last executing test programs: 2.778537567s ago: executing program 0 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x70, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "11f4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x70}}, 0x0) 2.778320457s ago: executing program 0 (id=31): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000600)={0x3, 0x0, 0x9}) 1.574622139s ago: executing program 1 (id=61): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.494665891s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='8', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1.494547441s ago: executing program 2 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="0800264f851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.483240122s ago: executing program 1 (id=67): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f00000002c0)) 1.426745803s ago: executing program 2 (id=68): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 1.426502983s ago: executing program 1 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200ef26a8a8a2a839780000001e", 0x68}], 0x1}, 0x4000) 1.426433473s ago: executing program 1 (id=70): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000009c0)=""/164) 1.426375183s ago: executing program 1 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.419483223s ago: executing program 1 (id=72): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.402159314s ago: executing program 2 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fcntl$setlease(r0, 0x400, 0x0) 1.334707306s ago: executing program 2 (id=74): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) 929.887266ms ago: executing program 2 (id=75): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 117.473108ms ago: executing program 0 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa8802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000200)) 55.439119ms ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000c80), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 50.507039ms ago: executing program 3 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_b, @from_mac=@broadcast, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x3c}}, 0x40000000) 41.558069ms ago: executing program 3 (id=96): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1500c1, 0x0) 913.22µs ago: executing program 3 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 709.16µs ago: executing program 3 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000000000000000000000000300000a60000000060a090400000000000000000200400334000480300001800e000100696d6d6564696174650000001c000280100002800c00028008bd4d7174d3bb385d000140000000000900010073797a30000000000900020073797a32000000002c000000050a01040000000000000000020000000c00024000000000000000010900010073797a300000000014000000000003"], 0xc8}}, 0x0) 599.86µs ago: executing program 0 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) 506.76µs ago: executing program 3 (id=100): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0xe000001a}) read$FUSE(r1, &(0x7f0000001340)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000003380)={0x60000018}) epoll_pwait(r0, &(0x7f00000033c0)=[{}], 0x1, 0xdf4, 0x0, 0x0) 417.17µs ago: executing program 0 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x88a8', 0x6) write(r0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=103): r0 = add_key(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000f40)='asymmetric\x00', 0x0, &(0x7f0000000f80)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001500)={r1}, &(0x7f0000001540)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 20.922429][ T36] audit: type=1400 audit(1791823407.999:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.923607][ T286] cgroup: Unknown subsys name 'net' [ 20.945107][ T36] audit: type=1400 audit(1791823407.999:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.973183][ T36] audit: type=1400 audit(1791823408.029:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.973403][ T286] cgroup: Unknown subsys name 'devices' [ 21.116218][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.121923][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.214890][ T36] audit: type=1400 audit(1791823408.299:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.238107][ T36] audit: type=1400 audit(1791823408.299:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.262803][ T36] audit: type=1400 audit(1791823408.299:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.287344][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.296108][ T36] audit: type=1400 audit(1791823408.379:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.321503][ T36] audit: type=1400 audit(1791823408.379:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.353855][ T36] audit: type=1400 audit(1791823408.429:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.354404][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.379373][ T36] audit: type=1400 audit(1791823408.429:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.012837][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.019999][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.027276][ T294] bridge_slave_0: entered allmulticast mode [ 23.033520][ T294] bridge_slave_0: entered promiscuous mode [ 23.043508][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.050580][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.057832][ T294] bridge_slave_1: entered allmulticast mode [ 23.064036][ T294] bridge_slave_1: entered promiscuous mode [ 23.070173][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.077236][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.084412][ T296] bridge_slave_0: entered allmulticast mode [ 23.090635][ T296] bridge_slave_0: entered promiscuous mode [ 23.103348][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.110446][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.117709][ T296] bridge_slave_1: entered allmulticast mode [ 23.123927][ T296] bridge_slave_1: entered promiscuous mode [ 23.159716][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.166804][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.173872][ T295] bridge_slave_0: entered allmulticast mode [ 23.180259][ T295] bridge_slave_0: entered promiscuous mode [ 23.189698][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.196764][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.203841][ T295] bridge_slave_1: entered allmulticast mode [ 23.210306][ T295] bridge_slave_1: entered promiscuous mode [ 23.225235][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232282][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.239431][ T293] bridge_slave_0: entered allmulticast mode [ 23.245627][ T293] bridge_slave_0: entered promiscuous mode [ 23.274931][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.281996][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.289174][ T293] bridge_slave_1: entered allmulticast mode [ 23.295372][ T293] bridge_slave_1: entered promiscuous mode [ 23.412093][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.419216][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.426588][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433665][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.443465][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.450552][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.457853][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.464924][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.501085][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.508182][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.515496][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.522518][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.547687][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.555316][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.562684][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.570368][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.578096][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.585506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.601552][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.608646][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624821][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.631967][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.657095][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.664262][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.672077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.679179][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.719469][ T296] veth0_vlan: entered promiscuous mode [ 23.732903][ T294] veth0_vlan: entered promiscuous mode [ 23.741081][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.748165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.756544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.763589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.785672][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.792731][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.801734][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.808910][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.824392][ T296] veth1_macvtap: entered promiscuous mode [ 23.839171][ T294] veth1_macvtap: entered promiscuous mode [ 23.879681][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.897634][ T295] veth0_vlan: entered promiscuous mode [ 23.908431][ T293] veth0_vlan: entered promiscuous mode [ 23.933807][ T295] veth1_macvtap: entered promiscuous mode [ 23.943962][ T293] veth1_macvtap: entered promiscuous mode [ 24.000227][ T321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.000746][ T321] rust_binder: 320:321 error while translating object: ENOENT [ 24.016308][ T323] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.026287][ T321] rust_binder: Failure in copy_transaction_data: ENOENT [ 24.026335][ T321] rust_binder: 320:321 transaction call to 320:0 failed ENOENT, code 0 size 80-24 line thread.rs:865 [ 24.057152][ T311] rust_binder: 320: undelivered TRANSACTION_ERROR: 29201 [ 24.064907][ T325] TCP: TCP_TX_DELAY enabled [ 24.132691][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 24.155248][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.174957][ T347] 9pnet_virtio: no channels available for device syz [ 24.204177][ T355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 24.208155][ T357] Zero length message leads to an empty skb [ 24.315588][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.327489][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.337659][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 24.346845][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.355776][ T9] usb 3-1: config 0 descriptor?? [ 24.484455][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.494285][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.635403][ T65] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.644247][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 24.647260][ T65] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.652764][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.673281][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.675040][ T65] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 24.682264][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.691621][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.702217][ T311] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 24.710556][ T65] usb 4-1: Product: syz [ 24.719327][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.723752][ T65] usb 4-1: Manufacturer: syz [ 24.736379][ T65] usb 4-1: SerialNumber: syz [ 24.738050][ T311] hub 2-1:1.0: bad descriptor, ignoring hub [ 24.748053][ T311] hub 2-1:1.0: probe with driver hub failed with error -5 [ 24.755423][ T311] cdc_wdm 2-1:1.0: skipping garbage [ 24.760666][ T311] cdc_wdm 2-1:1.0: skipping garbage [ 24.766761][ T311] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 24.772725][ T311] cdc_wdm 2-1:1.0: Unknown control protocol [ 24.843429][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 24.852870][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 24.861537][ T9] usb 3-1: USB disconnect, device number 2 [ 25.164297][ T65] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.254602][ T31] usb 2-1: USB disconnect, device number 2 [ 25.315366][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.326546][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.336505][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.349818][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.359087][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.369317][ T65] usb 1-1: config 0 descriptor?? [ 25.778385][ T65] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 25.792218][ T65] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 25.900645][ T426] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.946188][ T433] 9pnet_virtio: no channels available for device syz [ 25.962710][ T435] ======================================================= [ 25.962710][ T435] WARNING: The mand mount option has been deprecated and [ 25.962710][ T435] and is ignored by this kernel. Remove the mand [ 25.962710][ T435] option from the mount to silence this warning. [ 25.962710][ T435] ======================================================= [ 25.962802][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 25.962815][ T36] audit: type=1400 audit(1791823413.039:156): avc: denied { remount } for pid=434 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.036392][ T438] syzkaller1: entered promiscuous mode [ 26.036996][ T36] audit: type=1400 audit(1791823413.119:157): avc: denied { create } for pid=439 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.041966][ T438] syzkaller1: entered allmulticast mode [ 26.067815][ T36] audit: type=1400 audit(1791823413.139:158): avc: denied { connect } for pid=439 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.087230][ T36] audit: type=1400 audit(1791823413.139:159): avc: denied { setopt } for pid=439 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.179044][ T36] audit: type=1400 audit(1791823413.259:160): avc: denied { mmap_zero } for pid=450 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 26.222353][ T457] FAULT_INJECTION: forcing a failure. [ 26.222353][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 26.235232][ T457] CPU: 1 UID: 0 PID: 457 Comm: syz.2.65 Not tainted syzkaller #0 bc7b6724338d5534643cc89cfe391bc2161f9bdd [ 26.235267][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.235288][ T457] Call Trace: [ 26.235294][ T457] [ 26.235303][ T457] __dump_stack+0x21/0x30 [ 26.235342][ T457] dump_stack_lvl+0x140/0x1c0 [ 26.235369][ T457] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.235396][ T457] ? __filename_parentat+0x458/0x660 [ 26.235417][ T457] dump_stack+0x19/0x20 [ 26.235453][ T457] should_fail_ex+0x3c2/0x510 [ 26.235473][ T457] should_failslab+0xac/0x100 [ 26.235492][ T457] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 26.235519][ T457] ? __d_alloc+0x42/0x8c0 [ 26.235542][ T457] ? __d_lookup+0x4e8/0x550 [ 26.235567][ T457] __d_alloc+0x42/0x8c0 [ 26.235589][ T457] d_alloc+0x4c/0x1c0 [ 26.235611][ T457] ? lookup_one_qstr_excl+0xba/0x280 [ 26.235629][ T457] lookup_one_qstr_excl+0xcf/0x280 [ 26.235647][ T457] do_rmdir+0x1d2/0x590 [ 26.235668][ T457] ? __cfi_do_rmdir+0x10/0x10 [ 26.235689][ T457] ? strncpy_from_user+0x14f/0x280 [ 26.235708][ T457] ? __kasan_check_write+0x18/0x20 [ 26.235731][ T457] ? getname_flags+0x203/0x6b0 [ 26.235757][ T457] ? __kasan_check_write+0x18/0x20 [ 26.235781][ T457] __x64_sys_unlinkat+0xc9/0xf0 [ 26.235802][ T457] x64_sys_call+0x2974/0x2ee0 [ 26.235821][ T457] do_syscall_64+0x57/0xf0 [ 26.235840][ T457] ? clear_bhb_loop+0x50/0xa0 [ 26.235862][ T457] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.235885][ T457] RIP: 0033:0x7faeca79e1d9 [ 26.235908][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.235924][ T457] RSP: 002b:00007faecb6e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 26.235953][ T457] RAX: ffffffffffffffda RBX: 00007faecaa25fa0 RCX: 00007faeca79e1d9 [ 26.235971][ T457] RDX: 0000000000000200 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 26.235986][ T457] RBP: 00007faeca835888 R08: 0000000000000000 R09: 0000000000000000 [ 26.235999][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.236011][ T457] R13: 00007faecaa26038 R14: 00007faecaa25fa0 R15: 00007ffd682a9e28 [ 26.236029][ T457] [ 26.250645][ T36] audit: type=1400 audit(1791823413.329:161): avc: denied { ioctl } for pid=458 comm="syz.1.67" path="socket:[3685]" dev="sockfs" ino=3685 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.344478][ T473] FAULT_INJECTION: forcing a failure. [ 26.344478][ T473] name failslab, interval 1, probability 0, space 0, times 0 [ 26.347848][ T36] audit: type=1400 audit(1791823413.339:162): avc: denied { ioctl } for pid=460 comm="syz.2.66" path="socket:[4556]" dev="sockfs" ino=4556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.352705][ T473] CPU: 1 UID: 0 PID: 473 Comm: syz.2.73 Not tainted syzkaller #0 bc7b6724338d5534643cc89cfe391bc2161f9bdd [ 26.352735][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.352747][ T473] Call Trace: [ 26.352753][ T473] [ 26.352762][ T473] __dump_stack+0x21/0x30 [ 26.352796][ T473] dump_stack_lvl+0x140/0x1c0 [ 26.352824][ T473] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.352851][ T473] ? __futex_wait+0x330/0x3d0 [ 26.352876][ T473] dump_stack+0x19/0x20 [ 26.352900][ T473] should_fail_ex+0x3c2/0x510 [ 26.352918][ T473] should_failslab+0xac/0x100 [ 26.352937][ T473] kmem_cache_alloc_noprof+0x42/0x410 [ 26.352962][ T473] ? fcntl_setlease+0x106/0x570 [ 26.352990][ T473] fcntl_setlease+0x106/0x570 [ 26.353013][ T473] ? __cfi_futex_wait+0x10/0x10 [ 26.353034][ T473] ? __cfi_fcntl_setlease+0x10/0x10 [ 26.353059][ T473] ? vfs_write+0xbcf/0xfd0 [ 26.353086][ T473] do_fcntl+0x5de/0x1580 [ 26.353102][ T473] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 26.353128][ T473] ? check_fcntl_cmd+0xb0/0xb0 [ 26.353144][ T473] ? mutex_unlock+0x90/0x240 [ 26.353169][ T473] ? bpf_lsm_file_fcntl+0xd/0x20 [ 26.353188][ T473] ? security_file_fcntl+0x3e/0x110 [ 26.353212][ T473] __se_sys_fcntl+0xe4/0x180 [ 26.353238][ T473] __x64_sys_fcntl+0x7f/0xa0 [ 26.353262][ T473] x64_sys_call+0x1cb3/0x2ee0 [ 26.353281][ T473] do_syscall_64+0x57/0xf0 [ 26.353297][ T473] ? clear_bhb_loop+0x50/0xa0 [ 26.353318][ T473] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.353339][ T473] RIP: 0033:0x7faeca79e1d9 [ 26.353354][ T473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.353369][ T473] RSP: 002b:00007faecb6e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 26.353391][ T473] RAX: ffffffffffffffda RBX: 00007faecaa25fa0 RCX: 00007faeca79e1d9 [ 26.353415][ T473] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 26.353427][ T473] RBP: 00007faeca835888 R08: 0000000000000000 R09: 0000000000000000 [ 26.353440][ T473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.353452][ T473] R13: 00007faecaa26038 R14: 00007faecaa25fa0 R15: 00007ffd682a9e28 [ 26.353468][ T473] [ 26.574244][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.577067][ T36] audit: type=1400 audit(1791823413.409:163): avc: denied { accept } for pid=462 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.734224][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 26.791824][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 26.800426][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 26.810424][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 26.820401][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 26.830400][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 26.843381][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 26.852502][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.235249][ T31] usb 4-1: USB disconnect, device number 2 [ 27.236240][ T36] audit: type=1400 audit(1791823414.319:164): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.265159][ T36] audit: type=1400 audit(1791823414.349:165): avc: denied { write } for pid=483 comm="syz.3.76" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.297153][ T484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.623109][ T513] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 27.677221][ T525] 9pnet_virtio: no channels available for device syz [ 27.752824][ T543] ------------[ cut here ]------------ [ 27.758404][ T543] WARNING: CPU: 1 PID: 543 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 27.767840][ T543] Modules linked in: [ 27.771740][ T543] CPU: 1 UID: 0 PID: 543 Comm: syz.0.103 Not tainted syzkaller #0 bc7b6724338d5534643cc89cfe391bc2161f9bdd [ 27.783264][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.793604][ T543] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 27.799222][ T543] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 d2 26 03 cc e8 6a 8a 05 ff 0f 0b b8 ea ff ff ff eb de e8 5c 8a 05 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 27.818902][ T543] RSP: 0018:ffffc9000d71f728 EFLAGS: 00010287 [ 27.825049][ T543] RAX: ffffffff8283c264 RBX: ffff8881168f4200 RCX: 0000000000080000 [ 27.833031][ T543] RDX: ffffc90001631000 RSI: 0000000000000705 RDI: 0000000000000706 [ 27.841062][ T543] RBP: ffffc9000d71f770 R08: ffffc9000d71f82f R09: 0000000000000000 [ 27.849090][ T543] R10: 0000000000000000 R11: ffffffff8283bd80 R12: ffff8881139bd608 [ 27.857086][ T543] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881168f4238 [ 27.865328][ T543] FS: 00007fc01d3306c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 27.874319][ T543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.880917][ T543] CR2: 00007fc01d32fff8 CR3: 0000000113f8c000 CR4: 00000000003526b0 [ 27.888931][ T543] Call Trace: [ 27.892238][ T543] [ 27.894626][ T9] usb 1-1: USB disconnect, device number 2 [ 27.895204][ T543] ? __asan_memcpy+0x5a/0x80 [ 27.905605][ T543] crypto_sig_verify+0x1d0/0x260 [ 27.910584][ T543] ? __cfi_crypto_sig_verify+0x10/0x10 [ 27.916116][ T543] ? crypto_sig_set_pubkey+0x9d/0xb0 [ 27.921424][ T543] public_key_verify_signature+0x654/0xa40 [ 27.927282][ T543] ? __cfi_public_key_verify_signature+0x10/0x10 [ 27.933728][ T543] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 27.939322][ T543] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 27.945974][ T543] public_key_verify_signature_2+0x47/0x60 [ 27.951808][ T543] verify_signature+0xf3/0x120 [ 27.956642][ T543] asymmetric_key_verify_signature+0x160/0x200 [ 27.962823][ T543] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 27.969540][ T543] ? should_fail+0xf/0x20 [ 27.973875][ T543] ? __kasan_check_write+0x18/0x20 [ 27.979042][ T543] ? _copy_from_user+0x87/0xa0 [ 27.983839][ T543] ? memdup_user+0xb1/0x170 [ 27.988420][ T543] keyctl_pkey_verify+0x203/0x290 [ 27.993472][ T543] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 27.999097][ T543] __se_sys_keyctl+0x743/0xe40 [ 28.003881][ T543] ? __x64_sys_keyctl+0xf0/0xf0 [ 28.008795][ T543] ? __cfi_do_futex+0x10/0x10 [ 28.013520][ T543] ? kvfree_sensitive+0x51/0x70 [ 28.018393][ T543] ? __se_sys_futex+0x13c/0x320 [ 28.023254][ T543] ? __x64_sys_futex+0x110/0x110 [ 28.028507][ T543] ? __kasan_check_write+0x18/0x20 [ 28.033646][ T543] ? fpregs_restore_userregs+0x11c/0x260 [ 28.039324][ T543] __x64_sys_keyctl+0xc3/0xf0 [ 28.044103][ T543] x64_sys_call+0x996/0x2ee0 [ 28.048741][ T543] do_syscall_64+0x57/0xf0 [ 28.053164][ T543] ? clear_bhb_loop+0x50/0xa0 [ 28.057864][ T543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.063760][ T543] RIP: 0033:0x7fc01c39e1d9 [ 28.068196][ T543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.087846][ T543] RSP: 002b:00007fc01d330028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 28.096296][ T543] RAX: ffffffffffffffda RBX: 00007fc01c625fa0 RCX: 00007fc01c39e1d9 [ 28.104570][ T543] RDX: 0000200000001540 RSI: 0000200000001500 RDI: 000000000000001c [ 28.112574][ T543] RBP: 00007fc01c435888 R08: 0000000000000000 R09: 0000000000000000 [ 28.120585][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.128622][ T543] R13: 00007fc01c626038 R14: 00007fc01c625fa0 R15: 00007ffd703c8e28 [ 28.136638][ T543] [ 28.139659][ T543] ---[ end trace 0000000000000000 ]--- [ 28.824512][ T481] Bluetooth: hci0: command 0x1003 tx timeout [ 28.824815][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.333283][ T546] usb 2-1: USB disconnect, device number 3