last executing test programs: 2m37.854267302s ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000340)="695d1aff", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 2m37.835050102s ago: executing program 2 (id=41): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) 2m37.819535133s ago: executing program 2 (id=42): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioprio_set$uid(0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2m37.783343003s ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m37.718724805s ago: executing program 2 (id=45): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x2eb, 0x0, 0x0, 0x40, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x20000004, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000005, 0x1, 0x5, 0x40000003, 0xfffffffffffffff3, 0x5, 0xfffffff7, 0x8, 0xfd55, 0xa000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 2m37.467041341s ago: executing program 2 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba", 0x3b, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x22}], 0x2, 0x120, 0x0) shutdown(r0, 0x1) 2m37.460630931s ago: executing program 32 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba", 0x3b, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x22}], 0x2, 0x120, 0x0) shutdown(r0, 0x1) 2m18.352529235s ago: executing program 4 (id=428): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf4}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2m18.167396679s ago: executing program 4 (id=430): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4c, 0x1000008, 0xffffeffffffffffb, 0x5, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m18.13401133s ago: executing program 4 (id=431): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r1, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) 2m17.30243719s ago: executing program 4 (id=448): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone3(&(0x7f0000000340)={0x23820000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2165099, 0x0) 2m17.274038661s ago: executing program 4 (id=450): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="190728bd7000fcdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x880) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x1) 2m17.155023834s ago: executing program 4 (id=452): mkdir(&(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/events/sunrpc/xprt_destroy/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x2) close(r0) mkdir(&(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='none\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='tmpfs\x00', 0x0, 0x0) 2m17.134768354s ago: executing program 33 (id=452): mkdir(&(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/events/sunrpc/xprt_destroy/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x2) close(r0) mkdir(&(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='none\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='tmpfs\x00', 0x0, 0x0) 1m37.638878702s ago: executing program 0 (id=1338): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 1m37.572411334s ago: executing program 0 (id=1340): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x6) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1m37.478588886s ago: executing program 0 (id=1343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="0f22200fc76bd2baf80c66b8d623118f66efbafc0cec2888890a825b0099c9f3690fbd87bd870c66b8b7fabf8e66efbafc8cb000ee2e0f060fc1350f78b20000", 0x40}], 0x1, 0x9, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m37.146002964s ago: executing program 0 (id=1351): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) 1m37.145594174s ago: executing program 0 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setregid(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) close(r3) 1m36.738144583s ago: executing program 0 (id=1362): connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e23, 0x659, @empty, 0xff}, 0x1c) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000348000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m36.710567075s ago: executing program 34 (id=1362): connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e23, 0x659, @empty, 0xff}, 0x1c) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000348000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.02049956s ago: executing program 5 (id=4092): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xd883}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0xb904, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0xa7a, 0xff, 0x0, 0xffeffeff}}) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) r10 = syz_io_uring_setup(0x74aa, &(0x7f0000000540)={0x0, 0xbf44, 0x80000, 0x2, 0x144}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000042c0)={'tunl0\x00', &(0x7f00000041c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x4, 0x3, {{0x5, 0x4, 0x3, 0x1c, 0x14, 0x65, 0x0, 0xc, 0x29, 0x0, @private=0xa010100, @multicast1}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000006a40)={'sit0\x00', &(0x7f00000069c0)={'syztnl1\x00', 0x0, 0x80, 0x80, 0xfffffffe, 0x3, {{0xd, 0x4, 0x2, 0x1, 0x34, 0x65, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@noop, @timestamp={0x44, 0xc, 0xf, 0x0, 0x0, [0x4, 0xa76]}, @timestamp={0x44, 0x10, 0xd0, 0x0, 0x3, [0x2000000, 0x401, 0x1c000000]}]}}}}}) sendmmsg$inet6(r8, 0x0, 0x0, 0x100) r11 = open(0x0, 0x325082, 0x43) mknodat$loop(r11, 0x0, 0x800, 0x1) open(0x0, 0x20000, 0x718bb647156ec2f6) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x80000, 0x8, 0x40000040, 0x0, r10}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacad, 0x400, 0x1, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0xed, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcee4, 0x0, 0x0, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) 1.989426851s ago: executing program 5 (id=4095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x400c620e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) openat$incfs(r2, 0x0, 0x50100, 0x158) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.914892823s ago: executing program 5 (id=4097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0xfffd, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0x3, 0x8251c, 0x2, 0xffffeffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x146) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect$uac1(0x4, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x72, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe9, 0x1, 0xff, {0x7, 0x25, 0x1, 0xc, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x0, 0x80, {0x7, 0x25, 0x1, 0x4, 0xe6, 0x6}}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000100)) 1.825346805s ago: executing program 3 (id=4098): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x0, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r7, 0x0) 1.797331256s ago: executing program 3 (id=4099): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.573833791s ago: executing program 3 (id=4109): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 1.403236736s ago: executing program 5 (id=4107): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.379825106s ago: executing program 5 (id=4108): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r2, r4, 0x0) 1.2020756s ago: executing program 3 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r2) r3 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1022002, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000008280)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) 807.13819ms ago: executing program 6 (id=4125): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x59, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x128}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 806.54129ms ago: executing program 6 (id=4127): r0 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x10f, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x103, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$xdp(0x2c, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x20000, 0xf3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x723040, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 533.052487ms ago: executing program 1 (id=4132): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 532.650136ms ago: executing program 1 (id=4133): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 532.147376ms ago: executing program 1 (id=4134): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x9, 0x0, 0x0, 0xd6bffffffffffe, 0x7, 0x5, 0xb3, 0x8, 0x4b1a, 0x4000000000000007, 0x4000000, 0x6, 0x7, 0x1, 0xe6, 0xb286], 0x7000, 0x383fc2}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 500.403917ms ago: executing program 1 (id=4135): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x1000)=nil) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 500.256287ms ago: executing program 1 (id=4136): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, 0x0, 0x0, 0xd33) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x7230c0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 499.839297ms ago: executing program 5 (id=4137): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x406, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4043, 0x1fd) userfaultfd(0x80001) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 302.879052ms ago: executing program 3 (id=4138): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x90}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x0, 0xd4, 0xfffff004}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc0800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 302.698952ms ago: executing program 3 (id=4139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0xd12, 0x200, 0x5, 0x5439, 0x7, "ea71000500f9000000024200215f058400", 0xacc5, 0x3}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x20, 0x8, 0xc, {0xc, 0xc, "85af91f95859cba23859"}}, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0xc, 0x2) memfd_create(&(0x7f0000000000)='\'\'}#G{#/-#*\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x8901) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) 300.701912ms ago: executing program 6 (id=4140): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 292.578022ms ago: executing program 6 (id=4141): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 258.085633ms ago: executing program 6 (id=4142): mkdirat(0xffffffffffffffff, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) getuid() mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x24440, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x7f}, 0x11}) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 206.910924ms ago: executing program 6 (id=4143): r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x20, 0xf, 0x0, 0xffff7038}, {0x6, 0x0, 0x9, 0xfffffffd}, {0x80, 0x5, 0x3, 0x7}]}, 0x10) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x1, 0xa2bfb971) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=4144): mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x100400, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r3, &(0x7f0000000600), 0x0, 0x5, 0x5, 0xc) r4 = syz_ublk_setup_io_uring(0x4000000e, &(0x7f0000000040)={0x0, 0x30f5, 0x800, 0x2, 0x8154, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0x4, 0x5}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000500), 0x3e8) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): known main item tag 0x0 [ 34.492833][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.500039][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.507369][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.514346][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.521355][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.528447][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.536049][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.543202][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.550614][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.557659][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.565600][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.572698][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.579694][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.586695][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.593815][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.600919][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.607916][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.615273][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.622233][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.629458][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.634584][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 34.636466][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.649722][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.651989][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.656756][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.669295][ T54] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 34.673929][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.684605][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.699727][ T54] usb 2-1: Product: syz [ 34.705172][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.712154][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.714694][ T54] usb 2-1: Manufacturer: syz [ 34.726295][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.727182][ T54] usb 2-1: SerialNumber: syz [ 34.733374][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.742120][ T54] usb 2-1: config 0 descriptor?? [ 34.753613][ T54] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 34.763166][ T36] audit: type=1400 audit(1785251613.030:149): avc: denied { bpf } for pid=489 comm="syz.0.64" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.764558][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.807976][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.820273][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.827416][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.834387][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.841476][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.848511][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.856974][ T319] cherry 0003:046A:0023.0001: unknown main item tag 0x0 [ 34.874970][ T319] cherry 0003:046A:0023.0001: hidraw0: USB HID v0.08 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0 [ 34.889859][ T319] usb 4-1: USB disconnect, device number 3 [ 34.960191][ T495] fido_id[495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 35.043873][ T360] usb 2-1: USB disconnect, device number 2 [ 35.285717][ T36] audit: type=1400 audit(1785251613.570:150): avc: denied { read write } for pid=505 comm="syz.3.69" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.324637][ T36] audit: type=1400 audit(1785251613.570:151): avc: denied { open } for pid=505 comm="syz.3.69" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.364796][ T36] audit: type=1400 audit(1785251613.590:152): avc: denied { ioctl } for pid=505 comm="syz.3.69" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.577277][ T36] audit: type=1400 audit(1785251613.860:153): avc: denied { create } for pid=517 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.639293][ T522] syzkaller1: entered promiscuous mode [ 35.645000][ T522] syzkaller1: entered allmulticast mode [ 35.720696][ T36] audit: type=1400 audit(1785251614.000:154): avc: denied { cmd } for pid=523 comm="syz.3.78" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 35.759048][ T36] audit: type=1400 audit(1785251614.040:155): avc: denied { map } for pid=523 comm="syz.3.78" path="/dev/ublkc0" dev="devtmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.801651][ T360] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.844584][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.936449][ T36] audit: type=1400 audit(1785251614.220:156): avc: denied { mount } for pid=534 comm="syz.1.81" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.965600][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.977586][ T360] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.988679][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.004584][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 36.011270][ T360] usb 1-1: config 0 descriptor?? [ 36.014237][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.028039][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.045976][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.063676][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.083894][ T31] usb 5-1: Product: syz [ 36.088506][ T31] usb 5-1: Manufacturer: syz [ 36.093114][ T31] usb 5-1: SerialNumber: syz [ 36.224411][ T360] usbhid 1-1:0.0: can't add hid device: -71 [ 36.231374][ T360] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.243698][ T360] usb 1-1: USB disconnect, device number 3 [ 36.307826][ T31] usb 5-1: 0:2 : does not exist [ 36.314943][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 36.328585][ T31] usb 5-1: USB disconnect, device number 2 [ 36.664620][ T360] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.825579][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.836564][ T360] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 36.845621][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.857592][ T360] usb 1-1: config 0 descriptor?? [ 37.465406][ T516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.473878][ T516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.666966][ T360] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 37.688407][ T360] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 37.840840][ T594] overlayfs: failed to clone lowerpath [ 37.847282][ T594] overlayfs: failed to clone lowerpath [ 37.993159][ T31] usb 1-1: USB disconnect, device number 4 [ 37.999059][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.284749][ T633] overlayfs: statfs failed on './file0' [ 38.409324][ T641] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.628068][ T672] syzkaller1: entered promiscuous mode [ 38.633866][ T672] syzkaller1: entered allmulticast mode [ 39.270280][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 39.270308][ T36] audit: type=1400 audit(1785251617.550:203): avc: denied { unlink } for pid=765 comm="syz.1.144" name="#5" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.299123][ T36] audit: type=1400 audit(1785251617.550:204): avc: denied { mount } for pid=765 comm="syz.1.144" name="/" dev="overlay" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.321720][ T36] audit: type=1400 audit(1785251617.580:205): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.354954][ T36] audit: type=1400 audit(1785251617.630:206): avc: denied { map } for pid=767 comm="syz.1.145" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.399196][ T36] audit: type=1400 audit(1785251617.640:207): avc: denied { ioctl } for pid=767 comm="syz.1.145" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.928554][ T784] capability: warning: `syz.3.151' uses 32-bit capabilities (legacy support in use) [ 40.178322][ T36] audit: type=1400 audit(1785251618.460:208): avc: denied { getopt } for pid=799 comm="syz.3.158" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.199893][ T36] audit: type=1400 audit(1785251618.480:209): avc: denied { name_bind } for pid=799 comm="syz.3.158" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.390602][ T815] tipc: Started in network mode [ 40.398557][ T815] tipc: Node identity da26cbbe240c, cluster identity 4711 [ 40.405868][ T815] tipc: Enabled bearer , priority 10 [ 40.414611][ T814] tipc: Resetting bearer [ 40.422074][ T814] tipc: Disabling bearer [ 40.436684][ T36] audit: type=1400 audit(1785251618.710:210): avc: denied { append } for pid=818 comm="syz.0.166" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.710190][ T36] audit: type=1400 audit(1785251618.990:211): avc: denied { listen } for pid=844 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.742336][ T36] audit: type=1400 audit(1785251619.010:212): avc: denied { write } for pid=844 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.808815][ T854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 40.876520][ T858] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 40.912545][ T858] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 40.972359][ T866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.853338][ T894] Character devices: [ 41.853338][ T894] 1 mem [ 41.853338][ T894] 4 ttyS [ 41.853338][ T894] 5 /dev/tty [ 41.853338][ T894] 5 /dev/console [ 41.853338][ T894] 5 /dev/ptmx [ 41.853338][ T894] 10 misc [ 41.853338][ T894] 13 input [ 41.853338][ T894] 81 video4linux [ 41.853338][ T894] 108 ppp [ 41.853338][ T894] 116 alsa [ 41.853338][ T894] 128 ptm [ 41.853338][ T894] 136 pts [ 41.853338][ T894] 166 ttyACM [ 41.853338][ T894] 180 usb [ 41.853338][ T894] 188 ttyUSB [ 41.853338][ T894] 189 usb_device [ 41.853338][ T894] 202 cpu/msr [ 41.853338][ T894] 203 cpu/cpuid [ 41.853338][ T894] 212 DVB [ 41.853338][ T894] 216 rfcomm [ 41.853338][ T894] 226 drm [ 41.853338][ T894] 234 wwan_port [ 41.853338][ T894] 235 nvme-generic [ 41.853338][ T894] 236 nvme [ 41.853338][ T894] 237 ublk-char [ 41.853338][ T894] 238 ttynull [ 41.853338][ T894] 239 bsg [ 41.853338][ T894] 240 watchdog [ 41.853338][ T894] 241 iio [ 41.853338][ T894] 242 remoteproc [ 41.853338][ T894] 243 ptp [ 41.853338][ T894] 244 pps [ 41.853338][ T894] 245 cec [ 41.853338][ T894] 246 lirc [ 41.853338][ T894] 247 media [ 41.853338][ T894] 248 rtc [ 41.853338][ T894] 249 dma_heap [ 41.853338][ T894] 250 dax [ 41.853338][ T894] 251 dimmctl [ 41.853338][ T894] 252 ndctl [ 41.853338][ T894] 253 rpmsg_char [ 41.853338][ T894] 254 gpiochip [ 41.853338][ T894] 504 gnss [ 41.853338][ T894] 505 rust_binder [ 41.853338][ T894] 506 roccat [ 41.853338][ T894] 507 hidraw [ 41.853338][ T894] 508 rpmb [ 41.853338][ T894] 509 ttyGS [ 41.853338][ T894] 510 usbmon [ 41.853338][ T894] 511 uio [ 41.853338][ T894] [ 41.853338][ T894] Block devices: [ 41.853338][ T894] 1 ramdisk [ 41.853338][ T894] 7 loop [ 41.853338][ T894] 8 sd [ 41.853338][ T894] 65 sd [ 41.853338][ T894] 66 sd [ 41.853338][ T894] 67 sd [ 41.853338][ T894] 68 sd [ 41.853338][ T894] 69 sd [ 42.348369][ T920] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 42.730226][ T969] serio: Serial port ptm0 [ 42.944556][ T481] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.105781][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.116911][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.126733][ T481] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 43.135815][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.146015][ T481] usb 5-1: config 0 descriptor?? [ 43.204601][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.354614][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 43.360899][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.371181][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.381463][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.390566][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.398593][ T31] usb 1-1: Product: syz [ 43.402755][ T31] usb 1-1: Manufacturer: syz [ 43.407356][ T31] usb 1-1: SerialNumber: syz [ 43.555391][ T481] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 43.562877][ T481] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 43.570342][ T481] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 43.577808][ T481] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 43.585353][ T481] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 43.593542][ T481] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 43.615192][ T31] usb 1-1: 0:2 : does not exist [ 43.621796][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 43.633840][ T31] usb 1-1: USB disconnect, device number 5 [ 43.642318][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.754805][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.763980][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.817688][ T996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 44.180193][ T481] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 44.192074][ T481] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 44.204834][ T481] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0002/input/input5 [ 44.227949][ T481] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0002/input/input6 [ 44.243743][ T481] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0002/input/input7 [ 44.269236][ T481] playstation 0003:054C:0DF2.0002: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 44.401196][ T481] usb 5-1: USB disconnect, device number 3 [ 44.769670][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 44.769686][ T36] audit: type=1400 audit(1785251623.050:235): avc: denied { setattr } for pid=1027 comm="syz.1.251" name="/" dev="configfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.551254][ T36] audit: type=1400 audit(1785251623.830:236): avc: denied { create } for pid=1089 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.597093][ T36] audit: type=1400 audit(1785251623.830:237): avc: denied { associate } for pid=1092 comm="syz.3.279" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 45.664897][ T1096] capability: warning: `syz.3.280' uses deprecated v2 capabilities in a way that may be insecure [ 45.687821][ T36] audit: type=1400 audit(1785251623.970:238): avc: denied { mounton } for pid=1095 comm="syz.3.280" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.435387][ T36] audit: type=1400 audit(1785251624.720:239): avc: denied { write } for pid=1123 comm="syz.0.292" name="file1" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 46.484553][ T36] audit: type=1400 audit(1785251624.720:240): avc: denied { open } for pid=1123 comm="syz.0.292" path="/49/file0/file1" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 46.747759][ T1147] bridge0: port 3(dummy0) entered blocking state [ 46.764293][ T1147] bridge0: port 3(dummy0) entered disabled state [ 46.772608][ T1147] dummy0: entered allmulticast mode [ 46.778478][ T1147] dummy0: entered promiscuous mode [ 46.783818][ T1147] bridge0: port 3(dummy0) entered blocking state [ 46.790208][ T1147] bridge0: port 3(dummy0) entered forwarding state [ 46.799536][ T1147] dummy0: left allmulticast mode [ 46.804617][ T1147] dummy0: left promiscuous mode [ 46.809663][ T1147] bridge0: port 3(dummy0) entered disabled state [ 46.868240][ T706] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.873180][ T36] audit: type=1400 audit(1785251625.150:241): avc: denied { ioctl } for pid=1163 comm="syz.4.308" path="socket:[8784]" dev="sockfs" ino=8784 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.987039][ T36] audit: type=1400 audit(1785251625.270:242): avc: denied { getopt } for pid=1168 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.220735][ T36] audit: type=1400 audit(1785251625.500:243): avc: denied { bind } for pid=1170 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.428392][ T1178] kvm: pic: single mode not supported [ 47.428593][ T1178] kvm: pic: level sensitive irq not supported [ 47.434234][ T1178] kvm: pic: level sensitive irq not supported [ 47.441009][ T1178] kvm: pic: level sensitive irq not supported [ 47.447231][ T1178] kvm: pic: single mode not supported [ 47.453329][ T1178] kvm: pic: level sensitive irq not supported [ 47.459111][ T1178] kvm: pic: single mode not supported [ 47.518646][ T1182] syzkaller0: entered promiscuous mode [ 47.686340][ T36] audit: type=1400 audit(1785251625.970:244): avc: denied { read write } for pid=1192 comm="syz.1.320" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 47.714096][ T1197] type: 32703 invalid [ 48.404569][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 48.564619][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 48.571240][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.580988][ T31] usb 2-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 48.590079][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.598252][ T31] usb 2-1: Product: syz [ 48.602412][ T31] usb 2-1: Manufacturer: syz [ 48.607025][ T31] usb 2-1: SerialNumber: syz [ 48.762981][ T1268] syzkaller0: entered promiscuous mode [ 48.768663][ T1268] syzkaller0: entered allmulticast mode [ 48.867167][ T1276] cgroup: fork rejected by pids controller in /syz0 [ 48.934583][ T978] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.934621][ T1166] Bluetooth: hci1: command 0x1003 tx timeout [ 48.940947][ T1165] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 49.022158][ T1246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.039881][ T1246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.105585][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.118721][ T1287] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.126043][ T1287] bridge_slave_0: entered allmulticast mode [ 49.132309][ T1287] bridge_slave_0: entered promiscuous mode [ 49.138798][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.145923][ T1287] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.153031][ T1287] bridge_slave_1: entered allmulticast mode [ 49.159383][ T1287] bridge_slave_1: entered promiscuous mode [ 49.217799][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.224880][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.232176][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.239218][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.268554][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.276252][ T31] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 49.287171][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.297160][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.307330][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.314406][ T707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.322426][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.323757][ T31] usb 2-1: USB disconnect, device number 3 [ 49.329536][ T707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.343860][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.357455][ T1287] veth0_vlan: entered promiscuous mode [ 49.372213][ T1287] veth1_macvtap: entered promiscuous mode [ 49.842518][ T1326] netlink: 'syz.3.377': attribute type 12 has an invalid length. [ 49.922387][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 49.922403][ T36] audit: type=1400 audit(1785251628.200:250): avc: denied { view } for pid=1336 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.001004][ T36] audit: type=1400 audit(1785251628.280:251): avc: denied { getopt } for pid=1340 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.020763][ T36] audit: type=1400 audit(1785251628.280:252): avc: denied { shutdown } for pid=1340 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.074753][ T484] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.175877][ T36] audit: type=1400 audit(1785251628.460:253): avc: denied { read write } for pid=1383 comm="syz.4.384" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.218607][ T36] audit: type=1400 audit(1785251628.460:254): avc: denied { open } for pid=1383 comm="syz.4.384" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.245571][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.256522][ T36] audit: type=1400 audit(1785251628.490:255): avc: denied { ioctl } for pid=1383 comm="syz.4.384" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.264570][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.304181][ T484] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 50.313316][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.331641][ T484] usb 2-1: config 0 descriptor?? [ 50.435984][ T36] audit: type=1400 audit(1785251628.720:256): avc: denied { mounton } for pid=1402 comm="syz.4.392" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.470136][ T36] audit: type=1400 audit(1785251628.740:257): avc: denied { unmount } for pid=444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.632123][ T1425] netlink: 104 bytes leftover after parsing attributes in process `syz.3.400'. [ 50.632973][ T36] audit: type=1400 audit(1785251628.910:258): avc: denied { nlmsg_read } for pid=1424 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.696415][ T1427] overlayfs: failed to clone upperpath [ 50.744899][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.751901][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.773046][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.787835][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.794371][ T1433] overlayfs: failed to clone upperpath [ 50.802489][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.816045][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.832913][ T484] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.849002][ T484] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 50.959308][ T484] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 51.742463][ T741] bridge_slave_1: left allmulticast mode [ 51.748201][ T741] bridge_slave_1: left promiscuous mode [ 51.753862][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.778622][ T741] bridge_slave_0: left allmulticast mode [ 51.787817][ T741] bridge_slave_0: left promiscuous mode [ 51.793491][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.843661][ T481] usb 2-1: USB disconnect, device number 4 [ 51.940902][ T741] veth1_macvtap: left promiscuous mode [ 51.946583][ T741] veth0_vlan: left promiscuous mode [ 52.085445][ T36] audit: type=1326 audit(1785251630.370:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1487 comm="syz.0.426" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c7279de99 code=0x0 [ 52.801527][ T1519] netlink: 'syz.3.437': attribute type 27 has an invalid length. [ 52.858159][ T1519] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.865393][ T1519] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.038566][ T1539] tipc: Started in network mode [ 53.043733][ T1539] tipc: Node identity 7f000001, cluster identity 4711 [ 53.064861][ T1539] tipc: Enabled bearer , priority 10 [ 53.083013][ T1539] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 53.091267][ T1539] tipc: Enabled bearer , priority 10 [ 53.124355][ T1542] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 53.132394][ T1542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 53.159031][ T1545] syzkaller0: entered promiscuous mode [ 53.164600][ T1545] syzkaller0: entered allmulticast mode [ 53.586218][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.593417][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.600778][ T1579] bridge_slave_0: entered allmulticast mode [ 53.607397][ T1579] bridge_slave_0: entered promiscuous mode [ 53.614204][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.621561][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.629292][ T1579] bridge_slave_1: entered allmulticast mode [ 53.636727][ T1579] bridge_slave_1: entered promiscuous mode [ 53.700665][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.707771][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.715086][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.722114][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.750744][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.759326][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.770578][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.777657][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.787162][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.794276][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.827566][ T1579] veth0_vlan: entered promiscuous mode [ 53.840462][ T1579] veth1_macvtap: entered promiscuous mode [ 53.970635][ T1591] syzkaller0: entered promiscuous mode [ 53.976644][ T1591] syzkaller0: entered allmulticast mode [ 54.097713][ T1603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.097850][ T1603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.141069][ T707] bridge_slave_1: left allmulticast mode [ 54.163815][ T707] bridge_slave_1: left promiscuous mode [ 54.176573][ T707] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.198921][ T707] bridge_slave_0: left allmulticast mode [ 54.211768][ T707] bridge_slave_0: left promiscuous mode [ 54.224614][ T707] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.340612][ T1534] tipc: Node number set to 2130706433 [ 54.379878][ T707] veth1_macvtap: left promiscuous mode [ 54.398284][ T707] veth0_vlan: left promiscuous mode [ 54.744561][ T1534] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.904541][ T1534] usb 2-1: Using ep0 maxpacket: 32 [ 54.915802][ T1534] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 54.935606][ T1534] usb 2-1: config 0 has no interface number 0 [ 54.952004][ T1534] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 54.964479][ T1534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.974585][ T1534] usb 2-1: Product: syz [ 54.978771][ T1534] usb 2-1: Manufacturer: syz [ 54.983377][ T1534] usb 2-1: SerialNumber: syz [ 54.994437][ T1534] usb 2-1: config 0 descriptor?? [ 55.015340][ T1534] smsc95xx v2.0.0 [ 55.097920][ T1639] netlink: 'syz.0.482': attribute type 4 has an invalid length. [ 55.247387][ T1655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 55.817474][ T1534] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 55.828410][ T1534] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.184562][ T1528] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 56.337159][ T1528] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.355306][ T1528] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.374565][ T1528] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.384933][ T1528] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 56.393992][ T1528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.414601][ T1528] usb 1-1: Product: syz [ 56.418799][ T1528] usb 1-1: Manufacturer: syz [ 56.423401][ T1528] usb 1-1: SerialNumber: syz [ 56.434403][ T1528] usb 1-1: selecting invalid altsetting 1 [ 56.440699][ T1534] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 56.442628][ T1528] usb 1-1: unit 6 not found! [ 56.456226][ T1534] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 56.469498][ T1534] usb 2-1: USB disconnect, device number 5 [ 57.283382][ T1739] overlayfs: failed to clone upperpath [ 57.496744][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 57.496760][ T36] audit: type=1400 audit(1785251635.780:267): avc: denied { create } for pid=1747 comm="syz.3.523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.523734][ T36] audit: type=1400 audit(1785251635.780:268): avc: denied { mounton } for pid=1747 comm="syz.3.523" path="/197/file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.546883][ T36] audit: type=1400 audit(1785251635.780:269): avc: denied { setattr } for pid=1747 comm="syz.3.523" name="file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.569956][ T36] audit: type=1400 audit(1785251635.800:270): avc: denied { unlink } for pid=299 comm="syz-executor" name="file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.650774][ T1528] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.663052][ T1528] usb 1-1: USB disconnect, device number 6 [ 57.673276][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.880048][ T1765] syzkaller1: entered promiscuous mode [ 57.885700][ T1765] syzkaller1: entered allmulticast mode [ 58.204565][ T1534] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 58.229673][ T1778] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.374570][ T1534] usb 2-1: Using ep0 maxpacket: 16 [ 58.380920][ T1534] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 58.392381][ T1534] usb 2-1: config 0 interface 0 has no altsetting 0 [ 58.399229][ T1534] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 58.408511][ T1534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.418490][ T1534] usb 2-1: config 0 descriptor?? [ 59.145146][ T1534] usbhid 2-1:0.0: can't add hid device: -71 [ 59.151542][ T1534] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 59.173424][ T1534] usb 2-1: USB disconnect, device number 6 [ 59.218272][ T1831] process 'syz.3.558' launched './file0' with NULL argv: empty string added [ 59.230153][ T36] audit: type=1400 audit(1785251637.500:271): avc: denied { execute } for pid=1829 comm="syz.3.558" name="file0" dev="ramfs" ino=15244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 59.260648][ T36] audit: type=1400 audit(1785251637.530:272): avc: denied { execute_no_trans } for pid=1829 comm="syz.3.558" path="/file0" dev="ramfs" ino=15244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 59.308738][ T36] audit: type=1400 audit(1785251637.590:273): avc: denied { create } for pid=1840 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.593226][ T36] audit: type=1400 audit(1785251637.870:274): avc: denied { read } for pid=1872 comm="syz.5.576" name="c_hs_bint" dev="configfs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.616350][ T36] audit: type=1400 audit(1785251637.870:275): avc: denied { open } for pid=1872 comm="syz.5.576" path="/38/config/usb_gadget/g1/functions/uac2.usb0/c_hs_bint" dev="configfs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.643415][ T36] audit: type=1400 audit(1785251637.900:276): avc: denied { write } for pid=1875 comm="syz.5.577" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.697623][ T1878] kvm: pic: non byte read [ 59.702305][ T1878] kvm: pic: non byte read [ 59.706998][ T1878] kvm: pic: level sensitive irq not supported [ 59.707036][ T1878] kvm: pic: non byte read [ 59.717759][ T1878] kvm: pic: level sensitive irq not supported [ 59.717796][ T1878] kvm: pic: non byte read [ 59.728516][ T1878] kvm: pic: level sensitive irq not supported [ 59.728554][ T1878] kvm: pic: non byte read [ 59.739188][ T1878] kvm: pic: level sensitive irq not supported [ 59.739227][ T1878] kvm: pic: non byte read [ 59.749960][ T1878] kvm: pic: level sensitive irq not supported [ 59.750000][ T1878] kvm: pic: non byte read [ 59.760727][ T1878] kvm: pic: level sensitive irq not supported [ 59.760780][ T1878] kvm: pic: non byte read [ 59.771486][ T1878] kvm: pic: level sensitive irq not supported [ 59.771525][ T1878] kvm: pic: non byte read [ 59.782101][ T1878] kvm: pic: level sensitive irq not supported [ 59.782139][ T1878] kvm: pic: non byte read [ 59.792702][ T1878] kvm: pic: level sensitive irq not supported [ 59.792876][ T1878] kvm: pic: level sensitive irq not supported [ 60.444089][ T1915] overlayfs: failed to clone upperpath [ 60.646295][ T1921] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 60.654868][ T1921] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 61.236169][ T1930] cgroup: Setting release_agent not allowed [ 62.082521][ T1963] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.114828][ T1963] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.157456][ T1963] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 62.173731][ T1963] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 62.187531][ T1963] overlayfs: d_ino too big (110, ino=9223372036854776401, xinobits=3) [ 62.195980][ T1963] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 62.204822][ T1963] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 62.213843][ T1963] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 62.784181][ T1977] fuse: Bad value for 'fd' [ 63.263243][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 63.263261][ T36] audit: type=1400 audit(1785251641.540:288): avc: denied { sqpoll } for pid=1985 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.275103][ T1988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 63.290392][ T36] audit: type=1400 audit(1785251641.550:289): avc: denied { bind } for pid=1987 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.318417][ T36] audit: type=1400 audit(1785251641.560:290): avc: denied { setopt } for pid=1987 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.891340][ T36] audit: type=1400 audit(1785251643.160:291): avc: denied { setopt } for pid=2057 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.833108][ T36] audit: type=1400 audit(1785251644.110:292): avc: denied { cmd } for pid=2075 comm="iou-wrk-2076" path="socket:[16099]" dev="sockfs" ino=16099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.092133][ T2110] overlayfs: failed to clone upperpath [ 66.945473][ T36] audit: type=1400 audit(1785251645.230:293): avc: denied { watch_reads } for pid=2162 comm="syz.3.679" path="/252" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.099724][ T2172] fuse: Bad value for 'fd' [ 67.112919][ T2174] syz.5.685: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 67.128086][ T2174] CPU: 1 UID: 0 PID: 2174 Comm: syz.5.685 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 67.128119][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 67.128140][ T2174] Call Trace: [ 67.128147][ T2174] [ 67.128154][ T2174] __dump_stack+0x21/0x30 [ 67.128198][ T2174] dump_stack_lvl+0x140/0x1c0 [ 67.128223][ T2174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.128248][ T2174] dump_stack+0x19/0x20 [ 67.128271][ T2174] warn_alloc+0x1e7/0x2c0 [ 67.128296][ T2174] ? stack_depot_save_flags+0x38/0x800 [ 67.128319][ T2174] ? __cfi_warn_alloc+0x10/0x10 [ 67.128343][ T2174] ? kasan_save_track+0x3e/0x80 [ 67.128363][ T2174] ? kasan_save_alloc_info+0x3a/0x50 [ 67.128389][ T2174] ? xsk_init_queue+0xb2/0x120 [ 67.128412][ T2174] ? xsk_setsockopt+0x4c5/0x760 [ 67.128432][ T2174] ? do_sock_setsockopt+0x27c/0x410 [ 67.128449][ T2174] ? __x64_sys_setsockopt+0x1b7/0x250 [ 67.128466][ T2174] ? x64_sys_call+0x2adc/0x2ee0 [ 67.128483][ T2174] ? do_syscall_64+0x57/0xf0 [ 67.128502][ T2174] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.128527][ T2174] __vmalloc_node_range_noprof+0x136/0x1300 [ 67.128558][ T2174] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 67.128585][ T2174] ? kasan_save_alloc_info+0x3a/0x50 [ 67.128608][ T2174] ? __kasan_kmalloc+0x96/0xb0 [ 67.128627][ T2174] ? __kmalloc_cache_noprof+0x23c/0x470 [ 67.128648][ T2174] vmalloc_user_noprof+0x77/0x90 [ 67.128672][ T2174] ? xskq_create+0xdb/0x290 [ 67.128693][ T2174] xskq_create+0xdb/0x290 [ 67.128716][ T2174] xsk_init_queue+0xb2/0x120 [ 67.128737][ T2174] xsk_setsockopt+0x4c5/0x760 [ 67.128759][ T2174] ? __cfi_xsk_setsockopt+0x10/0x10 [ 67.128780][ T2174] ? do_futex+0x32a/0x510 [ 67.128803][ T2174] ? file_init_path+0x434/0x590 [ 67.128828][ T2174] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 67.128849][ T2174] ? security_socket_setsockopt+0x3d/0x100 [ 67.128873][ T2174] ? __cfi_xsk_setsockopt+0x10/0x10 [ 67.128895][ T2174] do_sock_setsockopt+0x27c/0x410 [ 67.128913][ T2174] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 67.128932][ T2174] ? __fget_files+0x2bc/0x330 [ 67.128954][ T2174] __x64_sys_setsockopt+0x1b7/0x250 [ 67.128973][ T2174] x64_sys_call+0x2adc/0x2ee0 [ 67.128990][ T2174] do_syscall_64+0x57/0xf0 [ 67.129028][ T2174] ? clear_bhb_loop+0x50/0xa0 [ 67.129053][ T2174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.129076][ T2174] RIP: 0033:0x7fc48a19de99 [ 67.129092][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.129108][ T2174] RSP: 002b:00007fc488bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.129129][ T2174] RAX: ffffffffffffffda RBX: 00007fc48a425fa0 RCX: 00007fc48a19de99 [ 67.129143][ T2174] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 67.129155][ T2174] RBP: 00007fc48a233eaf R08: 0000000000000004 R09: 0000000000000000 [ 67.129167][ T2174] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 67.129180][ T2174] R13: 00007fc48a426038 R14: 00007fc48a425fa0 R15: 00007ffffd409e08 [ 67.129196][ T2174] [ 67.129212][ T2174] Mem-Info: [ 67.437415][ T2174] active_anon:59236 inactive_anon:0 isolated_anon:0 [ 67.437415][ T2174] active_file:23624 inactive_file:2331 isolated_file:0 [ 67.437415][ T2174] unevictable:16962 dirty:104 writeback:0 [ 67.437415][ T2174] slab_reclaimable:5999 slab_unreclaimable:72166 [ 67.437415][ T2174] mapped:23774 shmem:53931 pagetables:1001 [ 67.437415][ T2174] sec_pagetables:0 bounce:0 [ 67.437415][ T2174] kernel_misc_reclaimable:0 [ 67.437415][ T2174] free:1450109 free_pcp:2721 free_cma:0 [ 67.483934][ T2174] Node 0 active_anon:236944kB inactive_anon:0kB active_file:94496kB inactive_file:9324kB unevictable:67848kB isolated(anon):0kB isolated(file):0kB mapped:95096kB dirty:416kB writeback:0kB shmem:215724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6756kB pagetables:4104kB sec_pagetables:0kB all_unreclaimable? no [ 67.520425][ T2174] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5236kB free_cma:0kB [ 67.552226][ T2174] lowmem_reserve[]: 0 3921 3921 [ 67.557179][ T2174] Normal free:2843044kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:238244kB inactive_anon:0kB active_file:94496kB inactive_file:9324kB unevictable:67848kB writepending:416kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2816kB local_pcp:1468kB free_cma:0kB [ 67.591992][ T2174] lowmem_reserve[]: 0 0 0 [ 67.593308][ T36] audit: type=1400 audit(1785251645.870:294): avc: denied { ioctl } for pid=2193 comm="syz.1.692" path="socket:[16233]" dev="sockfs" ino=16233 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.596438][ T2174] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 67.637600][ T2174] Normal: 15*4kB (E) 275*8kB (ME) 130*16kB (ME) 57*32kB (M) 38*64kB (UM) 119*128kB (UME) 109*256kB (UME) 55*512kB (UME) 22*1024kB (UME) 8*2048kB (UM) 665*4096kB (UM) = 2842644kB [ 67.655780][ T2174] 96844 total pagecache pages [ 67.660757][ T2174] 0 pages in swap cache [ 67.665275][ T2174] Free swap = 124408kB [ 67.669577][ T2174] Total swap = 124996kB [ 67.673803][ T2174] 2097051 pages RAM [ 67.677908][ T2174] 0 pages HighMem/MovableOnly [ 67.682671][ T2174] 352235 pages reserved [ 67.686927][ T2174] 0 pages cma reserved [ 67.692220][ T2174] Memory allocations: [ 67.696303][ T2174] 0 B 0 init/main.c:1477 func:do_initcalls [ 67.703589][ T2174] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 67.711763][ T2174] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 67.719613][ T2174] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 67.727627][ T2174] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 67.735683][ T2174] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 67.744348][ T2174] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 67.752401][ T2174] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 67.760396][ T2174] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 67.768445][ T2174] 0 B 0 init/initramfs.c:101 func:find_link [ 67.784550][ T481] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 67.838065][ T36] audit: type=1400 audit(1785251646.120:295): avc: denied { ioctl } for pid=2202 comm="syz.3.696" path="socket:[16247]" dev="sockfs" ino=16247 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.935820][ T481] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 67.946934][ T481] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.958221][ T481] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 67.972590][ T481] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.982376][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.990769][ T481] usb 1-1: SerialNumber: syz [ 68.189157][ T36] audit: type=1400 audit(1785251646.470:296): avc: denied { bind } for pid=2232 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.216720][ T36] audit: type=1400 audit(1785251646.490:297): avc: denied { map } for pid=2233 comm="syz.3.709" path="socket:[16293]" dev="sockfs" ino=16293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.246447][ T481] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 68.253157][ T481] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 68.272731][ T36] audit: type=1400 audit(1785251646.490:298): avc: denied { read write } for pid=2233 comm="syz.3.709" path="socket:[16293]" dev="sockfs" ino=16293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.301734][ T481] usb 1-1: USB disconnect, device number 7 [ 68.339382][ T36] audit: type=1400 audit(1785251646.610:299): avc: denied { read } for pid=2243 comm="syz.5.713" path="socket:[17404]" dev="sockfs" ino=17404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.472782][ T36] audit: type=1326 audit(1785251646.750:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2262 comm="syz.3.721" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb5419de99 code=0x0 [ 68.794565][ T481] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 68.818510][ T2299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2299 comm=syz.1.733 [ 68.965693][ T481] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 68.976819][ T481] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.988361][ T481] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 69.002354][ T481] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.011969][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.020200][ T481] usb 1-1: SerialNumber: syz [ 69.315024][ T2328] overlayfs: failed to clone upperpath [ 69.928049][ T2377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2377 comm=syz.1.769 [ 70.153593][ T36] audit: type=1326 audit(1785251648.430:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2386 comm="syz.5.774" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x0 [ 70.487811][ T481] rndis_host 1-1:253.0: RNDIS init failed, -110 [ 70.494243][ T481] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -110 [ 70.507901][ T481] usb 1-1: USB disconnect, device number 8 [ 70.518499][ T2393] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 70.564824][ T36] audit: type=1400 audit(1785251648.850:302): avc: denied { create } for pid=2406 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.612213][ T2411] virtio-fs: tag not found [ 70.625829][ T2411] virtio-fs: tag not found [ 70.632385][ T2411] virtio-fs: tag not found [ 70.785722][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 70.909498][ T2435] netlink: 'syz.1.796': attribute type 27 has an invalid length. [ 70.918427][ T2435] 0ªî{X¹¦: left allmulticast mode [ 70.994493][ T2443] fuse: Bad value for 'fd' [ 71.066877][ T2448] netlink: 'syz.3.801': attribute type 28 has an invalid length. [ 71.084602][ T2448] netlink: 'syz.3.801': attribute type 32 has an invalid length. [ 71.138904][ T36] audit: type=1400 audit(1785251649.420:303): avc: denied { setopt } for pid=2451 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.234250][ T36] audit: type=1400 audit(1785251649.510:304): avc: denied { mount } for pid=2464 comm="syz.3.809" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 71.311570][ T2472] netlink: 'syz.1.811': attribute type 28 has an invalid length. [ 71.319472][ T2472] netlink: 'syz.1.811': attribute type 32 has an invalid length. [ 71.465786][ T36] audit: type=1400 audit(1785251649.750:305): avc: denied { getopt } for pid=2478 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.420252][ T2503] netlink: 'syz.5.823': attribute type 28 has an invalid length. [ 72.428383][ T2503] netlink: 'syz.5.823': attribute type 32 has an invalid length. [ 73.324559][ T2543] netlink: 'syz.0.850': attribute type 27 has an invalid length. [ 73.355110][ T2543] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.362577][ T2543] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.676853][ T2564] fuse: Bad value for 'fd' [ 73.698645][ T2568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'. [ 73.820158][ T2575] netlink: 'syz.5.856': attribute type 27 has an invalid length. [ 73.840702][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.847973][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.101505][ T2622] overlayfs: failed to clone upperpath [ 75.120548][ T36] audit: type=1400 audit(1785251653.400:306): avc: denied { ioctl } for pid=2623 comm="syz.1.877" path="socket:[17826]" dev="sockfs" ino=17826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.153602][ T2626] overlayfs: failed to clone upperpath [ 76.409887][ T2692] virtio-fs: tag not found [ 76.415760][ T2692] virtio-fs: tag not found [ 76.421336][ T2692] virtio-fs: tag not found [ 76.802320][ T2729] bridge0: port 3(dummy0) entered blocking state [ 76.814616][ T2729] bridge0: port 3(dummy0) entered disabled state [ 76.824600][ T2729] dummy0: entered allmulticast mode [ 76.835035][ T2729] dummy0: entered promiscuous mode [ 76.846300][ T2729] dummy0: left allmulticast mode [ 76.851283][ T2729] dummy0: left promiscuous mode [ 76.866436][ T2729] bridge0: port 3(dummy0) entered disabled state [ 76.925308][ T2742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 77.224815][ T2755] overlayfs: failed to clone upperpath [ 77.830698][ T2805] kernel kvm profiling enabled (shift: 4) [ 78.695314][ T2859] overlayfs: failed to clone upperpath [ 78.807380][ T36] audit: type=1326 audit(1785251657.090:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2868 comm="syz.1.982" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1019de99 code=0x0 [ 79.051773][ T2882] overlayfs: failed to clone upperpath [ 79.667035][ T2926] overlayfs: failed to clone upperpath [ 79.724561][ T1521] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 79.884558][ T1521] usb 1-1: Using ep0 maxpacket: 16 [ 79.890821][ T1521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.903338][ T1521] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 79.912684][ T1521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.921391][ T1521] usb 1-1: Product: syz [ 79.925790][ T1521] usb 1-1: Manufacturer: syz [ 79.930475][ T1521] usb 1-1: SerialNumber: syz [ 79.936607][ T1521] usb 1-1: config 0 descriptor?? [ 79.942592][ T1521] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 80.155270][ T1521] usb 1-1: USB disconnect, device number 9 [ 80.712954][ T3000] netlink: 'syz.5.1037': attribute type 4 has an invalid length. [ 80.795726][ T3011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.955210][ T3027] netlink: 'syz.0.1045': attribute type 12 has an invalid length. [ 81.594581][ T1521] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.755642][ T1521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.766677][ T1521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.776441][ T1521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.789357][ T1521] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.798425][ T1521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.807222][ T1521] usb 1-1: config 0 descriptor?? [ 82.219560][ T1521] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 82.228336][ T1521] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 82.244589][ T1521] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.793453][ T3099] overlayfs: failed to clone lowerpath [ 82.799698][ T3099] overlayfs: failed to clone upperpath [ 82.988956][ T1521] usb 1-1: USB disconnect, device number 10 [ 83.119557][ T3121] overlayfs: failed to clone upperpath [ 83.329485][ T36] audit: type=1400 audit(1785251661.530:308): avc: denied { write } for pid=3133 comm="syz.0.1085" name="tcp" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.352855][ T3137] overlayfs: failed to clone upperpath [ 83.365707][ T3137] overlayfs: failed to clone upperpath [ 83.858554][ T3177] overlayfs: failed to clone upperpath [ 84.792488][ T3227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 84.835466][ T3233] cgroup: Setting release_agent not allowed [ 84.900398][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 85.959307][ T3303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1154'. [ 86.034658][ T481] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 86.194549][ T481] usb 1-1: Using ep0 maxpacket: 16 [ 86.203999][ T481] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 86.222851][ T481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.236103][ T481] usb 1-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 86.249534][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.264776][ T481] usb 1-1: config 0 descriptor?? [ 86.469382][ T3320] overlayfs: failed to clone upperpath [ 86.723551][ T3339] syz.3.1169: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 86.738536][ T3339] CPU: 1 UID: 0 PID: 3339 Comm: syz.3.1169 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 86.738566][ T3339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 86.738578][ T3339] Call Trace: [ 86.738583][ T3339] [ 86.738592][ T3339] __dump_stack+0x21/0x30 [ 86.738627][ T3339] dump_stack_lvl+0x140/0x1c0 [ 86.738654][ T3339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.738679][ T3339] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 86.738703][ T3339] dump_stack+0x19/0x20 [ 86.738727][ T3339] warn_alloc+0x1e7/0x2c0 [ 86.738753][ T3339] ? stack_depot_save_flags+0x38/0x800 [ 86.738776][ T3339] ? __cfi_warn_alloc+0x10/0x10 [ 86.738801][ T3339] ? kasan_save_track+0x3e/0x80 [ 86.738821][ T3339] ? kasan_save_alloc_info+0x3a/0x50 [ 86.738848][ T3339] ? xsk_init_queue+0xb2/0x120 [ 86.738870][ T3339] ? xsk_setsockopt+0x4c5/0x760 [ 86.738891][ T3339] ? do_sock_setsockopt+0x27c/0x410 [ 86.738909][ T3339] ? __x64_sys_setsockopt+0x1b7/0x250 [ 86.738927][ T3339] ? x64_sys_call+0x2adc/0x2ee0 [ 86.738945][ T3339] ? do_syscall_64+0x57/0xf0 [ 86.738966][ T3339] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.738991][ T3339] __vmalloc_node_range_noprof+0x136/0x1300 [ 86.739025][ T3339] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 86.739053][ T3339] ? kasan_save_alloc_info+0x3a/0x50 [ 86.739081][ T3339] ? __kasan_kmalloc+0x96/0xb0 [ 86.739102][ T3339] ? __kmalloc_cache_noprof+0x23c/0x470 [ 86.739123][ T3339] vmalloc_user_noprof+0x77/0x90 [ 86.739149][ T3339] ? xskq_create+0xdb/0x290 [ 86.739181][ T3339] xskq_create+0xdb/0x290 [ 86.739205][ T3339] xsk_init_queue+0xb2/0x120 [ 86.739230][ T3339] xsk_setsockopt+0x4c5/0x760 [ 86.739250][ T3339] ? __cfi_xsk_setsockopt+0x10/0x10 [ 86.739271][ T3339] ? do_futex+0x32a/0x510 [ 86.739295][ T3339] ? file_init_path+0x434/0x590 [ 86.739319][ T3339] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 86.739341][ T3339] ? security_socket_setsockopt+0x3d/0x100 [ 86.739366][ T3339] ? __cfi_xsk_setsockopt+0x10/0x10 [ 86.739388][ T3339] do_sock_setsockopt+0x27c/0x410 [ 86.739407][ T3339] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 86.739425][ T3339] ? __fget_files+0x2bc/0x330 [ 86.739448][ T3339] __x64_sys_setsockopt+0x1b7/0x250 [ 86.739469][ T3339] x64_sys_call+0x2adc/0x2ee0 [ 86.739487][ T3339] do_syscall_64+0x57/0xf0 [ 86.739507][ T3339] ? clear_bhb_loop+0x50/0xa0 [ 86.739532][ T3339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.739556][ T3339] RIP: 0033:0x7fbb5419de99 [ 86.739574][ T3339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.739591][ T3339] RSP: 002b:00007fbb54f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.739611][ T3339] RAX: ffffffffffffffda RBX: 00007fbb54425fa0 RCX: 00007fbb5419de99 [ 86.739627][ T3339] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 86.739640][ T3339] RBP: 00007fbb54233eaf R08: 0000000000000004 R09: 0000000000000000 [ 86.739653][ T3339] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 86.739666][ T3339] R13: 00007fbb54426038 R14: 00007fbb54425fa0 R15: 00007ffd731ae828 [ 86.739682][ T3339] [ 86.739736][ T3339] Mem-Info: [ 86.980147][ T481] usbhid 1-1:0.0: can't add hid device: -71 [ 86.999272][ T3339] active_anon:60297 inactive_anon:8 isolated_anon:0 [ 86.999272][ T3339] active_file:23624 inactive_file:2339 isolated_file:0 [ 86.999272][ T3339] unevictable:16960 dirty:226 writeback:0 [ 86.999272][ T3339] slab_reclaimable:6409 slab_unreclaimable:71357 [ 86.999272][ T3339] mapped:24210 shmem:53966 pagetables:1067 [ 86.999272][ T3339] sec_pagetables:0 bounce:0 [ 86.999272][ T3339] kernel_misc_reclaimable:0 [ 86.999272][ T3339] free:1444221 free_pcp:2385 free_cma:0 [ 87.007578][ T481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 87.015204][ T3339] Node 0 active_anon:241188kB inactive_anon:32kB active_file:94496kB inactive_file:9356kB unevictable:67840kB isolated(anon):0kB isolated(file):0kB mapped:96840kB dirty:904kB writeback:0kB shmem:215864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6980kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no [ 87.026337][ T481] usb 1-1: USB disconnect, device number 11 [ 87.033383][ T3339] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:0kB free_cma:0kB [ 87.180310][ T3339] lowmem_reserve[]: 0 3921 3921 [ 87.193380][ T3339] Normal free:2819336kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:240832kB inactive_anon:32kB active_file:94496kB inactive_file:9356kB unevictable:67840kB writepending:904kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3244kB local_pcp:3084kB free_cma:0kB [ 87.225420][ T3339] lowmem_reserve[]: 0 0 0 [ 87.230095][ T3339] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 87.248631][ T3339] Normal: 461*4kB (UME) 46*8kB (UME) 125*16kB (UME) 245*32kB (UME) 146*64kB (UME) 62*128kB (UME) 69*256kB (UME) 79*512kB (UME) 40*1024kB (UME) 19*2048kB (UME) 647*4096kB (UM) = 2817428kB [ 87.267451][ T3339] 96922 total pagecache pages [ 87.273284][ T3339] 39 pages in swap cache [ 87.277657][ T3339] Free swap = 124416kB [ 87.281846][ T3339] Total swap = 124996kB [ 87.286192][ T3339] 2097051 pages RAM [ 87.290465][ T3339] 0 pages HighMem/MovableOnly [ 87.302127][ T3339] 352235 pages reserved [ 87.306536][ T3339] 0 pages cma reserved [ 87.313546][ T3339] Memory allocations: [ 87.318875][ T3339] 0 B 0 init/main.c:1477 func:do_initcalls [ 87.330704][ T3339] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 87.338945][ T3339] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 87.346761][ T3339] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 87.354869][ T3339] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 87.362912][ T3339] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 87.371601][ T3339] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 87.379521][ T3339] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 87.387460][ T3339] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 87.395477][ T3339] 0 B 0 init/initramfs.c:101 func:find_link [ 88.015110][ T3381] netlink: 'syz.5.1186': attribute type 32 has an invalid length. [ 88.037060][ T3384] overlayfs: failed to clone upperpath [ 88.055342][ T3388] tipc: Started in network mode [ 88.060281][ T3388] tipc: Node identity 1000001, cluster identity 4711 [ 88.067228][ T3388] tipc: Node number set to 16777217 [ 88.072966][ T3388] tipc: Enabling of bearer rejected, failed to enable media [ 88.131357][ T3405] syz_tun: entered allmulticast mode [ 88.137675][ T3405] syz_tun (unregistering): left allmulticast mode [ 88.504570][ T1521] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 88.654569][ T1521] usb 1-1: Using ep0 maxpacket: 32 [ 88.660845][ T1521] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.669215][ T1521] usb 1-1: config 0 has no interface number 0 [ 88.676873][ T1521] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.686181][ T1521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.694223][ T1521] usb 1-1: Product: syz [ 88.698677][ T1521] usb 1-1: Manufacturer: syz [ 88.703324][ T1521] usb 1-1: SerialNumber: syz [ 88.709340][ T1521] usb 1-1: config 0 descriptor?? [ 88.715320][ T1521] smsc95xx v2.0.0 [ 89.287004][ T36] audit: type=1400 audit(1785251667.570:309): avc: denied { create } for pid=3504 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.307105][ T3505] netlink: 'syz.3.1242': attribute type 4 has an invalid length. [ 89.372115][ T3516] overlayfs: failed to clone upperpath [ 89.403528][ T3522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3522 comm=syz.5.1250 [ 89.536666][ T1521] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.547465][ T1521] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.586551][ T36] audit: type=1326 audit(1785251667.870:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.1.1265" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf1019de99 code=0x0 [ 89.633756][ T3556] 9pnet_fd: p9_fd_create_tcp (3556): problem connecting socket to 127.0.0.1 [ 89.871114][ T3562] syz_tun: entered allmulticast mode [ 89.879308][ T3563] VFS: Mount too revealing [ 89.879421][ T3562] syz_tun (unregistering): left allmulticast mode [ 89.964379][ T1521] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.985601][ T1521] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 90.004930][ T1521] usb 1-1: USB disconnect, device number 12 [ 90.551176][ T36] audit: type=1400 audit(1785251668.830:311): avc: denied { write } for pid=3594 comm="syz.5.1282" name="file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.573684][ T36] audit: type=1400 audit(1785251668.830:312): avc: denied { open } for pid=3594 comm="syz.5.1282" path="/276/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.156993][ T3636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1293'. [ 91.697786][ T3672] VFS: Mount too revealing [ 91.823959][ T3685] netlink: 'syz.3.1314': attribute type 4 has an invalid length. [ 91.844223][ T36] audit: type=1400 audit(1785251670.120:313): avc: denied { read } for pid=3686 comm="syz.3.1316" name="file0" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.016471][ T36] audit: type=1400 audit(1785251670.300:314): avc: denied { read } for pid=3693 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.081832][ T36] audit: type=1400 audit(1785251670.350:315): avc: denied { write } for pid=3693 comm="syz.0.1318" path="socket:[22581]" dev="sockfs" ino=22581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.759486][ T3723] syzkaller0: entered promiscuous mode [ 92.765156][ T3723] syzkaller0: entered allmulticast mode [ 92.893837][ T3739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1338'. [ 93.448035][ T3774] netlink: 'syz.1.1350': attribute type 25 has an invalid length. [ 93.456061][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 93.491101][ T36] audit: type=1400 audit(1785251671.770:316): avc: denied { setopt } for pid=3777 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.907373][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.914407][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.921686][ T3805] bridge_slave_0: entered allmulticast mode [ 93.928038][ T3805] bridge_slave_0: entered promiscuous mode [ 93.934407][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.941465][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.948582][ T3805] bridge_slave_1: entered allmulticast mode [ 93.954835][ T3805] bridge_slave_1: entered promiscuous mode [ 94.007751][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.014837][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.022123][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.029203][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.065138][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.074444][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.087824][ T700] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.094906][ T700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.106920][ T700] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.113978][ T700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.144347][ T3805] veth0_vlan: entered promiscuous mode [ 94.157821][ T3805] veth1_macvtap: entered promiscuous mode [ 94.204186][ T36] audit: type=1400 audit(1785251672.480:317): avc: denied { mount } for pid=3805 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.613629][ T3837] syz.6.1378 uses obsolete (PF_INET,SOCK_PACKET) [ 94.820437][ T36] audit: type=1400 audit(1785251673.100:318): avc: denied { write } for pid=3856 comm="syz.6.1386" name="functions" dev="configfs" ino=5832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.864548][ T36] audit: type=1400 audit(1785251673.120:319): avc: denied { add_name } for pid=3856 comm="syz.6.1386" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.920858][ T36] audit: type=1400 audit(1785251673.120:320): avc: denied { write } for pid=3856 comm="syz.6.1386" name="c_chmask" dev="configfs" ino=23292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 94.978684][ T36] audit: type=1400 audit(1785251673.130:321): avc: denied { create } for pid=3856 comm="syz.6.1386" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 95.190257][ T3894] bridge0: port 3(dummy0) entered blocking state [ 95.196725][ T3894] bridge0: port 3(dummy0) entered disabled state [ 95.203198][ T3894] dummy0: entered allmulticast mode [ 95.210056][ T3894] dummy0: entered promiscuous mode [ 95.216304][ T3894] bridge0: port 3(dummy0) entered blocking state [ 95.222687][ T3894] bridge0: port 3(dummy0) entered forwarding state [ 95.234483][ T3894] dummy0: left allmulticast mode [ 95.240145][ T3894] dummy0: left promiscuous mode [ 95.245354][ T3894] bridge0: port 3(dummy0) entered disabled state [ 95.906477][ T3916] netlink: 'syz.5.1407': attribute type 25 has an invalid length. [ 95.914323][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1407'. [ 96.457986][ T36] audit: type=1400 audit(1785251674.740:322): avc: denied { remount } for pid=3974 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.531987][ T3982] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 96.562021][ T36] audit: type=1400 audit(1785251674.840:323): avc: denied { ioctl } for pid=3987 comm="syz.1.1441" path="socket:[24153]" dev="sockfs" ino=24153 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.073221][ T36] audit: type=1400 audit(1785251675.350:324): avc: denied { setopt } for pid=4007 comm="syz.6.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.153761][ T36] audit: type=1400 audit(1785251675.430:325): avc: denied { execute_no_trans } for pid=4009 comm="syz.6.1449" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.183535][ T36] audit: type=1326 audit(1785251675.430:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 97.208806][ T36] audit: type=1326 audit(1785251675.440:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 97.301870][ T4018] tipc: Started in network mode [ 97.308982][ T4018] tipc: Node identity 4, cluster identity 4711 [ 97.319368][ T4018] tipc: Node number set to 4 [ 98.887370][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 99.028056][ T4080] overlayfs: failed to clone upperpath [ 99.824582][ T36] kauditd_printk_skb: 22521 callbacks suppressed [ 99.824599][ T36] audit: type=1326 audit(1785251678.100:22849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 99.856325][ T36] audit: type=1326 audit(1785251678.110:22850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 99.883397][ T36] audit: type=1326 audit(1785251678.110:22851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 99.909391][ T36] audit: type=1326 audit(1785251678.110:22852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 99.939510][ T36] audit: type=1326 audit(1785251678.110:22853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 99.965417][ T36] audit: type=1326 audit(1785251678.110:22855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 100.026116][ T36] audit: type=1326 audit(1785251678.110:22856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 100.074547][ T36] audit: type=1326 audit(1785251678.110:22857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 100.111736][ T36] audit: type=1326 audit(1785251678.110:22858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 100.136998][ T36] audit: type=1326 audit(1785251678.110:22859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.6.1449" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x50000 [ 100.611902][ T4145] netlink: 'syz.3.1502': attribute type 32 has an invalid length. [ 100.732562][ T4150] kvm: pic: non byte write [ 101.124595][ T4187] Zero length message leads to an empty skb [ 101.187551][ T4195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.984266][ T4263] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 102.985457][ T4263] @0Ù: renamed from bond_slave_1 [ 103.444889][ T4284] kvm: MWAIT instruction emulated as NOP! [ 104.635070][ T4332] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 105.106595][ T4344] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1582'. [ 105.261842][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 105.261859][ T36] audit: type=1400 audit(1785251683.540:22923): avc: denied { read } for pid=4357 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.338554][ T4363] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 105.348492][ T4363] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 105.356707][ T4363] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 105.375325][ T4363] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 105.384282][ T4363] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 105.393582][ T4363] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 105.406589][ T4363] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 105.417023][ T4363] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 105.425877][ T4363] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 105.435501][ T4363] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 105.691775][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 105.703610][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 105.721365][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 106.408001][ T4427] tipc: Failed to remove unknown binding: 66,0,0/0:4135506507/4135506508 [ 106.417196][ T4427] tipc: Failed to remove unknown binding: 66,0,0/0:4135506507/4135506508 [ 106.438514][ T4431] overlayfs: failed to clone upperpath [ 106.591883][ T4456] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 106.651007][ T4467] 9pnet_fd: p9_fd_create_tcp (4467): problem connecting socket to 127.0.0.1 [ 106.683157][ T4471] netlink: 'syz.6.1636': attribute type 12 has an invalid length. [ 106.691176][ T4471] netlink: 'syz.6.1636': attribute type 32 has an invalid length. [ 106.725224][ T36] audit: type=1326 audit(1785251685.010:22924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1637" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc48a19de99 code=0x0 [ 106.751210][ T36] audit: type=1400 audit(1785251685.010:22925): avc: denied { bind } for pid=4477 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.772240][ T36] audit: type=1400 audit(1785251685.010:22926): avc: denied { name_bind } for pid=4477 comm="syz.6.1638" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.794142][ T36] audit: type=1400 audit(1785251685.010:22927): avc: denied { node_bind } for pid=4477 comm="syz.6.1638" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 106.818203][ T36] audit: type=1400 audit(1785251685.010:22928): avc: denied { setopt } for pid=4477 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.838171][ T36] audit: type=1326 audit(1785251685.100:22929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1637" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x7ffc0000 [ 106.863680][ T36] audit: type=1326 audit(1785251685.100:22930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1637" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x7ffc0000 [ 106.889731][ T36] audit: type=1326 audit(1785251685.100:22931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1637" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x7ffc0000 [ 106.915275][ T36] audit: type=1326 audit(1785251685.100:22932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1637" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x7ffc0000 [ 107.825319][ T4518] pic_ioport_write: 5 callbacks suppressed [ 107.825337][ T4518] kvm: pic: level sensitive irq not supported [ 108.154565][ T1529] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 108.316271][ T1529] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 108.328374][ T1529] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 108.339780][ T1529] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.360038][ T1529] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 108.369307][ T1529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 108.380797][ T1529] usb 7-1: Product: syz [ 108.387868][ T1529] usb 7-1: Manufacturer: syz [ 108.398320][ T1529] usb 7-1: SerialNumber: syz [ 108.406054][ T4524] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 108.617353][ T1529] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.831350][ T481] usb 7-1: USB disconnect, device number 2 [ 108.845502][ T481] usblp0: removed [ 109.370998][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1670'. [ 109.647540][ T4587] netlink: 'syz.5.1681': attribute type 11 has an invalid length. [ 110.463378][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 110.463395][ T36] audit: type=1400 audit(1785251688.740:23492): avc: denied { map } for pid=4619 comm="syz.6.1691" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 110.658830][ T4632] tipc: Enabling of bearer rejected, failed to enable media [ 112.025468][ T4722] overlayfs: missing 'lowerdir' [ 112.614356][ T4740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1743'. [ 112.654682][ T4743] VFS: Mount too revealing [ 112.695251][ T4749] overlayfs: failed to clone upperpath [ 112.924100][ T4774] netlink: 'syz.6.1758': attribute type 4 has an invalid length. [ 112.937056][ T4766] bridge0: port 3(erspan0) entered blocking state [ 112.943592][ T4766] bridge0: port 3(erspan0) entered disabled state [ 112.950471][ T4766] erspan0: entered allmulticast mode [ 112.957461][ T4766] erspan0: entered promiscuous mode [ 112.964049][ T4774] netlink: 'syz.6.1758': attribute type 4 has an invalid length. [ 112.974321][ T4774] netlink: 'syz.6.1758': attribute type 4 has an invalid length. [ 113.086194][ T36] audit: type=1400 audit(1785251691.370:23493): avc: denied { mounton } for pid=4787 comm="syz.3.1765" path="/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.464305][ T4809] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 113.875937][ T36] audit: type=1400 audit(1785251692.160:23494): avc: denied { write } for pid=1521 comm="kworker/1:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32897 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.953969][ T4854] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 113.992753][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.3.1797 [ 114.027184][ T36] audit: type=1326 audit(1785251692.310:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.1800" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1019de99 code=0x0 [ 114.536095][ T4883] overlayfs: failed to clone upperpath [ 114.547867][ T36] audit: type=1400 audit(1785251692.830:23496): avc: denied { remount } for pid=4882 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.571635][ T36] audit: type=1400 audit(1785251692.850:23497): avc: denied { read } for pid=4884 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.037979][ T4900] file system registered [ 115.044231][ T36] audit: type=1400 audit(1785251693.320:23498): avc: denied { mount } for pid=4899 comm="syz.6.1808" name="/" dev="functionfs" ino=33039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 115.067249][ T3805] ffs_data_put(): freeing [ 115.082209][ T36] audit: type=1400 audit(1785251693.330:23499): avc: denied { unmount } for pid=3805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 115.157051][ T36] audit: type=1400 audit(1785251693.440:23500): avc: denied { connect } for pid=4910 comm="syz.6.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.208126][ T4935] overlayfs: failed to clone upperpath [ 116.222659][ T36] audit: type=1400 audit(1785251694.500:23501): avc: denied { read write } for pid=4936 comm="syz.6.1823" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.233694][ T1529] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 116.265121][ T36] audit: type=1400 audit(1785251694.500:23502): avc: denied { open } for pid=4936 comm="syz.6.1823" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.290262][ T1529] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.497332][ T4960] tipc: Started in network mode [ 116.502373][ T4960] tipc: Node identity ac14140f, cluster identity 4711 [ 116.522572][ T4960] tipc: New replicast peer: 255.255.255.255 [ 116.531474][ T4960] tipc: Enabled bearer , priority 10 [ 116.563586][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1836'. [ 117.470040][ T36] audit: type=1400 audit(1785251695.750:23503): avc: denied { unmount } for pid=4983 comm="syz.6.1840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.654836][ T1523] tipc: Node number set to 2886997007 [ 119.443741][ T36] audit: type=1326 audit(1785251697.720:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.1862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x0 [ 119.986210][ T5054] netlink: 'syz.6.1869': attribute type 32 has an invalid length. [ 120.061438][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 120.070700][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 120.315053][ T5070] netlink: 'syz.5.1876': attribute type 1 has an invalid length. [ 120.322850][ T5070] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1876'. [ 120.946884][ T5110] tipc: Failed to remove unknown binding: 66,0,0/2886997007:492027929/492027931 [ 120.956438][ T5110] tipc: Failed to remove unknown binding: 66,0,0/2886997007:492027929/492027930 [ 120.966099][ T5110] tipc: Failed to remove unknown binding: 66,0,0/2886997007:492027929/492027931 [ 120.975642][ T5110] tipc: Failed to remove unknown binding: 66,0,0/2886997007:492027929/492027930 [ 121.206097][ T5121] overlayfs: failed to clone upperpath [ 121.964605][ T1523] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 122.114572][ T1523] usb 7-1: Using ep0 maxpacket: 16 [ 122.121713][ T1523] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.132034][ T1523] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.143572][ T1523] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.152828][ T1523] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.160930][ T1523] usb 7-1: Product: syz [ 122.165231][ T1523] usb 7-1: Manufacturer: syz [ 122.169843][ T1523] usb 7-1: SerialNumber: syz [ 122.353385][ T5186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 122.395599][ T1523] usb 7-1: 0:2 : does not exist [ 122.402619][ T1523] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 122.416463][ T1523] usb 7-1: USB disconnect, device number 3 [ 122.440398][ T2183] udevd[2183]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.045379][ T36] audit: type=1400 audit(1785251701.230:23505): avc: denied { accept } for pid=5208 comm="syz.6.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.311207][ T36] audit: type=1400 audit(1785251701.590:23506): avc: denied { write } for pid=5217 comm="syz.6.1931" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.660611][ T5241] netlink: 'syz.1.1936': attribute type 4 has an invalid length. [ 123.669002][ T5241] netlink: 'syz.1.1936': attribute type 4 has an invalid length. [ 123.676160][ T36] audit: type=1400 audit(1785251701.960:23507): avc: denied { ioctl } for pid=5242 comm="syz.6.1937" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.746545][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 124.078198][ T5267] kvm: user requested TSC rate below hardware speed [ 124.470945][ T5295] netlink: 'syz.5.1958': attribute type 12 has an invalid length. [ 125.187269][ T36] audit: type=1400 audit(1785251703.470:23508): avc: denied { bind } for pid=5310 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.209026][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 125.326153][ T5314] bridge0: port 4(veth0_vlan) entered blocking state [ 125.344686][ T5314] bridge0: port 4(veth0_vlan) entered disabled state [ 125.351522][ T5314] veth0_vlan: entered allmulticast mode [ 126.144011][ T36] audit: type=1326 audit(1785251704.420:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.3.1974" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb5419de99 code=0x0 [ 126.829014][ T36] audit: type=1400 audit(1785251705.110:23510): avc: denied { create } for pid=5367 comm="syz.5.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.870095][ T5370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.253300][ T5381] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 127.261690][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1992'. [ 127.270952][ T5381] veth1: entered promiscuous mode [ 127.762149][ T5403] batadv_slave_1: entered promiscuous mode [ 127.782542][ T5403] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2000'. [ 127.795411][ T5405] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2001'. [ 127.829266][ T5410] tipc: Failed to remove unknown binding: 66,0,0/0:2092681976/2092681978 [ 127.857203][ T5410] tipc: Failed to remove unknown binding: 66,0,0/0:2092681976/2092681977 [ 127.865977][ T5402] batadv_slave_1: left promiscuous mode [ 127.872598][ T5410] tipc: Failed to remove unknown binding: 66,0,0/0:2092681976/2092681978 [ 127.892387][ T5410] tipc: Failed to remove unknown binding: 66,0,0/0:2092681976/2092681977 [ 127.962955][ T5420] fuse: Bad value for 'fd' [ 128.962581][ T5439] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2012'. [ 129.018320][ T5443] mmap: syz.3.2013 (5443): VmData 29073408 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 130.346725][ T36] audit: type=1326 audit(1785251708.620:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.5.2019" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc48a19de99 code=0x0 [ 131.176039][ T5471] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2023'. [ 131.292311][ T5489] overlayfs: failed to clone upperpath [ 131.784553][ T1523] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 131.934560][ T1523] usb 7-1: Using ep0 maxpacket: 8 [ 131.940278][ T1523] usb 7-1: too many configurations: 249, using maximum allowed: 8 [ 131.948814][ T1523] usb 7-1: config index 0 descriptor too short (expected 18640, got 18) [ 131.957217][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 131.966145][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 131.976430][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 131.986440][ T1523] usb 7-1: config index 1 descriptor too short (expected 18640, got 18) [ 131.994841][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.003690][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.013968][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.023957][ T1523] usb 7-1: config index 2 descriptor too short (expected 18640, got 18) [ 132.032347][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.041244][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.051517][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.061534][ T1523] usb 7-1: config index 3 descriptor too short (expected 18640, got 18) [ 132.069919][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.079011][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.089824][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.100594][ T1523] usb 7-1: config index 4 descriptor too short (expected 18640, got 18) [ 132.109087][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.122137][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.122565][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.133815][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.141676][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.153452][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.169052][ T36] audit: type=1400 audit(1785251710.440:23512): avc: denied { name_bind } for pid=5520 comm="syz.5.2046" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 132.174199][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.194338][ T1523] usb 7-1: config index 5 descriptor too short (expected 18640, got 18) [ 132.209955][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.213537][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.228424][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.233704][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.247652][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.251041][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.257783][ T1523] usb 7-1: config index 6 descriptor too short (expected 18640, got 18) [ 132.274170][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.276354][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.283268][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.302626][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.311460][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.321194][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.330863][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.339986][ T1523] usb 7-1: config index 7 descriptor too short (expected 18640, got 18) [ 132.345010][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.348393][ T1523] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 132.367013][ T1523] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 132.369808][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.386237][ T1523] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 132.396632][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.406740][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.415672][ T1523] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 132.425416][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.434634][ T1523] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 132.442686][ T1523] usb 7-1: Product: syz [ 132.447210][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.455966][ T1523] usb 7-1: Manufacturer: syz [ 132.460584][ T1523] usb 7-1: SerialNumber: syz [ 132.465866][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.476099][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.485564][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.495066][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.504369][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.513906][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.523328][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.532707][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.542142][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.551495][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.560883][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.570247][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.579654][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.589170][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.598537][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.636013][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.645326][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.654775][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.663988][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.673302][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.682525][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.690186][ T1523] usb 7-1: USB disconnect, device number 4 [ 132.699456][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.711093][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.720856][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.730200][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.739962][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.759532][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.775133][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.794415][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.813784][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.823143][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.832391][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.841604][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.850884][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.860079][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.870636][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.881135][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.891397][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.902493][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.913156][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.924276][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.935091][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 132.945969][ T5519] 9pnet_fd: p9_fd_create_tcp (5519): problem connecting socket to 127.0.0.1 [ 134.223711][ T5560] overlayfs: failed to clone upperpath [ 134.760919][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2069'. [ 136.668783][ T5701] tipc: Enabling of bearer rejected, failed to enable media [ 139.526259][ T36] audit: type=1326 audit(1785251717.810:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.6.2138" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f48f2197c17 code=0x0 [ 139.763919][ T36] audit: type=1400 audit(1785251718.040:23514): avc: denied { nlmsg_write } for pid=5799 comm="syz.1.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 139.797815][ T36] audit: type=1400 audit(1785251718.040:23515): avc: denied { audit_write } for pid=5799 comm="syz.1.2143" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.850681][ T36] audit: type=1107 audit(1785251718.040:23516): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 140.563994][ T36] audit: type=1400 audit(1785251718.840:23517): avc: denied { ioctl } for pid=5851 comm="syz.3.2165" path="socket:[45518]" dev="sockfs" ino=45518 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.682117][ T36] audit: type=1400 audit(1785251718.840:23518): avc: denied { name_bind } for pid=5851 comm="syz.3.2165" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 140.875852][ T36] audit: type=1326 audit(1785251719.150:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.6.2171" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48f219de99 code=0x0 [ 142.845597][ T5932] ffs_data_put(): freeing [ 143.744653][ T5993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2218'. [ 144.871387][ T6033] overlayfs: failed to clone upperpath [ 145.218077][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 145.448053][ T36] audit: type=1400 audit(1785251723.730:23520): avc: denied { create } for pid=6068 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.795747][ T6121] tipc: New replicast peer: 255.255.255.255 [ 146.826528][ T6121] tipc: Enabled bearer , priority 10 [ 147.595393][ T36] audit: type=1326 audit(1785251725.880:23521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.5.2285" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x0 [ 147.600663][ T6163] tipc: New replicast peer: 255.255.255.255 [ 147.626570][ T6163] tipc: Enabled bearer , priority 10 [ 147.739612][ T6181] veth1_to_bond: entered allmulticast mode [ 147.746665][ T6181] veth1_to_bond: entered promiscuous mode [ 147.753433][ T6181] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2294'. [ 147.763801][ T6181] veth1_to_bond (unregistering): left promiscuous mode [ 147.770750][ T6181] veth1_to_bond (unregistering): left allmulticast mode [ 148.754587][ T1521] tipc: Node number set to 4264217534 [ 149.556183][ T6356] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 149.564346][ T6356] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 149.574481][ T6356] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 151.971478][ T36] audit: type=1400 audit(1785251730.250:23522): avc: denied { connect } for pid=6556 comm="syz.6.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.321317][ T6696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2523'. [ 153.448821][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2537'. [ 153.492361][ T6729] overlayfs: failed to clone upperpath [ 153.544710][ T6731] 9pnet_fd: p9_fd_create_tcp (6731): problem binding to privport [ 153.560094][ T36] audit: type=1400 audit(1785251731.840:23523): avc: denied { create } for pid=6738 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.582631][ T36] audit: type=1400 audit(1785251731.860:23524): avc: denied { write } for pid=6738 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.593308][ T6743] ffs_data_put(): freeing [ 153.727806][ T6769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2559'. [ 153.985392][ T6805] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 154.229931][ T6836] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2589'. [ 154.271113][ T6844] netlink: 'syz.5.2593': attribute type 9 has an invalid length. [ 154.305786][ T36] audit: type=1400 audit(1785251732.590:23525): avc: denied { write } for pid=6850 comm="syz.1.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.546726][ T6908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2625'. [ 154.791921][ T36] audit: type=1400 audit(1785251733.070:23526): avc: denied { getopt } for pid=6966 comm="syz.6.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.843211][ T36] audit: type=1400 audit(1785251733.120:23527): avc: denied { accept } for pid=6978 comm="syz.3.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.920065][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 155.253906][ T7074] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2708'. [ 156.336047][ T7244] netlink: 1340 bytes leftover after parsing attributes in process `syz.3.2788'. [ 156.443412][ T7256] overlayfs: cannot append lower layer [ 156.516386][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2798'. [ 157.048374][ T36] audit: type=1400 audit(1785251735.320:23528): avc: denied { ioctl } for pid=7330 comm="syz.6.2832" path="socket:[75275]" dev="sockfs" ino=75275 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.110127][ T7349] EXT4-fs: dax option not supported [ 157.131336][ T7354] incfs: Error accessing: ./file2. [ 157.142663][ T7354] incfs: mount failed -20 [ 157.338766][ T7411] incfs: Error accessing: ./file0. [ 157.343949][ T7411] incfs: mount failed -20 [ 157.385820][ T7420] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 157.400279][ T7420] overlayfs: missing 'lowerdir' [ 157.737776][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 158.461646][ T7589] netlink: 'syz.5.2955': attribute type 29 has an invalid length. [ 159.051462][ T7613] __nla_validate_parse: 1 callbacks suppressed [ 159.051485][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2966'. [ 159.189036][ T7631] lo: MTU too low for tipc bearer [ 159.198446][ T7631] tipc: Enabling of bearer rejected, failed to enable media [ 159.312006][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2984'. [ 159.577951][ T36] audit: type=1400 audit(1785251737.860:23529): avc: denied { ioctl } for pid=7677 comm="syz.3.2998" path="/839/file2" dev="tmpfs" ino=4477 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.934465][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3010'. [ 160.265308][ T7762] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3037'. [ 160.467256][ T7796] netlink: 'syz.3.3052': attribute type 49 has an invalid length. [ 161.051087][ T7836] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3069'. [ 161.113036][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 161.325545][ T7886] netlink: 'syz.6.3095': attribute type 27 has an invalid length. [ 162.188599][ T7975] netlink: 'syz.6.3137': attribute type 16 has an invalid length. [ 162.196650][ T7975] netlink: 'syz.6.3137': attribute type 4 has an invalid length. [ 162.204490][ T7975] netlink: 64114 bytes leftover after parsing attributes in process `syz.6.3137'. [ 163.215789][ T8069] overlayfs: failed to clone lowerpath [ 165.898545][ T36] audit: type=1400 audit(1785251744.180:23530): avc: denied { mount } for pid=8324 comm="syz.1.3304" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.220355][ T8383] overlayfs: failed to clone upperpath [ 166.737435][ T8414] overlayfs: failed to clone upperpath [ 166.765365][ T8421] overlayfs: failed to clone upperpath [ 167.752569][ T8503] process '/newroot/530/file0' started with executable stack [ 167.782120][ T36] audit: type=1400 audit(1785251746.060:23531): avc: denied { ioctl } for pid=8509 comm="syz.6.3392" path="socket:[104449]" dev="sockfs" ino=104449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.825130][ T8601] syz.6.3434 (8601): attempted to duplicate a private mapping with mremap. This is not supported. [ 170.352322][ T36] audit: type=1400 audit(1785251748.630:23532): avc: denied { setattr } for pid=8810 comm="syz.1.3536" name="file0" dev="tmpfs" ino=4507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.512439][ T8833] overlayfs: failed to clone upperpath [ 171.394542][ T36] audit: type=1400 audit(1785251749.670:23533): avc: denied { write } for pid=8867 comm="syz.3.3560" name="file0" dev="tmpfs" ino=5364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 172.767995][ T9007] netlink: 'syz.6.3626': attribute type 4 has an invalid length. [ 173.222851][ T36] audit: type=1400 audit(1785251751.500:23534): avc: denied { read } for pid=9060 comm="syz.3.3640" name="file0" dev="tmpfs" ino=5477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.246493][ T36] audit: type=1400 audit(1785251751.500:23535): avc: denied { open } for pid=9060 comm="syz.3.3640" path="/1031/file0" dev="tmpfs" ino=5477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.687306][ T9081] overlayfs: failed to clone upperpath [ 173.815549][ T36] audit: type=1400 audit(1785251752.100:23536): avc: denied { create } for pid=9094 comm="syz.6.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.135483][ T9117] TCP: TCP_TX_DELAY enabled [ 175.633083][ T9149] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 175.641010][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3686'. [ 175.662715][ T9156] overlayfs: failed to clone upperpath [ 175.720328][ T9165] overlayfs: failed to clone upperpath [ 175.975593][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3691'. [ 176.028016][ T9178] overlayfs: failed to clone upperpath [ 176.888112][ T9259] overlayfs: failed to clone upperpath [ 178.199763][ T9344] ffs_data_put(): freeing [ 179.195767][ T9415] overlayfs: failed to clone lowerpath [ 179.205367][ T9415] overlayfs: failed to clone upperpath [ 179.237784][ T9425] netlink: 'syz.3.3804': attribute type 4 has an invalid length. [ 179.389404][ T9473] tipc: Enabling of bearer rejected, failed to enable media [ 179.796636][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3849'. [ 179.951392][ T9539] overlayfs: failed to clone upperpath [ 180.119737][ T9563] 9pnet_fd: p9_fd_create_tcp (9563): problem connecting socket to 127.0.0.1 [ 180.199937][ T36] audit: type=1400 audit(1785251758.480:23537): avc: denied { map } for pid=9575 comm="syz.3.3878" path="/1083/file0" dev="tmpfs" ino=5761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 180.260263][ T36] audit: type=1326 audit(1785251758.540:23538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.3.3882" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb5419de99 code=0x0 [ 180.990321][ T9625] netlink: 'syz.1.3901': attribute type 4 has an invalid length. [ 181.025601][ T9631] netlink: 'syz.1.3904': attribute type 4 has an invalid length. [ 181.033654][ T9631] netlink: 'syz.1.3904': attribute type 4 has an invalid length. [ 184.423775][ T9852] overlayfs: failed to clone upperpath [ 184.527513][ T9864] VFS: Mount too revealing [ 185.900303][ T36] audit: type=1326 audit(1785251764.180:23539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.5.4032" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48a19de99 code=0x0 [ 186.226945][ T9957] netlink: 'syz.3.4043': attribute type 10 has an invalid length. [ 186.234967][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4043'. [ 186.843054][ T36] audit: type=1400 audit(1785251765.120:23540): avc: denied { create } for pid=9986 comm="syz.5.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 187.506396][T10021] veth0_vlan: left promiscuous mode [ 188.167517][ T36] audit: type=1400 audit(1785251766.450:23541): avc: denied { read } for pid=10056 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 188.388830][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 188.460804][ T36] audit: type=1400 audit(1785251766.740:23542): avc: denied { execmem } for pid=10068 comm="syz.5.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.573055][ T36] audit: type=1400 audit(1785251766.850:23543): avc: denied { create } for pid=10090 comm="syz.5.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.574617][T10091] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4097'. [ 188.593503][ T36] audit: type=1400 audit(1785251766.860:23544): avc: denied { write } for pid=10090 comm="syz.5.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.628282][ T36] audit: type=1400 audit(1785251766.860:23545): avc: denied { nlmsg_write } for pid=10090 comm="syz.5.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 188.750407][ T36] audit: type=1400 audit(1785251767.020:23546): avc: denied { search } for pid=10105 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 188.847097][ T36] audit: type=1400 audit(1785251767.120:23547): avc: denied { read write } for pid=10118 comm="ip" path="/dev/console" dev="rootfs" ino=1059 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 188.917067][ T36] audit: type=1400 audit(1785251767.181:23548): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 189.565885][T10185] overlayfs: failed to clone upperpath OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.0.12 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 191.436900][ T465] bridge_slave_1: left allmulticast mode [ 191.442635][ T465] bridge_slave_1: left promiscuous mode [ 191.448295][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.455697][ T465] bridge_slave_0: left allmulticast mode [ 191.461330][ T465] bridge_slave_0: left promiscuous mode [ 191.467032][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.543681][ T465] tipc: Disabling bearer [ 191.549125][ T465] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 192.613936][ T465] bridge_slave_1: left allmulticast mode [ 192.619600][ T465] bridge_slave_1: left promiscuous mode [ 192.625283][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.632650][ T465] bridge_slave_0: left allmulticast mode [ 192.638271][ T465] bridge_slave_0: left promiscuous mode [ 192.644006][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.723429][ T465] tipc: Disabling bearer [ 192.728801][ T465] tipc: Left network mode [ 192.733592][ T465] veth1_macvtap: left promiscuous mode [ 192.922753][ T465] ------------[ cut here ]------------ [ 192.928233][ T465] WARNING: CPU: 0 PID: 465 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 192.938314][ T465] Modules linked in: [ 192.942214][ T465] CPU: 0 UID: 0 PID: 465 Comm: kworker/u8:8 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 192.953846][ T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.963936][ T465] Workqueue: netns cleanup_net [ 192.968691][ T465] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 192.974692][ T465] Code: e8 21 e9 d6 fc 4b 83 3c 3e 00 75 19 e8 15 29 7e fc 49 81 ff f8 07 00 00 74 1b e8 07 29 7e fc 49 83 c7 08 eb c9 e8 fc 28 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 192.994324][ T465] RSP: 0018:ffffc9000f55fb90 EFLAGS: 00010293 [ 193.000386][ T465] RAX: ffffffff850948c4 RBX: ffff88811ff8c700 RCX: ffff888124591300 [ 193.008379][ T465] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888128fb05a0 [ 193.016368][ T465] RBP: ffffc9000f55fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 193.024370][ T465] R10: dffffc0000000000 R11: fffff52001eabf04 R12: dffffc0000000000 [ 193.032394][ T465] R13: dffffc0000000000 R14: ffff888128fb0000 R15: 00000000000005a0 [ 193.040391][ T465] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 193.049348][ T465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.055947][ T465] CR2: 00005555615e78a8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 193.063946][ T465] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 193.071952][ T465] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 193.079919][ T465] Call Trace: [ 193.083210][ T465] [ 193.086135][ T465] cleanup_net+0x6bd/0xc90 [ 193.090537][ T465] ? __cfi_cleanup_net+0x10/0x10 [ 193.095512][ T465] ? kick_pool+0xb9/0x540 [ 193.099842][ T465] process_scheduled_works+0x7f7/0x1060 [ 193.105392][ T465] worker_thread+0xc99/0x13f0 [ 193.110060][ T465] kthread+0x2c7/0x360 [ 193.114125][ T465] ? __cfi_worker_thread+0x10/0x10 [ 193.119238][ T465] ? __cfi_kthread+0x10/0x10 [ 193.123830][ T465] ret_from_fork+0x67/0xa0 [ 193.128247][ T465] ? __cfi_kthread+0x10/0x10 [ 193.132893][ T465] ret_from_fork_asm+0x1a/0x30 [ 193.137660][ T465] [ 193.140660][ T465] ---[ end trace 0000000000000000 ]--- [ 193.146316][ T465] ------------[ cut here ]------------ [ 193.151784][ T465] WARNING: CPU: 1 PID: 465 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 193.161951][ T465] Modules linked in: [ 193.165823][ T465] CPU: 1 UID: 0 PID: 465 Comm: kworker/u8:8 Tainted: G W syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 193.178926][ T465] Tainted: [W]=WARN [ 193.182836][ T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 193.192916][ T465] Workqueue: netns cleanup_net [ 193.197724][ T465] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 193.198390][T10247] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 193.203834][ T465] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 28 7e fc 49 81 ff f8 07 00 00 74 1b e8 b2 28 7e fc 49 83 c7 08 eb c5 e8 a7 28 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 28 7e fc 5b 41 5c 41 5e 41 [ 193.229442][ T465] RSP: 0018:ffffc9000f55fb90 EFLAGS: 00010293 [ 193.230226][T10247] ACPI: PM: Preparing to enter system sleep state S5 [ 193.235526][ T465] RAX: ffffffff85094919 RBX: ffff888128fb0800 RCX: ffff888124591300 [ 193.242422][T10247] kvm: exiting hardware virtualization [ 193.250144][ T465] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888128fb0808 [ 193.255622][T10247] reboot: Power down [ 193.263589][ T465] RBP: ffffc9000f55fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 193.275421][ T465] R10: dffffc0000000000 R11: fffff52001eabf04 R12: dffffc0000000000 [ 193.275436][ T465] R13: dffffc0000000000 R14: ffff888128fb0000 R15: 0000000000000008 [ 193.275448][ T465] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 193.300301][ T465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.300318][ T465] CR2: 00007f683b5f84c0 CR3: 000000010afa6000 CR4: 00000000003506b0 [ 193.300333][ T465] Call Trace: serialport: VM disconnected.