last executing test programs: 23.822583212s ago: executing program 3 (id=87): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x63ed, 0x12610, 0x1, 0x15}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e33, 0x2, 0x2, 0x2c8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f36, 0x4000, 0x3, 0xa4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1cd2, 0x4000, 0x3, 0x25c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2077, 0x1, 0x1, 0x11b}}], 0x4, &(0x7f0000001400)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x303, 0x0, &(0x7f0000000400)=@buf_max_buf="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"}}, &(0x7f0000001480)) r1 = syz_ublk_setup_io_uring(0x54ec, &(0x7f00000014c0)={0x0, 0x9791, 0x80, 0x2, 0x1, 0x0, r0}, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000000, 0x11, r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz1\x00') r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r5, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x40004580, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x6003) ioctl$HIDIOCSREPORT(r6, 0x400c4808, 0x0) 21.516421384s ago: executing program 1 (id=95): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x8811) socket(0x28, 0x5, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r4, &(0x7f0000001300)=[{0x0}, {&(0x7f00000002c0)="bd", 0x1}], 0x2, 0x8, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0xfffffffffffffd44, 0xbeb598a38fc2c243) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000000b380)={{0x0, 0x0, 0xd, 0x8, 0x18000000000, 0x4, 0x551400, 0x0, 0x7, 0x101, 0x440, 0x1, 0xfffffffffffffffd, 0x9, 0x3}}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) 20.756514113s ago: executing program 3 (id=98): r0 = syz_usb_connect$hid(0x3, 0x97, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0x1, 0x17, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0x557}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81, 0x8, 0x21}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x6, 0x5, 0x10, 0x1}, 0xc0, &(0x7f0000000100)={0x5, 0xf, 0xc0, 0x3, [@generic={0x9c, 0x10, 0x4, "ed6c2ea39c90fec06ce10c37b617a7a1f6f55c85221c7afacfae157729e10f2d5882e96cb4b8e8f77cebc0e62749edec3e316985da0dcf381d1501ac9ba2dfe240c188b0f3e51aafcd622ccfafa80259bfa89abb4f14db1f418f9ab8a76b2660e9718a7eed170fee9b63caaec9236fc715773e07186c2b2cac12c3b252c8c4633eb92970ee556bbbba7d03b382ec95111ef5fb36ca790974a6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9842e6d92bf19255, 0xd7, 0x0, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6387ea362fe045034080085482c5526d"}]}, 0x2, [{0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "303fd417889eacd16f0be1c19a898275600a77dc545786748766a13ab79fdc76da9eab35cb4bb2a17276043af89d880a99c9873cbfb808607ddf9da1730b0150620f501607292eec0d949e1970d4be011cbc8950547b51186696efd2a7de6a67244379fdcd54c120d05fac6e5fae9718e401605e0c514c647aa1590a10254d420227c5524c0e07005e7c5e7a727f08fe1da5034a105005ccd63db79b0ca6f7ca0a24bc5f36298891e331e6b034c10dd9365fa2616101"}}, {0x70, &(0x7f0000000340)=@string={0x70, 0x3, "cf13434b5eefdae260b84be997dae7e6bbe048f0d87327808a0ea33cd6c881359b1785356db1251a6e2c4acd9167ceaf9856534368ba004cf4f90739e25060caad51112c64835395ba54b3632798503271c2bd2a67644aa74546e044dc10e7226995007a8d241840e9202e11c8db"}}]}) r1 = syz_usb_connect(0x0, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200100924030201010001"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="34221800", @ANYRES16=0x0], 0x0}, 0x0) 19.262750004s ago: executing program 3 (id=102): socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$eventfd(r0, &(0x7f0000000080), 0x8) 19.246953038s ago: executing program 3 (id=103): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x4000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x50040, &(0x7f0000000240)={0x11, 0x3, r2, 0x1, 0xdc}, 0x14) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0xa, 0x80000001}}, 0x30) r4 = memfd_create(&(0x7f00000003c0)='/devosd\x8cF\xe7\x03\x1f\xac\xce\x05\x00\x00\x00\xfe\xa5\xb0#r\xeb\xd4\xf1\x0fp\xc8\xf7 r\x12-\x11vp3\xb7\x95\x83Up\x9a\xb5\xc7cS\x1d\xc7\x99G\xbb\x02\x9d\x8c{f\xf9S#\xad\xc8\x98\xd0\xd2\xf7w\x13\xbf\xf7+%@\x89\xda\n%', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r5, 0x5393, &(0x7f0000000100)=0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0xcdc5}, 0x400c080) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0x2, 0x4, 0xffffffff, 0x44, "8c00000000fff800000000ffff000004001101", 0x40fff, 0xc6}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="08000000001f", 0x6}, {0x0}], 0x2}}], 0x2, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/ftrace/filter\x00', 0x20, 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6450000000033e010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010f50700014004000000", 0x58}, {&(0x7f0000000480)="ea860b3c147f467957131b68e59bf0ee0eccbd4d9e3f2a22a254580623f3ed5f6977613986186140f0919fad3f2f9868287091aba353f4840541529f7833e65c091cd4599cf47fb56f88af70f04eefd9d63ef011ad28215b01e5306de3b8645cd752537177f338bc7cd8d8103db6903f45f90dececdcfa9d21ca903ea9ac5769c2e83bc7758668b2478a", 0x8a}], 0x2) r9 = socket(0x11, 0x3, 0x0) getsockopt$packet_buf(r9, 0x107, 0x2, 0x0, &(0x7f00000002c0)) 19.168677175s ago: executing program 3 (id=104): mkdir(&(0x7f0000000980)='./file0\x00', 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x50000, 0x0, 0x0}, 0x58) 19.168081015s ago: executing program 3 (id=105): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x208000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000740)="d9870800f00fb144e866b98008000066b843d185ee66ba069b8a3f0f300f00d6660f38f65400f2660f01710abad004b8f37fef363e0fc7ac09000f01cb6c", 0x3e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x945b}]}) (rerun: 64) close_range(r7, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='nfs4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) (async) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x46) (async) mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x89901) move_mount(r8, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='cgroup2\x00', 0x882030, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000700)="d18d941ca52c562f5bb7eb9b970420b3d5fbf5f1f278bd288403338d2f", 0x1d}], 0x1, 0x7, 0x40000000) 18.349546607s ago: executing program 1 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x28020400) (async) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000002c0)=0x1e) (async) rt_tgsigqueueinfo(r0, 0x0, 0x9, &(0x7f00000000c0)={0x16, 0xc78, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x4, 0x4, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x0, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x1000, 0x4003bfff, 0x138, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) 18.233841073s ago: executing program 1 (id=112): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95c6, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 18.203858039s ago: executing program 1 (id=113): socket(0x10, 0x3, 0x0) r0 = inotify_init() r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x808) inotify_rm_watch(r1, r2) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00005aa000/0x2000)=nil, 0x2000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0xc0085508, 0x0) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a8}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) fcntl$lock(r3, 0x6, &(0x7f00000003c0)={0x2, 0x2, 0x10001, 0x1548}) syz_ublk_setup_io_uring(0x917, &(0x7f0000000000)={0x0, 0xd944, 0x4000, 0x2, 0x1e0, 0x0, r7}, &(0x7f0000000280), &(0x7f00000000c0), &(0x7f0000000140)) 17.421221773s ago: executing program 1 (id=114): mkdir(&(0x7f0000000980)='./file0\x00', 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58) 17.38734846s ago: executing program 1 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x5a) (async) r1 = getpgid(0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x45) r2 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f00000001c0)=""/99, 0x63}) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000140)={&(0x7f00000000c0)=""/101, 0x65}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x0, 0x0, 0x0, 0x569, 0x803ff, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d5, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x0, 0x0, 0x2, 0x800, 0x4, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x3, 0xc, 0x100, 0x4e0, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2004c844}, 0x800) (async) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="1ca6fae6df80a5ab139abf930a5934fc36e94bf2b5d43fe51fe76a6ff34cac50a3f7a9a7b29907d6028d38dd3f709409105074afaadc45e596674d78", 0x3c}, {0x0}, {&(0x7f0000000740)="1a9f986cc2870cd8aa28f0c05072c7e9545afff4c83e5e8d7e3029ce24ba20485bd54998fab69abc943232", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a00)="4fe5", 0x2}], 0x1}}], 0x2, 0x440c5) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1, 0x9}, 0x20) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) 16.93971435s ago: executing program 2 (id=118): syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202235e338ba81206ff77074ba56db6e21e05000000f50d7f6e36f6e334fdcb53bc7ae0f8c86fa7be29a9c6c458185eb3d1555f5bd7d17da7e819"], 0x0) 15.657886855s ago: executing program 2 (id=120): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c0000001d005f0214fffffffffffff8070000000d000000000027cd53", 0x1d) eventfd(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300090468fe0700000000000000ff3f18000000480100100000000019002b000a0001000500fe8000f97d16af0003000500000000", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 15.607860995s ago: executing program 2 (id=121): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x1800, 0x8}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x12, r7, 0x0, 0x0}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r9, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r9, 0x80000001, 0x4) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000826bd7000ffdbdf250c00000034f9018014000300fc020000000000000000000000000001060001000200000008000800800000000c0007000b000000000000000800050000000080"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 15.320977499s ago: executing program 2 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) unshare(0x60000600) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002240)=""/4112, 0x1010}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000100)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f00000010c0)=""/237, 0xed}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000080)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000, 0x2000000}) 15.076716184s ago: executing program 2 (id=123): mkdir(&(0x7f0000000980)='./file0\x00', 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x58) 15.056105548s ago: executing program 2 (id=124): syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"#'], 0x0}, 0x0) 11.35434499s ago: executing program 0 (id=128): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24084050) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000700)=@svm={0x6, 0x1, 0x1080, {0x10ffa}, {"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"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES8=r5], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000025c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x58, r7, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x35}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000014}, 0x4080) (async) write(r6, &(0x7f0000000000)='3', 0x4e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 10.053854208s ago: executing program 0 (id=129): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x218401, 0x0) recvmsg$can_raw(r0, &(0x7f0000001780)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/84, 0x54}], 0x3, &(0x7f0000001700)=""/103, 0x67}, 0x40000000) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]}) 9.940664114s ago: executing program 0 (id=130): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0x8, 0x4, 0x10, 0x45, 0xf5, 0x1, 0x2, 0x40, 0x2, 0x40, 0x2, 0xd, 0x1}, {0x1, 0x3, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x4, 0x3, 0xb, 0x66, 0x1}, {0x80000001, 0x7, 0x8, 0x80, 0x6, 0xd, 0x9, 0x4, 0xeb, 0x0, 0x8, 0x42, 0x2}], 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x8e000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) close(0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x4000, 0x14000}) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000740)) 9.841088866s ago: executing program 0 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000a52000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0x1, 0x5b, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xdc9}]}) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x13c) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) unshare(0x64000600) (async) r10 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x200c8084, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r10, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 8.983554066s ago: executing program 0 (id=132): mkdir(&(0x7f0000000980)='./file0\x00', 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) 8.904139454s ago: executing program 0 (id=133): r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10000, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0x7, 0xc}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x9, 0x4) (async, rerun: 64) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000100)={0x26, 0x0, 0x60}) (async, rerun: 64) getpeername$tipc(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000200)) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x19) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000240)={@rand_addr=0x64010100, @loopback, 0x1, "18b29886724f310d1051fd30c38fc0fc6d72e8b8132ba24502801f6b98603638", 0xce1c, 0x1ff, 0x7ff, 0xf}, 0x3c) (async) fchmod(r0, 0x171) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000002c0)='net/sockstat\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001800)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wg1\x00', 0x0}) (async) getsockopt$inet6_mreq(r2, 0x29, 0xa54697d9f6640898, &(0x7f0000001cc0)={@initdev, 0x0}, &(0x7f0000001d00)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'erspan0\x00', 0x0, 0x8000, 0x80, 0xb, 0x1, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0xf, 0x24, [@multicast1, @loopback, @multicast2]}, @end, @ssrr={0x89, 0xb, 0x95, [@local, @broadcast]}, @rr={0x7, 0x7, 0x8a, [@broadcast]}, @rr={0x7, 0xb, 0x13, [@loopback, @dev={0xac, 0x14, 0x14, 0x11}]}, @lsrr={0x83, 0xf, 0xf6, [@multicast2, @loopback, @broadcast]}, @noop]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002180)={'wg0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xda, 0x6, 0x20, @loopback, @private0, 0x40, 0x28, 0x7, 0x8}}) getpeername$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002600)=0x14) sendmmsg$inet(r2, &(0x7f0000002900)=[{{&(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="a270a41735761d5d5ff8b81c36b1a4253cc0c1515e8245a27d79cad79827765a041e89c2355fe5bb935b6d3f2f680e0769d71f2851647635eee224d4ff4a74cc5538715947c51e25fcbdce6f4083828acb474f93572881a4734e1d0dfd41a2793b478fa0150a908914fb41aec3355fab38e310689666c35a9e41a7088f9e5b77cfd23cc5ed045ae22dfb280d7b92c9e1cf434287ee1f704d0c870d3e5aa47675c1513961a9d994cb1115077ddc288088bbac2b6e8e24be3798189f3b4b44b72e68a0f289f5f66e28501c232d8f3c93388222019e36d0965a023beda24c8a56a50eb165f8c1b8c3a579f901a45a81d9401336c2c8571781a7", 0xf8}, {&(0x7f0000001440)="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", 0xff}, {&(0x7f0000001540)="5bc3219c93d98758c875efa51277d1144c9bbe964827d52baf15f2128b4b290449d5dd3782295ba1a79cd44e0763e6d6bc9d8176e1b27a721e4d92d9bf923020a2aef2825f906d9ed5", 0x49}, {&(0x7f00000015c0)="df9f99ddef8ec3139a894fc76ce89af45fb3d30ef7b8bbbd3dd7aa59fc5139f9612f21041ad2e5b84ce70fc3f6d459c3fb390eeeadf022f8394fb7cb74112e495500d1ed39f3d1966ccf615235b9192074661f98b3a545263c7bd399d45da6df3fadaee3a41014583a20958e1140", 0x6e}, {&(0x7f0000001640)="908ce0ff64545bbdac60cd0bf3fcbe83aa28da0385e7057595d39e34128187bd5e6bfa55a8eb2e2d4ae400db6020fe27555d6bec5daf241f1a59b21eba6e284b1c92be7637f02eb83c2bfa63", 0x4c}], 0x6}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001740)="c9e47ecec80267ac17000e07444ec216cc7a035f88d11ccb9a", 0x19}, {&(0x7f0000001780)="36b8db65978257003920602b38019f", 0xf}], 0x2, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xa4, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @empty, @loopback, @local]}, @noop, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x7, [{@empty}]}, @end, @lsrr={0x83, 0x1f, 0xd, [@loopback, @multicast1, @empty, @local, @rand_addr=0x64010102, @remote, @loopback]}]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x17, [@dev={0xac, 0x14, 0x14, 0x37}, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0x4c, 0x1, 0x0, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010102}]}, @ssrr={0x89, 0xb, 0xfd, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x49, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8000}, {@empty, 0x6}, {@private=0xa010100, 0x5}, {@empty}]}, @cipso={0x86, 0x38, 0x3, [{0x2, 0x6, "bcba5d3d"}, {0x0, 0x11, "548537d3454bcf889617a67cd7c462"}, {0x2, 0x10, "4d3ce4252505a334bc1aa206fe8c"}, {0x5, 0xb, "f29123a9e507cdbd6e"}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x0, [{@broadcast, 0x4}]}, @timestamp={0x44, 0x20, 0xec, 0x0, 0xc, [0x2, 0x15, 0x9, 0x1, 0xa, 0x5, 0x9]}, @end, @ssrr={0x89, 0x27, 0xb2, [@multicast2, @private=0xa010102, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @multicast1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x64, [@private=0xa010100, @empty, @loopback]}, @lsrr={0x83, 0x3, 0xdb}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@generic={0x94, 0xf, "ed88fc028b99da1522a9913899"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x0, [{@multicast1, 0x8}, {@broadcast, 0xfa35}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @rr={0x7, 0x13, 0xf7, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}]}, @cipso={0x86, 0x18, 0x1, [{0x0, 0x6, "ee411317"}, {0x0, 0xc, "9d240f92416d92cc2587"}]}, @end, @noop, @generic={0x94, 0x4, "d1cc"}]}}}], 0x280}}, {{&(0x7f0000001b00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001b40)="b2276faa06b75a57bf903052c168c094c41d16711143affe2d912586903876a7564f283504d0e2540ea9800ba7a33176f7b98e7360fe2dbf7f16a703644a4a67c850f80ec44ce591b2bc639d451b60ec12a5663f08209535671995258cdf5d9486e00f2b109bd158302bcd3f09857b312ec4fe300005adb9e07272eebb751258ecad0e8eb2157a75d833d2cb694d9e28", 0x90}, {&(0x7f0000001c00)="9ff447cb8a09f3c66bfa0852f188d8805905a1bb60548bbb881f014d91e73316b36c15fd710e9878ef9cde24aaa84fe8afbf9be55c5956689e28635e700c3a871dcf4663b220339ef0b9fbf94019f682d9bce0244edb182357814db577df92da32ca0be6a44f2f9fae5916c07749c45112a71dda", 0x74}], 0x2, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0x2, [{0x0, 0x7, "9e4cbe79e9"}, {0x2, 0x4, ']v'}, {0x5, 0xe, "80d520454aab6b9e5383ad7d"}, {0x5, 0xe, "d28207df4c23ef9824f71b81"}, {0x0, 0xe, "a971003f8a3b199431388d5e"}, {0x0, 0xb, "1c81bc5f5432e0d2e5"}, {0x0, 0x4, "a3ef"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x128}}, {{&(0x7f0000001e80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001ec0)="f44653398882729f91f29f4410c15e4149d59d0124cf7639bff963284a06fab651a954eba69e4282751232b64715c9baef6f2ea99323616e8ba5ddc2842728921e057f72cff14e0e71c405875cfe28d34fb76d5d22d50ec8d0e3d519fa998d532525a0c869589199800ad309639d2b1ecf3a37664bc305", 0x77}, {&(0x7f0000001f40)="8c4c8df991c56027fd541c0c9c1495a09f85b20889fe2efee5e99428fe9ab00025899cc0fd1d0bd68d0a9811e74d7f02b16ad0", 0x33}, {&(0x7f0000001f80)="fbd9fca5eb4e9096f2444f528daf837d9ae651b26a", 0x15}, {&(0x7f0000001fc0)="b89a7e966310f3bb6708da3428597d1e1e10f961565e01b82e2f27229f5d5276074c8c524164798ade2acf9dd13fb4fe9957142972313e079faad9440cd19b63e9755d6cf956789bcfe1f362c83b97ec156a267110790ffd6af83812a1181642c3c9ed2a94440e4ca7da81d545ac40fee2c99ded3f6616174bd7a3455cff385fe0993d56b221054c3cc65568218f8c346bcb1b6d26846187445cf1f47bf11b717af117730ab39487933f1c22a12538b6e75c23f660e5eae095ae", 0xba}], 0x4, &(0x7f00000021c0)=[@ip_retopts={{0xac, 0x0, 0x7, {[@generic={0x83, 0x5, "513caa"}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0x7, [{@remote, 0x3f6}]}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4}, {@empty, 0xffffff80}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010102, 0xff}]}, @cipso={0x86, 0x67, 0x3, [{0x6, 0xa, "27225627c63ddd28"}, {0x6, 0xe, "fd375be0185d85ddeaa36bda"}, {0x2, 0x6, "a1f5c698"}, {0x0, 0x12, "6a56b8250bfa889300c8f62913223f57"}, {0x2, 0xd, "4482eafcb580e4c5c4c08e"}, {0x6, 0x11, "ed67e83ffdc5a6cbd4922c92b374db"}, {0x2, 0x4, 'Z;'}, {0x6, 0xf, "932f1d270b0f2b2f84c6ab5ce1"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x108}}, {{&(0x7f0000002300)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000002340)="c1003f22e1111fe6062375799d5920ea5ba649f6eb97f9f24941d325293e4b6ddc0bd152efa36f87befc6870f7e5d3743c05d7c04577761944a7479d2fd3d668da86f2c819827f44874e7d20a53f8130a395f3ff2edb34eea45908aea5885210c1b3bd706e01e28a78670852d12242ebb2f309b35f6e5a65f4cf598c0a586fb6f5ac243d4accea3e665630b19a66ab756ccac59c6933959d93b53db92932162fffbd93fbba5f1371072784568bc610611b53c93cff9a3ca47a7187a675", 0xbd}, {&(0x7f0000002400)="4fd039fb2f993c428d185496ee7c5883a093a1dfe0f534f7f839de01405270a1721583f8df62a745486c87bb1411ae74ef743d4cca00c8eb2e2fbcf9e81049292e64549e7d650401952ffe1c5cc6499f9fb3fcbb8a94cfd35d611b6c2c726d480db2cd0f34c9bf8f3fe07a9105e13b83c9bd242fd7cc8e13f29919712f4c137338defb", 0x83}], 0x2, &(0x7f0000002640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x72e1}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x3, [{0x7, 0x11, "f4cea7545ad9c9ee01753f6b8c79b1"}, {0x7, 0xe, "ba1f8c3154c10bb9030298d3"}]}, @timestamp_prespec={0x44, 0x2c, 0xcd, 0x3, 0x1, [{@loopback, 0x2}, {@multicast2, 0x6}, {@local, 0x1}, {@rand_addr=0x64010100, 0x5}, {@local, 0xfffffffd}]}, @ssrr={0x89, 0xb, 0xfe, [@dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0x89, [@private=0xa010102]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf3}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x35, 0x1, [{0x5, 0x11, "c8662d434dfbb3f7f097e8c77fcccd"}, {0x5, 0x4, "a0f1"}, {0x1, 0xd, "ae490bbaa1189916945350"}, {0x1, 0x2}, {0x0, 0x6, "ac5c3da9"}, {0x2, 0x5, "0b2d88"}]}, @timestamp_addr={0x44, 0x2c, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}, {@broadcast, 0x2}, {@loopback, 0x7}, {@multicast2, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}]}]}}}, @ip_retopts={{0x118, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xa1, 0x1, 0xc, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@multicast1, 0x4}, {@multicast2, 0x3}, {@empty, 0x9}, {@loopback, 0x2}, {@local, 0xffff7fff}, {@empty, 0xffff22af}]}, @ra={0x94, 0x4}, @generic={0x86, 0x9, "ab01441ba1491a"}, @cipso={0x86, 0x1e, 0x1, [{0x5, 0x9, "8133816866046f"}, {0x0, 0x5, "8387f5"}, {0x1, 0xa, "c3aaeaf64795698b"}]}, @noop, @lsrr={0x83, 0x17, 0xc7, [@dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, @empty, @multicast1, @local]}, @timestamp={0x44, 0x18, 0xbb, 0x0, 0xc, [0x3, 0x1000, 0x3, 0x3, 0x6dff08ab]}, @timestamp_addr={0x44, 0x54, 0x45, 0x1, 0x2, [{@multicast1, 0x2}, {@rand_addr=0x64010101, 0x6}, {@loopback, 0x1b55}, {@local, 0x3}, {@rand_addr=0x64010100, 0x3}, {@loopback}, {@local, 0x4f}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @lsrr={0x83, 0x13, 0xa9, [@multicast1, @empty, @multicast1, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1}}}], 0x2a8}}], 0x5, 0x804) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000002d00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x210, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1d8, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x4}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6268}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x7}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @mcast1, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x210}, 0x1, 0x0, 0x0, 0x24008005}, 0x4080) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40402260}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r10, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r2) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000002fc0)={0xffffffffffffffff, 0x0, &(0x7f0000002f80)={&(0x7f0000002f00)={0x74, r11, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_IE={0x37, 0x2a, [@prep={0x83, 0x1f, {{}, 0x6, 0x8, @device_a, 0x6, @void, 0x100, 0x7, @broadcast, 0xad39}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) connect$inet6(r0, &(0x7f0000003000)={0xa, 0x4e24, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) (async) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000003040), &(0x7f0000003080)=0x4) 3.885369058s ago: executing program 32 (id=105): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x208000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000740)="d9870800f00fb144e866b98008000066b843d185ee66ba069b8a3f0f300f00d6660f38f65400f2660f01710abad004b8f37fef363e0fc7ac09000f01cb6c", 0x3e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x945b}]}) (rerun: 64) close_range(r7, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='nfs4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) (async) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x46) (async) mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x89901) move_mount(r8, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='cgroup2\x00', 0x882030, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000700)="d18d941ca52c562f5bb7eb9b970420b3d5fbf5f1f278bd288403338d2f", 0x1d}], 0x1, 0x7, 0x40000000) 2.641227034s ago: executing program 4 (id=134): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00fbff100003006332c5ab004c2fff00000000000000000000000000000000ff020000030000000000000000000001"], 0x7e) 2.540224696s ago: executing program 4 (id=135): r0 = socket(0x10, 0x802, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0x2, 0x7fff7ffc}]}) (rerun: 64) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a8700000000000600003693", 0x1c) 1.650021974s ago: executing program 33 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x5a) (async) r1 = getpgid(0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x45) r2 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f00000001c0)=""/99, 0x63}) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000140)={&(0x7f00000000c0)=""/101, 0x65}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x0, 0x0, 0x0, 0x569, 0x803ff, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d5, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x0, 0x0, 0x2, 0x800, 0x4, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x3, 0xc, 0x100, 0x4e0, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2004c844}, 0x800) (async) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="1ca6fae6df80a5ab139abf930a5934fc36e94bf2b5d43fe51fe76a6ff34cac50a3f7a9a7b29907d6028d38dd3f709409105074afaadc45e596674d78", 0x3c}, {0x0}, {&(0x7f0000000740)="1a9f986cc2870cd8aa28f0c05072c7e9545afff4c83e5e8d7e3029ce24ba20485bd54998fab69abc943232", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a00)="4fe5", 0x2}], 0x1}}], 0x2, 0x440c5) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1, 0x9}, 0x20) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) 1.608633303s ago: executing program 4 (id=137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.269862908s ago: executing program 4 (id=138): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f500070581020002000705020200"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x22582, 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) lseek(r1, 0x40, 0x3) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x3ff, 0x2, 0x6f, 0x0, 0x9, 0xf}) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x6d) syz_usb_connect(0x0, 0xe83, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x110, 0x7, 0x4, 0x81, 0x8, 0x8}, 0x22, &(0x7f0000000f40)={0x5, 0xf, 0x22, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xdb, 0x1, 0xab0a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x8000}]}, 0x6, [{0x55, &(0x7f0000001000)=@string={0x55, 0x3, "2bf258784f2abbb1a82a00fd2c5a8e49d6ff83cee116b13638601d0d724e09bf7466f8ef966ba6c22b7de7feaa393b8dae9b6f2e65d0ba10ce4be6630b7c0c7550de4416c070bfeee30b5e8c83cd05fc5cd7f2"}}, {0x70, &(0x7f0000000f80)=@string={0x70, 0x3, "9283720f8acc6ed9c362610166d6b5471645db5562891dda9ae87246d92375b8edf939dd4f749d2c7ce7576dd8555ccc6ee6658edf58e78804de33f06e0a6748cae61f3eeb0885bb7dbe74eb63f407fa5a1c098ffe2faf3b47a2d5c128375c32e858d182df12255d51b3dc8338a1"}}, {0x48, &(0x7f0000001080)=@string={0x48, 0x3, "bd48eb76b4294d597d4947be680f4d0b08004d46d9f93a7217210d40591698cf42607933e81215270ea371e9da59b643f9b201fae471023ec6f485fecfbf7de4d6d36e843f34"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3c4e}}, {0x55, &(0x7f0000000240)=@string={0x55, 0x3, "4ceb97c1739ceb1b188504ab823e84b097201ddf157193ec8c8a9f947af2f1f158f4e2028dff827c0f5ddfd1ec551f96b78c26b3e018c7cf99dc25cb5e316b5653e85b12ef177cee557fbd23c4efe59d9218a8"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f500070581020002000705020200"], 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x22582, 0x8) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) lseek(r1, 0x40, 0x3) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x3ff, 0x2, 0x6f, 0x0, 0x9, 0xf}) (async) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x6d) (async) syz_usb_connect(0x0, 0xe83, &(0x7f0000001240)=ANY=[@ANYBLOB="120101021cdd1e0839260300b36b010203010902710e040106c07e0904fb090e3ac50d100a2401010016000201020c2402060101010ada45090509210700b50122930909050d001000030907090506100800060a0007250104002f200725010cff040009050c104000100803072501040602000725010c56000409050910200003060b07250108fe090007250108ce040009050c030002050608da0bf79bd5aba867cc4d9a98ce4caf412e335b0fee0cf6a5e3899a9de5340fbe8218c7b05c4acfab5cdacb7f0af26da64e558d5d5d655665202c26d6c29a0c67b75063396e106da0605c60badf80e041691dca712f86eee6e6a118b25f1ac2936a069a2665bed71673d23306b8e69661c38a800899b433861fc720e30c30369b9d10db9edf9e5a9d48e60a7e7d0b80501bfa0e750fd729cf2d6239b27bf1fb47b34d46163ede263e630c1eaa92314c735276dd0f433ce04ed63e0d62bbfbea07bcffd1fd4e2098ee3502d57f5da29c06d9a3331a0d325465bc100725010409feff09050310bf03ff102c07250104040600230d4aab147d110515c2efbba13b9f8a2145271155371ed1160fff8c1df25e144beddb0905050420008603fe0905021040005c060b090507101000097f010725010c0704000725010c0001000905010310000909050725010803040009050d010002d10104200aed30745c0532934938c3d503a4073a2a64d93c426bfa58ebccd65733aab60725010c81090009050f0000020ffa040725010c080700dd096131b11e5eb463f3adf1ae12e5f8b4aafaaa7c9f805018af2e9eb62aa82efaabc62d0dad515779b30aba6c37d28a101c7e5f2d3a11a8b04b15a9629769542fdb32a62eeb2eb272a0696c6d49a1fb5f3b8e211a6516c2bc55adf29c9a819f45f93e48cddbafc0e1da39a352b48164c7b1342c326cce7f0ede6800a4c0541d282b01955b28e6de95cc7460a56e6f3802b05eee6f5523f814e98a4ed584a6365bcac9ebe4a666a94d6d8d17f80b0b367c52d107580ac34a61f2da76182d765c074ddba2a4ac49b80626ed21d76912d5a480385aa4108cb55945d6892c090502bfff038109020725010cfa0300250b79026c50a880fa8b040328cce3fc08b336179ddab3cc3ef4428bb7b35978d11578eb920905050c0004bbf200ca23ed98a561c7813d57ef2ec1ff71e27a31f3f762994c39c8f3a8ec1b662f0cbffa2cb3a1f08857390468359d7e6c00f35509ea0f82d7503b677f8f1aa35c3e164ea22c6f973de46af19599d64f893264ee0195063d0753be7dc364e63ff27d62c4475bd15b6ea975dfef37709c5317e80f8b1fbd82c52575226c99367fe83e998eb3f0550f3fa75e171384ab305373628b876b15942d95a459b6a6d389fe75a3982fb01a0e0f35f1a7eb550807777aaef22b60bbcac79b122aee8cabf538657871778e534412f5775a090405050db553910306240600007205240007000d240f01040000000400ff7f090424020207240a01fe0906072414020007000524010380052415d4f80e2402018101f9082dadeb23b4030a2402020101050033f80a24020100030401d1910a2402020700460d5a0c0724010606040009050e0240000105035b22ca6770c7d4d2aec103b1a7ff7a50efd46c935a1a62098a8a4f77936cfe3fed29b3b3205c6619304fc093dce00482b7d70617a41360d61177adbdb5bf6c87b8739b078a5ccbe511d7ceaaedb71acecc64e1e71769f5037941170725010405ff7f09050d00400006050609050b0300040dcb080725010c0106006f01fe01fc8c28e9855ff1024c972c69c51c2ded903c543851bfb28d632667e5cec835e6ddf0cbdcf8e974797a839508b47c2bb7fb0283e49552636793620c67312b3e6b060655483a95b05fdb1ddbd2525c3dc35631464c5830f6c35e6a08feb392baa4985ead8414ea95f5312b2e0905070c080408100407250108090b00090508004000033d06072501000d5e6d890eb8cea154360e8047b8263b1a13f343066250d835769bac74ae2d07dbbda9949375d12e12db7dee5a0cfcebbb22072fabdb5aed0eb64e532eb992ae2f2316334b38cb38bae16df917013c9b1e57b8b05d5017f5cd66ac59c1c5e36bcb43d0e6b714ebbb97020deb324c09d9f08e384d8b70feb8b9bb39c2908daf859a1fa06692be59e1f4f66a3a090506011000000103cc213099e2f56a9acf2b14a5e33458ce7e45fe2729f63e7005771028ebd5173895adb109c7b63f39ff3639b0731e2527c497e5d539ce0b53b9f6b15f5a3c6420c63ec0fb045f068cd4c11a99d0f2ec30a1534f36ed805a3c1033e990d304e34acd6a9fe50b493a87c15e614853504ff22d8ec1b32ee6080a363080f8208d3c0efe1a19c80624bb1f8afcce5aa502444a79ada9e50f2484f9a66d3ca59d290e71a136f0779e0e89688fab21c56ef303242b631eae466e912886abdd3832ab24fa7105215cef0078fc326c45ac09050b00000207030efc234c8db85115c543510eaef22d92db718f35974248095a859b070005b9ce6c8f671ca29bea3c011320a905d6316aee1dc9092e5963daf97b527b345ca8577544060efbf418ba077a48f9dd9794e7358708ba1cf6c214a58960853fd37de14d652e7383937e3d1789376bf29081ccc6eac467c758b571a3afc5ce9b911f44581bc524677c17f31bbabe214ade65822d8eeb3224e26b29a651513e28b9abb7da8a7c74b6550b18f88081d07b6f0d54bf1e30fc92263e5f593a5de938498825ba1b9298296fd744aeac8ed121b5e63bd862370a867b3b5324e21a06d6b3b3b8f6db40b870433333386cefd2082e5700cff976c6f67a56e98b41b33af10905051020000602063a115df8d6ac57474982fddf0c6771ce540adeaa5da5ddf28da053a4f73ad5b036b45bcc898e845bc8883a57d064b501eef82bad990f455b39a90905031000040905080725010c08040036017fde67e11fcb45abba0b1a6f545bd21885dea95af3bd57848ed8a153b5b0c90ab7a5f7b1a40a34d91906f33eaa43b277501077fe0905051010000606031b0228556498482f6a392ded513756abd34533ea3ed28a0c3958f409050a00200004070409050d0120000e0702d40e8464a43a99b7d1f077c0fe5b677547040371983d518ccaec091fee3b1e0e8511e3fcdd419c1234049b5cd2138abf9ad095eef14e6237737e1d2b3c13c89aa21ace87d270f558c8075e2242d1e7f02e73532b29ddc9702482c928e79c109f795aba5d5327ee023050207e4f4fead38d59f154d155eb6bc460aa0dd2a68c1e5d2e5737e4deb2bb666b22b22ed731b4689aaf6afee61462cfc70b13152a055300dba58211003c663277efc2cddd1abc719d4c097e2e95052bc8775a7a470471d5bb8b6b150ae20e865dc2a7a193dea204bad9c40725010894080009050000ff0304051b072501080d02005130cf576dd3919a86cb663db679b1500188b73e62ee779b874f40d4e924522e763ec40d96421c6983f40bfbf978c1a93a0d6da9c283ac5b0d1fd66475bf10a7a6098b9cdbdd4e9fb56de551afe3248be70904960b0244d446000905b60800040303a609050e0408000803c1072501000209000904410608e3a6d3d406240600002805240006000d240f010000030000010d070208241c0100fd050005240102fa08241c40000504000524010064052401002408241c9c0c01090009050010ff0308030a53229ffd882a6e30d6759420902d2ee3ac16596c8febdae141b36a038204d3f5600e7e5c7a53daedfde85e87a0379b688f42b8bf48ad5b8d9decad607716e5428e54fc913a2065d3326ac603310f8f4e2a96d209050506200002ff700725011c07090007250100080000090504014000c005020725010c00000009050b0040009ffd070f05db03680f1aecf76be45d5e675aec0f53c2d9bc19b33df59b3e6171301951e17cac3395e051ebf3ccb5561e104947ba7f4d7a5a019ffca29bc6bc41b0810a7c7116603f324f21ba9b4c3e79c5cd6070f5025207d6c138ea014e318a99eb525c2a2e1dd715c0f7d05eefa6a9d94d45683cd4cc19b2bed1f63ad88333b2af7c5bf85f7d2719e21cb43847816fcb32e362b101cbc75ada48c855b5f5b8e5949a7d50cfb8ab0ca7b90df7ece2b019ebf773a03c23a802a3c58e3b8569b2c92715d9cdab79f80f9b535d223b00278a26bde29a14d609a2e0423501cea11ecd30a260f39c79d751546c2b7301fa1e68f595cc97157e8ff8ca260aeb5309050704ff03040700d807095c839af7af5eebbc8b5dfb4545c49b7f7bd955eaf149ad08213b7445be915f8547c245ed2c3ba09c85cd09f693b745a19baa9ffa0d568cbbb1a6762e802d30d1e375c8f8b216541eb23edc3b2f73f772f393c696ac19cd7f407dba7c439586aebc7e21165b6eae4f0b16a0abb59d79b2ae6b87aea8bdec1521ef4f2e153a4174df8ec868b597d4fe863d94028c6fa57f331e70eb532bc5974c66174f43fc876dc6c42d8bf259a6ff9d4ffac9dd0573b269fe45e25683dce9dc28900116928ae83e5fa193066eaf54fcb9f1f67b71c9dfa6cc09c3bd090506100004040101c2300b26b05a4c70b501915eff192688899d45e40d09929d519ad7af0bf29600968eac986f702e2c7d219a5eba57f3dc4fe5fafcc75f8e921584576bbde7aff8d0b3fe397c2224a54e8512665349b9f19f4e6c48c4d9ee9fc75b76fd04c04bf5d3d88c8ddd412e0af97c18fa6a51ead2d2e25c36a8f623c4ccc7e1f7dfa6b06d2ec9f4e39ab26ae2e0cf3f77d0bf00d46f1f9c77c201a9613c4700142396f6fb0cc0289142f0a99b90463eb02a9c3975d22d7c8c82cfaac97c6cfc38a0912224a9ff09050900100000070f09050a031000030306e021c1c6cafc2f93bd3cc8104de9ea8d52e6cb2b8c2882a8063a7ad9a1a71ce092a1d616dde9d73d7095b8fc762d33bd9f5f4a301a307ef7055af474148be131bf8de282526850e081b942d9a5be9dfde4fd22dea7b537e41207c840b3448ab9a5240526fbc03b9269ec13240473f825b7b896f01ff4c96699a1d843a0c3bed91e6db2904d269baef624b47e2733db93e5949583fddd109f9294eab59570f8e861ce936313b0775056af3fff6ecbb1ebb4ec0036b2d92187cbf53f303a3278242ae84ec2817153be3a0ebe557b62a9e101c3df3eb53eb43b19818e3f66a062d90725010c04000016f6b2e8e0478e7f89d8a456ad0cf167739396329c365781f5d84baed0796418a6e090dfabfc1acb64d9246a7f51484f35eb493ceb1108d1bc6d46412f28405350f17b6aa207cb09588b8d5f3e766c4e4e4d3d46d30c922dc3e0e51bb44e30b2db4198a1af302c3097dd00ea5d9eb43f20b826da0d5c7bb93df1b1952a9509129b703b3a6f212160bace9cb1e0e90560d3ec9277a094357919d7159d09747eedc88764559857fb376f6e2436048d66ba954757f0d07f02647eb657274b5e950b7524fb417e21a988b31cee"], &(0x7f0000000100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x110, 0x7, 0x4, 0x81, 0x8, 0x8}, 0x22, &(0x7f0000000f40)={0x5, 0xf, 0x22, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xdb, 0x1, 0xab0a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x8000}]}, 0x6, [{0x55, &(0x7f0000001000)=@string={0x55, 0x3, "2bf258784f2abbb1a82a00fd2c5a8e49d6ff83cee116b13638601d0d724e09bf7466f8ef966ba6c22b7de7feaa393b8dae9b6f2e65d0ba10ce4be6630b7c0c7550de4416c070bfeee30b5e8c83cd05fc5cd7f2"}}, {0x70, &(0x7f0000000f80)=@string={0x70, 0x3, "9283720f8acc6ed9c362610166d6b5471645db5562891dda9ae87246d92375b8edf939dd4f749d2c7ce7576dd8555ccc6ee6658edf58e78804de33f06e0a6748cae61f3eeb0885bb7dbe74eb63f407fa5a1c098ffe2faf3b47a2d5c128375c32e858d182df12255d51b3dc8338a1"}}, {0x48, &(0x7f0000001080)=@string={0x48, 0x3, "bd48eb76b4294d597d4947be680f4d0b08004d46d9f93a7217210d40591698cf42607933e81215270ea371e9da59b643f9b201fae471023ec6f485fecfbf7de4d6d36e843f34"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3c4e}}, {0x55, &(0x7f0000000240)=@string={0x55, 0x3, "4ceb97c1739ceb1b188504ab823e84b097201ddf157193ec8c8a9f947af2f1f158f4e2028dff827c0f5ddfd1ec551f96b78c26b3e018c7cf99dc25cb5e316b5653e85b12ef177cee557fbd23c4efe59d9218a8"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x380a}}]}) (async) 638.651089ms ago: executing program 5 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x1, 0x8, 0xf1, 0x0, 0x27fffffffffffe, 0x5, 0x4005, 0x4000000b92, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x39979dd0be5a3d50}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x240140) fstat(r6, &(0x7f0000000300)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe6, 0x40, 0x8, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0xdddd1000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x5, 0x0, 0x9, 0xfe, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0xb, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0x54000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x8, 0xf7, 0x83}, {0x9000, 0x1ffe, 0x3, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x4000, 0x3000, 0x4, 0xb9, 0x2, 0x5, 0x7, 0x3, 0x8, 0x81, 0x3, 0x70}, {0x10000, 0x4, 0xe, 0xf5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x5000, 0x7}, 0x80000030, 0x0, 0xdddd0000, 0x402635, 0x0, 0x3500, 0xeeef0000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000380), 0x3) 353.23µs ago: executing program 5 (id=139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) sendmmsg(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40208d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 0s ago: executing program 34 (id=124): syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"#'], 0x0}, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.622603][ T36] audit: type=1400 audit(1790438822.750:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 22.441017][ T36] audit: type=1400 audit(1790438830.570:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.444239][ T286] cgroup: Unknown subsys name 'net' [ 22.463684][ T36] audit: type=1400 audit(1790438830.570:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.491138][ T36] audit: type=1400 audit(1790438830.600:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.491688][ T286] cgroup: Unknown subsys name 'devices' [ 22.617866][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.623524][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.739846][ T36] audit: type=1400 audit(1790438830.870:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.763050][ T36] audit: type=1400 audit(1790438830.870:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.787906][ T36] audit: type=1400 audit(1790438830.870:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.812035][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.820849][ T36] audit: type=1400 audit(1790438830.950:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.846318][ T36] audit: type=1400 audit(1790438830.950:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.882123][ T36] audit: type=1400 audit(1790438831.010:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.883504][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.907762][ T36] audit: type=1400 audit(1790438831.010:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.348613][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.355730][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.362846][ T294] bridge_slave_0: entered allmulticast mode [ 24.369422][ T294] bridge_slave_0: entered promiscuous mode [ 24.379344][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.386468][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.393564][ T294] bridge_slave_1: entered allmulticast mode [ 24.400089][ T294] bridge_slave_1: entered promiscuous mode [ 24.417194][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.424250][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.431413][ T293] bridge_slave_0: entered allmulticast mode [ 24.437795][ T293] bridge_slave_0: entered promiscuous mode [ 24.449653][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.456822][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.463902][ T293] bridge_slave_1: entered allmulticast mode [ 24.470313][ T293] bridge_slave_1: entered promiscuous mode [ 24.502669][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.509997][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.517116][ T295] bridge_slave_0: entered allmulticast mode [ 24.523409][ T295] bridge_slave_0: entered promiscuous mode [ 24.529803][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.537122][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.544240][ T296] bridge_slave_0: entered allmulticast mode [ 24.550616][ T296] bridge_slave_0: entered promiscuous mode [ 24.556969][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.564050][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.571801][ T295] bridge_slave_1: entered allmulticast mode [ 24.578237][ T295] bridge_slave_1: entered promiscuous mode [ 24.593440][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.600546][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.607719][ T296] bridge_slave_1: entered allmulticast mode [ 24.614018][ T296] bridge_slave_1: entered promiscuous mode [ 24.768613][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.775699][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.782998][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.790068][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.799585][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.806667][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.813963][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.821049][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.842581][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.849674][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.857027][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.864074][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.889036][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.896137][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.903418][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.910482][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.930882][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.938436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.946027][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.953243][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.961235][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.968439][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.975829][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.983015][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.992899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.999980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.017601][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.024669][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.053466][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.060589][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.068746][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.075809][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.083486][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.090583][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.098142][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.105179][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.124183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.131280][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.138966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.146027][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.189358][ T296] veth0_vlan: entered promiscuous mode [ 25.211099][ T296] veth1_macvtap: entered promiscuous mode [ 25.230726][ T294] veth0_vlan: entered promiscuous mode [ 25.251619][ T293] veth0_vlan: entered promiscuous mode [ 25.258229][ T294] veth1_macvtap: entered promiscuous mode [ 25.272621][ T295] veth0_vlan: entered promiscuous mode [ 25.288719][ T293] veth1_macvtap: entered promiscuous mode [ 25.314872][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.343106][ T295] veth1_macvtap: entered promiscuous mode [ 25.353897][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.459087][ T324] syz.3.4(324): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 25.473488][ T324] SELinux: syz.3.4 (324) set checkreqprot to 1. This is no longer supported. [ 25.484019][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.493278][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 25.621899][ T326] fido_id[326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.665433][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.677677][ T337] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 25.687684][ T337] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 25.825438][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 25.831839][ T31] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 25.840997][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.850795][ T31] usb 3-1: config 0 descriptor?? [ 26.060690][ T31] usb 3-1: string descriptor 0 read error: -71 [ 26.067090][ T31] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 26.073754][ T31] usb 3-1: Found UVC 0.00 device (2833:0201) [ 26.080818][ T31] usb 3-1: No valid video chain found. [ 26.087736][ T31] usb 3-1: USB disconnect, device number 2 [ 26.395417][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.520983][ T359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.555412][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 26.562197][ T351] netlink: 272 bytes leftover after parsing attributes in process `syz.0.12'. [ 26.687908][ T351] mmap: syz.0.12 (351) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.701547][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.718806][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 26.734002][ T10] usb 1-1: can't read configurations, error -71 [ 27.047243][ T378] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 27.061088][ T378] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 27.069575][ T378] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 27.078052][ T378] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 27.086102][ T378] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 27.093971][ T378] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 27.102975][ T378] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 27.110837][ T378] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 27.655414][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.785606][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.815453][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 27.821882][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.832129][ T31] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 27.841332][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.849450][ T31] usb 2-1: Product: syz [ 27.853630][ T31] usb 2-1: Manufacturer: syz [ 27.858268][ T31] usb 2-1: SerialNumber: syz [ 27.945402][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 27.982443][ T391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3340563249 (13362252996 ns) > initial count (4838176320 ns). Using initial count to start timer. [ 28.005448][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.014777][ T391] kvm: pic: non byte write [ 28.059541][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.067869][ T10] usb 1-1: too many configurations: 159, using maximum allowed: 8 [ 28.068311][ T395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.079759][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 28.085624][ T395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.094717][ T10] usb 1-1: can't read configurations, error -71 [ 28.107993][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.114261][ T10] usb usb1-port1: attempt power cycle [ 28.120779][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.128046][ T31] usb 2-1: unable to issue vendor read request (ret = -71) [ 28.135516][ T312] usb 4-1: device descriptor read/64, error -71 [ 28.142029][ T31] usb 2-1: unable to issue vendor read request (ret = -71) [ 28.149606][ T31] usb 2-1: unable to issue vendor read request (ret = -71) [ 28.157077][ T31] usb 2-1: unable to issue vendor read request (ret = -71) [ 28.167215][ T31] usb 2-1: USB disconnect, device number 2 [ 28.185616][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.375438][ T312] usb 4-1: device descriptor read/64, error -71 [ 28.580373][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 28.580391][ T36] audit: type=1400 audit(1790438836.710:155): avc: denied { create } for pid=401 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.586568][ T402] FAULT_INJECTION: forcing a failure. [ 28.586568][ T402] name failslab, interval 1, probability 0, space 0, times 0 [ 28.586623][ T402] CPU: 1 UID: 0 PID: 402 Comm: syz.0.28 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 28.586722][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.586802][ T402] Call Trace: [ 28.586823][ T402] [ 28.586845][ T402] __dump_stack+0x21/0x30 [ 28.586966][ T402] dump_stack_lvl+0x140/0x1c0 [ 28.587051][ T402] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.587144][ T402] dump_stack+0x19/0x20 [ 28.587227][ T402] should_fail_ex+0x3c2/0x510 [ 28.587312][ T402] should_failslab+0xac/0x100 [ 28.587394][ T402] kmem_cache_alloc_noprof+0x42/0x410 [ 28.587459][ T402] ? __kasan_check_write+0x18/0x20 [ 28.587523][ T402] ? skb_clone+0x21d/0x470 [ 28.587610][ T402] ? __cfi_mutex_lock+0x10/0x10 [ 28.587693][ T402] skb_clone+0x21d/0x470 [ 28.587777][ T402] pfkey_sendmsg+0x4e3/0x1190 [ 28.587853][ T402] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 28.587923][ T402] ? selinux_socket_sendmsg+0x281/0x380 [ 28.588019][ T402] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 28.588097][ T402] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 28.588198][ T402] ? security_socket_sendmsg+0x3d/0x100 [ 28.588303][ T402] ____sys_sendmsg+0x99e/0xa00 [ 28.588397][ T402] ? __import_iovec+0x5b9/0x7d0 [ 28.588459][ T402] ? __sys_sendmsg_sock+0x50/0x50 [ 28.588555][ T402] ? import_iovec+0x80/0xb0 [ 28.588610][ T402] ___sys_sendmsg+0x2a6/0x370 [ 28.588702][ T402] ? __sys_sendmsg+0x260/0x260 [ 28.588801][ T402] ? __fget_files+0x2bc/0x330 [ 28.588877][ T402] __x64_sys_sendmsg+0x1be/0x2a0 [ 28.588962][ T402] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 28.589057][ T402] ? __kasan_check_write+0x18/0x20 [ 28.589120][ T402] ? fpregs_restore_userregs+0x11c/0x260 [ 28.589209][ T402] ? switch_fpu_return+0x12/0x20 [ 28.589294][ T402] x64_sys_call+0x2a4c/0x2ee0 [ 28.589356][ T402] do_syscall_64+0x57/0xf0 [ 28.589416][ T402] ? clear_bhb_loop+0x50/0xa0 [ 28.589517][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.589615][ T402] RIP: 0033:0x7fc4a319e159 [ 28.589669][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.589724][ T402] RSP: 002b:00007fc4a4085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.589792][ T402] RAX: ffffffffffffffda RBX: 00007fc4a3425fa0 RCX: 00007fc4a319e159 [ 28.589846][ T402] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 28.589887][ T402] RBP: 00007fc4a323506b R08: 0000000000000000 R09: 0000000000000000 [ 28.589928][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.589963][ T402] R13: 00007fc4a3426038 R14: 00007fc4a3425fa0 R15: 00007ffe6ff17e18 [ 28.590015][ T402] [ 28.625597][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.630105][ T36] audit: type=1400 audit(1790438836.720:156): avc: denied { write } for pid=401 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.805668][ T312] usb 4-1: device descriptor read/64, error -71 [ 28.924498][ T36] audit: type=1400 audit(1790438837.050:157): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.955038][ T36] audit: type=1400 audit(1790438837.080:158): avc: denied { read write } for pid=412 comm="syz.0.30" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.979033][ T36] audit: type=1400 audit(1790438837.080:159): avc: denied { open } for pid=412 comm="syz.0.30" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.009350][ T36] audit: type=1400 audit(1790438837.080:160): avc: denied { create } for pid=412 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 29.030838][ T415] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 29.065675][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.165515][ T312] usb 4-1: device descriptor read/64, error -71 [ 29.226846][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.237935][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.247771][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.260807][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.269989][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.278830][ T9] usb 2-1: config 0 descriptor?? [ 29.285613][ T312] usb usb4-port1: attempt power cycle [ 29.335437][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.496537][ T64] usb 1-1: config 0 has no interfaces? [ 29.502071][ T64] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 29.511285][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.520194][ T64] usb 1-1: config 0 descriptor?? [ 29.625631][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.646749][ T312] usb 4-1: device descriptor read/8, error -71 [ 29.685591][ T410] x_tables: duplicate entry at hook 1 [ 29.692790][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 29.699551][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.708577][ T9] usb 2-1: USB disconnect, device number 3 [ 29.727733][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.736343][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.744575][ T36] audit: type=1400 audit(1790438837.870:161): avc: denied { nlmsg_write } for pid=416 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.751097][ T419] usb 1-1: USB disconnect, device number 5 [ 29.786658][ T312] usb 4-1: device descriptor read/8, error -71 [ 30.025740][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.046697][ T312] usb 4-1: device descriptor read/8, error -71 [ 30.176851][ T312] usb 4-1: device descriptor read/8, error -71 [ 30.209663][ T422] FAULT_INJECTION: forcing a failure. [ 30.209663][ T422] name failslab, interval 1, probability 0, space 0, times 0 [ 30.222370][ T422] CPU: 1 UID: 0 PID: 422 Comm: syz.1.33 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 30.222414][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 30.222425][ T422] Call Trace: [ 30.222431][ T422] [ 30.222437][ T422] __dump_stack+0x21/0x30 [ 30.222465][ T422] dump_stack_lvl+0x140/0x1c0 [ 30.222489][ T422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.222512][ T422] ? ref_tracker_alloc+0x356/0x5b0 [ 30.222535][ T422] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 30.222586][ T422] ? dst_alloc+0x163/0x240 [ 30.222601][ T422] dump_stack+0x19/0x20 [ 30.222623][ T422] should_fail_ex+0x3c2/0x510 [ 30.222644][ T422] should_failslab+0xac/0x100 [ 30.222670][ T422] __kmalloc_cache_noprof+0x41/0x470 [ 30.222689][ T422] ? dst_cow_metrics_generic+0x65/0x2a0 [ 30.222704][ T422] ? dst_init+0x329/0x430 [ 30.222729][ T422] dst_cow_metrics_generic+0x65/0x2a0 [ 30.222745][ T422] icmp6_dst_alloc+0x310/0x4f0 [ 30.222768][ T422] ndisc_send_skb+0x2a6/0xca0 [ 30.222792][ T422] ? __kasan_check_write+0x18/0x20 [ 30.222810][ T422] ? __cfi_ndisc_send_skb+0x10/0x10 [ 30.222834][ T422] ? ndisc_ns_create+0x6b6/0x8d0 [ 30.222861][ T422] ndisc_solicit+0x36a/0x5f0 [ 30.222875][ T422] ? __asan_memcpy+0x5a/0x80 [ 30.222892][ T422] ? __cfi_ndisc_solicit+0x10/0x10 [ 30.222906][ T422] ? __kasan_check_write+0x18/0x20 [ 30.222922][ T422] ? __skb_clone+0x453/0x6d0 [ 30.222945][ T422] ? skb_clone+0x255/0x470 [ 30.222966][ T422] ? __cfi_ndisc_solicit+0x10/0x10 [ 30.222980][ T422] __neigh_event_send+0xcd9/0x1200 [ 30.222998][ T422] ? ___neigh_create+0x1dda/0x2100 [ 30.223016][ T422] neigh_resolve_output+0x1b4/0x810 [ 30.223035][ T422] ? __neigh_create+0x72/0xb0 [ 30.223052][ T422] ip6_finish_output2+0x16fd/0x1990 [ 30.223077][ T422] ? __cfi_ip6_finish_output2+0x10/0x10 [ 30.223097][ T422] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 30.223125][ T422] ip6_finish_output+0x535/0xaf0 [ 30.223143][ T422] ip6_output+0x1fe/0x420 [ 30.223161][ T422] ? __cfi_ip6_output+0x10/0x10 [ 30.223178][ T422] ? __cfi_ip6_finish_output+0x10/0x10 [ 30.223195][ T422] ? __cfi_ip6t_do_table+0x10/0x10 [ 30.223218][ T422] ? __cfi_ip6_output+0x10/0x10 [ 30.223235][ T422] ip6_local_out+0x213/0x440 [ 30.223255][ T422] ? __cfi_ip6_local_out+0x10/0x10 [ 30.223274][ T422] ? __cfi_dst_output+0x10/0x10 [ 30.223300][ T422] ? update_entity_lag+0x334/0x370 [ 30.223320][ T422] ip6_send_skb+0xba/0x1d0 [ 30.223339][ T422] udp_v6_send_skb+0xbdf/0x17a0 [ 30.223377][ T422] udpv6_sendmsg+0x1d6e/0x2800 [ 30.223394][ T422] ? avc_has_perm_noaudit+0x26b/0x360 [ 30.223416][ T422] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 30.223440][ T422] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 30.223456][ T422] ? avc_has_perm+0x155/0x240 [ 30.223480][ T422] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 30.223503][ T422] ? finish_task_switch+0x1d9/0x770 [ 30.223525][ T422] ? __schedule+0x149e/0x20b0 [ 30.223543][ T422] ? inet_send_prepare+0x64/0x4e0 [ 30.223565][ T422] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 30.223582][ T422] inet6_sendmsg+0xef/0x120 [ 30.223623][ T422] ____sys_sendmsg+0x5d8/0xa00 [ 30.223657][ T422] ? __import_iovec+0x3fa/0x7d0 [ 30.223684][ T422] ? __sys_sendmsg_sock+0x50/0x50 [ 30.223710][ T422] ? import_iovec+0x80/0xb0 [ 30.223724][ T422] ___sys_sendmsg+0x2a6/0x370 [ 30.223749][ T422] ? __sys_sendmsg+0x260/0x260 [ 30.223772][ T422] ? __futex_wait+0x330/0x3d0 [ 30.223788][ T422] ? __cfi___futex_wait+0x10/0x10 [ 30.223805][ T422] ? futex_wake+0x666/0x950 [ 30.223821][ T422] ? __fget_files+0x2bc/0x330 [ 30.223843][ T422] __sys_sendmmsg+0x292/0x490 [ 30.223868][ T422] ? __cfi___sys_sendmmsg+0x10/0x10 [ 30.223896][ T422] ? __kasan_check_write+0x18/0x20 [ 30.223913][ T422] ? fpregs_restore_userregs+0x11c/0x260 [ 30.223934][ T422] __x64_sys_sendmmsg+0xa4/0xc0 [ 30.223958][ T422] x64_sys_call+0xfec/0x2ee0 [ 30.223973][ T422] do_syscall_64+0x57/0xf0 [ 30.223989][ T422] ? clear_bhb_loop+0x50/0xa0 [ 30.224010][ T422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.224030][ T422] RIP: 0033:0x7f226139e159 [ 30.224045][ T422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.224061][ T422] RSP: 002b:00007f226218f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 30.224079][ T422] RAX: ffffffffffffffda RBX: 00007f2261625fa0 RCX: 00007f226139e159 [ 30.224092][ T422] RDX: 0000000000000001 RSI: 0000200000001980 RDI: 0000000000000004 [ 30.224102][ T422] RBP: 00007f226143506b R08: 0000000000000000 R09: 0000000000000000 [ 30.224113][ T422] R10: 0000000020002040 R11: 0000000000000246 R12: 0000000000000000 [ 30.224123][ T422] R13: 00007f2261626038 R14: 00007f2261625fa0 R15: 00007fff1a47b378 [ 30.224137][ T422] [ 30.703141][ T312] usb usb4-port1: unable to enumerate USB device [ 30.732596][ T36] audit: type=1400 audit(1790438838.830:162): avc: denied { create } for pid=424 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 30.760443][ T36] audit: type=1400 audit(1790438838.840:163): avc: denied { setopt } for pid=424 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 30.816080][ T36] audit: type=1400 audit(1790438838.950:164): avc: denied { read write } for pid=437 comm="syz.1.39" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.841760][ T439] process 'syz.1.39' launched '/dev/fd/5' with NULL argv: empty string added [ 30.975424][ T419] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.035420][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.115415][ T312] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.125403][ T419] usb 1-1: Using ep0 maxpacket: 16 [ 31.132125][ T419] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.140675][ T419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 31.150585][ T419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.162323][ T419] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 31.171572][ T419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.179689][ T419] usb 1-1: Product: syz [ 31.183965][ T419] usb 1-1: Manufacturer: syz [ 31.188607][ T419] usb 1-1: SerialNumber: syz [ 31.194490][ T429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.201800][ T429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.205488][ T420] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.209325][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 31.223187][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.234757][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.244712][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.257748][ T64] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.266944][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.267173][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.278931][ T64] usb 3-1: config 0 descriptor?? [ 31.291323][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.302659][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.316083][ T312] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.325311][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.334335][ T312] usb 2-1: config 0 descriptor?? [ 31.366552][ T420] usb 4-1: config 0 has no interfaces? [ 31.372121][ T420] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 31.381266][ T420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.390376][ T420] usb 4-1: config 0 descriptor?? [ 31.431165][ T419] usb 1-1: MIDIStreaming interface descriptor not found [ 31.443436][ T419] usb 1-1: USB disconnect, device number 6 [ 31.457748][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.494490][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.501978][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.509261][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.516588][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.523830][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.532583][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.539953][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.544054][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.547947][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.562338][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.563040][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.577987][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.585236][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.592555][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.599828][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.607111][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.614368][ T64] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 31.627092][ T64] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input4 [ 31.643303][ T64] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 31.694605][ T64] usb 3-1: USB disconnect, device number 3 [ 31.779385][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.788061][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.934734][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 31.940857][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.951019][ T312] usb 2-1: USB disconnect, device number 4 [ 32.020508][ T420] rust_binder: 452: undelivered TRANSACTION_COMPLETE [ 32.027349][ T420] rust_binder: 452: undelivered TRANSACTION_COMPLETE [ 32.035765][ T64] rust_binder: 452: undelivered transaction 2, process died [ 32.052056][ T456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.223492][ T460] ./dev/sda1: Can't lookup blockdev [ 32.294602][ T460] overlayfs: failed to resolve './bus': -2 [ 33.445418][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.595402][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.616731][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.626494][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.636198][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.650522][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 33.659661][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.667835][ T9] usb 3-1: Product: syz [ 33.672019][ T9] usb 3-1: Manufacturer: syz [ 33.676762][ T9] usb 3-1: SerialNumber: syz [ 33.683172][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 33.689172][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 33.755397][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 33.763324][ T64] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 33.772557][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.780704][ T64] usb 2-1: Product: syz [ 33.784893][ T64] usb 2-1: Manufacturer: syz [ 33.790318][ T64] usb 2-1: SerialNumber: syz [ 33.797250][ T64] r8152-cfgselector 2-1: Unknown version 0x0000 [ 33.803601][ T64] r8152-cfgselector 2-1: config 0 descriptor?? [ 33.810877][ T64] hub 2-1:0.0: bad descriptor, ignoring hub [ 33.816986][ T64] hub 2-1:0.0: probe with driver hub failed with error -5 [ 33.889159][ T64] usb 4-1: USB disconnect, device number 6 [ 33.904279][ T479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.913779][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 33.913796][ T36] audit: type=1400 audit(1790438842.040:204): avc: denied { create } for pid=487 comm="syz.3.52" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.928133][ T479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.951220][ T479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.960539][ T479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.969275][ T36] audit: type=1400 audit(1790438842.100:205): avc: denied { write } for pid=478 comm="syz.2.49" name="raw6" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.992394][ T36] audit: type=1400 audit(1790438842.120:206): avc: denied { read } for pid=487 comm="syz.3.52" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.997375][ T488] capability: warning: `syz.3.52' uses 32-bit capabilities (legacy support in use) [ 34.014816][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 34.034813][ T36] audit: type=1400 audit(1790438842.120:207): avc: denied { open } for pid=487 comm="syz.3.52" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.057748][ T36] audit: type=1400 audit(1790438842.130:208): avc: denied { ioctl } for pid=487 comm="syz.3.52" path="/5/file0" dev="tmpfs" ino=44 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.081942][ T9] usb 3-1: USB disconnect, device number 4 [ 34.088220][ T36] audit: type=1400 audit(1790438842.170:209): avc: denied { name_bind } for pid=487 comm="syz.3.52" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.109965][ T36] audit: type=1400 audit(1790438842.170:210): avc: denied { node_bind } for pid=487 comm="syz.3.52" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.132528][ T36] audit: type=1400 audit(1790438842.210:211): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.145776][ T420] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 34.158460][ T9] usblp0: removed [ 34.166464][ T36] audit: type=1400 audit(1790438842.260:212): avc: denied { append } for pid=490 comm="syz.3.53" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.221903][ T491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.515101][ T36] audit: type=1400 audit(1790438842.640:213): avc: denied { load_policy } for pid=498 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.515137][ T499] SELinux: policydb version 7959569 does not match my version range 15-33 [ 34.543718][ T499] SELinux: failed to load policy [ 34.615411][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 34.776460][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.787578][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.797582][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.810663][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.819924][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.845628][ T9] usb 1-1: config 0 descriptor?? [ 34.855386][ T420] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.875418][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.005399][ T420] usb 2-1: Using ep0 maxpacket: 32 [ 35.011774][ T420] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.021945][ T420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 35.032850][ T420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 35.043699][ T420] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32 [ 35.053700][ T420] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 35.067322][ T311] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.078292][ T311] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.091210][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 35.097907][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 35.107091][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.115354][ T420] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 35.124417][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.132882][ T420] usb 2-1: Product: syz [ 35.135494][ T64] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.137779][ T311] usb 3-1: config 0 descriptor?? [ 35.149552][ T420] usb 2-1: Manufacturer: syz [ 35.154189][ T420] usb 2-1: SerialNumber: syz [ 35.162347][ T502] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 35.254131][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 35.261093][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.270149][ T9] usb 1-1: USB disconnect, device number 7 [ 35.296713][ T64] usb 4-1: config 128 has no interfaces? [ 35.302435][ T64] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 35.311928][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.379338][ T420] usb 2-1: USB disconnect, device number 6 [ 35.389323][ T480] udevd[480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.523521][ T9] usb 4-1: USB disconnect, device number 7 [ 35.561337][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.568604][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.575840][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.583230][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.590603][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.597817][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.604971][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.612165][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.620103][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.627302][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.634452][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.641631][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.648802][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.656042][ T311] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 35.663190][ T311] logitech 0003:046D:C286.0003: unbalanced collection at end of report description [ 35.672736][ T311] logitech 0003:046D:C286.0003: parse failed [ 35.678770][ T311] logitech 0003:046D:C286.0003: probe with driver logitech failed with error -22 [ 35.829586][ T9] usb 3-1: USB disconnect, device number 5 [ 36.039380][ T532] overlay: filesystem on ./bus not supported as upperdir [ 36.448199][ T420] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.485398][ T419] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.626849][ T420] usb 4-1: Using ep0 maxpacket: 32 [ 36.635878][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.654257][ T420] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.662884][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.673819][ T420] usb 4-1: config 178 has an invalid interface number: 183 but max is 0 [ 36.673894][ T420] usb 4-1: config 178 has no interface number 0 [ 36.673925][ T420] usb 4-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 36.696620][ T420] usb 4-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 36.715376][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.755861][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.756258][ T420] usb 4-1: Product: syz [ 36.775373][ T419] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.790247][ T420] usb 4-1: Manufacturer: syz [ 36.807407][ T420] usb 4-1: SerialNumber: syz [ 36.820315][ T419] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.832043][ T542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.865376][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.874285][ T419] usb 2-1: config 0 descriptor?? [ 37.123218][ T420] usb 4-1: USB disconnect, device number 8 [ 37.151406][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.491687][ T419] usbhid 2-1:0.0: can't add hid device: -71 [ 37.497735][ T419] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.507193][ T419] usb 2-1: USB disconnect, device number 7 [ 38.091407][ T576] kvm: emulating exchange as write [ 38.110651][ T574] usb usb9: usbfs: process 574 (syz.0.77) did not claim interface 30 before use [ 38.665407][ T312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.825387][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 38.834138][ T312] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.855367][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.866234][ T312] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.875270][ T312] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.896900][ T312] usb 2-1: New USB device found, idVendor=200c, idProduct=0000, bcdDevice= 0.40 [ 38.906256][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.914314][ T312] usb 2-1: Product: syz [ 38.916002][ T36] kauditd_printk_skb: 19165 callbacks suppressed [ 38.916043][ T36] audit: type=1326 audit(1790438847.050:19380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f408795e98e code=0x50000 [ 38.925401][ T312] usb 2-1: Manufacturer: syz [ 38.954619][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.957393][ T312] usb 2-1: SerialNumber: syz [ 38.963336][ T36] audit: type=1326 audit(1790438847.030:19295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 38.992769][ T36] audit: type=1326 audit(1790438847.050:19381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.017702][ T36] audit: type=1326 audit(1790438847.050:19382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.042854][ T36] audit: type=1326 audit(1790438847.050:19383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.046020][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 39.068283][ T36] audit: type=1326 audit(1790438847.050:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.101854][ T36] audit: type=1326 audit(1790438847.050:19385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.126802][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 39.132085][ T36] audit: type=1326 audit(1790438847.050:19386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.157271][ T36] audit: type=1326 audit(1790438847.050:19387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.182245][ T36] audit: type=1326 audit(1790438847.050:19388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.2.74" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408799e159 code=0x50000 [ 39.210809][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.223433][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.225559][ T31] usb 4-1: device descriptor read/64, error -71 [ 39.246116][ T64] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 39.258520][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.272132][ T312] usb 2-1: unit 3 not found! [ 39.276567][ T64] usb 1-1: config 0 descriptor?? [ 39.298859][ T312] usb 2-1: USB disconnect, device number 8 [ 39.321663][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.495397][ T31] usb 4-1: device descriptor read/64, error -71 [ 39.695175][ T64] apple 0003:05AC:024B.0004: fixing up MacBook JIS keyboard report descriptor [ 39.704400][ T64] apple 0003:05AC:024B.0004: unknown global tag 0xe [ 39.711066][ T64] apple 0003:05AC:024B.0004: item 0 1 1 14 parsing failed [ 39.718460][ T64] apple 0003:05AC:024B.0004: parse failed [ 39.724226][ T64] apple 0003:05AC:024B.0004: probe with driver apple failed with error -22 [ 39.736238][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 39.795447][ T311] usb 3-1: device descriptor read/64, error -71 [ 39.866328][ T31] usb 4-1: device descriptor read/64, error -71 [ 39.896516][ T64] usb 1-1: USB disconnect, device number 8 [ 40.045395][ T311] usb 3-1: device descriptor read/64, error -71 [ 40.105470][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.215507][ T31] usb usb4-port1: attempt power cycle [ 40.285432][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.416652][ T311] usb 3-1: device descriptor read/64, error -71 [ 40.555435][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 40.576578][ T31] usb 4-1: device descriptor read/8, error -71 [ 40.655415][ T311] usb 3-1: device descriptor read/64, error -71 [ 40.665414][ T64] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.706457][ T31] usb 4-1: device descriptor read/8, error -71 [ 40.765494][ T311] usb usb3-port1: attempt power cycle [ 40.818127][ T64] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 40.827304][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.835287][ T64] usb 1-1: Product: syz [ 40.839572][ T64] usb 1-1: Manufacturer: syz [ 40.844202][ T64] usb 1-1: SerialNumber: syz [ 40.945417][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 40.973846][ T31] usb 4-1: device descriptor read/8, error -71 [ 40.982037][ T638] netlink: 5892 bytes leftover after parsing attributes in process `syz.1.94'. [ 40.991862][ T638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 41.105454][ T311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.113962][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.126504][ T311] usb 3-1: device descriptor read/8, error -71 [ 41.225471][ T31] usb usb4-port1: unable to enumerate USB device [ 41.256498][ T311] usb 3-1: device descriptor read/8, error -71 [ 41.495394][ T311] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.516470][ T311] usb 3-1: device descriptor read/8, error -71 [ 41.587864][ T64] usb 1-1: USB disconnect, device number 9 [ 41.600471][ T31] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 41.603030][ T647] netlink: 'syz.0.96': attribute type 32 has an invalid length. [ 41.618677][ T31] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.644742][ T648] fido_id[648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.659818][ T650] netlink: 'syz.0.97': attribute type 3 has an invalid length. [ 41.668312][ T311] usb 3-1: device descriptor read/8, error -71 [ 41.787383][ T311] usb usb3-port1: unable to enumerate USB device [ 42.155429][ T419] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.306603][ T419] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 42.317794][ T419] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.330669][ T419] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.337352][ T419] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 42.346469][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.355185][ T419] usb 4-1: config 0 descriptor?? [ 42.360518][ T654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.771691][ T654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.780288][ T654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.789394][ T419] usbhid 4-1:0.0: can't add hid device: -71 [ 42.796115][ T419] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.804841][ T419] usb 4-1: USB disconnect, device number 13 [ 42.810916][ T354] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.875436][ T64] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 42.965413][ T354] usb 1-1: Using ep0 maxpacket: 8 [ 42.971763][ T354] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 42.980345][ T354] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 42.988635][ T354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.998776][ T354] usb 1-1: config 0 has no interface number 0 [ 43.006407][ T354] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 43.015509][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.023493][ T354] usb 1-1: Product: syz [ 43.027842][ T354] usb 1-1: Manufacturer: syz [ 43.032515][ T354] usb 1-1: SerialNumber: syz [ 43.037966][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 43.048940][ T354] usb 1-1: config 0 descriptor?? [ 43.053992][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 43.064865][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 43.076106][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 43.087445][ T64] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 43.096627][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.104661][ T64] usb 3-1: Product: syz [ 43.108925][ T64] usb 3-1: Manufacturer: syz [ 43.113560][ T64] usb 3-1: SerialNumber: syz [ 43.119375][ T656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 43.126649][ T656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 43.134677][ T64] pl2303 3-1:1.0: pl2303 converter detected [ 43.140787][ T64] pl2303 3-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 43.336374][ T354] usb 1-1: USB disconnect, device number 10 [ 43.336912][ T665] Zero length message leads to an empty skb [ 43.861374][ T645] usb 3-1: USB disconnect, device number 10 [ 43.928098][ T36] kauditd_printk_skb: 2242 callbacks suppressed [ 43.928118][ T36] audit: type=1400 audit(1790438852.060:21631): avc: denied { read } for pid=678 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.095402][ T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 44.220773][ T36] audit: type=1400 audit(1790438852.350:21632): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.267140][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.278370][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.295210][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.310560][ T645] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.318631][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.328181][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.340734][ T31] usb 1-1: config 0 descriptor?? [ 44.383447][ T36] audit: type=1400 audit(1790438852.510:21633): avc: denied { watch } for pid=690 comm="syz.1.113" path="/30" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.486571][ T645] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.499300][ T645] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.512474][ T645] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.520090][ T645] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 44.529460][ T645] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 44.537701][ T645] usb 3-1: Manufacturer: syz [ 44.547675][ T645] usb 3-1: config 0 descriptor?? [ 44.748942][ T36] audit: type=1400 audit(1790438852.880:21634): avc: denied { setopt } for pid=669 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.771487][ T682] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 44.781453][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 44.787486][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.796430][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.805013][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.815782][ T31] usb 1-1: USB disconnect, device number 11 [ 45.033298][ T645] usbhid 3-1:0.0: can't add hid device: -71 [ 45.040848][ T645] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.052649][ T645] usb 3-1: USB disconnect, device number 11 [ 45.586002][ T702] input: syz0 as /devices/virtual/input/input6 [ 45.745384][ T64] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.905372][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.907053][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.933287][ T64] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 45.954458][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.975600][ T64] usb 1-1: config 0 descriptor?? [ 45.981638][ T64] usb 1-1: bad CDC descriptors [ 46.056481][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24099, setting to 1024 [ 46.080904][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 46.106807][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 46.116263][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.124297][ T31] usb 3-1: Product: syz [ 46.129548][ T31] usb 3-1: Manufacturer: syz [ 46.134172][ T31] usb 3-1: SerialNumber: syz [ 46.144437][ T704] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.154548][ T31] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 46.167064][ T31] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 46.167064][ T31] Please send a copy of this message to and [ 46.196206][ T64] usb 1-1: USB disconnect, device number 12 [ 46.481776][ T31] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 46.495515][ T31] usb 3-1: USB disconnect, device number 12 [ 46.904520][ T710] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.928188][ T710] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 46.943646][ T710] netlink: 9 bytes leftover after parsing attributes in process `syz.2.120'. [ 46.994896][ T712] ======================================================= [ 46.994896][ T712] WARNING: The mand mount option has been deprecated and [ 46.994896][ T712] and is ignored by this kernel. Remove the mand [ 46.994896][ T712] option from the mount to silence this warning. [ 46.994896][ T712] ======================================================= [ 47.031386][ T36] audit: type=1400 audit(1790438855.160:21635): avc: denied { mount } for pid=711 comm="syz.2.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.055583][ T36] audit: type=1400 audit(1790438855.190:21636): avc: denied { mounton } for pid=711 comm="syz.2.121" path="/28/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 47.086077][ T36] audit: type=1400 audit(1790438855.210:21637): avc: denied { bind } for pid=711 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.128025][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.265421][ T36] audit: type=1400 audit(1790438855.380:21638): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.315370][ T36] audit: type=1400 audit(1790438855.420:21639): avc: denied { mounton } for pid=715 comm="syz.2.122" path="/29/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.365416][ T9] usb 1-1: device descriptor read/64, error -71 [ 47.605380][ T9] usb 1-1: device descriptor read/64, error -71 [ 47.855385][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 47.985412][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.225450][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.335532][ T9] usb usb1-port1: attempt power cycle [ 48.695387][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.736417][ T9] usb 1-1: device descriptor read/8, error -71 [ 48.886067][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.128071][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.156423][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.289504][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.420205][ T9] usb usb1-port1: unable to enumerate USB device [ 49.949231][ T36] audit: type=1400 audit(1790438858.080:21640): avc: denied { read } for pid=728 comm="syz.0.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.015443][ T36] audit: type=1400 audit(1790438858.080:21641): avc: denied { open } for pid=728 comm="syz.0.126" path="/41/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.295392][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 50.456454][ T31] usb 1-1: config 0 has no interfaces? [ 50.462075][ T31] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 50.471416][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.485236][ T31] usb 1-1: config 0 descriptor?? [ 50.693663][ T31] usb 1-1: USB disconnect, device number 17 [ 51.228413][ T36] audit: type=1400 audit(1790438859.360:21642): avc: denied { mounton } for pid=732 comm="syz.0.128" path="/43/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 51.495389][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 51.656124][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 51.664758][ T9] usb 1-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 51.680857][ T9] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 51.696646][ T9] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 51.715397][ T9] usb 1-1: Product: syz [ 51.721894][ T9] usb 1-1: Manufacturer: syz [ 51.736090][ T9] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 51.745849][ T9] usb 1-1: No streaming interface found for terminal 2. [ 51.942383][ T31] usb 1-1: USB disconnect, device number 18 [ 52.548635][ T740] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 52.741341][ T36] audit: type=1326 audit(1790438860.870:21643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=744 comm="syz.0.131" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4a319e159 code=0x0 [ 52.792769][ T746] futex_wake_op: syz.0.131 tries to shift op by 144; fix this program [ 58.880780][ T309] bridge_slave_1: left allmulticast mode [ 58.895379][ T309] bridge_slave_1: left promiscuous mode [ 58.901115][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.925874][ T309] bridge_slave_0: left allmulticast mode [ 58.931577][ T309] bridge_slave_0: left promiscuous mode [ 58.955436][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.125499][ T309] veth1_macvtap: left promiscuous mode [ 59.131095][ T309] veth0_vlan: left promiscuous mode [ 59.320195][ T755] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327350][ T755] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.334438][ T755] bridge_slave_0: entered allmulticast mode [ 59.341240][ T755] bridge_slave_0: entered promiscuous mode [ 59.348158][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.355225][ T755] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.365725][ T755] bridge_slave_1: entered allmulticast mode [ 59.372164][ T755] bridge_slave_1: entered promiscuous mode [ 59.557242][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.564348][ T755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.571737][ T755] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.578854][ T755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.642132][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.649569][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.687651][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.694729][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.727175][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.734249][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.819911][ T755] veth0_vlan: entered promiscuous mode [ 59.846015][ T755] veth1_macvtap: entered promiscuous mode [ 59.891958][ T36] audit: type=1400 audit(1790438868.020:21644): avc: denied { mounton } for pid=755 comm="syz-executor" path="/root/syzkaller.RKMg02/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.138962][ T36] audit: type=1400 audit(1790438869.260:21645): avc: denied { create } for pid=767 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.175797][ T768] VFS: Mount too revealing [ 61.305284][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.335377][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.342549][ T770] bridge_slave_0: entered allmulticast mode [ 61.349323][ T770] bridge_slave_0: entered promiscuous mode [ 61.356185][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.363252][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.370637][ T770] bridge_slave_1: entered allmulticast mode [ 61.378991][ T770] bridge_slave_1: entered promiscuous mode [ 61.446182][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.453269][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.460597][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.467664][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.525813][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.535422][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.577334][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.584418][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.609097][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.616413][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.655376][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.677733][ T770] veth0_vlan: entered promiscuous mode [ 61.692174][ T770] veth1_macvtap: entered promiscuous mode [ 61.727173][ T13] bridge_slave_1: left allmulticast mode [ 61.732879][ T13] bridge_slave_1: left promiscuous mode [ 61.739025][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.755938][ T13] bridge_slave_0: left allmulticast mode [ 61.761662][ T13] bridge_slave_0: left promiscuous mode [ 61.775720][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.836435][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.850112][ T64] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.868298][ T64] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 61.885363][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.893709][ T64] usb 5-1: Product: syz [ 61.897942][ T64] usb 5-1: Manufacturer: syz [ 61.902571][ T64] usb 5-1: SerialNumber: syz [ 61.912542][ T64] ums-karma 5-1:1.0: USB Mass Storage device detected [ 61.930590][ T64] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 61.930590][ T64] Please send a copy of this message to and [ 62.005175][ T13] veth1_macvtap: left promiscuous mode [ 62.012246][ T13] veth0_vlan: left promiscuous mode [ 62.056704][ T64] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 62.114963][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.138507][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.168888][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.186520][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.212595][ T782] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 62.222437][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.246330][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.247226][ T782] kvm: requested 196952 ns i8254 timer period limited to 200000 ns [ 62.265832][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.267658][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.283067][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.292045][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.306206][ T782] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 62.314866][ T645] usb 5-1: USB disconnect, device number 2 [ 62.335850][ T782] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 62.347981][ T782] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 62.383168][ T782] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 62.556580][ T806] FAULT_INJECTION: forcing a failure. [ 62.556580][ T806] name failslab, interval 1, probability 0, space 0, times 0 [ 62.603476][ T806] CPU: 0 UID: 0 PID: 806 Comm: syz.5.139 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 62.603515][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.603531][ T806] Call Trace: [ 62.603540][ T806] [ 62.603550][ T806] __dump_stack+0x21/0x30 [ 62.603590][ T806] dump_stack_lvl+0x140/0x1c0 [ 62.603624][ T806] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.603659][ T806] ? __kasan_check_write+0x18/0x20 [ 62.603684][ T806] ? down_write+0xee/0x2b0 [ 62.603717][ T806] dump_stack+0x19/0x20 [ 62.603749][ T806] should_fail_ex+0x3c2/0x510 [ 62.603790][ T806] should_failslab+0xac/0x100 [ 62.603820][ T806] __kmalloc_cache_noprof+0x41/0x470 [ 62.603847][ T806] ? cgroup_mkdir+0xbe2/0x1600 [ 62.603878][ T806] cgroup_mkdir+0xbe2/0x1600 [ 62.603909][ T806] ? __cfi_cgroup_mkdir+0x10/0x10 [ 62.603938][ T806] kernfs_iop_mkdir+0x1be/0x2d0 [ 62.603972][ T806] vfs_mkdir+0x591/0x810 [ 62.604007][ T806] do_mkdirat+0x240/0x530 [ 62.604041][ T806] ? __cfi_do_mkdirat+0x10/0x10 [ 62.604075][ T806] ? __kasan_check_write+0x18/0x20 [ 62.604099][ T806] ? getname_flags+0x203/0x6b0 [ 62.604126][ T806] ? __kasan_check_write+0x18/0x20 [ 62.604151][ T806] __x64_sys_mkdirat+0x8b/0xa0 [ 62.604185][ T806] x64_sys_call+0x2ba8/0x2ee0 [ 62.604208][ T806] do_syscall_64+0x57/0xf0 [ 62.604230][ T806] ? clear_bhb_loop+0x50/0xa0 [ 62.604262][ T806] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.604291][ T806] RIP: 0033:0x7f15ef99e159 [ 62.604310][ T806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.604331][ T806] RSP: 002b:00007f15f07cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.604356][ T806] RAX: ffffffffffffffda RBX: 00007f15efc25fa0 RCX: 00007f15ef99e159 [ 62.604375][ T806] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 62.604392][ T806] RBP: 00007f15efa3506b R08: 0000000000000000 R09: 0000000000000000 [ 62.604407][ T806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.604422][ T806] R13: 00007f15efc26038 R14: 00007f15efc25fa0 R15: 00007ffe9facf0c8 [ 62.604443][ T806] [ 62.604556][ T806] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 62.835250][ T806] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 62.843695][ T806] CPU: 0 UID: 0 PID: 806 Comm: syz.5.139 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 62.855091][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.865180][ T806] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 62.870689][ T806] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 f7 2a 61 00 48 8b bb 08 01 00 00 [ 62.890319][ T806] RSP: 0018:ffffc9000b757c88 EFLAGS: 00010206 [ 62.896411][ T806] RAX: fe9184e386a55500 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 62.904399][ T806] RDX: ffff8881161cb680 RSI: ffff888118f95000 RDI: ffff888100042000 [ 62.912403][ T806] RBP: ffffc9000b757d38 R08: ffffffff81dc0828 R09: ffffffff81e0250f [ 62.920397][ T806] R10: ffffffff81e04ff4 R11: ffffffff81e0202e R12: 0000000000000021 [ 62.928389][ T806] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888118f95010 [ 62.936402][ T806] FS: 00007f15f07cf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.945376][ T806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.951991][ T806] CR2: 0000200000001980 CR3: 000000011a3d8000 CR4: 00000000003526b0 [ 62.959994][ T806] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 62.967990][ T806] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 62.975998][ T806] Call Trace: [ 62.979299][ T806] [ 62.982251][ T806] ? __cfi_cgroup_mkdir+0x10/0x10 [ 62.987306][ T806] kernfs_iop_mkdir+0x1be/0x2d0 [ 62.992195][ T806] vfs_mkdir+0x591/0x810 [ 62.996467][ T806] do_mkdirat+0x240/0x530 [ 63.000828][ T806] ? __cfi_do_mkdirat+0x10/0x10 [ 63.005710][ T806] ? __kasan_check_write+0x18/0x20 [ 63.011108][ T806] ? getname_flags+0x203/0x6b0 [ 63.015925][ T806] ? __kasan_check_write+0x18/0x20 [ 63.021071][ T806] __x64_sys_mkdirat+0x8b/0xa0 [ 63.025867][ T806] x64_sys_call+0x2ba8/0x2ee0 [ 63.030563][ T806] do_syscall_64+0x57/0xf0 [ 63.035007][ T806] ? clear_bhb_loop+0x50/0xa0 [ 63.039711][ T806] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.045658][ T806] RIP: 0033:0x7f15ef99e159 [ 63.050108][ T806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.069750][ T806] RSP: 002b:00007f15f07cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 63.078194][ T806] RAX: ffffffffffffffda RBX: 00007f15efc25fa0 RCX: 00007f15ef99e159 [ 63.086195][ T806] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 63.094193][ T806] RBP: 00007f15efa3506b R08: 0000000000000000 R09: 0000000000000000 [ 63.102188][ T806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.110276][ T806] R13: 00007f15efc26038 R14: 00007f15efc25fa0 R15: 00007ffe9facf0c8 [ 63.118286][ T806] [ 63.121321][ T806] Modules linked in: [ 63.125556][ T806] ---[ end trace 0000000000000000 ]--- [ 63.145558][ T806] RIP: 0010:cgroup_mkdir+0x122a/0x1600 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.151686][ T806] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 f7 2a 61 00 48 8b bb 08 01 00 00 [ 63.178922][ T806] RSP: 0018:ffffc9000b757c88 EFLAGS: 00010206 [ 63.195393][ T36] audit: type=1400 audit(1790438871.300:21646): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2724]" dev="pipefs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 63.315435][ T36] audit: type=1400 audit(1790438871.360:21647): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.341298][ T13] bridge_slave_1: left allmulticast mode [ 63.355544][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.362986][ T806] [ 63.365415][ T806] RAX: fe9184e386a55500 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 63.373456][ T806] RDX: ffff8881161cb680 RSI: ffff888118f95000 RDI: ffff888100042000 [ 63.383096][ T13] bridge_slave_0: left allmulticast mode [ 63.389022][ T36] audit: type=1400 audit(1790438871.360:21648): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.410599][ T13] bridge_slave_0: left promiscuous mode [ 63.416636][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.423901][ T806] RBP: ffffc9000b757d38 R08: ffffffff81dc0828 R09: ffffffff81e0250f [ 63.432442][ T806] R10: ffffffff81e04ff4 R11: ffffffff81e0202e R12: 0000000000000021 [ 63.441182][ T36] audit: type=1400 audit(1790438871.360:21649): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.462604][ T806] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888118f95010 [ 63.462630][ T806] FS: 00007f15f07cf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.485395][ T36] audit: type=1400 audit(1790438871.360:21650): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.506122][ T806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.506148][ T806] CR2: 000055a1b6e3eaf8 CR3: 000000011a3d8000 CR4: 00000000003526b0 [ 63.506169][ T806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008a90 [ 63.506182][ T806] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 63.506199][ T806] Kernel panic - not syncing: Fatal exception [ 63.506783][ T806] Kernel Offset: disabled