last executing test programs: 41.623279899s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) mkdir(&(0x7f0000001180)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 41.502037003s ago: executing program 3 (id=39): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) mount$cgroup(0x0, &(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={[{@cpuset_v2_mode}, {@noprefix}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) (async) mount$cgroup(0x0, &(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={[{@cpuset_v2_mode}, {@noprefix}]}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) (async) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') (async) write$cgroup_subtree(r1, 0x0, 0x0) (async) 41.425850335s ago: executing program 3 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_create(0x2, 0x0, &(0x7f0000000940)) timer_getoverrun(0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'hsr0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0xfffffe0c) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) madvise(&(0x7f00000c6000/0x3000)=nil, 0x3000, 0xb) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000004c0)=""/80}) 40.553179586s ago: executing program 3 (id=51): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0xd7, 0x9, 0xc76d, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x28, 0x8, 0x62, @dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7, 0x20, 0xdc7, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004400)={'syztnl1\x00', &(0x7f0000004380)={'syztnl2\x00', r2, 0x29, 0xd8, 0x3, 0x200, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x80, 0x80, 0xfffffffc}}) sendmmsg$inet(r0, &(0x7f0000004d80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18}}, {{&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)="ffc16b3f5917", 0x6}, {&(0x7f0000000480)="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", 0xfc}], 0x2, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0xa8}}, {{&(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001a40)="27c460b02e574ec555bc2e1c52623bf2e4af039143c797a7cd92cfaf1312fc84f9c5b4e054f1d27960d4102454c1fb28a2f4210b9e3bc9ae41db261b3e18e7272ccbf13652d1d2266d8b0acd74bbfce45f9101d6f094136ecbbb8431f45fe689e8462f20104d49aa8c73238fb3a0526becee42917c886147dc21f27f34fe45bd1d85277f2cb3e4b596a69ba1838d9b3b22ec6f18c9a6be9bb1c47823e7add98913319415e39a8a0e76191c89ddb98e0453847e0b68e6a18710fd181e81095387f00fdf9454faa43a024f359cd51a78bcb7608e", 0xd3}, {&(0x7f0000001b40)="0737df43459b59b14d731a62fa1a160ac5a88b56c5e98ce100db1cd7cc86871bcca005a5c73e0f3ba7809811021b48c1fe4c1f8382352d", 0x37}], 0x2, &(0x7f0000001bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x409d25f6}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001d00)="9f3452f4615573c995efa086b4afee1ef5637c13d3c295ad6d0186d597fe3629091e3856fa012af83e7121b8b1f21db16b2538af0de089a1b52f738319c959c9e2c3a1b661da329890fe0ea927408e11df659e6ce8833ddd6bc7bf02759440671b1a0c9dfde806fd2e9f572ce375e1ef32c6645b7719ecb3e8526de4e02e0b2b80d765bc5ab2cb01a5123456f6b10d2e516926e42578dca3dcd52a86eb28dec383fce3fba51e0cc5f2747009b94b7f316e4b9b17a838b75856a25eeb02a1d3c41ac244e7a42b3230397d9c670aa68a3c1511bd38c1d7deb12496aeb64ab372c7a6a3b7bf", 0xe4}, {&(0x7f0000001e00)="9d8c763eb4e1bdeeb6d3398f9d02de3a84a605867e5201e4a512d431ab23d0c445fdce4dcc4d26df9a389107cb553566971d57eac829a9d1f9bd312c2a54afe8b0eb85e9ad0163ef6d7cdbf15ec4850bf86cf96e051742f4f4a1ff39a77ac965bb961515fc6c5ff97ad9300c4b42d5fdc24c30517a", 0x75}, {&(0x7f0000001e80)="208e68c6e5490975bd126a0c7d1ffbbcc094cffec134a484a781bc3a934ecfe5fab8d885000d3b92109a952bf6f812c2210e1a62743274cf55de5fa038aa7b301896380baef52290fa25e628b176fb0773177da11efef454a89a0dec2dc119d91191a553d3f6eb7d52b107f0d106649bedda2487ec73fbf01bbc1b7e7883e17210c3", 0x82}, {&(0x7f0000001f40)="3e669e1dc15f3d2e4f5bb58e1067a104de0834aaca95874598597878190acaa370f9130fdcb3dde718ce05eda5754d055bdf426e5ad9e346a3f50c73cdc895b0b5335ef1b9289520c0ad876bcecafe2c9e25f1cd0acc3fe23c0607d1ae54", 0x5e}, {&(0x7f0000001fc0)="2dd9ae43f867c0e62b11008ea556779c11b3210cde697528264399ae2b246ea1b59e92b1ecb7052a843478830a7b9aa8dfb7e3bf993fa47b5625c5decc26f8c25e9dc219a274ec866c815120f18793e097dd483f0e1945c051dba4e4b0d1c34f650c5f54ed08c878398d", 0x6a}], 0x5, &(0x7f00000020c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000002100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000004300)=[{&(0x7f0000002140)="f239cfa2a3080cd7f601caece39e66a51fecd00011901cc440e1e29f3efc952df07274299110c47aea1503d61a0a7af2ece529562e1f388af3634723eacd271e3a9f4191178ae6c3", 0x48}, {&(0x7f00000021c0)="db28516ab23b9edf88eb931fafe95df1308d0f7cebf640eded2e3222848b01568794e5828767dfdfd332742d0f868982de14c27d43488120a02abddb0a3df18bf2a4b280b3c977bac2cbd124d4bf507a486157b1ef59aab69c07c17c2ab5f779a3084dbce99cb4e0affc7ef2a9af35cf4a9190", 0x73}, {&(0x7f0000002240)="4740076bc3a2a1cf2bea7ece5709bc88a88c2f7a6123515999025c4552735d540b85a5b9cbb4d5f1fb14994c27588fa5679edefb591b77441aeefda7f01366cd62089a0277f6f28be650438aac733f8385889f879dc1e45df60e067ff339fbd116e4e3c2329e3626b514566e94dbf5ce291cf059a9a6fc85980a2567142f601b9d5c245da136b62c12613c779368350a67605a6b291c8b1788175e597a0372a20da44424d86e4437d6", 0xa9}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="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", 0x1000}], 0x5, &(0x7f0000004440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x14, [@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x34}]}, @lsrr={0x83, 0x1b, 0xb, [@private=0xa010102, @loopback, @private=0xa010100, @loopback, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x8a, 0x3, 0x3, [{@remote, 0x7f}, {@broadcast, 0xe5}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@private=0xa010101, 0x4}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x35, [@dev={0xac, 0x14, 0x14, 0x1f}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @empty, @empty, @local, @local, @loopback, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xe0}}, {{&(0x7f0000004540)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000004c00)=[{&(0x7f0000004580)="b653cb15639de64857e3dca971eab25e037d7d98edef9bc508805eaef6d59c152f2e7d741aaac0c03fafff9ba6a4c64a27efbfb5a8af2d1438d7c524f9264621cc4034c44ee98035b4068cb3437575328a9d5ddbf16edf04f2f6bebe6cc1f225e393959f2887279d5276d02d7e302d9050f3d654e54a4e30ecc0621ee23160747de68812a2526273991b0a3d96ad689b5bbe40289f3637fdb89dcdc7b27133c6d2af0fc0c09ff4e1c4834f2316e6ebad672c1b39c873751a28eb422701ee882f2814f54ac28f5ea29de2de06823324a260a3", 0xd2}, {&(0x7f0000004680)="841898bb332196aff1010249418ab4b550ed10b53ac2d108f9c7db38b05e3c0f90d34bdc69e705270ba56755df450abbc95e77ae776e9319288b4588ad0bd6912e9ddd7c2b44a303426f50c1dcd3277af086359347dfc2b40d430ff80ef94a55dc80c171727a69fd46dbfd317c17361c6c33c654edf85f97d2b65b8046e637682d96a2fca60f10", 0x87}, {&(0x7f0000004740)="caa5ab0b257a4e44694d322aa437d71b89d5761a06254d128eec950478ed837d7614243ab678a93756490932589a3d24b2dad503933df05cfe98aa5b78213f79fe01e3e05947dbcc434a4814af07c44c77a2e71fd58cdf1b56243fb080fdc47af4c0ad8e6d829c622ce2c0d5d163206c1c6fe0d47cdeb5930c33f5c1ac7aff75a367e9a93e93b4a50faf316ff1c0774bd04327d211eb2e34fb806af168d54792a96a05af95ffb33dfac738c925b53ceb0e8aba232d2a1b31e97dda491df9cd24f0a85a19b9287b6f6b9c2ec9166df8359ea91258f919a19a0b344c6fde", 0xdd}, {&(0x7f0000004840)="224622d2dc6212305b0f4da13ee48c90f2b37511ba5be8ba8582475ce5fceda56cae4c5c49d54f75ee86d84f80fb4414e0482243f81416144deaace0207ad3ed4ab753eb35b0e60d523dec30aa1cb4cea466d3d9e2", 0x55}, {&(0x7f00000048c0)="6f2d0f2d2b7fe05ef0f20e99517cbd251005255e9fee9672049c5fbfd1c826dfbf3a09068071f9e9300a3886485db37c6dccf46c2fb12b55cbe7970174b8d1cc4fed44dfb702c395e902f8f277ce41292c283e335759e29ad161a8124874cab25eac7df92262f43d1e8052e893b0e00ff97ecf8e084fc1f4f9d5863e780874ce66e60960ca143d6c14228004e5bc88bdcfcb5be1cc511e6f8493e38da03e40132b9ebdc579086efa7fe033c70d4906b15046f61e77d754698ed2a55ee16d", 0xbe}, {&(0x7f0000004980)="c4f752c8498af4e6d2f87fcd", 0xc}, {&(0x7f00000049c0)="68fcf1db750e88322e1aba23ed78722cf219ca7c52c26b95d5bd1b49bee99b4ba795c96f942dbde3e558b19d411130a87fc4b8552ef0f8b2ff217d0af64f996c135c266ec5fe353bdf37d946027f125f22b61436f055cb6017afa8843a200d", 0x5f}, {&(0x7f0000004a40)="64ae3e588c83bfa7243eab956f426903d16d5ab32ea269ef214e7a1eef271558209c79f426756fbf058b2f682a3fc2d784b75497d3e19cb542025a23410efda6c12d01e6ae6bdf059f287473cc3634382f4f8ccdcab5b5a764f3c1146ba1b027bbdbc3eb8159dbf4f6fce39a5095f1c48c085bcbc6c2d76e3d212154e350c35c0eaf85f0543f3ea7b345b33c7e0231bb385ff4be69fdd393823a5e95ab3025458d1c080535987ea0f525aae8b6a3dd43460fd4423278db8833734b69e8ddc920e3e1e94bf80a3ee81515635f84a77ff404a7fc2283e02a072b8eff53428bb7cc65f73abb81eb6674323866de091fef5ab8", 0xf1}, {&(0x7f0000004b40)="a4a1ea2b93231b52f500e6fb0594313569aca839f3a09950345a79d9d184281245d63b129259ef92a3c28055337b8a0f81d2083dc904b420dd5f5524864c1b5a5317687e585708ed8d3b45e73523a6eb09d77efb7413ca8003004806ad429efad0de75188ce78628ef390328a55f00b722959c4ca8d8ab92e0ba8ef40673dd87816b5cd4e76eca24c47dbe2ff8e4623e6698247f818695ec0742fd40563011792e73bf918f47f6934b7881004a41aeb5b363", 0xb2}], 0x9, &(0x7f0000004cc0)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xfc, [@private=0xa010102]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast1}}}], 0xa0}}], 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioprio_set$uid(0x0, 0x0, 0x4007) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, 0x0, 0x0) ioctl(r5, 0x40104d07, &(0x7f0000000a00)="000002000000000000000200") sendto$inet(0xffffffffffffffff, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f0000000240)) r6 = eventfd(0x10001) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000a40)={{r7}, "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"}) umount2(&(0x7f0000000140)='./file0\x00', 0xb) 40.502248647s ago: executing program 3 (id=53): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 40.501652187s ago: executing program 3 (id=55): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) (async) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (rerun: 64) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd2d, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086) write(r4, &(0x7f00000001c0)="1b76e967fb0039d481bec9cd497b5661d98d2511285b8453b73ab81adff856aa5112a10fc4e81d82d31abbcd2e079ca42fdabbc5ef27058546d6be2d28043e875fae3123209de9515be053267d8290f5b4802013c2843621ee0b0adca4f3c3de5a12c43dd18fa2f7e0f805382dc3c1b743573e9e19efd5160281dce24421e67aeaf83b81a6b8f5f7fbe6a22d3202e33b9a0416ce", 0x94) (async) r6 = dup3(r2, r3, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 40.435014759s ago: executing program 32 (id=55): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) (async) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (rerun: 64) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd2d, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086) write(r4, &(0x7f00000001c0)="1b76e967fb0039d481bec9cd497b5661d98d2511285b8453b73ab81adff856aa5112a10fc4e81d82d31abbcd2e079ca42fdabbc5ef27058546d6be2d28043e875fae3123209de9515be053267d8290f5b4802013c2843621ee0b0adca4f3c3de5a12c43dd18fa2f7e0f805382dc3c1b743573e9e19efd5160281dce24421e67aeaf83b81a6b8f5f7fbe6a22d3202e33b9a0416ce", 0x94) (async) r6 = dup3(r2, r3, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 29.865840185s ago: executing program 1 (id=162): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x3000400, 0x0) memfd_create(0x0, 0x3aaea528bbe6e4bc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1310010, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@uuid_null}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) 29.795644237s ago: executing program 1 (id=164): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) 29.764391588s ago: executing program 1 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x20000002}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x17f) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x4091) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r3, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @private1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x20000002}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x17f) (async) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x4091) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r3, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @private1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) (async) 29.606131792s ago: executing program 1 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x13d) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) pwrite64(r2, &(0x7f0000000000)="f9fa", 0x2, 0x2) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f00000001c0)) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffffe, 0x5c, 0x3}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x10) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="440f20c03509000000440f22c0266744a200000000b8010000000f01c1f3c15c5900f1c4a3316cbe000000000ac4615253cf3e36660fddae875e38b5450f0fb4ca00000000b766ba4300ec8fe80097d409", 0x51}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 28.941831878s ago: executing program 0 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0x1, 0x2000402) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000e8f000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r5, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) (async) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000001a00010000000000000000002600fc002a5e247b0000000c001b80110000007d000000b0662f7718fa78c61d03fa0f00c311f5e4eb58f23994f507bf"], 0x28}], 0x1}, 0x0) 28.720727313s ago: executing program 1 (id=188): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, r1, 0x0) (async) dup3(r0, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0x9204, 0x0) syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100020020fd070100400001020301090226000101404005090400009d0100000477fa194d072403000000000905060300020e0c9804250100"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000100)='}\x00') (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000100)='}\x00') 28.601181406s ago: executing program 0 (id=192): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) 28.579310536s ago: executing program 0 (id=193): execveat(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, 0x1000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000740)={0x10, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x86}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x40, 0x19, 0x2, "b700"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, 0x0, 0x0}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x1000, 0xef) 28.544481507s ago: executing program 1 (id=194): r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 28.41975887s ago: executing program 33 (id=194): r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 25.556915169s ago: executing program 0 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) openat(r1, &(0x7f0000000080)='./file0/../file0\x00', 0x10000, 0x100) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) read(r2, &(0x7f0000002100)=""/4096, 0x1000) 25.069400621s ago: executing program 0 (id=219): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a8700000000000600003693", 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) dup2(r1, r1) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000040)=0x2) fcntl$setflags(r4, 0x2, 0x1) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="120110000000002082050c004000010203010902930003010050810904000000010100000a2401000013000201020924030305030306620904050000010200000904010101010200000824020108020402072401840900000905010910020c077707250100080300090402"], 0x0) 25.010351893s ago: executing program 0 (id=220): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) close(r0) 24.973498794s ago: executing program 34 (id=220): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) close(r0) 24.180363003s ago: executing program 6 (id=230): prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x80) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x9e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000540)={[&(0x7f00000004c0)='/dev/input/event#\x00', &(0x7f0000000500)='/dev/uinput\x00']}, &(0x7f0000000380), 0x1900) r9 = syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffffffdd, 0x2a44) r10 = dup3(r9, r0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r10, 0xc0104811, 0x0) 24.127814335s ago: executing program 2 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) (async) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x100, [{{0x4, 0x3, 0x8, 0x3, 0x9, 0x10005, {0x6, 0x9, 0x4, 0xa, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x1, 0x7fd, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r3, r4, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) (async) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) (async) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x80, 0x9b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0xc, 0xf, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0xff, 0x1, {0x7, 0x25, 0x1, 0x4, 0x8, 0x144}}}}}}}}]}}, 0x0) 23.325164864s ago: executing program 6 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) io_setup(0x1, &(0x7f0000000100)=0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async, rerun: 64) setreuid(0xee00, 0x0) (async, rerun: 64) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) io_cancel(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xb31f, r3, &(0x7f0000000240)="69d88cc3c744def64612e1e4b3e914e9c5bf8e3ba8b63f045692b013beab81936ad5828dfd3a64d9187e56af97ba67bc050172de5f54cedbe074a5f0c01a9a7350749f84b153725f", 0x48, 0x0, 0x0, 0x0, r2}, &(0x7f00000003c0)) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23.022136991s ago: executing program 6 (id=235): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109023200010000000009040000c10300000009210000000122050009058103", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x878502) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001", 0x1f) r1 = socket$inet6(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="160110033b5a3d40e11d02c1c356010203120902"], &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x0}) sendto$inet6(r1, &(0x7f0000000540)="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", 0x101, 0x800, 0x0, 0x0) unshare(0x6020400) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r3 = dup(r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)={0x200}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x2}}, 0xffffffffffffff92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x800, 0xfffffffe, 0x25dfdbfc, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x20048840) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20004841) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x2000) pipe2(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 21.097201338s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xd0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xf, 0x4}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)=@svm={0x2, 0x1, 0x1080, {0x2ffc, 0x1}, {"f5a49046f5a496b1813f2fd9b043b43ec999b7019212a4942a0c510983e0619f2e48600a73e3d3bb9fac6aaa867b8fe700f7de75e5d195b1f9d10696e0f562da989c25837a2e6faeb16fdb111f5557c06a40ac5efd5eeb338e9b92d7f6242c26300885b1e706acddb16fb4700545b9c4805175f57197853af915d44cb5b1ae6bbdf5d52ce15051193f5ef5ed25bedfb0b414ca8825279b66fb2beea571e495d14cdbfffcb406ae8c819db82c6442013132676381d878c030f0539f754293e199e0c47c890ea1ebf27e1005a75e0dfc2d97ea1eb360f86a7032e694b0d212447eb4b0d022d89de516fe7986e0ca95a960930ab7203aa82f7ef4fe10d8dd1d2c0596751245e742c1fb7647eff78d3e35449e0a0c938d40b78245fa513a9084ae294bbbf191b6a02e277e2b93942a68b708ecddee3bc5878126e72c0105b075a10b1ba35d452602ea9d2dda38358f4785600a58379955939900008b38c7d529e2fcc9b937d0afa6349660caeb879d7aaa4f3d308321f1645b5cb80676d8c4c4d4a6f71f9f6bc030b1cebbc46e11e93dbe03c5cb8ecd2d838354584a1c7c661a004406a38061cbd88ad7f47c7e6b912e57e55543c0c3e82866cab0510210f41bc286afdea48cb5d9c06acf3963b0f7c818222534fc9b97a8f469ace51eee2375afc4c919d7a62ed7bcc386e68b9489cbffc8102a6d0e54427bdb8dd53eba70b02cf82e8ae5745b869ed8a8e47b10571ceabc5f6f775d332ac490bda9ca701111f81f311729045a45c3fd739b97967a443df8be3a1c0301e86816d67809518de9dddb1a365076f470a8b9affe8d0bd8cede71f23673a6584bccf8e06c61140e90c57b049a9f2d3deb441a403064e80b8968ab9581bacae2533a5fa3b1d46f68ff19d8989e3af605c520fb0822b1fc5353acd49dd595843d56e1aaa0c25a4f074b1856a0ea4e09fc9c3134c4335b3cd2bddb6a84b2027dc0b60b187287547490be5588eddbf5a8c99505183a65c20755addf42d725d316243a13ba7fa3851961a534d518fb60ddebe8c134c8a2d243ad022563d993a2fdceca3db7ef748bfc791f9c4ca30f27211502cffd784501a2fd72e15e60920bbdec1cb78f2c485abea439b5ca80dbf986ff1e1c43a1c251297e0e3f8f094fcb8afdc5b6f5e4074c6aa8bfc3f2a88f5cf5a0e6ff678f5d59d3e7364970e6d2568a1e24ef9cb7bfd76b2804d474e6047c5be919464240d063ef5343d46385102e2c6df56e8a15926af56dbab3b3678612716a117ab98b3646fed71f0706b586d9007e87eb07270a286172f55fc878fb1bbb8727f30f85d8f7e9978dab23afd884a39c959d32bffcfb3065b5b9a524bb83b124f54d6be35e0ff2ef3a0e93b870fde70d25f1bd1fb03d86cc2953d66277919446d508cf7eedb56e571fa9f9a0a7c88d606f3d197ee41f385ead472b0659f56dd559a132346ddf1d2bd004f29064d210497bcc804e7b55f5bebff8913d051ec096ad8686c88ff85187bc5bdbfe7c76902ef488c929bfb1749e2dd308a9e1f6fa61b9893cdb6f9cd635a788d31d159db0371cc18c3cce18c983132f78fbcc47b210bdfd978133d02f8713c133e45e62af85aeaa04ec0a4175004b62067baf15897231f3e126ac28e539aab272ed848a145ad32751329487d3e8b5fb223c06fdce7026409b06b4150030506751feeca27307531fd37ce7ec05795c08b0be4e05c28fe1b0dd6224e507bacd604f27df8665045f54f01db7ce78f10912a631f36702ac2d20fae0d0ad91da79fef1acf7fcceea2880a891d83dbcb9707649e4eeb0c42992a3014dda20f1f53a18ccde08d7b524e07214b988e270db8059f1ce850c9ca54e9407e51183aba29d01cfb7111c42faaa67052a4da95af6bb9174d65f5a6278f028506bfb035e77c390ac9b4bdfc4c49f7178b1676c15f5d1f42ce24437b2b207193ad13d71153b6571900a078a33cec84d29e0dbf174683ddd410fdde562cda1f24cc73d33bf8340db6c564739134e2826d8e87217d0a5fc9c5b014a792bfb593ab6ae8b676e0a3126e1f593911cf25fc3f75ade1f3e0504c54e567a478b8d4e965fa4e0d740494ec08ec1ec7b72b8fd6cc570cd1a52c16d81c8d63a51f0777f18e02663b6a697f90fc82d0bf4e6899835470408311f87394177edc7b384f6dd37068088c1d44a6593252169924d5ac6c463fd480a86a6afe03c8861b9fbab714c5573c87bd1aae9141162cb6c1ac1970cb4b723974fd4f673644748a56218037ae5f3dfbb017aa0b5311b9fecbad2b509a7358a33620bbfef960690b9b41d66d1a6e5918597e5f9c48490b555802e7f8768b527332fd433f7ae9629c721e1554e15b9d82c7930c418dcbe866d1356566b1b0b78b2d1ec5648854e4c429bcdd765024784484c782dcfba719efab148bde57785c655eb823aaa21ae3c45a2d9f0f7442a2b0da751c638a9adb92acc393852826ae555d88cac553c3dd675eda3abdf927298b353fd74e06f4c604eabc49ed04b74ae379e5b931b4bce2ada640cc9333cfc1a096270ee8b3f638f3bbad815b1b4ed6d8e3b3152165174272b222e0aa42788e350c55407fe071c0ec7be5b00616a0c41406ddabc904605cacd1848e191ed8465b572c8d3e71f5b43178f8b99ab0bbe309c7571f0e99a20cb63164d75b75781567c299c238bcd9fde46de958f7a8b2fc70160183fea92099d51facfc3866d7939d2d6ccd603aebfb26cc2cc485a796262332334c138ef3c18e9e6037fa7d6160ed72a957c03e3d12d10073a3f4f176ab49a3d1e6d59b2fea851adb862f7b7b5f6db9051f4cbb5283870146a2719d8201c9f75e42f084786921bf76e2b841ac09da4d9186818ab8376eac316ca83c805896959509ad0e1b9c58c4a05ff557fd7dc1d42d0827511de5f46ccc4cfc08e1a1c590f66353ce1baaa1ac9086e755594c4add88af2e0d73eef99e3209bd015f5a2351132d5cfd4416dff3e3d74e088cec2e8d866e985bd51f9b056b07d2996f6b6853cac0a4ad4e70fc80d6cc39f2b947f05e6db04160b03b219bedd11d9b59f8bdc23d97d60132e59daf150e2e4ed54aa99ab492d504d5d76b71292dc773e911189a7cc403a4bf7651584c6462e4d581e63adc3eaf3538e29d3bb9c0d26dc614a71e2ea841309748be22e6d0ce535a8ef4c8037e2f1ea6753297f2d40caaddfe825b0c448a261def0595169b93cd2b14c95d03afd0cc6cef4a5724ed9479093736f913060ed67f7c611b79b7ccdcb4d4ed6e2861f544180b377d407eb76da452cc79f7d7ba3234d240120bcbc14ebb927c3aad69edfe99ae47654025bf1e03aea9c3a84df2e1dadb3dd3d8fff2d42ada8f6328613441c359019c3dc0ebf54360661446c823553e72b5ebc1fe4b925b00018f52b3749ad6422c9a0231e778d9922bb3738f1568a322fd448c882396298f051302ad7847c21f51735f1b14df12f95187368d97356172a8f00f423cafba34684517bb460968f0ef4a01e7151ec7ef494d49ead84131ff23f20315464a732de740e067652b3e8bb6978bde89814fdaa5065bf2174fb87b84ef942b3ad44e7b2bff286c8f662134ab3259ac3329f35e470ca9272ed48dfb7dba9f1f5b05d9f6a9e050e3344bf9408cd4cf7ea93387fe78bf54fe0d152e9d1612f36ffa32bd121bc19934830cc5bbd386c47d6943408599da8dadfe6667bb5dce4808776b27edfc3b4a29d8ab2949877f30812c733cb170246cc56f4fee2c1da1ec2328d9630534831c6e29314b32ef8228ce072d4410a0f7f2b671904587fecd20e98730c5247fa452919c89479cb13f4e398972e04cd018406faacc6e9203455a9d2391bb4186e7f5ded97c54fc7803f7d1dbac0b22883315cc68947a5571b6164bd9de56c84da6fd9b4b888c638b01d310b0904330e014d8b6689800cc2adb95ba2d6ecbf96559a92106fd2713fcbe1d5baf23e5670598b33c013edc729cf796bc9118abd989133b585c67b71b27378b618d212a7104d888a223db94a76363a59dc203c28cc67c3d741cb39a613518e6f01ad8213f7d1816136a90ebdb50fa12583a845819e2ad7a5e6a5b55b21282abdc7170a26ed71f31590048278a6501270d6de1581a1f98866209874b15996e20a380dd3c2f8f2c5ac6a05e138b54eb5dfa0cc2cfb05b4e61e0b51b3e8ced3ee2e0079aef6ee817f25573676475609a2f411da45d7fb0088974b17e25703e4106368267022155cdb0192417ff0ae83a02337426bc0ca1eaf68a573ed6a6ff73e7fdb4a360827bb1361303eeab79b80799f6b6da1f4843f2b2510e3ab7624f79f6ba8940682d70abe74056686fc003fbf049fb69685dac2d5409356a2fbbcc9edeabcb5907f516d2fe03a99e56eb1d2a4cc1bc004f01b1e54ffdcd52574b4eff423f1f01de6783126e54c3c52f1f50c93421d469434d2ea57495899bd5970daa9655723de2af169bc4a922e856d36ca1a206e25b775c4f37f275950998a45f347fd030e5dfc0d964969387382451389cde1ad63def57f11860ddd37619e7121968b73d5d48599ad8fc50571cd69c4b35475a5b2f78dbaa3241caf09cb0fbe4a12b5bc44a65cd941cddf8b49f9a33221a643f1ff57c36a4723bd95a6f4ade9d01081960c8475d0494a1682a9cc6c564205d7f3e89c7e026de42c29c4b8b6ca8f63123799716ff6084626d1d7cdccaa79a071a5c4481ef05668ab0bcab64d7d40bddcbf6068bf090b1e9bc9dafbf9171e2eab88a2221459c147e499c25f1e1fce04afd51ff313f169aaba885ce2e7226e4a96f9deb0b43c13c336541ead92bcd6e24e345c9c048e5e1d185c4661e629e9457277e2e076bb251e42100ea037e0af8132f280cdc7c24d7da264139b0fc1804c231d40362964d06e8a34711a9596a1f8cf8f2f77d5c60072bcb7ecf417ad12471a34b95773af7153756bbaccee91ef711b8dafd8e4feaeb9b5213282715fd1bae893d1c5485662a7ee7700fb523a142bdf50c5c24fb530f48ec377dfaafc9fb0b14dc208892ab668556835929b4045710650a1de8bff82923b62a00c0fbf6d8475ed7c716c707fa0923db42ed0b0bbdd099815e65e7acb58faec8bbb64d11d64f51f2a2033ddb874c30fb7456bf0559e0af5beaa4acf6c227822837afa9e986e6f1c771478531d8eba9e34d307dfc1daf22aff6087bffa87c99dda1baed27cdb8204cae177c6639fb06efe421db017d40228076132e4eb0658dbf67c5109847c9cf2f770e9e6174c59778a874fffb5a43e143a26af5b8ab5bbc6876310a12ae3151523644abf1e4acb55754664f157789e3d12e349dc6cbbe5a4f02703b8ab0fdf4144259dd77ed51305babcc864a6cebef6f0cdd2dfa0ccdf62f9450fdc07f6d8432fba41603b3ed2c5241550cb932a23862248a136b97b6dc6359e564e94ba16b8472e982f249f42452dafcb5ad12240b993d94bae3d5e2bdc365760f157fecf08efd951a59e88eea1e138a534e19ffa01a4a0f17d28cff66ddb239badf62c91f2923dadb7b3994c3cdb39458a02aaa5098ee60a819a4460916b007d8080337fb6731d50dd27a69394532898ee8f599ae26c89eb83e4fe688b6af7593bdec25ca54a1bbbf42ccfa01a3b149b1f0d3452bbe60a625290d2d5b55a72aabe494c9d1cc4ef63c31fc109da741920e683781872b228f2a9dd36a611b65b6f4e37c9ef811e899f6ffaafccf4442707b239de025f0e0ce8ea55203a26a0ca7d49b0c9ebfe2d1a31a24e2b01517c8edcb0d4d78508bb048142d3f8f5beb93b"}}) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001340)={'xfrm0\x00', 0x2a01}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) fsetxattr$trusted_overlay_redirect(r6, &(0x7f00000004c0), &(0x7f0000000080)='./trace\x00', 0x8, 0x1) (async, rerun: 64) read(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000526) (async) inotify_add_watch(r7, &(0x7f00000012c0)='./trace/events/sched/sched_switch/trigger\x00', 0x44000201) (async, rerun: 64) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/120, 0x78}], 0x4, 0x3b0fd239, 0x58) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001400)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', &(0x7f00000013c0)='pstore\x00', 0x45002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) write$binfmt_format(r8, &(0x7f00000001c0)='1\x00', 0x2) (async, rerun: 32) writev(r3, &(0x7f00000000c0), 0x0) (async) write(r3, &(0x7f00000000c0)='hist:keys=common_timestamp.', 0x1b) 20.035633174s ago: executing program 6 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = eventfd2(0x7fffffff, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x58bd}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x58bd, 0x2, r2}) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) (rerun: 64) 19.890260227s ago: executing program 6 (id=255): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@random={'btrfs.', '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81'}, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 19.875367417s ago: executing program 6 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x14b042, 0x8c) mkdir(&(0x7f0000001180)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 19.804908829s ago: executing program 35 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x14b042, 0x8c) mkdir(&(0x7f0000001180)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 19.660986273s ago: executing program 2 (id=258): socket$netlink(0x10, 0x3, 0xc) (async) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendto$packet(r6, &(0x7f00000006c0)="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", 0xfffffffffffffeb0, 0x20040880, 0x0, 0xffffffffffffff6b) (async) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1"], 0x0}, 0x0) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_ublk_setup_queues(r8, r5, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 19.261753472s ago: executing program 7 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8, 0x12) 19.181962664s ago: executing program 7 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002f"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<:An', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfa5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfbf9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]}, 0x3c}}, 0x4000) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0xffffffffffffffff, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x425e, 0x20000007, 0xfffb, 0x20, 0x3, 0xfff8, 0x41e, 0x200}, [{0x6474e551, 0x4, 0xfffffffa, 0x3, 0x9, 0xfffffe01, 0x101}, {0x6474e551, 0x6, 0x0, 0x0, 0x800, 0xe, 0x4, 0x100004c0}, {0x5, 0x2, 0x0, 0x7, 0x7, 0x8, 0x2, 0x10001}]}, 0x98) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0xa) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x7ffd, 0x0, 0xffed, 0xa001}, 'syz1\x00', 0x1}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 19.142885795s ago: executing program 7 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="30312fc3d2925fd4c06b323a303065c0eb", 0x11) r1 = syz_io_uring_setup(0x282e, &(0x7f0000000240)={0x0, 0x2457, 0x100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) 19.115583526s ago: executing program 7 (id=261): r0 = memfd_secret(0x80000) r1 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x90, &(0x7f00000000c0)="ee391a2b51949d23512bac60fac46becd2b21054a90c574b0014d9ae884ce579c35c8e31725b58a6719db62d52b45f4462e41aef5de65e6e27d21755b450bcfeedf1d5f279d98a9179cd2f3dbfa12978681b64950589c3ff8c7ae7c1a0efa3051a6388f07273434a9a8d1faaacfd67759e7d3f484604a809c142eed8cdc95e6bc373aaf543141bd0b9b07e95b58c7fe4"}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b0, 0x14, 0x200, 0x70bd28, 0x25dfdbfd, {0x29, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x48, 0x1, "a759775ec303a366aefb42455ff853bdb979d92fc0d8d1ab37dccb37e52a878fd585dc1e08bb8eac8d48b87b68e9e9c780b3915312a1913d580405076c60198d5a373a27"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "cd06c60b6db0013cc0e127ff0e1224d2c2cf346690f234ff5d55cab64aa04fdb040c09fdfb660b3a5e6e60c6a1f94edaf1808e911f9d2b46934277be557f96f29d4021cc936046ca131370d9805b3b94e71cbd3c11114492223fa95181d94395e2654b33ab53954982a193c66389ac2b35154f12adca"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "cf607454c5fcc8261a6f6935c04108d41143e26c597f52afa5f8b59c0f555f0e6312b740c005ddc6e939d63df9237fe0b6f05eb4f6b419c4c0f223fc2d23cddd1be9100b025b89b27af8ac20b34fcea514f938ebd6717dbbbbc3170a3a8020af11fa01f378dbfef9c62816001ab58b0c739ae1eaec0da0a02dc7b58f20182c025ed9fac8ab059ec9e2edc80d4b91764ea1f9a6163bf9269b627cf3d42dc72e12a503518ec850c1f75d5a0714eee4e86f4113814d7d206e4d1a60e10f56add046c739df6cc02f51797277bd677e754c9d"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40080}, 0xc001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) kcmp(r2, r3, 0x3, r0, r0) ftruncate(r1, 0x80000000) truncate(&(0x7f00000004c0)='./file0\x00', 0x67b) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000500)=@filename='./file0\x00', r4, &(0x7f0000000680)={0x5, 0x8, 0x1, 0x1}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000006c0)=0xd, 0x1) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000700)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x4044800) read(r5, &(0x7f0000000880)=""/142, 0x8e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20040850) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000ac0)=0x100) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r8, &(0x7f0000000b00)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) keyctl$session_to_parent(0x12) r9 = accept$nfc_llcp(r0, &(0x7f0000000b40), &(0x7f0000000bc0)=0x60) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000c40)={'bond_slave_0\x00', &(0x7f0000000c00)=@ethtool_cmd={0x34, 0x8, 0x80000000, 0x7, 0x2, 0x6, 0x47, 0x1, 0x42, 0x8, 0x4, 0x4, 0x0, 0xf4, 0xd8, 0x6, [0x8]}}) socket$netlink(0x10, 0x3, 0x7) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000c80)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000cc0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000d00)=0x2c) 18.14619403s ago: executing program 2 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x10a540c, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 17.339824519s ago: executing program 2 (id=268): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x2, 0x7fff7ffc}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x33, 0x0, "30a6f064cf2dd113fff8178536fcb1bc0bcd32cb7d9d9b7f7ffc8aa0e0b9963d0031e89ecf4aa9e53ae21f1e5fbf4d8467d600343e740d0b701feeca6855f4b9eada49e408cb997b75809b3ce786af25"}, 0xd8) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c8801}, 0x0) socket$netlink(0x10, 0x3, 0x5) 17.257822711s ago: executing program 2 (id=269): setuid(0xee01) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x83, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 17.204936982s ago: executing program 36 (id=269): setuid(0xee01) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x83, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 8.23026582s ago: executing program 8 (id=332): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000340)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 8.150407582s ago: executing program 8 (id=333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) (async, rerun: 32) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (rerun: 32) 739.580812ms ago: executing program 4 (id=342): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 738.783962ms ago: executing program 4 (id=343): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) close(0x4) 738.471782ms ago: executing program 37 (id=261): r0 = memfd_secret(0x80000) r1 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x90, &(0x7f00000000c0)="ee391a2b51949d23512bac60fac46becd2b21054a90c574b0014d9ae884ce579c35c8e31725b58a6719db62d52b45f4462e41aef5de65e6e27d21755b450bcfeedf1d5f279d98a9179cd2f3dbfa12978681b64950589c3ff8c7ae7c1a0efa3051a6388f07273434a9a8d1faaacfd67759e7d3f484604a809c142eed8cdc95e6bc373aaf543141bd0b9b07e95b58c7fe4"}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b0, 0x14, 0x200, 0x70bd28, 0x25dfdbfd, {0x29, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x48, 0x1, "a759775ec303a366aefb42455ff853bdb979d92fc0d8d1ab37dccb37e52a878fd585dc1e08bb8eac8d48b87b68e9e9c780b3915312a1913d580405076c60198d5a373a27"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "cd06c60b6db0013cc0e127ff0e1224d2c2cf346690f234ff5d55cab64aa04fdb040c09fdfb660b3a5e6e60c6a1f94edaf1808e911f9d2b46934277be557f96f29d4021cc936046ca131370d9805b3b94e71cbd3c11114492223fa95181d94395e2654b33ab53954982a193c66389ac2b35154f12adca"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "cf607454c5fcc8261a6f6935c04108d41143e26c597f52afa5f8b59c0f555f0e6312b740c005ddc6e939d63df9237fe0b6f05eb4f6b419c4c0f223fc2d23cddd1be9100b025b89b27af8ac20b34fcea514f938ebd6717dbbbbc3170a3a8020af11fa01f378dbfef9c62816001ab58b0c739ae1eaec0da0a02dc7b58f20182c025ed9fac8ab059ec9e2edc80d4b91764ea1f9a6163bf9269b627cf3d42dc72e12a503518ec850c1f75d5a0714eee4e86f4113814d7d206e4d1a60e10f56add046c739df6cc02f51797277bd677e754c9d"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40080}, 0xc001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) kcmp(r2, r3, 0x3, r0, r0) ftruncate(r1, 0x80000000) truncate(&(0x7f00000004c0)='./file0\x00', 0x67b) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000500)=@filename='./file0\x00', r4, &(0x7f0000000680)={0x5, 0x8, 0x1, 0x1}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000006c0)=0xd, 0x1) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000700)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x4044800) read(r5, &(0x7f0000000880)=""/142, 0x8e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20040850) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000ac0)=0x100) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r8, &(0x7f0000000b00)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) keyctl$session_to_parent(0x12) r9 = accept$nfc_llcp(r0, &(0x7f0000000b40), &(0x7f0000000bc0)=0x60) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000c40)={'bond_slave_0\x00', &(0x7f0000000c00)=@ethtool_cmd={0x34, 0x8, 0x80000000, 0x7, 0x2, 0x6, 0x47, 0x1, 0x42, 0x8, 0x4, 0x4, 0x0, 0xf4, 0xd8, 0x6, [0x8]}}) socket$netlink(0x10, 0x3, 0x7) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000c80)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000cc0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000d00)=0x2c) 738.372692ms ago: executing program 5 (id=345): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20, 0x800004, @mcast2={0xff, 0x3}}, 0xfffffffffffffed1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5801000010000500010000000000000000000000000000000000000000000000000000000000000100f60000000000000a00808000"/64, @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="000000000000000000000000000000010000123433000000000000000000000000000000000000010000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000002000000004000002000000000000000"], 0x158}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e80)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x20000, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x24048854) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setgid(0xee00) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x4, 0x400000, 0x4, 0xde9f}, {0x40000001, 0x0, 0x0, 0x7, 0x0, 0x9}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240801, 0x16) r10 = openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0x40046721, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0xfffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d5, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000003, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x73, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x9011}, 0x890) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2100000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000ffffffff00000000000000000000000000000600000000000000000000000000a1de000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a00000000000a000200700000000000000014000e00ac1414bb00"/183], 0x104}}, 0x8000) 738.295542ms ago: executing program 8 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000340)=@ethtool_coalesce={0x8, 0x6, 0x8000006, 0x2, 0x6, 0x1, 0x3, 0x3, 0x9, 0x221, 0x401, 0x429, 0x38, 0x8, 0x1, 0xe, 0x5, 0x0, 0x0, 0x8001, 0x5, 0x7, 0x206}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x3, 0x1, 0x1000, 0x8, 0x58, "ed9c52dafc9667fc112c93345e86d0a04e5fa4"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001780), 0xc00, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000017c0)={0x8, 0x1, 0x3, 0xef30, 0xe, "7867d2eea273836669c1b5139ef7306a1edd8f"}) io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200)) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)) ioctl$TCSBRK(r2, 0x5409, 0x8) 738.215542ms ago: executing program 4 (id=347): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='disable=', 0x8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) 695.696553ms ago: executing program 4 (id=348): munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x2041) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x9, 0x4000000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x101800, 0x40) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$cont(0x29, r3, 0x9, 0x6c) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040050) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040050) openat$cgroup_ro(r2, &(0x7f0000000340)='devices.list\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000340)='devices.list\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r3, 0x0, 0x4}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) userfaultfd(0x80801) (async) r7 = userfaultfd(0x80801) r8 = socket$netlink(0x10, 0x3, 0x15) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000500)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_KEK={0x2b, 0xf2, "d7e5cf9d0ff34581c674e1e6e475a419bc8997a43fcd31872bf7c61c3d6e11156786805fd093e8"}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @random="deb33a21b66d"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7, 0x6, 0x2, 0x8, 0x9, 0xea, 0xf000, 0x401, 0x8001, 0xd0b, 0x7, 0xdf8, 0x2, 0x7, 0x1, 0x800]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80080) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r8) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000006c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000006c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/205, 0xcd, 0x0, &(0x7f0000000800)=""/116, 0x74}, &(0x7f00000008c0)=0x40) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000900), &(0x7f0000000940)={0x0, 0xfb, 0x6f, 0x7, 0x6, "ebc974220c1117fa7d516e550b204822", "0d04840621bece47b7e4fcd5494c739b096369550b7ab3f59716e9603415a3ed079976a8b0dcbbde9058034dcf8b33d9df42bbf1183ac27a3bd35168b8a02c3e486903a3d9d343fcfc6959a071e6b170c74573fcb4fbeea785a0"}, 0x6f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000009c0)=""/119) (async) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000009c0)=""/119) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000a40)=0x2, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r5, 0xc0205866, &(0x7f0000001040)={&(0x7f0000000a80)=0x2, 0x4, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001000)}) 613.111175ms ago: executing program 8 (id=349): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_clone(0xcd304011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'ip6tnl0\x00', 0x800}) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 612.509065ms ago: executing program 4 (id=350): r0 = socket$inet6(0xa, 0x4, 0x24dca718) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/196, 0xc4}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/177, 0xb1}, {&(0x7f0000000c40)=""/121, 0x79}], 0x9}, 0x60}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/109, 0x6d}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x2}, 0x4}, {{&(0x7f0000000f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/228, 0xe4}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002e80)=""/199, 0xc7}, 0xd}, {{&(0x7f0000002200)=@isdn, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002280)=""/163, 0xa3}, {&(0x7f0000002340)=""/83, 0x53}, {&(0x7f00000023c0)=""/70, 0x46}, {&(0x7f0000002440)=""/197, 0xc5}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/23, 0x17}, {&(0x7f00000025c0)=""/250, 0xfa}, {&(0x7f00000026c0)=""/255, 0xff}], 0x8, &(0x7f0000002840)=""/147, 0x93}, 0xff8}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002900)=""/30, 0x1e}, {&(0x7f0000002940)=""/34, 0x22}, {&(0x7f0000002980)=""/218, 0xda}, {&(0x7f0000002a80)=""/253, 0xfd}, {&(0x7f0000002b80)=""/180, 0xb4}, {&(0x7f0000002c40)=""/156, 0x9c}], 0x6, &(0x7f0000002d80)=""/68, 0x44}, 0x9}, {{&(0x7f0000002e00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004200)}, 0x4}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004280)=""/16, 0x10}, {&(0x7f00000042c0)=""/174, 0xae}], 0x2}, 0x8}, {{&(0x7f00000043c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004440)=""/213, 0xd5}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/111, 0x6f}, {&(0x7f00000046c0)=""/69, 0x45}, {&(0x7f0000004740)=""/189, 0xbd}], 0x5, &(0x7f0000004880)=""/1, 0x1}, 0x8003}], 0x8, 0x40000140, &(0x7f0000004ac0)) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000002540)={0xc000, 0x2}) fcntl$dupfd(r1, 0x406, r2) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x1}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000480)=""/191, 0xbf}], 0x4, 0xffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c006b802c000180140003000000000000000101000000000000000014ac7b08b001ac00e607130000000000000000000c00028005000100880000005adaea23bdfbdee5ba79509002b401683b20c03f47418cc75e10931b1d3e0e6e2a6104bc9c5d6f087e5624747b21ce92ae0a793c01bc216374eeaecf7b3bcd488a995bd1a42c1826f903efe6a252ff57178ae5bae1f019273883812decf9428e501b6141a67c1d37bd428400002b4fac744ac57da257295daf224bad24c16c2660"], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x2, 0x180, 0xfd4, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x26000, 0x43102}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x800000000d, 0x7ff, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0xdddd0000, 0x3, 0x0, 0x42, 0x5, 0x3a, 0x3, 0x36, 0xfe, 0x2, 0xc7}, {0x3ff8, 0x10000, 0x4, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0x4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0x0, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x7, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa4, 0x1, 0x8, 0x5, 0xa0, 0x82, 0x30, 0x1, 0x7}, {0x54000, 0xb000, 0x8, 0x5, 0x7, 0x5, 0x7, 0x9, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0xeeee8000, 0xa, 0x5, 0xcd, 0xf8, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xfec00000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x0, 0x8000000000000001, 0x8]}) socket(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 525.167297ms ago: executing program 5 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x40000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0004fe0000000000ff7f0000000000000000000000000000000000000000934ae943aa75c7d7491f253774324ee20d94e6c6b4cc4580fdec00aa3f6c"]) 492.346798ms ago: executing program 5 (id=352): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) close(0x4) 449.023699ms ago: executing program 5 (id=353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x84620080}) 394.293471ms ago: executing program 4 (id=354): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f238866b801010f00d0c4c3fd08c8010f013726d1436e0f2047ea0000000072000f32f30f090f32", 0x28}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) prctl$PR_SET_TSC(0x1a, 0x1) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="4015060000006158f1b660bf61"], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 394.005691ms ago: executing program 8 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x6, 0x8}]}, 0xc, 0x2) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1c00"]) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) chroot(&(0x7f0000000280)='./file0\x00') (async) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r2, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xeed8dda28d79a501}) (async, rerun: 64) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) (rerun: 64) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x69, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001900012200000000000000001901090064f96dc6ac7366900a009dd4d7bf469e48eef52167889560b8b3ea59e2cc36c5a16b420449afcad267ba25c6626fd2b37432a092aa3807a90617534482a3525c4f807bf7d19484bbb7c6f732c97a2a047f"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) ppoll(&(0x7f0000000000)=[{r1, 0x1100}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0x3]}, 0x8) 356.561591ms ago: executing program 5 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a80)=""/4111, 0x100f}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000880)=""/281, 0x119}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x60, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) listxattr(&(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001bc0)=""/208, 0xd0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0x9, r6}, 0xc) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000001100010000000000ffdbdf25140000000d0000002cc2ecdb28f85230a900000082d0337ee44b40fcc6bdd750bb799e5bdd69cf6a04bcc71d3f273f6749a1801de2ae7d3b"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) copy_file_range(r0, &(0x7f0000000380)=0x81, r2, &(0x7f0000000400)=0xd02, 0x7ff, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 188.959015ms ago: executing program 9 (id=344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x400042, 0x1e0) write(r0, &(0x7f00000002c0)='0', 0x1) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x321000, 0xbc) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x4008af23, &(0x7f0000000600)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000002080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002280)={{r3, 0xb5, 0x5, 0xffffffffffffffc0, 0x80000001, 0x746b39c3, 0xffffffff80000001, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f7a40)={0x0, ""/256, 0x0, 0x0}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x4008af23, &(0x7f0000000600)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000002080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000002280)={{r6, 0xb5, 0x5, 0xffffffffffffffc0, 0x80000001, 0x746b39c3, 0xffffffff80000001, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000f7c40)={0x0, 0x0, "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", "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"}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) (async) ioctl$FS_IOC_GETVERSION(r8, 0x4008af23, &(0x7f0000000600)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000002080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000002280)={{r9, 0xb5, 0x5, 0xffffffffffffffc0, 0x80000001, 0x746b39c3, 0xffffffff80000001, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f8c40)={0x1, [{}, {}, {0x0, 0x0}], 0x1, "6fbffffefda4d1"}) (async) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) (async) ioctl$FS_IOC_GETVERSION(r11, 0x4008af23, &(0x7f0000000600)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000002080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000002280)={{r12, 0xb5, 0x5, 0xffffffffffffffc0, 0x80000001, 0x746b39c3, 0xffffffff80000001, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000f9c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f9e40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {r6, r7}, {r9, r10}, {r12, r13}], 0x9, "373ae3f4716e3b"}) (async) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x3a, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 187.824985ms ago: executing program 5 (id=357): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8008, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r2) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1, &(0x7f0000000180)=""/58, 0x3a}, 0x40) 0s ago: executing program 8 (id=358): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) r1 = inotify_init1(0x800) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0xfffd, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x9, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x8, 0x20000000007, 0xfffffffffffffffc}, {0xc, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "aa3d131e4ee775a19b8f685a0b180bf176e19a822ccb7c0eecdfd4"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x41410) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3) mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa2000b60) (async) rmdir(&(0x7f00000000c0)='./control\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)="63616c6c5f736974652e66756e6374696f6e203d3db3a5c0ed62725737af3a", 0x1f) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) r7 = eventfd(0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="180012801400000000000000011a71044177313b15fd8f8e9f90ef5799b6ff69c86a09000000000000008368a9680706a9055af3c8eaea5aedadaa102d9f46a6cc09b617e3ccef2637a8d096fe6e0f78357cc7b1204e48c0a1065067fc69feb9613300c388b58de94d483eb0876639e8a9cc8a4da42d368892a2bcf5425029deff6dec9d489034f15753601bca1f9b6ae435074791dfe8ed86bb"], 0x38}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) (async) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 27.983103][ T36] audit: type=1400 audit(1791563874.480:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.987257][ T287] cgroup: Unknown subsys name 'net' [ 28.005872][ T36] audit: type=1400 audit(1791563874.480:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.034144][ T36] audit: type=1400 audit(1791563874.530:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.034825][ T287] cgroup: Unknown subsys name 'devices' [ 28.161864][ T287] cgroup: Unknown subsys name 'hugetlb' [ 28.167574][ T287] cgroup: Unknown subsys name 'rlimit' [ 28.283506][ T36] audit: type=1400 audit(1791563874.780:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.306732][ T36] audit: type=1400 audit(1791563874.780:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.331590][ T36] audit: type=1400 audit(1791563874.780:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.355999][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.364820][ T36] audit: type=1400 audit(1791563874.860:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.390304][ T36] audit: type=1400 audit(1791563874.860:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.422313][ T36] audit: type=1400 audit(1791563874.920:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.448140][ T36] audit: type=1400 audit(1791563874.920:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.448780][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.359799][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.366924][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.374120][ T294] bridge_slave_0: entered allmulticast mode [ 29.380554][ T294] bridge_slave_0: entered promiscuous mode [ 29.387111][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.394236][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.401500][ T297] bridge_slave_0: entered allmulticast mode [ 29.407825][ T297] bridge_slave_0: entered promiscuous mode [ 29.414312][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.421425][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.428520][ T295] bridge_slave_0: entered allmulticast mode [ 29.435016][ T295] bridge_slave_0: entered promiscuous mode [ 29.443155][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.450384][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.457503][ T295] bridge_slave_1: entered allmulticast mode [ 29.463826][ T295] bridge_slave_1: entered promiscuous mode [ 29.470002][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.477075][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.484249][ T294] bridge_slave_1: entered allmulticast mode [ 29.490564][ T294] bridge_slave_1: entered promiscuous mode [ 29.496669][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.503816][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.510975][ T297] bridge_slave_1: entered allmulticast mode [ 29.517259][ T297] bridge_slave_1: entered promiscuous mode [ 29.566786][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.574143][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.581295][ T296] bridge_slave_0: entered allmulticast mode [ 29.588196][ T296] bridge_slave_0: entered promiscuous mode [ 29.597804][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.604950][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.612097][ T296] bridge_slave_1: entered allmulticast mode [ 29.618553][ T296] bridge_slave_1: entered promiscuous mode [ 29.760575][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.767709][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.775096][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782200][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.810564][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.817925][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.825383][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.832543][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.855981][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.863178][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.870614][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.877748][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.888230][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.895354][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.902669][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.909758][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.935412][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.942951][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.950364][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.957531][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.965346][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.973961][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.982120][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.989924][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.000705][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.008011][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.028111][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.035249][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.056916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.064105][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.074511][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.081616][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.105951][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.113075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.121127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.128197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.162937][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.170042][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.177852][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.185122][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.202170][ T296] veth0_vlan: entered promiscuous mode [ 30.230570][ T296] veth1_macvtap: entered promiscuous mode [ 30.250581][ T295] veth0_vlan: entered promiscuous mode [ 30.256299][ T297] veth0_vlan: entered promiscuous mode [ 30.265979][ T294] veth0_vlan: entered promiscuous mode [ 30.303487][ T295] veth1_macvtap: entered promiscuous mode [ 30.317107][ T294] veth1_macvtap: entered promiscuous mode [ 30.324866][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.348082][ T297] veth1_macvtap: entered promiscuous mode [ 30.394298][ T314] fuseblk: Bad value for 'fd' [ 30.402551][ T314] fuseblk: Bad value for 'fd' [ 30.455400][ T324] ./dev/sda1: Can't lookup blockdev [ 30.497683][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.637911][ T341] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.735831][ T344] UDC core: g1: couldn't find an available UDC or it's busy [ 30.751163][ T347] IPv6: NLM_F_CREATE should be specified when creating new route [ 30.769580][ T347] IPv6: NLM_F_REPLACE set, but no existing node found! [ 30.793798][ T349] capability: warning: `syz.3.10' uses 32-bit capabilities (legacy support in use) [ 30.909712][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.059610][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 31.066017][ T312] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 31.075880][ T312] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 31.085681][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.093214][ T312] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 31.103368][ T360] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.110998][ T312] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.124706][ T312] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 31.134024][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.179627][ T363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.272402][ T10] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 31.281688][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.290109][ T10] usb 4-1: Product: syz [ 31.294372][ T10] usb 4-1: Manufacturer: syz [ 31.299125][ T10] usb 4-1: SerialNumber: syz [ 31.304125][ T360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.317633][ T10] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 31.325910][ T360] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 31.335270][ T10] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 31.343580][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 31.350679][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.359050][ T360] usb 3-1: Product: syz [ 31.364066][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 31.374294][ T10] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 31.383364][ T360] usb 3-1: Manufacturer: syz [ 31.388005][ T360] usb 3-1: SerialNumber: syz [ 31.392664][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 31.404867][ T10] scsi host1: usb-storage 4-1:1.0 [ 31.411357][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 31.424697][ T360] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 31.436176][ T360] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 31.446999][ T360] usbserial_generic 3-1:1.0: device has no bulk endpoints [ 31.455625][ T363] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 31.465111][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.473238][ T363] usb 2-1: Product: syz [ 31.477447][ T363] usb 2-1: Manufacturer: syz [ 31.482101][ T363] usb 2-1: SerialNumber: syz [ 31.487433][ T363] usb 2-1: config 0 descriptor?? [ 31.493716][ T363] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 31.680778][ T311] usb 4-1: USB disconnect, device number 2 [ 31.700039][ T335] page size migration: [335 (syz.0.1)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 31.950405][ T363] usb 2-1: USB disconnect, device number 2 [ 31.976148][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.050376][ T378] ./dev/sda1: Can't lookup blockdev [ 32.488532][ T382] cgroup: fork rejected by pids controller in /syz3 [ 32.720147][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.879533][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 32.891158][ T31] usb 2-1: unable to get BOS descriptor set [ 32.901638][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 32.928400][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.943184][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.962180][ T31] usb 2-1: Product: syz [ 32.975648][ T31] usb 2-1: Manufacturer: syz [ 32.980577][ T31] usb 2-1: SerialNumber: syz [ 33.190561][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 33.201125][ T31] usb 2-1: USB disconnect, device number 3 [ 33.440863][ T31] usb 1-1: USB disconnect, device number 2 [ 33.480096][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 33.480114][ T36] audit: type=1400 audit(1791563879.980:149): avc: denied { create } for pid=428 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.505907][ T36] audit: type=1400 audit(1791563879.990:150): avc: denied { bind } for pid=428 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.529913][ T36] audit: type=1400 audit(1791563879.990:151): avc: denied { connect } for pid=428 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.550854][ T36] audit: type=1400 audit(1791563879.990:152): avc: denied { listen } for pid=428 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.575837][ T36] audit: type=1400 audit(1791563879.990:153): avc: denied { accept } for pid=428 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.598337][ T434] Need at least one configuration in g1. [ 33.604284][ T434] udc dummy_udc.0: failed to start g1: -22 [ 33.610229][ T434] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 33.620649][ T434] UDC core: g1: couldn't find an available UDC or it's busy [ 33.734030][ T36] audit: type=1400 audit(1791563880.230:154): avc: denied { map } for pid=439 comm="syz.1.26" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.765049][ T36] audit: type=1400 audit(1791563880.230:155): avc: denied { read write } for pid=439 comm="syz.1.26" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.789777][ T36] audit: type=1400 audit(1791563880.250:156): avc: denied { mount } for pid=439 comm="syz.1.26" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.812006][ T36] audit: type=1400 audit(1791563880.280:157): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.834575][ T446] ./dev/sda1: Can't lookup blockdev [ 33.840349][ T36] audit: type=1400 audit(1791563880.330:158): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.867966][ T31] usb 3-1: USB disconnect, device number 2 [ 33.879903][ T448] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 34.139623][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.302827][ T311] usb 1-1: config 1 has an invalid interface number: 31 but max is 2 [ 34.311077][ T311] usb 1-1: config 1 has no interface number 0 [ 34.317329][ T311] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 34.330545][ T311] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 34.339954][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 34.351163][ T311] usb 1-1: config 1 interface 2 has no altsetting 0 [ 34.359376][ T311] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 34.368542][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.376587][ T311] usb 1-1: Product: syz [ 34.380840][ T311] usb 1-1: Manufacturer: syz [ 34.385478][ T311] usb 1-1: SerialNumber: syz [ 34.469640][ T363] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.582516][ T470] UDC core: g1: couldn't find an available UDC or it's busy [ 34.619643][ T363] usb 2-1: Using ep0 maxpacket: 8 [ 34.626037][ T363] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 34.636086][ T363] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 34.646123][ T363] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 34.656913][ T363] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 34.670170][ T363] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 34.679835][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.839707][ T478] ./dev/sda1: Can't lookup blockdev [ 34.961140][ T481] cgroup: noprefix used incorrectly [ 34.968258][ T482] cgroup: noprefix used incorrectly [ 35.108176][ T311] usb 1-1: skipping empty audio interface (v1) [ 35.131435][ T311] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 35.148929][ T311] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 35.157743][ T311] snd-usb-audio 1-1:1.31: probe with driver snd-usb-audio failed with error -22 [ 35.171212][ T311] usb 1-1: 2:0 : does not exist [ 35.182069][ T311] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 35.198565][ T311] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 35.221793][ T311] usb 1-1: USB disconnect, device number 3 [ 35.235839][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.241088][ T498] process 'syz.0.44' launched './file0' with NULL argv: empty string added [ 35.254099][ T462] page size migration: [462 (syz.1.31)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 35.271573][ T498] Invalid argument reading file caps for ./file0 [ 35.315044][ T498] rust_binder: 497:498 no such ref 0 [ 35.322360][ T498] rust_binder: 497:498 no such ref 1 [ 35.372405][ T502] Need at least one configuration in g1. [ 35.378377][ T502] udc dummy_udc.0: failed to start g1: -22 [ 35.384752][ T502] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 35.389720][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.400558][ T502] UDC core: g1: couldn't find an available UDC or it's busy [ 35.529829][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.595362][ T510] ./dev/sda1: Can't lookup blockdev [ 35.779584][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.960316][ T53] bridge_slave_1: left allmulticast mode [ 35.966057][ T53] bridge_slave_1: left promiscuous mode [ 35.971912][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.989767][ T53] bridge_slave_0: left allmulticast mode [ 35.995729][ T53] bridge_slave_0: left promiscuous mode [ 36.001594][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.029564][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.127465][ T53] veth1_macvtap: left promiscuous mode [ 36.133111][ T53] veth0_vlan: left promiscuous mode [ 36.159661][ T31] usb 3-1: device descriptor read/64, error -71 [ 36.229273][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.236652][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.244557][ T527] bridge_slave_0: entered allmulticast mode [ 36.251387][ T527] bridge_slave_0: entered promiscuous mode [ 36.259721][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.268037][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.276688][ T527] bridge_slave_1: entered allmulticast mode [ 36.282991][ T527] bridge_slave_1: entered promiscuous mode [ 36.332753][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.339845][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.347122][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.354203][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.376350][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.383821][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.393651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.401270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.409480][ T31] usb 3-1: device descriptor read/64, error -71 [ 36.421338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.428449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.441426][ T538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.58'. [ 36.451683][ T538] gretap0: entered promiscuous mode [ 36.487719][ T527] veth0_vlan: entered promiscuous mode [ 36.503232][ T527] veth1_macvtap: entered promiscuous mode [ 36.530001][ T31] usb usb3-port1: attempt power cycle [ 36.569992][ T544] ./dev/sda1: Can't lookup blockdev [ 36.739316][ T553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=553 comm=syz.4.62 [ 36.869596][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.892273][ T31] usb 3-1: device descriptor read/8, error -71 [ 37.031109][ T31] usb 3-1: device descriptor read/8, error -71 [ 37.148229][ T311] usb 2-1: USB disconnect, device number 4 [ 37.187814][ T571] ./dev/sda1: Can't lookup blockdev [ 37.269571][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.295827][ T31] usb 3-1: device descriptor read/8, error -71 [ 37.363339][ T580] overlayfs: conflicting options: nfs_export=on,index=off [ 37.440779][ T31] usb 3-1: device descriptor read/8, error -71 [ 37.569719][ T31] usb usb3-port1: unable to enumerate USB device [ 37.759801][ T360] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.799588][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.823430][ T617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 37.921056][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.929576][ T360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.939818][ T360] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.948822][ T360] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 37.960459][ T360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 37.969825][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 37.971812][ T360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8D has invalid maxpacket 25789, setting to 1024 [ 37.994220][ T311] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 38.005381][ T311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 38.015536][ T311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 38.016658][ T360] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 38.026183][ T311] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.048223][ T311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 38.048766][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.058104][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.085763][ T360] usb 2-1: Product: syz [ 38.090074][ T360] usb 2-1: Manufacturer: syz [ 38.094713][ T360] usb 2-1: SerialNumber: syz [ 38.314958][ T360] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.330910][ T360] usb 2-1: USB disconnect, device number 5 [ 38.352236][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.619575][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.633755][ T603] page size migration: [603 (syz.0.77)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 38.799539][ T363] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.859248][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 38.859268][ T36] audit: type=1400 audit(1791563885.350:220): avc: denied { create } for pid=654 comm="syz.1.94" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.887048][ T36] audit: type=1400 audit(1791563885.380:221): avc: denied { write } for pid=654 comm="syz.1.94" name="file2" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.923171][ T36] audit: type=1400 audit(1791563885.380:222): avc: denied { open } for pid=654 comm="syz.1.94" path="/15/file2" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.945882][ T36] audit: type=1400 audit(1791563885.410:223): avc: denied { unlink } for pid=295 comm="syz-executor" name="file2" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.990730][ T363] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 39.009568][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.018757][ T363] usb 3-1: config 0 descriptor?? [ 39.233631][ T363] usb 3-1: Cannot read MAC address [ 39.238916][ T363] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 39.250622][ T36] audit: type=1400 audit(1791563885.730:224): avc: denied { mount } for pid=650 comm="syz.2.92" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.290547][ T363] usb 3-1: USB disconnect, device number 7 [ 39.300354][ T36] audit: type=1400 audit(1791563885.730:225): avc: denied { search } for pid=650 comm="syz.2.92" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 39.321934][ T36] audit: type=1400 audit(1791563885.730:226): avc: denied { write } for pid=650 comm="syz.2.92" name="buffer_subbuf_size_kb" dev="tracefs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.347116][ T36] audit: type=1400 audit(1791563885.730:227): avc: denied { open } for pid=650 comm="syz.2.92" path="/20/tracing/buffer_subbuf_size_kb" dev="tracefs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.805750][ T677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.101'. [ 39.815108][ T677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 39.856102][ T677] futex_wake_op: syz.2.101 tries to shift op by 144; fix this program [ 39.866691][ T677] futex_wake_op: syz.2.101 tries to shift op by 144; fix this program [ 39.916990][ T36] audit: type=1400 audit(1791563886.410:228): avc: denied { write } for pid=681 comm="syz.1.103" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.921551][ T683] rust_binder: Write failure EINVAL in pid:77 [ 39.944193][ T36] audit: type=1400 audit(1791563886.440:229): avc: denied { bind } for pid=681 comm="syz.1.103" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.179081][ T689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 40.490520][ T312] usb 1-1: USB disconnect, device number 4 [ 40.817546][ T702] No source specified [ 40.978711][ T709] ./dev/sda1: Can't lookup blockdev [ 40.992443][ T709] ./dev/sda1: Can't lookup blockdev [ 41.004383][ T711] ======================================================= [ 41.004383][ T711] WARNING: The mand mount option has been deprecated and [ 41.004383][ T711] and is ignored by this kernel. Remove the mand [ 41.004383][ T711] option from the mount to silence this warning. [ 41.004383][ T711] ======================================================= [ 41.010811][ T709] ./dev/sda1: Can't lookup blockdev [ 41.066105][ T709] ./dev/sda1: Can't lookup blockdev [ 41.079844][ T709] ./dev/sda1: Can't lookup blockdev [ 41.094232][ T709] ./dev/sda1: Can't lookup blockdev [ 41.106049][ T709] ./dev/sda1: Can't lookup blockdev [ 41.114631][ T709] ./dev/sda1: Can't lookup blockdev [ 41.120348][ T709] ./dev/sda1: Can't lookup blockdev [ 41.125865][ T709] ./dev/sda1: Can't lookup blockdev [ 41.131830][ T709] ./dev/sda1: Can't lookup blockdev [ 41.137903][ T709] ./dev/sda1: Can't lookup blockdev [ 41.143459][ T709] ./dev/sda1: Can't lookup blockdev [ 41.165289][ T709] ./dev/sda1: Can't lookup blockdev [ 41.174300][ T709] ./dev/sda1: Can't lookup blockdev [ 41.180963][ T709] ./dev/sda1: Can't lookup blockdev [ 41.189714][ T709] ./dev/sda1: Can't lookup blockdev [ 41.195636][ T709] ./dev/sda1: Can't lookup blockdev [ 41.211821][ T709] ./dev/sda1: Can't lookup blockdev [ 41.224653][ T709] ./dev/sda1: Can't lookup blockdev [ 41.233910][ T709] ./dev/sda1: Can't lookup blockdev [ 41.239465][ T709] ./dev/sda1: Can't lookup blockdev [ 41.246445][ T709] ./dev/sda1: Can't lookup blockdev [ 41.251981][ T709] ./dev/sda1: Can't lookup blockdev [ 41.257447][ T709] ./dev/sda1: Can't lookup blockdev [ 41.264687][ T709] ./dev/sda1: Can't lookup blockdev [ 41.276657][ T363] rust_binder: 634: undelivered TRANSACTION_COMPLETE [ 41.291284][ T709] ./dev/sda1: Can't lookup blockdev [ 41.307541][ T709] ./dev/sda1: Can't lookup blockdev [ 41.316021][ T709] ./dev/sda1: Can't lookup blockdev [ 41.322952][ T709] ./dev/sda1: Can't lookup blockdev [ 41.328355][ T709] ./dev/sda1: Can't lookup blockdev [ 41.333857][ T709] ./dev/sda1: Can't lookup blockdev [ 41.339231][ T709] ./dev/sda1: Can't lookup blockdev [ 41.344784][ T709] ./dev/sda1: Can't lookup blockdev [ 41.350276][ T709] ./dev/sda1: Can't lookup blockdev [ 41.355814][ T709] ./dev/sda1: Can't lookup blockdev [ 41.361543][ T709] ./dev/sda1: Can't lookup blockdev [ 41.366980][ T709] ./dev/sda1: Can't lookup blockdev [ 41.372540][ T709] ./dev/sda1: Can't lookup blockdev [ 41.378032][ T709] ./dev/sda1: Can't lookup blockdev [ 41.383512][ T709] ./dev/sda1: Can't lookup blockdev [ 41.388931][ T709] ./dev/sda1: Can't lookup blockdev [ 41.394380][ T709] ./dev/sda1: Can't lookup blockdev [ 41.399807][ T709] ./dev/sda1: Can't lookup blockdev [ 41.405169][ T709] ./dev/sda1: Can't lookup blockdev [ 41.410656][ T709] ./dev/sda1: Can't lookup blockdev [ 41.416097][ T709] ./dev/sda1: Can't lookup blockdev [ 41.421568][ T709] ./dev/sda1: Can't lookup blockdev [ 41.426930][ T709] ./dev/sda1: Can't lookup blockdev [ 41.432510][ T709] ./dev/sda1: Can't lookup blockdev [ 41.437890][ T709] ./dev/sda1: Can't lookup blockdev [ 41.443421][ T709] ./dev/sda1: Can't lookup blockdev [ 41.448794][ T709] ./dev/sda1: Can't lookup blockdev [ 41.471642][ T724] overlayfs: failed to resolve './file1': -2 [ 41.512780][ T735] No source specified [ 41.631408][ T745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.125'. [ 41.639863][ T311] usb 5-1: device descriptor read/64, error -71 [ 41.690787][ T745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 41.705161][ T745] Invalid ELF header type: 2 != 1 [ 41.739580][ T363] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.769863][ T312] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.793597][ T753] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 41.879627][ T311] usb 5-1: device descriptor read/64, error -71 [ 41.889563][ T363] usb 1-1: Using ep0 maxpacket: 8 [ 41.896291][ T363] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.906192][ T363] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 41.916857][ T363] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.928008][ T363] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.941208][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 41.946363][ T363] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 41.955505][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.965746][ T312] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 41.981770][ T312] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 41.991066][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.999089][ T312] usb 3-1: Product: syz [ 42.003664][ T312] usb 3-1: Manufacturer: syz [ 42.008328][ T312] usb 3-1: SerialNumber: syz [ 42.119587][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.249566][ T311] usb 5-1: device descriptor read/64, error -71 [ 42.417134][ T312] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 42.427107][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.438447][ T312] usb 3-1: USB disconnect, device number 8 [ 42.450350][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.499627][ T311] usb 5-1: device descriptor read/64, error -71 [ 42.532603][ T722] page size migration: [722 (syz.0.115)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 42.609717][ T311] usb usb5-port1: attempt power cycle [ 42.688951][ T759] overlayfs: failed to resolve './file1': -2 [ 42.959600][ T311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.980971][ T311] usb 5-1: device descriptor read/8, error -71 [ 42.993215][ T765] netlink: 'syz.2.130': attribute type 5 has an invalid length. [ 43.001131][ T765] netlink: 'syz.2.130': attribute type 32 has an invalid length. [ 43.120954][ T311] usb 5-1: device descriptor read/8, error -71 [ 43.359593][ T311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.380908][ T311] usb 5-1: device descriptor read/8, error -71 [ 43.510770][ T311] usb 5-1: device descriptor read/8, error -71 [ 43.606922][ T771] No source specified [ 43.619696][ T311] usb usb5-port1: unable to enumerate USB device [ 43.949589][ T311] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 44.059604][ T363] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.100673][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.111760][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.124756][ T311] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 44.134659][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.143671][ T311] usb 2-1: config 0 descriptor?? [ 44.210811][ T363] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 44.220076][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.228960][ T363] usb 3-1: config 0 descriptor?? [ 44.243672][ T312] usb 1-1: USB disconnect, device number 5 [ 44.443466][ T363] usb 3-1: Cannot read MAC address [ 44.448742][ T363] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 44.461584][ T363] usb 3-1: USB disconnect, device number 9 [ 44.629569][ T312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.757385][ T311] uclogic 0003:5543:0064.0001: item fetching failed at offset 6/24 [ 44.765573][ T311] uclogic 0003:5543:0064.0001: parse failed [ 44.771574][ T311] uclogic 0003:5543:0064.0001: probe with driver uclogic failed with error -22 [ 44.782537][ T312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.794939][ T312] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 44.804082][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.813176][ T312] usb 1-1: config 0 descriptor?? [ 44.819613][ T312] usb 1-1: bad CDC descriptors [ 44.958177][ T783] overlayfs: failed to resolve './file1': -2 [ 44.980664][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 44.980683][ T36] audit: type=1400 audit(1791563891.480:244): avc: denied { write } for pid=784 comm="syz.2.138" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.011461][ T787] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.018465][ T311] usb 2-1: USB disconnect, device number 6 [ 45.021524][ T36] audit: type=1400 audit(1791563891.510:245): avc: denied { load_policy } for pid=784 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.026672][ T778] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 45.049753][ T787] SELinux: failed to load policy [ 45.057232][ T778] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 45.070214][ T778] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 45.079466][ T778] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 45.095917][ T778] overlayfs: missing 'lowerdir' [ 45.104277][ T363] usb 1-1: USB disconnect, device number 6 [ 45.185671][ T36] audit: type=1400 audit(1791563891.680:246): avc: denied { map } for pid=788 comm="syz.2.139" path="/33/dev/sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.441411][ T809] overlayfs: failed to resolve './file0': -2 [ 45.524004][ T812] overlayfs: statfs failed on './file0' [ 45.584154][ T812] input: syz0 as /devices/virtual/input/input6 [ 45.591411][ T36] audit: type=1400 audit(1791563892.090:247): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=472 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.613728][ T36] audit: type=1400 audit(1791563892.090:248): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=472 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.637093][ T36] audit: type=1400 audit(1791563892.090:249): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=472 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.729582][ T363] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.832167][ T823] loop5: detected capacity change from 0 to 7 [ 45.838989][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.848190][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.856201][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.865529][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.873492][ T823] loop5: unable to read partition table [ 45.879229][ T823] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 45.882971][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.900649][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.909152][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.918411][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.926443][ T363] usb 5-1: Using ep0 maxpacket: 8 [ 45.931745][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.940969][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.949296][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.958503][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.966983][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.976396][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 45.985926][ T363] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 45.996089][ T363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.005893][ T363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.015932][ T363] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.029023][ T363] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 46.038185][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.057256][ T825] Invalid argument reading file caps for ./file0 [ 46.248875][ T804] page size migration: [804 (syz.4.144)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 46.252058][ T312] usb 5-1: USB disconnect, device number 6 [ 46.319959][ T834] overlayfs: failed to resolve './file0': -2 [ 46.329581][ T363] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.358364][ T36] audit: type=1400 audit(1791563892.850:250): avc: denied { nlmsg_read } for pid=837 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 46.407735][ T36] audit: type=1400 audit(1791563892.900:251): avc: denied { ioctl } for pid=843 comm="syz.2.160" path="socket:[9488]" dev="sockfs" ino=9488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.479558][ T363] usb 1-1: Using ep0 maxpacket: 32 [ 46.490939][ T363] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.507035][ T363] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 46.530040][ T363] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 46.539239][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.557486][ T363] usb 1-1: Product: syz [ 46.569530][ T363] usb 1-1: Manufacturer: syz [ 46.574231][ T363] usb 1-1: SerialNumber: syz [ 46.610437][ T36] audit: type=1400 audit(1791563893.110:252): avc: denied { mounton } for pid=850 comm="syz.1.162" path="/41/file0" dev="incremental-fs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.635064][ T36] audit: type=1400 audit(1791563893.130:253): avc: denied { read } for pid=850 comm="syz.1.162" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.667754][ T854] overlayfs: failed to resolve './file0': -2 [ 46.672977][ T855] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 46.707655][ T857] tipc: Started in network mode [ 46.712856][ T857] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 46.722078][ T857] tipc: Enabling of bearer rejected, failed to enable media [ 46.732731][ T860] TIPCv2: Can't lookup blockdev [ 46.737958][ T859] tipc: Enabling of bearer rejected, failed to enable media [ 46.808562][ T863] WARNING! power/level is deprecated; use power/control instead [ 46.834944][ T832] Zero length message leads to an empty skb [ 47.184207][ T884] page size migration: [884 (syz.4.174)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 47.213121][ T888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.448141][ T908] netlink: 'syz.2.181': attribute type 46 has an invalid length. [ 47.462226][ T363] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 47.480278][ T363] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.491253][ T913] overlayfs: failed to resolve './file0': -2 [ 47.512181][ T363] usb 1-1: USB disconnect, device number 7 [ 47.617316][ T919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'. [ 47.700967][ T917] page size migration: [917 (syz.4.184)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 47.834734][ T936] overlayfs: failed to resolve './file0': -2 [ 47.882411][ T12] bridge_slave_1: left allmulticast mode [ 47.888129][ T12] bridge_slave_1: left promiscuous mode [ 47.912626][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.930221][ T12] bridge_slave_0: left allmulticast mode [ 47.935946][ T12] bridge_slave_0: left promiscuous mode [ 47.945860][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.134462][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.152082][ T12] tipc: Left network mode [ 48.160413][ T12] veth1_macvtap: left promiscuous mode [ 48.166065][ T12] veth0_vlan: left promiscuous mode [ 48.268012][ T949] page size migration: [949 (syz.2.197)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 48.272411][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.298702][ T31] usb 1-1: device descriptor read/64, error -71 [ 48.322958][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.330157][ T947] bridge_slave_0: entered allmulticast mode [ 48.336966][ T947] bridge_slave_0: entered promiscuous mode [ 48.345247][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.352660][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.360054][ T947] bridge_slave_1: entered allmulticast mode [ 48.366626][ T947] bridge_slave_1: entered promiscuous mode [ 48.423097][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.430246][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.437603][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.444725][ T947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.469378][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.477293][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.487460][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.494554][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.505774][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.512920][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.539342][ T947] veth0_vlan: entered promiscuous mode [ 48.551734][ T947] veth1_macvtap: entered promiscuous mode [ 48.559564][ T31] usb 1-1: device descriptor read/64, error -71 [ 48.566174][ T311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 48.613014][ T966] overlayfs: failed to resolve './file0': -2 [ 48.739585][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 48.747795][ T311] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 48.756376][ T311] usb 5-1: config 0 has no interface number 0 [ 48.762915][ T311] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 48.773575][ T311] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.783822][ T311] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 48.795629][ T311] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 48.805318][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.813805][ T311] usb 5-1: Product: syz [ 48.818167][ T311] usb 5-1: Manufacturer: syz [ 48.823268][ T311] usb 5-1: SerialNumber: syz [ 48.829152][ T311] usb 5-1: config 0 descriptor?? [ 48.834232][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.842626][ T957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.880249][ T430] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.989883][ T31] usb 1-1: device descriptor read/64, error -71 [ 49.052669][ T311] usb-storage 5-1:0.20: USB Mass Storage device detected [ 49.062974][ T430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 49.073436][ T430] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 49.083758][ T311] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 49.094790][ T430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 1024 [ 49.106549][ T311] scsi host1: usb-storage 5-1:0.20 [ 49.116767][ T311] usb 5-1: USB disconnect, device number 7 [ 49.123127][ T430] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 49.136813][ T430] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 49.152120][ T430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.160416][ T430] usb 6-1: Product: syz [ 49.164621][ T430] usb 6-1: Manufacturer: syz [ 49.169337][ T430] usb 6-1: SerialNumber: syz [ 49.185784][ T430] usb 6-1: config 0 descriptor?? [ 49.192628][ T968] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 49.202291][ T430] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 49.239624][ T31] usb 1-1: device descriptor read/64, error -71 [ 49.359948][ T31] usb usb1-port1: attempt power cycle [ 49.401119][ T968] netlink: 'syz.5.202': attribute type 4 has an invalid length. [ 49.408873][ T968] netlink: 'syz.5.202': attribute type 2 has an invalid length. [ 49.471256][ T995] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 49.482176][ T995] overlay: ./file0 is not a directory [ 49.499547][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 49.590223][ T430] scsi host1: usb-storage 6-1:0.0 [ 49.605699][ T430] usb 6-1: USB disconnect, device number 2 [ 49.651780][ T10] usb 3-1: config 0 has no interfaces? [ 49.658869][ T10] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 49.668383][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.677233][ T10] usb 3-1: SerialNumber: syz [ 49.683346][ T10] usb 3-1: config 0 descriptor?? [ 49.699563][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.700164][ T1000] page size migration: [1000 (syz.4.207)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 49.720724][ T31] usb 1-1: device descriptor read/8, error -71 [ 49.870869][ T31] usb 1-1: device descriptor read/8, error -71 [ 49.890020][ T430] usb 3-1: USB disconnect, device number 10 [ 49.999639][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 50.107074][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 50.107092][ T36] audit: type=1400 audit(1791563896.600:271): avc: denied { write } for pid=947 comm="syz-executor" name="2" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 50.139718][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.148040][ T36] audit: type=1400 audit(1791563896.610:272): avc: denied { remove_name } for pid=947 comm="syz-executor" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 50.177018][ T36] audit: type=1400 audit(1791563896.610:273): avc: denied { rmdir } for pid=947 comm="syz-executor" name="2" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 50.203448][ T31] usb 1-1: device descriptor read/8, error -71 [ 50.211196][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.221605][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.235043][ T45] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 50.245353][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.350719][ T31] usb 1-1: device descriptor read/8, error -71 [ 50.469731][ T31] usb usb1-port1: unable to enumerate USB device [ 50.729936][ T36] audit: type=1400 audit(1791563897.230:274): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.733223][ T312] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 50.760330][ T36] audit: type=1400 audit(1791563897.250:275): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.781806][ T36] audit: type=1400 audit(1791563897.260:276): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.803350][ T36] audit: type=1400 audit(1791563897.260:277): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.826618][ T36] audit: type=1400 audit(1791563897.260:278): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.929552][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 50.936057][ T312] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 50.944525][ T312] usb 3-1: config 1 has no interface number 0 [ 50.950984][ T312] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 50.961371][ T312] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.973500][ T312] usb 3-1: config 1 interface 105 has no altsetting 0 [ 50.980548][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.989625][ T312] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.999473][ T312] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 51.007767][ T312] usb 3-1: Product: syz [ 51.012255][ T312] usb 3-1: Manufacturer: syz [ 51.016918][ T312] usb 3-1: SerialNumber: syz [ 51.023121][ T1024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.129572][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 51.140726][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.159972][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 51.171276][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.181181][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 51.192557][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 51.202805][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 51.212870][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28265, setting to 1024 [ 51.224286][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 51.240400][ T312] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 51.261371][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 51.270629][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.278650][ T10] usb 6-1: Product: syz [ 51.283256][ T10] usb 6-1: Manufacturer: syz [ 51.287898][ T10] usb 6-1: SerialNumber: syz [ 51.293938][ T10] usb 6-1: config 0 descriptor?? [ 51.299247][ T1033] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 51.306626][ T1033] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 51.391250][ T46] bridge_slave_1: left allmulticast mode [ 51.397062][ T46] bridge_slave_1: left promiscuous mode [ 51.402984][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.410975][ T46] bridge_slave_0: left allmulticast mode [ 51.416829][ T46] bridge_slave_0: left promiscuous mode [ 51.422754][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.438664][ T1024] cgroup: Unknown subsys name 'measure' [ 51.461269][ T67] usb 3-1: USB disconnect, device number 11 [ 51.532803][ T46] veth1_macvtap: left promiscuous mode [ 51.538398][ T46] veth0_vlan: left promiscuous mode [ 51.644024][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651156][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.658278][ T1042] bridge_slave_0: entered allmulticast mode [ 51.665211][ T1042] bridge_slave_0: entered promiscuous mode [ 51.671959][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.679118][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.686459][ T1042] bridge_slave_1: entered allmulticast mode [ 51.693000][ T1042] bridge_slave_1: entered promiscuous mode [ 51.757880][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.763880][ T1007] 9pnet_fd: p9_fd_create_tcp (1007): problem connecting socket to 127.0.0.1 [ 51.765016][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.781043][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.781059][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.793412][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.796517][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.807598][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 51.837620][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.846022][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.856756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.863867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.874558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.881676][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.913642][ T1042] veth0_vlan: entered promiscuous mode [ 51.927782][ T1042] veth1_macvtap: entered promiscuous mode [ 51.983714][ T36] audit: type=1400 audit(1791563898.480:279): avc: denied { lock } for pid=1048 comm="syz.2.222" path="socket:[12362]" dev="sockfs" ino=12362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.042009][ T36] audit: type=1400 audit(1791563898.540:280): avc: denied { bind } for pid=1052 comm="syz.6.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.163640][ T1060] bpf: Bad value for 'mode' [ 52.204515][ T1065] syzkaller0: entered promiscuous mode [ 52.210099][ T1065] syzkaller0: entered allmulticast mode [ 52.223143][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 52.238563][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.251630][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.262768][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.275676][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.289962][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 52.304273][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.315998][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 52.327835][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 52.340321][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 52.351979][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 52.363476][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 52.375049][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 52.386826][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 52.398086][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 52.409565][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 52.420750][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 52.432224][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 52.443438][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 52.454657][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 52.465742][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 52.477209][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 52.488664][ T45] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 52.502584][ T45] ax88179_178a 5-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, de:27:5a:d2:51:90 [ 52.523006][ T45] usb 5-1: USB disconnect, device number 8 [ 52.529714][ T45] ax88179_178a 5-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 52.669570][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.822156][ T10] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 52.831395][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.839437][ T10] usb 3-1: Product: syz [ 52.844256][ T10] usb 3-1: Manufacturer: syz [ 52.848960][ T10] usb 3-1: SerialNumber: syz [ 53.659664][ T312] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 53.738669][ T363] usb 6-1: USB disconnect, device number 3 [ 53.833989][ T312] usb 7-1: config index 0 descriptor too short (expected 50, got 36) [ 53.845410][ T312] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 53.856975][ T312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 53.868204][ T312] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 53.883930][ T312] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 53.894160][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.906325][ T312] usb 7-1: config 0 descriptor?? [ 54.314870][ T312] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 54.323361][ T312] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 54.389618][ T312] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 54.399228][ T312] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 54.407595][ T312] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 54.516005][ T1127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.525459][ T1127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.615790][ T1162] x_tables: duplicate underflow at hook 1 [ 54.803758][ T1171] rust_binder: 1170:1171 got transaction to invalid handle 3 [ 54.811314][ T1171] rust_binder: 1170:1171 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:950 [ 54.822796][ T1171] rust_binder: 1170: undelivered TRANSACTION_ERROR: 29201 [ 55.069566][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.119564][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.219555][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 55.226046][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.232742][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 55.241847][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.250111][ T45] usb 6-1: device descriptor read/64, error -71 [ 55.258261][ T31] usb 5-1: config 0 descriptor?? [ 55.348676][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.356627][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.367263][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.380532][ T10] usb 3-1: USB disconnect, device number 12 [ 55.401768][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.466875][ T31] logitech-djreceiver 0003:046D:C71C.0004: unknown main item tag 0x3 [ 55.475283][ T31] logitech-djreceiver 0003:046D:C71C.0004: unknown main item tag 0x3 [ 55.480660][ T1173] FAULT_INJECTION: forcing a failure. [ 55.480660][ T1173] name failslab, interval 1, probability 0, space 0, times 1 [ 55.490502][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 55.490546][ T36] audit: type=1400 audit(1791563901.980:299): avc: denied { ioctl } for pid=1170 comm="syz.4.247" path="/58/tracing/events/sched/filter" dev="tracefs" ino=19680823 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 55.497103][ T1173] CPU: 0 UID: 0 PID: 1173 Comm: syz.4.247 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 55.497186][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.497239][ T1173] Call Trace: [ 55.497253][ T1173] [ 55.497281][ T1173] __dump_stack+0x21/0x30 [ 55.497383][ T1173] dump_stack_lvl+0x140/0x1c0 [ 55.497471][ T1173] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.497560][ T1173] dump_stack+0x19/0x20 [ 55.497655][ T1173] should_fail_ex+0x3c2/0x510 [ 55.497713][ T1173] should_failslab+0xac/0x100 [ 55.497776][ T1173] __kmalloc_node_noprof+0x69/0x500 [ 55.497872][ T1173] ? __kvmalloc_node_noprof+0x128/0x300 [ 55.497985][ T1173] __kvmalloc_node_noprof+0x128/0x300 [ 55.498062][ T1173] ? __cfi_dev_addr_init+0x10/0x10 [ 55.498134][ T1173] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 55.498158][ T1173] ? __asan_memset+0x39/0x50 [ 55.498221][ T1173] alloc_netdev_mqs+0xaf4/0x13d0 [ 55.498279][ T1173] tun_set_iff+0x543/0xec0 [ 55.498359][ T1173] __tun_chr_ioctl+0x852/0x1fb0 [ 55.498445][ T1173] ? mutex_unlock+0x90/0x240 [ 55.498510][ T1173] ? tun_flow_create+0x400/0x400 [ 55.498600][ T1173] ? __fget_files+0x2bc/0x330 [ 55.498677][ T1173] tun_chr_ioctl+0x2e/0x40 [ 55.498754][ T1173] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 55.498831][ T1173] __se_sys_ioctl+0x123/0x1b0 [ 55.498897][ T1173] __x64_sys_ioctl+0x7f/0xa0 [ 55.498954][ T1173] x64_sys_call+0x1878/0x2ee0 [ 55.499018][ T1173] do_syscall_64+0x57/0xf0 [ 55.499065][ T1173] ? clear_bhb_loop+0x50/0xa0 [ 55.499134][ T1173] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.499165][ T1173] RIP: 0033:0x7f4d4cb9e1d9 [ 55.499220][ T1173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.499289][ T1173] RSP: 002b:00007f4d4dabb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.499363][ T1173] RAX: ffffffffffffffda RBX: 00007f4d4ce26180 RCX: 00007f4d4cb9e1d9 [ 55.499415][ T1173] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 55.499458][ T1173] RBP: 00007f4d4cc35888 R08: 0000000000000000 R09: 0000000000000000 [ 55.499488][ T1173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.499529][ T1173] R13: 00007f4d4ce26218 R14: 00007f4d4ce26180 R15: 00007ffd0d71d738 [ 55.499576][ T1173] [ 55.719647][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 55.727194][ T45] usb 6-1: device descriptor read/64, error -71 [ 55.735350][ T36] audit: type=1400 audit(1791563902.010:300): avc: denied { setattr } for pid=1170 comm="syz.4.247" name="TIPC" dev="sockfs" ino=12772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.741786][ T31] logitech-djreceiver 0003:046D:C71C.0004: hidraw1: USB HID vff.ff Device [HID 046d:c71c] on usb-dummy_hcd.4-1/input0 [ 55.870852][ T31] usb 5-1: USB disconnect, device number 9 [ 55.890571][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 55.901604][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 55.908321][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 55.917469][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.926335][ T10] usb 3-1: config 0 descriptor?? [ 55.932120][ T1181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.049602][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.141418][ T36] audit: type=1400 audit(1791563902.640:301): avc: denied { mounton } for pid=1179 comm="syz.2.249" path="/65/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.168067][ T36] audit: type=1400 audit(1791563902.660:302): avc: denied { read } for pid=1179 comm="syz.2.249" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 56.189704][ T45] usb 6-1: device descriptor read/64, error -71 [ 56.199572][ T36] audit: type=1400 audit(1791563902.660:303): avc: denied { watch watch_reads } for pid=1179 comm="syz.2.249" path="/65/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 56.219709][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 56.243615][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 56.255272][ T10] usb 3-1: USB disconnect, device number 13 [ 56.399037][ T312] usb 7-1: USB disconnect, device number 2 [ 56.415885][ T312] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 56.439549][ T45] usb 6-1: device descriptor read/64, error -71 [ 56.455698][ T36] audit: type=1400 audit(1791563902.950:304): avc: denied { unmount } for pid=1200 comm="syz.6.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.549823][ T45] usb usb6-port1: attempt power cycle [ 56.573627][ T53] bridge_slave_1: left allmulticast mode [ 56.579604][ T53] bridge_slave_1: left promiscuous mode [ 56.585686][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.593993][ T53] bridge_slave_0: left allmulticast mode [ 56.599863][ T53] bridge_slave_0: left promiscuous mode [ 56.605542][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.659585][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 56.712391][ T53] veth1_macvtap: left promiscuous mode [ 56.718071][ T53] veth0_vlan: left promiscuous mode [ 56.809581][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 56.816030][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.819110][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.825314][ T31] usb 5-1: config 0 has no interface number 0 [ 56.832293][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.845104][ T1206] bridge_slave_0: entered allmulticast mode [ 56.851589][ T1206] bridge_slave_0: entered promiscuous mode [ 56.855215][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.860353][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.873665][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.874874][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.888963][ T1206] bridge_slave_1: entered allmulticast mode [ 56.891670][ T31] usb 5-1: Product: syz [ 56.898216][ T1206] bridge_slave_1: entered promiscuous mode [ 56.899103][ T31] usb 5-1: Manufacturer: syz [ 56.909719][ T45] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 56.917807][ T31] usb 5-1: SerialNumber: syz [ 56.926212][ T31] usb 5-1: config 0 descriptor?? [ 56.933381][ T31] smsc95xx v2.0.0 [ 56.940691][ T45] usb 6-1: device descriptor read/8, error -71 [ 56.988327][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.995579][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.002963][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.010151][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.037583][ T932] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.045148][ T430] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 57.045323][ T932] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.063616][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.070916][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.080526][ T45] usb 6-1: device descriptor read/8, error -71 [ 57.081035][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.093921][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.127469][ T1206] veth0_vlan: entered promiscuous mode [ 57.142718][ T1206] veth1_macvtap: entered promiscuous mode [ 57.163644][ T36] audit: type=1400 audit(1791563903.660:305): avc: denied { mount } for pid=1206 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.200983][ T36] audit: type=1400 audit(1791563903.700:306): avc: denied { shutdown } for pid=1216 comm="syz.7.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.222148][ T430] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.233524][ T430] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.246530][ T430] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.253474][ T430] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 57.262807][ T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.268061][ T1219] input: syz1 as /devices/virtual/input/input8 [ 57.280706][ T430] usb 3-1: config 0 descriptor?? [ 57.283134][ T1219] Invalid argument reading file caps for ./file0 [ 57.288618][ T1209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 57.329609][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 57.350711][ T45] usb 6-1: device descriptor read/8, error -71 [ 57.500313][ T45] usb 6-1: device descriptor read/8, error -71 [ 57.508052][ T36] audit: type=1400 audit(1791563904.000:307): avc: denied { map } for pid=1207 comm="syz.2.258" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 57.540274][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 57.569597][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.579241][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 57.599634][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 57.612261][ T31] usb 5-1: USB disconnect, device number 10 [ 57.620763][ T45] usb usb6-port1: unable to enumerate USB device [ 57.715857][ T430] usbhid 3-1:0.0: can't add hid device: -71 [ 57.729634][ T430] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.740629][ T430] usb 3-1: USB disconnect, device number 14 [ 57.906065][ T1226] netlink: 160 bytes leftover after parsing attributes in process `syz.5.262'. [ 57.931636][ T36] audit: type=1400 audit(1791563904.430:308): avc: denied { create } for pid=1227 comm="syz.5.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.169658][ T1233] page size migration: [1233 (syz.4.264)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 59.029561][ T363] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 59.142845][ T1261] bridge_slave_1: left allmulticast mode [ 59.148970][ T1261] bridge_slave_1: left promiscuous mode [ 59.155499][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.163621][ T1261] bridge_slave_0: left allmulticast mode [ 59.169385][ T1261] bridge_slave_0: left promiscuous mode [ 59.175513][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.212354][ T363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.251331][ T363] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 59.264150][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.272457][ T363] usb 6-1: Product: syz [ 59.276672][ T363] usb 6-1: Manufacturer: syz [ 59.281395][ T363] usb 6-1: SerialNumber: syz [ 59.369611][ T1261] veth1_macvtap: left promiscuous mode [ 59.375256][ T1261] veth0_vlan: left promiscuous mode [ 59.509740][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.532160][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.548155][ T363] usb 6-1: USB disconnect, device number 8 [ 59.582799][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.590007][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.597134][ T1277] bridge_slave_0: entered allmulticast mode [ 59.603718][ T1277] bridge_slave_0: entered promiscuous mode [ 59.610890][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.617973][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.625220][ T1277] bridge_slave_1: entered allmulticast mode [ 59.631922][ T1277] bridge_slave_1: entered promiscuous mode [ 59.700619][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.707781][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.715300][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.722485][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.762032][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.769779][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.791539][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.798643][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.810309][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.817430][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.843113][ T1277] veth0_vlan: entered promiscuous mode [ 59.859121][ T1277] veth1_macvtap: entered promiscuous mode [ 59.950331][ T1283] kvm: kvm [1282]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 59.959029][ T1283] kvm: kvm [1282]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 59.986081][ T1283] x_tables: duplicate entry at hook 1 [ 60.329577][ T430] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 60.490899][ T430] usb 9-1: not running at top speed; connect to a high speed hub [ 60.505084][ T430] usb 9-1: config 2 has an invalid interface number: 101 but max is 1 [ 60.516931][ T430] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 60.534607][ T430] usb 9-1: config 2 has an invalid interface number: 192 but max is 1 [ 60.551687][ T430] usb 9-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 60.570737][ T430] usb 9-1: config 2 has an invalid interface number: 44 but max is 1 [ 60.585642][ T430] usb 9-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 60.601360][ T430] usb 9-1: config 2 has no interface number 0 [ 60.611955][ T430] usb 9-1: config 2 has no interface number 1 [ 60.621632][ T430] usb 9-1: config 2 has no interface number 2 [ 60.627800][ T430] usb 9-1: config 2 interface 101 altsetting 207 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 60.651214][ T430] usb 9-1: config 2 interface 192 altsetting 254 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 60.669520][ T430] usb 9-1: config 2 interface 192 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 60.688291][ T430] usb 9-1: config 2 interface 192 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 60.705942][ T430] usb 9-1: config 2 interface 192 altsetting 254 endpoint 0xB has invalid maxpacket 439, setting to 64 [ 60.724833][ T430] usb 9-1: config 2 interface 192 altsetting 254 has a duplicate endpoint with address 0x3, skipping [ 60.744043][ T430] usb 9-1: config 2 interface 192 altsetting 254 has a duplicate endpoint with address 0xF, skipping [ 60.761690][ T430] usb 9-1: config 2 interface 192 altsetting 254 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 60.784011][ T430] usb 9-1: too many endpoints for config 2 interface 44 altsetting 148: 212, using maximum allowed: 30 [ 60.805310][ T430] usb 9-1: config 2 interface 44 altsetting 148 endpoint 0xC has invalid maxpacket 1032, setting to 64 [ 60.819560][ T430] usb 9-1: config 2 interface 44 altsetting 148 has 1 endpoint descriptor, different from the interface descriptor's value: 212 [ 60.839710][ T430] usb 9-1: config 2 interface 101 has no altsetting 0 [ 60.849666][ T430] usb 9-1: config 2 interface 192 has no altsetting 0 [ 60.856505][ T430] usb 9-1: config 2 interface 44 has no altsetting 0 [ 60.870915][ T430] usb 9-1: New USB device found, idVendor=050d, idProduct=705e, bcdDevice=3a.86 [ 60.889530][ T430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.897615][ T430] usb 9-1: Product: ä�Œï•†ì„²ì ¦Ì½è’µé½£ëƒ¡íš¤ïŽšï“¦î±¡á±¬êœ‘íŒ é«–ïŽ†ê¶ˆéŽ‚ì¼ ç®¦å·­îµª [ 60.907792][ T430] usb 9-1: Manufacturer: ä Š [ 60.929534][ T430] usb 9-1: SerialNumber: à ’ [ 60.943067][ T1288] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 61.057034][ T1296] page size migration: [1296 (syz.4.273)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 61.154348][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 61.154371][ T36] audit: type=1401 audit(1791563907.650:315): op=setxattr invalid_context="" [ 61.209687][ T430] usb 9-1: USB disconnect, device number 2 [ 61.349738][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 61.451416][ T1312] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 61.509579][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 61.516047][ T45] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 61.531252][ T45] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.546388][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 61.553683][ T45] usb 5-1: language id specifier not provided by device, defaulting to English [ 61.564084][ T45] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 61.573493][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.583311][ T45] usb 5-1: Product: syz [ 61.587635][ T45] usb 5-1: Manufacturer: syz [ 61.592308][ T45] usb 5-1: SerialNumber: syz [ 61.691405][ T1317] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 61.788526][ T1326] syz.8.286 (1326): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.821028][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.851518][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.861636][ T36] audit: type=1400 audit(1791563908.350:316): avc: denied { write } for pid=1329 comm="syz.8.287" path="socket:[14468]" dev="sockfs" ino=14468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.901502][ T1331] page size migration: [1331 (syz.5.285)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 61.954214][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 61.976080][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 61.988159][ T45] usb 5-1: USB disconnect, device number 11 [ 62.229556][ T312] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 62.400831][ T312] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.411903][ T312] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.424789][ T312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.431562][ T312] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 62.440883][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.452213][ T312] usb 6-1: config 0 descriptor?? [ 62.660439][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.682260][ T1344] netlink: 328 bytes leftover after parsing attributes in process `syz.4.292'. [ 62.698997][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.719883][ T36] audit: type=1400 audit(1791563909.220:317): avc: denied { read } for pid=1346 comm="syz.8.293" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.742822][ T36] audit: type=1400 audit(1791563909.220:318): avc: denied { open } for pid=1346 comm="syz.8.293" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.766764][ T1347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.293'. [ 62.777071][ T1347] netlink: 44 bytes leftover after parsing attributes in process `syz.8.293'. [ 62.840608][ T36] audit: type=1400 audit(1791563909.340:319): avc: denied { ioctl } for pid=1346 comm="syz.8.293" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.919273][ T36] audit: type=1400 audit(1791563909.410:320): avc: denied { mounton } for pid=1333 comm="syz.5.288" path="/30/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 62.983310][ T312] usbhid 6-1:0.0: can't add hid device: -71 [ 62.992780][ T312] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 63.010517][ T312] usb 6-1: USB disconnect, device number 9 [ 63.099272][ T1365] page size migration: [1365 (syz.8.296)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 63.399552][ T45] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.429383][ T1377] tipc: Enabling of bearer rejected, failed to enable media [ 63.510207][ T36] audit: type=1400 audit(1791563910.010:321): avc: denied { map } for pid=1382 comm="syz.5.305" path="pipe:[10392]" dev="pipefs" ino=10392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.570718][ T45] usb 9-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 63.581424][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.591311][ T45] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.601571][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.609847][ T45] usb 9-1: SerialNumber: syz [ 63.709613][ T430] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 63.826022][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.835274][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.849530][ T430] usb 5-1: device descriptor read/64, error -71 [ 64.099567][ T430] usb 5-1: device descriptor read/64, error -71 [ 64.348364][ T430] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 64.451332][ T45] usb 9-1: 0:2 : does not exist [ 64.458431][ T45] usb 9-1: unit 6 not found! [ 64.468139][ T45] usb 9-1: USB disconnect, device number 3 [ 64.479865][ T430] usb 5-1: device descriptor read/64, error -71 [ 64.703315][ T1414] page size migration: [1414 (syz.8.311)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 64.719799][ T430] usb 5-1: device descriptor read/64, error -71 [ 64.759673][ T36] audit: type=1400 audit(1791563911.260:322): avc: denied { map } for pid=1415 comm="syz.5.312" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.813020][ T1420] Bluetooth: hci0: sending frame failed (-49) [ 64.819770][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 64.849701][ T430] usb usb5-port1: attempt power cycle [ 65.191130][ T430] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 65.212410][ T430] usb 5-1: device descriptor read/8, error -71 [ 65.340677][ T430] usb 5-1: device descriptor read/8, error -71 [ 65.579535][ T430] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 65.602936][ T1433] futex_wake_op: syz.5.317 tries to shift op by -1; fix this program [ 65.614949][ T430] usb 5-1: device descriptor read/8, error -71 [ 65.741756][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.746981][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.764749][ T430] usb 5-1: device descriptor read/8, error -71 [ 65.774801][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.780121][ T36] audit: type=1400 audit(1791563912.270:323): avc: denied { mounton } for pid=1443 comm="syz.8.319" path="/12/proc/sys/vm/drop_caches" dev="proc" ino=14129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_vm_t tclass=file permissive=1 [ 65.810502][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.825746][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.843075][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.861331][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.873914][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.886283][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.892946][ T430] usb usb5-port1: unable to enumerate USB device [ 65.905638][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.918257][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.930250][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.939977][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.949693][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.959251][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.968822][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.978569][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.987215][ T1445] syz.8.319 (1445): drop_caches: 0 [ 65.995873][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.004556][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.012679][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.021311][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.030056][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.038528][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.047184][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.055839][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.064500][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.072280][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.080779][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.089127][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.097811][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.106193][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.114855][ T1445] syz.8.319 (1445): drop_caches: 0 [ 66.429552][ T430] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 66.589575][ T430] usb 9-1: Using ep0 maxpacket: 16 [ 66.602146][ T430] usb 9-1: config 9 has an invalid interface number: 58 but max is 2 [ 66.619540][ T430] usb 9-1: config 9 has an invalid interface number: 202 but max is 2 [ 66.644004][ T430] usb 9-1: config 9 has an invalid interface number: 202 but max is 2 [ 66.690100][ T430] usb 9-1: config 9 has an invalid interface number: 82 but max is 2 [ 66.698261][ T430] usb 9-1: config 9 has no interface number 0 [ 66.707166][ T430] usb 9-1: config 9 has no interface number 1 [ 66.713339][ T430] usb 9-1: config 9 has no interface number 2 [ 66.720606][ T430] usb 9-1: config 9 interface 58 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 66.731565][ T430] usb 9-1: config 9 interface 58 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 66.752232][ T430] usb 9-1: config 9 interface 58 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 66.766000][ T36] audit: type=1400 audit(1791563913.260:324): avc: denied { bind } for pid=1463 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.777694][ T430] usb 9-1: config 9 interface 58 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 66.799533][ T36] audit: type=1400 audit(1791563913.260:325): avc: denied { map } for pid=1463 comm="syz.5.323" path="socket:[15311]" dev="sockfs" ino=15311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.816615][ T430] usb 9-1: config 9 interface 58 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 66.849630][ T36] audit: type=1400 audit(1791563913.260:326): avc: denied { read } for pid=1463 comm="syz.5.323" path="socket:[15311]" dev="sockfs" ino=15311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.855278][ T430] usb 9-1: config 9 interface 58 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.892944][ T36] audit: type=1400 audit(1791563913.380:327): avc: denied { append } for pid=1466 comm="syz.4.324" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.912356][ T430] usb 9-1: config 9 interface 58 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 66.934773][ T430] usb 9-1: config 9 interface 58 altsetting 1 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 66.948330][ T430] usb 9-1: too many endpoints for config 9 interface 202 altsetting 180: 232, using maximum allowed: 30 [ 66.959768][ T430] usb 9-1: config 9 interface 202 altsetting 180 endpoint 0xE has an invalid bInterval 188, changing to 7 [ 66.971340][ T430] usb 9-1: config 9 interface 202 altsetting 180 has a duplicate endpoint with address 0xE, skipping [ 67.000543][ T430] usb 9-1: config 9 interface 202 altsetting 180 has 4 endpoint descriptors, different from the interface descriptor's value: 232 [ 67.015216][ T430] usb 9-1: config 9 interface 202 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 67.026205][ T430] usb 9-1: config 9 interface 202 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 67.037425][ T430] usb 9-1: config 9 interface 202 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 67.048359][ T430] usb 9-1: config 9 interface 202 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 67.059328][ T430] usb 9-1: config 9 interface 202 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 67.070576][ T430] usb 9-1: config 9 interface 202 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 67.081776][ T430] usb 9-1: config 9 interface 202 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 67.105631][ T430] usb 9-1: config 9 interface 202 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 32 [ 67.115830][ T430] usb 9-1: config 9 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 67.116759][ T36] audit: type=1400 audit(1791563913.610:328): avc: denied { accept } for pid=1470 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 67.126839][ T430] usb 9-1: config 9 interface 82 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 67.159138][ T430] usb 9-1: config 9 interface 58 has no altsetting 0 [ 67.168051][ T430] usb 9-1: config 9 interface 202 has no altsetting 0 [ 67.175335][ T430] usb 9-1: config 9 interface 202 has no altsetting 1 [ 67.185042][ T430] usb 9-1: config 9 interface 82 has no altsetting 0 [ 67.187274][ T36] audit: type=1400 audit(1791563913.660:329): avc: denied { listen } for pid=1470 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.194667][ T430] usb 9-1: New USB device found, idVendor=16d0, idProduct=0870, bcdDevice=96.f5 [ 67.220890][ T430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.229012][ T430] usb 9-1: Product: syz [ 67.234663][ T430] usb 9-1: Manufacturer: à Œ [ 67.253278][ T430] usb 9-1: SerialNumber: syz [ 67.265993][ T1458] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 67.273504][ T1458] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 67.419990][ T1484] ./dev/sda1: Can't lookup blockdev [ 67.482706][ T36] audit: type=1400 audit(1791563913.980:330): avc: denied { getattr } for pid=1457 comm="syz.8.320" path="socket:[15278]" dev="sockfs" ino=15278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.539527][ T36] audit: type=1400 audit(1791563913.980:331): avc: denied { ioctl } for pid=1457 comm="syz.8.320" path="socket:[15278]" dev="sockfs" ino=15278 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.599522][ T36] audit: type=1400 audit(1791563914.030:332): avc: denied { read } for pid=1488 comm="syz.5.330" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.649534][ T36] audit: type=1400 audit(1791563914.030:333): avc: denied { open } for pid=1488 comm="syz.5.330" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.703777][ T430] usb 9-1: USB disconnect, device number 4 [ 68.529554][ T430] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 68.690747][ T430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.701913][ T430] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 68.711210][ T430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.927071][ T1520] netlink: 'syz.8.333': attribute type 4 has an invalid length. [ 68.934972][ T1520] netlink: 17 bytes leftover after parsing attributes in process `syz.8.333'. [ 68.947695][ T430] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 68.966451][ T430] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 68.992236][ T430] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:033B.0005/input/input9 [ 69.198910][ T1532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 71.291753][ T430] usb 9-1: USB disconnect, device number 5 [ 73.391657][ T1258] bridge_slave_1: left allmulticast mode [ 73.397374][ T1258] bridge_slave_1: left promiscuous mode [ 73.403177][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.411378][ T1258] bridge_slave_0: left allmulticast mode [ 73.417043][ T1258] bridge_slave_0: left promiscuous mode [ 73.422891][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.492366][ T1258] veth1_macvtap: left promiscuous mode [ 73.498109][ T1258] veth0_vlan: left promiscuous mode                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                [ 76.807458][ T947] RIP: 0010:ihold+0x2a/0x70 [ 76.807751][ T36] audit: type=1400 audit(1791563923.300:348): avc: denied { read write } for pid=1603 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 76.812093][ T947] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 76.812114][ T947] RSP: 0018:ffffc9000db4fcc8 EFLAGS: 00010246 [ 76.860143][ T947] RAX: ffff888120dc2700 RBX: 0000000000000000 RCX: ffff888120dc2780 [ 76.868139][ T947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.876148][ T947] RBP: ffffc9000db4fcd8 R08: ffffffff893c8947 R09: 1ffffffff1279128 [ 76.884237][ T947] R10: dffffc0000000000 R11: fffffbfff1279129 R12: 0000000000000000 [ 76.892489][ T947] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 76.900484][ T947] FS: 00005555788e1500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 76.909448][ T947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.916137][ T947] CR2: 0000000000000168 CR3: 0000000121136000 CR4: 00000000003526b0 [ 76.924252][ T947] Call Trace: [ 76.927693][ T947] syzkaller syzk[ 76.931013][ T947] vfs_rmdir+0x25c/0x560 aller login: [ 76.936851][ T947] incfs_kill_sb+0x102/0x220 [ 76.942600][ T947] deactivate_locked_super+0xd2/0x270 [ 76.947988][ T947] deactivate_super+0xb8/0xe0 [ 76.952764][ T947] cleanup_mnt+0x438/0x4d0 [ 76.957207][ T947] __cleanup_mnt+0x1d/0x40 [ 76.961644][ T947] task_work_run+0x1e8/0x260 [ 76.966260][ T947] ? __cfi_task_work_run+0x10/0x10 [ 76.971386][ T947] ? __x64_sys_umount+0x12e/0x180 [ 76.976418][ T947] ? __cfi___x64_sys_umount+0x10/0x10 [ 76.981802][ T947] ? __kasan_check_read+0x15/0x20 [ 76.986836][ T947] resume_user_mode_work+0x35/0x50 [ 76.991954][ T947] syscall_exit_to_user_mode+0x63/0xb0 [ 76.997427][ T947] do_syscall_64+0x63/0xf0 [ 77.001867][ T947] ? clear_bhb_loop+0x50/0xa0 [ 77.006560][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.012751][ T947] RIP: 0033:0x7f37bd59f417 [ 77.017213][ T947] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.037379][ T947] RSP: 002b:00007ffc2daad388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.045801][ T947] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f37bd59f417 [ 77.053774][ T947] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2daad440 [ 77.062280][ T947] RBP: 00007ffc2daad440 R08: 00007ffc2daae440 R09: 00000000ffffffff [ 77.070275][ T947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2daae4d0 [ 77.078287][ T947] R13: 00007f37bd634ccb R14: 0000000000012992 R15: 00007ffc2daae510 [ 77.086407][ T947] [ 77.089434][ T947] Modules linked in: [ 77.093498][ T947] CR2: 0000000000000168 [ 77.097667][ T947] ---[ end trace 0000000000000000 ]--- [ 77.103138][ T947] RIP: 0010:ihold+0x2a/0x70 [ 77.107695][ T947] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 8a 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 77.127428][ T947] RSP: 0018:ffffc9000db4fcc8 EFLAGS: 00010246 [ 77.133524][ T947] RAX: ffff888120dc2700 RBX: 0000000000000000 RCX: ffff888120dc2780 [ 77.141600][ T947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.149588][ T947] RBP: ffffc9000db4fcd8 R08: ffffffff893c8947 R09: 1ffffffff1279128 [ 77.157585][ T947] R10: dffffc0000000000 R11: fffffbfff1279129 R12: 0000000000000000 [ 77.165568][ T947] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 77.173746][ T947] FS: 00005555788e1500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 77.182973][ T947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.189669][ T947] CR2: 0000000000000168 CR3: 0000000121136000 CR4: 00000000003526b0 [ 77.197935][ T947] Kernel panic - not syncing: Fatal exception [ 77.204302][ T947] Kernel Offset: disabled [ 77.208729][ T947] Rebooting in 86400 seconds..