.073398][ T1170] ? configfs_rmdir+0x8e8/0x9b0 [ 62.078275][ T1170] ? vfs_rmdir+0x3de/0x560 [ 62.082744][ T1170] ? do_rmdir+0x29a/0x590 [ 62.087095][ T1170] ? __x64_sys_rmdir+0x4b/0x60 [ 62.091910][ T1170] ? x64_sys_call+0xaf7/0x2ee0 [ 62.096688][ T1170] ? do_syscall_64+0x57/0xf0 [ 62.101312][ T1170] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.107413][ T1170] kasan_save_free_info+0x44/0x50 [ 62.112482][ T1170] __kasan_slab_free+0x5f/0x80 [ 62.117269][ T1170] kfree+0x158/0x440 [ 62.121207][ T1170] ? gadget_info_attr_release+0xcb/0x130 [ 62.126865][ T1170] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 62.132974][ T1170] gadget_info_attr_release+0xcb/0x130 [ 62.138460][ T1170] config_item_put+0x178/0x240 [ 62.143320][ T1170] ? __cfi_gadgets_drop+0x10/0x10 [ 62.148376][ T1170] configfs_rmdir+0x8e8/0x9b0 [ 62.153106][ T1170] vfs_rmdir+0x3de/0x560 [ 62.157380][ T1170] do_rmdir+0x29a/0x590 [ 62.161583][ T1170] ? __cfi_do_rmdir+0x10/0x10 [ 62.166287][ T1170] ? __kasan_check_write+0x18/0x20 [ 62.171457][ T1170] __x64_sys_rmdir+0x4b/0x60 [ 62.176072][ T1170] x64_sys_call+0xaf7/0x2ee0 [ 62.180699][ T1170] do_syscall_64+0x57/0xf0 [ 62.185133][ T1170] ? clear_bhb_loop+0x50/0xa0 [ 62.189849][ T1170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.195762][ T1170] RIP: 0033:0x7f145d79e159 [ 62.200226][ T1170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.219991][ T1170] RSP: 002b:00007f145e71d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 62.228430][ T1170] RAX: ffffffffffffffda RBX: 00007f145da25fa0 RCX: 00007f145d79e159 [ 62.236449][ T1170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 62.244468][ T1170] RBP: 00007f145d83506b R08: 0000000000000000 R09: 0000000000000000 [ 62.252479][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.260495][ T1170] R13: 00007f145da26038 R14: 00007f145da25fa0 R15: 00007fff21d856d8 [ 62.268487][ T1170] [ 62.271543][ T1170] ---[ end trace 0000000000000000 ]--- [ 62.309486][ T1170] BUG: scheduling while atomic: syz.3.250/1170/0x00000000 [ 62.316644][ T1170] Modules linked in: [ 62.326996][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: syz.3.250 Tainted: G W syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 62.327031][ T1170] Tainted: [W]=WARN [ 62.327037][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.327049][ T1170] Call Trace: [ 62.327055][ T1170] [ 62.327062][ T1170] __dump_stack+0x21/0x30 [ 62.327094][ T1170] dump_stack_lvl+0x140/0x1c0 [ 62.327118][ T1170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.327143][ T1170] ? reweight_entity+0x908/0xac0 [ 62.327165][ T1170] dump_stack+0x19/0x20 [ 62.327188][ T1170] __schedule_bug+0x12b/0x200 [ 62.327208][ T1170] ? find_proxy_task+0x2460/0x2460 [ 62.327229][ T1170] ? update_load_avg+0x4f3/0x1980 [ 62.327253][ T1170] __schedule+0xb85/0x20b0 [ 62.327273][ T1170] ? __kasan_check_read+0x15/0x20 [ 62.327294][ T1170] ? plist_check_list+0x2a1/0x2c0 [ 62.327312][ T1170] ? __sched_text_start+0x10/0x10 [ 62.327330][ T1170] ? plist_add+0x4d4/0x570 [ 62.327347][ T1170] ? __futex_queue+0x19f/0x350 [ 62.327380][ T1170] ? __cfi___futex_queue+0x10/0x10 [ 62.327403][ T1170] schedule+0xc5/0x240 [ 62.327422][ T1170] futex_wait_queue+0xfc/0x240 [ 62.327440][ T1170] __futex_wait+0x15b/0x3d0 [ 62.327458][ T1170] ? __cfi___futex_wait+0x10/0x10 [ 62.327476][ T1170] ? __cfi_futex_wake_mark+0x10/0x10 [ 62.327494][ T1170] ? __kasan_check_read+0x15/0x20 [ 62.327512][ T1170] ? futex_wake+0x627/0x950 [ 62.327530][ T1170] futex_wait+0x128/0x7c0 [ 62.327548][ T1170] ? __cfi_futex_wait+0x10/0x10 [ 62.327568][ T1170] do_futex+0x32a/0x510 [ 62.327591][ T1170] ? __cfi_do_futex+0x10/0x10 [ 62.327613][ T1170] ? __kasan_slab_free+0x6a/0x80 [ 62.327635][ T1170] ? kmem_cache_free+0x1bd/0x4f0 [ 62.327656][ T1170] __se_sys_futex+0x13c/0x320 [ 62.327679][ T1170] ? putname+0x113/0x150 [ 62.327700][ T1170] ? __x64_sys_futex+0x110/0x110 [ 62.327726][ T1170] __x64_sys_futex+0xe9/0x110 [ 62.327749][ T1170] x64_sys_call+0x227f/0x2ee0 [ 62.327767][ T1170] do_syscall_64+0x57/0xf0 [ 62.327784][ T1170] ? clear_bhb_loop+0x50/0xa0 [ 62.327807][ T1170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.327830][ T1170] RIP: 0033:0x7f145d79e159 [ 62.327846][ T1170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.327862][ T1170] RSP: 002b:00007f145e71d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 62.327882][ T1170] RAX: ffffffffffffffda RBX: 00007f145da25fa8 RCX: 00007f145d79e159 [ 62.327897][ T1170] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f145da25fa8 [ 62.327911][ T1170] RBP: 00007f145da25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 62.327923][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.327935][ T1170] R13: 00007f145da26038 R14: 00007fff21d855f0 R15: 00007fff21d856d8 [ 62.327952][ T1170] [ 62.631353][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 62.631373][ T36] audit: type=1400 audit(2000000008.309:310): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1