last executing test programs: 8.498981557s ago: executing program 0 (id=1): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) userfaultfd(0x80001) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x2006, 0xff}, 0x40, [0x6, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x6, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x4, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x7, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2b, 0xc, 0x0, 0x78, 0xea4, 0x400000, 0xbaa, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x74, 0x1, 0xfe, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0x8, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x6, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x8, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0x4e8a20fd, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x6, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xb7, 0x80000003, 0x5, 0x401, 0xc8, 0x1, 0xfffff000, 0x10080, 0x6, 0x7e, 0x104, 0x1000, 0x7, 0x3, 0x8, 0x6, 0x226, 0x6, 0x5, 0xf, 0x30b1d693, 0x1d433e09, 0xf40, 0x7, 0x1, 0x6c1b, 0xc51a, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2000030) prlimit64(r1, 0xd, &(0x7f0000000040)={0x48c, 0x63}, &(0x7f00000000c0)) r3 = memfd_create(0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0) ftruncate(r3, 0xffff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$addseals(r3, 0x409, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r5, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 6.107614907s ago: executing program 0 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000200000)={0x0, 0x0, 0x8000000, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000300000)={0x8000000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000400000)={0x0, 0x1, 0x8000000, 0x200000, &(0x7f0000000000/0x200000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, "29acaea6eecd94ea", "1b90309c137a6d1148a0e12b8c92bb2c", "39165308", "b469f98bf5d2b6cc"}, 0x28) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000440)={0x1, 0xfffffffffffffffa, @status={[0x4, 0x6, 0x8, 0x7f, 0x200, 0x1]}, [0x7, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x8, 0xc, 0xfe6, 0x8000000000000001, 0xf, 0x9, 0x5, 0x8, 0x7fff, 0xa, 0x0, 0x9, 0x9, 0x401, 0x3, 0xffffffff, 0xfffffffffffffffd, 0x6814, 0x33f, 0x6, 0x5, 0x4, 0x97, 0x2, 0x5, 0x4, 0x5, 0x1ce7, 0x5, 0x9, 0x44, 0x4, 0x5, 0x80000001, 0x304, 0x9, 0xfffffffffffffffe, 0x6, 0x0, 0x8, 0x6, 0x60b5, 0x7, 0x4, 0x988, 0x7f7c, 0x3, 0x7, 0x80000000, 0x81, 0x5, 0x10000, 0x7, 0x832, 0x2, 0x2c, 0x9, 0x7e3a]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xda, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0xab, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x3, 0x69, 0x1, {0x22, 0x48}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x1, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xb5, 0x5, 0xc}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x3, 0xa, 0xff, 0x1}, 0x78, &(0x7f0000000240)={0x5, 0xf, 0x78, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x0, 0x92, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x61, 0x3, 0xa, 0xffff, 0xc}, @generic={0x5d, 0x10, 0xa, "074f361e50830adbd958892f3d640940c3e0ccdbcf9cd72e0cd5d95e7e36d15022cabecd3f3445f0922e569032731c2373d459312804eefa409315639f03cc626854577bc85716820e60895167d716a703415f8f3950f68ba17e"}]}, 0x6, [{0xd7, &(0x7f00000002c0)=@string={0xd7, 0x3, "86c194d7e52c1d47269a3fcf9d6be62484365e1978a808f9e1cbdeb57bcf50c8a69cd70635e6671264f32aeaa097049de4d7c7ffc80ca2cd3027465d34f07d10272438c8a1cb78f6a35da9fa081b2aff75e67e855f2bd194f1c5f0e2be5c19341b46947caa115e5e1dd5d5a33165846f66fb2acd1518a3d9f2723eb7ad4032d7316fdf6638240abe52149285f8801ccc581f8eb8f405369d90336c978b58ebc28f0e7d0604a5a189ccc9c463f103157581f8eaf63ea805f7e0f869b8014b9b9c7c3131f746d818104d544ba243d032a8639485e994"}}, {0xc5, &(0x7f0000000e80)=@string={0xc5, 0x3, "8712196d1b0ec6fdcce6b30455870c45377dc15ad692fd03ae941bd91df0df8781135994f7feb0a22d0eb97f58574f0c44f73c06e22120e808d97b9539b807f7881f8bf53e76e9cd0660867047a0be0e86a64773aa4637de38d61a5f89bc7d9fa9ecaa2113b5f026b8b4cda687a50fa1b78aa68d7ec0ddec3e07b36b55a1bad78888a72529efa5bce29e8e337fe39ea06d646403936d71530ffbb1a4eaa0f91eb94a342555f9eca9e39474c04abc118723e25735b12ae6b5ff75d22482f3cbf0c7cca9"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x7e80761211de9c}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x418}}, {0x7c, &(0x7f0000001000)=@string={0x7c, 0x3, "36c0f8e3b53f09528d1d67b3e8361b34cef300254c095dd7fb3ee97792bd0fa6ba7c9353af8e39ea9054b446d3df5c0abe7489042d8292d1847be85480a3cd794a4929487905b8523f244c56b21c8a775be1dde13422ff1726b4f64868b7be7863d4badf7c7dfdab90ad642d286bc22e0e5704ebdfb6470ec186"}}, {0x38, &(0x7f0000001080)=@string={0x38, 0x3, "93a718b24b43fe2f64756b8734d47225aa13d5139b8f59002e31e1971c07f011c3c1c817f74fb6f205c331282389b435b7737e048271"}}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x17b}]}) 3.470178373s ago: executing program 2 (id=25): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4, 0x0, 0x1}) 3.458707584s ago: executing program 2 (id=26): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) r1 = dup(r0) write$FUSE_ENTRY(r1, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x2, 0x200000220, 0x10000, 0x5, 0x8, 0x3000000, {0x0, 0x201000000000020, 0x5da8, 0xece, 0xfffffffffffffffe, 0x3, 0x80000000, 0x100, 0x8, 0x1000, 0x8488, 0x0, 0x0, 0x1, 0x4000d}}}, 0x5f) 3.401387975s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x40306727, 0x0) 3.401232645s ago: executing program 2 (id=28): r0 = memfd_secret(0x80000) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_buf(r1, 0x0, 0x20, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x1fd, @loopback, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x6}, 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100388d9e90899043610d5cc0102030109021b0001090770040904d4030099e9ce000921efff050122230f"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) shutdown(r1, 0x36b0c75008ce614f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000240)) 3.125696372s ago: executing program 3 (id=30): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) write(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904000001ff615a000905880b"], 0x0) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) syz_clone(0x400, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="82e3efe898d87d888a9b2f8fda46f7c1256b130055aa254fe1203366ac4518cccf6ce3832f769b5f8db457783d2bf2225f16cd2b1559cad1aef134241321416ba04ae174d0da6d3d9ecfd5fbd823b8a9e3e43c42f3e1a8a5b6d7d3374e207de9b370a2fac0aafe44b5a3e14e65fc78bbd55c9e38fab325b778cface9c5619f591400bfaee1c75f80872272d6994033c90b9594388de3329957bf0a375ff5bd6767cddd70cdb299ce116decba70ae2ec8e9cf1836d5d0a76a2d4d227d2c57d7b00b2fafc05212") 2.931111556s ago: executing program 0 (id=31): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create(0x5) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 2.441034579s ago: executing program 1 (id=39): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) eventfd(0x2) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000340), 0x0) r1 = epoll_create(0x5) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 2.202609775s ago: executing program 2 (id=40): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5d94, 0x9, 0xfffffffffffffffd, 0x9e2f, 0x2, 0x2, 0x4002004c5, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000001, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x3, 0x99, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xc, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x11, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0xb, 0x7, {0x7, 0x25, 0x1, 0x8, 0xd, 0xd7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x101, 0x8d7d, 0x0, "b2c60e7ad9d4"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1003}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x84, 0x85, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x96, 0xbf, 0x81, {0x7, 0x25, 0x1, 0xc, 0x5d, 0xbc}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) write(r3, &(0x7f0000000200)='1af4 1050 ffff ffff 0 0 0', 0x19) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x800001) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, 0x0) 1.832036894s ago: executing program 3 (id=41): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x2, 0x3, 0x1c06, 0x4, 0x3}, 0x30, 0x2) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) (async) landlock_restrict_self(r0, 0x0) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40041, 0x0) write$snapshot(r1, 0x0, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x83e8) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1a) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) (async) r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ax25={{0x3, @default}, [@bcast, @netrom, @netrom, @null, @rose, @remote, @remote, @null]}, &(0x7f00000001c0)=0x80) setsockopt(r3, 0x3, 0x6, &(0x7f0000000200), 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', &(0x7f00000000c0)={0x20080, 0x100, 0x51269c7989c7d937}, 0x18) 1.732654737s ago: executing program 3 (id=42): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000200"/88, 0x58) 1.705058307s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x2d, 0x3}) 1.241962478s ago: executing program 1 (id=44): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000), 0x13) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, 0x0) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x801, 0x98) (async, rerun: 32) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) write$uinput_user_dev(r7, &(0x7f0000000700)={'syz0\x00', {0x6, 0x4, 0x6, 0xfff3}, 0x1c, [0x400, 0x9, 0x6, 0x5, 0x7, 0x0, 0xc7, 0x401, 0x0, 0x3, 0x7, 0x9, 0x1000, 0xfff, 0x7c, 0x8, 0x80000001, 0x5, 0x0, 0x2, 0xfffffffe, 0x7f, 0x1, 0x7, 0x2, 0x101, 0x5, 0x9, 0x9, 0x9, 0x70ba, 0x5, 0x401, 0xfffffffd, 0x0, 0x80, 0xd9, 0x8, 0x10000, 0xffffff81, 0x3ff, 0x81, 0xb, 0x6, 0x7, 0x5, 0xa073, 0x2, 0xc, 0x2, 0xffffb6a4, 0x7fffffff, 0xd107, 0xba, 0x7, 0x7fffffff, 0x1, 0x7, 0x2, 0x100, 0xdd, 0x9, 0x4], [0x8, 0x7, 0xfff, 0x0, 0xda76, 0xc42a, 0x401, 0x10001, 0x5, 0x7, 0x8001, 0x9, 0x5, 0x2, 0x52, 0x9, 0x5, 0x6, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x101, 0x7, 0x3ff, 0x4, 0xffffff47, 0xffffffff, 0x1, 0x2f13, 0x8c, 0x0, 0x4, 0x246e, 0x5, 0x9, 0x7ff, 0x3, 0xffffffff, 0x0, 0x1, 0x4, 0x0, 0xfffff672, 0x1000000, 0x10, 0xfff, 0x8, 0x54, 0x0, 0x1c000000, 0x2, 0x9, 0x3, 0x4, 0x86e8, 0x7, 0x1, 0x7, 0x2, 0xf42f, 0xc, 0x37], [0x3, 0x4, 0x9, 0x3, 0x2, 0x26, 0x8, 0x9, 0x20000000, 0x8001, 0x7, 0xf7c, 0x2, 0x1e, 0xff, 0xa0, 0x75f, 0x1000000, 0x7, 0x5, 0xfffffffa, 0x3, 0x2, 0xdb, 0x4919d02f, 0x5, 0x6, 0xffff, 0x2, 0x5, 0x7, 0x8, 0x4, 0xd, 0xfff, 0x9, 0x1000, 0x3ff, 0xb, 0x3ff, 0x2, 0x3ff, 0x6, 0x2, 0x3c, 0x7fffffff, 0x2, 0x2, 0xf, 0x200, 0x2, 0x80, 0x0, 0x3, 0x10, 0x100, 0x9, 0x6, 0x1d3, 0x4, 0xf73, 0x6, 0xbde9, 0x2], [0x2, 0xffffffcb, 0x2, 0x0, 0xe, 0x800, 0x2, 0x95f, 0x3, 0x3ff, 0x2, 0x5, 0x1ff, 0x3, 0x0, 0x401, 0x1, 0x7fffffff, 0x80, 0x3, 0x3, 0x3, 0xfffffff8, 0x5, 0x6, 0x3ff, 0x5, 0x34e, 0x3, 0x400, 0x5, 0x1ff, 0xf64, 0x6, 0x9, 0x4, 0x8000, 0xff, 0x6, 0x7, 0xa, 0x8, 0x7, 0x2, 0x5ee, 0x7, 0x4, 0x8, 0xb2, 0x676a, 0x1, 0x51, 0xfffffffe, 0xffffff00, 0x5, 0x4, 0xb, 0x2, 0xc, 0xafc, 0x6074, 0x9, 0xb4, 0xf03]}, 0x45c) (async, rerun: 32) r8 = syz_pidfd_open(r6, 0x0) (rerun: 32) flistxattr(r8, 0x0, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r9, 0x0) (async) write(r5, &(0x7f0000000600)='1', 0x1) 1.18396377s ago: executing program 1 (id=45): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) read(r0, &(0x7f00000001c0)=""/155, 0x9b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000340), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x5) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 905.851577ms ago: executing program 2 (id=46): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103"], 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 861.788848ms ago: executing program 3 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x40306727, 0x0) 799.20692ms ago: executing program 3 (id=48): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0x7, 0x2, 0x20, 0x7}, 0x1a, &(0x7f0000000400)=ANY=[@ANYBLOB="016169c0bef277f62cdd7764e05a1fef24dc666f3f9464225939623528e49b3f23d9d7e9faf46b75e34c02bcd3a79f93df1b76ac927ce8e45a3945c23b946240314697564217882f073012d34c40d0988ce4e755118ae9a4e3aab646f067fc05a605f171fe6a3245a76c4e423b73b4ae2514ed250d8c7d4d9c7d2f8258fc54b4d374c6ebc4f8d6708aa7ab04"], 0x1, [{0x42, &(0x7f00000000c0)=@string={0x42, 0x3, "30f217ec73662f0d7cac56051feb484a1aa50b251de0352c553493c1d0d2a4167388c69986d759f9a56a0b35e2660f38cfb2aaec8106bd0833e91ddc76cf3291"}}]}) syz_usb_disconnect(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84401, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x2000000e, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e00020000000a010101000000000000001f06000100000000000008100400000000030007003c00000002000000e00000010000000000000000"], 0x50}}, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x80085502, 0x0) 68.990348ms ago: executing program 1 (id=49): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x4, 0x0, 0x1}) 57.693868ms ago: executing program 1 (id=50): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) r1 = dup(r0) write$FUSE_ENTRY(r1, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x2, 0x200000220, 0x10000, 0x5, 0x8, 0x3000000, {0x0, 0x20100000001c000, 0x5da8, 0xece, 0xfffffffffffffffe, 0x3, 0x80000000, 0x100, 0x8, 0x1000, 0x8488, 0x0, 0x0, 0x1, 0x4000d}}}, 0x5f) 0s ago: executing program 1 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40080c0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 21.828597][ T36] audit: type=1400 audit(1785816513.130:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.829715][ T286] cgroup: Unknown subsys name 'net' [ 21.851244][ T36] audit: type=1400 audit(1785816513.130:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.879601][ T36] audit: type=1400 audit(1785816513.160:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.879834][ T286] cgroup: Unknown subsys name 'devices' [ 22.006077][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.011905][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.124337][ T36] audit: type=1400 audit(1785816513.420:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.147508][ T36] audit: type=1400 audit(1785816513.430:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.155641][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.172564][ T36] audit: type=1400 audit(1785816513.430:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.205108][ T36] audit: type=1400 audit(1785816513.490:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.230569][ T36] audit: type=1400 audit(1785816513.490:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.237237][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.256923][ T36] audit: type=1400 audit(1785816513.530:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.291579][ T36] audit: type=1400 audit(1785816513.530:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.092097][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.099269][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.106446][ T294] bridge_slave_0: entered allmulticast mode [ 23.112846][ T294] bridge_slave_0: entered promiscuous mode [ 23.130684][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.137770][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.144953][ T294] bridge_slave_1: entered allmulticast mode [ 23.151271][ T294] bridge_slave_1: entered promiscuous mode [ 23.160710][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.167862][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175051][ T295] bridge_slave_0: entered allmulticast mode [ 23.181225][ T295] bridge_slave_0: entered promiscuous mode [ 23.193362][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.200534][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.207631][ T295] bridge_slave_1: entered allmulticast mode [ 23.213814][ T295] bridge_slave_1: entered promiscuous mode [ 23.251292][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.258382][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.265468][ T293] bridge_slave_0: entered allmulticast mode [ 23.271855][ T293] bridge_slave_0: entered promiscuous mode [ 23.278153][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.285659][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.292724][ T296] bridge_slave_0: entered allmulticast mode [ 23.299188][ T296] bridge_slave_0: entered promiscuous mode [ 23.305647][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.313291][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.320402][ T296] bridge_slave_1: entered allmulticast mode [ 23.326727][ T296] bridge_slave_1: entered promiscuous mode [ 23.332840][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339996][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.347582][ T293] bridge_slave_1: entered allmulticast mode [ 23.353795][ T293] bridge_slave_1: entered promiscuous mode [ 23.503920][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.510999][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.518324][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.525361][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.539477][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.546544][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.553787][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.560830][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.570501][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577564][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.584846][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591865][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.619934][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.627027][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.634338][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.641362][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.668676][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.676060][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.683514][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.691769][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.699063][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.706333][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.713545][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.720804][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.736663][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.743710][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.757687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764749][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.772587][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.779648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.789826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.796881][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.827539][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.834609][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.842928][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.849989][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.870924][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.877991][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.886093][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.893116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.927687][ T293] veth0_vlan: entered promiscuous mode [ 23.933349][ T295] veth0_vlan: entered promiscuous mode [ 23.950180][ T293] veth1_macvtap: entered promiscuous mode [ 23.959696][ T294] veth0_vlan: entered promiscuous mode [ 23.986237][ T294] veth1_macvtap: entered promiscuous mode [ 23.993522][ T295] veth1_macvtap: entered promiscuous mode [ 24.000062][ T296] veth0_vlan: entered promiscuous mode [ 24.031620][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.051207][ T296] veth1_macvtap: entered promiscuous mode [ 24.134614][ T320] input: syz1 as /devices/virtual/input/input4 [ 24.384488][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.394647][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.534306][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 24.540627][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.551727][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 24.557166][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.568136][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.577511][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.584305][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.586734][ T65] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 24.604599][ T10] usb 1-1: config 0 descriptor?? [ 24.609679][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 24.622914][ T65] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 24.632621][ T10] hub 1-1:0.0: USB hub found [ 24.637749][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.648028][ T65] usb 4-1: config 0 descriptor?? [ 24.735475][ T31] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 24.744166][ T31] usb 2-1: config 127 has no interface number 0 [ 24.750575][ T31] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 24.763082][ T31] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 24.772169][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.780213][ T31] usb 2-1: Product: syz [ 24.784409][ T31] usb 2-1: Manufacturer: syz [ 24.789001][ T31] usb 2-1: SerialNumber: syz [ 24.794731][ T321] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 24.838835][ T10] hub 1-1:0.0: 1 port detected [ 25.058536][ T65] wacom 0003:056A:0013.0001: ignoring exceeding usage max [ 25.066890][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.073794][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.080850][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.087765][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.094721][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.101604][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.108699][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.115614][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.122734][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.129879][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.136810][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.143692][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.150644][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.157552][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.164644][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.171539][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.178478][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.185410][ T65] wacom 0003:056A:0013.0001: unknown main item tag 0x0 [ 25.192738][ T65] wacom 0003:056A:0013.0001: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 25.203494][ T65] wacom 0003:056A:0013.0001: hidraw0: USB HID v0.01 Device [HID 056a:0013] on usb-dummy_hcd.3-1/input0 [ 25.216883][ T321] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.225195][ T65] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0013.0001/input/input5 [ 25.283487][ T311] usb 4-1: USB disconnect, device number 2 [ 25.443033][ T31] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 25.462754][ T10] hub 1-1:0.0: activate --> -90 [ 25.643505][ T31] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 82 [ 25.821760][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.853563][ T31] usb 2-1: USB disconnect, device number 2 [ 25.866737][ T311] usb 1-1: USB disconnect, device number 2 [ 26.473842][ T297] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.744283][ T31] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 26.814404][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.894309][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 26.964317][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 26.970852][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.981084][ T311] usb 2-1: config 0 has no interfaces? [ 26.986604][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.995685][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.004265][ T311] usb 2-1: config 0 descriptor?? [ 27.024326][ T31] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 27.184305][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 27.189725][ T31] usb usb1-port1: attempt power cycle [ 27.265350][ T329] usb 2-1: USB disconnect, device number 3 [ 27.274266][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.434362][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 27.441294][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.451086][ T10] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 27.454467][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.460283][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.475978][ T10] usb 4-1: Product: syz [ 27.480152][ T10] usb 4-1: Manufacturer: syz [ 27.484796][ T10] usb 4-1: SerialNumber: syz [ 27.544328][ T31] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 27.564736][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 27.614325][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 27.620652][ T311] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 27.631965][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 27.645250][ T311] usb 3-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 27.654388][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.663308][ T311] usb 3-1: config 0 descriptor?? [ 27.697154][ T10] usb 4-1: USB disconnect, device number 3 [ 27.704324][ T31] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 27.714735][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.724810][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 27.736469][ T31] usb usb1-port1: unable to enumerate USB device [ 27.754317][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.904269][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 27.910717][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.921736][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.931920][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.941009][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.950158][ T65] usb 2-1: config 0 descriptor?? [ 27.959038][ T65] hub 2-1:0.0: USB hub found [ 28.073531][ T311] wacom 0003:056A:0013.0002: ignoring exceeding usage max [ 28.082208][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.089401][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.096371][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.103961][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.110938][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.118045][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.124975][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.131859][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.139509][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.146520][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.153838][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.160772][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.162230][ T65] hub 2-1:0.0: 1 port detected [ 28.169000][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.180692][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.188594][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.195515][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.202422][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.209372][ T311] wacom 0003:056A:0013.0002: unknown main item tag 0x0 [ 28.217055][ T311] wacom 0003:056A:0013.0002: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 28.224135][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 28.224151][ T36] audit: type=1400 audit(1785816519.520:136): avc: denied { write } for pid=377 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.227552][ T311] wacom 0003:056A:0013.0002: hidraw0: USB HID v0.01 Device [HID 056a:0013] on usb-dummy_hcd.2-1/input0 [ 28.265264][ T311] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0013.0002/input/input8 [ 28.281496][ T311] usb 3-1: USB disconnect, device number 2 [ 28.464321][ T327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.484265][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.484421][ T350] Bluetooth: hci0: command 0x1003 tx timeout [ 28.615678][ T327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.624153][ T327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.634319][ T327] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.644786][ T327] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 28.653842][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.662032][ T327] usb 4-1: Product: syz [ 28.666255][ T327] usb 4-1: Manufacturer: syz [ 28.670854][ T327] usb 4-1: SerialNumber: syz [ 28.775762][ T65] hub 2-1:0.0: activate --> -90 [ 28.834658][ T36] audit: type=1400 audit(1785816520.140:137): avc: denied { create } for pid=381 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.854459][ T36] audit: type=1400 audit(1785816520.140:138): avc: denied { bind } for pid=381 comm="syz.2.23" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.874869][ T36] audit: type=1400 audit(1785816520.140:139): avc: denied { name_bind } for pid=381 comm="syz.2.23" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 28.881363][ T327] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.902088][ T36] audit: type=1400 audit(1785816520.140:140): avc: denied { node_bind } for pid=381 comm="syz.2.23" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 28.914785][ T327] usb 4-1: USB disconnect, device number 4 [ 28.931409][ T36] audit: type=1400 audit(1785816520.140:141): avc: denied { setopt } for pid=381 comm="syz.2.23" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.940069][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.957816][ T36] audit: type=1400 audit(1785816520.140:142): avc: denied { write } for pid=381 comm="syz.2.23" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.994096][ T36] audit: type=1400 audit(1785816520.280:143): avc: denied { create } for pid=383 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.013267][ T36] audit: type=1400 audit(1785816520.280:144): avc: denied { setopt } for pid=383 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.032936][ T36] audit: type=1400 audit(1785816520.280:145): avc: denied { bind } for pid=383 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.192900][ T31] usb 2-1: USB disconnect, device number 4 [ 29.192945][ T65] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 29.384355][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.450340][ T415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.544328][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 29.551409][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.563531][ T311] usb 3-1: config 9 has an invalid interface number: 212 but max is 0 [ 29.571886][ T311] usb 3-1: config 9 has no interface number 0 [ 29.584150][ T311] usb 3-1: config 9 interface 212 has no altsetting 0 [ 29.604999][ T311] usb 3-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=cc.d5 [ 29.614337][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.634312][ T311] usb 3-1: Product: syz [ 29.638736][ T311] usb 3-1: Manufacturer: syz [ 29.643520][ T311] usb 3-1: SerialNumber: syz [ 29.704344][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 29.785777][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.844419][ T327] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.861166][ T31] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 29.869890][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 29.881486][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 29.891683][ T311] snd-usb-audio 3-1:9.212: probe with driver snd-usb-audio failed with error -2 [ 29.903703][ T311] usb 3-1: USB disconnect, device number 3 [ 29.909920][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.212/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.915497][ T31] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 29.935712][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.943759][ T31] usb 4-1: Product: syz [ 29.948032][ T31] usb 4-1: Manufacturer: syz [ 29.952826][ T31] usb 4-1: SerialNumber: syz [ 29.965189][ T31] usb 4-1: config 0 descriptor?? [ 30.014332][ T327] usb 1-1: Using ep0 maxpacket: 16 [ 30.023436][ T327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.038725][ T327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.051428][ T327] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.061558][ T327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.064618][ T433] dummy_hcd dummy_hcd.0: remove, state 1 [ 30.069783][ T327] usb 1-1: Product: syz [ 30.075916][ T433] usb usb1: USB disconnect, device number 1 [ 30.080006][ T327] usb 1-1: Manufacturer: syz [ 30.090631][ T327] usb 1-1: SerialNumber: syz [ 30.096926][ T327] usb 1-1: USB disconnect, device number 7 [ 30.107686][ T433] dummy_hcd dummy_hcd.0: stopped [ 30.112660][ T433] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 30.178869][ T311] usb 4-1: USB disconnect, device number 5 [ 30.384338][ T327] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.534307][ T327] usb 2-1: Using ep0 maxpacket: 16 [ 30.540554][ T327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.550721][ T327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.560969][ T327] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.570120][ T327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.578202][ T327] usb 2-1: Product: syz [ 30.582354][ T327] usb 2-1: Manufacturer: syz [ 30.586975][ T327] usb 2-1: SerialNumber: syz [ 30.614312][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.703070][ T441] random: crng reseeded on system resumption [ 30.764269][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 30.770902][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.779507][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 7 [ 30.792088][ T311] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 30.793743][ T327] usb 2-1: 0:2 : does not exist [ 30.801190][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.811195][ T327] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 30.814364][ T311] usb 3-1: Product: syz [ 30.825782][ T311] usb 3-1: Manufacturer: syz [ 30.830421][ T311] usb 3-1: SerialNumber: syz [ 30.851488][ T327] usb 2-1: USB disconnect, device number 5 [ 30.865135][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.098651][ T311] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.106412][ T311] usb 3-1: 2:1 : unknown format tag 0x1003 is detected. processed as MPEG. [ 31.115364][ T311] usb 3-1: found format II with max.bitrate = 257, frame size=36221 [ 31.123616][ T311] usb 3-1: 2:1 : unknown format tag 0x1003 is detected. processed as MPEG. [ 31.132411][ T311] usb 3-1: found format II with max.bitrate = 257, frame size=36221 [ 31.144754][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 31.156791][ T311] usb 3-1: USB disconnect, device number 4 [ 31.167295][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.584294][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.734334][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 31.740583][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.750738][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.761081][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.770354][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.778516][ T31] usb 2-1: Product: syz [ 31.782683][ T31] usb 2-1: Manufacturer: syz [ 31.787335][ T31] usb 2-1: SerialNumber: syz [ 31.964287][ T311] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 31.995382][ T31] usb 2-1: 0:2 : does not exist [ 32.001979][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 32.012733][ T31] usb 2-1: USB disconnect, device number 6 [ 32.094330][ T311] usb 4-1: device descriptor read/64, error -71 [ 32.104441][ T365] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.255478][ T365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.265654][ T365] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.280462][ T365] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 32.289867][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.297879][ T365] usb 3-1: Product: syz [ 32.302302][ T365] usb 3-1: Manufacturer: syz [ 32.306911][ T365] usb 3-1: SerialNumber: syz [ 32.334269][ T311] usb 4-1: device descriptor read/64, error -71 [ 32.515109][ T365] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.529297][ T365] usb 3-1: USB disconnect, device number 5 [ 32.584290][ T311] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 32.615777][ T416] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 32.628392][ T416] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 32.636809][ T416] CPU: 1 UID: 0 PID: 416 Comm: syz.0.31 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 32.648079][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.658766][ T416] RIP: 0010:set_link_state+0x2a/0x1240 [ 32.664736][ T416] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 32.684433][ T416] RSP: 0018:ffffc9000b81f718 EFLAGS: 00010046 [ 32.690511][ T416] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888116742600 [ 32.698511][ T416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.706658][ T416] RBP: ffffc9000b81f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 32.714647][ T416] R10: dffffc0000000000 R11: fffff52001703ee0 R12: 0000000000000000 [ 32.722698][ T416] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810eae8000 [ 32.730747][ T416] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.742279][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.748865][ T416] CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 32.756886][ T416] Call Trace: [ 32.760449][ T416] [ 32.763375][ T416] ? __kasan_check_write+0x18/0x20 [ 32.768508][ T416] dummy_pullup+0xd1/0x130 [ 32.772976][ T416] ? __cfi_dummy_pullup+0x10/0x10 [ 32.778614][ T416] usb_gadget_disconnect_locked+0x151/0x400 [ 32.784532][ T416] gadget_unbind_driver+0xaf/0x3f0 [ 32.789727][ T416] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 32.796749][ T416] device_release_driver_internal+0x4ad/0x830 [ 32.803167][ T416] driver_detach+0x1f5/0x2d0 [ 32.807870][ T416] bus_remove_driver+0x254/0x2b0 [ 32.813245][ T416] driver_unregister+0x79/0xb0 [ 32.818017][ T416] usb_gadget_unregister_driver+0x52/0x80 [ 32.823742][ T416] raw_release+0xdb/0x280 [ 32.828119][ T416] ? __cfi_raw_release+0x10/0x10 [ 32.833420][ T416] __fput+0x208/0xa30 [ 32.837417][ T416] ____fput+0x20/0x30 [ 32.841565][ T416] task_work_run+0x1e8/0x260 [ 32.846531][ T416] ? __cfi_task_work_run+0x10/0x10 [ 32.852414][ T416] ? __kasan_check_write+0x18/0x20 [ 32.857887][ T416] do_exit+0xa46/0x2850 [ 32.862120][ T416] ? hrtimer_cancel+0x31/0x60 [ 32.866781][ T416] ? __cfi_do_exit+0x10/0x10 [ 32.871416][ T416] ? futex_wait+0x23c/0x7c0 [ 32.875924][ T416] ? __cfi_futex_wait+0x10/0x10 [ 32.880758][ T416] ? __kasan_check_write+0x18/0x20 [ 32.885856][ T416] ? _raw_spin_lock_irq+0x93/0x120 [ 32.891050][ T416] do_group_exit+0x21f/0x2f0 [ 32.895652][ T416] ? __kasan_check_write+0x18/0x20 [ 32.900759][ T416] ? recalc_sigpending+0x184/0x1d0 [ 32.905861][ T416] get_signal+0x134c/0x1490 [ 32.910368][ T416] arch_do_signal_or_restart+0xbc/0x700 [ 32.915905][ T416] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 32.922048][ T416] ? __kasan_check_write+0x18/0x20 [ 32.924341][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.927154][ T416] syscall_exit_to_user_mode+0x57/0xb0 [ 32.940155][ T416] do_syscall_64+0x63/0xf0 [ 32.944571][ T416] ? clear_bhb_loop+0x50/0xa0 [ 32.949268][ T416] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.955166][ T416] RIP: 0033:0x7f3933d9e019 [ 32.959613][ T416] Code: Unable to access opcode bytes at 0x7f3933d9dfef. [ 32.966616][ T416] RSP: 002b:00007fff038b46b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.975112][ T416] RAX: fffffffffffffdfc RBX: 0000000000007391 RCX: 00007f3933d9e019 [ 32.983078][ T416] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3934025fac [ 32.991066][ T416] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000 [ 32.999030][ T416] R10: 00007fff038b47c0 R11: 0000000000000246 R12: 00007fff038b47e0 [ 33.006998][ T416] R13: 00007f3934025fac R14: 0000000000007f7b R15: 00007fff038b47c0 [ 33.014975][ T416] [ 33.017995][ T416] Modules linked in: [ 33.021920][ T416] ---[ end trace 0000000000000000 ]--- [ 33.027482][ T416] RIP: 0010:set_link_state+0x2a/0x1240 [ 33.032972][ T416] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 33.052984][ T416] RSP: 0018:ffffc9000b81f718 EFLAGS: 00010046 [ 33.059103][ T416] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888116742600 [ 33.067084][ T416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.075047][ T416] RBP: ffffc9000b81f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 33.083010][ T416] R10: dffffc0000000000 R11: fffff52001703ee0 R12: 0000000000000000 [ 33.090969][ T416] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810eae8000 [ 33.098936][ T416] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.108116][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.114866][ T416] CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 33.122920][ T416] Kernel panic - not syncing: Fatal exception [ 33.129290][ T416] Kernel Offset: disabled [ 33.133630][ T416] Rebooting in 86400 seconds..