last executing test programs: 5.127597964s ago: executing program 0 (id=483): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef0ec47200000000000109020203000300092100000001221800090581030004ee0000000000d86201c851e46a94"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x10}, 0x10) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@local=@item_4={0x3, 0x2, 0x2, "f100"}, @global=@item_4={0x3, 0x1, 0x2, "d05e0a86"}, @main=@item_4={0x3, 0x0, 0xc, "5267468d"}, @global=@item_4={0x3, 0x1, 0x6, "1d8c7927"}, @global=@item_4={0x3, 0x1, 0xa, "df6e0600"}, @local=@item_4={0x3, 0x2, 0x5, "3fad18f1"}]}}, 0x0}, 0x0) 3.276980171s ago: executing program 1 (id=506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00808000000006", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000100004400050000000000000000000000000000000001000004d2320000"], 0xfc}}, 0x0) 3.270898552s ago: executing program 1 (id=507): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.201205057s ago: executing program 1 (id=508): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.181162102s ago: executing program 1 (id=509): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x31c0000) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='.\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) (async) r2 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0xe, 0xe4d, 0x80, 0x1fc, 0x74, 0x5, 0xfffffffe, 0x46, 0x1, 0x7f, 0x6}}, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x9, 0x1005, 0x4, 0x4, 0x8, 0xfffffdfffffffffd], 0x40000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) r6 = syz_usb_connect(0x1, 0xfffffffffffffebd, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) (async) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) (async) r8 = socket$tipc(0x1e, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000001d80)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f00000001c0)="9c6355570df500d167ac10b52e508a33b420ca2127eb48267477cd5700f228a2bf0fe6faebf84611091d71676d22ba80aa07db11637c3b441bc497c529756c48adac1a0d32dcc48e8fc998f7e7e57a2ef9931a6edceb9bd2b01a31a1b70ad0458386c99b93ad8b2d903504fc5958224be72220a0ba1e9004de6cd1a284bcf25b4db52f44d048a5fa8d04a2aefe0fb80046ae28caff4d0577a839d648eb6549c9bec51689107dbd42490780a84c80de7960a4e2dc812e2cfb4537e0ab38c88b", 0xbf}, {&(0x7f00000002c0)="90ab1e4a614a5bd86a7ec93716d75c5c337f0fd1f2f77fb5d6eeedf634d65359f596cf22d533680a32b7ea59a59d6b7505cc760bcdcd984ac9320cba234eb175f4ec9efa84acaac55e300929c74dab8525e2be3f5f48744661ae85864e1f39b7a3e529e5737d8492e0bcd32d4b7b9ebe376ab9379b3c5a0a80c896515530512528d59504c8d8992d8176e199dcd27283a135049272a28ef6abe65927d1e27b42ebaae87a80012a93b8d8dd9f6e48b8cc666d648061e80d664173f2b27d0ef8710255ca7ba5e21008df905e3b0fa06f21c808cd60418acb657734b4bf1a37a7745c3505bc3db6516437d589ad316238685b57814b", 0xf4}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="9ba42960fb70c772adb40298dcf93bc8e07030068632baa3a3b6b43385d545923a2a7fc689e48f2559f5af156df4c0dbe28cfd6aac9cd5900a2ab8a30e1407aa6917613e2d7f0e7990e94403735266e8029f855ae3ee4e55567daba2d948f1c6051c56963b", 0x65}, {&(0x7f00000004c0)="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", 0x100}, {&(0x7f00000005c0)="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", 0x109}, {&(0x7f0000001b80)="9ab6d5337e58fb4f5843df3b6977101c4931363dfae7e5cbf394205e270d5d334bf3f2d2b01cc7117cde4a04a964ebecfa6ea0f6000000008e22ccb78f21151a3b0543b9a69fefd60aa724f13ecb44df8b0c9a7b2ca0bc02b4566a14ac61bcf2acce3a487b5146d3441a45c7834156b3fa0256d834df622abf1e23df83e35c99eb988c295037d253c8477e44769e362de3e9abe1d0e0f6429685ac3cd326eefce830767efb9711d4f26d2a14f0ef67e472cb183a53d1cd1f0f6dc085ed0eed33cde0a9d09cd97d9e167eb0528954001fbd973353a3", 0xd5}, {&(0x7f0000001c80)="32f4b4c3077980cbec67d64a005ebbc0c7715d21655d93bf128a3a97232e66a83accc0450ef38ca3b425427157bbfdd19f277c982570af4ebe510e63010124c8de4db3ef7348018486d354fb64f5830a6a68be02d01184b8118788a0892ada0f5678c47ba7c4a95b796b65647a1bf66611b23b494a", 0x75}], 0x8}, 0x44000) 3.015206998s ago: executing program 3 (id=518): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff0700", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.96135144s ago: executing program 3 (id=519): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/40, 0x28) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000440), &(0x7f00000000c0)=0xc) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000240)='./sys/../file0\x00', &(0x7f0000000280)='afs\x00', 0x204481, &(0x7f0000000400)='/dev/kvm\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(&(0x7f0000000140)='./sys/kernel/tracing\x00', 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.96074434s ago: executing program 3 (id=520): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x18, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x26}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x4d48, 0x800}, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) (async) write(r4, &(0x7f0000000500)="2600000022004701050000070000000010000020002b1f000a4a51f1ee839cd53400b017ca5bfaeed3993e880c115f75e155bbac199e8e3a5a19a087011988599ae1117618f5f6a4039f4351725ccc0f06b068f325b9b2a0607b9f5ac9a42cdbc1858b34d181d3b19d09c1f574628e7261d5bea21cd9a3321e08df2a2068db8d42d0dad303cccd40124a74a7955470cd7fede3c8b109aa144dbad200289f57786944fd428e5baef0f8c4dd02dc7880b6d64fb1e2", 0xb4) (async) connect$netlink(r4, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) landlock_restrict_self(r3, 0x4) (async) listen(r5, 0x0) (async) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=unix']) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000240)={r5, 0x2, 0x100000001, 0x1}) splice(r6, &(0x7f0000000380)=0xfffffffffffffffa, r4, &(0x7f00000003c0)=0xffffffffffff369c, 0xfffffffffffffffc, 0xb) (async) accept4(r4, &(0x7f0000000280)=@ax25={{0x3, @rose}, [@default, @netrom, @null, @null, @rose, @netrom, @default]}, &(0x7f0000000400)=0x80, 0x40800) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.853503084s ago: executing program 3 (id=521): mkdir(&(0x7f00000020c0)='./file0\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x5220, 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="7f000001e0000002000000000800001064010100ac1e01010a0101027f0000017f000001e00000020a010101e0000002c7a6026bc180e53756e761134a2eaa1f57be09000a01abeaf02bb94f0000000000"], 0x30) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x32004, &(0x7f0000000300)) chdir(&(0x7f00000001c0)='./bus\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200110e0000000000000000cb00000097"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) timer_create(0x1, 0x0, &(0x7f0000000200)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="24000000111bab0000000000e99848dbdf25140000000d0000002cc2ecdb28f85230a900"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) timer_delete(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 2.728406581s ago: executing program 3 (id=524): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000140)) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002080)) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x24, 0x1c, 0x438, 0x70bd29, 0x25dfdbfc, {0x2b}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd28, 0xb}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x4004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1804010, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=advise,quota,smackfsroot=)@)^,dont_measure,subj_role=,fscontext=sysadm_u,fsuui\x00\x00\x00\x00\x00\x00\x00\x00e5-35ce-afe0-f7\x004-12d438V0,\x00']) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="b805000000b90f0000000f01c1c744240000800000c744240202000000c7442406000000000f011c24470f01df417a1dc4e195ef149b3e430f01c38fe978e303440f01c3c4810812fd672636440f5d6600", 0x51}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000040)=0x78ae, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2.695369848s ago: executing program 2 (id=525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a008080ffffff80", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000100004400050000000000000000000000000000000001000004d2320000"], 0xfc}}, 0x0) 2.633225812s ago: executing program 2 (id=526): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000080)) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.632976842s ago: executing program 3 (id=527): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.586113142s ago: executing program 32 (id=527): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.528193855s ago: executing program 2 (id=529): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) 2.124249304s ago: executing program 0 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (rerun: 64) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000004) pipe(0x0) fcntl$addseals(r1, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) (async, rerun: 32) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x100000000, 0x1000000}) (rerun: 32) 2.037294273s ago: executing program 2 (id=531): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.036728033s ago: executing program 2 (id=532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x64601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1], 0xe8}, 0x1, 0x0, 0x0, 0x2040851}, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x88, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x2, 0x7}, {@multicast1, 0x4e22, 0x1, 0x5, 0x7, 0xfffffffb}}, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x0, 0xc0a) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r7 = openat$cgroup_type(r3, &(0x7f00000002c0), 0x2, 0x0) poll(&(0x7f0000000300)=[{r7, 0x100}], 0x1, 0x7fffffff) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) 1.839746616s ago: executing program 0 (id=533): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2000000002004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200080}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000740)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES8=r4], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x8001af84, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x8001af84, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socket(0x11, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0xf, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000300)={0x6, 0x4000}, 0x0) sendmmsg$unix(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0xfffffe84}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r7, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) 1.653233977s ago: executing program 4 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000087000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) 1.653061728s ago: executing program 4 (id=537): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2602, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.200534087s ago: executing program 2 (id=538): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000"], 0x1c}}, 0x0) setreuid(0x0, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) socket$inet6(0xa, 0x800, 0x1) keyctl$unlink(0x9, r6, r6) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x0}, 0x0) 770.069102ms ago: executing program 4 (id=539): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x204481, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) umount2(0x0, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 2) 197.295017ms ago: executing program 4 (id=540): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 196.890977ms ago: executing program 4 (id=541): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000880) sendfile(r0, r0, &(0x7f0000001000), 0xffff) (async) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) (async) write(r3, &(0x7f0000000000)='3', 0x4e) memfd_create(0x0, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 168.230143ms ago: executing program 0 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r6, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)='))!.%#/!\x00') 83.913012ms ago: executing program 0 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="540100001000050000000000000000007f0000010000000000000000000000007f000001000000000000000000000000ce210000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000123432000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0700000000000001800000000000000000000000000000000000000200000000000000000000000600000000000000000000000000000000000000020002001400000000000000480002"], 0x154}}, 0x4044010) 1.28964ms ago: executing program 1 (id=544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000100004400050000000000000000000000000000000001000004d2320000"], 0xfc}}, 0x0) 651.56µs ago: executing program 1 (id=545): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open$dir(&(0x7f0000000480)='./file1\x00', 0x4000, 0xb2) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) move_mount(r2, &(0x7f0000000500)='./file0\x00', r3, &(0x7f0000000540)='./file0\x00', 0x1c1) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r4, &(0x7f0000000000)="e2", 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000002030108000000000000000007000004080001000600000f72f76677f8896187630bf141d91607c79f26e28f9be5a98a086bafc3e10a4ce3a36b775cbeeb62e22849d5610fdbeec96f372a01d58950b604db5483"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c040) setxattr$incfs_size(&(0x7f0000000300)='./bus\x00', &(0x7f0000000380), &(0x7f00000003c0)=0x9, 0x8, 0x1) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000002"], 0x2c}], 0x1}, 0x0) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x71) rmdir(&(0x7f0000000200)='./file1\x00') r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0xb7, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7ffd, 0x0, 0x0, 0x7f, 0x11, 0x4, 0x44, 0x28}) open(&(0x7f0000000240)='./bus\x00', 0x292000, 0xd0) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 120.81µs ago: executing program 4 (id=546): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) (async) write(r0, &(0x7f0000000000)="01", 0x1) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="201306"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x5, 0xce, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x55, 0x0, 0x68, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x2e}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x4, 0xa, 0x1, 0x1, 0x9}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0x1, 0x4, 0x6], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x101, 0x7, "9a28a3b0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0xc, 0xe, 0x5f, {0x7, 0x25, 0x1, 0xc, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0xd, "a64250", "32c549"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x7c, 'u', "2f48fd"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x400, 0x95, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0x8, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x91d0, 0x48, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x250, 0x1, 0x6, 0xea, 0x40, 0x1}, 0x9b, &(0x7f0000000980)={0x5, 0xf, 0x9b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xb8, 0xfb, 0x4}, @generic={0x36, 0x10, 0x2, "811940d5ef5deaedfac94f70e57051eaeda7b23cc9cd92e0d0399f819565a5d47fd173c4f8cbbd004aba13877a79990a7fc552"}, @generic={0x34, 0x10, 0x3, "f28fd0ec3840a1f237df28d111bd3e1596b61144fcc0f658767e3047307aa1cb9bb09373eecc30e34a1bdef7f2185107a0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x1, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4, 0xf000, 0x6ed, [0x0, 0x3e40, 0xff00]}]}, 0x1, [{0xcd, &(0x7f0000000a40)=@string={0xcd, 0x3, "8a92118e40cac9f80144ad240fe34111e3fe2b27d0891075d7b54702260ae5af7c26c7c42dbaf10cdf7a60cebe50f67b3e20d73aa24af15e7bdecaa934173e982399080024c23b861a92ebf0621fc0fb1e8f425b3e4469a86c86c8613cdb68db3592cff9c35f63f6359103e0f0f7294c8a81fe99a595b4a12ae8878b3bcdaa68eaf9c0bedb7d549e0b1fdbbccb6108a679b9e014c283e06fdf4e6f7c42be67276f0df10be4002daa6dcafada1c7609eda88798d43c3b93ae85042933721bead623163cd4071e398a879789"}}]}) (async) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\r\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0xc, 0xc9, {0xc9, 0x7, "b5afcb4679df3d98e3c45d5cedaf13d4d6ab4f41b18f81f97d50dcfd5593be4c2e3e4b2e2250cbef5231553b214ea287c1bf64782920cb42e82716b56abb61d2110d3015f7ccbb39c03127c1703732e455660849c25e201fea6a6bdf412770a8128e761322fc1bc34c3557c2364f9683b33b190c2ee516d7508cdc5e72262c593a58e6fbfb510698ec834e956bf190f79497d62b1ceae81d7f5f133186b500b0e2c9b30d0a92efe09e0e364e94c8f286db2f11216b55f7912d5aef6ae8599dd98461e651ccf918"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x40, 0x16, 0xe7, "1659c0fde9d85117f614a8c711298d6a8f1501bc54f73ee89a6b339ca077d4948869590b57546096474bd546b5fc720ac97461a2acd5ec210ebdb5116a9ba17d457b05d5228805f85bf8164f05286636caf33d163c1e315c9fdeea9eab0a53fe68eb84531685ddc3db119040731fa5cd593c16af8305f93dde95119023bf9714ad686a2bfb41fb4b4d7b81e436d02656bf0961c5cfb1c2a8600c2bea0355cf8db491b3edaa338fa7d7cd5f8ae496af282d556515b63f39febee2ab19dbd9addb27ba6f09d57018e5e69b7edb924b7436d31a315b2d57d867629f60c2a427ce98df326af51a57ef"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "a36c8b101220aa31053a291de4deb4b6499de6da4771a9197a70991196f900e735b6163ec5b51200d49686038cd243"}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 0 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) umount2(&(0x7f0000000140)='./sys/kernel/tracing\x00', 0x1) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 23.150141][ T36] audit: type=1400 audit(1790270814.549:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.151335][ T286] cgroup: Unknown subsys name 'net' [ 23.172793][ T36] audit: type=1400 audit(1790270814.549:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.200023][ T36] audit: type=1400 audit(1790270814.579:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.200193][ T286] cgroup: Unknown subsys name 'devices' [ 23.334707][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.340326][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.452138][ T36] audit: type=1400 audit(1790270814.849:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.475309][ T36] audit: type=1400 audit(1790270814.849:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.500060][ T36] audit: type=1400 audit(1790270814.849:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.527779][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.536553][ T36] audit: type=1400 audit(1790270814.939:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.561946][ T36] audit: type=1400 audit(1790270814.939:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.573086][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.587670][ T36] audit: type=1400 audit(1790270814.969:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.621724][ T36] audit: type=1400 audit(1790270814.969:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.980882][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.988120][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.995264][ T294] bridge_slave_0: entered allmulticast mode [ 25.001447][ T294] bridge_slave_0: entered promiscuous mode [ 25.008170][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.015313][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.022435][ T294] bridge_slave_1: entered allmulticast mode [ 25.028754][ T294] bridge_slave_1: entered promiscuous mode [ 25.049597][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.056722][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.063966][ T293] bridge_slave_0: entered allmulticast mode [ 25.070123][ T293] bridge_slave_0: entered promiscuous mode [ 25.092171][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.099269][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.106525][ T293] bridge_slave_1: entered allmulticast mode [ 25.112797][ T293] bridge_slave_1: entered promiscuous mode [ 25.130020][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.137117][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.144246][ T295] bridge_slave_0: entered allmulticast mode [ 25.150376][ T295] bridge_slave_0: entered promiscuous mode [ 25.159258][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.166354][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.173457][ T295] bridge_slave_1: entered allmulticast mode [ 25.179760][ T295] bridge_slave_1: entered promiscuous mode [ 25.246887][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.254170][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.261208][ T296] bridge_slave_0: entered allmulticast mode [ 25.267490][ T296] bridge_slave_0: entered promiscuous mode [ 25.276566][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.283647][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.290744][ T296] bridge_slave_1: entered allmulticast mode [ 25.297062][ T296] bridge_slave_1: entered promiscuous mode [ 25.387784][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.394845][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.402114][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.409146][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.426018][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.433083][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.440409][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.447467][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.468728][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.475799][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.483104][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.490123][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.522258][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.529639][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.537072][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.544659][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.552068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.559391][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.572295][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.579371][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.596168][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.603335][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.611306][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.618469][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.630585][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.637652][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.654165][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.661216][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.673657][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.680704][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.699279][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.706350][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.728257][ T295] veth0_vlan: entered promiscuous mode [ 25.736324][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.743372][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.775528][ T293] veth0_vlan: entered promiscuous mode [ 25.781173][ T294] veth0_vlan: entered promiscuous mode [ 25.797880][ T295] veth1_macvtap: entered promiscuous mode [ 25.814903][ T296] veth0_vlan: entered promiscuous mode [ 25.824636][ T293] veth1_macvtap: entered promiscuous mode [ 25.832126][ T294] veth1_macvtap: entered promiscuous mode [ 25.846534][ T296] veth1_macvtap: entered promiscuous mode [ 25.883829][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.947343][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.954880][ T319] Zero length message leads to an empty skb [ 26.203112][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.292723][ T317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.324572][ T347] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 26.353694][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.360447][ T347] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 26.366249][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 26.381638][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.397955][ T45] usb 2-1: Product: syz [ 26.398076][ T347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 26.402219][ T45] usb 2-1: Manufacturer: syz [ 26.412764][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.422658][ T45] usb 2-1: SerialNumber: syz [ 26.431353][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 26.437890][ T45] cdc_wdm 2-1:1.0: Unknown control protocol [ 26.452889][ T317] usb 4-1: Using ep0 maxpacket: 8 [ 26.459313][ T317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.467879][ T317] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 26.478922][ T317] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.490327][ T317] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 26.500943][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.509086][ T317] usb 4-1: Product: syz [ 26.513500][ T317] usb 4-1: Manufacturer: syz [ 26.518103][ T317] usb 4-1: SerialNumber: syz [ 26.583670][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.602652][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.619416][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 26.632660][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.649728][ T9] usb 3-1: config 0 descriptor?? [ 26.746948][ T317] usb 4-1: USB disconnect, device number 2 [ 27.066958][ T9] input: HID 046d:c295 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C295.0001/input/input4 [ 27.137417][ T9] logitech 0003:046D:C295.0001: input,hidraw0: USB HID v0.10 Joystick [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 27.153205][ T9] logitech 0003:046D:C295.0001: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 27.172563][ T9] logitech 0003:046D:C295.0001: probe with driver logitech failed with error -1 [ 27.285267][ T45] usb 3-1: USB disconnect, device number 2 [ 27.422648][ T385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 27.572404][ T408] netlink: 'syz.0.34': attribute type 12 has an invalid length. [ 27.714491][ T437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 27.822704][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.983692][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.993973][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.008751][ T9] usb 1-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 28.018282][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.034092][ T9] usb 1-1: Product: syz [ 28.039795][ T9] usb 1-1: Manufacturer: syz [ 28.045561][ T9] usb 1-1: SerialNumber: syz [ 28.123673][ T512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 28.253635][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 28.253651][ T36] audit: type=1400 audit(1790270819.659:137): avc: denied { write } for pid=407 comm="syz.0.34" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.279984][ T36] audit: type=1400 audit(1790270819.659:138): avc: denied { getopt } for pid=407 comm="syz.0.34" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.300330][ T9] usb 1-1: cannot find UAC_HEADER [ 28.305871][ T359] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.314496][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.324357][ T9] usb 1-1: USB disconnect, device number 2 [ 28.330567][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.412822][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.473703][ T359] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 28.484670][ T359] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 28.495808][ T359] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 28.509491][ T359] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.518587][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.527239][ T359] usb 3-1: SerialNumber: syz [ 28.532755][ T506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.540017][ T506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.573757][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 28.581789][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.592059][ T45] usb 4-1: config 0 has no interface number 0 [ 28.598250][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.609142][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.618878][ T45] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.631678][ T45] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 28.640741][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.649530][ T45] usb 4-1: config 0 descriptor?? [ 28.748647][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.757298][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.773271][ T359] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 28.786514][ T359] usb 3-1: USB disconnect, device number 3 [ 28.877509][ T36] audit: type=1400 audit(1790270820.279:139): avc: denied { mount } for pid=522 comm="syz.0.57" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.899797][ T36] audit: type=1400 audit(1790270820.279:140): avc: denied { unmount } for pid=522 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.939640][ T317] usb 2-1: USB disconnect, device number 2 [ 28.953072][ T36] audit: type=1400 audit(1790270820.349:141): avc: denied { ioctl } for pid=526 comm="syz.1.59" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.977634][ T36] audit: type=1400 audit(1790270820.359:142): avc: denied { ioctl } for pid=526 comm="syz.1.59" path="socket:[6327]" dev="sockfs" ino=6327 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.038268][ T36] audit: type=1400 audit(1790270820.439:143): avc: denied { read } for pid=532 comm="syz.1.63" dev="nsfs" ino=4026532498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.038829][ T533] Bluetooth: ISO socket layer initialized [ 29.066470][ T36] audit: type=1400 audit(1790270820.439:144): avc: denied { open } for pid=532 comm="syz.1.63" path="net:[4026532498]" dev="nsfs" ino=4026532498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.079043][ T514] No source specified [ 29.089787][ T36] audit: type=1400 audit(1790270820.439:145): avc: denied { create } for pid=532 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.116843][ T36] audit: type=1400 audit(1790270820.439:146): avc: denied { bind } for pid=532 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.140221][ T514] random: crng reseeded on system resumption [ 29.243046][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.250685][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.258215][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.265852][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.273727][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.281507][ T45] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 29.282816][ T549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 29.289236][ T45] holtek_mouse 0003:04D9:A04A.0002: unexpected long global item [ 29.324021][ T45] holtek_mouse 0003:04D9:A04A.0002: hid parse failed: -22 [ 29.332514][ T45] holtek_mouse 0003:04D9:A04A.0002: probe with driver holtek_mouse failed with error -22 [ 29.433877][ T317] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.477575][ T578] batadv_slave_1: entered promiscuous mode [ 29.483855][ T578] batadv_slave_1: left promiscuous mode [ 29.499365][ T359] usb 4-1: USB disconnect, device number 3 [ 29.603662][ T317] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 29.614718][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.625700][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.635541][ T317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 29.649190][ T317] usb 1-1: New USB device found, idVendor=056a, idProduct=4400, bcdDevice=e9.87 [ 29.658291][ T317] usb 1-1: New USB device strings: Mfr=193, Product=0, SerialNumber=0 [ 29.666509][ T317] usb 1-1: Manufacturer: syz [ 29.671613][ T317] usb 1-1: config 0 descriptor?? [ 29.712800][ T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.874121][ T62] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.882626][ T62] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7 [ 29.895159][ T62] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.904360][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.912379][ T62] usb 2-1: Product: syz [ 29.916728][ T62] usb 2-1: Manufacturer: syz [ 29.921329][ T62] usb 2-1: SerialNumber: syz [ 30.049053][ T585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 30.087824][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.097180][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.106964][ T317] usbhid 1-1:0.0: can't add hid device: -71 [ 30.116745][ T317] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.125818][ T317] usb 1-1: USB disconnect, device number 3 [ 30.138267][ T62] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.146838][ T62] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 30.165903][ T62] usb 2-1: USB disconnect, device number 3 [ 30.451660][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 30.461457][ T633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 30.543165][ T640] 9pnet_fd: Insufficient options for proto=fd [ 30.550566][ T641] 9pnet_fd: Insufficient options for proto=fd [ 31.233389][ T62] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.335789][ T687] bridge0: port 3(vlan0) entered blocking state [ 31.342083][ T687] bridge0: port 3(vlan0) entered disabled state [ 31.348433][ T687] vlan0: entered allmulticast mode [ 31.353586][ T687] veth0_vlan: entered allmulticast mode [ 31.359417][ T687] vlan0: entered promiscuous mode [ 31.364686][ T687] bridge0: port 3(vlan0) entered blocking state [ 31.370920][ T687] bridge0: port 3(vlan0) entered forwarding state [ 31.383190][ T62] usb 2-1: Using ep0 maxpacket: 8 [ 31.412656][ T579] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.542655][ T579] usb 3-1: device descriptor read/64, error -71 [ 31.762654][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.782676][ T579] usb 3-1: device descriptor read/64, error -71 [ 31.826501][ T716] netlink: 'syz.0.132': attribute type 13 has an invalid length. [ 31.835928][ T718] netlink: 'syz.0.132': attribute type 13 has an invalid length. [ 31.923731][ T45] usb 4-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 31.934108][ T45] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 31.944605][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.953687][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.961717][ T45] usb 4-1: Product: syz [ 31.965916][ T45] usb 4-1: Manufacturer: syz [ 31.970517][ T45] usb 4-1: SerialNumber: syz [ 32.022669][ T579] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.152671][ T579] usb 3-1: device descriptor read/64, error -71 [ 32.178016][ T45] usb 4-1: USB disconnect, device number 4 [ 32.392664][ T579] usb 3-1: device descriptor read/64, error -71 [ 32.502769][ T579] usb usb3-port1: attempt power cycle [ 32.799219][ T740] rust_binder: Error in use_page_slow: ESRCH [ 32.799252][ T740] rust_binder: use_range failure ESRCH [ 32.805460][ T740] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 32.810979][ T740] rust_binder: Failure in copy_transaction_data: ESRCH [ 32.818950][ T740] rust_binder: 739:740 transaction call to 739:0 failed ESRCH, code 0 size 0-0 [ 32.835873][ T45] rust_binder: 739: undelivered TRANSACTION_ERROR: 29201 [ 32.852675][ T579] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.873846][ T579] usb 3-1: device descriptor read/8, error -71 [ 32.930396][ T748] cgroup: fork rejected by pids controller in /syz3 [ 32.941465][ T745] incfs: mount failed -22 [ 32.951498][ T745] incfs: mount failed -22 [ 32.956307][ T745] incfs: mount failed -22 [ 32.960803][ T745] incfs: mount failed -22 [ 32.965401][ T745] incfs: mount failed -22 [ 32.969884][ T745] incfs: mount failed -22 [ 32.974448][ T745] incfs: mount failed -22 [ 32.974448][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.987225][ T745] incfs: mount failed -22 [ 32.991724][ T745] incfs: mount failed -22 [ 32.996364][ T745] incfs: mount failed -22 [ 33.000855][ T745] incfs: mount failed -22 [ 33.005538][ T745] incfs: mount failed -22 [ 33.010097][ T745] incfs: mount failed -22 [ 33.015064][ T745] incfs: mount failed -22 [ 33.019675][ T745] incfs: mount failed -22 [ 33.024430][ T579] usb 3-1: device descriptor read/8, error -71 [ 33.030854][ T745] incfs: mount failed -22 [ 33.035682][ T745] incfs: mount failed -22 [ 33.042997][ T745] incfs: mount failed -22 [ 33.071015][ T745] incfs: mount failed -22 [ 33.084233][ T745] incfs: mount failed -22 [ 33.102849][ T745] incfs: mount failed -22 [ 33.112652][ T10] usb 1-1: device descriptor read/64, error -71 [ 33.116156][ T745] incfs: mount failed -22 [ 33.125562][ T745] incfs: mount failed -22 [ 33.130123][ T745] incfs: mount failed -22 [ 33.134872][ T745] incfs: mount failed -22 [ 33.139363][ T745] incfs: mount failed -22 [ 33.144371][ T745] incfs: mount failed -22 [ 33.148947][ T745] incfs: mount failed -22 [ 33.153714][ T745] incfs: mount failed -22 [ 33.158263][ T745] incfs: mount failed -22 [ 33.162984][ T745] incfs: mount failed -22 [ 33.167531][ T745] incfs: mount failed -22 [ 33.172048][ T745] incfs: mount failed -22 [ 33.176893][ T745] incfs: mount failed -22 [ 33.181377][ T745] incfs: mount failed -22 [ 33.190207][ T745] incfs: mount failed -22 [ 33.198987][ T745] incfs: mount failed -22 [ 33.203813][ T745] incfs: mount failed -22 [ 33.209019][ T745] incfs: mount failed -22 [ 33.213967][ T745] incfs: mount failed -22 [ 33.218498][ T745] incfs: mount failed -22 [ 33.223447][ T745] incfs: mount failed -22 [ 33.228095][ T745] incfs: mount failed -22 [ 33.233062][ T745] incfs: mount failed -22 [ 33.237578][ T745] incfs: mount failed -22 [ 33.242173][ T745] incfs: mount failed -22 [ 33.246994][ T745] incfs: mount failed -22 [ 33.251616][ T745] incfs: mount failed -22 [ 33.256382][ T745] incfs: mount failed -22 [ 33.260993][ T745] incfs: mount failed -22 [ 33.265661][ T745] incfs: mount failed -22 [ 33.270452][ T745] incfs: mount failed -22 [ 33.275031][ T579] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.282838][ T745] incfs: mount failed -22 [ 33.287659][ T745] incfs: mount failed -22 [ 33.292220][ T745] incfs: mount failed -22 [ 33.298117][ T745] incfs: mount failed -22 [ 33.303243][ T745] incfs: mount failed -22 [ 33.307958][ T579] usb 3-1: device descriptor read/8, error -71 [ 33.312794][ T745] incfs: mount failed -22 [ 33.318755][ T745] incfs: mount failed -22 [ 33.323296][ T745] incfs: mount failed -22 [ 33.327840][ T745] incfs: mount failed -22 [ 33.332372][ T745] incfs: mount failed -22 [ 33.337071][ T745] incfs: mount failed -22 [ 33.362669][ T10] usb 1-1: device descriptor read/64, error -71 [ 33.443622][ T579] usb 3-1: device descriptor read/8, error -71 [ 33.552767][ T579] usb usb3-port1: unable to enumerate USB device [ 33.602658][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.732689][ T10] usb 1-1: device descriptor read/64, error -71 [ 33.741905][ T62] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.750603][ T62] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 33.758367][ T62] usb 2-1: can't read configurations, error -71 [ 33.767224][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 33.767240][ T36] audit: type=1400 audit(1790270825.169:194): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.781518][ T818] ======================================================= [ 33.781518][ T818] WARNING: The mand mount option has been deprecated and [ 33.781518][ T818] and is ignored by this kernel. Remove the mand [ 33.781518][ T818] option from the mount to silence this warning. [ 33.781518][ T818] ======================================================= [ 33.841194][ T818] overlayfs: overlapping lowerdir path [ 33.934143][ T36] audit: type=1400 audit(1790270825.339:195): avc: denied { unlink } for pid=827 comm="syz.1.147" name="#5" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.956162][ T36] audit: type=1400 audit(1790270825.339:196): avc: denied { mount } for pid=827 comm="syz.1.147" name="/" dev="overlay" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.978070][ T10] usb 1-1: device descriptor read/64, error -71 [ 34.093075][ T10] usb usb1-port1: attempt power cycle [ 34.094283][ T840] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 34.098516][ T36] audit: type=1400 audit(1790270825.499:197): avc: denied { read } for pid=839 comm="syz.3.148" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.132984][ T36] audit: type=1400 audit(1790270825.499:198): avc: denied { open } for pid=839 comm="syz.3.148" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.157533][ T36] audit: type=1400 audit(1790270825.509:199): avc: denied { relabelto } for pid=839 comm="syz.3.148" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 34.186857][ T36] audit: type=1400 audit(1790270825.509:200): avc: denied { associate } for pid=839 comm="syz.3.148" name="loop-control" dev="devtmpfs" ino=48 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 34.219041][ T36] audit: type=1400 audit(1790270825.509:201): avc: denied { ioctl } for pid=839 comm="syz.3.148" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 34.222801][ T845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 34.248291][ T36] audit: type=1400 audit(1790270825.539:202): avc: denied { write } for pid=841 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.284545][ T36] audit: type=1400 audit(1790270825.589:203): avc: denied { setopt } for pid=846 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.489931][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.513662][ T10] usb 1-1: device descriptor read/8, error -71 [ 34.552675][ T579] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.622681][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.643654][ T10] usb 1-1: device descriptor read/8, error -71 [ 34.702648][ T579] usb 4-1: Using ep0 maxpacket: 32 [ 34.709114][ T579] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.717947][ T579] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 34.728636][ T579] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.748280][ T579] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 34.761618][ T579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.768261][ T865] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 34.769863][ T579] usb 4-1: Product: syz [ 34.780156][ T579] usb 4-1: Manufacturer: syz [ 34.784821][ T579] usb 4-1: SerialNumber: syz [ 34.790167][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.802937][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 34.811989][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.820028][ T9] usb 3-1: Product: syz [ 34.824392][ T9] usb 3-1: Manufacturer: syz [ 34.828998][ T9] usb 3-1: SerialNumber: syz [ 34.840697][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 34.846681][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 34.882652][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.903613][ T10] usb 1-1: device descriptor read/8, error -71 [ 35.003738][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.012497][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.022950][ T579] usb 4-1: MIDIStreaming interface descriptor not found [ 35.033390][ T579] usb 4-1: USB disconnect, device number 5 [ 35.041763][ T10] usb 1-1: device descriptor read/8, error -71 [ 35.051439][ T9] usb 3-1: USB disconnect, device number 8 [ 35.073013][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.152730][ T10] usb usb1-port1: unable to enumerate USB device [ 35.692338][ T876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 35.772690][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.862677][ T579] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.880145][ T898] fuseblk: Bad value for 'source' [ 35.889598][ T898] 9pnet_fd: Insufficient options for proto=fd [ 35.923953][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.932518][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 35.943770][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 35.958053][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 35.967235][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.975234][ T9] usb 4-1: Product: syz [ 35.979426][ T9] usb 4-1: Manufacturer: syz [ 35.984061][ T9] usb 4-1: SerialNumber: syz [ 35.996185][ T907] process 'syz.0.173' launched '/dev/fd/4' with NULL argv: empty string added [ 36.022753][ T579] usb 2-1: Using ep0 maxpacket: 32 [ 36.029641][ T579] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.038196][ T579] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.048333][ T579] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 36.062997][ T579] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 36.072229][ T579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.080544][ T579] usb 2-1: Product: syz [ 36.084900][ T579] usb 2-1: Manufacturer: syz [ 36.089520][ T579] usb 2-1: SerialNumber: syz [ 36.096406][ T872] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.196055][ T868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.204651][ T868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.213543][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.304376][ T872] ./dev/sda1: Can't lookup blockdev [ 36.332656][ T317] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.420576][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 36.429931][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.430426][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 36.482677][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 36.489250][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.497669][ T317] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 36.510222][ T317] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 36.519352][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.527368][ T317] usb 1-1: Product: syz [ 36.531525][ T317] usb 1-1: Manufacturer: syz [ 36.536139][ T317] usb 1-1: SerialNumber: syz [ 36.673198][ T330] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 36.812730][ T330] usb 3-1: device descriptor read/64, error -71 [ 36.831233][ T921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 36.873594][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 36.882026][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 37.052699][ T330] usb 3-1: device descriptor read/64, error -71 [ 37.091880][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.099439][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.106883][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.114394][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.121794][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.129232][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.136675][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.144122][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.151518][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.158967][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.166377][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.173832][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.181232][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.188634][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.196041][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.203468][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.210855][ T10] hid-generic 0006:000C:0008.0003: unknown main item tag 0x0 [ 37.218776][ T10] hid-generic 0006:000C:0008.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 37.302665][ T330] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 37.442671][ T330] usb 3-1: device descriptor read/64, error -71 [ 37.682680][ T330] usb 3-1: device descriptor read/64, error -71 [ 37.785284][ T948] FAULT_INJECTION: forcing a failure. [ 37.785284][ T948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.798746][ T948] CPU: 0 UID: 0 PID: 948 Comm: syz.1.185 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 37.798773][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.798790][ T948] Call Trace: [ 37.798796][ T948] [ 37.798802][ T948] __dump_stack+0x21/0x30 [ 37.798837][ T948] dump_stack_lvl+0x140/0x1c0 [ 37.798856][ T948] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.798875][ T948] ? proc_fail_nth_write+0x184/0x220 [ 37.798899][ T948] dump_stack+0x19/0x20 [ 37.798917][ T948] should_fail_ex+0x3c2/0x510 [ 37.798936][ T948] ? __cfi_kvm_vfio_set_attr+0x10/0x10 [ 37.798953][ T948] should_fail+0xf/0x20 [ 37.798969][ T948] should_fail_usercopy+0x1e/0x30 [ 37.798987][ T948] _copy_from_user+0x20/0xa0 [ 37.799007][ T948] kvm_device_ioctl+0x2ad/0x580 [ 37.799026][ T948] ? __kasan_check_write+0x18/0x20 [ 37.799043][ T948] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 37.799070][ T948] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.799090][ T948] ? security_file_ioctl+0x3e/0x110 [ 37.799109][ T948] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 37.799128][ T948] __se_sys_ioctl+0x126/0x1b0 [ 37.799147][ T948] __x64_sys_ioctl+0x7f/0xa0 [ 37.799165][ T948] x64_sys_call+0x1878/0x2ee0 [ 37.799179][ T948] do_syscall_64+0x57/0xf0 [ 37.799194][ T948] ? clear_bhb_loop+0x50/0xa0 [ 37.799213][ T948] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.799230][ T948] RIP: 0033:0x7fa74879e159 [ 37.799248][ T948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.799261][ T948] RSP: 002b:00007fa749666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.799279][ T948] RAX: ffffffffffffffda RBX: 00007fa748a25fa0 RCX: 00007fa74879e159 [ 37.799291][ T948] RDX: 0000000000000000 RSI: 000000004018aee1 RDI: 0000000000000005 [ 37.799301][ T948] RBP: 00007fa749666090 R08: 0000000000000000 R09: 0000000000000000 [ 37.799311][ T948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.799320][ T948] R13: 00007fa748a26038 R14: 00007fa748a25fa0 R15: 00007ffe676068f8 [ 37.799334][ T948] [ 37.799577][ T330] usb usb3-port1: attempt power cycle [ 38.085388][ T952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 38.203507][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 38.230535][ T149] dummy0: entered promiscuous mode [ 38.355692][ T330] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 38.383641][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.447202][ T991] FAULT_INJECTION: forcing a failure. [ 38.447202][ T991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.460387][ T991] CPU: 0 UID: 0 PID: 991 Comm: syz.0.197 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 38.460408][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.460415][ T991] Call Trace: [ 38.460419][ T991] [ 38.460423][ T991] __dump_stack+0x21/0x30 [ 38.460442][ T991] dump_stack_lvl+0x140/0x1c0 [ 38.460458][ T991] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.460472][ T991] ? check_stack_object+0x138/0x150 [ 38.460484][ T991] dump_stack+0x19/0x20 [ 38.460496][ T991] should_fail_ex+0x3c2/0x510 [ 38.460509][ T991] should_fail+0xf/0x20 [ 38.460519][ T991] should_fail_usercopy+0x1e/0x30 [ 38.460532][ T991] _copy_to_user+0x24/0xa0 [ 38.460546][ T991] simple_read_from_buffer+0xed/0x160 [ 38.460561][ T991] proc_fail_nth_read+0x1aa/0x220 [ 38.460575][ T991] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.460589][ T991] ? exc_page_fault+0x65/0xc0 [ 38.460602][ T991] ? bpf_lsm_file_permission+0xd/0x20 [ 38.460640][ T991] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.460654][ T991] vfs_read+0x28b/0xc70 [ 38.460665][ T991] ? __cfi_vfs_read+0x10/0x10 [ 38.460675][ T991] ? __kasan_check_write+0x18/0x20 [ 38.460685][ T991] ? mutex_lock+0x97/0x1d0 [ 38.460696][ T991] ? __cfi_mutex_lock+0x10/0x10 [ 38.460708][ T991] ksys_read+0x145/0x260 [ 38.460718][ T991] ? __cfi_ksys_read+0x10/0x10 [ 38.460728][ T991] ? __kasan_check_write+0x18/0x20 [ 38.460737][ T991] ? fput+0x1a4/0x230 [ 38.460750][ T991] ? __kasan_check_read+0x15/0x20 [ 38.460759][ T991] __x64_sys_read+0x7f/0x90 [ 38.460769][ T991] x64_sys_call+0x2638/0x2ee0 [ 38.460779][ T991] do_syscall_64+0x57/0xf0 [ 38.460787][ T991] ? clear_bhb_loop+0x50/0xa0 [ 38.460800][ T991] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.460811][ T991] RIP: 0033:0x7fa86275e98e [ 38.460821][ T991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.460829][ T991] RSP: 002b:00007fa8611e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.460841][ T991] RAX: ffffffffffffffda RBX: 00007fa8611e36c0 RCX: 00007fa86275e98e [ 38.460849][ T991] RDX: 000000000000000f RSI: 00007fa8611e30a0 RDI: 0000000000000006 [ 38.460855][ T991] RBP: 00007fa8611e3090 R08: 0000000000000000 R09: 0000000000000000 [ 38.460861][ T991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.460867][ T991] R13: 00007fa862a26038 R14: 00007fa862a25fa0 R15: 00007ffeda77d5d8 [ 38.460876][ T991] [ 38.513710][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.547393][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 38.740653][ T9] usb 4-1: USB disconnect, device number 6 [ 38.748264][ T579] usb 2-1: MIDIStreaming interface descriptor not found [ 38.767066][ T579] usb 2-1: USB disconnect, device number 6 [ 38.769259][ T317] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.781447][ T1001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 38.811227][ T317] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 38.820746][ T330] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 38.839142][ T317] usb 1-1: USB disconnect, device number 8 [ 38.857789][ T330] usb 3-1: device descriptor read/8, error -71 [ 38.879801][ T993] udevd[993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 38.993645][ T330] usb 3-1: device descriptor read/8, error -71 [ 39.054316][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 39.054331][ T36] audit: type=1400 audit(1790270830.459:252): avc: denied { search } for pid=1013 comm="syz.0.205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 39.103822][ T330] usb usb3-port1: unable to enumerate USB device [ 39.110008][ T36] audit: type=1400 audit(1790270830.509:253): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.132667][ T579] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.142665][ T36] audit: type=1400 audit(1790270830.539:254): avc: denied { write } for pid=1018 comm="syz.0.206" path="socket:[9229]" dev="sockfs" ino=9229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.166095][ T36] audit: type=1400 audit(1790270830.549:255): avc: denied { ioctl } for pid=1018 comm="syz.0.206" path="socket:[9229]" dev="sockfs" ino=9229 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.190545][ T36] audit: type=1400 audit(1790270830.549:256): avc: denied { connect } for pid=1018 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.210683][ T36] audit: type=1400 audit(1790270830.549:257): avc: denied { write } for pid=1018 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.234861][ T36] audit: type=1400 audit(1790270830.569:258): avc: denied { read } for pid=1018 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.256440][ T36] audit: type=1400 audit(1790270830.619:259): avc: denied { mount } for pid=1018 comm="syz.0.206" name="/" dev="ramfs" ino=8855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.299458][ T579] usb 2-1: Using ep0 maxpacket: 8 [ 39.313302][ T579] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 39.334611][ T579] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 39.342209][ T579] usb 2-1: can't read configurations, error -61 [ 39.458504][ T1033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 39.482676][ T579] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.494178][ T1035] FAULT_INJECTION: forcing a failure. [ 39.494178][ T1035] name failslab, interval 1, probability 0, space 0, times 1 [ 39.509483][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: syz.2.211 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 39.509513][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.509525][ T1035] Call Trace: [ 39.509531][ T1035] [ 39.509538][ T1035] __dump_stack+0x21/0x30 [ 39.509570][ T1035] dump_stack_lvl+0x140/0x1c0 [ 39.509590][ T1035] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.509612][ T1035] dump_stack+0x19/0x20 [ 39.509633][ T1035] should_fail_ex+0x3c2/0x510 [ 39.509654][ T1035] should_failslab+0xac/0x100 [ 39.509675][ T1035] kmem_cache_alloc_noprof+0x42/0x410 [ 39.509693][ T1035] ? security_file_alloc+0x49/0x220 [ 39.509710][ T1035] ? kasan_save_alloc_info+0x3a/0x50 [ 39.509727][ T1035] security_file_alloc+0x49/0x220 [ 39.509743][ T1035] init_file+0x9e/0x210 [ 39.509763][ T1035] alloc_empty_file+0xd9/0x270 [ 39.509784][ T1035] ? _raw_spin_unlock+0x45/0x60 [ 39.509801][ T1035] alloc_file_pseudo+0x142/0x1f0 [ 39.509825][ T1035] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 39.509851][ T1035] sock_alloc_file+0xbe/0x2b0 [ 39.509870][ T1035] __sys_socket+0x14c/0x1c0 [ 39.509890][ T1035] __x64_sys_socket+0x7e/0x90 [ 39.509910][ T1035] x64_sys_call+0x2608/0x2ee0 [ 39.509927][ T1035] do_syscall_64+0x57/0xf0 [ 39.509942][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 39.509964][ T1035] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.509984][ T1035] RIP: 0033:0x7f332559e159 [ 39.510000][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.510014][ T1035] RSP: 002b:00007f3323ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 39.510035][ T1035] RAX: ffffffffffffffda RBX: 00007f3325825fa0 RCX: 00007f332559e159 [ 39.510048][ T1035] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 39.510060][ T1035] RBP: 00007f332563506b R08: 0000000000000000 R09: 0000000000000000 [ 39.510084][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.510095][ T1035] R13: 00007f3325826038 R14: 00007f3325825fa0 R15: 00007ffc6143b098 [ 39.510111][ T1035] [ 39.547900][ T36] audit: type=1400 audit(1790270830.949:260): avc: denied { bind } for pid=1026 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.741946][ T36] audit: type=1400 audit(1790270830.949:261): avc: denied { listen } for pid=1026 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.812655][ T579] usb 2-1: Using ep0 maxpacket: 8 [ 39.818854][ T579] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 39.828539][ T579] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 39.836270][ T579] usb 2-1: can't read configurations, error -61 [ 39.842835][ T579] usb usb2-port1: attempt power cycle [ 40.023254][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.023282][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.029953][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.036956][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.044169][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.049987][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.057807][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.069602][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.069639][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.077248][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.083096][ T1055] rust_binder: Error in use_page_slow: ESRCH [ 40.083473][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.089644][ T1055] rust_binder: use_range failure ESRCH [ 40.095882][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.107779][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.113973][ T1055] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 40.114016][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.120414][ T1055] rust_binder: Failure in copy_transaction_data: ESRCH [ 40.120434][ T1055] rust_binder: 1051:1055 transaction call to 1051:0 failed ESRCH, code 0 size 88-24 [ 40.128817][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.142034][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.157966][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.164208][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.170770][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.177353][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.183865][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.190184][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.196919][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.203127][ T579] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.203227][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.217355][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.223630][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.230180][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.238802][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.243244][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.249841][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.256375][ T579] usb 2-1: Using ep0 maxpacket: 8 [ 40.256770][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.268864][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.274544][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.281180][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.289324][ T579] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 40.302359][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.302378][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.312746][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.315448][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.324074][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.328389][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.336317][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.343714][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.348202][ T579] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.348260][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.354685][ T579] usb 2-1: can't read configurations, error -61 [ 40.362587][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.375228][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.381318][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.388226][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.394456][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.401100][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.407696][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.419219][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.420562][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.428512][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.433482][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.440787][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.446427][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.456648][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.459750][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.466842][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.472680][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.479297][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.485563][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.492197][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.499506][ T579] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.499692][ T1052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.526669][ T858] rust_binder: 1051: undelivered TRANSACTION_ERROR: 29201 [ 40.533943][ T579] usb 2-1: Using ep0 maxpacket: 8 [ 40.539394][ T579] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 40.549706][ T579] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.557654][ T579] usb 2-1: can't read configurations, error -61 [ 40.564124][ T579] usb usb2-port1: unable to enumerate USB device [ 40.641886][ T1078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 40.822639][ T579] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 40.873817][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 40.972669][ T579] usb 3-1: device descriptor read/64, error -71 [ 40.993821][ T1115] FAULT_INJECTION: forcing a failure. [ 40.993821][ T1115] name failslab, interval 1, probability 0, space 0, times 0 [ 41.006740][ T1115] CPU: 1 UID: 0 PID: 1115 Comm: syz.0.235 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 41.006770][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.006781][ T1115] Call Trace: [ 41.006787][ T1115] [ 41.006794][ T1115] __dump_stack+0x21/0x30 [ 41.006821][ T1115] dump_stack_lvl+0x140/0x1c0 [ 41.006842][ T1115] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.006866][ T1115] dump_stack+0x19/0x20 [ 41.006887][ T1115] should_fail_ex+0x3c2/0x510 [ 41.006906][ T1115] should_failslab+0xac/0x100 [ 41.006925][ T1115] kmem_cache_alloc_noprof+0x42/0x410 [ 41.006943][ T1115] ? security_inode_alloc+0x51/0x230 [ 41.006962][ T1115] ? __cfi_make_kgid+0x10/0x10 [ 41.006982][ T1115] security_inode_alloc+0x51/0x230 [ 41.007002][ T1115] inode_init_always_gfp+0x756/0x9e0 [ 41.007024][ T1115] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 41.007045][ T1115] alloc_inode+0xc5/0x270 [ 41.007066][ T1115] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.007083][ T1115] new_inode+0x25/0x1e0 [ 41.007114][ T1115] shmem_get_inode+0x352/0xc10 [ 41.007136][ T1115] shmem_mknod+0x63/0x200 [ 41.007159][ T1115] shmem_mkdir+0x3b/0x80 [ 41.007181][ T1115] vfs_mkdir+0x58e/0x810 [ 41.007205][ T1115] do_mkdirat+0x240/0x530 [ 41.007227][ T1115] ? __cfi_do_mkdirat+0x10/0x10 [ 41.007250][ T1115] ? __kasan_check_write+0x18/0x20 [ 41.007268][ T1115] ? getname_flags+0x203/0x6b0 [ 41.007286][ T1115] ? __kasan_check_write+0x18/0x20 [ 41.007304][ T1115] __x64_sys_mkdirat+0x8b/0xa0 [ 41.007326][ T1115] x64_sys_call+0x2ba8/0x2ee0 [ 41.007343][ T1115] do_syscall_64+0x57/0xf0 [ 41.007359][ T1115] ? clear_bhb_loop+0x50/0xa0 [ 41.007380][ T1115] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.007400][ T1115] RIP: 0033:0x7fa86279e159 [ 41.007416][ T1115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.007437][ T1115] RSP: 002b:00007fa8611e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 41.007457][ T1115] RAX: ffffffffffffffda RBX: 00007fa862a25fa0 RCX: 00007fa86279e159 [ 41.007470][ T1115] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 41.007482][ T1115] RBP: 00007fa86283506b R08: 0000000000000000 R09: 0000000000000000 [ 41.007493][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.007504][ T1115] R13: 00007fa862a26038 R14: 00007fa862a25fa0 R15: 00007ffeda77d5d8 [ 41.007519][ T1115] [ 41.322656][ T579] usb 3-1: device descriptor read/64, error -71 [ 41.535981][ T1144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 41.574026][ T579] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 41.652940][ T1154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'. [ 41.712727][ T579] usb 3-1: device descriptor read/64, error -71 [ 41.807140][ T1167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 41.950647][ T1180] overlayfs: missing 'lowerdir' [ 41.955595][ T579] usb 3-1: device descriptor read/64, error -71 [ 42.044578][ T1193] fuseblk: Bad value for 'source' [ 42.050359][ T1193] fuseblk: Bad value for 'source' [ 42.063264][ T579] usb usb3-port1: attempt power cycle [ 42.070413][ T1199] capability: warning: `syz.0.262' uses 32-bit capabilities (legacy support in use) [ 42.287556][ T1201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 42.304239][ T858] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.327464][ T918] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 42.341101][ T1208] binder: Binderfs stats mode cannot be changed during a remount [ 42.412696][ T579] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 42.433669][ T579] usb 3-1: device descriptor read/8, error -71 [ 42.462674][ T858] usb 2-1: Using ep0 maxpacket: 8 [ 42.469658][ T858] usb 2-1: config 3 has an invalid interface number: 193 but max is 0 [ 42.477926][ T858] usb 2-1: config 3 has no interface number 0 [ 42.484083][ T858] usb 2-1: config 3 interface 193 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 42.495019][ T858] usb 2-1: config 3 interface 193 has no altsetting 0 [ 42.496376][ T918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.503770][ T858] usb 2-1: string descriptor 0 read error: -22 [ 42.516415][ T918] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 42.518943][ T858] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=7d.90 [ 42.530459][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.536482][ T858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.544837][ T918] usb 1-1: Product: syz [ 42.554384][ T858] usbhid 2-1:3.193: couldn't find an input interrupt endpoint [ 42.559075][ T918] usb 1-1: Manufacturer: syz [ 42.568871][ T579] usb 3-1: device descriptor read/8, error -71 [ 42.568926][ T918] usb 1-1: SerialNumber: syz [ 42.584065][ T918] usb 1-1: config 0 descriptor?? [ 42.596445][ T918] asix 1-1:0.0: probe with driver asix failed with error -22 [ 42.623372][ T1224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 42.703172][ T1233] capability: warning: `syz.3.275' uses deprecated v2 capabilities in a way that may be insecure [ 42.761545][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.770142][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.779866][ T858] usb 2-1: USB disconnect, device number 11 [ 42.803915][ T1199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.816046][ T579] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 42.824917][ T9] usb 1-1: USB disconnect, device number 9 [ 42.843650][ T579] usb 3-1: device descriptor read/8, error -71 [ 42.973637][ T579] usb 3-1: device descriptor read/8, error -71 [ 43.082753][ T579] usb usb3-port1: unable to enumerate USB device [ 43.366746][ T1251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.376101][ T1251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.471763][ T1258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 43.585190][ T1264] syz.3.285: attempt to access beyond end of device [ 43.585190][ T1264] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 43.598220][ T1264] FAT-fs (loop3): unable to read boot sector [ 43.604248][ T579] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 43.772682][ T918] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.784648][ T579] usb 2-1: device descriptor read/64, error -71 [ 43.973926][ T858] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.002683][ T918] usb 1-1: Using ep0 maxpacket: 8 [ 44.009932][ T918] usb 1-1: config 5 has an invalid interface number: 114 but max is 2 [ 44.018244][ T918] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 44.027166][ T918] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 44.032658][ T579] usb 2-1: device descriptor read/64, error -71 [ 44.036242][ T918] usb 1-1: config 5 has no interface number 0 [ 44.049750][ T918] usb 1-1: Dual-Role OTG device on HNP port [ 44.055873][ T918] usb 1-1: New USB device found, idVendor=07d1, idProduct=3e02, bcdDevice=f1.49 [ 44.064925][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.073023][ T918] usb 1-1: Product: syz [ 44.077267][ T918] usb 1-1: Manufacturer: syz [ 44.081843][ T918] usb 1-1: SerialNumber: syz [ 44.092694][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 44.122690][ T858] usb 4-1: Using ep0 maxpacket: 32 [ 44.129065][ T858] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.137604][ T858] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.146346][ T858] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.155480][ T858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.165441][ T858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.175381][ T858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.188352][ T858] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.197413][ T858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.205964][ T858] usb 4-1: config 0 descriptor?? [ 44.244008][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.253879][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 44.262999][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.271006][ T9] usb 3-1: Product: syz [ 44.275335][ T9] usb 3-1: Manufacturer: syz [ 44.280020][ T9] usb 3-1: SerialNumber: syz [ 44.291764][ T918] usb 1-1: USB disconnect, device number 10 [ 44.292651][ T579] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.412467][ T858] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.427499][ T858] usb 4-1: USB disconnect, device number 7 [ 44.434092][ T579] usb 2-1: device descriptor read/64, error -71 [ 44.441117][ T858] usblp0: removed [ 44.487162][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 44.487178][ T36] audit: type=1400 audit(1790270835.889:291): avc: denied { create } for pid=1271 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 44.514166][ T36] audit: type=1400 audit(1790270835.889:292): avc: denied { cmd } for pid=1271 comm="iou-wrk-1272" path="socket:[10777]" dev="sockfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.544636][ T1277] tipc: Started in network mode [ 44.549877][ T1277] tipc: Node identity 62d99d959f36, cluster identity 4711 [ 44.557202][ T1277] tipc: Enabled bearer , priority 10 [ 44.568998][ T1272] netlink: 52 bytes leftover after parsing attributes in process `syz.2.287'. [ 44.614894][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.622336][ T9] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 44.637465][ T9] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 44.646304][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.657422][ T9] usb 3-1: USB disconnect, device number 17 [ 44.668703][ T993] udevd[993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.672678][ T579] usb 2-1: device descriptor read/64, error -71 [ 44.792777][ T579] usb usb2-port1: attempt power cycle [ 44.845016][ T1279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.854198][ T1279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.882692][ T918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.032654][ T918] usb 4-1: Using ep0 maxpacket: 32 [ 45.038898][ T918] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.047411][ T918] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.056108][ T918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.065187][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.074876][ T918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.084543][ T918] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.097619][ T918] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.106708][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.115289][ T918] usb 4-1: config 0 descriptor?? [ 45.143449][ T579] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.163965][ T579] usb 2-1: device descriptor read/8, error -71 [ 45.293903][ T579] usb 2-1: device descriptor read/8, error -71 [ 45.321722][ T918] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.337502][ T9] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 45.448043][ T1300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 45.458734][ T36] audit: type=1400 audit(1790270836.859:293): avc: denied { append } for pid=1299 comm="syz.2.294" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.517447][ T1306] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 45.525111][ T918] usb 4-1: USB disconnect, device number 8 [ 45.527070][ T36] audit: type=1400 audit(1790270836.929:294): avc: denied { read write } for pid=1263 comm="syz.3.285" name="lp0" dev="devtmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.552746][ T1306] tipc: Resetting bearer [ 45.560037][ T579] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.568963][ T918] usblp0: removed [ 45.572397][ T36] audit: type=1400 audit(1790270836.929:295): avc: denied { open } for pid=1263 comm="syz.3.285" path="/dev/usb/lp0" dev="devtmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.596604][ T36] audit: type=1400 audit(1790270836.929:296): avc: denied { mounton } for pid=1263 comm="syz.3.285" path="/86/mnt" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 45.619840][ T579] usb 2-1: device descriptor read/8, error -71 [ 45.628652][ T9] tipc: Node number set to 4260339093 [ 45.651086][ T1315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 45.667928][ T36] audit: type=1400 audit(1790270837.069:297): avc: denied { name_bind } for pid=1314 comm="syz.0.300" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.695827][ T1327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 45.727062][ T1315] ip6gretap0: entered promiscuous mode [ 45.733591][ T1315] ip6gretap0: entered allmulticast mode [ 45.753641][ T579] usb 2-1: device descriptor read/8, error -71 [ 45.862730][ T579] usb usb2-port1: unable to enumerate USB device [ 45.918284][ T1362] SELinux: Context system_u: is not valid (left unmapped). [ 45.929166][ T36] audit: type=1400 audit(1790270837.329:298): avc: denied { relabelto } for pid=1361 comm="syz.2.304" name="50" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 45.954251][ T36] audit: type=1400 audit(1790270837.329:299): avc: denied { associate } for pid=1361 comm="syz.2.304" name="50" dev="tmpfs" ino=279 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 45.992881][ T36] audit: type=1400 audit(1790270837.359:300): avc: denied { write } for pid=1361 comm="syz.2.304" name="50" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 46.163461][ T1405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 46.451559][ T1450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 46.701246][ T1507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 46.760722][ T1512] tipc: Started in network mode [ 46.766866][ T1512] tipc: Node identity 2000004, cluster identity 4711 [ 46.773642][ T1512] tipc: Node number set to 33554436 [ 47.023035][ T1552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 47.367114][ T1600] binfmt_misc: register: failed to install interpreter file ./file0 [ 47.871265][ T1711] tipc: Failed to remove unknown binding: 66,0,0/0:1085314312/1085314313 [ 47.886410][ T1711] tipc: Failed to remove unknown binding: 66,0,0/0:1085314312/1085314313 [ 47.950788][ T1716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 48.421905][ T1746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'. [ 48.622694][ T579] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.773713][ T579] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.788991][ T579] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 48.798983][ T579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.808256][ T579] usb 2-1: Product: syz [ 48.812501][ T579] usb 2-1: Manufacturer: syz [ 48.817673][ T579] usb 2-1: SerialNumber: syz [ 48.835396][ T579] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 48.841372][ T579] cdc_wdm 2-1:1.0: Unknown control protocol [ 49.252660][ T918] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 49.404268][ T918] usb 3-1: Using ep0 maxpacket: 8 [ 49.415285][ T918] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.429287][ T918] usb 3-1: config 179 has no interface number 0 [ 49.435758][ T918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 49.462636][ T918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 49.482686][ T918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.494069][ T918] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.509306][ T918] usb 3-1: config 179 interface 65 has no altsetting 0 [ 49.510401][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 49.510416][ T36] audit: type=1400 audit(1790270840.909:356): avc: denied { getattr } for pid=1821 comm="syz.3.470" path="/119/trace/trace" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 49.516229][ T918] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 49.516252][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.526395][ T1822] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 49.548491][ T918] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 49.583379][ T36] audit: type=1400 audit(1790270840.989:357): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.608498][ T36] audit: type=1400 audit(1790270840.989:358): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.632758][ T95] input input9: unable to receive magic message: -110 [ 49.647149][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.648786][ T36] audit: type=1400 audit(1790270841.049:359): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=527 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.656060][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.693145][ T95] input input9: unable to receive magic message: -32 [ 49.707335][ T1837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.723659][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.738121][ T1837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.746933][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.763023][ T36] audit: type=1400 audit(1790270841.169:360): avc: denied { write } for pid=1803 comm="syz.2.463" name="file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.822662][ T579] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 49.983728][ T579] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.997389][ T579] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 50.006658][ T579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.016425][ T579] usb 1-1: Product: syz [ 50.020695][ T579] usb 1-1: Manufacturer: syz [ 50.025579][ T579] usb 1-1: SerialNumber: syz [ 50.031000][ T579] usb 1-1: config 0 descriptor?? [ 50.282652][ T579] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.360389][ T45] usb 1-1: USB disconnect, device number 11 [ 50.432642][ T579] usb 4-1: Using ep0 maxpacket: 32 [ 50.439301][ T579] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.447814][ T579] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 50.460367][ T579] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 50.469590][ T579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.477626][ T579] usb 4-1: Product: syz [ 50.481874][ T579] usb 4-1: Manufacturer: syz [ 50.486654][ T579] usb 4-1: SerialNumber: syz [ 50.694238][ T1855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.702819][ T1855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.713776][ T579] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.720724][ T579] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 50.731120][ T579] usb 4-1: USB disconnect, device number 9 [ 50.765971][ T993] udevd[993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.935769][ T36] audit: type=1400 audit(1790270842.339:361): avc: denied { mounton } for pid=1874 comm="syz.0.478" path="/166/sys/kernel/tracing" dev="sysfs" ino=1495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.968628][ T1877] __nla_validate_parse: 3 callbacks suppressed [ 50.968646][ T1877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 51.262662][ T579] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.385574][ T858] usb 2-1: USB disconnect, device number 16 [ 51.416582][ T579] usb 1-1: config index 0 descriptor too short (expected 770, got 36) [ 51.424845][ T579] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 51.435281][ T579] usb 1-1: config 3 has no interfaces? [ 51.440765][ T579] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 51.451762][ T579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.462643][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.595557][ T1900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'. [ 51.616053][ T36] audit: type=1400 audit(1790270843.019:362): avc: denied { write } for pid=1901 comm="syz.1.490" name="file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.618415][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.638579][ T36] audit: type=1400 audit(1790270843.019:363): avc: denied { open } for pid=1901 comm="syz.1.490" path="/88/file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.660541][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 51.681611][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 51.690978][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.702664][ T9] usb 4-1: Product: syz [ 51.708956][ T9] usb 4-1: Manufacturer: syz [ 51.712767][ T1909] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 51.713654][ T9] usb 4-1: SerialNumber: syz [ 51.726813][ T36] audit: type=1400 audit(1790270843.129:364): avc: denied { create } for pid=1908 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.752755][ T1909] x86/PAT: syz.1.492:1909 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 51.940676][ T317] usb 3-1: USB disconnect, device number 18 [ 51.946659][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 51.953816][ T1891] FAULT_INJECTION: forcing a failure. [ 51.953816][ T1891] name failslab, interval 1, probability 0, space 0, times 0 [ 51.958510][ T36] audit: type=1400 audit(1790270843.359:365): avc: denied { write } for pid=1916 comm="syz.1.495" name="idProduct" dev="configfs" ino=14616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 51.967690][ T1891] CPU: 0 UID: 0 PID: 1891 Comm: syz.3.485 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 51.967717][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.967729][ T1891] Call Trace: [ 51.967734][ T1891] [ 51.967742][ T1891] __dump_stack+0x21/0x30 [ 51.967771][ T1891] dump_stack_lvl+0x140/0x1c0 [ 51.967793][ T1891] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.967820][ T1891] ? preempt_schedule+0xc5/0xe0 [ 51.967840][ T1891] ? __cfi_preempt_schedule+0x10/0x10 [ 51.967858][ T1891] ? _raw_spin_lock+0x92/0x120 [ 51.967873][ T1891] ? __cfi__raw_spin_lock+0x10/0x10 [ 51.967888][ T1891] dump_stack+0x19/0x20 [ 51.967909][ T1891] should_fail_ex+0x3c2/0x510 [ 51.967929][ T1891] ? raw_queue_event+0x94/0x3a0 [ 51.967946][ T1891] should_failslab+0xac/0x100 [ 51.967970][ T1891] __kmalloc_noprof+0x69/0x510 [ 51.967990][ T1891] ? raw_queue_event+0x94/0x3a0 [ 51.968010][ T1891] raw_queue_event+0x94/0x3a0 [ 51.968028][ T1891] ? __cfi_dummy_pullup+0x10/0x10 [ 51.968046][ T1891] gadget_disconnect+0x4a/0x90 [ 51.968062][ T1891] usb_gadget_disconnect_locked+0x25d/0x400 [ 51.968082][ T1891] gadget_unbind_driver+0xaf/0x3f0 [ 51.968127][ T1891] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 51.968149][ T1891] device_release_driver_internal+0x4aa/0x830 [ 51.968170][ T1891] driver_detach+0x1f5/0x2d0 [ 51.968187][ T1891] bus_remove_driver+0x254/0x2b0 [ 51.968211][ T1891] driver_unregister+0x79/0xb0 [ 51.968230][ T1891] usb_gadget_unregister_driver+0x52/0x80 [ 51.968251][ T1891] raw_release+0xdb/0x280 [ 51.968267][ T1891] ? __cfi_raw_release+0x10/0x10 [ 51.968283][ T1891] __fput+0x208/0xa30 [ 51.968306][ T1891] __fput_sync+0x4a/0x70 [ 51.968327][ T1891] __se_sys_close+0x172/0x1f0 [ 51.968344][ T1891] __x64_sys_close+0x3c/0x60 [ 51.968359][ T1891] x64_sys_call+0x2560/0x2ee0 [ 51.968376][ T1891] do_syscall_64+0x57/0xf0 [ 51.968393][ T1891] ? clear_bhb_loop+0x50/0xa0 [ 51.968414][ T1891] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.968434][ T1891] RIP: 0033:0x7f6edcb9e159 [ 51.968451][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.968466][ T1891] RSP: 002b:00007f6edda70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.968486][ T1891] RAX: ffffffffffffffda RBX: 00007f6edce25fa0 RCX: 00007f6edcb9e159 [ 51.968499][ T1891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.968510][ T1891] RBP: 00007f6edcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 51.968522][ T1891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.968533][ T1891] R13: 00007f6edce26038 R14: 00007f6edce25fa0 R15: 00007ffc7c501fb8 [ 51.968549][ T1891] [ 51.979574][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.998210][ T317] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 52.002295][ T1891] raw-gadget.4 gadget.3: failed to queue disconnect event [ 52.286078][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 52.305931][ T9] usb 4-1: USB disconnect, device number 10 [ 52.318381][ T993] udevd[993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.357276][ T1934] SELinux: policydb version -1802646256 does not match my version range 15-33 [ 52.366280][ T1934] SELinux: failed to load policy [ 52.387432][ T1936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 52.984540][ T1975] overlayfs: missing 'lowerdir' [ 53.065599][ T2012] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 53.212730][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 53.328078][ T2028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6929 sclass=netlink_route_socket pid=2028 comm=syz.3.521 [ 53.385524][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.396660][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 53.408154][ T2032] random: crng reseeded on system resumption [ 53.408484][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.429324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.442466][ T9] usb 2-1: Product: syz [ 53.447095][ T9] usb 2-1: Manufacturer: syz [ 53.451787][ T9] usb 2-1: SerialNumber: syz [ 53.459476][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 53.648765][ T2042] FAULT_INJECTION: forcing a failure. [ 53.648765][ T2042] name failslab, interval 1, probability 0, space 0, times 0 [ 53.662773][ T1971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 53.670037][ T2042] CPU: 1 UID: 0 PID: 2042 Comm: syz.2.529 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 53.670064][ T2042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.670074][ T2042] Call Trace: [ 53.670080][ T2042] [ 53.670087][ T2042] __dump_stack+0x21/0x30 [ 53.670115][ T2042] dump_stack_lvl+0x140/0x1c0 [ 53.670138][ T2042] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.670160][ T2042] ? avc_has_perm+0x155/0x240 [ 53.670182][ T2042] ? __cfi_avc_has_perm+0x10/0x10 [ 53.670202][ T2042] dump_stack+0x19/0x20 [ 53.670220][ T2042] should_fail_ex+0x3c2/0x510 [ 53.670239][ T2042] should_failslab+0xac/0x100 [ 53.670258][ T2042] __kmalloc_cache_noprof+0x41/0x470 [ 53.670276][ T2042] ? vhost_task_create+0x12c/0x3f0 [ 53.670295][ T2042] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 53.670315][ T2042] vhost_task_create+0x12c/0x3f0 [ 53.670333][ T2042] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 53.670353][ T2042] ? __cfi_vhost_task_create+0x10/0x10 [ 53.670371][ T2042] ? __cfi_vhost_task_fn+0x10/0x10 [ 53.670387][ T2042] ? __kasan_check_write+0x18/0x20 [ 53.670405][ T2042] ? mutex_lock+0x97/0x1d0 [ 53.670425][ T2042] ? __cfi_mutex_lock+0x10/0x10 [ 53.670451][ T2042] ? kernel_text_address+0xa9/0xe0 [ 53.670474][ T2042] kvm_mmu_post_init_vm+0x161/0x300 [ 53.670497][ T2042] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 53.670519][ T2042] ? _parse_integer_limit+0x195/0x1e0 [ 53.670539][ T2042] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 53.670561][ T2042] ? kstrtoull+0x13b/0x1e0 [ 53.670579][ T2042] ? kstrtouint+0x78/0xf0 [ 53.670597][ T2042] ? ioctl_has_perm+0x1bc/0x500 [ 53.670613][ T2042] ? __asan_memcpy+0x5a/0x80 [ 53.670629][ T2042] ? ioctl_has_perm+0x408/0x500 [ 53.670645][ T2042] ? has_cap_mac_admin+0xd0/0xd0 [ 53.670661][ T2042] ? __kasan_check_write+0x18/0x20 [ 53.670676][ T2042] ? mutex_lock_killable+0x97/0x1d0 [ 53.670695][ T2042] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.670713][ T2042] ? proc_fail_nth_write+0x184/0x220 [ 53.670736][ T2042] kvm_vcpu_ioctl+0xa43/0x1000 [ 53.670752][ T2042] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.670767][ T2042] ? __cfi_vfs_write+0x10/0x10 [ 53.670785][ T2042] ? __kasan_check_write+0x18/0x20 [ 53.670801][ T2042] ? mutex_unlock+0x90/0x240 [ 53.670818][ T2042] ? __cfi_mutex_unlock+0x10/0x10 [ 53.670837][ T2042] ? __fget_files+0x2bc/0x330 [ 53.670856][ T2042] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.670876][ T2042] ? security_file_ioctl+0x3e/0x110 [ 53.670893][ T2042] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 53.670908][ T2042] __se_sys_ioctl+0x126/0x1b0 [ 53.670930][ T2042] __x64_sys_ioctl+0x7f/0xa0 [ 53.670948][ T2042] x64_sys_call+0x1878/0x2ee0 [ 53.670965][ T2042] do_syscall_64+0x57/0xf0 [ 53.670981][ T2042] ? clear_bhb_loop+0x50/0xa0 [ 53.671004][ T2042] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.671022][ T2042] RIP: 0033:0x7f332559e159 [ 53.671036][ T2042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.671050][ T2042] RSP: 002b:00007f3323ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.671068][ T2042] RAX: ffffffffffffffda RBX: 00007f3325825fa0 RCX: 00007f332559e159 [ 53.671080][ T2042] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 53.671090][ T2042] RBP: 00007f3323ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.671100][ T2042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.671110][ T2042] R13: 00007f3325826038 R14: 00007f3325825fa0 R15: 00007ffc6143b098 [ 53.671125][ T2042] [ 53.689609][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.032340][ T2040] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.035560][ T317] usb 1-1: USB disconnect, device number 12 [ 54.046041][ T2040] bridge_slave_0: entered allmulticast mode [ 54.052563][ T2040] bridge_slave_0: entered promiscuous mode [ 54.061327][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.072664][ T2040] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.080194][ T2040] bridge_slave_1: entered allmulticast mode [ 54.093351][ T2040] bridge_slave_1: entered promiscuous mode [ 54.168594][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.175684][ T2040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.183000][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.190030][ T2040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.218638][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.227357][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.237312][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.244413][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.254170][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.261242][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.318390][ T2040] veth0_vlan: entered promiscuous mode [ 54.340047][ T2040] veth1_macvtap: entered promiscuous mode [ 54.573313][ T317] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 54.723505][ T317] usb 1-1: not running at top speed; connect to a high speed hub [ 54.732215][ T317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.744683][ T317] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 54.754178][ T317] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 54.763165][ T317] usb 1-1: Product: syz [ 54.767596][ T317] usb 1-1: Manufacturer: syz [ 54.775442][ T317] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 54.993247][ T317] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 55.013252][ T317] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 55.031357][ T317] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 55.048933][ T317] usb 1-1: USB disconnect, device number 13 [ 55.441739][ T2079] FAULT_INJECTION: forcing a failure. [ 55.441739][ T2079] name failslab, interval 1, probability 0, space 0, times 0 [ 55.454681][ T2079] CPU: 0 UID: 0 PID: 2079 Comm: syz.4.539 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 55.454711][ T2079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.454722][ T2079] Call Trace: [ 55.454728][ T2079] [ 55.454735][ T2079] __dump_stack+0x21/0x30 [ 55.454762][ T2079] dump_stack_lvl+0x140/0x1c0 [ 55.454784][ T2079] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.454809][ T2079] dump_stack+0x19/0x20 [ 55.454829][ T2079] should_fail_ex+0x3c2/0x510 [ 55.454849][ T2079] should_failslab+0xac/0x100 [ 55.454870][ T2079] kmem_cache_alloc_node_noprof+0x45/0x420 [ 55.454889][ T2079] ? dup_task_struct+0xc1/0xd80 [ 55.454914][ T2079] ? kasan_save_alloc_info+0x3a/0x50 [ 55.454930][ T2079] ? __kasan_kmalloc+0x96/0xb0 [ 55.454958][ T2079] ? __kmalloc_cache_noprof+0x23c/0x470 [ 55.454981][ T2079] dup_task_struct+0xc1/0xd80 [ 55.455001][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455018][ T2079] ? _raw_spin_lock_irq+0x93/0x120 [ 55.455036][ T2079] ? copy_process+0x3350/0x3350 [ 55.455056][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455074][ T2079] copy_process+0x57c/0x3350 [ 55.455098][ T2079] ? kasan_save_alloc_info+0x3a/0x50 [ 55.455114][ T2079] ? __cfi_copy_process+0x10/0x10 [ 55.455134][ T2079] ? __kmalloc_cache_noprof+0x23c/0x470 [ 55.455154][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455171][ T2079] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 55.455192][ T2079] vhost_task_create+0x1f7/0x3f0 [ 55.455211][ T2079] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 55.455233][ T2079] ? __cfi_vhost_task_create+0x10/0x10 [ 55.455252][ T2079] ? __cfi_vhost_task_fn+0x10/0x10 [ 55.455270][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455287][ T2079] ? mutex_lock+0x97/0x1d0 [ 55.455307][ T2079] ? __cfi_mutex_lock+0x10/0x10 [ 55.455325][ T2079] ? kernel_text_address+0xa9/0xe0 [ 55.455353][ T2079] kvm_mmu_post_init_vm+0x161/0x300 [ 55.455378][ T2079] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 55.455401][ T2079] ? _parse_integer_limit+0x195/0x1e0 [ 55.455422][ T2079] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.455444][ T2079] ? kstrtoull+0x13b/0x1e0 [ 55.455463][ T2079] ? kstrtouint+0x78/0xf0 [ 55.455481][ T2079] ? ioctl_has_perm+0x1bc/0x500 [ 55.455499][ T2079] ? __asan_memcpy+0x5a/0x80 [ 55.455517][ T2079] ? ioctl_has_perm+0x408/0x500 [ 55.455536][ T2079] ? has_cap_mac_admin+0xd0/0xd0 [ 55.455554][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455570][ T2079] ? mutex_lock_killable+0x97/0x1d0 [ 55.455591][ T2079] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.455611][ T2079] ? proc_fail_nth_write+0x184/0x220 [ 55.455637][ T2079] kvm_vcpu_ioctl+0xa43/0x1000 [ 55.455657][ T2079] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.455675][ T2079] ? __cfi_vfs_write+0x10/0x10 [ 55.455693][ T2079] ? __kasan_check_write+0x18/0x20 [ 55.455710][ T2079] ? mutex_unlock+0x90/0x240 [ 55.455729][ T2079] ? __cfi_mutex_unlock+0x10/0x10 [ 55.455755][ T2079] ? __fget_files+0x2bc/0x330 [ 55.455776][ T2079] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.455798][ T2079] ? security_file_ioctl+0x3e/0x110 [ 55.455816][ T2079] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.455832][ T2079] __se_sys_ioctl+0x126/0x1b0 [ 55.455854][ T2079] __x64_sys_ioctl+0x7f/0xa0 [ 55.455874][ T2079] x64_sys_call+0x1878/0x2ee0 [ 55.455891][ T2079] do_syscall_64+0x57/0xf0 [ 55.455907][ T2079] ? clear_bhb_loop+0x50/0xa0 [ 55.455927][ T2079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.455955][ T2079] RIP: 0033:0x7f182df9e159 [ 55.455972][ T2079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.455988][ T2079] RSP: 002b:00007f182edc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.456008][ T2079] RAX: ffffffffffffffda RBX: 00007f182e225fa0 RCX: 00007f182df9e159 [ 55.456022][ T2079] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 55.456034][ T2079] RBP: 00007f182edc4090 R08: 0000000000000000 R09: 0000000000000000 [ 55.456045][ T2079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.456056][ T2079] R13: 00007f182e226038 R14: 00007f182e225fa0 R15: 00007ffc7ea90148 [ 55.456072][ T2079] [ 56.011666][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 56.011690][ T36] audit: type=1400 audit(1790270847.409:376): avc: denied { execute } for pid=2082 comm="syz.4.541" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.078784][ T2090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 56.112115][ T9] cdc_mbim 2-1:1.0: bind() failure [ 56.189965][ T2095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 56.201925][ T2100] FAULT_INJECTION: forcing a failure. [ 56.201925][ T2100] name failslab, interval 1, probability 0, space 0, times 0 [ 56.215826][ T2098] ------------[ cut here ]------------ [ 56.221305][ T2098] skb_assert_len [ 56.232217][ T2098] WARNING: CPU: 1 PID: 2098 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 56.242410][ T2098] Modules linked in: [ 56.246370][ T2098] CPU: 1 UID: 0 PID: 2098 Comm: syz.4.546 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 56.257973][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.268088][ T2098] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 56.273957][ T2098] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 4d d0 04 fd c6 05 65 ba 62 03 01 48 c7 c7 a0 28 8b 86 48 c7 c6 2d bc 19 87 e8 e3 9f 81 fc <0f> 0b 80 3d 4a ba 62 03 01 0f 84 af e3 ff ff e8 1f d0 04 fd c6 05 [ 56.293644][ T2098] RSP: 0018:ffffc9001021f500 EFLAGS: 00010246 [ 56.299732][ T2098] RAX: 331dcdabbc70fa00 RBX: ffff8881155306b0 RCX: ffff88811b632600 [ 56.303659][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 56.307845][ T2098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 56.323632][ T2098] RBP: ffffc9001021f7e0 R08: 0000000000000003 R09: 0000000000000004 [ 56.331970][ T2098] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff11022aa60ca [ 56.332936][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 56.340034][ T2098] R13: ffff888115530640 R14: 0000000000000000 R15: dffffc0000000000 [ 56.352781][ T2100] CPU: 0 UID: 0 PID: 2100 Comm: syz.0.547 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 56.352813][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.352833][ T2100] Call Trace: [ 56.352840][ T2100] [ 56.352847][ T2100] __dump_stack+0x21/0x30 [ 56.352888][ T2100] dump_stack_lvl+0x140/0x1c0 [ 56.352910][ T2100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.352931][ T2100] ? bpf_lsm_file_permission+0xd/0x20 [ 56.352954][ T2100] ? vfs_write+0xbcf/0xfd0 [ 56.352971][ T2100] dump_stack+0x19/0x20 [ 56.352992][ T2100] should_fail_ex+0x3c2/0x510 [ 56.353012][ T2100] should_failslab+0xac/0x100 [ 56.353033][ T2100] kmem_cache_alloc_noprof+0x42/0x410 [ 56.353051][ T2100] ? getname_flags+0xcc/0x6b0 [ 56.353070][ T2100] getname_flags+0xcc/0x6b0 [ 56.353088][ T2100] user_path_at+0x2b/0x60 [ 56.353108][ T2100] __x64_sys_umount+0xfa/0x180 [ 56.353124][ T2100] ? __cfi___x64_sys_umount+0x10/0x10 [ 56.353140][ T2100] ? __kasan_check_read+0x15/0x20 [ 56.353158][ T2100] x64_sys_call+0x2ab8/0x2ee0 [ 56.353174][ T2100] do_syscall_64+0x57/0xf0 [ 56.353190][ T2100] ? clear_bhb_loop+0x50/0xa0 [ 56.353210][ T2100] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.353229][ T2100] RIP: 0033:0x7fa86279e159 [ 56.353249][ T2100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.353263][ T2100] RSP: 002b:00007fa8611e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.353283][ T2100] RAX: ffffffffffffffda RBX: 00007fa862a25fa0 RCX: 00007fa86279e159 [ 56.353296][ T2100] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 56.353307][ T2100] RBP: 00007fa8611e3090 R08: 0000000000000000 R09: 0000000000000000 [ 56.353318][ T2100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.353329][ T2100] R13: 00007fa862a26038 R14: 00007fa862a25fa0 R15: 00007ffeda77d5d8 [ 56.353344][ T2100] [ 56.366400][ T9] usb 2-1: USB disconnect, device number 17 [ 56.367676][ T2098] FS: 00007f182edc46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.413914][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.417014][ T2098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.424913][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.426931][ T2098] CR2: 0000200000000200 CR3: 00000001190c8000 CR4: 00000000003526b0 [ 56.442109][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.445214][ T2098] Call Trace: [ 56.445222][ T2098] [ 56.445230][ T2098] ? __kasan_check_write+0x18/0x20 [ 56.462911][ T2103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.464709][ T2098] ? alloc_skb_with_frags+0x80b/0x8b0 [ 56.473427][ T2103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.475296][ T2098] ? __cfi___dev_queue_xmit+0x10/0x10 [ 56.488457][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.499308][ T2098] ? __kasan_check_write+0x18/0x20 [ 56.652667][ T62] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 56.656991][ T2098] ? skb_set_owner_w+0x280/0x3d0 [ 56.669390][ T2098] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 56.674827][ T2098] ? packet_parse_headers+0x7f0/0xb10 [ 56.680228][ T2098] ? packet_parse_headers+0x883/0xb10 [ 56.685645][ T2098] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 56.691388][ T2098] ? skb_setup_tx_timestamp+0x210/0x210 [ 56.696990][ T2098] packet_xmit+0x76/0x360 [ 56.701338][ T2098] ? is_vmalloc_addr+0x11/0x40 [ 56.706164][ T2098] packet_sendmsg+0x228b/0x56b0 [ 56.711040][ T2098] ? avc_has_perm_noaudit+0x26b/0x360 [ 56.716458][ T2098] ? __cfi_packet_sendmsg+0x10/0x10 [ 56.721687][ T2098] ? avc_has_perm+0x155/0x240 [ 56.726413][ T2098] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 56.731717][ T2098] ? security_socket_sendmsg+0x3d/0x100 [ 56.737328][ T2098] ? __cfi_packet_sendmsg+0x10/0x10 [ 56.742554][ T2098] sock_write_iter+0x445/0x490 [ 56.747362][ T2098] ? __cfi_sock_write_iter+0x10/0x10 [ 56.752697][ T2098] ? __cfi_futex_wait+0x10/0x10 [ 56.757569][ T2098] ? selinux_socket_setsockopt+0x324/0x3d0 [ 56.763444][ T2098] vfs_write+0x762/0xfd0 [ 56.767703][ T2098] ? __cfi_vfs_write+0x10/0x10 [ 56.772483][ T2098] ksys_write+0x145/0x260 [ 56.776876][ T2098] ? xfd_validate_state+0x68/0x140 [ 56.781998][ T2098] ? __cfi_ksys_write+0x10/0x10 [ 56.786910][ T2098] ? __kasan_check_write+0x18/0x20 [ 56.792030][ T2098] ? fpregs_restore_userregs+0x11c/0x260 [ 56.797718][ T2098] __x64_sys_write+0x7f/0x90 [ 56.802317][ T2098] x64_sys_call+0x271c/0x2ee0 [ 56.802665][ T62] usb 5-1: device descriptor read/64, error -71 [ 56.807064][ T2098] do_syscall_64+0x57/0xf0 [ 56.817711][ T2098] ? clear_bhb_loop+0x50/0xa0 [ 56.822417][ T2098] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.828362][ T2098] RIP: 0033:0x7f182df9e159 [ 56.832808][ T2098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.852470][ T2098] RSP: 002b:00007f182edc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.860938][ T2098] RAX: ffffffffffffffda RBX: 00007f182e225fa0 RCX: 00007f182df9e159 [ 56.868957][ T2098] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 56.877135][ T2098] RBP: 00007f182e03506b R08: 0000000000000000 R09: 0000000000000000 [ 56.885199][ T2098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.893205][ T2098] R13: 00007f182e226038 R14: 00007f182e225fa0 R15: 00007ffc7ea90148 [ 56.901197][ T2098] [ 56.904267][ T2098] ---[ end trace 0000000000000000 ]--- [ 56.911366][ T2098] skb len=0 headroom=128 headlen=0 tailroom=256 [ 56.911366][ T2098] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 56.911366][ T2098] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 56.911366][ T2098] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 56.911366][ T2098] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 56.911366][ T2098] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 56.911366][ T2098] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 56.958348][ T2098] dev name=tunl0 feat=0x00000006401d4869 [ 56.964019][ T2098] sk family=17 type=2 proto=0 [ 57.072702][ T62] usb 5-1: device descriptor read/64, error -71 [ 57.312666][ T62] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 57.462656][ T62] usb 5-1: device descriptor read/64, error -71 [ 57.702658][ T62] usb 5-1: device descriptor read/64, error -71 [ 57.823231][ T62] usb usb5-port1: attempt power cycle [ 58.172979][ T62] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 58.213657][ T62] usb 5-1: device descriptor read/8, error -71 [ 58.343604][ T62] usb 5-1: device descriptor read/8, error -71 [ 58.582673][ T62] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 58.613644][ T62] usb 5-1: device descriptor read/8, error -71 [ 58.743615][ T62] usb 5-1: device descriptor read/8, error -71 [ 58.852760][ T62] usb usb5-port1: unable to enumerate USB device