last executing test programs: 23.133903715s ago: executing program 0 (id=170): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xa000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x2, 0xfc}, {0x0, 0x200000, 0xa, 0x0, 0x1, 0x80, 0x9, 0x0, 0x8, 0x40, 0x4, 0x4}, {0x6000, 0xe000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0xffc, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1, 0x7f}, {0x0, 0x4, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x2, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0xfd, 0x2}, {0x10000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1ffc, 0x114, 0x0, 0xf801, 0x0, [0xfffffffffffff000, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x161) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') mkdir(&(0x7f0000000540)='./bus\x00', 0xf0) capset(&(0x7f0000000580)={0x20071026}, &(0x7f00000005c0)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1d0) fsopen(&(0x7f0000000700)='efs\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000100)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00"], 0x0) syz_clone3(&(0x7f0000000240)={0x204a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 22.462798433s ago: executing program 0 (id=179): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 21.912663369s ago: executing program 0 (id=189): r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1fb) (async) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)={0x480, 0x10}, 0x18) r2 = openat(r1, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x8000, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6}}}}}]}}, 0x0) (async) write(r2, &(0x7f0000000640)='3', 0x4e) (async) close_range(r0, 0xffffffffffffffff, 0x0) 21.327056358s ago: executing program 0 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x81, 0x0, 0x3, r1}]) fdatasync(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f0000000340)=0x100, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) io_setup(0x4, &(0x7f0000000000)) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') (async) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x81, 0x0, 0x3, r1}]) (async) fdatasync(r1) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x103a42, 0x0) (async) ftruncate(r2, 0x6000000) (async) copy_file_range(r2, 0x0, r2, &(0x7f0000000340)=0x100, 0x9, 0x0) (async) 20.961533755s ago: executing program 0 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000002000000c49c00", @ANYRES32=0x0, @ANYBLOB="28000e003c040181a10610013cbd06ffffffffffff26110200cf31e1fd0ae36d3095053ef898767b"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010025bd7000fedbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 20.849238836s ago: executing program 0 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 20.749891517s ago: executing program 32 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 9.088535729s ago: executing program 1 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 9.088091129s ago: executing program 2 (id=232): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) setns(0xc9, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$input_event(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000340)=0x2, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0), 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000580)={'vlan0\x00', @multicast}) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f00000003c0)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) close_range(r1, r1, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000000)) r5 = syz_usb_connect(0x0, 0xb3, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="40111b000000a3a601"], 0x0, 0x0}) (async) recvmmsg(r1, &(0x7f0000000400), 0x1, 0x40002142, 0x0) (async, rerun: 32) rt_sigqueueinfo(0x0, 0x25, &(0x7f0000000180)={0xe, 0x8, 0x6}) (async, rerun: 32) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) (async) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000005c0)='*:\x00') sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)="64000000100001060000000000000000000000000000000000000000000000001000040000fe0000000000000000000024001200080001007665746818005f67140001000000000000000000000000000000004010000300766574685900000000000000", 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40040cc) 9.087646679s ago: executing program 3 (id=233): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0\x00', &(0x7f0000007ec0), &(0x7f00000001c0), 0x2, 0x2) sendto(r0, &(0x7f0000000180)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x7, 0x2002, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000c, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open(&(0x7f0000000400)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r2, 0x400, 0x0) unlink(&(0x7f0000000440)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000007fc0)={"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"}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000083c0)={0xffffffff, 0x50000, 0x7, 0x0, 0x7fff}) munmap(&(0x7f00007cb000/0x2000)=nil, 0x2000) read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002500)="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", 0x2000, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x5, 0x6, 0x8, 0x5, {0x1, 0x8010001, 0x4d0, 0x40a, 0x6, 0x20000, 0xed1, 0x0, 0x5, 0x1000, 0x7ff, r7, r8, 0x3d5, 0x20000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004680)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x26, 0x5, 0xffffffffc1aa2248, 0xfffc, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r9 = socket(0x1e, 0x5, 0x0) io_setup(0x4, &(0x7f0000007f40)) write$binfmt_misc(r9, &(0x7f0000000400), 0x2000011a) syz_fuse_handle_req(r1, &(0x7f0000004700)="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", 0x2000, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000067c0)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x7, r7, 0x0, 0x1, 0x8}}, {0x0, 0x6}}}, 0x0, 0x0}) capset(&(0x7f0000008400)={0x20080522}, &(0x7f0000008440)) fspick(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000006880)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 7.474455332s ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200050, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}]}}) 7.474188112s ago: executing program 2 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x61) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffb, 0x48b01) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000080)={0x4b5a9da54893e123, 0x1, 0x17, 0x2}, 0x8, 0x6, 0xa, 0x0, 0x6, 0x20000, 0x0}) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7462616e733d66642c726664586f3dfe3db4eb5aa996222b89202e59c2f17039dca66d1087d9b24fdda615765f0f6ff253befd7d11913608ba6be2f94b0a3561166f78e0dcf0a7d150979b7136d6266af36d2f62200d02a2b158c2eac31a05eab86303d9be1faf8a09af5bbdb7ae517cf473", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYBLOB=',cache=no']) 7.473942452s ago: executing program 3 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="3000000024000504000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="6c0000002c0005040000ea0000000000000000000100000000000000f2ffffff78476f4f0d6ed37ff28ec959e6030000000a000100626173690000003c0002003800020008000100010000002c000200280001000000050000006b6d7000"/107, 0x6c, 0x0, 0x0, 0x3e) socket$vsock_stream(0x28, 0x1, 0x0) 5.702854042s ago: executing program 1 (id=237): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000480)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000003b80)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000003c00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005cc0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000005d00)='./file0\x00', 0x20c01, 0x0) umount2(&(0x7f0000005d40)='./file0\x00', 0xb) close_range(r3, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x80) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000440)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4008000}}], 0x2, 0x810) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000b40)={{r1}, "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"}) write(r0, &(0x7f0000000800)="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", 0x19b) 5.702569112s ago: executing program 2 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mysys\x00', &(0x7f00000009c0)='sysfs\x00', 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./mysys\x00', &(0x7f00000009c0)='sysfs\x00', 0x80000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) sendfile(r0, r0, 0x0, 0xf4a) (async) 5.699138952s ago: executing program 3 (id=239): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_ublk_setup_io_uring(0x477c, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x53, 0x0}}, &(0x7f0000000080)) r2 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc1086201, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') pread64(r3, &(0x7f0000000140)=""/18, 0x12, 0x1) 3.934517101s ago: executing program 1 (id=240): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @multicast, @private=0xa010100, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast}}}}}, 0x2e) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x40000000, 0x0, 0x1}, {0x40000001, 0x0, 0x10001}]}) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000240)={{0x0, 0xffffffff, 0x10, 0xb, 0x1, 0x0, 0x1, 0x5, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x41000, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x80}, {0x0, 0xffff, 0x20, 0xb, 0x1}, {0x22221000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x1}) (async, rerun: 32) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x0, 0x8001, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x10000, 0x2}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000100)=0x5, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.933699261s ago: executing program 2 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 3.933430651s ago: executing program 3 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 2.018151285s ago: executing program 1 (id=243): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/reboot/type\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/reboot/type\x00', 0x2, 0x0) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0x87a) sendmsg$key(r0, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="010005009d74b3c59d890fb174f915c4aa57051aaaaaaaaa21ffffffff10fde78cef5ba502"]) memfd_create(&(0x7f0000000080)='\x00', 0x0) (async) r3 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000000c0)=""/7) (async) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000000c0)=""/7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000500)={0x9, 0xfffffffffffffffc, 0x1000000000000003, 0x430e, 0xfeb, 0xffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(0x0, 0x0) (async) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept(r5, 0x0, 0x0) (async) accept(r5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0ffde3d2531c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x94}}}}}}}]}}, 0x0) (async) r6 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0ffde3d2531c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x94}}}}}}}]}}, 0x0) syz_usb_disconnect(r6) 2.017931935s ago: executing program 2 (id=244): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x24281, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',root', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000000b40), 0x2000, &(0x7f0000002b40)={&(0x7f0000002bc0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x2036845, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000002c40)='./proc\x00', &(0x7f0000002c80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x12a) write$cgroup_int(r1, &(0x7f0000002cc0)=0x7ff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x5e21, @remote}, 0x10) r4 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f3, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002d00)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002d40)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000002d80)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000002dc0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) 2.016527235s ago: executing program 3 (id=245): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = creat(&(0x7f0000000440)='./bus\x00', 0x119) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) (async) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xa0d, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x400000}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000080)={0x0, 0x400, 0x0, 0x0}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000480)=0x0) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000580)={0x0, 0xfffffffe, 0x0, 0x2, 0x1f4}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x10001, 0xffffffff}}], 0x1, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x82) 898.779µs ago: executing program 1 (id=246): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r0], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x0, 0xbb42) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) 175.11µs ago: executing program 2 (id=247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x28c, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x128, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x238ad95a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1dc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fb34225}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31d59570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8773}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32ac195c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ca11cb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7267}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d500fab}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x565e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b73214}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc561}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x586}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x793d11aa}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd5e3fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc15f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x762cb85d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2db87a29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc328}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ea6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd114}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd18c345}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x528f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb273}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86e77a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf138}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65bbafa8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27e3b918}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77af4ae4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3dbfcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c1767af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff27818}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x217c015d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b102ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ee1b1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5651}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x849e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14532101}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4495a95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c42bef1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9381289}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17fc0897}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac1a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf49d5eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb49b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x96d3a0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40811332}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9418}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0ea}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004}, 0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x30}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0xc011) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_merged\x00', 0x0, 0x0) pidfd_send_signal(r4, 0x14, &(0x7f0000000740)={0x0, 0x4, 0xfffffffa}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8004) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000980), r0) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4000090) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r9, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040844}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x40000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, r11, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffd}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "f238f8639fdeb5c9787fb3b8d05f966266f890b9bf476e0c2702a23642ed05d5"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x4004801) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e80), r5) sendmsg$NLBL_MGMT_C_LISTALL(r12, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}]}, 0x48}}, 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x8c, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x810) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r12) syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r2) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x98, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4f44531d6a5b2f8638771885e3"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "86170b45b1"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "df254867b9416086893b028119"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b8f052aa43"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='Mid', 0x3) write(0xffffffffffffffff, &(0x7f0000000240)='2\n', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 22.845647][ T36] audit: type=1400 audit(1794191921.780:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.868914][ T36] audit: type=1400 audit(1794191921.800:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.871732][ T287] cgroup: Unknown subsys name 'net' [ 22.896803][ T36] audit: type=1400 audit(1794191921.830:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.897261][ T287] cgroup: Unknown subsys name 'devices' [ 23.016793][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.022473][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.208073][ T36] audit: type=1400 audit(1794191922.140:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.231356][ T36] audit: type=1400 audit(1794191922.140:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.256277][ T36] audit: type=1400 audit(1794191922.140:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.280377][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.289207][ T36] audit: type=1400 audit(1794191922.220:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.314812][ T36] audit: type=1400 audit(1794191922.220:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.344817][ T36] audit: type=1400 audit(1794191922.280:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.370810][ T36] audit: type=1400 audit(1794191922.280:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.371470][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.682549][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.689686][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.697172][ T295] bridge_slave_0: entered allmulticast mode [ 24.703474][ T295] bridge_slave_0: entered promiscuous mode [ 24.718335][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.725517][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732624][ T295] bridge_slave_1: entered allmulticast mode [ 24.739121][ T295] bridge_slave_1: entered promiscuous mode [ 24.763700][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.770839][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.778163][ T296] bridge_slave_0: entered allmulticast mode [ 24.784576][ T296] bridge_slave_0: entered promiscuous mode [ 24.792407][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.799516][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.806682][ T296] bridge_slave_1: entered allmulticast mode [ 24.813010][ T296] bridge_slave_1: entered promiscuous mode [ 24.825262][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.832367][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.839591][ T294] bridge_slave_0: entered allmulticast mode [ 24.846068][ T294] bridge_slave_0: entered promiscuous mode [ 24.853700][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.860824][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.867962][ T294] bridge_slave_1: entered allmulticast mode [ 24.874269][ T294] bridge_slave_1: entered promiscuous mode [ 25.029377][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.036499][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.043591][ T297] bridge_slave_0: entered allmulticast mode [ 25.050001][ T297] bridge_slave_0: entered promiscuous mode [ 25.056638][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.063727][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.070917][ T297] bridge_slave_1: entered allmulticast mode [ 25.077273][ T297] bridge_slave_1: entered promiscuous mode [ 25.122104][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.129220][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.136575][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.143652][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.151980][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.159063][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.166435][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.173483][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.188856][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.195954][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.203251][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.210356][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.266242][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.273808][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.281255][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.289278][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.296576][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.303824][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.322033][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.329128][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.338030][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.345109][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.370566][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.377667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.393039][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.400145][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.408129][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.415215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.425124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.432199][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.471443][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.478592][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.495271][ T296] veth0_vlan: entered promiscuous mode [ 25.503444][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.510579][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.538987][ T296] veth1_macvtap: entered promiscuous mode [ 25.551781][ T297] veth0_vlan: entered promiscuous mode [ 25.561992][ T294] veth0_vlan: entered promiscuous mode [ 25.589329][ T294] veth1_macvtap: entered promiscuous mode [ 25.597350][ T295] veth0_vlan: entered promiscuous mode [ 25.606965][ T297] veth1_macvtap: entered promiscuous mode [ 25.629868][ T295] veth1_macvtap: entered promiscuous mode [ 25.639184][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.728853][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.780056][ T332] Mass Storage Function, version: 2009/09/11 [ 25.818149][ T332] LUN: removable file: (no medium) [ 25.990166][ T349] FAULT_INJECTION: forcing a failure. [ 25.990166][ T349] name failslab, interval 1, probability 0, space 0, times 1 [ 26.003903][ T349] CPU: 1 UID: 0 PID: 349 Comm: syz.1.15 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 26.003939][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.003961][ T349] Call Trace: [ 26.003968][ T349] [ 26.003976][ T349] __dump_stack+0x21/0x30 [ 26.004002][ T349] dump_stack_lvl+0x140/0x1c0 [ 26.004021][ T349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.004043][ T349] ? stack_depot_save_flags+0x38/0x800 [ 26.004065][ T349] ? kasan_save_alloc_info+0x3a/0x50 [ 26.004093][ T349] dump_stack+0x19/0x20 [ 26.004111][ T349] should_fail_ex+0x3c2/0x510 [ 26.004131][ T349] should_failslab+0xac/0x100 [ 26.004152][ T349] kmem_cache_alloc_noprof+0x42/0x410 [ 26.004181][ T349] ? __kernfs_new_node+0xf1/0x740 [ 26.004212][ T349] __kernfs_new_node+0xf1/0x740 [ 26.004234][ T349] ? __kasan_check_write+0x18/0x20 [ 26.004264][ T349] ? kernfs_new_node+0x280/0x280 [ 26.004287][ T349] ? kernfs_xattr_get+0x85/0xa0 [ 26.004308][ T349] ? make_kgid+0x1d0/0x690 [ 26.004337][ T349] ? __cfi_make_kgid+0x10/0x10 [ 26.004359][ T349] kernfs_new_node+0x154/0x280 [ 26.004383][ T349] __kernfs_create_file+0x52/0x280 [ 26.004410][ T349] sysfs_add_file_mode_ns+0x1d2/0x280 [ 26.004440][ T349] internal_create_group+0x66c/0xe70 [ 26.004460][ T349] ? __kasan_check_write+0x18/0x20 [ 26.004491][ T349] ? sysfs_create_group+0x40/0x40 [ 26.004511][ T349] ? kernfs_activate+0x1ee/0x200 [ 26.004535][ T349] sysfs_create_groups+0x5c/0x130 [ 26.004555][ T349] device_add_attrs+0xdf/0x850 [ 26.004580][ T349] ? device_add_class_symlinks+0x260/0x260 [ 26.004606][ T349] ? __kasan_check_write+0x18/0x20 [ 26.004639][ T349] ? kobject_put+0x1cc/0x2a0 [ 26.004660][ T349] ? device_add_class_symlinks+0x22e/0x260 [ 26.004685][ T349] device_add+0x4db/0xbf0 [ 26.004710][ T349] netdev_register_kobject+0x196/0x330 [ 26.004743][ T349] register_netdevice+0x1042/0x1a80 [ 26.004766][ T349] ? __cfi_register_netdevice+0x10/0x10 [ 26.004786][ T349] ? alloc_netdev_mqs+0xd45/0x13d0 [ 26.004810][ T349] register_netdev+0x42/0x60 [ 26.004829][ T349] loopback_net_init+0x78/0x160 [ 26.004853][ T349] ops_init+0x302/0x5d0 [ 26.004871][ T349] ? __kasan_check_write+0x18/0x20 [ 26.004899][ T349] ? rwsem_read_trylock+0x275/0x5a0 [ 26.004925][ T349] setup_net+0x227/0x9b0 [ 26.004955][ T349] ? copy_net_ns+0xa20/0xa20 [ 26.004983][ T349] ? down_read_killable+0x7f/0x100 [ 26.005011][ T349] ? __cfi_down_read_killable+0x10/0x10 [ 26.005040][ T349] copy_net_ns+0x4fc/0xa20 [ 26.005070][ T349] create_new_namespaces+0x390/0x6f0 [ 26.005092][ T349] unshare_nsproxy_namespaces+0x124/0x180 [ 26.005113][ T349] ksys_unshare+0x4f9/0x920 [ 26.005130][ T349] ? fput+0x1a4/0x230 [ 26.005153][ T349] ? __cfi_ksys_unshare+0x10/0x10 [ 26.005171][ T349] ? __kasan_check_write+0x18/0x20 [ 26.005201][ T349] __x64_sys_unshare+0x3c/0x50 [ 26.005229][ T349] x64_sys_call+0x2998/0x2ee0 [ 26.005251][ T349] do_syscall_64+0x57/0xf0 [ 26.005273][ T349] ? clear_bhb_loop+0x50/0xa0 [ 26.005303][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.005331][ T349] RIP: 0033:0x7fcc4699fb19 [ 26.005359][ T349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.005377][ T349] RSP: 002b:00007fcc477dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 26.005404][ T349] RAX: ffffffffffffffda RBX: 00007fcc46c25fa0 RCX: 00007fcc4699fb19 [ 26.005420][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 26.005434][ T349] RBP: 00007fcc46a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 26.005447][ T349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.005460][ T349] R13: 00007fcc46c26038 R14: 00007fcc46c25fa0 R15: 00007ffff4e62f18 [ 26.005478][ T349] [ 26.349952][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.501597][ T366] syz.2.22 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 26.536604][ T366] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 26.924433][ T372] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.064399][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.076327][ T372] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 27.085505][ T372] usb 3-1: config 1 has no interface number 0 [ 27.091614][ T372] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 27.101040][ T372] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 27.113610][ T372] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 27.114519][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.122939][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.138495][ T372] usb 3-1: Product: syz [ 27.142668][ T372] usb 3-1: Manufacturer: syz [ 27.147339][ T372] usb 3-1: SerialNumber: syz [ 27.226946][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 27.234716][ T10] usb 1-1: can't read configurations, error -71 [ 27.276202][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.284961][ T31] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 27.296111][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 27.304420][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 [ 27.313515][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.321659][ T31] usb 2-1: Product: syz [ 27.326212][ T31] usb 2-1: Manufacturer: syz [ 27.330855][ T31] usb 2-1: SerialNumber: syz [ 27.361652][ T374] FAULT_INJECTION: forcing a failure. [ 27.361652][ T374] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 27.375154][ T374] CPU: 0 UID: 0 PID: 374 Comm: syz.2.25 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 27.375180][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 27.375191][ T374] Call Trace: [ 27.375196][ T374] [ 27.375202][ T374] __dump_stack+0x21/0x30 [ 27.375249][ T374] dump_stack_lvl+0x140/0x1c0 [ 27.375270][ T374] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.375291][ T374] ? unwind_get_return_address+0x51/0x90 [ 27.375326][ T374] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 27.375349][ T374] dump_stack+0x19/0x20 [ 27.375364][ T374] should_fail_ex+0x3c2/0x510 [ 27.375399][ T374] should_fail_alloc_page+0xec/0x110 [ 27.375423][ T374] __alloc_pages_noprof+0x1c0/0x7e0 [ 27.375457][ T374] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.375494][ T374] ? kasan_save_track+0x4f/0x80 [ 27.375517][ T374] ? kasan_save_alloc_info+0x3a/0x50 [ 27.375548][ T374] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 27.375581][ T374] ? alloc_vmap_area+0x230/0x26f0 [ 27.375614][ T374] ? __get_vm_area_node+0x1f8/0x390 [ 27.375635][ T374] ? _raw_spin_lock+0x92/0x120 [ 27.375652][ T374] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.375690][ T374] get_free_pages_noprof+0x14/0x40 [ 27.375718][ T374] kasan_populate_vmalloc_pte+0x4c/0x170 [ 27.375757][ T374] __apply_to_page_range+0x7c2/0xd00 [ 27.375774][ T374] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 27.375799][ T374] ? apply_to_page_range+0x60/0x60 [ 27.375836][ T374] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 27.375869][ T374] apply_to_page_range+0x3f/0x60 [ 27.375896][ T374] kasan_populate_vmalloc+0x64/0x80 [ 27.375921][ T374] alloc_vmap_area+0x1e8e/0x26f0 [ 27.375943][ T374] ? kasan_save_alloc_info+0x3a/0x50 [ 27.375984][ T374] ? vm_map_ram+0xdd0/0xdd0 [ 27.376009][ T374] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 27.376048][ T374] ? __get_vm_area_node+0x150/0x390 [ 27.376069][ T374] __get_vm_area_node+0x1f8/0x390 [ 27.376095][ T374] __vmalloc_node_range_noprof+0x340/0x1300 [ 27.376139][ T374] ? copy_process+0x579/0x33a0 [ 27.376173][ T374] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 27.376206][ T374] ? kasan_save_alloc_info+0x3a/0x50 [ 27.376228][ T374] ? __kasan_slab_alloc+0x73/0x90 [ 27.376245][ T374] ? arch_dup_task_struct+0x5b/0xe0 [ 27.376281][ T374] ? __asan_memcpy+0x5a/0x80 [ 27.376315][ T374] dup_task_struct+0x5d6/0xd80 [ 27.376345][ T374] ? copy_process+0x579/0x33a0 [ 27.376380][ T374] ? _raw_spin_lock_irq+0x93/0x120 [ 27.376397][ T374] ? copy_process+0x33a0/0x33a0 [ 27.376441][ T374] ? __kasan_check_write+0x18/0x20 [ 27.376471][ T374] copy_process+0x579/0x33a0 [ 27.376506][ T374] ? __cfi_futex_wake_mark+0x10/0x10 [ 27.376529][ T374] ? futex_wake+0x666/0x950 [ 27.376550][ T374] ? __cfi_copy_process+0x10/0x10 [ 27.376595][ T374] kernel_clone+0x233/0x810 [ 27.376629][ T374] ? __cfi_kernel_clone+0x10/0x10 [ 27.376663][ T374] ? do_futex+0x32a/0x510 [ 27.376682][ T374] __x64_sys_clone+0x1b7/0x230 [ 27.376707][ T374] ? __cfi___x64_sys_clone+0x10/0x10 [ 27.376755][ T374] ? __kasan_check_write+0x18/0x20 [ 27.376785][ T374] ? fpregs_restore_userregs+0x11c/0x260 [ 27.376817][ T374] ? switch_fpu_return+0x12/0x20 [ 27.376839][ T374] x64_sys_call+0x2b3c/0x2ee0 [ 27.376868][ T374] do_syscall_64+0x57/0xf0 [ 27.376893][ T374] ? clear_bhb_loop+0x50/0xa0 [ 27.376923][ T374] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.376957][ T374] RIP: 0033:0x7fb31e79fb19 [ 27.376972][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.376991][ T374] RSP: 002b:00007fb31f5d1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.377025][ T374] RAX: ffffffffffffffda RBX: 00007fb31ea25fa0 RCX: 00007fb31e79fb19 [ 27.377081][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.377123][ T374] RBP: 00007fb31e837b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.377134][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.377144][ T374] R13: 00007fb31ea26038 R14: 00007fb31ea25fa0 R15: 00007ffe17d0beb8 [ 27.377173][ T374] [ 27.377246][ T374] syz.2.25: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 27.762481][ T31] usbhid 2-1:1.0: can't add hid device: -32 [ 27.769219][ T374] ,cpuset= [ 27.785062][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 27.814473][ T321] Bluetooth: hci0: command 0x1003 tx timeout [ 27.818471][ T374] syz2 [ 27.820631][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.821403][ T374] ,mems_allowed=0 [ 27.841180][ T374] CPU: 0 UID: 0 PID: 374 Comm: syz.2.25 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 27.841215][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 27.841234][ T374] Call Trace: [ 27.841240][ T374] [ 27.841249][ T374] __dump_stack+0x21/0x30 [ 27.841276][ T374] dump_stack_lvl+0x140/0x1c0 [ 27.841296][ T374] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.841321][ T374] dump_stack+0x19/0x20 [ 27.841341][ T374] warn_alloc+0x1e7/0x2c0 [ 27.841370][ T374] ? kasan_save_track+0x3e/0x80 [ 27.841393][ T374] ? __cfi_warn_alloc+0x10/0x10 [ 27.841417][ T374] ? __get_vm_area_node+0x211/0x390 [ 27.841446][ T374] ? __get_vm_area_node+0x211/0x390 [ 27.841476][ T374] __vmalloc_node_range_noprof+0x365/0x1300 [ 27.841520][ T374] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 27.841554][ T374] ? kasan_save_alloc_info+0x3a/0x50 [ 27.841585][ T374] ? __kasan_slab_alloc+0x73/0x90 [ 27.841608][ T374] ? arch_dup_task_struct+0x5b/0xe0 [ 27.841633][ T374] ? __asan_memcpy+0x5a/0x80 [ 27.841666][ T374] dup_task_struct+0x5d6/0xd80 [ 27.841696][ T374] ? copy_process+0x579/0x33a0 [ 27.841726][ T374] ? _raw_spin_lock_irq+0x93/0x120 [ 27.841749][ T374] ? copy_process+0x33a0/0x33a0 [ 27.841780][ T374] ? __kasan_check_write+0x18/0x20 [ 27.841809][ T374] copy_process+0x579/0x33a0 [ 27.841841][ T374] ? __cfi_futex_wake_mark+0x10/0x10 [ 27.841870][ T374] ? futex_wake+0x666/0x950 [ 27.841899][ T374] ? __cfi_copy_process+0x10/0x10 [ 27.841930][ T374] kernel_clone+0x233/0x810 [ 27.842346][ T374] ? __cfi_kernel_clone+0x10/0x10 [ 27.842377][ T374] ? do_futex+0x32a/0x510 [ 27.842402][ T374] __x64_sys_clone+0x1b7/0x230 [ 27.842435][ T374] ? __cfi___x64_sys_clone+0x10/0x10 [ 27.842470][ T374] ? __kasan_check_write+0x18/0x20 [ 27.842501][ T374] ? fpregs_restore_userregs+0x11c/0x260 [ 27.842541][ T374] ? switch_fpu_return+0x12/0x20 [ 27.842572][ T374] x64_sys_call+0x2b3c/0x2ee0 [ 27.842597][ T374] do_syscall_64+0x57/0xf0 [ 27.842620][ T374] ? clear_bhb_loop+0x50/0xa0 [ 27.842654][ T374] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.842684][ T374] RIP: 0033:0x7fb31e79fb19 [ 27.842703][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.842723][ T374] RSP: 002b:00007fb31f5d1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.842746][ T374] RAX: ffffffffffffffda RBX: 00007fb31ea25fa0 RCX: 00007fb31e79fb19 [ 27.842765][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.842779][ T374] RBP: 00007fb31e837b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.842794][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.842808][ T374] R13: 00007fb31ea26038 R14: 00007fb31ea25fa0 R15: 00007ffe17d0beb8 [ 27.842828][ T374] [ 27.843282][ T374] Mem-Info: [ 28.131264][ T374] active_anon:6272 inactive_anon:0 isolated_anon:0 [ 28.131264][ T374] active_file:5760 inactive_file:2300 isolated_file:0 [ 28.131264][ T374] unevictable:0 dirty:878 writeback:0 [ 28.131264][ T374] slab_reclaimable:3859 slab_unreclaimable:71433 [ 28.131264][ T374] mapped:24002 shmem:165 pagetables:776 [ 28.131264][ T374] sec_pagetables:0 bounce:0 [ 28.131264][ T374] kernel_misc_reclaimable:0 [ 28.131264][ T374] free:1542004 free_pcp:2002 free_cma:0 [ 28.176145][ T374] Node 0 active_anon:25088kB inactive_anon:0kB active_file:23040kB inactive_file:9200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96008kB dirty:3512kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4420kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no [ 28.209820][ T374] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB [ 28.210511][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 28.210553][ T36] audit: type=1400 audit(1794191927.140:171): avc: denied { read } for pid=398 comm="syz.0.40" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.240687][ T374] lowmem_reserve[]: [ 28.247943][ T36] audit: type=1400 audit(1794191927.180:172): avc: denied { open } for pid=398 comm="syz.0.40" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.270321][ T374] 0 3920 3920 [ 28.298405][ T374] Normal free:3217136kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24996kB inactive_anon:0kB active_file:23040kB inactive_file:9200kB unevictable:0kB writepending:3512kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4112kB local_pcp:1820kB free_cma:0kB [ 28.342867][ T374] lowmem_reserve[]: 0 0 0 [ 28.348662][ T374] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) [ 28.349638][ T405] netlink: 'syz.0.34': attribute type 28 has an invalid length. [ 28.349643][ T374] 4*1024kB [ 28.360577][ T374] (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 28.378448][ T374] Normal: 1*4kB (U) 3*8kB (UME) 2*16kB (UM) 1*32kB (M) 3*64kB (UE) 35*128kB (UME) 28*256kB (UME) 14*512kB (UME) 7*1024kB (ME) 3*2048kB (ME) 777*4096kB (UM) = 3215004kB [ 28.395868][ T374] 8271 total pagecache pages [ 28.400667][ T374] 0 pages in swap cache [ 28.404899][ T374] Free swap = 124996kB [ 28.409340][ T374] Total swap = 124996kB [ 28.413678][ T374] 2097051 pages RAM [ 28.417560][ T374] 0 pages HighMem/MovableOnly [ 28.423745][ T374] 354592 pages reserved [ 28.428077][ T374] 0 pages cma reserved [ 28.434604][ T374] Memory allocations: [ 28.438610][ T374] 0 B 0 init/main.c:1477 func:do_initcalls [ 28.445869][ T374] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 28.453996][ T374] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 28.461856][ T374] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 28.469851][ T374] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 28.477805][ T374] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 28.487755][ T374] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 28.495833][ T374] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 28.503809][ T374] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 28.514203][ T36] audit: type=1400 audit(1794191927.440:173): avc: denied { mmap_zero } for pid=406 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 28.515890][ T374] 0 B 0 init/initramfs.c:101 func:find_link [ 28.585081][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.588497][ T372] usb 3-1: 1:0 : does not exist [ 28.600954][ T372] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 28.608637][ T372] usb 3-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 28.618007][ T372] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 28.628621][ T372] usb 3-1: USB disconnect, device number 2 [ 28.641212][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.744464][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 28.751153][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.759636][ T66] usb 4-1: config 15 has an invalid interface number: 145 but max is 1 [ 28.768056][ T66] usb 4-1: config 15 has an invalid interface number: 239 but max is 1 [ 28.776432][ T66] usb 4-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 28.786857][ T66] usb 4-1: config 15 has no interface number 0 [ 28.793057][ T66] usb 4-1: config 15 has no interface number 1 [ 28.799314][ T66] usb 4-1: config 15 interface 145 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 28.810334][ T66] usb 4-1: config 15 interface 145 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.823426][ T66] usb 4-1: config 15 interface 239 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 1024 [ 28.833744][ T66] usb 4-1: config 15 interface 239 altsetting 13 has an endpoint descriptor with address 0x97, changing to 0x87 [ 28.846534][ T66] usb 4-1: config 15 interface 239 altsetting 13 endpoint 0x87 has invalid wMaxPacketSize 0 [ 28.856723][ T66] usb 4-1: config 15 interface 239 altsetting 13 bulk endpoint 0x87 has invalid maxpacket 0 [ 28.866878][ T66] usb 4-1: config 15 interface 145 has no altsetting 0 [ 28.873737][ T66] usb 4-1: config 15 interface 239 has no altsetting 0 [ 28.882002][ T66] usb 4-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=e6.aa [ 28.891084][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.899240][ T66] usb 4-1: Product: syz [ 28.903426][ T66] usb 4-1: Manufacturer: syz [ 28.908071][ T66] usb 4-1: SerialNumber: syz [ 29.115133][ T36] audit: type=1400 audit(1794191928.050:174): avc: denied { nlmsg_write } for pid=402 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 29.137037][ T36] audit: type=1400 audit(1794191928.050:175): avc: denied { map } for pid=402 comm="syz.3.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.162322][ T36] audit: type=1400 audit(1794191928.050:176): avc: denied { read write } for pid=402 comm="syz.3.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.187789][ T36] audit: type=1400 audit(1794191928.050:177): avc: denied { map } for pid=402 comm="syz.3.33" path="socket:[3927]" dev="sockfs" ino=3927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 29.211116][ T66] pl2303 4-1:15.145: required endpoints missing [ 29.218626][ T66] pl2303 4-1:15.239: required interrupt-in endpoint missing [ 29.226471][ T36] audit: type=1400 audit(1794191928.150:178): avc: denied { create } for pid=418 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 29.247135][ T36] audit: type=1400 audit(1794191928.150:179): avc: denied { write } for pid=418 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 29.250928][ T66] usb 4-1: USB disconnect, device number 2 [ 29.280087][ T36] audit: type=1400 audit(1794191928.160:180): avc: denied { read } for pid=418 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 29.664466][ T394] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 29.694878][ T425] x86/PAT: syz.3.41:425 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 29.715035][ T424] x86/PAT: syz.3.41:424 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 29.745332][ T430] usb usb9: usbfs: process 430 (syz.2.43) did not claim interface 4 before use [ 29.815418][ T441] UDC core: g1: couldn't find an available UDC or it's busy [ 29.816558][ T394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.834511][ T394] usb 1-1: not running at top speed; connect to a high speed hub [ 29.843258][ T394] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 29.856745][ T394] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 29.866118][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.874182][ T394] usb 1-1: Product: syz [ 29.885569][ T394] usb 1-1: Manufacturer: syz [ 29.885997][ T415] usb 2-1: USB disconnect, device number 2 [ 29.890426][ T394] usb 1-1: SerialNumber: syz [ 29.912820][ T448] netlink: 140 bytes leftover after parsing attributes in process `syz.1.49'. [ 29.934081][ T451] process 'syz.3.47' launched './file0' with NULL argv: empty string added [ 30.109533][ T394] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 30.124412][ T372] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.135312][ T394] usb 1-1: unit 4 not found! [ 30.139996][ T394] usb 1-1: unit 0 not found! [ 30.156620][ T394] usb 1-1: USB disconnect, device number 5 [ 30.181855][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.295544][ T372] usb 3-1: config 243 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 30.309275][ T372] usb 3-1: config 243 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 30.321137][ T372] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 30.330674][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.339242][ T372] usb 3-1: Product: syz [ 30.344016][ T372] usb 3-1: Manufacturer: syz [ 30.348920][ T372] usb 3-1: SerialNumber: syz [ 30.357097][ T372] ums-sddr09 3-1:243.0: USB Mass Storage device detected [ 30.367830][ T372] ums-sddr09 3-1:243.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 30.367830][ T372] Please send a copy of this message to and [ 30.418812][ T372] ums-sddr09 3-1:243.0: probe with driver ums-sddr09 failed with error -22 [ 30.562103][ T394] usb 3-1: USB disconnect, device number 3 [ 30.658953][ T478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 30.686873][ T483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.701349][ T483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.710919][ T484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.720509][ T484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.794729][ T494] rust_binder: 493:494 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 30.894407][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.963627][ T394] rust_binder: 493: undelivered TRANSACTION_ERROR: 29189 [ 31.003196][ T509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.013122][ T509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.029431][ T524] rust_binder: 507:524 got reply transaction with no transaction stack [ 31.038021][ T524] rust_binder: 507:524 transaction reply to 0:0 failed EINVAL, code 2 size 0-0 line thread.rs:1556 [ 31.038115][ T528] Zero length message leads to an empty skb [ 31.055516][ T66] usb 1-1: Dual-Role OTG device on HNP port [ 31.072436][ T66] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 31.088798][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.144392][ T452] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.174700][ T548] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 31.371610][ T566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.380712][ T566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.324450][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.475829][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 32.485244][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.497178][ T66] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 32.506347][ T66] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 32.514758][ T66] usb 2-1: Product: syz [ 32.518945][ T66] usb 2-1: Manufacturer: syz [ 32.528412][ T66] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 32.534957][ T66] usb 2-1: No streaming interface found for terminal 2. [ 32.554961][ T618] block device autoloading is deprecated and will be removed. [ 32.645989][ T622] device-mapper: ioctl: name not supplied when creating device [ 32.654452][ T622] 9pnet_fd: Insufficient options for proto=fd [ 33.361926][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 33.361946][ T36] audit: type=1400 audit(1794191932.290:249): avc: denied { read write } for pid=631 comm="syz.2.93" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.382736][ T415] hid-sensor-hub 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 33.391863][ T36] audit: type=1400 audit(1794191932.290:250): avc: denied { open } for pid=631 comm="syz.2.93" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.476142][ T633] fido_id[633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.650606][ T36] audit: type=1400 audit(1794191932.580:251): avc: denied { accept } for pid=639 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.677377][ T36] audit: type=1400 audit(1794191932.610:252): avc: denied { read append } for pid=641 comm="syz.0.97" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.701036][ T36] audit: type=1400 audit(1794191932.610:253): avc: denied { open } for pid=641 comm="syz.0.97" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.736212][ T36] audit: type=1400 audit(1794191932.670:254): avc: denied { map } for pid=641 comm="syz.0.97" path="socket:[6697]" dev="sockfs" ino=6697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.759246][ T36] audit: type=1400 audit(1794191932.670:255): avc: denied { read accept } for pid=641 comm="syz.0.97" path="socket:[6697]" dev="sockfs" ino=6697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.784397][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 33.794400][ T36] audit: type=1400 audit(1794191932.720:256): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.857137][ T652] No source specified [ 33.863977][ T36] audit: type=1326 audit(1794191932.790:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=651 comm="syz.0.100" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fab19fb19 code=0x0 [ 33.903890][ T415] rust_binder: 507: undelivered TRANSACTION_ERROR: 29201 [ 33.923998][ T36] audit: type=1400 audit(1794191932.850:258): avc: denied { mount } for pid=653 comm="syz.3.101" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.937578][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 33.963050][ T45] usb 3-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 33.973127][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.981353][ T45] usb 3-1: Product: 倊 [ 33.985675][ T45] usb 3-1: Manufacturer: 堅誑理㻑砮緫阒鼑ڢ鎡ᣨ㓪晨ￅ翮闄촖㳱ಇ涪쩒愙Ƞ⧔챁舖늫楛披㘧Ⱂ깬䤎裷ꙗ災୉㱯ꂵ⨝告ꣾõ妨쉢㐿墱ыꃳ㌚打⭳⾶㊤፾욁ᾋ髳灴䩩㰋鞾泜綗준씠룺妑푴ᖅ蘰牂鏂쟚슇玦薸Ḣ绶໰璼↔芤鞿砚蒃ﺄ燫䶐潜튣⨴넃䙨뾢孍狐㏢❙㙙睎軎䱾骿垬妗ߖ븹瀏 [ 34.020929][ T45] usb 3-1: SerialNumber: 櫍Ⲹ麝갢಑䒝폥䡯㲄竟ⵖᇧ틣䑏⯏䷡ꐢ▱텭쎪௱냔쏰桪韬莄̝滮놫蝱ở濪蹠䒼꿗櫡䮂됫ꭡ壷徎랋쓠럿썳Ỳ찙⦁ᬩ胮ᯐ옸䁋㎴懚쮪藩軳ᑥ荾㚇倃笧쿰௥暟﫢᧵携㧡ㅣ쏜婪䃙유긖㤎磰闐眪雇豆ꌲ곱䣳缼䲶఻㾸㨆컻ᕕ쨰㇢毎男ᆴ䨦첋󯩕ꭐ녶ꂶﶋ糧륨쓦䰰馳 [ 34.035493][ T661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 34.476040][ T45] usb 3-1: USB disconnect, device number 4 [ 34.487556][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 34.604456][ T372] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.755895][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.767473][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.777596][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.790671][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 34.800173][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.809324][ T372] usb 4-1: config 0 descriptor?? [ 34.811353][ T687] ======================================================= [ 34.811353][ T687] WARNING: The mand mount option has been deprecated and [ 34.811353][ T687] and is ignored by this kernel. Remove the mand [ 34.811353][ T687] option from the mount to silence this warning. [ 34.811353][ T687] ======================================================= [ 34.887557][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.896197][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.124488][ T415] usb 2-1: USB disconnect, device number 3 [ 35.173469][ T720] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 35.228444][ T730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'. [ 35.233284][ T66] usb 4-1: USB disconnect, device number 4 [ 35.313876][ T736] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 35.321614][ T736] netlink: 'syz.1.123': attribute type 6 has an invalid length. [ 35.329305][ T736] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.123'. [ 35.423591][ T746] fuse: Bad value for 'fd' [ 35.654415][ T415] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.671504][ T748] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 35.696326][ T330] udevd[330]: setting mode of /dev/input/event2 to 020660 failed: Read-only file system [ 35.706409][ T330] udevd[330]: setting owner of /dev/input/event2 to uid=0, gid=104 failed: Read-only file system [ 35.763324][ T755] netlink: 156 bytes leftover after parsing attributes in process `syz.3.129'. [ 35.790903][ T757] sd 0:0:1:0: PR command failed: 1026 [ 35.796430][ T757] sd 0:0:1:0: Sense Key : 0x5 [current] [ 35.802189][ T757] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 35.825293][ T415] usb 2-1: Using ep0 maxpacket: 16 [ 35.835183][ T415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.854357][ T415] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.875887][ T415] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.887632][ T415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.912331][ T415] usb 2-1: Product: syz [ 35.918233][ T415] usb 2-1: Manufacturer: syz [ 35.922903][ T415] usb 2-1: SerialNumber: syz [ 36.174389][ T452] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 36.274150][ T415] usb 2-1: 0:2 : does not exist [ 36.296251][ T415] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 36.314530][ T415] usb 2-1: USB disconnect, device number 4 [ 36.326429][ T452] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 36.338350][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 36.354096][ T452] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.367085][ T452] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.373724][ T452] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 36.384359][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.398146][ T452] usb 4-1: config 0 descriptor?? [ 36.403448][ T762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.481000][ T770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 36.567775][ T781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.576819][ T781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.586160][ T781] syz.0.139 uses obsolete (PF_INET,SOCK_PACKET) [ 36.817681][ T452] input: HID 13ec:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:13EC:0006.0003/input/input6 [ 36.835370][ T452] zydacron 0003:13EC:0006.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 36.974413][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 37.034404][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.075776][ T66] usb 4-1: USB disconnect, device number 5 [ 37.120636][ T792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.129366][ T792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.138155][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 37.148993][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.155647][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 37.164823][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.173451][ T10] usb 3-1: config 0 descriptor?? [ 37.179193][ T785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.186439][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 37.192936][ T45] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 37.202129][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.211096][ T45] usb 2-1: config 0 descriptor?? [ 37.217476][ T45] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 37.225498][ T45] usb 2-1: Detected FT2233HP [ 37.417273][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 37.427751][ T45] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 37.626624][ T10] lg-g15 0003:046D:C225.0004: hiddev96,hidraw0: USB HID v0.03 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0 [ 37.771397][ T813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.781391][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.781901][ T813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.791021][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.984388][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 38.114426][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.354400][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.399902][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 38.399921][ T36] audit: type=1400 audit(1794191937.330:292): avc: denied { ioctl } for pid=823 comm="syz.0.152" path="socket:[7760]" dev="sockfs" ino=7760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.412613][ T824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.430425][ T36] audit: type=1400 audit(1794191937.330:293): avc: denied { write } for pid=823 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.446662][ T824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.458483][ T36] audit: type=1400 audit(1794191937.340:294): avc: denied { listen } for pid=823 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.594423][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 38.724423][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.764572][ T787] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 38.773550][ T787] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 38.781503][ T787] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 38.788759][ T787] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 38.796080][ T787] ftdi_sio ttyUSB0: error from flowcontrol urb [ 38.804129][ T66] usb 2-1: USB disconnect, device number 5 [ 38.811138][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 38.820907][ T66] ftdi_sio 2-1:0.0: device disconnected [ 38.974409][ T10] usb 4-1: device descriptor read/64, error -71 [ 39.084497][ T10] usb usb4-port1: attempt power cycle [ 39.097070][ T36] audit: type=1400 audit(1794191938.030:295): avc: denied { remount } for pid=825 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.125354][ T36] audit: type=1400 audit(1794191938.060:296): avc: denied { bind } for pid=831 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.145744][ T36] audit: type=1400 audit(1794191938.060:297): avc: denied { setopt } for pid=831 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.165089][ T834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 39.197972][ T832] usb usb2: usbfs: process 832 (syz.0.154) did not claim interface 0 before use [ 39.217275][ T836] usb usb2: usbfs: process 836 (syz.0.154) did not claim interface 0 before use [ 39.366905][ T843] random: crng reseeded on system resumption [ 39.372999][ T36] audit: type=1400 audit(1794191938.300:298): avc: denied { write } for pid=842 comm="syz.1.157" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.446523][ T845] random: crng reseeded on system resumption [ 39.464378][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 39.487837][ T36] audit: type=1400 audit(1794191938.420:299): avc: denied { mounton } for pid=844 comm="syz.1.158" path="/34/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 39.515310][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.545350][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.554012][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.597630][ T36] audit: type=1400 audit(1794191938.530:300): avc: denied { mounton } for pid=849 comm="syz.1.160" path="/proc/122/cgroup" dev="proc" ino=7833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 39.620330][ T36] audit: type=1400 audit(1794191938.530:301): avc: denied { mounton } for pid=849 comm="syz.1.160" path="/proc/122/cgroup" dev="proc" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.665430][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.686193][ T852] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3610666273 (3610666273 ns) > initial count (1584915582 ns). Using initial count to start timer. [ 39.705212][ T852] kvm: kvm [851]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 39.713962][ T852] kvm: kvm [851]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 39.730702][ T852] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 39.748150][ T852] SELinux: policydb magic number 0xb70aea8c does not match expected magic number 0xf97cff8c [ 39.758465][ T852] SELinux: failed to load policy [ 39.825753][ T66] usb 3-1: USB disconnect, device number 5 [ 39.904456][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 39.925707][ T10] usb 4-1: device descriptor read/8, error -71 [ 40.065579][ T10] usb 4-1: device descriptor read/8, error -71 [ 40.096575][ T867] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 40.174396][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.184463][ T10] usb usb4-port1: unable to enumerate USB device [ 40.324387][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 40.330812][ T66] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 40.341284][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.352015][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.361440][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.369649][ T66] usb 3-1: Product: syz [ 40.373963][ T66] usb 3-1: Manufacturer: syz [ 40.378830][ T66] usb 3-1: SerialNumber: syz [ 40.587268][ T66] usb 3-1: 0:2 : does not exist [ 40.592248][ T66] usb 3-1: unit 9 not found! [ 40.598956][ T66] usb 3-1: USB disconnect, device number 6 [ 40.609889][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 40.664424][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.815624][ T45] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 40.827103][ T45] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.840438][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 40.848943][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.40 [ 40.858552][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.866941][ T45] usb 2-1: Product: syz [ 40.871367][ T45] usb 2-1: Manufacturer: [飔䠂譌᭜፤顿梨༔利꼳㨎췾秋⑹䚺늌䄗礝멠㚬鏖䟇炪෠렩鳼拖俥ꇖ橗狒慴≒ﱃ貝䍱響 [ 40.887305][ T45] usb 2-1: SerialNumber: syz [ 40.945593][ T879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.957019][ T879] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 41.069111][ T887] fuse: Unknown parameter 'fu0x0000000000000006' [ 41.105137][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 41.114402][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 41.131251][ T45] usb 2-1: USB disconnect, device number 6 [ 41.212718][ T893] kvm: emulating exchange as write [ 41.274847][ T902] FAULT_INJECTION: forcing a failure. [ 41.274847][ T902] name failslab, interval 1, probability 0, space 0, times 0 [ 41.288762][ T902] CPU: 0 UID: 0 PID: 902 Comm: syz.3.178 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 41.288794][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.288808][ T902] Call Trace: [ 41.288815][ T902] [ 41.288823][ T902] __dump_stack+0x21/0x30 [ 41.288848][ T902] dump_stack_lvl+0x140/0x1c0 [ 41.288868][ T902] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.288898][ T902] ? futex_wake+0x666/0x950 [ 41.288928][ T902] ? kasan_save_track+0x4f/0x80 [ 41.288949][ T902] ? xas_create+0xe23/0xf80 [ 41.288974][ T902] ? __kasan_kmalloc+0x96/0xb0 [ 41.288997][ T902] dump_stack+0x19/0x20 [ 41.289016][ T902] should_fail_ex+0x3c2/0x510 [ 41.289037][ T902] should_failslab+0xac/0x100 [ 41.289061][ T902] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 41.289096][ T902] ? __d_alloc+0x42/0x8c0 [ 41.289126][ T902] ? expand_files+0xda/0x6f0 [ 41.289150][ T902] __d_alloc+0x42/0x8c0 [ 41.289181][ T902] d_alloc_pseudo+0x23/0xc0 [ 41.289213][ T902] alloc_file_pseudo+0xde/0x1f0 [ 41.289240][ T902] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 41.289276][ T902] ? _raw_spin_unlock+0x45/0x60 [ 41.289300][ T902] anon_inode_getfile+0xaa/0x190 [ 41.289327][ T902] do_eventfd+0x17e/0x390 [ 41.289359][ T902] __x64_sys_eventfd+0x3d/0x50 [ 41.289390][ T902] x64_sys_call+0x2503/0x2ee0 [ 41.289414][ T902] do_syscall_64+0x57/0xf0 [ 41.289437][ T902] ? clear_bhb_loop+0x50/0xa0 [ 41.289467][ T902] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.289497][ T902] RIP: 0033:0x7f06e199fb19 [ 41.289515][ T902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.289533][ T902] RSP: 002b:00007f06e284c028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 41.289557][ T902] RAX: ffffffffffffffda RBX: 00007f06e1c25fa0 RCX: 00007f06e199fb19 [ 41.289573][ T902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 41.289586][ T902] RBP: 00007f06e1a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.289600][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.289613][ T902] R13: 00007f06e1c26038 R14: 00007f06e1c25fa0 R15: 00007ffe592a2968 [ 41.289631][ T902] [ 41.570931][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.594614][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.047309][ T925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 42.056730][ T925] 8021q: VLANs not supported on lo [ 42.084487][ T452] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.153084][ T932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.163455][ T932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.236125][ T452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.247334][ T452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.257197][ T452] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 42.266334][ T452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.414386][ T388] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.566329][ T388] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 42.575470][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.584529][ T388] usb 3-1: config 0 descriptor?? [ 42.682428][ T452] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x1 [ 42.745216][ T452] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0005/input/input7 [ 42.775052][ T452] hid-picolcd 0003:04D8:C002.0005: No report with id 0x91 found [ 42.782914][ T452] hid-picolcd 0003:04D8:C002.0005: No report with id 0x94 found [ 42.791597][ T452] hid-picolcd 0003:04D8:C002.0005: failed to configure display [ 42.903044][ T958] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.923728][ T958] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.967644][ T962] capability: warning: `syz.3.197' uses 32-bit capabilities (legacy support in use) [ 42.977920][ T962] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 42.988189][ T962] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.002526][ T962] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.016821][ T962] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 43.070727][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 43.089564][ T66] usb 2-1: USB disconnect, device number 7 [ 43.214427][ T311] bridge_slave_1: left allmulticast mode [ 43.224377][ T311] bridge_slave_1: left promiscuous mode [ 43.230056][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.254359][ T311] bridge_slave_0: left allmulticast mode [ 43.260092][ T311] bridge_slave_0: left promiscuous mode [ 43.274494][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.387232][ T311] veth1_macvtap: left promiscuous mode [ 43.392806][ T311] veth0_vlan: left promiscuous mode [ 43.441824][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 43.441844][ T36] audit: type=1400 audit(1794191942.369:345): avc: denied { read } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.780318][ T36] audit: type=1400 audit(1794191942.699:346): avc: denied { read } for pid=983 comm="syz.1.207" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 43.805435][ T36] audit: type=1400 audit(1794191942.699:347): avc: denied { read } for pid=983 comm="syz.1.207" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 43.828257][ T36] audit: type=1400 audit(1794191942.699:348): avc: denied { execmem } for pid=983 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 43.847603][ T36] audit: type=1400 audit(1794191942.699:349): avc: denied { execmem } for pid=982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 43.867063][ T36] audit: type=1400 audit(1794191942.699:350): avc: denied { read write } for pid=983 comm="syz.1.207" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 43.891074][ T36] audit: type=1400 audit(1794191942.709:351): avc: denied { read write } for pid=985 comm="syz.3.208" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 43.914176][ T36] audit: type=1400 audit(1794191942.709:352): avc: denied { mounton } for pid=985 comm="syz.3.208" path="/52/file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 43.936484][ T36] audit: type=1400 audit(1794191942.729:353): avc: denied { read } for pid=297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.959915][ T36] audit: type=1400 audit(1794191942.809:354): avc: denied { sys_module } for pid=983 comm="syz.1.207" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 45.140726][ T388] usb 3-1: Cannot read MAC address [ 45.154444][ T388] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 45.184542][ T388] usb 3-1: USB disconnect, device number 7 [ 48.634302][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 48.640510][ T36] audit: type=1400 audit(1794191947.559:434): avc: denied { read } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 49.499583][ T36] audit: type=1400 audit(1794191948.429:435): avc: denied { read write } for pid=1028 comm="syz.3.221" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 49.532282][ T36] audit: type=1400 audit(1794191948.429:436): avc: denied { execmem } for pid=1025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 49.552080][ T36] audit: type=1400 audit(1794191948.429:437): avc: denied { read write } for pid=1028 comm="syz.3.221" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 49.579470][ T36] audit: type=1400 audit(1794191948.429:438): avc: denied { read } for pid=1026 comm="syz.1.219" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 49.602012][ T36] audit: type=1400 audit(1794191948.449:439): avc: denied { mounton } for pid=1028 comm="syz.3.221" path="/56/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 49.624533][ T36] audit: type=1400 audit(1794191948.449:440): avc: denied { mounton } for pid=1028 comm="syz.3.221" path="/56/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 49.647132][ T36] audit: type=1400 audit(1794191948.449:441): avc: denied { mounton } for pid=1028 comm="syz.3.221" path="/56/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 49.669745][ T36] audit: type=1400 audit(1794191948.449:442): avc: denied { mounton } for pid=1028 comm="syz.3.221" path="/56/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 49.692291][ T36] audit: type=1400 audit(1794191948.449:443): avc: denied { mounton } for pid=1028 comm="syz.3.221" path="/56/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 52.115770][ T1051] 8021q: VLANs not supported on ip_vti0 [ 53.983009][ T36] kauditd_printk_skb: 138 callbacks suppressed [ 53.983030][ T36] audit: type=1400 audit(1794191952.909:582): avc: denied { read } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.012740][ T36] audit: type=1400 audit(1794191952.909:583): avc: denied { read } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.036206][ T36] audit: type=1400 audit(1794191952.939:584): avc: denied { read } for pid=297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.979600][ T36] audit: type=1400 audit(1794191953.909:585): avc: denied { execmem } for pid=1062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 55.003360][ T36] audit: type=1400 audit(1794191953.919:586): avc: denied { mounton } for pid=1063 comm="syz.1.231" path="/58/proc" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 55.026189][ T36] audit: type=1400 audit(1794191953.919:587): avc: denied { mounton } for pid=1063 comm="syz.1.231" path="/58/myproc" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 55.030451][ T1069] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 55.049920][ T36] audit: type=1400 audit(1794191953.919:588): avc: denied { create } for pid=1063 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 55.076711][ T36] audit: type=1400 audit(1794191953.919:589): avc: denied { sys_module } for pid=1063 comm="syz.1.231" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 55.097766][ T36] audit: type=1400 audit(1794191953.919:590): avc: denied { create } for pid=1063 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 55.118093][ T36] audit: type=1400 audit(1794191953.919:591): avc: denied { create } for pid=1063 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.597308][ T1080] netlink: 72 bytes leftover after parsing attributes in process `syz.3.236'. [ 60.133818][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 60.133845][ T36] audit: type=1400 audit(1794191959.059:624): avc: denied { execmem } for pid=1091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 60.162662][ T36] audit: type=1400 audit(1794191959.069:625): avc: denied { mounton } for pid=1094 comm="syz.3.242" path="/63/proc" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 60.187433][ T36] audit: type=1400 audit(1794191959.069:626): avc: denied { mounton } for pid=1094 comm="syz.3.242" path="/63/myproc" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 60.210009][ T36] audit: type=1400 audit(1794191959.069:627): avc: denied { create } for pid=1094 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 60.210367][ T1098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 60.230917][ T36] audit: type=1400 audit(1794191959.069:628): avc: denied { sys_module } for pid=1094 comm="syz.3.242" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 60.236973][ T1098] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 60.258227][ T36] audit: type=1400 audit(1794191959.069:629): avc: denied { create } for pid=1094 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 60.272515][ T1097] syzkaller1: entered promiscuous mode [ 60.286185][ T36] audit: type=1400 audit(1794191959.069:630): avc: denied { create } for pid=1094 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 60.291418][ T1098] audit: backlog limit exceeded [ 60.313433][ T1097] syzkaller1: entered allmulticast mode [ 64.184457][ T453] bridge_slave_1: left allmulticast mode [ 64.190182][ T453] bridge_slave_1: left promiscuous mode [ 64.214621][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.232582][ T453] bridge_slave_0: left allmulticast mode [ 64.238309][ T453] bridge_slave_0: left promiscuous mode [ 64.243969][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.356461][ T453] veth1_macvtap: left promiscuous mode [ 64.361981][ T453] veth0_vlan: left promiscuous mode [ 64.586497][ T453] bridge_slave_1: left allmulticast mode [ 64.592194][ T453] bridge_slave_1: left promiscuous mode [ 64.597875][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.605432][ T453] bridge_slave_0: left allmulticast mode [ 64.611081][ T453] bridge_slave_0: left promiscuous mode [ 64.616827][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.624612][ T453] bridge_slave_1: left allmulticast mode [ 64.630265][ T453] bridge_slave_1: left promiscuous mode [ 64.635935][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.643484][ T453] bridge_slave_0: left allmulticast mode [ 64.649263][ T453] bridge_slave_0: left promiscuous mode [ 64.654944][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.827737][ T453] veth1_macvtap: left promiscuous mode [ 64.833278][ T453] veth0_vlan: left promiscuous mode [ 64.838953][ T453] veth1_macvtap: left promiscuous mode [ 64.844518][ T453] veth0_vlan: left promiscuous mode