last executing test programs: 3.362119377s ago: executing program 0 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x200000ffffff) 3.352262288s ago: executing program 0 (id=372): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x1}, 'syz1\x00', 0x3a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) readlinkat(r3, 0x0, 0x0, 0xc9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa7) ioctl$KVM_NMI(r5, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x2, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0xf000, 0x4b200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x8, 0x7, 0x370e, 0x120002, 0x2, 0x6de, 0x1, 0x8000000000200001, 0x2, 0x2, 0x4000000101, 0x100, 0x1], 0xffff1000, 0x185740}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x8, 0x3, 0x0, 0x9, 0x6, 0x8a, 0xd, 0x9f, 0x9, 0x80, 0x8, 0x0, 0x6, 0x6, 0x79, 0xc, 0x5, 0xff, '\x00', 0xfc, 0x40007}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.453437516s ago: executing program 0 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe08) 2.30647101s ago: executing program 0 (id=386): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000922000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x2, 0x2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.279671541s ago: executing program 0 (id=387): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x47866000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000b5c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x24080044) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 7) 2.155101945s ago: executing program 0 (id=388): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0xb0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r3, r3, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x2, 0xffffdffc, 0x3}}) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000400)) lsetxattr$security_capability(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x6257, 0xb960}, {0x8000, 0x7}], r3}, 0x18, 0x2) ioctl$RTC_UIE_ON(r1, 0x7003) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141082, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) flock(r6, 0x4) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x26, 0x2c, 0x14, 0x15, 0x9, 0x0, 0x4, 0x27, 0xffffffffffffffff}}) ioctl$RTC_AIE_ON(r1, 0x7001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80, 0x200400) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, &(0x7f00000002c0)={0x2393, "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"}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 1.733031697s ago: executing program 2 (id=392): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000880)={&(0x7f0000000100)=0xa8, 0x5, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.731735087s ago: executing program 2 (id=393): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000d00)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) 1.65300857s ago: executing program 2 (id=394): fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f39000060f9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.65192863s ago: executing program 2 (id=395): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000922000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x2, 0x2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007340), 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.65159325s ago: executing program 2 (id=396): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000020f2042311000000000001090224000100006006090400040203000200092104004001222b0009058103"], 0x0) r1 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r2, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chown(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x3) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe8b}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x12f) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc0386723, 0x0) 934.109632ms ago: executing program 3 (id=402): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r6, 0x2) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r8, 0x1) (async) flock(r7, 0x2) flock(r7, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) r10 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) read$eventfd(r10, &(0x7f0000000040), 0x8) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x20000023896) (async, rerun: 32) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) fcntl$addseals(r11, 0x409, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x6000) pselect6(0x0, 0x0, &(0x7f0000000080)={0x1, 0xa, 0xfffffffffffffffe, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) (async, rerun: 64) ppoll(&(0x7f0000000140)=[{r2, 0x4002}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x20, 0x21, 0xf8, {0xf8, 0x23, "56d98de54e32a3cf090f3f911d12073c6eab86f1965a80bad5bb5f91637af7c4d58711b2a2a5dd153eba253ce77c79e87413fe6a3f98810d540406cf29586dbf229f650a90119b55f190f6ad12dcaaf4777aa4f34889edef5ba56437f4234f6b106567d55f46156bb7f181bac020a37c63e5da6c2828031d406d438ff99bbadc7234753358daa9a2101309e382f04fc1625842123c903cdf96b6a6232e2dbfd2908f9f3df5b68c954bd875afd37c4753c7c47372fa3fb277b08f87aea2f8b2eef5ce8a222e009ea0ad1cb71d8c1c6914e44a253e3611b3ba202dd00338d5b1ce75477564f6f272c11405771d52fd0020501583ddefea"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="00030720fc8c518d8b994d972e0e9f03e6497f61d8f64c4d039b956705ccf666da8f1c27db4c1bb075a737106782adf726a6974af8d2512337e948510bd256a28ae02661ed1717c2d5106f6c415daf05daa1d53d4109"]}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x9b, "4cdb2f95a3f5f58086ea64379f5b010001004d039eafae0ea494d03986d5f293baa587df8651243ecc159b0e1319504d4d85215a2200a8529c9297edba7100a2cacf3293600f14fc09e8ea23e98fbdd1fbc485e1c3208017098f85f5054b4d5dfaf8627fe639469634c725ad65357c4eab52995215e2de2022fc387c980464794fe711733572e34ab8870b064774f86cd8447ff7bd915b2bb584cb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x63}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000380)={0x20, 0x81, 0x3, "f0d3df"}, &(0x7f0000000800)=ANY=[@ANYBLOB="208202000000576854d8e996050175260d0ca006bafb75509800688da21f495b137f98258a03da2cb6d88983785cb3807b59160407c363f0f344327c73374db23b425dbe304069a1426d5c23"], &(0x7f0000000400)=ANY=[@ANYBLOB="1ac30021633d1f"], 0x0, &(0x7f0000000440)={0x20, 0x85, 0x3, "8fdd1e"}}) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d00108008002100b7e9595c8c163e6c293c16fe23842d473b2cd5040060950d58d4ea831a9a8cc9c7a5fc8c21016c5d3d08f42a08fac58d8758a26201c88bd753f8683599d1b6bf018b6ddfa200ab2ec0d7559ac6f0800586f4c01eb31e059785ddf3af205c6b4d5cdfaf5e59ff3f1860f5be108ff1f435ca07193d5f9e56d4ab8d19a50ff255199a7610ac726e7848b84e5ff8b8236599983e628a37b20c4b08eff036587efe07714bf3b63b12f2dddfb0f70d575ff7f64897eb3814ba78fe93d92cf9174eccb002019deef46061324dc1d39e177fb1870760205fb1fee926bd1d9c075af46e0b2c1db53cf5d371744c6d2541f6aacf8ea59970b3feaf4562755247def4fd76be5a037789aadeaf629b5e145878fc788322b3b9295b9e24b2290d35cb44b0ad79b08dbf048a02d95ad4e8523ae8fb7cb81ad9249f1c0b4bac89fb41809a801b1247e9e04eddfc92c47ed8f300fc22abd71374e832b4aaf20629bf8f50467f15ab82e6db9a4445fa901a42c2e1cabc588b96e8216245c5845b26d8715c3135bc69fd118d4a9babe87e2f52a878415fc67200de23373633cf84390a657cd86426e1ce18b3fb954dab2aa40373ecf6563fa06f45a93cf859057bf100d74376ca2ffce3534216e57e697c11a5a267c56f80bd02d2346e4c7f4df9", @ANYRES32=0x0, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) syz_usb_control_io$uac3(r0, 0x0, 0x0) 823.102886ms ago: executing program 3 (id=405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x1}, 'syz1\x00', 0x3a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) readlinkat(r3, 0x0, 0x0, 0xc9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa7) ioctl$KVM_NMI(r5, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x2, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0xf000, 0x4b200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x8, 0x7, 0x370e, 0x120002, 0x2, 0x6de, 0x1, 0x8000000000200001, 0x2, 0x2, 0x4000000101, 0x100, 0x1], 0xffff1000, 0x185740}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x8, 0x3, 0x0, 0x9, 0x6, 0x8a, 0xd, 0x9f, 0x9, 0x80, 0x8, 0x0, 0x6, 0x6, 0x79, 0xc, 0x5, 0xff, '\x00', 0xfc, 0x40007}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) 813.183536ms ago: executing program 3 (id=406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e5590e0c0000002a90002b6e52586983000000000b09"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0xc, 0xff, {0xff, 0x1, "4850574c7d18214e5c32c61acd4a27d130a736ac8f428cf947aff251aa6c816dd6c0bfb89c0d047523d2d6b6ceed571c2d8f146d0e2857d462221fe5d1618dd500174adc7fc28d1cb8ceaa3b42d6e38850a0e2ac03dffc99a8ef8db4c783ef89618b328d6888559d6d3e60498bec15d265507951dd123a19e178445a3f106f3e938b59980f3c96fed31eff4edb0a14a1f97c6d21b050974bcbe0e0605402a9178bad994a3666593297e0f0531e34e064cc849b78be89f7dd4f858dc9de80085964c050397189322f36951f575a067b036f313d1ac7ad729f1ca99a9b60a46cf2b08ab1fb885f96d90367ca6345d6a7148bad1abc2e050f6d13dcd1fa8c"}}, &(0x7f0000000200)={0x0, 0x3, 0x27, @string={0x27, 0x3, "85a67af02782e7b6790c1634105d676a9ae785ecebb29156a0a9b4ca68087e3c2383b2e329"}}, &(0x7f0000000240)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x26, 0xb2, 0xfb, 0xff, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4b, 0x6, 0x3, 0xf, 0x855, [0xff0000, 0xff3f, 0xffa0, 0xc060, 0x0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x0, 0x0, 0x6, 0x4}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa9, 0x8, 0x7f, 0x7e, "b6e579f3", "1d5bcd23"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x60, 0x8, 0x9, 0x6, 0x2, 0x1}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x40, 0x3, 0x6b, "b82ad597279b64b2667cd6ff867a3a85fcb791a9376ea8bc3370025dc323b6d9ae858405095d5cced7e2aa137e2f296b1abda6d9144d967b0cdee42c38c962d90d08aa71bf0c691bcc5de80fccc7ddfa310d9d22f062a78fdc2d17fbc83e88dff79853d1f7ed72773e7eef"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x20, [0xff0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1f07"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x7ada}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, 'b\r'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9498}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) 736.175088ms ago: executing program 1 (id=407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x12, r0, 0xa46fd000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000b5c0), 0x0, 0x24080044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 721.181328ms ago: executing program 1 (id=408): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 699.148899ms ago: executing program 1 (id=409): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/118, 0x76}, {0x0}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7}, 0x400c}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x120, 0x0) 675.73895ms ago: executing program 1 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x40080) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 407.298158ms ago: executing program 1 (id=411): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000004c0)={0x94, 0x0, &(0x7f00000000c0)}) 406.960378ms ago: executing program 1 (id=412): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fsopen(0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40187014, &(0x7f0000000000)={0x19, 0x9, 0x19, 0xc, 0xa, 0x1, 0x5, 0x163}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x48000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read(r5, &(0x7f0000000f00)=""/4098, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0xa, &(0x7f0000000540)=[{0x5, 0x5, 0x1, 0x8}, {0xfff, 0x1, 0x4, 0x4}, {0x4, 0x2, 0x4, 0x6}, {0x1, 0x5, 0x8, 0xfff}, {0xc258, 0xa4, 0x2, 0x5}, {0x1fd, 0x2, 0xbc, 0x4}, {0xffff, 0x3, 0x4b, 0x9}, {0xa, 0x1, 0xf, 0x10}, {0x0, 0x10, 0x1, 0x9}, {0x4, 0x7, 0x9, 0x9}]}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, &(0x7f00000002c0)={0x2}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd8, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "1158af"}}) r8 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="202328000000282383ff7f0000187ff047f97f4f31a54607b71ea9e43d9c71479c37f525cde38bf7914077000048319f6c2ff71ab8ac8051544a1a830b5b63956fffe1894903f509edbc8b8a6ccd820e4982251eae9551c4f3042131acc7064005000000504878eb1f21424c78ddf053625abc472dacbb49e57043b89166c93a1345feadc29b11c6"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x20000000000, 0xffffffffffffffff], 0x154000}) 266.101372ms ago: executing program 3 (id=413): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000db"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x807, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x40080) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000500)="25abd62f8e053bbcc2e158990a6c14c32548644ddf7b1682ade5ad635bee97ce64572fb62a4bf6f46fea6cc2f5a7bf74920a819fdaafe7bf92983ea3c2e5d3d6121352e1e0dae31a983546e9b8c97b8855c8d9e01c780b22f1cbd928c58292587cff4040b96d28ee98abeef3523bfad9f9d7b77f119e0435e6e34657fefd0768b5f3f656c9e74257977e57deac8b77e114fbb87d2aea5413b24c20b819dcdb3b96f0c43344e13e6c58fcf418d3bc", 0xae) 257.407853ms ago: executing program 3 (id=414): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x1}, 'syz1\x00', 0x3a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) readlinkat(r3, 0x0, 0x0, 0xc9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa7) ioctl$KVM_NMI(r5, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x2, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0xf000, 0x4b200}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x8, 0x7, 0x370e, 0x120002, 0x2, 0x6de, 0x1, 0x8000000000200001, 0x2, 0x2, 0x4000000101, 0x100, 0x1], 0xffff1000, 0x185740}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x8, 0x3, 0x0, 0x9, 0x6, 0x8a, 0xd, 0x9f, 0x9, 0x80, 0x8, 0x0, 0x6, 0x6, 0x79, 0xc, 0x5, 0xff, '\x00', 0xfc, 0x40007}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) 204.275614ms ago: executing program 3 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x800b}}}, 0x1c}}, 0x4044890) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x1005, 0xfffffffffffffffe) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r6) keyctl$search(0xa, r6, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000000)=0x83, 0x4) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r10, 0xae80, 0x0) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a00400001700000425bd7000eedbdf2500000000000000a9c500ffffac1e0401000004d633000000fc000000000000000000000000000000e0000002000000000000000000000000640001010000000000000000005a1e53262ed2a41e0455d4212100064e2200070200008008000000e197bd8437981a3da8eb6c2c75aad35860cd07af4ca429281ed8c1f5c3edd140a1f7a5", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="7f000001000000000000000000000000000000000000000000000000000000014e2303ff4e2400060200000033000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="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"], 0x4a0}}, 0x800) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB='\r'], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 0s ago: executing program 2 (id=416): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) lseek(0xffffffffffffffff, 0x2000, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f00000003c0)={0x0, 0x101460, 0x100, 0x1, 0xb9}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x8000001, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20, 0xa, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x2000, 0x2, 0x902c1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x4, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x3f, 0x0, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r7, 0x0}]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 19.284779][ T36] audit: type=1400 audit(1779549025.360:64): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.285952][ T272] cgroup: Unknown subsys name 'net' [ 19.288236][ T36] audit: type=1400 audit(1779549025.360:65): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.291934][ T36] audit: type=1400 audit(1779549025.370:66): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.292102][ T272] cgroup: Unknown subsys name 'devices' [ 19.369152][ T272] cgroup: Unknown subsys name 'hugetlb' [ 19.374767][ T272] cgroup: Unknown subsys name 'rlimit' [ 19.477414][ T36] audit: type=1400 audit(1779549025.550:67): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.500727][ T36] audit: type=1400 audit(1779549025.560:68): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.526205][ T36] audit: type=1400 audit(1779549025.560:69): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.535396][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.558320][ T36] audit: type=1400 audit(1779549025.640:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.583943][ T36] audit: type=1400 audit(1779549025.640:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.611339][ T36] audit: type=1400 audit(1779549025.690:72): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.611909][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.637337][ T36] audit: type=1400 audit(1779549025.690:73): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.434830][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.441945][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.449259][ T294] bridge_slave_0: entered allmulticast mode [ 20.455453][ T294] bridge_slave_0: entered promiscuous mode [ 20.463333][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.470404][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.477504][ T294] bridge_slave_1: entered allmulticast mode [ 20.483729][ T294] bridge_slave_1: entered promiscuous mode [ 20.505921][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.512998][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.520302][ T293] bridge_slave_0: entered allmulticast mode [ 20.526620][ T293] bridge_slave_0: entered promiscuous mode [ 20.533318][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.540586][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.547752][ T293] bridge_slave_1: entered allmulticast mode [ 20.554069][ T293] bridge_slave_1: entered promiscuous mode [ 20.627756][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.634902][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.642030][ T295] bridge_slave_0: entered allmulticast mode [ 20.648216][ T295] bridge_slave_0: entered promiscuous mode [ 20.661499][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.668574][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.675662][ T295] bridge_slave_1: entered allmulticast mode [ 20.681970][ T295] bridge_slave_1: entered promiscuous mode [ 20.728115][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.735180][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.742359][ T296] bridge_slave_0: entered allmulticast mode [ 20.748594][ T296] bridge_slave_0: entered promiscuous mode [ 20.757812][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.764880][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.771983][ T296] bridge_slave_1: entered allmulticast mode [ 20.778366][ T296] bridge_slave_1: entered promiscuous mode [ 20.825137][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.832218][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.839540][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.846569][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.881483][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.888609][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.895882][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.902958][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.946987][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.954073][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.961385][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.968457][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.979276][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.986414][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.993905][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.001208][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.018677][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.025962][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.033432][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.040739][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.048633][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.055840][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.063282][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.070599][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.089103][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.096159][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.103798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.110853][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.131017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.138257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.150995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.158049][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.195537][ T294] veth0_vlan: entered promiscuous mode [ 21.203313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.210485][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.218581][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.225794][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.242719][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.249790][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.264078][ T294] veth1_macvtap: entered promiscuous mode [ 21.271166][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.278271][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.302049][ T296] veth0_vlan: entered promiscuous mode [ 21.321586][ T293] veth0_vlan: entered promiscuous mode [ 21.338011][ T293] veth1_macvtap: entered promiscuous mode [ 21.356304][ T296] veth1_macvtap: entered promiscuous mode [ 21.363537][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.386220][ T295] veth0_vlan: entered promiscuous mode [ 21.415541][ T314] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 21.430545][ T295] veth1_macvtap: entered promiscuous mode [ 21.523368][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.588518][ T319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.757372][ T319] usb 3-1: Using ep0 maxpacket: 8 [ 22.775813][ T319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 22.819732][ T319] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 22.851243][ T341] random: crng reseeded on system resumption [ 23.062537][ T319] usb 3-1: config 117 has no interface number 0 [ 23.069054][ T319] usb 3-1: config 117 interface 163 has no altsetting 0 [ 23.079323][ T319] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 23.088557][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.096610][ T319] usb 3-1: Product: syz [ 23.100864][ T319] usb 3-1: Manufacturer: syz [ 23.105588][ T319] usb 3-1: SerialNumber: syz [ 23.187542][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.322847][ T319] usb 3-1: USB disconnect, device number 2 [ 23.347376][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 23.354398][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 23.363006][ T10] usb 1-1: config 0 has no interface number 0 [ 23.370578][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 23.380156][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.397156][ T10] usb 1-1: Product: syz [ 23.401463][ T10] usb 1-1: Manufacturer: syz [ 23.406136][ T10] usb 1-1: SerialNumber: syz [ 23.411669][ T10] usb 1-1: config 0 descriptor?? [ 23.417568][ T10] smsc95xx v2.0.0 [ 23.824114][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 23.835110][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.357325][ T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.479769][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 24.479786][ T36] audit: type=1400 audit(1779549030.560:122): avc: denied { create } for pid=384 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.506184][ T36] audit: type=1400 audit(1779549030.560:123): avc: denied { write } for pid=384 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.530591][ T36] audit: type=1400 audit(1779549030.610:124): avc: denied { create } for pid=386 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.549760][ T36] audit: type=1400 audit(1779549030.610:125): avc: denied { create } for pid=386 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.569626][ T36] audit: type=1400 audit(1779549030.610:126): avc: denied { bind } for pid=386 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.589258][ T36] audit: type=1400 audit(1779549030.610:127): avc: denied { listen } for pid=386 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.609330][ T36] audit: type=1400 audit(1779549030.610:128): avc: denied { accept } for pid=386 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.629215][ T317] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.644298][ T317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 24.653715][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 24.661957][ T317] usb 3-1: Product: syz [ 24.666152][ T317] usb 3-1: Manufacturer: syz [ 24.670942][ T317] usb 3-1: SerialNumber: syz [ 24.879788][ T317] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 25.022651][ T36] audit: type=1400 audit(1779549031.100:129): avc: denied { unmount } for pid=391 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 25.050936][ T36] audit: type=1400 audit(1779549031.130:130): avc: denied { read } for pid=393 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.071871][ T36] audit: type=1400 audit(1779549031.130:131): avc: denied { ioctl } for pid=393 comm="syz.1.28" path="socket:[4485]" dev="sockfs" ino=4485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.478759][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 25.498393][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 25.518956][ T10] usb 1-1: USB disconnect, device number 2 [ 26.637918][ C1] usblp0: nonzero write bulk status received: -71 [ 26.644609][ T45] usb 3-1: USB disconnect, device number 3 [ 26.651839][ T45] usblp0: removed [ 26.697314][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.869726][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 26.880318][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.888609][ T10] usb 2-1: Product: syz [ 26.893500][ T10] usb 2-1: Manufacturer: syz [ 26.898582][ T10] usb 2-1: SerialNumber: syz [ 26.904703][ T10] usb 2-1: config 0 descriptor?? [ 27.418839][ T466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 27.807515][ T45] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 27.988886][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 27.999907][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 4 [ 28.011353][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1072, setting to 0 [ 28.025083][ T45] usb 4-1: string descriptor 0 read error: -22 [ 28.031476][ T45] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 28.041169][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.288000][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.471532][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 28.483165][ T45] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 28.494902][ T45] usb 4-1: USB disconnect, device number 2 [ 29.501624][ T45] usb 2-1: USB disconnect, device number 2 [ 29.552376][ T530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'. [ 29.655302][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 29.655345][ T36] audit: type=1400 audit(1779549035.730:166): avc: denied { create } for pid=537 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.690436][ T36] audit: type=1400 audit(1779549035.740:167): avc: denied { connect } for pid=537 comm="syz.0.86" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.787014][ T36] audit: type=1400 audit(1779549035.740:168): avc: denied { write } for pid=537 comm="syz.0.86" laddr=fe80::745a:6fff:fe97:ceca lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.856929][ T36] audit: type=1400 audit(1779549035.870:169): avc: denied { setopt } for pid=546 comm="syz.0.90" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.910585][ T36] audit: type=1400 audit(1779549035.960:170): avc: denied { create } for pid=554 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 29.954911][ T36] audit: type=1400 audit(1779549035.960:171): avc: denied { sys_admin } for pid=554 comm="syz.3.95" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 30.031955][ T36] audit: type=1400 audit(1779549036.050:172): avc: denied { write } for pid=558 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.149531][ T36] audit: type=1400 audit(1779549036.230:173): avc: denied { create } for pid=572 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.182895][ T36] audit: type=1400 audit(1779549036.260:174): avc: denied { connect } for pid=572 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.258634][ T36] audit: type=1400 audit(1779549036.280:175): avc: denied { write } for pid=572 comm="syz.1.101" laddr=fe80::13 lport=1 faddr=fe80::17 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.863552][ T585] fuse: Bad value for 'fd' [ 30.984364][ T595] netlink: 76 bytes leftover after parsing attributes in process `syz.2.109'. [ 30.993458][ T595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 31.003019][ T595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 31.056209][ T600] tmpfs: Unknown parameter 'grpquota' [ 31.063558][ T601] fuse: Bad value for 'fd' [ 31.117416][ T608] fuse: Bad value for 'fd' [ 31.268677][ T627] fuse: Bad value for 'fd' [ 31.306147][ T631] tmpfs: Unknown parameter 'usrquota' [ 31.817432][ T66] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.178439][ T66] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.190131][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 32.201778][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 32.214670][ T66] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 32.223975][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.232336][ T66] usb 1-1: Product: syz [ 32.236602][ T66] usb 1-1: Manufacturer: syz [ 32.241507][ T66] usb 1-1: SerialNumber: syz [ 32.249582][ T66] usb 1-1: config 0 descriptor?? [ 32.254845][ T644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.267719][ T66] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 32.480191][ T10] usb 1-1: USB disconnect, device number 3 [ 32.588452][ T672] overlayfs: failed to clone upperpath [ 32.603579][ T674] netlink: 80 bytes leftover after parsing attributes in process `syz.3.144'. [ 32.675122][ T690] overlayfs: failed to clone upperpath [ 33.597793][ T717] fuse: Bad value for 'group_id' [ 33.602848][ T717] fuse: Bad value for 'group_id' [ 33.727355][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.821972][ T731] netlink: 56 bytes leftover after parsing attributes in process `syz.0.170'. [ 33.831026][ T731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 33.840062][ T731] netlink: 31 bytes leftover after parsing attributes in process `syz.0.170'. [ 33.848948][ T731] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 33.856573][ T731] netlink: 31 bytes leftover after parsing attributes in process `syz.0.170'. [ 33.877306][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 33.888318][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.896833][ T66] usb 3-1: config 251 has an invalid interface number: 144 but max is 0 [ 33.905437][ T66] usb 3-1: config 251 has no interface number 0 [ 33.912018][ T66] usb 3-1: config 251 interface 144 has no altsetting 0 [ 33.920748][ T66] usb 3-1: New USB device found, idVendor=0c45, idProduct=6028, bcdDevice=a7.6a [ 33.930051][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.938294][ T66] usb 3-1: Product: syz [ 33.942737][ T66] usb 3-1: Manufacturer: syz [ 33.951274][ T66] usb 3-1: SerialNumber: syz [ 34.166670][ T66] usb 3-1: USB disconnect, device number 4 [ 34.807234][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 34.819182][ T753] input: syz1 as /devices/virtual/input/input5 [ 34.825414][ T753] input: failed to attach handler leds to device input5, error: -6 [ 34.835830][ T36] audit: type=1400 audit(1779549040.880:189): avc: denied { write } for pid=752 comm="syz.2.179" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.885887][ T36] audit: type=1400 audit(1779549040.960:190): avc: denied { ioctl } for pid=754 comm="syz.2.180" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.975267][ T36] audit: type=1400 audit(1779549041.050:191): avc: denied { unlink } for pid=760 comm="syz.1.183" name="#3" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.997881][ T36] audit: type=1400 audit(1779549041.050:192): avc: denied { mount } for pid=760 comm="syz.1.183" name="/" dev="overlay" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.019919][ T36] audit: type=1400 audit(1779549041.080:193): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.047342][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.199909][ T66] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 35.209395][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.217669][ T66] usb 1-1: Product: syz [ 35.222048][ T66] usb 1-1: Manufacturer: syz [ 35.226775][ T66] usb 1-1: SerialNumber: syz [ 35.297305][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.457396][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 35.464624][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.474532][ T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 35.483661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.491700][ T10] usb 2-1: Product: syz [ 35.495863][ T10] usb 2-1: Manufacturer: syz [ 35.497324][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.500478][ T10] usb 2-1: SerialNumber: syz [ 35.657346][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 35.663543][ T66] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 35.671883][ T66] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 35.681933][ T66] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 35.691714][ T66] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 35.701815][ T66] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.714984][ T66] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 35.724236][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.917007][ T10] usb 2-1: unit 0 not found! [ 36.119441][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.131973][ T10] usb 2-1: unit 0 not found! [ 36.142006][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 36.155629][ T10] usb 2-1: unit 0 not found! [ 36.158083][ T797] overlayfs: failed to clone upperpath [ 36.165964][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 36.177763][ T10] usb 2-1: USB disconnect, device number 3 [ 36.192877][ T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.855458][ T36] audit: type=1400 audit(1779549042.930:194): avc: denied { remount } for pid=813 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.900013][ T816] kvm: pic: single mode not supported [ 36.900030][ T816] kvm: pic: level sensitive irq not supported [ 36.907204][ T816] kvm: pic: single mode not supported [ 36.914245][ T816] kvm: pic: single mode not supported [ 36.919955][ T816] kvm: pic: level sensitive irq not supported [ 37.443907][ T826] mmap: syz.1.208 (826) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.596935][ T829] 9pnet: Could not find request transport: rdma [ 37.665413][ T36] audit: type=1400 audit(1779549043.740:195): avc: denied { create } for pid=832 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.685628][ T36] audit: type=1400 audit(1779549043.740:196): avc: denied { getopt } for pid=832 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.798475][ T381] usb 1-1: USB disconnect, device number 4 [ 37.891429][ T847] overlayfs: failed to resolve './file1': -2 [ 37.898191][ T36] audit: type=1400 audit(1779549043.970:197): avc: denied { mounton } for pid=846 comm="syz.0.218" path="/syzcgroup/unified/syz0/syz1/bus" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.036611][ T852] ======================================================= [ 38.036611][ T852] WARNING: The mand mount option has been deprecated and [ 38.036611][ T852] and is ignored by this kernel. Remove the mand [ 38.036611][ T852] option from the mount to silence this warning. [ 38.036611][ T852] ======================================================= [ 38.256403][ T66] usb 3-1: USB disconnect, device number 5 [ 38.697506][ T855] kvm: user requested TSC rate below hardware speed [ 38.797375][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.828173][ T36] audit: type=1400 audit(1779549044.910:198): avc: denied { create } for pid=877 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.957366][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.109149][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.120745][ T66] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 39.134604][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.144705][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.153467][ T66] usb 3-1: Product: syz [ 39.158498][ T66] usb 3-1: Manufacturer: syz [ 39.163220][ T66] usb 3-1: SerialNumber: syz [ 39.185501][ T66] cdc_mbim 3-1:1.0: skipping garbage [ 39.386397][ T868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.681930][ T891] tmpfs: Unsupported parameter 'mpol' [ 39.693245][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 39.705433][ T9] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 39.718180][ T9] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 39.736404][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.747634][ T9] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 39.765084][ T896] fuse: Unknown parameter 'grou00000000000000000000' [ 39.772887][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 39.782312][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.795592][ T9] usb 2-1: Product: syz [ 39.800235][ T9] usb 2-1: Manufacturer: syz [ 39.807446][ T9] usb 2-1: SerialNumber: syz [ 39.846669][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 39.846701][ T36] audit: type=1400 audit(1779549045.920:203): avc: denied { write } for pid=906 comm="syz.0.243" path="socket:[5809]" dev="sockfs" ino=5809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.998943][ T868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.010267][ T66] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 40.021056][ T66] wwan wwan0: port wwan0mbim0 attached [ 40.046798][ T66] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, de:59:5f:3f:f4:28 [ 40.301811][ T66] usb 3-1: USB disconnect, device number 6 [ 40.385448][ T66] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 40.419819][ T36] audit: type=1400 audit(1779549046.370:204): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.546498][ T36] audit: type=1400 audit(1779549046.430:205): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.626129][ T66] wwan wwan0: port wwan0mbim0 disconnected [ 40.756236][ T36] audit: type=1400 audit(1779549046.430:206): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1101 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.807361][ T36] audit: type=1400 audit(1779549046.430:207): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1101 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.845587][ T36] audit: type=1400 audit(1779549046.430:208): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1101 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.876010][ T36] audit: type=1400 audit(1779549046.870:209): avc: denied { read } for pid=921 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.907917][ T36] audit: type=1400 audit(1779549046.870:210): avc: denied { open } for pid=921 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.945277][ T36] audit: type=1400 audit(1779549046.870:211): avc: denied { getattr } for pid=921 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.977612][ T36] audit: type=1400 audit(1779549047.050:212): avc: denied { write } for pid=920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.190611][ T9] usb 2-1: USB disconnect, device number 4 [ 41.357371][ T66] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.438758][ T985] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 41.458684][ T988] overlayfs: conflicting options: userxattr,redirect_dir=on [ 41.518024][ T997] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 41.527737][ T997] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 41.537431][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 41.549495][ T66] usb 3-1: config index 0 descriptor too short (expected 37412, got 36) [ 41.558284][ T66] usb 3-1: config 0 has too many interfaces: 52, using maximum allowed: 32 [ 41.568351][ T66] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 52 [ 41.577394][ T66] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.588373][ T66] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.598316][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.605658][ T66] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.02 [ 41.614760][ T66] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 41.622863][ T66] usb 3-1: Product: syz [ 41.627810][ T66] usb 3-1: config 0 descriptor?? [ 41.647328][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 41.799850][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 41.809060][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.817108][ T9] usb 2-1: Product: syz [ 41.821400][ T9] usb 2-1: Manufacturer: syz [ 41.826039][ T9] usb 2-1: SerialNumber: syz [ 41.832124][ T9] usb 2-1: config 0 descriptor?? [ 42.039618][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.137339][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.144329][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.151676][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.158659][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.165696][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.177607][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.185463][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.192411][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.199524][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.206449][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.213396][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.220341][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.227291][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.234301][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.242549][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.249508][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.256420][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.263405][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.270343][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.277372][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.284294][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.291248][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.298197][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.305400][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.312365][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.319295][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.326232][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.333267][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.340223][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.347237][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.354210][ T66] ntrig 0003:1B96:0001.0001: unknown main item tag 0x0 [ 42.362365][ T66] ntrig 0003:1B96:0001.0001: hidraw0: USB HID v0.08 Device [syz] on usb-dummy_hcd.2-1/input0 [ 42.379187][ T66] usb 3-1: USB disconnect, device number 7 [ 42.424449][ T1009] fido_id[1009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 42.841816][ T1027] fuse: Unknown parameter 'grou00000000000000000000' [ 42.882749][ T1032] overlay: filesystem on ./bus not supported as upperdir [ 43.430131][ T1060] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 43.439651][ T1060] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 43.584337][ T1077] netlink: 72 bytes leftover after parsing attributes in process `syz.3.302'. [ 43.593935][ T1077] netlink: 'syz.3.302': attribute type 16 has an invalid length. [ 43.601707][ T1077] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 43.609496][ T1077] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.302'. [ 43.697311][ T66] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 43.858802][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 43.867270][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.877482][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.887885][ T66] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 43.896965][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.905020][ T66] usb 3-1: Product: syz [ 43.909204][ T66] usb 3-1: Manufacturer: syz [ 43.913817][ T66] usb 3-1: SerialNumber: syz [ 44.122946][ T66] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 44.132927][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.143127][ T66] usb 3-1: USB disconnect, device number 8 [ 44.150528][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.334242][ T381] usb 2-1: USB disconnect, device number 5 [ 44.456560][ T1104] netlink: 68 bytes leftover after parsing attributes in process `syz.3.312'. [ 44.777410][ T381] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.986797][ T381] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.042286][ T381] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 45.050270][ T381] usb 2-1: can't read configurations, error -71 [ 45.455517][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 45.455534][ T36] audit: type=1400 audit(1779549051.530:230): avc: denied { bind } for pid=1132 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.667458][ T1143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.685174][ T1143] 9pnet_fd: Insufficient options for proto=fd [ 45.687381][ T36] audit: type=1400 audit(1779549051.760:231): avc: denied { ioctl } for pid=1142 comm="syz.3.326" path="socket:[7544]" dev="sockfs" ino=7544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.721002][ T36] audit: type=1400 audit(1779549051.760:232): avc: denied { bind } for pid=1142 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.488917][ T36] audit: type=1400 audit(1779549052.560:233): avc: denied { write } for pid=1162 comm="syz.0.333" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.519330][ T36] audit: type=1400 audit(1779549052.590:234): avc: denied { read } for pid=1166 comm="syz.1.335" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.542552][ T36] audit: type=1400 audit(1779549052.590:235): avc: denied { open } for pid=1166 comm="syz.1.335" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.566602][ T36] audit: type=1400 audit(1779549052.600:236): avc: denied { map } for pid=1166 comm="syz.1.335" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.589935][ T36] audit: type=1400 audit(1779549052.600:237): avc: denied { execute } for pid=1166 comm="syz.1.335" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.613457][ T36] audit: type=1400 audit(1779549052.600:238): avc: denied { ioctl } for pid=1166 comm="syz.1.335" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.642080][ T36] audit: type=1400 audit(1779549052.720:239): avc: denied { mounton } for pid=1166 comm="syz.1.335" path="/58/file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 46.733575][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.742179][ T66] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 46.749931][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.778769][ T1179] FAULT_INJECTION: forcing a failure. [ 46.778769][ T1179] name failslab, interval 1, probability 0, space 0, times 1 [ 46.791626][ T1179] CPU: 0 UID: 0 PID: 1179 Comm: syz.2.336 Not tainted syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 46.791656][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.791676][ T1179] Call Trace: [ 46.791682][ T1179] [ 46.791690][ T1179] __dump_stack+0x21/0x30 [ 46.791726][ T1179] dump_stack_lvl+0x140/0x1c0 [ 46.791749][ T1179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.791773][ T1179] dump_stack+0x19/0x20 [ 46.791794][ T1179] should_fail_ex+0x3d7/0x530 [ 46.791812][ T1179] should_failslab+0xac/0x100 [ 46.791833][ T1179] __kmalloc_cache_node_noprof+0x46/0x430 [ 46.791853][ T1179] ? kasan_save_track+0x4f/0x80 [ 46.791872][ T1179] ? __get_vm_area_node+0x14d/0x3d0 [ 46.791895][ T1179] ? __kasan_slab_alloc+0x73/0x90 [ 46.791915][ T1179] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 46.791934][ T1179] ? dup_task_struct+0xc1/0xd80 [ 46.791956][ T1179] __get_vm_area_node+0x14d/0x3d0 [ 46.791978][ T1179] __vmalloc_node_range_noprof+0x30e/0x1480 [ 46.792002][ T1179] ? copy_process+0x55a/0x32a0 [ 46.792026][ T1179] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 46.792050][ T1179] ? kasan_save_alloc_info+0x40/0x50 [ 46.792071][ T1179] ? __kasan_slab_alloc+0x73/0x90 [ 46.792087][ T1179] ? arch_dup_task_struct+0x5b/0xe0 [ 46.792110][ T1179] ? __asan_memcpy+0x5a/0x80 [ 46.792125][ T1179] dup_task_struct+0x5d6/0xd80 [ 46.792143][ T1179] ? copy_process+0x55a/0x32a0 [ 46.792160][ T1179] ? _raw_spin_lock_irq+0x93/0x120 [ 46.792177][ T1179] ? copy_process+0x32a0/0x32a0 [ 46.792195][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.792210][ T1179] copy_process+0x55a/0x32a0 [ 46.792230][ T1179] ? __cfi_copy_process+0x10/0x10 [ 46.792248][ T1179] ? __kmalloc_cache_noprof+0x23c/0x470 [ 46.792265][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.792279][ T1179] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 46.792297][ T1179] vhost_task_create+0x1f7/0x400 [ 46.792314][ T1179] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 46.792352][ T1179] ? __cfi_vhost_task_create+0x10/0x10 [ 46.792369][ T1179] ? __cfi_vhost_task_fn+0x10/0x10 [ 46.792387][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.792400][ T1179] ? mutex_lock+0x97/0x1d0 [ 46.792420][ T1179] ? __cfi_mutex_lock+0x10/0x10 [ 46.792437][ T1179] ? kernel_text_address+0xa9/0xe0 [ 46.792461][ T1179] kvm_mmu_post_init_vm+0x161/0x300 [ 46.792485][ T1179] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 46.792508][ T1179] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 46.792529][ T1179] ? kstrtoull+0x13b/0x1e0 [ 46.792553][ T1179] ? kstrtouint+0x78/0xf0 [ 46.792575][ T1179] ? ioctl_has_perm+0x1bc/0x500 [ 46.792592][ T1179] ? __asan_memcpy+0x5a/0x80 [ 46.792609][ T1179] ? ioctl_has_perm+0x408/0x500 [ 46.792626][ T1179] ? has_cap_mac_admin+0xd0/0xd0 [ 46.792642][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.792659][ T1179] ? mutex_lock_killable+0x97/0x1d0 [ 46.792680][ T1179] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.792701][ T1179] ? proc_fail_nth_write+0x184/0x220 [ 46.792726][ T1179] kvm_vcpu_ioctl+0xa48/0x1000 [ 46.792745][ T1179] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.792763][ T1179] ? __cfi_vfs_write+0x10/0x10 [ 46.792780][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.792796][ T1179] ? mutex_unlock+0x90/0x240 [ 46.792816][ T1179] ? __cfi_mutex_unlock+0x10/0x10 [ 46.792842][ T1179] ? __fget_files+0x2c5/0x340 [ 46.792863][ T1179] ? __fget_files+0x2c5/0x340 [ 46.792884][ T1179] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.792906][ T1179] ? security_file_ioctl+0x3e/0x110 [ 46.792931][ T1179] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.792948][ T1179] __se_sys_ioctl+0x132/0x1b0 [ 46.792969][ T1179] __x64_sys_ioctl+0x7f/0xa0 [ 46.792990][ T1179] x64_sys_call+0x1878/0x2ee0 [ 46.793007][ T1179] do_syscall_64+0x57/0xf0 [ 46.793026][ T1179] ? clear_bhb_loop+0x50/0xa0 [ 46.793047][ T1179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.793066][ T1179] RIP: 0033:0x7f7639d9ce59 [ 46.793091][ T1179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.793106][ T1179] RSP: 002b:00007f763aca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.793133][ T1179] RAX: ffffffffffffffda RBX: 00007f763a016090 RCX: 00007f7639d9ce59 [ 46.793148][ T1179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 46.793160][ T1179] RBP: 00007f763aca8090 R08: 0000000000000000 R09: 0000000000000000 [ 46.793172][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.793184][ T1179] R13: 00007f763a016128 R14: 00007f763a016090 R15: 00007ffe08ead878 [ 46.793200][ T1179] [ 46.793210][ T1179] syz.2.336: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 46.919885][ T66] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 46.922677][ T1179] ,cpuset= [ 46.927337][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.932145][ T1179] syz2 [ 46.937436][ T66] usb 1-1: Product: syz [ 46.942217][ T1179] ,mems_allowed=0 [ 46.947012][ T66] usb 1-1: Manufacturer: syz [ 46.952013][ T1179] [ 46.962269][ T66] usb 1-1: SerialNumber: syz [ 46.967224][ T1179] CPU: 0 UID: 0 PID: 1179 Comm: syz.2.336 Not tainted syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 46.967253][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.967264][ T1179] Call Trace: [ 46.967272][ T1179] [ 46.967280][ T1179] __dump_stack+0x21/0x30 [ 46.967308][ T1179] dump_stack_lvl+0x140/0x1c0 [ 46.967331][ T1179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.967354][ T1179] dump_stack+0x19/0x20 [ 46.967375][ T1179] warn_alloc+0x1e7/0x2c0 [ 46.967396][ T1179] ? __kasan_kmalloc+0x28/0xb0 [ 46.967416][ T1179] ? __cfi_warn_alloc+0x10/0x10 [ 46.967436][ T1179] ? kasan_save_track+0x4f/0x80 [ 46.967454][ T1179] ? dup_task_struct+0xc1/0xd80 [ 46.967475][ T1179] ? __get_vm_area_node+0x3bd/0x3d0 [ 46.967499][ T1179] __vmalloc_node_range_noprof+0x333/0x1480 [ 46.967525][ T1179] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 46.967548][ T1179] ? kasan_save_alloc_info+0x40/0x50 [ 46.967571][ T1179] ? __kasan_slab_alloc+0x73/0x90 [ 46.967590][ T1179] ? arch_dup_task_struct+0x5b/0xe0 [ 46.967614][ T1179] ? __asan_memcpy+0x5a/0x80 [ 46.967630][ T1179] dup_task_struct+0x5d6/0xd80 [ 46.967650][ T1179] ? copy_process+0x55a/0x32a0 [ 46.967670][ T1179] ? _raw_spin_lock_irq+0x93/0x120 [ 46.967688][ T1179] ? copy_process+0x32a0/0x32a0 [ 46.967709][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.967725][ T1179] copy_process+0x55a/0x32a0 [ 46.967747][ T1179] ? __cfi_copy_process+0x10/0x10 [ 46.967767][ T1179] ? __kmalloc_cache_noprof+0x23c/0x470 [ 46.967785][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.967809][ T1179] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 46.967830][ T1179] vhost_task_create+0x1f7/0x400 [ 46.967848][ T1179] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 46.967868][ T1179] ? __cfi_vhost_task_create+0x10/0x10 [ 46.967887][ T1179] ? __cfi_vhost_task_fn+0x10/0x10 [ 46.967904][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.967921][ T1179] ? mutex_lock+0x97/0x1d0 [ 46.967939][ T1179] ? __cfi_mutex_lock+0x10/0x10 [ 46.967957][ T1179] ? kernel_text_address+0xa9/0xe0 [ 46.967981][ T1179] kvm_mmu_post_init_vm+0x161/0x300 [ 46.968004][ T1179] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 46.968027][ T1179] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 46.968048][ T1179] ? kstrtoull+0x13b/0x1e0 [ 46.968071][ T1179] ? kstrtouint+0x78/0xf0 [ 46.968093][ T1179] ? ioctl_has_perm+0x1bc/0x500 [ 46.968109][ T1179] ? __asan_memcpy+0x5a/0x80 [ 46.968125][ T1179] ? ioctl_has_perm+0x408/0x500 [ 46.968140][ T1179] ? has_cap_mac_admin+0xd0/0xd0 [ 46.968155][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.968171][ T1179] ? mutex_lock_killable+0x97/0x1d0 [ 46.968191][ T1179] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.968211][ T1179] ? proc_fail_nth_write+0x184/0x220 [ 46.968235][ T1179] kvm_vcpu_ioctl+0xa48/0x1000 [ 46.968252][ T1179] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.968269][ T1179] ? __cfi_vfs_write+0x10/0x10 [ 46.968286][ T1179] ? __kasan_check_write+0x18/0x20 [ 46.968301][ T1179] ? mutex_unlock+0x90/0x240 [ 46.968320][ T1179] ? __cfi_mutex_unlock+0x10/0x10 [ 46.968339][ T1179] ? __fget_files+0x2c5/0x340 [ 46.968359][ T1179] ? __fget_files+0x2c5/0x340 [ 46.968378][ T1179] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.968398][ T1179] ? security_file_ioctl+0x3e/0x110 [ 46.968422][ T1179] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.968438][ T1179] __se_sys_ioctl+0x132/0x1b0 [ 46.968457][ T1179] __x64_sys_ioctl+0x7f/0xa0 [ 46.968476][ T1179] x64_sys_call+0x1878/0x2ee0 [ 46.968492][ T1179] do_syscall_64+0x57/0xf0 [ 46.968508][ T1179] ? clear_bhb_loop+0x50/0xa0 [ 46.968528][ T1179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.968546][ T1179] RIP: 0033:0x7f7639d9ce59 [ 46.968562][ T1179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.968575][ T1179] RSP: 002b:00007f763aca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.968594][ T1179] RAX: ffffffffffffffda RBX: 00007f763a016090 RCX: 00007f7639d9ce59 [ 46.968607][ T1179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 46.968618][ T1179] RBP: 00007f763aca8090 R08: 0000000000000000 R09: 0000000000000000 [ 46.968630][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.968640][ T1179] R13: 00007f763a016128 R14: 00007f763a016090 R15: 00007ffe08ead878 [ 46.968654][ T1179] [ 46.968760][ T1179] Mem-Info: [ 47.203740][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.208874][ T1179] active_anon:22944 inactive_anon:0 isolated_anon:0 [ 47.208874][ T1179] active_file:17838 inactive_file:2312 isolated_file:0 [ 47.208874][ T1179] unevictable:0 dirty:120 writeback:0 [ 47.208874][ T1179] slab_reclaimable:4758 slab_unreclaimable:72076 [ 47.208874][ T1179] mapped:24379 shmem:16612 pagetables:813 [ 47.208874][ T1179] sec_pagetables:0 bounce:0 [ 47.208874][ T1179] kernel_misc_reclaimable:0 [ 47.208874][ T1179] free:1511705 free_pcp:2860 free_cma:0 [ 47.216125][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.224029][ T1179] Node 0 active_anon:91776kB inactive_anon:0kB active_file:71352kB inactive_file:9248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97516kB dirty:480kB writeback:0kB shmem:66448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4512kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 47.243512][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.248273][ T1179] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963324kB mlocked:0kB bounce:0kB free_pcp:5160kB local_pcp:5160kB free_cma:0kB [ 47.263211][ T1200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.273043][ T317] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.279080][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.284306][ T1179] lowmem_reserve[]: [ 47.287027][ T1200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.291095][ T1179] 0 [ 47.311912][ T66] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 1b [ 47.318261][ T1179] 3921 [ 47.351394][ T66] usb 1-1: USB disconnect, device number 5 [ 47.499564][ T1209] FAULT_INJECTION: forcing a failure. [ 47.499564][ T1209] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.503190][ T1179] 3921 [ 47.514861][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: syz.0.351 Not tainted syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 47.514890][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 47.514902][ T1209] Call Trace: [ 47.514908][ T1209] [ 47.514915][ T1209] __dump_stack+0x21/0x30 [ 47.514946][ T1209] dump_stack_lvl+0x140/0x1c0 [ 47.514969][ T1209] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.514992][ T1209] ? cgroup_rstat_updated+0x141/0x810 [ 47.515013][ T1209] dump_stack+0x19/0x20 [ 47.515034][ T1209] should_fail_ex+0x3d7/0x530 [ 47.515052][ T1209] should_fail_alloc_page+0xec/0x110 [ 47.515072][ T1209] __alloc_pages_noprof+0x1c0/0x7e0 [ 47.515096][ T1209] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.515118][ T1209] ? memcg1_commit_charge+0xf8/0x2b0 [ 47.515138][ T1209] pte_alloc_one+0x92/0x530 [ 47.515156][ T1209] ? __cfi_pte_alloc_one+0x10/0x10 [ 47.515172][ T1209] ? blk_cgroup_congested+0x120/0x130 [ 47.515193][ T1209] ? __folio_throttle_swaprate+0x97/0x160 [ 47.515216][ T1209] ? folio_prealloc+0xe5/0x220 [ 47.515236][ T1209] do_pte_missing+0x1e7e/0x4410 [ 47.515257][ T1209] ? __cfi_mas_store_prealloc+0x10/0x10 [ 47.515286][ T1209] ? pte_marker_clear+0x1b0/0x1b0 [ 47.515307][ T1209] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 47.515330][ T1209] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 47.515354][ T1209] handle_mm_fault+0x11b8/0x1bf0 [ 47.515375][ T1209] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.515395][ T1209] ? __cfi_find_vma+0x10/0x10 [ 47.515412][ T1209] ? vma_is_secretmem+0x11/0x50 [ 47.515435][ T1209] __get_user_pages+0x1186/0x22d0 [ 47.515460][ T1209] ? populate_vma_page_range+0x220/0x220 [ 47.515480][ T1209] ? down_read+0x7f/0xe0 [ 47.515500][ T1209] ? __cfi_down_read+0x10/0x10 [ 47.515522][ T1209] __mm_populate+0x2f8/0x430 [ 47.515543][ T1209] do_mlock+0x7eb/0xa00 [ 47.515565][ T1209] ? fput+0x1a4/0x240 [ 47.515585][ T1209] ? lru_gen_add_folio+0x860/0x860 [ 47.515607][ T1209] ? ksys_write+0x1f3/0x260 [ 47.515624][ T1209] ? __cfi_ksys_write+0x10/0x10 [ 47.515641][ T1209] ? __kasan_check_read+0x15/0x20 [ 47.515658][ T1209] __x64_sys_mlock+0x64/0x80 [ 47.515679][ T1209] x64_sys_call+0x670/0x2ee0 [ 47.515695][ T1209] do_syscall_64+0x57/0xf0 [ 47.515712][ T1209] ? clear_bhb_loop+0x50/0xa0 [ 47.515732][ T1209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.515751][ T1209] RIP: 0033:0x7f42fe99ce59 [ 47.515765][ T1209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.515778][ T1209] RSP: 002b:00007f42ff87a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 47.515798][ T1209] RAX: ffffffffffffffda RBX: 00007f42fec15fa0 RCX: 00007f42fe99ce59 [ 47.515811][ T1209] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 47.515833][ T1209] RBP: 00007f42ff87a090 R08: 0000000000000000 R09: 0000000000000000 [ 47.515844][ T1209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.515863][ T1209] R13: 00007f42fec16038 R14: 00007f42fec15fa0 R15: 00007ffcc1c31428 [ 47.515877][ T1209] [ 47.577938][ T1212] capability: warning: `syz.3.353' uses 32-bit capabilities (legacy support in use) [ 47.583893][ T1179] [ 48.255915][ T1179] Normal free:3089080kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93240kB inactive_anon:0kB active_file:71352kB inactive_file:9248kB unevictable:0kB writepending:484kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3912kB local_pcp:2756kB free_cma:0kB [ 48.287510][ T1179] lowmem_reserve[]: 0 0 0 [ 48.291899][ T1179] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 48.307444][ T1179] Normal: 58*4kB (UME) 105*8kB (UME) 126*16kB (UME) 150*32kB (UME) 153*64kB (UME) 80*128kB (UME) 30*256kB (UME) 10*512kB (UME) 6*1024kB (ME) 7*2048kB (ME) 740*4096kB (UM) = 3092240kB [ 48.332401][ T1179] 36757 total pagecache pages [ 48.338500][ T1179] 0 pages in swap cache [ 48.342840][ T1179] Free swap = 124424kB [ 48.347014][ T1179] Total swap = 124996kB [ 48.352622][ T1179] 2097051 pages RAM [ 48.356532][ T1179] 0 pages HighMem/MovableOnly [ 48.361781][ T1179] 352254 pages reserved [ 48.366162][ T1179] 0 pages cma reserved [ 48.372540][ T1179] Memory allocations: [ 48.381308][ T1179] 0 B 0 init/main.c:1477 func:do_initcalls [ 48.388992][ T1179] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 48.397815][ T1179] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 48.405788][ T1179] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 48.414117][ T1179] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 48.422806][ T1179] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 48.431680][ T1179] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 48.439687][ T1179] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 48.447643][ T1179] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 48.455595][ T1179] 0 B 0 init/initramfs.c:101 func:find_link [ 48.537350][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.603399][ T1233] /dev/rnullb0: Can't open blockdev [ 48.687343][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 48.694216][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.702705][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.712824][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.724301][ T66] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 48.733542][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.741564][ T66] usb 1-1: Product: syz [ 48.745726][ T66] usb 1-1: Manufacturer: syz [ 48.750352][ T66] usb 1-1: SerialNumber: syz [ 48.958952][ T66] usb 1-1: Unsupported UAC3 BADD profile [ 48.966143][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.976073][ T66] usb 1-1: USB disconnect, device number 6 [ 48.983431][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.477377][ T317] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.637372][ T317] usb 2-1: Using ep0 maxpacket: 16 [ 49.644585][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.655970][ T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.657876][ T1271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.665764][ T317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.676988][ T1271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.686188][ T317] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 49.702803][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.711400][ T317] usb 2-1: config 0 descriptor?? [ 49.894603][ T1279] overlayfs: failed to clone lowerpath [ 50.123248][ T317] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0002/input/input15 [ 50.137626][ T317] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 50.325813][ T1256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.334369][ T1256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.347836][ T31] usb 2-1: USB disconnect, device number 9 [ 50.435293][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 50.607744][ T1299] process 'syz.0.388' launched './file0' with NULL argv: empty string added [ 50.616950][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 50.616964][ T36] audit: type=1400 audit(1779549056.690:249): avc: denied { execute_no_trans } for pid=1298 comm="syz.0.388" path="/104/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.646719][ T36] audit: type=1400 audit(1779549056.700:250): avc: denied { read } for pid=1298 comm="syz.0.388" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.669969][ T36] audit: type=1400 audit(1779549056.700:251): avc: denied { open } for pid=1298 comm="syz.0.388" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.694319][ T36] audit: type=1400 audit(1779549056.700:252): avc: denied { ioctl } for pid=1298 comm="syz.0.388" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.857340][ T381] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.878506][ T1301] overlayfs: failed to resolve './file0': -2 [ 50.987351][ T381] usb 1-1: device descriptor read/64, error -71 [ 51.227360][ T381] usb 1-1: device descriptor read/64, error -71 [ 51.417333][ T317] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.467336][ T381] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.567330][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 51.573772][ T317] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.585041][ T317] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.594920][ T317] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.607921][ T381] usb 1-1: device descriptor read/64, error -71 [ 51.614210][ T317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.620977][ T317] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 51.630034][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.638616][ T317] usb 3-1: config 0 descriptor?? [ 51.841047][ T1324] overlayfs: failed to resolve './file1': -2 [ 51.847430][ T381] usb 1-1: device descriptor read/64, error -71 [ 51.902058][ T1340] fuse: Bad value for 'rootmode' [ 51.957508][ T381] usb usb1-port1: attempt power cycle [ 52.035718][ T1342] fuse: root generation should be zero [ 52.073480][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.081423][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.089045][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.096520][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.101156][ T1353] overlayfs: failed to resolve './file1': -2 [ 52.103950][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.118143][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.127454][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.134526][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.141819][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.149109][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.156368][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.163530][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.170706][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.177829][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.184895][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.192146][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.199321][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.206420][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.213526][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.220701][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.227840][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.234893][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.242074][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.249317][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.256369][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.263464][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.270626][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.276462][ T36] audit: type=1400 audit(1779549058.350:253): avc: denied { read } for pid=1319 comm="syz.2.396" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.277729][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.303833][ T36] audit: type=1400 audit(1779549058.350:254): avc: denied { open } for pid=1319 comm="syz.2.396" path="/74/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.308291][ T381] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 52.340526][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.347407][ T36] audit: type=1400 audit(1779549058.350:255): avc: denied { mount } for pid=1319 comm="syz.2.396" name="/" dev="ramfs" ino=9455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.347773][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.372288][ T36] audit: type=1400 audit(1779549058.350:256): avc: denied { ioctl } for pid=1319 comm="syz.2.396" path="/74/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.378070][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.410259][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.417682][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.425056][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.429438][ T36] audit: type=1400 audit(1779549058.500:257): avc: denied { write } for pid=1361 comm="syz.1.412" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.432216][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.462221][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.469506][ T317] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 52.476945][ T381] usb 1-1: device descriptor read/8, error -71 [ 52.482812][ T36] audit: type=1400 audit(1779549058.550:258): avc: denied { read } for pid=1361 comm="syz.1.412" path="socket:[9535]" dev="sockfs" ino=9535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.497445][ T317] chicony 0003:04F2:1123.0003: hidraw0: USB HID v0.04 Device [HID 04f2:1123] on usb-dummy_hcd.2-1/input0 [ 52.522209][ T317] usb 3-1: USB disconnect, device number 9 [ 52.608498][ T381] usb 1-1: device descriptor read/8, error -71 [ 52.757319][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 52.825742][ T295] ------------[ cut here ]------------ [ 52.831313][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 52.840941][ T295] Modules linked in: [ 52.844846][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 52.856518][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.866608][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 52.872304][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 51 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 b2 3e ff <0f> 0b e9 3e ff ff ff e8 4a b2 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 52.892072][ T295] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 52.898283][ T295] RAX: ffffffff8249147a RBX: 0000000000000000 RCX: ffff888104333900 [ 52.906267][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.914306][ T295] RBP: ffffc9000b69fb70 R08: ffff888131616c3f R09: 1ffff110262c2d87 [ 52.918453][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 52.922437][ T295] R10: dffffc0000000000 R11: ffffed10262c2d88 R12: 0000000000000000 [ 52.933940][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 52.941708][ T295] R13: dffffc0000000000 R14: ffff888131616ba0 R15: ffff888114389000 [ 52.941732][ T295] FS: 000055558c55e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.952920][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 52.960798][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.960821][ T295] CR2: 000055558c589998 CR3: 0000000121fe8000 CR4: 00000000003526b0 [ 52.960837][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003e4f [ 52.970428][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 52.983077][ T295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 52.983100][ T295] Call Trace: [ 52.983108][ T295] [ 52.990151][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.997774][ T295] ovl_do_remove+0x81b/0xda0 [ 53.021325][ T31] usb 2-1: config 0 descriptor?? [ 53.022821][ T295] ? ovl_set_redirect+0x780/0x780 [ 53.026547][ T1362] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 53.029774][ T295] ? down_write+0xee/0x2b0 [ 53.064015][ T295] ? __cfi_down_write+0x10/0x10 [ 53.068921][ T295] ovl_rmdir+0x1e/0x30 [ 53.073007][ T295] vfs_rmdir+0x3e0/0x560 [ 53.077315][ T295] incfs_kill_sb+0x109/0x230 [ 53.081920][ T295] deactivate_locked_super+0xd8/0x2a0 [ 53.087359][ T295] deactivate_super+0xb8/0xe0 [ 53.092050][ T295] cleanup_mnt+0x406/0x4a0 [ 53.096469][ T295] __cleanup_mnt+0x1d/0x40 [ 53.101148][ T295] task_work_run+0x1e5/0x260 [ 53.105765][ T295] ? __cfi_task_work_run+0x10/0x10 [ 53.110948][ T295] ? __x64_sys_umount+0x12e/0x180 [ 53.116002][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 53.121466][ T295] ? __kasan_check_read+0x15/0x20 [ 53.126509][ T295] resume_user_mode_work+0x35/0x50 [ 53.131659][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 53.137127][ T295] do_syscall_64+0x63/0xf0 [ 53.141571][ T295] ? clear_bhb_loop+0x50/0xa0 [ 53.146260][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.152270][ T295] RIP: 0033:0x7f7639d9e097 [ 53.156689][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 53.176416][ T295] RSP: 002b:00007ffe08eacae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 53.184868][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7639d9e097 [ 53.192898][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe08eacba0 [ 53.200907][ T295] RBP: 00007ffe08eacba0 R08: 00007ffe08eadba0 R09: 00000000ffffffff [ 53.208917][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe08eadc30 [ 53.216892][ T295] R13: 00007f7639e321ca R14: 000000000000cddb R15: 00007ffe08eadc70 [ 53.224906][ T295] [ 53.227956][ T295] ---[ end trace 0000000000000000 ]--- [ 53.233506][ T381] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.233727][ T295] ------------[ cut here ]------------ [ 53.246654][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 53.255985][ T295] Modules linked in: [ 53.258359][ T381] usb 1-1: device descriptor read/8, error -71 [ 53.259930][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 53.279210][ T295] Tainted: [W]=WARN [ 53.283004][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.293173][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 53.298836][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 51 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 b2 3e ff <0f> 0b e9 3e ff ff ff e8 4a b2 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 53.318471][ T295] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 53.324642][ T295] RAX: ffffffff8249147a RBX: 0000000000000000 RCX: ffff888104333900 [ 53.332639][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.340658][ T295] RBP: ffffc9000b69fb70 R08: ffff888131616c3f R09: 1ffff110262c2d87 [ 53.348668][ T295] R10: dffffc0000000000 R11: ffffed10262c2d88 R12: 0000000000000000 [ 53.356640][ T295] R13: dffffc0000000000 R14: ffff888131616ba0 R15: ffff888114389000 [ 53.364746][ T295] FS: 000055558c55e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.373761][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.380436][ T295] CR2: 00007fad96fea2f8 CR3: 0000000121fe8000 CR4: 00000000003526b0 [ 53.388455][ T295] Call Trace: [ 53.391733][ T295] [ 53.394654][ T295] ovl_do_remove+0x81b/0xda0 [ 53.398377][ T381] usb 1-1: device descriptor read/8, error -71 [ 53.399291][ T295] ? ovl_set_redirect+0x780/0x780 [ 53.410444][ T295] ? down_write+0xee/0x2b0 [ 53.414866][ T295] ? __cfi_down_write+0x10/0x10 [ 53.419755][ T295] ovl_rmdir+0x1e/0x30 [ 53.424026][ T295] vfs_rmdir+0x3e0/0x560 [ 53.428329][ T295] incfs_kill_sb+0x1a0/0x230 [ 53.432927][ T295] deactivate_locked_super+0xd8/0x2a0 [ 53.438378][ T295] deactivate_super+0xb8/0xe0 [ 53.443077][ T295] cleanup_mnt+0x406/0x4a0 [ 53.447539][ T295] __cleanup_mnt+0x1d/0x40 [ 53.451977][ T295] task_work_run+0x1e5/0x260 [ 53.456573][ T295] ? __cfi_task_work_run+0x10/0x10 [ 53.461822][ T295] ? __x64_sys_umount+0x12e/0x180 [ 53.466873][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 53.472301][ T295] ? __kasan_check_read+0x15/0x20 [ 53.477380][ T295] resume_user_mode_work+0x35/0x50 [ 53.482767][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 53.488271][ T295] do_syscall_64+0x63/0xf0 [ 53.492790][ T295] ? clear_bhb_loop+0x50/0xa0 [ 53.497509][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.503501][ T295] RIP: 0033:0x7f7639d9e097 [ 53.507949][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 53.517410][ T381] usb usb1-port1: unable to enumerate USB device [ 53.527655][ T295] RSP: 002b:00007ffe08eacae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 53.542542][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7639d9e097 [ 53.550749][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe08eacba0 [ 53.559095][ T295] RBP: 00007ffe08eacba0 R08: 00007ffe08eadba0 R09: 00000000ffffffff [ 53.567097][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe08eadc30 [ 53.575273][ T295] R13: 00007f7639e321ca R14: 000000000000cddb R15: 00007ffe08eadc70 [ 53.583314][ T295] [ 53.586331][ T295] ---[ end trace 0000000000000000 ]--- [ 53.593234][ T31] hid (null): global environment stack underflow [ 53.600677][ T31] elecom 0003:056E:00E6.0004: unknown main item tag 0x2 [ 53.607863][ T31] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 53.614895][ T31] elecom 0003:056E:00E6.0004: global environment stack underflow [ 53.622687][ T31] elecom 0003:056E:00E6.0004: item 0 4 1 11 parsing failed [ 53.630140][ T31] elecom 0003:056E:00E6.0004: probe with driver elecom failed with error -22 [ 53.809986][ T381] usb 2-1: USB disconnect, device number 10