last executing test programs: 2.973954312s ago: executing program 3 (id=413): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x44003b00, 0x0, 0x0) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000e00)="832fa575f3f53abd97944443ab60e3adbaba37296ff4bc91", 0x18}, {0x0}], 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.445811046s ago: executing program 3 (id=427): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.432021456s ago: executing program 3 (id=428): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.367320449s ago: executing program 3 (id=429): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000740)={0x20, 0xc, 0x2, "3edf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 1.207236799s ago: executing program 2 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xe, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.021956614s ago: executing program 0 (id=441): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.009374314s ago: executing program 0 (id=442): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000440)={0x14, {{0x29, 0x0, 0x3e000000, @mcast2, 0x40000005}}}, 0x88) 951.320066ms ago: executing program 0 (id=443): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x5, 0x180, 0x4, 0x0, 0xc, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0xffffffffffffffff, 0x45, 0xfffffffffffffffd, 0xbdb], 0x54000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 894.347867ms ago: executing program 0 (id=444): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x3}) read(r0, &(0x7f0000000740)=""/377, 0x179) 879.923137ms ago: executing program 0 (id=445): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005040)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="1c9647ec520dd0b5551dbbbc244f1e73ec7a4c168f0e927802f771b0bdde37386487d03ac3f31c2f4d1bc670ea68e82d443aa82fadc1b9e1e6bf2a551e21a175735efd78543abd3001c2188178edf0107ac780ffcbcfa74c0c8a436e1dd1f9ee5ff19b787d", 0x65}], 0x1}}], 0x1, 0x8000) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000300)=0x7fff, 0x4) 528.116807ms ago: executing program 1 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socket(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)) 513.186987ms ago: executing program 1 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10000005836, 0x8, 0x0, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x8001, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xb, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 411.28911ms ago: executing program 1 (id=452): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0xfffffffffffffff8, {0x1, 0x0, 0x0, '\x00', {0x800, 0x0, 0xae0, 0x2, r2, 0x0, 0xc000, '\x00', 0x6, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0xfffffffffffffffc, 0xc}, {0x1ffffff, 0x20000d}, {0x1000000001, 0xa00}, 0x40002, 0x574, 0x9d7, 0xbb5}}}}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) 335.972772ms ago: executing program 1 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2014010, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 327.685232ms ago: executing program 2 (id=454): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) fchown(0xffffffffffffffff, 0x0, 0xee01) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, 0x0) 259.453944ms ago: executing program 2 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 259.243044ms ago: executing program 2 (id=456): mount$9p_fd(0x0, 0x0, 0x0, 0x4a404, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_client}, {@nodevmap}, {@cache_readahead}, {@noxattr}, {@nodevmap}], [{@seclabel}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 225.377105ms ago: executing program 1 (id=457): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 207.078145ms ago: executing program 2 (id=458): r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) setresuid(0x0, 0xee00, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000580), 0x0) 155.057347ms ago: executing program 3 (id=459): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x2}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 133.289447ms ago: executing program 2 (id=460): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006}, &(0x7f0000ffe000), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/92, 0x5c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001d80)={0x2020}, 0x2020) 121.085437ms ago: executing program 3 (id=461): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\x00', 0x8, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[@hopopts={0x32}]}}}}}}, 0x42) 75.332959ms ago: executing program 1 (id=462): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0xd1fa, 0x80, 0x1, 0x343}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc6c, 0x4, 0x3, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbba5, 0x1000, 0x0, 0x3c0, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87b6, 0x0, 0xae2, 0x2a1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd787, 0x200, 0x1, 0x5b}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xffff}, 0x0, r6, '\x00', {0x3, 0x438, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) syz_ublk_setup_queues(r8, r7, &(0x7f00000003c0)={0x0, 0x652d, 0x400, 0x2, 0x37, 0x0, r11}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70e5, 0x8000, 0x0, 0x13e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e9f, 0x100, 0x2, 0x86, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce43, 0x200, 0x1, 0x361, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8db8, 0x10000, 0x1, 0x23, 0x0, r12}}], 0x4, &(0x7f0000003040)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x101}, 0x0, r13, '\x00', {0x1, 0xb00, 0x0, 0x0}}, &(0x7f00000030c0)) pread64$ublk_ch(r14, 0x0, 0x0, 0x40) 0s ago: executing program 0 (id=463): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r0 = userfaultfd(0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 30.950014][ T36] audit: type=1400 audit(1785907359.140:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.953402][ T287] cgroup: Unknown subsys name 'net' [ 30.972701][ T36] audit: type=1400 audit(1785907359.140:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.000206][ T36] audit: type=1400 audit(1785907359.180:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.000760][ T287] cgroup: Unknown subsys name 'devices' [ 31.126440][ T287] cgroup: Unknown subsys name 'hugetlb' [ 31.132092][ T287] cgroup: Unknown subsys name 'rlimit' [ 31.227166][ T36] audit: type=1400 audit(1785907359.420:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.250375][ T36] audit: type=1400 audit(1785907359.420:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.275385][ T36] audit: type=1400 audit(1785907359.420:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.286779][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.307402][ T36] audit: type=1400 audit(1785907359.510:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.332835][ T36] audit: type=1400 audit(1785907359.510:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.334009][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.358906][ T36] audit: type=1400 audit(1785907359.520:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.392682][ T36] audit: type=1400 audit(1785907359.520:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.642620][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.649852][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.657081][ T295] bridge_slave_0: entered allmulticast mode [ 32.663360][ T295] bridge_slave_0: entered promiscuous mode [ 32.676301][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.683470][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.690652][ T294] bridge_slave_0: entered allmulticast mode [ 32.697018][ T294] bridge_slave_0: entered promiscuous mode [ 32.703529][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.710641][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.717753][ T295] bridge_slave_1: entered allmulticast mode [ 32.723981][ T295] bridge_slave_1: entered promiscuous mode [ 32.731918][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.739002][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.746114][ T294] bridge_slave_1: entered allmulticast mode [ 32.752356][ T294] bridge_slave_1: entered promiscuous mode [ 32.788025][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.795144][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.802222][ T297] bridge_slave_0: entered allmulticast mode [ 32.808688][ T297] bridge_slave_0: entered promiscuous mode [ 32.818744][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.825893][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.832980][ T297] bridge_slave_1: entered allmulticast mode [ 32.839311][ T297] bridge_slave_1: entered promiscuous mode [ 32.867801][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.874913][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.881983][ T296] bridge_slave_0: entered allmulticast mode [ 32.888486][ T296] bridge_slave_0: entered promiscuous mode [ 32.895116][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.902167][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.909351][ T296] bridge_slave_1: entered allmulticast mode [ 32.915695][ T296] bridge_slave_1: entered promiscuous mode [ 33.043368][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.050560][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.057906][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.064965][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.084041][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.091153][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.098503][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.105564][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.135201][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.142295][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.149636][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.156725][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.182783][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.189911][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.197265][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.204361][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.218954][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.226403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.233673][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.241557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.248875][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.256485][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.263770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.271099][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.286168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.293365][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.306249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.313400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.333646][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.340778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.348531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.355613][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.381327][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.388410][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.398183][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.405286][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.435290][ T295] veth0_vlan: entered promiscuous mode [ 33.444821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.451988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.459562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.466646][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.486131][ T294] veth0_vlan: entered promiscuous mode [ 33.502455][ T294] veth1_macvtap: entered promiscuous mode [ 33.516748][ T295] veth1_macvtap: entered promiscuous mode [ 33.542065][ T296] veth0_vlan: entered promiscuous mode [ 33.556199][ T297] veth0_vlan: entered promiscuous mode [ 33.576171][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.596627][ T296] veth1_macvtap: entered promiscuous mode [ 33.603124][ T297] veth1_macvtap: entered promiscuous mode [ 33.634406][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.676787][ T316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.755877][ T322] syzkaller1: entered promiscuous mode [ 33.761420][ T322] syzkaller1: entered allmulticast mode [ 34.134224][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.257262][ T357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 34.281344][ T357] kvm: kvm [356]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 34.290514][ T357] kvm: kvm [356]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 34.301948][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 34.312181][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.331385][ T63] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 34.340773][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.356175][ T63] usb 1-1: config 0 descriptor?? [ 34.500268][ T378] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 34.529916][ T382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.557919][ T382] team_slave_1: entered promiscuous mode [ 34.563742][ T382] team_slave_1: entered allmulticast mode [ 34.769987][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.784156][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.801243][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.814132][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.821101][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.829252][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.836355][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.843268][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.850506][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.857584][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.864632][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.871520][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.880634][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.887837][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.894957][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.901905][ T63] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 34.909377][ T63] wacom 0003:056A:00B4.0001: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 34.923658][ T63] wacom 0003:056A:00B4.0001: hidraw0: USB HID v0.02 Device [HID 056a:00b4] on usb-dummy_hcd.0-1/input0 [ 34.938278][ T63] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B4.0001/input/input4 [ 34.982091][ T63] usb 1-1: USB disconnect, device number 2 [ 35.224135][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.333329][ T436] syzkaller0: entered promiscuous mode [ 35.338890][ T436] syzkaller0: entered allmulticast mode [ 35.392251][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 35.401617][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.413274][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.423633][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.432762][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.441803][ T9] usb 2-1: config 0 descriptor?? [ 35.459848][ T9] hub 2-1:0.0: USB hub found [ 35.651424][ T9] hub 2-1:0.0: 1 port detected [ 35.755641][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.869267][ T471] ======================================================= [ 35.869267][ T471] WARNING: The mand mount option has been deprecated and [ 35.869267][ T471] and is ignored by this kernel. Remove the mand [ 35.869267][ T471] option from the mount to silence this warning. [ 35.869267][ T471] ======================================================= [ 35.934154][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 35.942062][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.953608][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.963966][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.977404][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.986775][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.998048][ T45] usb 3-1: config 0 descriptor?? [ 36.284336][ T10] hub 2-1:0.0: activate --> -90 [ 36.413613][ T45] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.428230][ T45] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 36.516450][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input7 [ 36.534044][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 36.534061][ T36] audit: type=1400 audit(1785907364.720:164): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.549568][ T45] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 36.615898][ T45] usb 3-1: USB disconnect, device number 2 [ 36.636772][ T36] audit: type=1400 audit(1785907364.720:165): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.658834][ T478] fido_id[478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 36.706742][ T31] usb 2-1: USB disconnect, device number 2 [ 37.043991][ T36] audit: type=1400 audit(1785907365.240:166): avc: denied { map } for pid=489 comm="syz.0.62" path="socket:[5298]" dev="sockfs" ino=5298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.067191][ T492] syzkaller1: entered promiscuous mode [ 37.072772][ T492] syzkaller1: entered allmulticast mode [ 37.093793][ T36] audit: type=1400 audit(1785907365.270:167): avc: denied { read } for pid=489 comm="syz.0.62" path="socket:[5298]" dev="sockfs" ino=5298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.135062][ T36] audit: type=1400 audit(1785907365.330:168): avc: denied { append } for pid=489 comm="syz.0.62" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.136440][ T490] __vm_enough_memory: pid: 490, comm: syz.0.62, bytes: 2199023259648 not enough memory for the allocation [ 37.163270][ T36] audit: type=1400 audit(1785907365.330:169): avc: denied { map } for pid=489 comm="syz.0.62" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.231482][ T497] rust_binder: 496:497 got transaction to invalid handle 1 [ 37.233712][ T36] audit: type=1400 audit(1785907365.430:170): avc: denied { read } for pid=496 comm="syz.2.63" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.248235][ T497] rust_binder: 496:497 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 37.276118][ T36] audit: type=1400 audit(1785907365.430:171): avc: denied { open } for pid=496 comm="syz.2.63" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.301751][ T498] rust_binder: Write failure EFAULT in pid:47 [ 37.302038][ T36] audit: type=1400 audit(1785907365.430:172): avc: denied { ioctl } for pid=496 comm="syz.2.63" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.344047][ T31] rust_binder: 496: undelivered TRANSACTION_ERROR: 29201 [ 37.414052][ T512] syzkaller1: entered promiscuous mode [ 37.421375][ T512] syzkaller1: entered allmulticast mode [ 37.454155][ T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.511993][ T36] audit: type=1400 audit(1785907365.700:173): avc: denied { create } for pid=517 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.585736][ T522] syzkaller1: entered promiscuous mode [ 37.592133][ T522] syzkaller1: entered allmulticast mode [ 37.605142][ T63] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 37.617769][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 37.633842][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 37.650309][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.663359][ T63] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.672636][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.688036][ T63] usb 1-1: config 0 descriptor?? [ 37.693364][ T495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.000339][ T545] device-mapper: ioctl: name not supplied when creating device [ 38.070766][ T548] syzkaller1: entered promiscuous mode [ 38.078226][ T548] syzkaller1: entered allmulticast mode [ 38.109531][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.117074][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.129943][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.137508][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.145016][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.152561][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 38.161258][ T63] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 38.182648][ T63] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 38.243995][ T561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.253499][ T561] kvm: kvm [560]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 38.304315][ T566] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.304340][ T566] rust_binder: Read failure Err(EFAULT) in pid:69 [ 38.383322][ T63] usb 1-1: USB disconnect, device number 3 [ 38.714815][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.752485][ T598] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 38.836122][ T608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 38.846367][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.856934][ T608] bridge_slave_0 (unregistering): left allmulticast mode [ 38.864018][ T608] bridge_slave_0 (unregistering): left promiscuous mode [ 38.872487][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 38.879037][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.894156][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 38.910005][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.936241][ T9] usb 3-1: config 0 has no interfaces? [ 38.944035][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 38.956010][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 38.987774][ T9] usb 3-1: Product: syz [ 38.992101][ T9] usb 3-1: Manufacturer: syz [ 39.004894][ T9] usb 3-1: SerialNumber: syz [ 39.012943][ T9] usb 3-1: config 0 descriptor?? [ 39.104730][ T627] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 39.227906][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.237517][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.247198][ T481] usb 3-1: USB disconnect, device number 3 [ 39.264127][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 39.414196][ T88] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.436067][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.448866][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 39.459691][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 39.470773][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 39.482826][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 39.495378][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 39.506802][ T31] usb 4-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 39.515958][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.529832][ T31] usb 4-1: Product: syz [ 39.534043][ T31] usb 4-1: Manufacturer: syz [ 39.538722][ T31] usb 4-1: SerialNumber: syz [ 39.548707][ T624] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.556121][ T624] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.574124][ T88] usb 1-1: Using ep0 maxpacket: 16 [ 39.581686][ T88] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.592962][ T88] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.605565][ T88] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 39.605593][ T682] rust_binder: Write failure EFAULT in pid:64 [ 39.614750][ T88] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.633038][ T88] usb 1-1: config 0 descriptor?? [ 39.785016][ T481] usb 4-1: USB disconnect, device number 2 [ 39.894184][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.043890][ T88] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 40.055863][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 40.062306][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.075041][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 40.084332][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.092366][ T31] usb 3-1: Product: syz [ 40.096765][ T31] usb 3-1: Manufacturer: syz [ 40.101396][ T31] usb 3-1: SerialNumber: syz [ 40.108240][ T31] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 40.318749][ T31] usb 3-1: USB disconnect, device number 4 [ 40.366557][ T726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=591197932 (1182395864 ns) > initial count (4398 ns). Using initial count to start timer. [ 40.471485][ T737] tipc: Started in network mode [ 40.476593][ T737] tipc: Node identity ce4a1f46600f, cluster identity 4711 [ 40.483867][ T737] tipc: Enabled bearer , priority 10 [ 40.492368][ T736] tipc: Resetting bearer [ 40.499100][ T736] tipc: Disabling bearer [ 40.516359][ T63] usb 1-1: USB disconnect, device number 4 [ 40.790779][ T761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.270083][ T809] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 41.363932][ T817] rust_binder: 816:817 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 41.373527][ T817] rust_binder: Write failure EINVAL in pid:64 [ 41.662301][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 41.662322][ T36] audit: type=1400 audit(1785907369.850:249): avc: denied { read } for pid=831 comm="syz.3.175" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.884757][ T36] audit: type=1400 audit(1785907370.080:250): avc: denied { watch } for pid=850 comm="syz.1.183" path="/49" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.020511][ T36] audit: type=1400 audit(1785907370.210:251): avc: denied { setopt } for pid=861 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.564156][ T63] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.725289][ T63] usb 2-1: config index 0 descriptor too short (expected 1372, got 92) [ 42.733799][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.745270][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.754508][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.762805][ T63] usb 2-1: Product: syz [ 42.767080][ T63] usb 2-1: Manufacturer: syz [ 42.771701][ T63] usb 2-1: SerialNumber: syz [ 42.818217][ T883] KVM: debugfs: duplicate directory 883-4 [ 43.035374][ T894] loop8: detected capacity change from 0 to 7 [ 43.052887][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.068841][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.083707][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.093143][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.101445][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.109972][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.128182][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.150378][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.162246][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.170540][ T413] Buffer I/O error on dev loop8, logical block 0, async page read [ 43.253698][ T36] audit: type=1400 audit(1785907371.440:252): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.332216][ T914] coredump: 111(syz.2.203): Core dump to core aborted: cannot preserve file permissions [ 43.452996][ T918] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 43.468342][ T920] syzkaller1: entered promiscuous mode [ 43.473968][ T920] syzkaller1: entered allmulticast mode [ 43.501250][ T922] syzkaller1: entered promiscuous mode [ 43.506908][ T922] syzkaller1: entered allmulticast mode [ 43.580890][ T36] audit: type=1400 audit(1785907371.770:253): avc: denied { read } for pid=927 comm="syz.2.214" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.611912][ T36] audit: type=1400 audit(1785907371.770:254): avc: denied { open } for pid=927 comm="syz.2.214" path="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.024968][ T36] audit: type=1400 audit(1785907372.220:255): avc: denied { mount } for pid=946 comm="syz.0.221" name="/" dev="ramfs" ino=8034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.075691][ T36] audit: type=1400 audit(1785907372.260:256): avc: denied { mounton } for pid=950 comm="syz.0.224" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 44.076550][ T953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.147053][ T959] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.156132][ T959] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.174881][ T959] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 44.183802][ T959] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3) [ 44.192065][ T959] overlayfs: d_ino too big (spmi, ino=4611686018427389660, xinobits=3) [ 44.200641][ T959] overlayfs: d_ino too big (gadget, ino=4611686018427391666, xinobits=3) [ 44.209350][ T959] overlayfs: d_ino too big (rpmsg, ino=4611686018427389678, xinobits=3) [ 44.219400][ T63] cdc_ncm 2-1:1.0: bind() failure [ 44.225226][ T959] overlayfs: d_ino too big (serio, ino=4611686018427391683, xinobits=3) [ 44.236246][ T63] usb 2-1: USB disconnect, device number 4 [ 44.247671][ T959] overlayfs: d_ino too big (hdaudio, ino=4611686018427391798, xinobits=3) [ 44.261895][ T959] overlayfs: d_ino too big (iio, ino=4611686018427391779, xinobits=3) [ 44.270321][ T959] overlayfs: d_ino too big (gpio, ino=4611686018427389401, xinobits=3) [ 44.278739][ T959] overlayfs: d_ino too big (nd, ino=4611686018427391571, xinobits=3) [ 44.286864][ T959] overlayfs: d_ino too big (serial-base, ino=4611686018427389698, xinobits=3) [ 44.544151][ T481] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.715316][ T481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.734211][ T481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.760852][ T481] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.772278][ T481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.783562][ T481] usb 4-1: config 0 descriptor?? [ 44.804564][ T36] audit: type=1326 audit(1785907373.000:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.230" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fc979e019 code=0x0 [ 45.392793][ T481] usb 4-1: language id specifier not provided by device, defaulting to English [ 45.419483][ T978] SELinux: Context AÇ is not valid (left unmapped). [ 45.427043][ T36] audit: type=1400 audit(1785907373.630:258): avc: denied { create } for pid=977 comm="syz.0.234" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=41C7 [ 45.784145][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.810967][ T481] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 45.821569][ T481] usb 4-1: USB disconnect, device number 3 [ 45.839284][ T1006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.937561][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.946030][ T63] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 45.958471][ T63] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 45.967602][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.975678][ T63] usb 1-1: Product: syz [ 45.979877][ T63] usb 1-1: Manufacturer: syz [ 45.985489][ T63] usb 1-1: SerialNumber: syz [ 46.084193][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.194327][ T63] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.243220][ T1025] syzkaller1: entered promiscuous mode [ 46.248897][ T1025] syzkaller1: entered allmulticast mode [ 46.310573][ T1027] process 'syz.1.248' launched './file0' with NULL argv: empty string added [ 46.394402][ T63] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 46.402931][ T63] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 46.410921][ T63] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 46.420559][ T63] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 46.429197][ T63] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 46.443041][ T63] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 46.934136][ T481] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.084126][ T481] usb 3-1: Using ep0 maxpacket: 32 [ 47.090696][ T481] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 47.102246][ T481] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 47.111545][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.120290][ T481] usb 3-1: Product: syz [ 47.124611][ T481] usb 3-1: Manufacturer: syz [ 47.129357][ T481] usb 3-1: SerialNumber: syz [ 47.136349][ T1055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.208892][ T63] usb 1-1: USB disconnect, device number 5 [ 47.232256][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.355475][ T1055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.365274][ T1055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.382917][ T481] usb 3-1: MIDIStreaming interface descriptor not found [ 47.395446][ T481] usb 3-1: USB disconnect, device number 5 [ 47.420326][ T574] udevd[574]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.499948][ T1057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 47.519981][ T1057] kvm: kvm [1056]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 47.529320][ T1057] kvm: kvm [1056]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 47.707061][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 47.707080][ T36] audit: type=1400 audit(1785907375.900:275): avc: denied { write } for pid=1067 comm="syz.1.265" name="unix" dev="proc" ino=4026532341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.913396][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 48.025429][ T36] audit: type=1400 audit(1785907376.220:276): avc: denied { read } for pid=1099 comm="syz.1.279" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.031622][ T1100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 48.048701][ T36] audit: type=1400 audit(1785907376.220:277): avc: denied { open } for pid=1099 comm="syz.1.279" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.092674][ T36] audit: type=1400 audit(1785907376.220:278): avc: denied { ioctl } for pid=1099 comm="syz.1.279" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.215492][ T36] audit: type=1400 audit(1785907376.410:279): avc: denied { mounton } for pid=1111 comm="syz.2.283" path="/57/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 48.524146][ T424] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 48.685322][ T424] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 48.693504][ T424] usb 3-1: config 0 has no interface number 0 [ 48.704425][ T424] usb 3-1: config 0 interface 41 has no altsetting 0 [ 48.712804][ T424] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 48.722746][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.731004][ T424] usb 3-1: Product: syz [ 48.735394][ T424] usb 3-1: Manufacturer: syz [ 48.740035][ T424] usb 3-1: SerialNumber: syz [ 48.745821][ T424] usb 3-1: config 0 descriptor?? [ 48.884976][ T36] audit: type=1400 audit(1785907377.080:280): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.054727][ T1133] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 49.117556][ T36] audit: type=1400 audit(1785907377.310:281): avc: denied { append } for pid=1148 comm="syz.0.293" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.165155][ T36] audit: type=1400 audit(1785907377.340:282): avc: denied { ioctl } for pid=1148 comm="syz.0.293" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.297803][ T36] audit: type=1400 audit(1785907377.490:283): avc: denied { watch watch_reads } for pid=1163 comm="syz.1.296" path="/84/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.370268][ T1174] syzkaller1: entered promiscuous mode [ 49.375918][ T1174] syzkaller1: entered allmulticast mode [ 49.544036][ T36] audit: type=1400 audit(1785907377.730:284): avc: denied { write } for pid=1187 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.572418][ T424] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 49.997512][ T424] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 50.021021][ T424] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 50.040741][ T424] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 50.065618][ T424] usb 3-1: USB disconnect, device number 6 [ 50.524121][ T424] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 50.684113][ T424] usb 4-1: Using ep0 maxpacket: 8 [ 50.700510][ T424] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.721016][ T424] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.739129][ T424] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 50.754212][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.772496][ T424] usb 4-1: Product: syz [ 50.782052][ T424] usb 4-1: Manufacturer: syz [ 50.791131][ T424] usb 4-1: SerialNumber: syz [ 51.010371][ T424] usb 4-1: unit 6 not found! [ 51.028744][ T424] usb 4-1: USB disconnect, device number 4 [ 51.431430][ T1276] netlink: 'syz.2.327': attribute type 2 has an invalid length. [ 51.804138][ T424] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.965945][ T424] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.978978][ T424] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.991036][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.999327][ T424] usb 4-1: Product: syz [ 52.003524][ T424] usb 4-1: Manufacturer: syz [ 52.008890][ T424] usb 4-1: SerialNumber: syz [ 52.117820][ T1305] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 53.008332][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 53.008352][ T36] audit: type=1400 audit(1785907381.200:299): avc: denied { read } for pid=1350 comm="syz.2.358" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.037279][ T36] audit: type=1400 audit(1785907381.200:300): avc: denied { open } for pid=1350 comm="syz.2.358" path="/81/config" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.037641][ T424] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 53.085780][ T424] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 53.099191][ T36] audit: type=1400 audit(1785907381.260:301): avc: denied { search } for pid=1350 comm="syz.2.358" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.099223][ T424] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 53.126812][ T36] audit: type=1400 audit(1785907381.260:302): avc: denied { read } for pid=1350 comm="syz.2.358" name="use" dev="configfs" ino=19928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 53.174389][ T1357] syzkaller1: entered promiscuous mode [ 53.181170][ T1357] syzkaller1: entered allmulticast mode [ 53.469308][ T424] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 53.487812][ T424] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 53.518610][ T424] usb 4-1: USB disconnect, device number 5 [ 53.535222][ T424] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 54.552860][ T36] audit: type=1400 audit(1785907382.740:303): avc: denied { create } for pid=1431 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.585516][ T36] audit: type=1400 audit(1785907382.760:304): avc: denied { setopt } for pid=1431 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.608450][ T36] audit: type=1400 audit(1785907382.770:305): avc: denied { bind } for pid=1431 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.956923][ T1450] syzkaller1: entered promiscuous mode [ 54.962460][ T1450] syzkaller1: entered allmulticast mode [ 55.014987][ T36] audit: type=1400 audit(1785907383.210:306): avc: denied { map } for pid=1451 comm="syz.3.389" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 55.136507][ T1458] kvm: Disabled LAPIC found during irq injection [ 55.285859][ T36] audit: type=1400 audit(1785907383.480:307): avc: denied { setopt } for pid=1467 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.366487][ T36] audit: type=1400 audit(1785907383.560:308): avc: denied { append } for pid=1477 comm="syz.1.401" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 55.574570][ T1488] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 55.583404][ T1488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 56.608820][ T1538] netlink: 'syz.2.423': attribute type 12 has an invalid length. [ 56.840150][ T1550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 56.884184][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 56.934156][ T424] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.035190][ T9] usb 3-1: config 0 has no interfaces? [ 57.040743][ T9] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 57.050064][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.063993][ T9] usb 3-1: config 0 descriptor?? [ 57.084128][ T424] usb 2-1: Using ep0 maxpacket: 32 [ 57.090539][ T424] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 57.098833][ T424] usb 2-1: config 0 has no interface number 0 [ 57.104216][ T88] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.105123][ T424] usb 2-1: config 0 interface 184 has no altsetting 0 [ 57.120761][ T424] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 57.129899][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.137952][ T424] usb 2-1: Product: syz [ 57.142227][ T424] usb 2-1: Manufacturer: syz [ 57.146879][ T424] usb 2-1: SerialNumber: syz [ 57.152088][ T424] usb 2-1: config 0 descriptor?? [ 57.157944][ T424] smsc75xx v1.0.0 [ 57.255366][ T88] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.266453][ T88] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.277412][ T88] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.281223][ T63] usb 3-1: USB disconnect, device number 7 [ 57.290985][ T88] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.320989][ T88] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.332372][ T88] usb 4-1: config 0 descriptor?? [ 57.743865][ T88] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 57.759170][ T88] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.772424][ T424] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 57.783541][ T424] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.995310][ T424] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 58.007854][ T424] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 58.017841][ T424] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 58.027679][ T424] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 58.038931][ T424] usb 2-1: USB disconnect, device number 5 [ 58.205960][ T1584] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 58.213681][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 58.222800][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.229905][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.355191][ C1] plantronics 0003:047F:FFFF.0006: hid_field_extract() called with n (132) > 32! (syz.0.443) [ 58.556537][ T424] usb 4-1: USB disconnect, device number 6 [ 58.942442][ T1619] capability: warning: `syz.2.454' uses deprecated v2 capabilities in a way that may be insecure [ 59.085571][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 59.085590][ T36] audit: type=1400 audit(1785907387.280:316): avc: denied { setattr } for pid=1631 comm="syz.2.458" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.194747][ T36] audit: type=1400 audit(1785907387.390:317): avc: denied { cmd } for pid=1640 comm="iou-wrk-1641" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 59.242831][ T415] ------------[ cut here ]------------ [ 59.248421][ T415] WARNING: CPU: 0 PID: 415 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 59.259046][ T415] Modules linked in: [ 59.262998][ T415] CPU: 0 UID: 0 PID: 415 Comm: kworker/u8:4 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 59.274706][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.284825][ T415] Workqueue: iou_exit io_ring_exit_work [ 59.290438][ T415] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 59.296868][ T415] Code: 5d e9 c3 bb 52 02 cc e8 9d 8e 33 fe 0f 0b eb e3 e8 94 8e 33 fe 0f 0b eb da e8 8b 8e 33 fe 0f 0b e9 4d fe ff ff e8 7f 8e 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 59.316569][ T415] RSP: 0018:ffffc9000c2d7990 EFLAGS: 00010293 [ 59.322686][ T415] RAX: ffffffff8353e341 RBX: 1ffff11023ed23bd RCX: ffff8881153fcc00 [ 59.330729][ T415] RDX: 0000000000000000 RSI: 0000000000000066 RDI: 0000000000000104 [ 59.338786][ T415] RBP: ffffc9000c2d79e0 R08: 0000000000000003 R09: 0000000000000004 [ 59.346842][ T415] R10: 0000000000000000 R11: ffffffff8353d320 R12: ffff88811802cc00 [ 59.354882][ T415] R13: ffff88811f691dc0 R14: ffff888118e70000 R15: ffff888118e70010 [ 59.362981][ T415] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 59.372069][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.378740][ T415] CR2: 00007f8fca650ff8 CR3: 0000000113bb4000 CR4: 00000000003526b0 [ 59.386782][ T415] Call Trace: [ 59.390145][ T415] [ 59.393105][ T415] ublk_ch_uring_cmd+0x6f/0xa0 [ 59.397958][ T415] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 59.403980][ T415] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 59.409950][ T415] ? io_uring_cancel_generic+0x6eb/0x6eb [ 59.415655][ T415] io_ring_exit_work+0x23d/0x83b [ 59.420631][ T415] ? finish_task_switch+0x139/0x770 [ 59.425902][ T415] ? __cfi_io_ring_exit_work+0x10/0x10 [ 59.431397][ T415] ? kick_pool+0xb9/0x540 [ 59.435843][ T415] process_scheduled_works+0x7f7/0x1060 [ 59.441433][ T415] worker_thread+0xc99/0x13f0 [ 59.446196][ T415] kthread+0x2c7/0x360 [ 59.450318][ T415] ? __cfi_worker_thread+0x10/0x10 [ 59.455704][ T415] ? __cfi_kthread+0x10/0x10 [ 59.460328][ T415] ret_from_fork+0x67/0xa0 [ 59.464810][ T415] ? __cfi_kthread+0x10/0x10 [ 59.469429][ T415] ret_from_fork_asm+0x1a/0x30 [ 59.474262][ T415] [ 59.477305][ T415] ---[ end trace 0000000000000000 ]---