last executing test programs: 2m48.179908759s ago: executing program 1 (id=700): r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x2000, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '#'}, {0x20, 'trusted.overlay.redirect\x00'}, {0x20, '\x89('}, {0x20, 'trusted.overlay.redirect\x00'}, {0x20, ':+'}, {0x20, '+F^'}, {0x20, 'trusted.overlay.redirect\x00'}, {}], 0xa, "b8c1879a9108a4bb3aba95a17985a11d9d0432deeb238b9070fcc06e5f039a6414b0f102b5e25eb4a1bef383968acb36ff0247ee107482fb3cdb55163738e1506a8206b6d9215fd9148aef28ee7361967975ad0839cae00843afa3e27499fda66b5fda12abb5d25f5b361c92a7a556de4f71b7f6e13d54a0228a65fbd5f2600f65205ea70a01fdac49bc5fe8a067bfbc57b717d8c6bd87c03401e97fb1c38ac23f3c3f8b78e205d921661f9775c5cb950de36969daae8dbfb8b13d4ebaddfb4c3442cc1a413c19a71141a742a22c423b6dd6f075c851d3a6df6d251950514c90656780"}, 0x14a) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000002480)=""/4102, 0x1006}, {&(0x7f0000000040)=""/10, 0xa}], 0x6}}, {{0x0, 0x0, 0x0}, 0x7ffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x12140, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x8, 0x3) 2m48.15761204s ago: executing program 1 (id=701): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x1e, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './sys/bus/usb/devices/usb2/power/autosuspend_delay_ms'}, 0x39) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x284) 2m48.032950054s ago: executing program 1 (id=702): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x1e, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './sys/bus/usb/devices/usb2/power/autosuspend_delay_ms'}, 0x39) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m47.900114387s ago: executing program 1 (id=703): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="96bc", 0x2}], 0x1}, 0x24048804) 2m47.77885972s ago: executing program 1 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000fffffffc0000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m47.748210211s ago: executing program 1 (id=706): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x6) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) 2m32.71426279s ago: executing program 32 (id=706): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x6) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) 1m21.008599557s ago: executing program 4 (id=1614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x700, 0x4, 0x9, 0x0}) 1m20.921233409s ago: executing program 4 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 1m20.87982408s ago: executing program 4 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYBLOB="030300000000000000000f"], 0x14}}, 0x0) 1m20.87619923s ago: executing program 4 (id=1617): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x13, 0x0, &(0x7f0000002400)) r2 = socket$inet(0x2, 0x5, 0x8) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x9) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet(0x2, 0x4, 0x0) r6 = dup3(r2, r5, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6a, &(0x7f0000000000)=[@cr4={0x1, 0x9e2}], 0x1) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_int(r6, 0x0, 0x5, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e284) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$uac2(0x3, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512018240000102030109027a00030100f00308"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ftruncate(r0, 0x5) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) 1m20.326200054s ago: executing program 4 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "32c5ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x3f}}}}}, 0x76) 1m20.06793046s ago: executing program 4 (id=1623): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000f4010700000044200d"], 0x38}}], 0x1, 0x46000) 1m20.015520721s ago: executing program 33 (id=1623): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000f4010700000044200d"], 0x38}}], 0x1, 0x46000) 1m16.42797973s ago: executing program 0 (id=1687): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) 1m16.418883351s ago: executing program 5 (id=1689): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x2f, 0x5) 1m16.271930604s ago: executing program 5 (id=1691): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x5, 0x469, 0xb012, 0x200, 0x0, "06"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 1m16.271836054s ago: executing program 0 (id=1692): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x40000011}) epoll_pwait(r1, &(0x7f0000002100)=[{}], 0x1, 0x1a83, 0x0, 0x0) 1m16.174570886s ago: executing program 5 (id=1694): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1m16.116035868s ago: executing program 0 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) writev(r0, &(0x7f00000026c0)=[{&(0x7f00000003c0)="a2", 0x1}, {0x0}], 0x2) 1m16.110976328s ago: executing program 5 (id=1697): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1m16.03467319s ago: executing program 0 (id=1698): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x80000, 0x2) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 1m15.975912821s ago: executing program 5 (id=1700): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 1m15.964322571s ago: executing program 5 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x84) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[], 0x22) 1m15.954025442s ago: executing program 0 (id=1702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1m15.897578963s ago: executing program 0 (id=1704): r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents(r2, 0x0, 0x58) 1m0.078017344s ago: executing program 34 (id=1704): r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents(r2, 0x0, 0x58) 1m0.064100155s ago: executing program 35 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x84) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[], 0x22) 30.418584618s ago: executing program 7 (id=2075): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54200010880cc000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff060005000b0a00001400040002000000ac1414aa00000000000000008000098028000080060001000a00000014000200ff02000000000000000000000000000105000300"], 0x15c}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f58, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 'wlan1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) 30.33047107s ago: executing program 7 (id=2076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffd, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x20}, {0x80000001, 0x9000, 0x37, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x1}, {0xa00000000000000, 0xd1b, 0x200000000000000, 0x4}, 0x0, 0x80}, [@policy_type={0xa}]}, 0xc4}}, 0x2c000010) 30.203844393s ago: executing program 7 (id=2077): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/97, 0x61}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x7, 0x40000062, 0x0) 30.199413073s ago: executing program 7 (id=2078): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda1\x00', 0x15f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ef) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/sda1\x00', &(0x7f0000000840), 0x3100) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2004c844) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/sda1/file0\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) r2 = syz_open_dev$evdev(0x0, 0x10001, 0x109200) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) 30.113663485s ago: executing program 7 (id=2079): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@out_dx={0x6a, 0x28, {0x1c20, 0x0, 0xfffffffffffffff7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xa0, 0x7, 0x7}}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0xa}}, @in_dx={0x69, 0x20, {0x95a5, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x66, 0x2, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1f, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x343c, 0x1, 0x33d4}}, @wr_crn={0x67, 0x20}, @cpuid={0x64, 0x18, {0x8, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1000}, @wr_crn={0x67, 0x20, {0x2, 0x7}}, @wr_drn={0x68, 0x20, {0x1, 0x6088}}], 0x218}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x80000000, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x6, 0xfffffffffffff9af, 0xff, 0x5, 0x5, 0x5, 0x1, 0x9, 0x9, 0x7, 0x3ff], 0xb000, 0x200}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@out_dx={0x6a, 0x28, {0x1c20, 0x0, 0xfffffffffffffff7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xa0, 0x7, 0x7}}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0xa}}, @in_dx={0x69, 0x20, {0x95a5, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x66, 0x2, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1f, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x343c, 0x1, 0x33d4}}, @wr_crn={0x67, 0x20}, @cpuid={0x64, 0x18, {0x8, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1000}, @wr_crn={0x67, 0x20, {0x2, 0x7}}, @wr_drn={0x68, 0x20, {0x1, 0x6088}}], 0x218}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x80000000, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x6, 0xfffffffffffff9af, 0xff, 0x5, 0x5, 0x5, 0x1, 0x9, 0x9, 0x7, 0x3ff], 0xb000, 0x200}) (async) 27.154920378s ago: executing program 7 (id=2104): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f58, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 'wlan1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) 27.135921889s ago: executing program 36 (id=2104): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f58, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 'wlan1\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) 10.89713366s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 9.047807586s ago: executing program 6 (id=2170): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) alarm(0x100000001) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604017f0bf50000000000000003000600f4890000c3000000000000004000000000000000320100000000000008000000050038000300030000000d000300000007000000050000000000000009000000000000000400000000000000ffffffffffffffff050d00000000000009000000000000000200000015000000000000000000000004000000000000000200000000000000060000000000000081ffffffffffffff060000000000000003000000080000000700000000000000f9ffffffffffffff06000000000000000000000000000000ff070000000000000700000000000000dadf331cb9668ab66b99bb95c79432cad94b6be5f89edcaf7e4029707164aef65be5f99b4ab73ae837c4d49519d08d9442a7e6b959342300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300"/1823], 0x71f) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @loopback}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x9, 0x7f, 0x2, 0x5, 0x9, 0xd44, 0x2, 0x9, 0x7, 0x8, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0x8, 0x2], 0x4, 0x3001}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x1d2) getdents64(r1, &(0x7f0000000140)=""/45, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000400000000000000000000000000000000000000000006d") ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl(r5, 0xc138fd0a, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001010102080400198017282830e2db3a1476039c955aa67aaa2202446c4fc0ccd5f0507f07dcdd3dceff9e39c88065527713b8cd0353837a9ad71001cb77d89d623c84c3339d2aa5b9fa09c2ae4f057f86736c21bb17d699aa218a0e7c207bf77548198426fa50411e643f7e7376baf6e951bed63b6015d2c64499037d9f546778755bc5e4aa54e2e640d51caecbc42725c7d5ef8de723d00412e54223131134f1211bfce84c45ea16baf48dea2daf36d247726ebbeaa4ac73cf96945299365a2fd28a3a3508ac8a3617de08da0dca8dc3d42357ca480d89506435b51fa2a7bea48ce9f55b767d8b4df25f"], 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x1, 0x1, 0x1, 0x6, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x66, 0x0, 0x37, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x71, 0x3, 0x8}]}}}}}) fcntl$setlease(r4, 0x400, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000040)={0x4, 0x4}) fcntl$setlease(r4, 0x400, 0x2) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0xfffffc38, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0895f1d3c2e9f2e2107a79a4f74991e8", 0x10) 8.919995389s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 7.116968213s ago: executing program 6 (id=2172): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x40000, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x40000000, 0x0) (rerun: 32) 7.023937746s ago: executing program 6 (id=2176): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/97, 0x61}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa80b0000}}], 0x7, 0x40000062, 0x0) 6.936469428s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 5.019299356s ago: executing program 6 (id=2179): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) splice(0xffffffffffffffff, &(0x7f0000000180)=0x6d, 0xffffffffffffffff, 0x0, 0x9, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000180)={0x0, 0x0, 0x99, 0x79, ""/121}, &(0x7f0000000040)=0x99, 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xaf, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x7f, 0x3}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x3, 0x5, 0x5, 0x40, 0x7}, 0x77, &(0x7f0000000100)={0x5, 0xf, 0x77, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x7, 0x9, 0x3, 0x7}, @generic={0x5a, 0x10, 0x2, "5e384b5426b193f9d256ebb40b82d4f4ed1dfd8b207277b1c753ba6d6a675ba4ca41e56db6ad811f769478326e7d7c4ce21fbff5f1094571ff308fcff505aafbe095272454c7a51e2665db2bde7b845b611fa408dc29ec"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7e, 0x1}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x34, &(0x7f0000000200)=@string={0x34, 0x3, "683a689d01a2e7ff78fc81608cd6c856029a41d3b051ed9fee7a863ad51951b5f10284b92e122cac807d580c45fc4420c750"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0xa7, &(0x7f00000002c0)=@string={0xa7, 0x3, "1e1f504c041224b845c0b9530e1c0e518a4ecbc71145ec5924daa5120de9640759a6aacf6a2c584c0394e784031e9bf5e383c50cde7722ad17dd2f58fbd3763396c13c7285589fabd523c9e189735590c1dfcdd53772aa8cc146dfb43d60913eb613abe1e83a6adac0e0765f27fd47e7607644a01151f5e3c2ebd49e8a24f201df6bdb9515b141335a9ef4db669d961f5a698789681e65be1bd2a09b3fb902628986527a82"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1409}}, {0x34, &(0x7f00000003c0)=@string={0x34, 0x3, "cbf1b9548eecae47ee6398942d7793e5949e0753b364f65729bf87afb34fdf9c8b4a1718df1669af8efb8316a6d137d650dc"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x74, &(0x7f0000000440)=@string={0x74, 0x3, "6cd1c7e248b2920780ef36ffa2ef6742ce99f20c4d1d46aea0d5bcc62fb635eb33d28d6459e0fbf0e4e4905e9a1e61b74dcb9384d3e25262095f3d9fefe9c4e0d584bcabfe7c7f568e6c6ccf6d4a2acd6ee29cebb62a021bf745e73072091e61f0a7d49aee3c39400471c777dc0562c73e37"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x418}}]}) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x303c03a, 0x0) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x20000, {r4}}, 0x20) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501b3237f6f012709058c0200066df780"], &(0x7f0000000640)={0x0, 0x0, 0x3d, 0x0}) 4.955519987s ago: executing program 3 (id=2181): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) alarm(0x100000001) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1823], 0x71f) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @loopback}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x9, 0x7f, 0x2, 0x5, 0x9, 0xd44, 0x2, 0x9, 0x7, 0x8, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0x8, 0x2], 0x4, 0x3001}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x1d2) getdents64(r1, &(0x7f0000000140)=""/45, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000014000000000000000000000000000000000000006d") ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl(r5, 0xc138fd0a, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001010102080400198017282830e2db3a1476039c955aa67aaa2202446c4fc0ccd5f0507f07dcdd3dceff9e39c88065527713b8cd0353837a9ad71001cb77d89d623c84c3339d2aa5b9fa09c2ae4f057f86736c21bb17d699aa218a0e7c207bf77548198426fa50411e643f7e7376baf6e951bed63b6015d2c64499037d9f546778755bc5e4aa54e2e640d51caecbc42725c7d5ef8de723d00412e54223131134f1211bfce84c45ea16baf48dea2daf36d247726ebbeaa4ac73cf96945299365a2fd28a3a3508ac8a3617de08da0dca8dc3d42357ca480d89506435b51fa2a7bea48ce9f55b767d8b4df25f"], 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x1, 0x1, 0x1, 0x6, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x66, 0x0, 0x37, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x71, 0x3, 0x8}]}}}}}) fcntl$setlease(r4, 0x400, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000040)={0x4, 0x4}) fcntl$setlease(r4, 0x400, 0x2) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0xfffffc38, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0895f1d3c2e9f2e2107a79a4f74991e8", 0x10) 4.627048886s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 4.622454246s ago: executing program 3 (id=2182): setrlimit(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x26000, 0xfffffffe, 0x7ffffff9, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0x2d, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x26, 0x1, 0x2, '\x00', 0xff}, {0x0, 0x4, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x6, '\x00', 0x4d}, {0xb, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x2, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x8, '\x00', 0xfd}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x8, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x0, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}}) truncate(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x400000efff) 2.643416334s ago: executing program 6 (id=2183): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.629713815s ago: executing program 3 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x1490c2, 0x70) 2.571087856s ago: executing program 2 (id=2186): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x56, 0x0, 0x0, 0x0, @str='d\xa8\x96GM\xf7\x9f\xbdlU\x03\x00\x00\x00\x00\x00\x00\x00\x1ccK\xd1w\xb8jn*\\\x1e\xe9\xc8\xe6f\xa1.Av\x04\xf3\x15q\xbd)7\xf2\x98\xaa\x1a\x98@\x01\x7f}\x8c\xf7\xe0\x90\xf7\xbb^w\xb2hT\xfbi\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00'}]}, 0x6c}}, 0x0) 2.541466757s ago: executing program 2 (id=2187): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100320001000000000007fdd411efc408000400"/57, 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fec0000006040000000000f93132", 0x39}], 0x1) 2.533846067s ago: executing program 3 (id=2188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x4c, 0x0, &(0x7f0000000440)="a68587b6d7ad1ba9ad6a3153c991f033ad5c8e32209968f2e9dec49826a020679f1afd214cb97c52a9a1b7fb8e2b5c3251955355c830b9e0d8c09715e14ee899e4127d492076c24e551dd157"}) 2.449368649s ago: executing program 3 (id=2189): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/97, 0x61}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}}], 0x7, 0x40000062, 0x0) 2.367844321s ago: executing program 2 (id=2190): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) alarm(0x100000001) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1823], 0x71f) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x9, {{0x2, 0x4e20, @loopback}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x9, 0x7f, 0x2, 0x5, 0x9, 0xd44, 0x2, 0x9, 0x7, 0x8, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0x8, 0x2], 0x4, 0x3001}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x1d2) getdents64(r1, &(0x7f0000000140)=""/45, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000020000000000000000000000000000000000006d") ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl(r5, 0xc138fd0a, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001010102080400198017282830e2db3a1476039c955aa67aaa2202446c4fc0ccd5f0507f07dcdd3dceff9e39c88065527713b8cd0353837a9ad71001cb77d89d623c84c3339d2aa5b9fa09c2ae4f057f86736c21bb17d699aa218a0e7c207bf77548198426fa50411e643f7e7376baf6e951bed63b6015d2c64499037d9f546778755bc5e4aa54e2e640d51caecbc42725c7d5ef8de723d00412e54223131134f1211bfce84c45ea16baf48dea2daf36d247726ebbeaa4ac73cf96945299365a2fd28a3a3508ac8a3617de08da0dca8dc3d42357ca480d89506435b51fa2a7bea48ce9f55b767d8b4df25f"], 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x1, 0x1, 0x1, 0x6, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x66, 0x0, 0x37, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x71, 0x3, 0x8}]}}}}}) fcntl$setlease(r4, 0x400, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000040)={0x4, 0x4}) fcntl$setlease(r4, 0x400, 0x2) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0xfffffc38, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0895f1d3c2e9f2e2107a79a4f74991e8", 0x10) 2.367671821s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 230.208904ms ago: executing program 6 (id=2191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) r1 = userfaultfd(0x80001) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001600010a0000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) open(0x0, 0x8080, 0x12e) flock(0xffffffffffffffff, 0x8) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000001100010000e2ff0000ff", @ANYRES32=r5, @ANYBLOB="08001a8004000080"], 0x28}], 0x1}, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x204403) r7 = fcntl$dupfd(r4, 0x406, r6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0xfffffffffffffe08) 226.321734ms ago: executing program 2 (id=2192): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}], 0x1, 0x46000) 223.941134ms ago: executing program 3 (id=2193): clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) (rerun: 32) 146.242256ms ago: executing program 2 (id=2194): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\vD \r'], 0x38}}], 0x1, 0x46000) 328.25µs ago: executing program 2 (id=2195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffd, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x20}, {0x80000001, 0x9000, 0x37, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xd1b, 0x200000006000000, 0x4}, 0x0, 0x80}, [@policy_type={0xa}]}, 0xc4}}, 0x2c000010) 0s ago: executing program 8 (id=2105): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x2, 0x3}, 0x18, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xa32, 0x40900) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1037fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49bb}, 0x1c) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) pipe2(&(0x7f0000000040), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) kernel console output (not intermixed with test programs): cdDevice=69.ee [ 209.199566][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.209575][ T46] usb 4-1: Product: syz [ 209.217937][ T46] usb 4-1: Manufacturer: syz [ 209.232745][ T46] usb 4-1: SerialNumber: syz [ 209.244607][ T5058] syzkaller1: entered promiscuous mode [ 209.257515][ T5058] syzkaller1: entered allmulticast mode [ 209.259303][ T46] usb 4-1: config 0 descriptor?? [ 209.276747][ T46] smsc75xx v1.0.0 [ 209.489578][ T311] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 209.504578][ T5070] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1574'. [ 209.526667][ T5070] netlink: 'syz.2.1574': attribute type 4 has an invalid length. [ 209.616456][ T5074] netlink: 'syz.2.1576': attribute type 28 has an invalid length. [ 209.662411][ T311] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 209.689575][ T311] usb 1-1: config 0 has no interface number 0 [ 209.696264][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 209.711257][ T311] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 209.736921][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.745067][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 209.775956][ T311] usb 1-1: Product: syz [ 209.788593][ T311] usb 1-1: Manufacturer: syz [ 209.788600][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 209.788789][ T46] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 209.806135][ T311] usb 1-1: SerialNumber: syz [ 209.869100][ T311] usb 1-1: config 0 descriptor?? [ 209.920683][ T46] usb 4-1: USB disconnect, device number 73 [ 210.168909][ T5082] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1579'. [ 210.298069][ T5084] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1580'. [ 210.410786][ T5086] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 210.433596][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 210.644936][ T5093] syzkaller1: entered promiscuous mode [ 210.663735][ T5093] syzkaller1: entered allmulticast mode [ 210.710215][ T5060] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 210.733340][ T5060] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1569'. [ 210.765031][ T311] asix 1-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 210.978770][ T46] usb 1-1: USB disconnect, device number 56 [ 211.069585][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.078206][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.190183][ T5116] syzkaller1: entered promiscuous mode [ 211.195718][ T5116] syzkaller1: entered allmulticast mode [ 211.506503][ T5129] FAULT_INJECTION: forcing a failure. [ 211.506503][ T5129] name failslab, interval 1, probability 0, space 10, times 0 [ 211.529576][ T5129] CPU: 0 UID: 0 PID: 5129 Comm: syz.3.1600 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 211.529614][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.529629][ T5129] Call Trace: [ 211.529638][ T5129] [ 211.529648][ T5129] __dump_stack+0x21/0x30 [ 211.529686][ T5129] dump_stack_lvl+0x140/0x1c0 [ 211.529720][ T5129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 211.529753][ T5129] ? __kasan_check_write+0x18/0x20 [ 211.529779][ T5129] ? mutex_unlock+0x90/0x240 [ 211.529804][ T5129] dump_stack+0x19/0x20 [ 211.529844][ T5129] should_fail_ex+0x3c2/0x510 [ 211.529872][ T5129] should_failslab+0xac/0x100 [ 211.529902][ T5129] kmem_cache_alloc_noprof+0x42/0x410 [ 211.529928][ T5129] ? getname_flags+0xcc/0x6b0 [ 211.529954][ T5129] ? __cfi_ksys_write+0x10/0x10 [ 211.529980][ T5129] getname_flags+0xcc/0x6b0 [ 211.530008][ T5129] __x64_sys_rmdir+0x3e/0x60 [ 211.530042][ T5129] x64_sys_call+0xaf7/0x2ee0 [ 211.530062][ T5129] do_syscall_64+0x57/0xf0 [ 211.530092][ T5129] ? clear_bhb_loop+0x50/0xa0 [ 211.530117][ T5129] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 211.530141][ T5129] RIP: 0033:0x7f1369b9e159 [ 211.530159][ T5129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.530179][ T5129] RSP: 002b:00007f13685f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 211.530206][ T5129] RAX: ffffffffffffffda RBX: 00007f1369e25fa0 RCX: 00007f1369b9e159 [ 211.530224][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 211.530240][ T5129] RBP: 00007f13685f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.530255][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.530270][ T5129] R13: 00007f1369e26038 R14: 00007f1369e25fa0 R15: 00007ffca25888d8 [ 211.530291][ T5129] [ 211.770164][ T36] kauditd_printk_skb: 1054 callbacks suppressed [ 211.770185][ T36] audit: type=1400 audit(2000000000.710:22434): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.800703][ T36] audit: type=1400 audit(2000000000.710:22435): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.825708][ T36] audit: type=1400 audit(2000000000.710:22436): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.852436][ T36] audit: type=1400 audit(2000000000.820:22437): avc: denied { create } for pid=5131 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.902406][ T36] audit: type=1400 audit(2000000000.860:22438): avc: denied { create } for pid=5131 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.989597][ T36] audit: type=1400 audit(2000000000.860:22439): avc: denied { write } for pid=5131 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.044340][ T36] audit: type=1400 audit(2000000000.860:22440): avc: denied { read } for pid=5131 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.065438][ T5142] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1605'. [ 212.077372][ T5142] netlink: 'syz.2.1605': attribute type 4 has an invalid length. [ 212.089569][ T36] audit: type=1400 audit(2000000000.860:22441): avc: denied { read } for pid=5131 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.149618][ T36] audit: type=1400 audit(2000000000.860:22442): avc: denied { read write } for pid=2962 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.189558][ T314] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 212.209035][ T36] audit: type=1400 audit(2000000000.860:22443): avc: denied { read write open } for pid=2962 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.304146][ T5151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1611'. [ 212.356426][ T314] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 212.388306][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.404731][ T314] usb 4-1: Product: syz [ 212.413243][ T314] usb 4-1: Manufacturer: syz [ 212.417898][ T314] usb 4-1: SerialNumber: syz [ 212.569600][ T1304] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 212.639233][ T314] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 212.647538][ T314] usb 4-1: USB disconnect, device number 74 [ 212.730561][ T1304] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 212.738824][ T1304] usb 1-1: config 0 has no interface number 0 [ 212.761602][ T1304] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 212.780770][ T5157] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 212.791446][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 212.791546][ T1304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.829833][ T1304] usb 1-1: Product: syz [ 212.834078][ T1304] usb 1-1: Manufacturer: syz [ 212.838693][ T1304] usb 1-1: SerialNumber: syz [ 212.860082][ T1304] usb 1-1: config 0 descriptor?? [ 213.539569][ T311] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 213.689593][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 213.698304][ T311] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.709360][ T311] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.719129][ T5152] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 213.719150][ T5152] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1610'. [ 213.727234][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.742522][ T311] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.751696][ T1304] asix 1-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 213.751913][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.805871][ T311] usb 4-1: config 0 descriptor?? [ 213.854427][ T3621] veth1_macvtap: left promiscuous mode [ 213.860097][ T3621] veth0_vlan: left promiscuous mode [ 213.953835][ T1304] usb 1-1: USB disconnect, device number 57 [ 214.020812][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.053682][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.210936][ T5188] 9pnet_fd: Insufficient options for proto=fd [ 214.220833][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.236965][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.249645][ T5181] bridge_slave_0: entered allmulticast mode [ 214.280043][ T5181] bridge_slave_0: entered promiscuous mode [ 214.287835][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.299606][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 214.305613][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.329689][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.332340][ T311] usb 4-1: USB disconnect, device number 75 [ 214.336904][ T5181] bridge_slave_1: entered allmulticast mode [ 214.393792][ T5181] bridge_slave_1: entered promiscuous mode [ 214.572207][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 214.618991][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.626118][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.633512][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.640604][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.669781][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.677422][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.771364][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.778485][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.800410][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.807519][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.072458][ T5181] veth0_vlan: entered promiscuous mode [ 215.133169][ T5181] veth1_macvtap: entered promiscuous mode [ 215.403130][ T5229] FAULT_INJECTION: forcing a failure. [ 215.403130][ T5229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.423449][ T5229] CPU: 0 UID: 0 PID: 5229 Comm: syz.5.1631 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 215.423487][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.423503][ T5229] Call Trace: [ 215.423512][ T5229] [ 215.423521][ T5229] __dump_stack+0x21/0x30 [ 215.423560][ T5229] dump_stack_lvl+0x140/0x1c0 [ 215.423593][ T5229] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.423629][ T5229] dump_stack+0x19/0x20 [ 215.423661][ T5229] should_fail_ex+0x3c2/0x510 [ 215.423689][ T5229] should_fail+0xf/0x20 [ 215.423715][ T5229] should_fail_usercopy+0x1e/0x30 [ 215.423744][ T5229] strncpy_from_user+0x29/0x280 [ 215.423772][ T5229] getname_flags+0x106/0x6b0 [ 215.423800][ T5229] __x64_sys_rmdir+0x3e/0x60 [ 215.423834][ T5229] x64_sys_call+0xaf7/0x2ee0 [ 215.423857][ T5229] do_syscall_64+0x57/0xf0 [ 215.423890][ T5229] ? clear_bhb_loop+0x50/0xa0 [ 215.423918][ T5229] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.423945][ T5229] RIP: 0033:0x7f7ca1d9e159 [ 215.423965][ T5229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.423985][ T5229] RSP: 002b:00007f7ca2bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 215.424011][ T5229] RAX: ffffffffffffffda RBX: 00007f7ca2025fa0 RCX: 00007f7ca1d9e159 [ 215.424030][ T5229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 215.424045][ T5229] RBP: 00007f7ca2bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.424062][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.424077][ T5229] R13: 00007f7ca2026038 R14: 00007f7ca2025fa0 R15: 00007ffd1019b6d8 [ 215.424110][ T5229] [ 215.793963][ T5244] FAULT_INJECTION: forcing a failure. [ 215.793963][ T5244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.837161][ T5244] CPU: 1 UID: 0 PID: 5244 Comm: syz.0.1644 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 215.837206][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.837223][ T5244] Call Trace: [ 215.837232][ T5244] [ 215.837242][ T5244] __dump_stack+0x21/0x30 [ 215.837283][ T5244] dump_stack_lvl+0x140/0x1c0 [ 215.837318][ T5244] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.837352][ T5244] ? stack_trace_save+0xaa/0x100 [ 215.837381][ T5244] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 215.837438][ T5244] dump_stack+0x19/0x20 [ 215.837472][ T5244] should_fail_ex+0x3c2/0x510 [ 215.837503][ T5244] should_fail_alloc_page+0xec/0x110 [ 215.837537][ T5244] __alloc_pages_noprof+0x1c0/0x7e0 [ 215.837574][ T5244] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 215.837614][ T5244] ? poison_kmalloc_large_redzone+0x97/0xf0 [ 215.837648][ T5244] ? io_alloc_hash_table+0x52/0x160 [ 215.837672][ T5244] ___kmalloc_large_node+0x81/0x220 [ 215.837700][ T5244] ? io_alloc_hash_table+0x52/0x160 [ 215.837723][ T5244] __kmalloc_large_node_noprof+0x1e/0xd0 [ 215.837751][ T5244] ? io_alloc_hash_table+0x52/0x160 [ 215.837774][ T5244] __kmalloc_noprof+0x326/0x510 [ 215.837800][ T5244] ? __kasan_kmalloc+0x96/0xb0 [ 215.837830][ T5244] ? init_hash_table+0x1ae/0x270 [ 215.837868][ T5244] io_alloc_hash_table+0x52/0x160 [ 215.837892][ T5244] io_ring_ctx_alloc+0x10b/0x1dc0 [ 215.837919][ T5244] ? do_futex+0x37d/0x510 [ 215.837954][ T5244] io_uring_create+0x2e0/0x13f0 [ 215.837979][ T5244] ? __kasan_check_write+0x18/0x20 [ 215.838005][ T5244] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 215.838049][ T5244] ? __se_sys_futex+0x13c/0x320 [ 215.838082][ T5244] ? __x64_sys_io_uring_setup+0x80/0x80 [ 215.838122][ T5244] ? __kasan_check_write+0x18/0x20 [ 215.838150][ T5244] __x64_sys_io_uring_setup+0x5f/0x80 [ 215.838187][ T5244] x64_sys_call+0x22c0/0x2ee0 [ 215.838211][ T5244] do_syscall_64+0x57/0xf0 [ 215.838248][ T5244] ? clear_bhb_loop+0x50/0xa0 [ 215.838278][ T5244] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.838306][ T5244] RIP: 0033:0x7f44ded9e159 [ 215.838328][ T5244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.838349][ T5244] RSP: 002b:00007f44dfcbcfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 215.838378][ T5244] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f44ded9e159 [ 215.838398][ T5244] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 0000000000005ba4 [ 215.838417][ T5244] RBP: 00007f44dee35024 R08: 0000000000000000 R09: 0000000000000000 [ 215.838434][ T5244] R10: 0000000000000000 R11: 0000000000000206 R12: 00002000000002c0 [ 215.838452][ T5244] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe83e81378 [ 215.838473][ T5244] [ 216.190823][ T5252] syz.0.1652 (5252): /proc/5250/oom_adj is deprecated, please use /proc/5250/oom_score_adj instead. [ 216.335146][ T5260] overlayfs: failed to clone upperpath [ 216.780873][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 216.780902][ T36] audit: type=1400 audit(2000000261.742:22924): avc: denied { mounton } for pid=5287 comm="syz.2.1670" path="/545/proc" dev="tmpfs" ino=2943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.843202][ T36] audit: type=1400 audit(2000000261.742:22925): avc: denied { mount } for pid=5287 comm="syz.2.1670" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 216.869570][ T36] audit: type=1400 audit(2000000261.772:22926): avc: denied { mounton } for pid=5289 comm="syz.0.1671" path="/384/debugfs" dev="tmpfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.956579][ T36] audit: type=1400 audit(2000000261.772:22927): avc: denied { mount } for pid=5289 comm="syz.0.1671" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.006589][ T36] audit: type=1400 audit(2000000261.802:22928): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.077727][ T36] audit: type=1400 audit(2000000261.862:22929): avc: denied { read write } for pid=293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.128255][ T36] audit: type=1400 audit(2000000261.862:22930): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.187321][ T36] audit: type=1400 audit(2000000261.862:22931): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.257663][ T36] audit: type=1400 audit(2000000261.882:22932): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.339612][ T36] audit: type=1400 audit(2000000261.882:22933): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.674513][ T311] hid-generic 0005:0469:B012.000B: item fetching failed at offset 0/1 [ 217.687084][ T311] hid-generic 0005:0469:B012.000B: probe with driver hid-generic failed with error -22 [ 219.220153][ T5389] veth2: entered promiscuous mode [ 219.231319][ T5389] veth2: entered allmulticast mode [ 221.789883][ T36] kauditd_printk_skb: 3621 callbacks suppressed [ 221.789912][ T36] audit: type=1400 audit(2000000266.752:26555): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.879952][ T36] audit: type=1400 audit(2000000266.752:26556): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.918217][ T5181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.925109][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.930787][ T5467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.931750][ T293] audit: audit_lost=150 audit_rate_limit=0 audit_backlog_limit=64 [ 221.938197][ T5467] audit: audit_lost=151 audit_rate_limit=0 audit_backlog_limit=64 [ 221.946062][ T5181] audit: audit_lost=152 audit_rate_limit=0 audit_backlog_limit=64 [ 221.961822][ T36] audit: type=1400 audit(2000000266.752:26557): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.985109][ T293] audit: backlog limit exceeded [ 222.223262][ T5474] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1763'. [ 222.261958][ T5475] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1764'. [ 222.829562][ T312] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 223.003893][ T312] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 223.039558][ T312] usb 4-1: config 0 has no interface number 0 [ 223.062172][ T312] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 223.072175][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.090593][ T312] usb 4-1: Product: syz [ 223.094820][ T312] usb 4-1: Manufacturer: syz [ 223.099462][ T312] usb 4-1: SerialNumber: syz [ 223.121466][ T312] usb 4-1: config 0 descriptor?? [ 223.944344][ T5483] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 223.952244][ T5483] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1768'. [ 223.981530][ T312] asix 4-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 224.183449][ T314] usb 4-1: USB disconnect, device number 76 [ 224.768252][ T5497] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1773'. [ 224.803078][ T5497] netlink: 'syz.3.1773': attribute type 4 has an invalid length. [ 225.549594][ T312] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 225.699588][ T312] usb 4-1: device descriptor read/64, error -71 [ 225.939695][ T312] usb 4-1: device descriptor read/64, error -71 [ 226.189903][ T312] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 226.339547][ T312] usb 4-1: device descriptor read/64, error -71 [ 226.556341][ T311] usb 3-1: USB disconnect, device number 10 [ 226.579837][ T312] usb 4-1: device descriptor read/64, error -71 [ 226.690591][ T312] usb usb4-port1: attempt power cycle [ 226.800002][ T36] kauditd_printk_skb: 5294 callbacks suppressed [ 226.800021][ T36] audit: type=1400 audit(2000000271.762:31772): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.878170][ T293] audit: audit_backlog=66 > audit_backlog_limit=64 [ 226.878205][ T5181] audit: audit_backlog=66 > audit_backlog_limit=64 [ 226.885068][ T36] audit: type=1400 audit(2000000271.762:31773): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.909611][ T5181] audit: audit_lost=179 audit_rate_limit=0 audit_backlog_limit=64 [ 226.914837][ T293] audit: audit_lost=180 audit_rate_limit=0 audit_backlog_limit=64 [ 226.930318][ T293] audit: backlog limit exceeded [ 226.933633][ T5181] audit: backlog limit exceeded [ 226.937764][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.946629][ T36] audit: type=1400 audit(2000000271.762:31774): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.030023][ T312] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 227.062423][ T312] usb 4-1: device descriptor read/8, error -71 [ 227.205962][ T312] usb 4-1: device descriptor read/8, error -71 [ 227.313699][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.329536][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.336664][ T5508] bridge_slave_0: entered allmulticast mode [ 227.359985][ T5508] bridge_slave_0: entered promiscuous mode [ 227.367637][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.375803][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.388933][ T5508] bridge_slave_1: entered allmulticast mode [ 227.396154][ T5508] bridge_slave_1: entered promiscuous mode [ 227.449569][ T312] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 227.493069][ T312] usb 4-1: device descriptor read/8, error -71 [ 227.510659][ T4656] bridge_slave_1: left allmulticast mode [ 227.516419][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.525516][ T4656] bridge_slave_0: left allmulticast mode [ 227.534500][ T4656] bridge_slave_0: left promiscuous mode [ 227.543440][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.633968][ T312] usb 4-1: device descriptor read/8, error -71 [ 227.666707][ T4656] veth1_macvtap: left promiscuous mode [ 227.678776][ T4656] veth0_vlan: left promiscuous mode [ 227.756113][ T312] usb usb4-port1: unable to enumerate USB device [ 227.902221][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.909406][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.916755][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.923852][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.086145][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.115537][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.163056][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.170176][ T4667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.206308][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.213425][ T4656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.370282][ T5523] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1779'. [ 228.562391][ T5527] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 228.591395][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 228.635455][ T5508] veth0_vlan: entered promiscuous mode [ 228.776390][ T5508] veth1_macvtap: entered promiscuous mode [ 229.129565][ T311] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 229.289555][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 229.306757][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.317637][ T311] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 229.337368][ T311] usb 4-1: config 0 has no interface number 0 [ 229.347465][ T311] usb 4-1: config 0 interface 185 has no altsetting 0 [ 229.369341][ T311] usb 4-1: New USB device found, idVendor=0403, idProduct=ea90, bcdDevice=27.a1 [ 229.391108][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.399163][ T311] usb 4-1: Product: syz [ 229.413554][ T311] usb 4-1: Manufacturer: syz [ 229.418206][ T311] usb 4-1: SerialNumber: syz [ 229.435926][ T311] usb 4-1: config 0 descriptor?? [ 229.469609][ T314] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 229.643049][ T314] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 229.661419][ T314] usb 3-1: config 0 has no interface number 0 [ 229.681604][ T314] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 229.702325][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.735503][ T314] usb 3-1: Product: syz [ 229.749578][ T314] usb 3-1: Manufacturer: syz [ 229.770733][ T314] usb 3-1: SerialNumber: syz [ 229.795709][ T314] usb 3-1: config 0 descriptor?? [ 229.950147][ T311] ftdi_sio 4-1:0.185: FTDI USB Serial Device converter detected [ 229.969413][ T311] ftdi_sio ttyUSB0: unknown device type: 0x27a1 [ 229.999660][ T311] usb 4-1: USB disconnect, device number 81 [ 230.006257][ T311] ftdi_sio 4-1:0.185: device disconnected [ 230.648436][ T5543] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.660757][ T5543] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 230.685366][ T5543] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1782'. [ 230.710883][ T314] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 230.921881][ T314] usb 3-1: USB disconnect, device number 11 [ 231.199550][ T312] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 231.339559][ T312] usb 4-1: device descriptor read/64, error -71 [ 231.525216][ T5589] selinux_netlink_send: 24 callbacks suppressed [ 231.525237][ T5589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=5589 comm=syz.2.1787 [ 231.579549][ T312] usb 4-1: device descriptor read/64, error -71 [ 231.810825][ T36] kauditd_printk_skb: 4961 callbacks suppressed [ 231.810845][ T36] audit: type=1400 audit(2000000276.772:36647): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.849545][ T312] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 231.865190][ T36] audit: type=1400 audit(2000000276.772:36648): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.889501][ T36] audit: type=1400 audit(2000000276.772:36649): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.914267][ T36] audit: type=1400 audit(2000000276.772:36650): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.944284][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 231.947794][ T36] audit: type=1400 audit(2000000276.772:36651): avc: denied { setattr } for pid=5181 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.954985][ T5181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 231.980730][ T293] audit: audit_lost=211 audit_rate_limit=0 audit_backlog_limit=64 [ 231.988560][ T293] audit: backlog limit exceeded [ 231.993490][ T312] usb 4-1: device descriptor read/64, error -71 [ 232.000838][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.239579][ T312] usb 4-1: device descriptor read/64, error -71 [ 232.246579][ T5599] veth1_to_bond: entered promiscuous mode [ 232.260381][ T5598] veth1_to_bond: left promiscuous mode [ 232.350055][ T312] usb usb4-port1: attempt power cycle [ 232.457619][ T5603] syzkaller1: entered promiscuous mode [ 232.463240][ T5603] syzkaller1: entered allmulticast mode [ 232.699550][ T312] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 232.741582][ T312] usb 4-1: device descriptor read/8, error -71 [ 232.872468][ T312] usb 4-1: device descriptor read/8, error -71 [ 233.049553][ T314] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 233.109564][ T312] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 233.142449][ T312] usb 4-1: device descriptor read/8, error -71 [ 233.202432][ T314] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 233.219531][ T314] usb 3-1: config 0 has no interface number 0 [ 233.229549][ T314] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 233.250739][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.258772][ T314] usb 3-1: Product: syz [ 233.273350][ T314] usb 3-1: Manufacturer: syz [ 233.277990][ T314] usb 3-1: SerialNumber: syz [ 233.286154][ T312] usb 4-1: device descriptor read/8, error -71 [ 233.299791][ T314] usb 3-1: config 0 descriptor?? [ 233.419621][ T312] usb usb4-port1: unable to enumerate USB device [ 234.043871][ T4656] bridge_slave_1: left allmulticast mode [ 234.049629][ T4656] bridge_slave_1: left promiscuous mode [ 234.055297][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.088584][ T4656] bridge_slave_0: left allmulticast mode [ 234.108480][ T4656] bridge_slave_0: left promiscuous mode [ 234.121332][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.194831][ T314] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 234.251927][ T5610] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 234.262482][ T5610] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1796'. [ 234.284998][ T4656] veth1_macvtap: left promiscuous mode [ 234.291885][ T4656] veth0_vlan: left promiscuous mode [ 234.397108][ T31] usb 3-1: USB disconnect, device number 12 [ 234.452068][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.459165][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.466797][ T5613] bridge_slave_0: entered allmulticast mode [ 234.473609][ T5613] bridge_slave_0: entered promiscuous mode [ 234.483339][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.490485][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.497971][ T5613] bridge_slave_1: entered allmulticast mode [ 234.504393][ T5613] bridge_slave_1: entered promiscuous mode [ 234.510796][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.517853][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.524983][ T314] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 234.524996][ T5616] bridge_slave_0: entered allmulticast mode [ 234.526260][ T5616] bridge_slave_0: entered promiscuous mode [ 234.548334][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.555475][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.562685][ T5616] bridge_slave_1: entered allmulticast mode [ 234.569034][ T5616] bridge_slave_1: entered promiscuous mode [ 234.622575][ T4656] bridge_slave_1: left allmulticast mode [ 234.628463][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.636362][ T4656] bridge_slave_0: left allmulticast mode [ 234.642119][ T4656] bridge_slave_0: left promiscuous mode [ 234.647712][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.689645][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 234.700985][ T314] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 234.710080][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.718240][ T314] usb 4-1: Product: syz [ 234.722473][ T314] usb 4-1: Manufacturer: syz [ 234.727098][ T314] usb 4-1: SerialNumber: syz [ 234.766693][ T4656] veth1_macvtap: left promiscuous mode [ 234.773664][ T4656] veth0_vlan: left promiscuous mode [ 234.883497][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.890628][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.897940][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.905024][ T5613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.920133][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.927265][ T5616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.934612][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.941689][ T5616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.955726][ T5618] x_tables: duplicate entry at hook 1 [ 234.981027][ T5618] random: crng reseeded on system resumption [ 234.993095][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.005457][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.019453][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.042647][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.108825][ T5618] netlink: 'syz.3.1800': attribute type 4 has an invalid length. [ 235.157078][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.164208][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.204203][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.211322][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.288678][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.295812][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.328788][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.335908][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.448322][ T5613] veth0_vlan: entered promiscuous mode [ 235.509859][ T5616] veth0_vlan: entered promiscuous mode [ 235.524968][ T5613] veth1_macvtap: entered promiscuous mode [ 235.616279][ T5616] veth1_macvtap: entered promiscuous mode [ 235.809561][ T311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.950184][ T311] usb 3-1: device descriptor read/64, error -71 [ 236.074471][ T5654] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1809'. [ 236.088369][ T5654] netlink: 'syz.7.1809': attribute type 4 has an invalid length. [ 236.219648][ T311] usb 3-1: device descriptor read/64, error -71 [ 236.329551][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 236.459573][ T311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.482353][ T10] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 236.490644][ T10] usb 7-1: config 0 has no interface number 0 [ 236.500618][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 236.509823][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.517903][ T10] usb 7-1: Product: syz [ 236.522451][ T10] usb 7-1: Manufacturer: syz [ 236.527084][ T10] usb 7-1: SerialNumber: syz [ 236.533987][ T10] usb 7-1: config 0 descriptor?? [ 236.599585][ T311] usb 3-1: device descriptor read/64, error -71 [ 236.827831][ T36] kauditd_printk_skb: 3190 callbacks suppressed [ 236.827848][ T36] audit: type=1400 audit(2000000281.782:39835): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 236.859574][ T311] usb 3-1: device descriptor read/64, error -71 [ 236.869783][ T36] audit: type=1400 audit(2000000281.822:39836): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.927182][ T36] audit: type=1400 audit(2000000281.822:39837): avc: denied { read write open } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.973281][ T5662] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1813'. [ 236.980773][ T36] audit: type=1400 audit(2000000281.822:39838): avc: denied { ioctl } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.982868][ T311] usb usb3-port1: attempt power cycle [ 237.020023][ T36] audit: type=1400 audit(2000000281.882:39839): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.045586][ T36] audit: type=1400 audit(2000000281.882:39840): avc: denied { read write open } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.097220][ T36] audit: type=1400 audit(2000000281.882:39841): avc: denied { ioctl } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.158003][ T36] audit: type=1400 audit(2000000281.922:39842): avc: denied { ioctl } for pid=5651 comm="syz.6.1808" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.184010][ T36] audit: type=1400 audit(2000000281.922:39843): avc: denied { ioctl } for pid=5651 comm="syz.6.1808" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.210425][ T36] audit: type=1400 audit(2000000281.972:39844): avc: denied { ioctl } for pid=5640 comm="syz.2.1805" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.279839][ T314] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.291463][ T314] usb 4-1: USB disconnect, device number 86 [ 237.369582][ T10] asix 7-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 237.409583][ T311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 237.469405][ T311] usb 3-1: device descriptor read/8, error -71 [ 237.525217][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.581723][ T46] usb 7-1: USB disconnect, device number 2 [ 237.631918][ T311] usb 3-1: device descriptor read/8, error -71 [ 237.729633][ T314] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 237.869831][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.882260][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.893299][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42492, setting to 1024 [ 237.905947][ T311] usb 3-1: device descriptor read/8, error -71 [ 237.913291][ T314] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 237.922420][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.930477][ T314] usb 4-1: Product: syz [ 237.934726][ T314] usb 4-1: Manufacturer: syz [ 237.939337][ T314] usb 4-1: SerialNumber: syz [ 237.949713][ T5670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.958139][ T314] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 237.970055][ T314] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 237.983670][ T314] scsi host1: usb-storage 4-1:1.0 [ 238.053055][ T311] usb 3-1: device descriptor read/8, error -71 [ 238.166115][ T312] usb 4-1: USB disconnect, device number 87 [ 238.172141][ C0] input input28: can't resubmit intr, dummy_hcd.3-1/input0, retval -19 [ 238.181985][ T311] usb usb3-port1: unable to enumerate USB device [ 238.573282][ T46] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 238.711885][ T46] usb 7-1: device descriptor read/64, error -71 [ 238.771552][ T5695] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1827'. [ 238.800719][ T5695] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 238.877563][ T5699] __vm_enough_memory: pid: 5699, comm: syz.2.1830, bytes: 35184372133888 not enough memory for the allocation [ 238.953846][ T46] usb 7-1: device descriptor read/64, error -71 [ 239.099561][ T314] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 239.199545][ T46] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 239.262386][ T314] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 239.279138][ T314] usb 4-1: config 0 has no interface number 0 [ 239.285381][ T1304] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 239.308327][ T314] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 239.319469][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.328177][ T314] usb 4-1: Product: syz [ 239.333062][ T314] usb 4-1: Manufacturer: syz [ 239.337702][ T314] usb 4-1: SerialNumber: syz [ 239.345169][ T314] usb 4-1: config 0 descriptor?? [ 239.350296][ T46] usb 7-1: device descriptor read/64, error -71 [ 239.439555][ T1304] usb 3-1: device descriptor read/64, error -71 [ 239.589580][ T46] usb 7-1: device descriptor read/64, error -71 [ 239.616375][ T5724] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 239.679609][ T1304] usb 3-1: device descriptor read/64, error -71 [ 239.706286][ T46] usb usb7-port1: attempt power cycle [ 239.939575][ T1304] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 240.059567][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 240.079596][ T1304] usb 3-1: device descriptor read/64, error -71 [ 240.088266][ T46] usb 7-1: device descriptor read/8, error -71 [ 240.177169][ T314] asix 4-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 225 [ 240.231950][ T46] usb 7-1: device descriptor read/8, error -71 [ 240.321433][ T1304] usb 3-1: device descriptor read/64, error -71 [ 240.378427][ T314] usb 4-1: USB disconnect, device number 88 [ 240.430085][ T1304] usb usb3-port1: attempt power cycle [ 240.469631][ T46] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 240.491816][ T46] usb 7-1: device descriptor read/8, error -71 [ 240.621952][ T46] usb 7-1: device descriptor read/8, error -71 [ 240.729716][ T46] usb usb7-port1: unable to enumerate USB device [ 240.769596][ T1304] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.792286][ T1304] usb 3-1: device descriptor read/8, error -71 [ 240.939389][ T1304] usb 3-1: device descriptor read/8, error -71 [ 241.189599][ T1304] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 241.212031][ T1304] usb 3-1: device descriptor read/8, error -71 [ 241.309861][ T311] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 241.353730][ T1304] usb 3-1: device descriptor read/8, error -71 [ 241.457215][ T5749] netlink: 'syz.6.1850': attribute type 3 has an invalid length. [ 241.467173][ T311] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 241.478563][ T311] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.479866][ T1304] usb usb3-port1: unable to enumerate USB device [ 241.498084][ T311] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 241.508703][ T311] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.517421][ T311] usb 4-1: Manufacturer: syz [ 241.531894][ T311] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 241.626890][ T5754] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 241.743364][ T311] usb 4-1: USB disconnect, device number 89 [ 241.785210][ T5758] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1854'. [ 241.829968][ T36] kauditd_printk_skb: 649 callbacks suppressed [ 241.829986][ T36] audit: type=1400 audit(2000000286.792:40494): avc: denied { read write } for pid=5759 comm="syz.6.1855" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.863366][ T36] audit: type=1400 audit(2000000286.822:40495): avc: denied { read write open } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.888581][ T36] audit: type=1400 audit(2000000286.822:40496): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.918255][ T36] audit: type=1400 audit(2000000286.822:40497): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.944194][ T36] audit: type=1400 audit(2000000286.822:40498): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.971619][ T36] audit: type=1400 audit(2000000286.822:40499): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.997340][ T36] audit: type=1400 audit(2000000286.932:40500): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.040039][ T36] audit: type=1400 audit(2000000287.002:40501): avc: denied { ioctl } for pid=5759 comm="syz.6.1855" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.085307][ T36] audit: type=1400 audit(2000000287.032:40502): avc: denied { read write } for pid=5508 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.119572][ T312] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 242.134117][ T36] audit: type=1400 audit(2000000287.032:40503): avc: denied { read write open } for pid=5508 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.279593][ T312] usb 7-1: Using ep0 maxpacket: 8 [ 242.292281][ T312] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.310365][ T312] usb 7-1: config 179 has no interface number 0 [ 242.317266][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.338520][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.350510][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.362329][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 242.374354][ T312] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.388219][ T312] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.406107][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.424403][ T5760] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 242.549637][ T314] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 242.585680][ T5775] syzkaller1: left promiscuous mode [ 242.591406][ T5775] syzkaller1: left allmulticast mode [ 242.655770][ T312] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input30 [ 242.728419][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 242.749906][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 242.780461][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.809577][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.831297][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.851115][ T31] usb 7-1: USB disconnect, device number 7 [ 242.851268][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.865478][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 242.870040][ T314] usb 3-1: config 0 descriptor?? [ 242.877791][ T31] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 242.897645][ T314] hub 3-1:0.0: bad descriptor, ignoring hub [ 242.909536][ T314] hub 3-1:0.0: probe with driver hub failed with error -5 [ 242.927674][ T314] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 243.510763][ T5794] netlink: 'syz.6.1869': attribute type 3 has an invalid length. [ 243.566307][ T5798] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1870'. [ 243.578376][ T5798] netlink: 'syz.7.1870': attribute type 4 has an invalid length. [ 243.811595][ T5808] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1875'. [ 243.884209][ T5811] syzkaller1: entered promiscuous mode [ 243.893812][ T5811] syzkaller1: entered allmulticast mode [ 243.938104][ T5812] FAULT_INJECTION: forcing a failure. [ 243.938104][ T5812] name fail_futex, interval 1, probability 0, space 0, times 1 [ 243.967320][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: syz.3.1876 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 243.967362][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.967378][ T5812] Call Trace: [ 243.967386][ T5812] [ 243.967397][ T5812] __dump_stack+0x21/0x30 [ 243.967439][ T5812] dump_stack_lvl+0x140/0x1c0 [ 243.967483][ T5812] ? __cfi_dump_stack_lvl+0x10/0x10 [ 243.967520][ T5812] dump_stack+0x19/0x20 [ 243.967553][ T5812] should_fail_ex+0x3c2/0x510 [ 243.967583][ T5812] should_fail+0xf/0x20 [ 243.967609][ T5812] get_futex_key+0x178/0x940 [ 243.967639][ T5812] ? __cfi_get_futex_key+0x10/0x10 [ 243.967671][ T5812] ? blk_mq_flush_plug_list+0xfb/0x1750 [ 243.967700][ T5812] futex_wake+0x150/0x950 [ 243.967722][ T5812] ? finish_task_switch+0x1d9/0x770 [ 243.967754][ T5812] ? __cfi_blk_mq_flush_plug_list+0x10/0x10 [ 243.967781][ T5812] ? __cfi_futex_wake+0x10/0x10 [ 243.967803][ T5812] ? rwsem_read_trylock+0x275/0x5a0 [ 243.967840][ T5812] ? __blk_flush_plug+0x425/0x4e0 [ 243.967870][ T5812] ? madvise_walk_vmas+0x4bd/0x700 [ 243.967894][ T5812] ? __cfi___blk_flush_plug+0x10/0x10 [ 243.967924][ T5812] do_futex+0x37d/0x510 [ 243.967955][ T5812] ? __kasan_check_write+0x18/0x20 [ 243.967981][ T5812] ? __cfi_do_futex+0x10/0x10 [ 243.968013][ T5812] ? do_madvise+0x601/0xbb0 [ 243.968035][ T5812] __se_sys_futex+0x13c/0x320 [ 243.968068][ T5812] ? __x64_sys_futex+0x110/0x110 [ 243.968103][ T5812] ? __kasan_check_write+0x18/0x20 [ 243.968128][ T5812] __x64_sys_futex+0xe9/0x110 [ 243.968161][ T5812] x64_sys_call+0x227f/0x2ee0 [ 243.968184][ T5812] do_syscall_64+0x57/0xf0 [ 243.968219][ T5812] ? clear_bhb_loop+0x50/0xa0 [ 243.968249][ T5812] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.968276][ T5812] RIP: 0033:0x7f1369b9e159 [ 243.968297][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.968319][ T5812] RSP: 002b:00007f13685f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.968346][ T5812] RAX: ffffffffffffffda RBX: 00007f1369e25fa8 RCX: 00007f1369b9e159 [ 243.968365][ T5812] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1369e25fac [ 243.968382][ T5812] RBP: 00007f1369e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 243.968399][ T5812] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 243.968416][ T5812] R13: 00007f1369e26038 R14: 00007ffca25887f0 R15: 00007ffca25888d8 [ 243.968438][ T5812] [ 244.283183][ T5822] sd 0:0:1:0: PR command failed: 1026 [ 244.294160][ T5822] sd 0:0:1:0: Sense Key : 0x5 [current] [ 244.309793][ T5822] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 244.457240][ T5828] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 244.485072][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'. [ 244.551616][ T5832] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1884'. [ 244.567490][ T5832] netlink: 'syz.3.1884': attribute type 4 has an invalid length. [ 244.919556][ T311] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 245.027423][ T5845] syzkaller1: entered promiscuous mode [ 245.033282][ T5845] syzkaller1: entered allmulticast mode [ 245.074667][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.085629][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.095448][ T311] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 245.104785][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.114913][ T311] usb 4-1: config 0 descriptor?? [ 245.305970][ T5855] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1894'. [ 245.322457][ T1304] usb 3-1: USB disconnect, device number 21 [ 245.378123][ T5858] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1896'. [ 245.408084][ T5858] netlink: 'syz.6.1896': attribute type 4 has an invalid length. [ 245.441440][ T5861] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1897'. [ 245.469550][ T5861] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1897'. [ 245.478581][ T5861] netlink: 'syz.2.1897': attribute type 6 has an invalid length. [ 245.509537][ T5861] netlink: 'syz.2.1897': attribute type 5 has an invalid length. [ 245.517328][ T5861] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1897'. [ 245.572531][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 245.578558][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 245.600140][ T311] usb 4-1: USB disconnect, device number 90 [ 245.670279][ T5868] syzkaller1: entered promiscuous mode [ 245.696499][ T5868] syzkaller1: entered allmulticast mode [ 245.813176][ T5873] syzkaller1: entered promiscuous mode [ 245.818716][ T5873] syzkaller1: entered allmulticast mode [ 245.909579][ T1304] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 246.079544][ T1304] usb 7-1: device descriptor read/64, error -71 [ 246.161518][ T5890] .N: renamed from veth0_to_bond (while UP) [ 246.250273][ T5889] netlink: 'syz.3.1908': attribute type 3 has an invalid length. [ 246.323814][ T5896] netlink: 'syz.7.1909': attribute type 4 has an invalid length. [ 246.331651][ T1304] usb 7-1: device descriptor read/64, error -71 [ 246.342419][ T5893] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 246.527020][ T5902] binder: Unknown parameter '0x0000000000000000' [ 246.569549][ T1304] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 246.719584][ T1304] usb 7-1: device descriptor read/64, error -71 [ 246.799581][ T314] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 246.857047][ T36] kauditd_printk_skb: 659 callbacks suppressed [ 246.857068][ T36] audit: type=1400 audit(2000000291.812:41159): avc: denied { read } for pid=5905 comm="syz.2.1914" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.910274][ T36] audit: type=1400 audit(2000000291.852:41160): avc: denied { read open } for pid=5905 comm="syz.2.1914" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.942370][ T36] audit: type=1400 audit(2000000291.852:41161): avc: denied { ioctl } for pid=5905 comm="syz.2.1914" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.967931][ T36] audit: type=1400 audit(2000000291.852:41162): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.992951][ T1304] usb 7-1: device descriptor read/64, error -71 [ 246.994589][ T36] audit: type=1400 audit(2000000291.882:41163): avc: denied { ioctl } for pid=5870 comm="syz.6.1902" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.024196][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 247.030926][ T36] audit: type=1400 audit(2000000291.982:41164): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.056794][ T36] audit: type=1400 audit(2000000291.982:41165): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.062696][ T314] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 247.083314][ T36] audit: type=1400 audit(2000000291.982:41166): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.095792][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.119943][ T36] audit: type=1400 audit(2000000291.982:41167): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.124330][ T1304] usb usb7-port1: attempt power cycle [ 247.153402][ T36] audit: type=1400 audit(2000000291.992:41168): avc: denied { ioctl } for pid=5903 comm="syz.3.1913" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.179214][ T314] usb 4-1: Product: syz [ 247.179237][ T314] usb 4-1: Manufacturer: syz [ 247.188383][ T314] usb 4-1: SerialNumber: syz [ 247.331015][ T5910] FAULT_INJECTION: forcing a failure. [ 247.331015][ T5910] name failslab, interval 1, probability 0, space 10, times 0 [ 247.343894][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.2.1916 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 247.343918][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.343932][ T5910] Call Trace: [ 247.343938][ T5910] [ 247.343944][ T5910] __dump_stack+0x21/0x30 [ 247.343971][ T5910] dump_stack_lvl+0x140/0x1c0 [ 247.343994][ T5910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 247.344016][ T5910] ? number+0xc9d/0xf00 [ 247.344039][ T5910] dump_stack+0x19/0x20 [ 247.344060][ T5910] should_fail_ex+0x3c2/0x510 [ 247.344079][ T5910] should_failslab+0xac/0x100 [ 247.344099][ T5910] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 247.344118][ T5910] ? sidtab_sid2str_get+0x135/0x360 [ 247.344151][ T5910] kmemdup_noprof+0x31/0x80 [ 247.344165][ T5910] sidtab_sid2str_get+0x135/0x360 [ 247.344190][ T5910] security_sid_to_context_core+0x30d/0x5d0 [ 247.344213][ T5910] security_sid_to_context+0x2e/0x50 [ 247.344234][ T5910] avc_audit_post_callback+0x117/0x790 [ 247.344253][ T5910] ? audit_log_n_string+0x35d/0x5b0 [ 247.344268][ T5910] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 247.344289][ T5910] ? audit_log_untrustedstring+0xea/0x100 [ 247.344305][ T5910] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 247.344324][ T5910] common_lsm_audit+0x14b6/0x18b0 [ 247.344341][ T5910] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 247.344365][ T5910] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 247.344384][ T5910] ? avc_xperms_populate+0x2a8/0x620 [ 247.344403][ T5910] ? __cfi_common_lsm_audit+0x10/0x10 [ 247.344422][ T5910] ? avc_denied+0x113/0x180 [ 247.344441][ T5910] slow_avc_audit+0x19f/0x220 [ 247.344459][ T5910] ? __cfi_slow_avc_audit+0x10/0x10 [ 247.344477][ T5910] ? avc_has_perm_noaudit+0x360/0x360 [ 247.344496][ T5910] ? avc_has_perm_noaudit+0x21f/0x360 [ 247.344517][ T5910] avc_has_perm+0x1ec/0x240 [ 247.344540][ T5910] ? __cfi_avc_has_perm+0x10/0x10 [ 247.344562][ T5910] selinux_socket_sendmsg+0x281/0x380 [ 247.344583][ T5910] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 247.344604][ T5910] ? is_bpf_text_address+0x17b/0x1a0 [ 247.344627][ T5910] ? kernel_text_address+0xa9/0xe0 [ 247.344652][ T5910] ? unwind_get_return_address+0x51/0x90 [ 247.344672][ T5910] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 247.344693][ T5910] security_socket_sendmsg+0x5c/0x100 [ 247.344715][ T5910] ____sys_sendmsg+0x533/0xa00 [ 247.344737][ T5910] ? __import_iovec+0x5b9/0x7d0 [ 247.344760][ T5910] ? __sys_sendmsg_sock+0x50/0x50 [ 247.344782][ T5910] ? import_iovec+0x80/0xb0 [ 247.344804][ T5910] ___sys_sendmsg+0x2a6/0x370 [ 247.344826][ T5910] ? __sys_sendmsg+0x260/0x260 [ 247.344846][ T5910] ? proc_fail_nth_write+0x184/0x220 [ 247.344870][ T5910] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 247.344896][ T5910] ? __fget_files+0x2bc/0x330 [ 247.344917][ T5910] __x64_sys_sendmsg+0x1be/0x2a0 [ 247.344937][ T5910] ? fput+0x1a4/0x230 [ 247.344958][ T5910] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 247.344978][ T5910] ? ksys_write+0x1f3/0x260 [ 247.344996][ T5910] ? __kasan_check_read+0x15/0x20 [ 247.345014][ T5910] x64_sys_call+0x2a4c/0x2ee0 [ 247.345028][ T5910] do_syscall_64+0x57/0xf0 [ 247.345050][ T5910] ? clear_bhb_loop+0x50/0xa0 [ 247.345069][ T5910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.345086][ T5910] RIP: 0033:0x7fdf5179e159 [ 247.345100][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.345113][ T5910] RSP: 002b:00007fdf525f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.345130][ T5910] RAX: ffffffffffffffda RBX: 00007fdf51a25fa0 RCX: 00007fdf5179e159 [ 247.345149][ T5910] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 247.345160][ T5910] RBP: 00007fdf525f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.345191][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.345205][ T5910] R13: 00007fdf51a26038 R14: 00007fdf51a25fa0 R15: 00007ffd2f6bbb88 [ 247.345225][ T5910] [ 247.800770][ T1304] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 247.813671][ T314] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 247.820827][ T314] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 247.829244][ T314] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 247.838766][ T1304] usb 7-1: device descriptor read/8, error -71 [ 247.847979][ T314] usb 4-1: USB disconnect, device number 91 [ 247.912293][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.974441][ T1304] usb 7-1: device descriptor read/8, error -71 [ 248.219610][ T1304] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 248.229603][ T311] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 248.241915][ T1304] usb 7-1: device descriptor read/8, error -71 [ 248.399246][ T1304] usb 7-1: device descriptor read/8, error -71 [ 248.509640][ T1304] usb usb7-port1: unable to enumerate USB device [ 248.523102][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 248.531328][ T311] usb 3-1: can't read configurations, error -71 [ 248.662393][ T5920] __nla_validate_parse: 2 callbacks suppressed [ 248.662417][ T5920] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1920'. [ 248.682993][ T5920] netlink: 'syz.3.1920': attribute type 4 has an invalid length. [ 248.827320][ T5923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=313 sclass=netlink_route_socket pid=5923 comm=syz.6.1921 [ 248.849600][ T5923] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1921'. [ 248.874530][ T5930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=313 sclass=netlink_route_socket pid=5930 comm=syz.6.1921 [ 248.887365][ T5930] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1921'. [ 249.029550][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 249.138181][ T5936] syzkaller1: entered promiscuous mode [ 249.143766][ T5936] syzkaller1: entered allmulticast mode [ 249.189542][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 249.223767][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 249.269562][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.277612][ T10] usb 4-1: Product: syz [ 249.313102][ T10] usb 4-1: Manufacturer: syz [ 249.317772][ T10] usb 4-1: SerialNumber: syz [ 249.526735][ T5950] syzkaller1: entered promiscuous mode [ 249.562888][ T5950] syzkaller1: entered allmulticast mode [ 249.579874][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.611022][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 249.618910][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 249.651448][ T10] usb 4-1: USB disconnect, device number 92 [ 249.680652][ T5960] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 249.845476][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.003805][ T5971] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1936'. [ 250.168079][ T5976] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 250.179008][ T5983] syzkaller1: entered promiscuous mode [ 250.184652][ T5983] syzkaller1: entered allmulticast mode [ 250.199486][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1939'. [ 250.215080][ T5984] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.436633][ T5990] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1945'. [ 250.489541][ T314] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 250.669840][ T314] usb 4-1: device descriptor read/64, error -71 [ 250.807166][ T5996] netlink: 'syz.6.1947': attribute type 3 has an invalid length. [ 250.959738][ T314] usb 4-1: device descriptor read/64, error -71 [ 251.232515][ T314] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 251.449631][ T314] usb 4-1: device descriptor read/64, error -71 [ 251.543310][ T6010] syzkaller1: entered promiscuous mode [ 251.552548][ T6010] syzkaller1: entered allmulticast mode [ 251.719552][ T314] usb 4-1: device descriptor read/64, error -71 [ 251.850033][ T314] usb usb4-port1: attempt power cycle [ 251.859966][ T36] kauditd_printk_skb: 859 callbacks suppressed [ 251.859983][ T36] audit: type=1400 audit(2000000296.822:42028): avc: denied { ioctl } for pid=5977 comm="syz.3.1941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.892643][ T36] audit: type=1400 audit(2000000296.822:42029): avc: denied { ioctl } for pid=5977 comm="syz.3.1941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.918601][ T36] audit: type=1400 audit(2000000296.862:42030): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.944299][ T36] audit: type=1400 audit(2000000296.862:42031): avc: denied { read write open } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.989122][ T36] audit: type=1400 audit(2000000296.862:42032): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.034353][ T36] audit: type=1400 audit(2000000296.912:42033): avc: denied { ioctl } for pid=6018 comm="syz.2.1956" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.060350][ T36] audit: type=1400 audit(2000000296.932:42034): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.084656][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 252.111148][ T36] audit: type=1400 audit(2000000296.932:42035): avc: denied { read write open } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.137322][ T6025] netlink: 'syz.7.1958': attribute type 3 has an invalid length. [ 252.152169][ T36] audit: type=1400 audit(2000000296.932:42036): avc: denied { ioctl } for pid=5616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.187362][ T36] audit: type=1400 audit(2000000296.942:42037): avc: denied { ioctl } for pid=5977 comm="syz.3.1941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.219570][ T314] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 252.231502][ T6024] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 252.253508][ T314] usb 4-1: device descriptor read/8, error -71 [ 252.262803][ T10] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.275527][ T6024] kvm: pic: single mode not supported [ 252.275638][ T6024] kvm: pic: non byte read [ 252.286305][ T10] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.299400][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.307226][ T6024] kvm: pic: level sensitive irq not supported [ 252.307291][ T6024] kvm: pic: non byte read [ 252.319863][ T6024] kvm: pic: level sensitive irq not supported [ 252.319930][ T6024] kvm: pic: non byte read [ 252.326108][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 252.339844][ T6024] kvm: pic: level sensitive irq not supported [ 252.339932][ T6024] kvm: pic: non byte read [ 252.343642][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.349617][ T6024] kvm: pic: level sensitive irq not supported [ 252.363946][ T10] usb 3-1: config 0 descriptor?? [ 252.377501][ T6024] kvm: pic: non byte read [ 252.392312][ T6024] kvm: pic: level sensitive irq not supported [ 252.393210][ T6024] kvm: pic: non byte read [ 252.407789][ T314] usb 4-1: device descriptor read/8, error -71 [ 252.439452][ T6024] kvm: pic: level sensitive irq not supported [ 252.439537][ T6024] kvm: pic: non byte read [ 252.463389][ T6024] kvm: pic: level sensitive irq not supported [ 252.463474][ T6024] kvm: pic: non byte read [ 252.474949][ T6024] kvm: pic: level sensitive irq not supported [ 252.475045][ T6024] kvm: pic: non byte read [ 252.486305][ T6024] kvm: pic: level sensitive irq not supported [ 252.486404][ T6024] kvm: pic: non byte read [ 252.497710][ T6024] kvm: pic: level sensitive irq not supported [ 252.659619][ T314] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 252.712328][ T6041] syzkaller1: entered promiscuous mode [ 252.712803][ T314] usb 4-1: device descriptor read/8, error -71 [ 252.718249][ T6041] syzkaller1: entered allmulticast mode [ 252.860406][ T6019] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 252.864972][ T314] usb 4-1: device descriptor read/8, error -71 [ 252.966895][ T6048] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1965'. [ 252.979442][ T6048] netlink: 'syz.6.1965': attribute type 4 has an invalid length. [ 252.980114][ T314] usb usb4-port1: unable to enumerate USB device [ 253.076546][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 253.082750][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 253.094610][ T10] usb 3-1: USB disconnect, device number 24 [ 253.261205][ T6052] netlink: 'syz.3.1967': attribute type 3 has an invalid length. [ 253.279561][ T311] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 253.313025][ T6055] rust_binder: 6054:6055 no such ref 1 [ 253.318566][ T6055] rust_binder: Read failure Err(EAGAIN) in pid:1150 [ 253.362629][ T6057] fuse: Bad value for 'group_id' [ 253.374289][ T6057] fuse: Bad value for 'group_id' [ 253.430179][ T311] usb 7-1: Using ep0 maxpacket: 8 [ 253.438127][ T311] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 253.446852][ T311] usb 7-1: config 0 has no interface number 1 [ 253.453035][ T311] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.464016][ T311] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 253.476085][ T311] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 253.488140][ T311] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 253.499054][ T311] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.512856][ T311] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 253.530142][ T311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 253.542107][ T311] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 253.554913][ T6062] syzkaller1: entered promiscuous mode [ 253.562099][ T311] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 253.570016][ T6062] syzkaller1: entered allmulticast mode [ 253.572773][ T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.585982][ T311] usb 7-1: Product: syz [ 253.604700][ T311] usb 7-1: Manufacturer: syz [ 253.619596][ T311] usb 7-1: SerialNumber: syz [ 253.626092][ T311] usb 7-1: config 0 descriptor?? [ 253.642843][ T6050] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 253.679732][ T311] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 253.690320][ T6064] syzkaller1: entered promiscuous mode [ 253.695837][ T6064] syzkaller1: entered allmulticast mode [ 254.016236][ T6078] rust_binder: Read failure Err(EAGAIN) in pid:1165 [ 254.051530][ T311] usb 7-1: USB disconnect, device number 12 [ 254.127313][ T6077] netlink: 'syz.2.1976': attribute type 3 has an invalid length. [ 254.215333][ T6085] syzkaller1: entered promiscuous mode [ 254.220956][ T6085] syzkaller1: entered allmulticast mode [ 254.365730][ T6090] syzkaller1: entered promiscuous mode [ 254.371320][ T6090] syzkaller1: entered allmulticast mode [ 254.485222][ T6094] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1984'. [ 254.496819][ T6094] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 254.570505][ T6096] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 254.580054][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 254.822469][ T6107] netlink: 'syz.2.1988': attribute type 3 has an invalid length. [ 254.898745][ T6114] syzkaller1: entered promiscuous mode [ 254.904485][ T6114] syzkaller1: entered allmulticast mode [ 255.072686][ T6120] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1994'. [ 255.084589][ T6120] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 255.289538][ T311] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 255.474029][ T311] usb 7-1: Using ep0 maxpacket: 32 [ 255.482972][ T311] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.499529][ T311] usb 7-1: config 0 has no interface number 0 [ 255.519552][ T311] usb 7-1: config 0 interface 184 has no altsetting 0 [ 255.559550][ T311] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.570481][ T6137] netlink: 'syz.2.1999': attribute type 3 has an invalid length. [ 255.579217][ T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.589429][ T6142] syzkaller1: entered promiscuous mode [ 255.604334][ T6142] syzkaller1: entered allmulticast mode [ 255.615142][ T311] usb 7-1: Product: syz [ 255.619366][ T311] usb 7-1: Manufacturer: syz [ 255.638891][ T311] usb 7-1: SerialNumber: syz [ 255.664923][ T311] usb 7-1: config 0 descriptor?? [ 255.683838][ T311] smsc75xx v1.0.0 [ 255.835936][ T6153] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2005'. [ 255.866006][ T6153] netlink: 'syz.2.2005': attribute type 4 has an invalid length. [ 256.362291][ T311] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 256.373413][ T311] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 256.383924][ T311] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 256.399275][ T311] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 256.439536][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 256.455166][ T6164] Invalid argument reading file caps for ./file0 [ 256.589591][ T9] usb 3-1: device descriptor read/64, error -71 [ 256.722407][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.766813][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.841272][ T9] usb 3-1: device descriptor read/64, error -71 [ 256.869671][ T36] kauditd_printk_skb: 1600 callbacks suppressed [ 256.869690][ T36] audit: type=1400 audit(2000000301.832:43638): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.909310][ T36] audit: type=1400 audit(2000000301.852:43639): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.929851][ T36] audit: type=1400 audit(2000000301.852:43640): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.956619][ T36] audit: type=1400 audit(2000000301.852:43641): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.983129][ T36] audit: type=1400 audit(2000000301.852:43642): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.003482][ T36] audit: type=1400 audit(2000000301.852:43643): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.023791][ T36] audit: type=1400 audit(2000000301.852:43644): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.036257][ T6170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.047046][ T36] audit: type=1400 audit(2000000301.852:43645): avc: denied { write } for pid=6117 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.069761][ T6170] audit: audit_lost=217 audit_rate_limit=0 audit_backlog_limit=64 [ 257.089582][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 257.234468][ T9] usb 3-1: device descriptor read/64, error -71 [ 257.489584][ T9] usb 3-1: device descriptor read/64, error -71 [ 257.606065][ T9] usb usb3-port1: attempt power cycle [ 257.969538][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 258.010497][ T6204] syzkaller1: entered promiscuous mode [ 258.015181][ T9] usb 3-1: device descriptor read/8, error -71 [ 258.016024][ T6204] syzkaller1: entered allmulticast mode [ 258.157519][ T9] usb 3-1: device descriptor read/8, error -71 [ 258.199649][ T1304] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 258.211786][ T6208] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 258.221044][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2027'. [ 258.311384][ T6211] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2028'. [ 258.330993][ T6211] netlink: 'syz.6.2028': attribute type 4 has an invalid length. [ 258.369789][ T1304] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 258.389713][ T1304] usb 4-1: config 0 has no interface number 0 [ 258.401436][ T1304] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 258.409675][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 258.421204][ T1304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.431199][ T1304] usb 4-1: Product: syz [ 258.435471][ T1304] usb 4-1: Manufacturer: syz [ 258.440171][ T1304] usb 4-1: SerialNumber: syz [ 258.448394][ T1304] usb 4-1: config 0 descriptor?? [ 258.472272][ T9] usb 3-1: device descriptor read/8, error -71 [ 258.612011][ T9] usb 3-1: device descriptor read/8, error -71 [ 258.719630][ T9] usb usb3-port1: unable to enumerate USB device [ 259.178620][ T6227] syzkaller1: entered promiscuous mode [ 259.184447][ T6227] syzkaller1: entered allmulticast mode [ 259.269166][ T1304] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 259.293745][ T1304] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 259.310941][ T1304] asix 4-1:0.251: probe with driver asix failed with error -71 [ 259.325732][ T1304] usb 4-1: USB disconnect, device number 97 [ 259.414023][ T6233] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 259.433082][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2037'. [ 259.583740][ T314] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 259.704344][ T6246] SELinux: policydb version -727500656 does not match my version range 15-33 [ 259.713395][ T6246] SELinux: failed to load policy [ 259.718812][ T6248] SELinux: policydb version -727500656 does not match my version range 15-33 [ 259.732903][ T6248] SELinux: failed to load policy [ 259.740691][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 259.752555][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.779536][ T314] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.807572][ T314] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.823646][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.839525][ T314] usb 3-1: Product: syz [ 259.849578][ T314] usb 3-1: Manufacturer: syz [ 259.855397][ T314] usb 3-1: SerialNumber: syz [ 259.866112][ T314] usb 3-1: config 0 descriptor?? [ 260.096729][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2047'. [ 260.169451][ T6268] syzkaller1: entered promiscuous mode [ 260.175103][ T6268] syzkaller1: entered allmulticast mode [ 260.300995][ T6272] fuse: Bad value for 'fd' [ 260.339548][ T311] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 260.348796][ T6275] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2051'. [ 260.363806][ T6275] netlink: 'syz.7.2051': attribute type 4 has an invalid length. [ 260.502677][ T311] usb 4-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 260.516342][ T311] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.527562][ T311] usb 4-1: config 1 interface 0 has no altsetting 0 [ 260.535105][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 260.545178][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.565725][ T311] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 260.680968][ T6282] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 260.692005][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'. [ 260.768858][ T311] usb 4-1: string descriptor 0 read error: -71 [ 260.783546][ T311] usb 4-1: USB disconnect, device number 98 [ 260.867107][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.880593][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.563349][ T6296] syzkaller1: entered promiscuous mode [ 261.569073][ T6296] syzkaller1: entered allmulticast mode [ 261.656512][ T6298] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2060'. [ 261.703116][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.711759][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.198750][ T36] kauditd_printk_skb: 859 callbacks suppressed [ 262.198789][ T36] audit: type=1400 audit(2000000307.152:44504): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.271602][ T36] audit: type=1400 audit(2000000307.152:44505): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.314562][ T36] audit: type=1400 audit(2000000307.152:44506): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.349729][ T314] usb 3-1: USB disconnect, device number 29 [ 262.402268][ T36] audit: type=1400 audit(2000000307.202:44507): avc: denied { create } for pid=6302 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.441770][ T36] audit: type=1400 audit(2000000307.202:44508): avc: denied { write } for pid=6302 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.467827][ T36] audit: type=1400 audit(2000000307.202:44509): avc: denied { nlmsg_write } for pid=6302 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.489106][ T36] audit: type=1400 audit(2000000307.212:44510): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.513368][ T36] audit: type=1400 audit(2000000307.212:44511): avc: denied { read write open } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.550570][ T36] audit: type=1400 audit(2000000307.212:44512): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.558078][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.576331][ T36] audit: type=1400 audit(2000000307.222:44513): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.609718][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.939619][ T314] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 262.995035][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2069'. [ 263.089759][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 263.112700][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.131455][ T314] usb 3-1: config 2 has an invalid interface number: 171 but max is 0 [ 263.139711][ T314] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 263.148723][ T314] usb 3-1: config 2 has no interface number 1 [ 263.155092][ T314] usb 3-1: too many endpoints for config 2 interface 0 altsetting 51: 64, using maximum allowed: 30 [ 263.166007][ T314] usb 3-1: config 2 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 263.179215][ T314] usb 3-1: config 2 interface 171 has no altsetting 0 [ 263.189304][ T314] usb 3-1: config 2 interface 0 has no altsetting 0 [ 263.207369][ T314] usb 3-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0 [ 263.236720][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.253426][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2073'. [ 263.259590][ T314] usb 3-1: Product: syz [ 263.266517][ T314] usb 3-1: Manufacturer: syz [ 263.291415][ T314] usb 3-1: SerialNumber: syz [ 263.324898][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.333820][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.524522][ T314] usb 3-1: bad CDC descriptors [ 263.540767][ T314] ftdi_sio 3-1:2.171: FTDI USB Serial Device converter detected [ 263.561179][ T314] ftdi_sio ttyUSB0: unknown device type: 0xd2c0 [ 263.591100][ T314] ftdi_sio 3-1:2.0: FTDI USB Serial Device converter detected [ 263.599019][ T314] ftdi_sio ttyUSB1: unknown device type: 0xd2c0 [ 263.614145][ T314] usb 3-1: USB disconnect, device number 30 [ 263.621386][ T314] ftdi_sio 3-1:2.171: device disconnected [ 263.627747][ T314] ftdi_sio 3-1:2.0: device disconnected [ 263.755639][ T6341] ./dev/sda1: Can't lookup blockdev [ 264.017543][ T6352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6352 comm=syz.6.2082 [ 264.337600][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.359785][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.418846][ T6369] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 264.486794][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 264.597789][ T6368] kvm: pic: non byte write [ 264.986125][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2094'. [ 264.995289][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 265.152455][ T9] usb 3-1: config 1 has an invalid interface number: 252 but max is 1 [ 265.169583][ T314] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 265.176128][ T9] usb 3-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 265.194882][ T9] usb 3-1: config 1 has no interface number 0 [ 265.201110][ T9] usb 3-1: config 1 interface 252 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.212716][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 265.222834][ T9] usb 3-1: config 1 interface 252 has no altsetting 0 [ 265.230409][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 265.240075][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.254902][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.263024][ T9] usb 3-1: Product: syz [ 265.267282][ T9] usb 3-1: Manufacturer: syz [ 265.271981][ T9] usb 3-1: SerialNumber: syz [ 265.280791][ T9] cdc_mbim 3-1:1.252: skipping garbage [ 265.286350][ T9] cdc_mbim 3-1:1.252: CDC Union missing and no IAD found [ 265.293506][ T9] cdc_mbim 3-1:1.252: bind() failure [ 265.322444][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.333828][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 265.348668][ T314] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 265.359267][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.368056][ T314] usb 4-1: Product: syz [ 265.373108][ T314] usb 4-1: Manufacturer: syz [ 265.377771][ T314] usb 4-1: SerialNumber: syz [ 265.389247][ T314] pl2303 4-1:1.0: pl2303 converter detected [ 265.402215][ T314] pl2303 4-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 265.483037][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.492406][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.502534][ T6379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 265.697134][ T9] usb 4-1: USB disconnect, device number 99 [ 266.589576][ T314] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 266.620403][ T5616] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 266.632120][ T5616] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 266.749533][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 266.765988][ T314] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.782071][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.802933][ T314] usb 4-1: config 0 has no interface number 0 [ 266.814827][ T314] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 266.826412][ T6408] syzkaller1: entered promiscuous mode [ 266.832014][ T6408] syzkaller1: entered allmulticast mode [ 266.837616][ T314] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.852312][ T314] usb 4-1: config 0 interface 184 has no altsetting 0 [ 266.866663][ T314] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.883131][ T3614] bridge_slave_1: left allmulticast mode [ 266.886097][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.888919][ T3614] bridge_slave_1: left promiscuous mode [ 266.907253][ T314] usb 4-1: Product: syz [ 266.919523][ T314] usb 4-1: Manufacturer: syz [ 266.922017][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.924159][ T314] usb 4-1: SerialNumber: syz [ 266.947714][ T314] usb 4-1: config 0 descriptor?? [ 266.958416][ T3614] bridge_slave_0: left allmulticast mode [ 266.964958][ T314] smsc75xx v1.0.0 [ 266.969559][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 266.981445][ T3614] bridge_slave_0: left promiscuous mode [ 266.989431][ T314] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 267.002685][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.180414][ T3614] veth1_macvtap: left promiscuous mode [ 267.190523][ T3614] veth0_vlan: left promiscuous mode [ 267.208950][ T36] kauditd_printk_skb: 528 callbacks suppressed [ 267.208968][ T36] audit: type=1400 audit(2000000312.162:45042): avc: denied { execmem } for pid=6414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 267.261896][ T36] audit: type=1400 audit(2000000312.222:45043): avc: denied { create } for pid=6415 comm="syz.6.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.291913][ T36] audit: type=1400 audit(2000000312.222:45044): avc: denied { setopt } for pid=6415 comm="syz.6.2109" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.332807][ T36] audit: type=1400 audit(2000000312.222:45045): avc: denied { write } for pid=6415 comm="syz.6.2109" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.383787][ T36] audit: type=1400 audit(2000000312.292:45046): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.440847][ T36] audit: type=1400 audit(2000000312.292:45047): avc: denied { read write open } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.474928][ T36] audit: type=1400 audit(2000000312.292:45048): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.501440][ T36] audit: type=1400 audit(2000000312.342:45049): avc: denied { create } for pid=6417 comm="syz.6.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.549527][ T36] audit: type=1400 audit(2000000312.342:45050): avc: denied { create } for pid=6417 comm="syz.6.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.599554][ T36] audit: type=1400 audit(2000000312.342:45051): avc: denied { write } for pid=6417 comm="syz.6.2110" path="socket:[56850]" dev="sockfs" ino=56850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.757152][ T314] usb 3-1: USB disconnect, device number 31 [ 267.887371][ T6431] rust_binder: Read failure Err(EAGAIN) in pid:195 [ 268.025737][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.053975][ T6436] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 268.066212][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 268.068775][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.136443][ T6442] SELinux: policydb version -860095830 does not match my version range 15-33 [ 268.163437][ T6442] SELinux: failed to load policy [ 269.099582][ T314] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 269.257069][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.270600][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.280475][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.293464][ T314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.302783][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.314504][ T314] usb 3-1: config 0 descriptor?? [ 269.361182][ T1304] usb 4-1: USB disconnect, device number 100 [ 269.747973][ T314] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 269.769679][ T314] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 270.240251][ T6470] Line length is too long: Should be less than 4094 [ 270.249773][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.280812][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.519584][ T314] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 270.638777][ T1304] usb 3-1: USB disconnect, device number 32 [ 270.689524][ T314] usb 4-1: Using ep0 maxpacket: 8 [ 270.699169][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.710882][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 270.739545][ T314] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 270.748635][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.770322][ T314] usb 4-1: config 0 descriptor?? [ 270.778368][ T314] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 270.786446][ T314] usbhid 4-1:0.0: can't add hid device: -22 [ 270.792655][ T314] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 270.979905][ T9] usb 4-1: USB disconnect, device number 101 [ 271.082381][ T6475] rust_binder: Read failure Err(EAGAIN) in pid:261 [ 271.163649][ T6477] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 271.204944][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 271.265073][ T6483] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2128'. [ 272.193070][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2129'. [ 272.202111][ T6489] netlink: 'syz.6.2129': attribute type 1 has an invalid length. [ 272.212092][ T36] kauditd_printk_skb: 297 callbacks suppressed [ 272.212109][ T36] audit: type=1400 audit(2000000317.172:45349): avc: denied { create } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.284062][ T36] audit: type=1400 audit(2000000317.202:45350): avc: denied { create } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.326425][ T36] audit: type=1400 audit(2000000317.202:45351): avc: denied { write } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.369401][ T36] audit: type=1400 audit(2000000317.202:45352): avc: denied { read } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.418188][ T36] audit: type=1400 audit(2000000317.202:45353): avc: denied { read } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.461207][ T36] audit: type=1400 audit(2000000317.202:45354): avc: denied { write } for pid=6486 comm="syz.6.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.499535][ T1304] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 272.527859][ T36] audit: type=1400 audit(2000000317.202:45355): avc: denied { read write } for pid=6487 comm="syz.2.2130" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.573840][ T36] audit: type=1400 audit(2000000317.202:45356): avc: denied { read write open } for pid=6487 comm="syz.2.2130" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.600926][ T36] audit: type=1400 audit(2000000317.202:45357): avc: denied { ioctl } for pid=6487 comm="syz.2.2130" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.651881][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.660462][ T36] audit: type=1400 audit(2000000317.202:45358): avc: denied { ioctl } for pid=6487 comm="syz.2.2130" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.686629][ T1304] usb 3-1: Using ep0 maxpacket: 32 [ 272.692009][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.705394][ T1304] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 272.719519][ T1304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.740235][ T1304] usb 3-1: config 0 has no interface number 0 [ 272.746402][ T1304] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.759470][ T1304] usb 3-1: config 0 interface 184 has no altsetting 0 [ 272.769601][ T1304] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 272.778696][ T1304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.786790][ T1304] usb 3-1: Product: syz [ 272.790987][ T1304] usb 3-1: Manufacturer: syz [ 272.795574][ T1304] usb 3-1: SerialNumber: syz [ 272.802595][ T1304] usb 3-1: config 0 descriptor?? [ 272.813273][ T1304] smsc75xx v1.0.0 [ 272.817022][ T1304] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 272.827218][ T1304] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 272.899599][ T312] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 273.049597][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 273.056951][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.063657][ T312] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 273.072784][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.082512][ T312] usb 4-1: config 0 descriptor?? [ 273.375166][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.391229][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.411545][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 273.420920][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 273.429572][ T312] usb 4-1: USB disconnect, device number 102 [ 273.555444][ T6507] veth1_to_bond: entered promiscuous mode [ 273.562235][ T6507] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2135'. [ 273.575754][ T6507] veth1_to_bond (unregistering): left promiscuous mode [ 274.833803][ T6517] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 274.852852][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2138'. [ 274.959580][ T312] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 275.122031][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.132229][ T312] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.145188][ T312] usb 4-1: config 1 interface 0 has no altsetting 0 [ 275.154821][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.163920][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.171971][ T312] usb 4-1: Product: syz [ 275.176168][ T312] usb 4-1: Manufacturer: syz [ 275.180802][ T312] usb 4-1: SerialNumber: syz [ 275.200768][ T9] usb 3-1: USB disconnect, device number 33 [ 275.393414][ T312] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 275.406608][ T312] usb 4-1: USB disconnect, device number 103 [ 276.536580][ T6539] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2144'. [ 276.561915][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.570641][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.304203][ T36] kauditd_printk_skb: 240 callbacks suppressed [ 277.304241][ T36] audit: type=1400 audit(2000000322.262:45599): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 277.330617][ T36] audit: type=1400 audit(2000000322.282:45600): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.354758][ T36] audit: type=1400 audit(2000000322.282:45601): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.379783][ T36] audit: type=1400 audit(2000000322.282:45602): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.595198][ T36] audit: type=1400 audit(2000000322.542:45603): avc: denied { execmem } for pid=6541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 277.640530][ T36] audit: type=1400 audit(2000000322.582:45604): avc: denied { read } for pid=6542 comm="syz.3.2146" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.689410][ T36] audit: type=1400 audit(2000000322.582:45605): avc: denied { read open } for pid=6542 comm="syz.3.2146" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.764265][ T36] audit: type=1400 audit(2000000322.582:45606): avc: denied { ioctl } for pid=6542 comm="syz.3.2146" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.824915][ T36] audit: type=1400 audit(2000000322.592:45607): avc: denied { read write } for pid=5508 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.887207][ T36] audit: type=1400 audit(2000000322.592:45608): avc: denied { read write open } for pid=5508 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.049530][ T312] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 278.090394][ T6552] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 278.099729][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 278.209552][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 278.216828][ T312] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.225535][ T312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.235692][ T312] usb 4-1: config 0 has no interface number 0 [ 278.241813][ T312] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.254797][ T312] usb 4-1: config 0 interface 184 has no altsetting 0 [ 278.264574][ T312] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.273636][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.281677][ T312] usb 4-1: Product: syz [ 278.285864][ T312] usb 4-1: Manufacturer: syz [ 278.290516][ T312] usb 4-1: SerialNumber: syz [ 278.296738][ T312] usb 4-1: config 0 descriptor?? [ 278.305634][ T312] smsc75xx v1.0.0 [ 278.309310][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 278.319535][ T312] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 279.290818][ T6558] syzkaller1: entered promiscuous mode [ 279.296355][ T6558] syzkaller1: entered allmulticast mode [ 280.804956][ T314] usb 4-1: USB disconnect, device number 104 [ 280.882662][ T6568] netlink: 'syz.2.2154': attribute type 25 has an invalid length. [ 281.116922][ T6574] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 281.157302][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2157'. [ 281.158375][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 281.194167][ T6580] .N: renamed from veth0_to_bond (while UP) [ 282.716054][ T36] kauditd_printk_skb: 147 callbacks suppressed [ 282.716073][ T36] audit: type=1400 audit(2000000327.672:45756): avc: denied { execmem } for pid=6585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 282.748211][ T6590] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 282.767511][ T6589] syzkaller1: entered promiscuous mode [ 282.769596][ T36] audit: type=1400 audit(2000000327.702:45757): avc: denied { mac_admin } for pid=6587 comm="syz.3.2162" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.774660][ T6589] syzkaller1: entered allmulticast mode [ 282.821819][ T36] audit: type=1400 audit(2000000327.762:45758): avc: denied { relabelto } for pid=6587 comm="syz.3.2162" name="483" dev="tmpfs" ino=2592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 282.889743][ T36] audit: type=1400 audit(2000000327.762:45759): avc: denied { associate } for pid=6587 comm="syz.3.2162" name="483" dev="tmpfs" ino=2592 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 282.953623][ T6595] overlay: Unknown parameter 'smackfsfloor' [ 282.969650][ T36] audit: type=1400 audit(2000000327.762:45760): avc: denied { node_bind } for pid=6588 comm="syz.2.2161" saddr=2001::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 283.019571][ T36] audit: type=1400 audit(2000000327.772:45761): avc: denied { write } for pid=296 comm="syz-executor" name="483" dev="tmpfs" ino=2592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 283.088282][ T36] audit: type=1400 audit(2000000327.772:45762): avc: denied { remove_name } for pid=296 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 283.117038][ T36] audit: type=1400 audit(2000000327.782:45763): avc: denied { write } for pid=296 comm="syz-executor" name="483" dev="tmpfs" ino=2592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 283.155091][ T36] audit: type=1400 audit(2000000327.782:45764): avc: denied { remove_name } for pid=296 comm="syz-executor" name="cgroup.net" dev="tmpfs" ino=2595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 283.201185][ T36] audit: type=1400 audit(2000000327.782:45765): avc: denied { write } for pid=296 comm="syz-executor" name="483" dev="tmpfs" ino=2592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 283.230056][ T6601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.238573][ T6601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.239641][ T314] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 283.419548][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 283.427184][ T314] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.435428][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.445556][ T314] usb 4-1: config 0 has no interface number 0 [ 283.451787][ T314] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.464791][ T314] usb 4-1: config 0 interface 184 has no altsetting 0 [ 283.474917][ T314] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.484054][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.492099][ T314] usb 4-1: Product: syz [ 283.496290][ T314] usb 4-1: Manufacturer: syz [ 283.501009][ T314] usb 4-1: SerialNumber: syz [ 283.507317][ T314] usb 4-1: config 0 descriptor?? [ 283.522045][ T314] smsc75xx v1.0.0 [ 283.525715][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 283.535866][ T314] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 284.891786][ T6610] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 284.912067][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2170'. [ 285.085193][ T6618] __vm_enough_memory: pid: 6618, comm: syz.2.2171, bytes: 11727135158272 not enough memory for the allocation [ 285.098185][ T6618] __vm_enough_memory: pid: 6618, comm: syz.2.2171, bytes: 11727135158272 not enough memory for the allocation [ 286.005245][ T314] usb 4-1: USB disconnect, device number 105 [ 286.918102][ T6630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2175'. [ 288.886764][ T36] kauditd_printk_skb: 166 callbacks suppressed [ 288.886784][ T36] audit: type=1400 audit(2000000333.842:45932): avc: denied { execmem } for pid=6637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 288.920616][ T36] audit: type=1400 audit(2000000333.882:45933): avc: denied { remount } for pid=6639 comm="syz.6.2179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 288.941553][ T36] audit: type=1400 audit(2000000333.882:45934): avc: denied { create } for pid=6639 comm="syz.6.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 288.962699][ T36] audit: type=1400 audit(2000000333.882:45935): avc: denied { sys_admin } for pid=6639 comm="syz.6.2179" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 288.984589][ T36] audit: type=1400 audit(2000000333.912:45936): avc: denied { create } for pid=6638 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.009616][ T36] audit: type=1400 audit(2000000333.912:45937): avc: denied { sys_admin } for pid=6639 comm="syz.6.2179" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 289.040009][ T36] audit: type=1400 audit(2000000333.932:45938): avc: denied { read write } for pid=6638 comm="syz.2.2180" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.074602][ T36] audit: type=1400 audit(2000000333.932:45939): avc: denied { read write open } for pid=6638 comm="syz.2.2180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.082869][ T6644] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 289.119683][ T36] audit: type=1400 audit(2000000333.932:45940): avc: denied { ioctl } for pid=6638 comm="syz.2.2180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.150404][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 289.155063][ T36] audit: type=1400 audit(2000000333.952:45941): avc: denied { mounton } for pid=6638 comm="syz.2.2180" path="/93/tracing" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.450141][ T6651] kvm: apic: phys broadcast and lowest prio [ 291.291917][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.317860][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.335906][ T6660] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2186'. [ 291.415793][ T6663] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2187'. [ 291.437045][ T6663] netlink: 'syz.2.2187': attribute type 4 has an invalid length. [ 291.573698][ T6669] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 291.591236][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 293.821313][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2191'. [ 293.889945][ T36] kauditd_printk_skb: 173 callbacks suppressed [ 293.889965][ T36] audit: type=1400 audit(2000000338.852:46115): avc: denied { write } for pid=6673 comm="syz.6.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=2105 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 293.938126][ T36] audit: type=1400 audit(2000000338.862:46116): avc: denied { read write } for pid=5508 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.976616][ T1167] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 294.009589][ T36] audit: type=1400 audit(2000000338.862:46117): avc: denied { read write open } for pid=5508 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.021192][ T6683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.099692][ T36] audit: type=1400 audit(2000000338.862:46118): avc: denied { ioctl } for pid=5508 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.125411][ T6683] audit: audit_lost=218 audit_rate_limit=0 audit_backlog_limit=64 [ 294.154031][ T312] usb 7-1: USB disconnect, device number 13 [ 294.172053][ T6683] audit: backlog limit exceeded [ 294.177869][ T6683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.180488][ T1167] usb 4-1: device descriptor read/all, error -71 [ 294.192072][ T36] audit: type=1400 audit(2000000338.872:46119): avc: denied { write } for pid=6673 comm="syz.6.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.218724][ T6683] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64 [ 294.291862][ T3614] bridge_slave_1: left allmulticast mode [ 294.297627][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.309404][ T3614] bridge_slave_0: left allmulticast mode [ 294.329758][ T3614] bridge_slave_0: left promiscuous mode [ 294.335421][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.452675][ T3614] veth1_macvtap: left promiscuous mode [ 294.458329][ T3614] veth0_vlan: left promiscuous mode [ 294.781550][ T3614] bridge_slave_1: left allmulticast mode [ 294.787226][ T3614] bridge_slave_1: left promiscuous mode [ 294.792891][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.800532][ T3614] bridge_slave_0: left allmulticast mode [ 294.806175][ T3614] bridge_slave_0: left promiscuous mode [ 294.811931][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.819762][ T3614] bridge_slave_1: left allmulticast mode [ 294.825538][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.833194][ T3614] bridge_slave_0: left allmulticast mode [ 294.838873][ T3614] bridge_slave_0: left promiscuous mode [ 294.844561][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.023341][ T3614] veth1_macvtap: left promiscuous mode [ 295.028886][ T3614] veth0_vlan: left promiscuous mode [ 295.034719][ T3614] veth1_macvtap: left promiscuous mode [ 295.040310][ T3614] veth0_vlan: left promiscuous mode