last executing test programs: 4.134626256s ago: executing program 2 (id=90): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESTART(r2, 0x1269, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c) read$FUSE(r1, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getegid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) prlimit64(r3, 0x9, &(0x7f00000002c0)={0x0, 0xfc}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 4.03693926s ago: executing program 2 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x2f, 0x400, 0x70bd2b, 0x25dfdbfd, {0x1e}, [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@empty}, @generic="a547a226f8378c81d9888083b2c2807d904d94b5cfafeaea176605cb9328b948c7aa37622879d42c786fd66a4e55904ab1ddab94f3a1d1c384084a311c83f9d40b3175f602eaeab00dc633af6ddaa12397c2f237a225a29b3dba105cdca75b4d7c67d1795cf8", @typed={0x8, 0x68, 0x0, 0x0, @fd=r0}, @generic="a649e4e0807396a953913c8372aa1e126ea5d491d7bfd892daedeed29ece642c0d", @nested={0x101, 0x26, 0x0, 0x1, [@generic="d859fbcf648be6543c6b1919ef5e4b43b47ac3c324d9c4f5e6c9b72a6f90a6738cac8c264fb78f216da5afa5a9171cc3eaa726e76c09c248a0823861faef4a7236219716cefcd73800356d805e9f5ee8e94d1b66b1ab85f58dfb50682c2453f8b23baa613a8cefb8524886d82f9a89e92bddadbba846d3ce19307e9e8a61f458e80397c6ae83606dc8fed3f61c51ba2d2b7c4848e967058b31255596f5318abc6e594e4bd75864b3530388f9cb68013176fe184a7ab802f0bd8ea76efc9f569fdcf7b8d921dbaa7a6b085e52a8c070d41210ceb46d37a74bd97e003f232faa0efd2795851e514372e36145a565", @nested={0x4, 0xc3}, @typed={0x8, 0x58, 0x0, 0x0, @uid}, @nested={0x4, 0x8e}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0xffffff74, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x7c70}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 3.982194263s ago: executing program 2 (id=92): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680bf74a7dffd"], 0x44}}, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000010d118042d40000102030109026f00030107900a0904000000010100000a240102000a00020102090401000001020000090401010101020000090501091000050704072501000c83000904020000010200000904020101010200000724010606030008240201090308b00905820940000710000725"], 0x0) 2.823176591s ago: executing program 2 (id=104): syz_usb_connect$uac2(0x5, 0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="120100030000002035121000400001020301090288000301000002080b0111210a2002090400000001d74a5402240107"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x28) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x300) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x10) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000300)=0xfffffffffffffd96) write$selinux_load(0xffffffffffffffff, 0x0, 0x190ec) 2.549254832s ago: executing program 3 (id=107): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) munmap(&(0x7f00000ef000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2.519233344s ago: executing program 3 (id=108): unshare(0x22020600) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="b03e", 0x2}, {&(0x7f0000000180)="275b5801bc96052c3056bad1a283b08f2be30934388467a76182e6eabe7c936f9ea494d4121ff567dd0a59db72616574db7ee00b", 0x34}], 0x2, 0x0, 0x0, 0x5}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r4, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x11088, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r3, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2.227088496s ago: executing program 3 (id=109): socket(0x1d, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/31, 0x1f}], 0x1}}], 0x1, 0x40002043, 0x0) sendto$inet(r1, &(0x7f00000000c0)="1febf0b9fc7de6a3204c70e3cfc0825fde09800fede9ef49efbb7b5ad3e54f5732c95ff9528022fa26750792899ecb16e3be4f1c8932d38adc6a73617ccc8970b24f80e48d0f8756328ede3743b852568b30877d75c9a598b40fc095f5a05720960384b17c24de33d9f37aaf27f0fd44033517d46f44416f440ded73adb08a869a39ce593df8d831abfb7c2cb36b075377d96654daea68c1f8405e954227f041d4b84290396ad2a04966ee4acf5f07452f1e87bd", 0xb4, 0x2015, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xee00) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200010127bd700000000000000000004e2200000000000004000000000000000300000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="00000000fdfff7ff00fcffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6351, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 2.056119204s ago: executing program 3 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x2f, 0x400, 0x70bd2b, 0x25dfdbfd, {0x1e}, [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@empty}, @generic="a547a226f8378c81d9888083b2c2807d904d94b5cfafeaea176605cb9328b948c7aa37622879d42c786fd66a4e55904ab1ddab94f3a1d1c384084a311c83f9d40b3175f602eaeab00dc633af6ddaa12397c2f237a225a29b3dba105cdca75b4d7c67d1795cf8", @typed={0x8, 0x68, 0x0, 0x0, @fd=r0}, @generic="a649e4e0807396a953913c8372aa1e126ea5d491d7bfd892daedeed29ece642c0d", @nested={0x101, 0x26, 0x0, 0x1, [@generic="d859fbcf648be6543c6b1919ef5e4b43b47ac3c324d9c4f5e6c9b72a6f90a6738cac8c264fb78f216da5afa5a9171cc3eaa726e76c09c248a0823861faef4a7236219716cefcd73800356d805e9f5ee8e94d1b66b1ab85f58dfb50682c2453f8b23baa613a8cefb8524886d82f9a89e92bddadbba846d3ce19307e9e8a61f458e80397c6ae83606dc8fed3f61c51ba2d2b7c4848e967058b31255596f5318abc6e594e4bd75864b3530388f9cb68013176fe184a7ab802f0bd8ea76efc9f569fdcf7b8d921dbaa7a6b085e52a8c070d41210ceb46d37a74bd97e003f232faa0efd2795851e514372e36145a565", @nested={0x4, 0xc3}, @typed={0x8, 0x58, 0x0, 0x0, @uid}, @nested={0x4, 0x8e}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0xffffff74, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x7c70}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 2.053904144s ago: executing program 3 (id=112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001000010001ffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d2861657729290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 2.001749975s ago: executing program 3 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x176, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x164, 0x2, 0x1, 0x1, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "be4cbe1e1e"}, {0x5, 0x24, 0x0, 0xf}, {0xfffffffffffffe56, 0x24, 0xf, 0x1, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x3, [0xa2d, 0x4, 0xd31, 0x18a1]}, @mdlm_detail={0xe0, 0x24, 0x13, 0x2, "8c3e515bd49e015f712d4d6179f82a8255f1ea7e1e28635f3ce718fd4b934aad8bf889dbe47eb8f65b5839f76eed61641dab1f7e66c66fc9cb816f4608e2612379569feb3a695010cac7f18cefa33f5be4a3dc2e119d0d736d845380a6ef0eb945b6cf8850ea36efe72882f0662a45718298852de09cfd526c45b1b20e99bf5a310eba111efa32b387cecfbc3fcdd364df73702b022a3cf06c12be49313b05d023e3584bb29009b9deeaf674e0c6be7bb3bbc413e04605dc146ef70112f42a5a149cedf2b64d6a564fb427b766d17995c7a340a7738bcfba2e66380d"}, @mdlm={0x15, 0x24, 0x12, 0xfff4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd5, 0xff, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xf, 0xe8}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x2, 0x80, 0xfe, 0x10, 0x9}, 0x24, &(0x7f0000000340)={0x5, 0xf, 0x24, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x4, 0xc, 0x2}, @ptm_cap={0x3}, @ptm_cap, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x2, 0x7ff}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2439}}, {0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "3191c72b7abb382a3370ba0f4493545d2ad91929a714cdee01f77e0b3488f54610695085654e5d92a54fb9f0dd62ac84d8fbc4df9352f0f47f0824b034634b49fd1d82835358e6b3837175c5950d04b328ff5a319bad4cf30d5dc662c2938703a2b3ea66cc6395cb549f7cc6216b475d72fc34dd4fd703e99f36e0edfd2bd7f4bf05094eb4e72722bb83bcf3f33715861bddc840c31824f43f1531522ee0c4ed0be1eeeec1f80b420c07f3a4560bb4265829755db06cc449a9598113d4ba2aa293916d919bc22db49c5a28689ffc82d45ee79794f57951e66630ac2bae91c4548ecf3ee83d5da1c6e7940e92b01cad4c99109ddde614f98f9dbf1ccdd0afb880"}}, {0x3f, &(0x7f0000000540)=@string={0x3f, 0x3, "f339e9dea458cf40d90f31369a0f6753f6c2bcd7885acc8b429126ac9851c8db04cd23eb24674a2c474c12c9c27439f7ee0ac3173a7eb2f25d787b5936"}}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.977961996s ago: executing program 1 (id=115): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[0x0]) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x7}, @in=@loopback, 0x4e28, 0x0, 0x4, 0xf000, 0xa}, {0xffffffffffffffff, 0x802, 0x913d, 0x40000, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@broadcast, 0x4cf, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) 1.949860177s ago: executing program 1 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) munmap(&(0x7f00000ef000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.924707929s ago: executing program 1 (id=117): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) getgroups(0x1, &(0x7f0000000300)=[0xee00]) write$FUSE_ATTR(r4, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x9, 0x7, 0x0, {0x4, 0x1ff, 0x20d, 0x3, 0x3, 0x1, 0x27a, 0x4, 0x5, 0x2000, 0xc46a, 0xee00, r5, 0x8, 0x3}}}, 0x78) unlinkat(r3, &(0x7f0000000280)='./bus\x00', 0x200) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)='z', 0x1}], 0x1, 0x7aa, 0x7fffffff) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r7, 0x400, 0x1) fcntl$setlease(r6, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) getsockopt$sock_int(r1, 0x1, 0x4d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.734120047s ago: executing program 1 (id=119): syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x7f, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffffe, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x190, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x0, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x8, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x3, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x2, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0x1, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d86, 0x9, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffef, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x9, 0x6, 0xf, 0xe, 0x40c, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001780)={0x0, &(0x7f0000001140)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3, 0x5}}, @set_irq_handler={0xc8, 0x20, {0xae, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x80000001}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xeeed4000, 0xb20b}}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x1}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x118, {0x1, 0x100, [@nested_amd_inject_event={0x180, 0x38, {0x1, 0x63, 0x5, 0xfffffffffffffff9, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5, 0x7fff}}, @wrmsr={0x65, 0x20, {0xa48, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x1d}}, @wrmsr={0x65, 0x20, {0xbc7, 0xe}}, @wr_crn={0x67, 0x20, {0x2, 0x8}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x3b, 0x40, 0x5, 0x80000000}}, @nested_amd_invlpga={0x17d, 0x20, {0xc05d004, 0x62a2}}, @out_dx={0x6a, 0x28, {0xc548, 0x0, 0x1}}, @nested_load_syzos={0x136, 0x1f2, {0x3, 0x8, [@code={0xa, 0x61, {"420f300f0866baf80cb86c9c6489ef66bafc0ced0fecd066410f38156200470f01c2dbe00f20c035040000000f22c0672636450f3a0f020548b88a3d0000000000000f23d00f21f8350000000b0f23f8"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x65, {"0f791c7ddc6d0000c483f9169e05000000f8c4a2a1093c0141c0e600410f01b78e240000b9e70900000f3265660f38808700000000b91d030000b800000100ba000000000f3066b860000f00d066bad004b0b2ee"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x20, {0x2, 0x100}}, @nested_load_code={0x12e, 0x64, {0x0, "c4a2edafe2c481d35a1a66b83d000f00d8f30f090f20c035000001000f22c08f0978d60e4c0fc7a80300000066baf80cb8b8722584ef66bafc0cb860c8c438efc14c350c1d6665f3460fc737"}}]}}, @rdmsr={0x66, 0x18, {0x407}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xfffffffffffffff7, 0xffff, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xbe14, 0x3}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0x2}}, @in_dx={0x69, 0x20, {0x6428, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x4c33, 0x7}}], 0x612}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000017c0)={0x3ff8, 0xdddc4000, 0x9, 0x5, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) pwrite64(r4, &(0x7f0000000140)="f9", 0x1, 0x8000c61) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x0, 0x2, 0x1}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x3be, 0x0, 0x3}, {0x40b, 0x0, 0x7ff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0xc00) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$XFS_IOC_SET_RESBLKS(r8, 0xc0105872, &(0x7f0000000100)={0xc, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.626542041s ago: executing program 1 (id=120): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x800041, &(0x7f00000001c0)='discard') (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.607556992s ago: executing program 2 (id=121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000100001000180ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d2861657729290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 1.554006375s ago: executing program 1 (id=122): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0) (async, rerun: 64) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) (async, rerun: 64) r2 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000280)={0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0xf, @string={0xf, 0x3, "2b260afdbcc124d6136639c18e"}}}, &(0x7f0000000440)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="40002f000000610d5139fed7668ae5632aac26fab93aa50736928d6741871ecfcf3970c987879858eb4187eccd3ddd1c998f2035dc"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0xa1, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x8000000}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "f215d99b9608dbf7effb5341542828b810b9a67b829e23d447b87652f75f23f3076137a54fdda6feaaeefa52fd020f"}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd2(0x1c, 0x80801) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r4) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) r5 = getpgrp(0xffffffffffffffff) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x2, 0x300, 0x81, 0x5, 0x81, 0x80, 0x1, 0x10, 0x0, 0x2, 0x0, 0xfffffffc, 0x5, 0x9}) (async) setpgid(0xffffffffffffffff, r5) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xe0}, 0x0, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "32b4"}, 0x0, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x2}}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x13, 0xffffffff, 0x10, 0xdb5c, 0x1e28, 0x9}) 1.550248385s ago: executing program 2 (id=123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f40)={0x0, 0xb, 0x4, "94a291d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x0, 0x3, 0x4, "fac63303"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x30, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.505502196s ago: executing program 0 (id=124): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESTART(r2, 0x1269, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c) read$FUSE(r1, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0x9, &(0x7f00000002c0)={0x0, 0xfc}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 1.42718091s ago: executing program 0 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) munmap(&(0x7f00000ef000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.398517921s ago: executing program 0 (id=126): fsmount(0xffffffffffffffff, 0x1, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0xa1, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1.357050483s ago: executing program 0 (id=127): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1a) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129740, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xa70d6000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000600), 0x0, 0xff, 0x3) fadvise64(r3, 0x2, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.18212897s ago: executing program 0 (id=128): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) 0s ago: executing program 0 (id=129): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', 0x0}) socket$inet(0x2, 0x6, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000002020104009400000000000005004e0b02f984eb648c5cf5000e289360c1cda3de36080e000600697263"], 0x24}, 0x1, 0x0, 0x0, 0x2000c884}, 0x44800) (async) r2 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x802) (async) r9 = syz_usb_connect$uac1(0x3, 0xcd, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x61, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2c}, [@selector_unit={0xa, 0x24, 0x5, 0x3, 0x5c, "3d3cdb4a12"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0xc, 0x5, 0x5, 0x3], 0x10}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x6, 0x0, "08a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8000, 0x0, 0x1, "3be92e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0xff, {0x7, 0x25, 0x1, 0xc, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x9, 0xa7, "768d3093940c"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x0, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x8, 0xb, "d30e36add6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x81, 0xfb, 0x7, {0x7, 0x25, 0x1, 0xc, 0x6, 0x7}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x3, 0x0, 0xf8, 0x10, 0x40}, 0xc, &(0x7f0000000400)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x7, 0x4}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4001}}]}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x10000, 0x7}) write(r10, &(0x7f0000000200)='0', 0x1) (async, rerun: 64) syz_usb_control_io$uac1(r9, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x0, 0x11, 0xe, {0xe, 0x6, "d3f98c04459d037ed66f8efd"}}, &(0x7f0000000540)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "a45412dcbcee9c5c4a113f06ca5a947692473e924ef8c493b0652bfb013e3eeebb787165ff62ce057c7a69fa22069edad000998e457c898e94fcd9df4ce8756d05dfb93208a3a6720f2c7a8dcd7a5d1c464587317fb2d48b6c7d05a901a0fc600ca332afbd841b6edfe24ed69bece748d86288b1d4b68639d7abc8d5978c98a35e1206899ac846476b41a824ef046e6e1f7a1e272f3ccee6b94131ec07f4ab23388786a2bc17f2babda80ad214d7a6634b431bfd471a013188adee476ed14b7e00721e8f33ce6a1ae742ed8445459b7a8c421865f801"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x20, 0x17, 0xb, "e5411359a1d22becb68ae6"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe8}, &(0x7f0000000740)={0x20, 0x81, 0x2, "29b1"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "0e2000"}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "f6bc9b"}, &(0x7f0000000800)={0x20, 0x84, 0x2, "40fe"}, &(0x7f0000000840)={0x20, 0x85, 0x3, 'wqe'}}) (rerun: 64) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.722827][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 14.722845][ T36] audit: type=1400 audit(1789685853.740:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.727700][ T36] audit: type=1400 audit(1789685853.740:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.732410][ T36] audit: type=1400 audit(1789685853.760:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[1611]" dev="pipefs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.736165][ T36] audit: type=1400 audit(1789685853.760:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.739377][ T36] audit: type=1400 audit(1789685853.760:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 23.055631][ T36] audit: type=1400 audit(1789685862.070:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.059155][ T286] cgroup: Unknown subsys name 'net' [ 23.078940][ T36] audit: type=1400 audit(1789685862.070:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.106311][ T36] audit: type=1400 audit(1789685862.100:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.106737][ T286] cgroup: Unknown subsys name 'devices' [ 23.230970][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.236635][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.352109][ T36] audit: type=1400 audit(1789685862.370:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.375832][ T36] audit: type=1400 audit(1789685862.370:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.400682][ T36] audit: type=1400 audit(1789685862.370:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.431337][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.440259][ T36] audit: type=1400 audit(1789685862.460:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.465729][ T36] audit: type=1400 audit(1789685862.460:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.492978][ T36] audit: type=1400 audit(1789685862.520:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.518549][ T36] audit: type=1400 audit(1789685862.520:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.519308][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.281933][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.297819][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.305000][ T293] bridge_slave_0: entered allmulticast mode [ 24.311589][ T293] bridge_slave_0: entered promiscuous mode [ 24.318229][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.325342][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.332550][ T293] bridge_slave_1: entered allmulticast mode [ 24.338966][ T293] bridge_slave_1: entered promiscuous mode [ 24.460710][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.467763][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.475103][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.482169][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.513590][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.521189][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.528267][ T298] bridge_slave_0: entered allmulticast mode [ 24.534619][ T298] bridge_slave_0: entered promiscuous mode [ 24.541227][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.548280][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.555387][ T298] bridge_slave_1: entered allmulticast mode [ 24.561724][ T298] bridge_slave_1: entered promiscuous mode [ 24.578564][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.585668][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.592857][ T297] bridge_slave_0: entered allmulticast mode [ 24.599188][ T297] bridge_slave_0: entered promiscuous mode [ 24.608465][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.615656][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.622740][ T297] bridge_slave_1: entered allmulticast mode [ 24.629223][ T297] bridge_slave_1: entered promiscuous mode [ 24.688560][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.695686][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.702978][ T299] bridge_slave_0: entered allmulticast mode [ 24.709285][ T299] bridge_slave_0: entered promiscuous mode [ 24.718346][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.725445][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732563][ T299] bridge_slave_1: entered allmulticast mode [ 24.738833][ T299] bridge_slave_1: entered promiscuous mode [ 24.801394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.809235][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.828871][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.864299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.871392][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.912285][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.919373][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.928177][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.935289][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.960952][ T293] veth0_vlan: entered promiscuous mode [ 24.984305][ T293] veth1_macvtap: entered promiscuous mode [ 25.010526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.017681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.039971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.047042][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.061465][ T298] veth0_vlan: entered promiscuous mode [ 25.075684][ T298] veth1_macvtap: entered promiscuous mode [ 25.095709][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.102814][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.116119][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.134870][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.141958][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.168015][ T297] veth0_vlan: entered promiscuous mode [ 25.182686][ T312] x_tables: duplicate entry at hook 1 [ 25.197091][ T297] veth1_macvtap: entered promiscuous mode [ 25.225195][ T299] veth0_vlan: entered promiscuous mode [ 25.232177][ T312] x_tables: duplicate entry at hook 1 [ 25.247253][ T299] veth1_macvtap: entered promiscuous mode [ 25.357338][ T329] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3'. [ 25.369313][ T324] rust_binder: Write failure EINVAL in pid:10 [ 25.370632][ T327] TCP: TCP_TX_DELAY enabled [ 25.383118][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.504943][ T333] SELinux: failed to load policy [ 25.545247][ T347] hub 1-0:1.0: USB hub found [ 25.557026][ T347] hub 1-0:1.0: 1 port detected [ 25.702280][ T357] Zero length message leads to an empty skb [ 25.878973][ T376] SELinux: failed to load policy [ 26.158858][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.310347][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.318105][ T64] usb 1-1: no configurations [ 26.322789][ T64] usb 1-1: can't read configurations, error -22 [ 26.458873][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.610810][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.619980][ T64] usb 1-1: no configurations [ 26.624585][ T64] usb 1-1: can't read configurations, error -22 [ 26.631009][ T64] usb usb1-port1: attempt power cycle [ 26.818198][ T414] ======================================================= [ 26.818198][ T414] WARNING: The mand mount option has been deprecated and [ 26.818198][ T414] and is ignored by this kernel. Remove the mand [ 26.818198][ T414] option from the mount to silence this warning. [ 26.818198][ T414] ======================================================= [ 26.969177][ T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.001266][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.019126][ T64] usb 1-1: no configurations [ 27.023749][ T64] usb 1-1: can't read configurations, error -22 [ 27.178938][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.200578][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.208263][ T64] usb 1-1: no configurations [ 27.226448][ T64] usb 1-1: can't read configurations, error -22 [ 27.233460][ T64] usb usb1-port1: unable to enumerate USB device [ 27.508949][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.659745][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 27.669621][ T64] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 27.677856][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.688194][ T64] usb 4-1: config 0 has no interface number 0 [ 27.695779][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 27.705007][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.713311][ T64] usb 4-1: Product: syz [ 27.717481][ T64] usb 4-1: Manufacturer: syz [ 27.722113][ T64] usb 4-1: SerialNumber: syz [ 27.727922][ T64] usb 4-1: config 0 descriptor?? [ 27.734346][ T64] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 27.740832][ T64] usb 4-1: No valid video chain found. [ 27.790564][ T419] x86/PAT: syz.2.29:419 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 27.898947][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.068997][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 28.083911][ T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.094403][ T46] usb 2-1: config 0 has no interface number 0 [ 28.100679][ T46] usb 2-1: config 0 interface 184 has no altsetting 0 [ 28.109408][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.118739][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.127170][ T46] usb 2-1: Product: syz [ 28.133741][ T46] usb 2-1: Manufacturer: syz [ 28.147788][ T46] usb 2-1: SerialNumber: syz [ 28.167625][ T46] usb 2-1: config 0 descriptor?? [ 28.174689][ T46] smsc75xx v1.0.0 [ 28.219350][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 28.219370][ T36] audit: type=1400 audit(1789685867.240:177): avc: denied { create } for pid=446 comm="syz.2.40" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.261513][ T36] audit: type=1400 audit(1789685867.270:178): avc: denied { write } for pid=446 comm="syz.2.40" name="file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.284136][ T36] audit: type=1400 audit(1789685867.270:179): avc: denied { open } for pid=446 comm="syz.2.40" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.317024][ T36] audit: type=1400 audit(1789685867.270:180): avc: denied { ioctl } for pid=446 comm="syz.2.40" path="/11/file0" dev="tmpfs" ino=78 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.341533][ T36] audit: type=1400 audit(1789685867.330:181): avc: denied { unlink } for pid=299 comm="syz-executor" name="file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.371372][ T449] No source specified [ 28.421459][ T451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.42'. [ 28.430730][ T451] netlink: 'syz.2.42': attribute type 6 has an invalid length. [ 28.438551][ T451] netlink: 'syz.2.42': attribute type 5 has an invalid length. [ 28.446263][ T451] netlink: 'syz.2.42': attribute type 4 has an invalid length. [ 28.455786][ T36] audit: type=1400 audit(1789685867.470:182): avc: denied { read write } for pid=450 comm="syz.2.42" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.458221][ T451] device-mapper: ioctl: name not supplied when creating device [ 28.502036][ T36] audit: type=1400 audit(1789685867.470:183): avc: denied { open } for pid=450 comm="syz.2.42" path="/13/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.538867][ T36] audit: type=1400 audit(1789685867.470:184): avc: denied { ioctl } for pid=450 comm="syz.2.42" path="/13/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.565016][ T36] audit: type=1400 audit(1789685867.510:185): avc: denied { create } for pid=450 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 28.828854][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.998842][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 29.005398][ T10] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 29.026438][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 29.036742][ T10] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 29.060737][ T10] usb 3-1: Product: syz [ 29.065333][ T10] usb 3-1: Manufacturer: syz [ 29.081435][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 29.094387][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 29.110876][ T10] cdc_acm 3-1:0.0: Zero length descriptor references [ 29.118708][ T10] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 29.170245][ T36] audit: type=1400 audit(1789685868.190:186): avc: denied { map } for pid=460 comm="syz.0.45" path="socket:[3890]" dev="sockfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 29.228916][ T461] bridge0: port 3(syz_tun) entered blocking state [ 29.235392][ T461] bridge0: port 3(syz_tun) entered disabled state [ 29.241946][ T461] syz_tun: entered allmulticast mode [ 29.247961][ T461] syz_tun: entered promiscuous mode [ 29.253546][ T461] bridge0: port 3(syz_tun) entered blocking state [ 29.260049][ T461] bridge0: port 3(syz_tun) entered forwarding state [ 29.319090][ T455] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 29.393977][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 29.408002][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 29.418368][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 29.429592][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 29.439497][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 29.450242][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 29.459833][ T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 29.475052][ T46] usb 2-1: USB disconnect, device number 2 [ 29.913332][ T466] overlayfs: failed to resolve './file2': -2 [ 29.988503][ T478] No source specified [ 30.032147][ T480] Config c/1 of g1 needs at least one function. [ 30.038496][ T480] udc dummy_udc.0: failed to start g1: -22 [ 30.048016][ T480] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 30.066795][ T480] UDC core: g1: couldn't find an available UDC or it's busy [ 30.133423][ T470] cgroup: fork rejected by pids controller in /syz0 [ 30.301513][ T512] netlink: 112 bytes leftover after parsing attributes in process `syz.1.54'. [ 30.335414][ T512] kvm: kvm [511]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x7e16 [ 30.351788][ T512] kvm: kvm [511]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1ff2 [ 30.362574][ T512] kvm: kvm [511]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x812a [ 30.381413][ T64] usb 4-1: USB disconnect, device number 2 [ 30.394383][ T512] kvm: MONITOR instruction emulated as NOP! [ 30.574721][ T538] No source specified [ 30.744973][ T545] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 30.748947][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.768873][ T455] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.939940][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.948912][ T455] usb 2-1: Using ep0 maxpacket: 32 [ 30.951338][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.960743][ T455] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 30.989722][ T455] usb 2-1: config 0 has no interface number 0 [ 30.990431][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 31.005035][ T455] usb 2-1: config 0 interface 184 has no altsetting 0 [ 31.006220][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.020895][ T455] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.026870][ T10] usb 3-1: config 0 descriptor?? [ 31.030114][ T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.043945][ T455] usb 2-1: Product: syz [ 31.048152][ T455] usb 2-1: Manufacturer: syz [ 31.052876][ T455] usb 2-1: SerialNumber: syz [ 31.058264][ T455] usb 2-1: config 0 descriptor?? [ 31.064498][ T455] smsc75xx v1.0.0 [ 31.081727][ T459] rust_binder: 459:459 release transaction 3 in, still active [ 31.196395][ T559] kvm: kvm [558]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x7e16 [ 31.210202][ T559] kvm: kvm [558]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1ff2 [ 31.218874][ T559] kvm: kvm [558]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x812a [ 31.243286][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.257357][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.268679][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.279990][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.297896][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.306897][ T10] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 31.898854][ T64] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.906769][ T591] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.080016][ T64] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.093219][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.099896][ T64] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 32.109030][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.118200][ T64] usb 4-1: config 0 descriptor?? [ 32.250783][ T10] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 32: -71 [ 32.260971][ T10] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense firmware info: -71 [ 32.273813][ T10] playstation 0003:054C:0DF2.0001: Failed to get firmware info from DualSense [ 32.273841][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 32.282860][ T10] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 32.306539][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 32.315987][ T10] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 32.316229][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 32.339381][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 32.347992][ T594] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.349300][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 32.359588][ T594] SELinux: failed to load policy [ 32.369591][ T455] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 32.383864][ T455] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 32.392428][ T10] usb 3-1: USB disconnect, device number 3 [ 32.414157][ T455] usb 2-1: USB disconnect, device number 3 [ 32.539863][ T64] hid (null): unknown global tag 0xc [ 32.546489][ T64] uclogic 0003:5543:0522.0002: unknown global tag 0xc [ 32.553365][ T64] uclogic 0003:5543:0522.0002: item 0 2 1 12 parsing failed [ 32.560874][ T64] uclogic 0003:5543:0522.0002: parse failed [ 32.566830][ T64] uclogic 0003:5543:0522.0002: probe with driver uclogic failed with error -22 [ 32.708865][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.860042][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 32.871211][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.885056][ T46] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 32.894187][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.905570][ T46] usb 1-1: config 0 descriptor?? [ 33.026348][ T620] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 33.035993][ T620] SELinux: failed to load policy [ 33.169043][ T455] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.318871][ T455] usb 2-1: Using ep0 maxpacket: 8 [ 33.325066][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 33.331205][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.339576][ T455] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.347949][ T46] usb 1-1: USB disconnect, device number 6 [ 33.354210][ T455] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 7 [ 33.368021][ T455] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 33.377165][ T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.385204][ T455] usb 2-1: Product: 焜ᷢ؝鵻㎶冼鷞ﻺ怼㍓ɬ䀮뤪曲퉝ǒ馷꾑ꛋ雟ϧꝮ烘蒵ュ﵌嬏䯨䩯嶼玶䰱鑹䳽◒靥峌㻌┋轵ꔊ嫁ϝ䢟郟㡜䞵쬱枻轧帢⎍繙톀佚⬧툳ꚗꤦ꤂ਗ਼韨岅蜑䘶Ⱟ㩀建流ᙹ셢ðࢡ纲㦉ゑؚ䤖ꊍ藝 [ 33.411638][ T455] usb 2-1: Manufacturer: А [ 33.416171][ T455] usb 2-1: SerialNumber: Л [ 33.625524][ T455] usb 2-1: 1:1 : bogus bTerminalLink 6 [ 33.634202][ T455] usb 2-1: USB disconnect, device number 4 [ 33.647674][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.088965][ T455] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.141040][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 34.141057][ T36] audit: type=1400 audit(1789685873.160:218): avc: denied { write } for pid=638 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.166474][ T36] audit: type=1400 audit(1789685873.160:219): avc: denied { read } for pid=638 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.185939][ T36] audit: type=1400 audit(1789685873.160:220): avc: denied { append } for pid=638 comm="syz.1.93" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.220390][ T641] SELinux: failed to load policy [ 34.258833][ T455] usb 1-1: Using ep0 maxpacket: 32 [ 34.265288][ T455] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.273777][ T455] usb 1-1: config 0 has no interface number 0 [ 34.280106][ T455] usb 1-1: config 0 interface 184 has no altsetting 0 [ 34.288481][ T455] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.288910][ T391] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.298482][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.313174][ T455] usb 1-1: Product: syz [ 34.317336][ T455] usb 1-1: Manufacturer: syz [ 34.321968][ T455] usb 1-1: SerialNumber: syz [ 34.327357][ T455] usb 1-1: config 0 descriptor?? [ 34.333276][ T455] smsc75xx v1.0.0 [ 34.448839][ T391] usb 3-1: Using ep0 maxpacket: 16 [ 34.456589][ T391] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 34.465861][ T391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.474003][ T391] usb 3-1: Product: syz [ 34.478183][ T391] usb 3-1: Manufacturer: syz [ 34.482834][ T391] usb 3-1: SerialNumber: syz [ 34.667533][ T64] usb 4-1: USB disconnect, device number 3 [ 34.694252][ T391] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.701359][ T391] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 34.709253][ T391] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 34.726308][ T391] usb 3-1: USB disconnect, device number 4 [ 34.740268][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.159666][ T36] audit: type=1400 audit(1789685874.180:221): avc: denied { connect } for pid=680 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.179912][ T681] tipc: Started in network mode [ 35.184820][ T681] tipc: Node identity 4, cluster identity 4711 [ 35.191067][ T681] tipc: Node number set to 4 [ 35.196219][ T36] audit: type=1400 audit(1789685874.210:222): avc: denied { write } for pid=680 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.216208][ T664] tipc: Subscription rejected, illegal request [ 35.233131][ T36] audit: type=1400 audit(1789685874.250:223): avc: denied { create } for pid=678 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.252907][ T36] audit: type=1400 audit(1789685874.250:224): avc: denied { connect } for pid=678 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.342714][ T36] audit: type=1400 audit(1789685874.360:225): avc: denied { mount } for pid=687 comm="syz.3.106" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.365193][ T36] audit: type=1400 audit(1789685874.360:226): avc: denied { search } for pid=687 comm="syz.3.106" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.387230][ T36] audit: type=1400 audit(1789685874.360:227): avc: denied { write } for pid=687 comm="syz.3.106" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 35.488872][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.538961][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 35.551273][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 35.560976][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 35.572415][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 35.582319][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 35.592827][ T455] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 35.602457][ T455] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 35.615802][ T455] usb 1-1: USB disconnect, device number 7 [ 35.649140][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 35.655820][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.664663][ T46] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 35.675112][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.685826][ T46] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 35.695193][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.703676][ T46] usb 3-1: Product: syz [ 35.707986][ T46] usb 3-1: Manufacturer: syz [ 35.712901][ T46] usb 3-1: SerialNumber: syz [ 35.833279][ T717] can: request_module (can-proto-0) failed. [ 35.924600][ T46] usb 3-1: selecting invalid altsetting 1 [ 35.935307][ T46] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.947610][ T46] usb 3-1: USB disconnect, device number 5 [ 35.961526][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.092638][ T751] SELinux: failed to load policy [ 36.138721][ T755] loop7: detected capacity change from 0 to 7 [ 36.145481][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.154682][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.162676][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.171954][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.180910][ T755] loop7: unable to read partition table [ 36.187870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.187878][ T755] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 36.210577][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.218547][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.235610][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.244800][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.252954][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.262130][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.272528][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.281734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.289830][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.290600][ T455] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.299008][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.434977][ T766] No source specified [ 36.459900][ T455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.475376][ T455] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.484753][ T455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.493835][ T455] usb 4-1: config 0 descriptor?? [ 36.665382][ T779] tipc: Started in network mode [ 36.670313][ T779] tipc: Node identity 4, cluster identity 4711 [ 36.676474][ T779] tipc: Node number set to 4 [ 36.681631][ T723] tipc: Subscription rejected, illegal request [ 36.703794][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.708966][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.716984][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.730838][ T455] usbhid 4-1:0.0: can't add hid device: -71 [ 36.736843][ T455] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.748177][ T455] usb 4-1: USB disconnect, device number 4 [ 36.758838][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.879939][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 36.890798][ T46] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.901815][ T46] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 36.914759][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.921577][ T46] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 36.928884][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 36.930686][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.944690][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.953106][ T46] usb 2-1: config 0 descriptor?? [ 36.959380][ T10] usb 3-1: config 0 has no interface number 0 [ 36.968973][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 36.977592][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.986777][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.994814][ T10] usb 3-1: Product: syz [ 36.999148][ T10] usb 3-1: Manufacturer: syz [ 37.003785][ T10] usb 3-1: SerialNumber: syz [ 37.009532][ T10] usb 3-1: config 0 descriptor?? [ 37.015481][ T10] smsc75xx v1.0.0 [ 37.098839][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.163153][ T786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.172377][ T786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.180548][ T46] usbhid 2-1:0.0: can't add hid device: -32 [ 37.186967][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 37.208847][ T391] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.248868][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 37.255024][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.265361][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 37.276292][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.286100][ T64] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 37.297157][ T64] usb 1-1: config 1 interface 1 has no altsetting 0 [ 37.305095][ T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.314171][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.322233][ T64] usb 1-1: Product: syz [ 37.326421][ T64] usb 1-1: Manufacturer: syz [ 37.331302][ T64] usb 1-1: SerialNumber: syz [ 37.370157][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.381305][ T391] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 37.390384][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.399186][ T391] usb 4-1: config 0 descriptor?? [ 37.539085][ T64] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 37.547024][ T64] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 37.563239][ T64] usb 1-1: USB disconnect, device number 8 [ 37.574028][ T587] udevd[587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.060521][ T792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 38.209285][ T391] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 38.211051][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.219363][ T391] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input4 [ 38.234146][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 38.244446][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.252805][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 38.263281][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 38.276562][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 38.286424][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 38.296898][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 38.307547][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 38.318017][ C0] ------------[ cut here ]------------ [ 38.323483][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 38.332067][ C0] index 6691 is out of range for type 'const int[34]' [ 38.338921][ C0] CPU: 0 UID: 0 PID: 335 Comm: udevd Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 38.338944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.338961][ C0] Call Trace: [ 38.338966][ C0] [ 38.338973][ C0] __dump_stack+0x21/0x30 [ 38.339007][ C0] dump_stack_lvl+0x140/0x1c0 [ 38.339031][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.339056][ C0] dump_stack+0x19/0x20 [ 38.339078][ C0] ubsan_epilogue+0xe/0x40 [ 38.339092][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 38.339118][ C0] aiptek_irq+0x208d/0x2a00 [ 38.339143][ C0] ? __cfi_mon_bin_complete+0x10/0x10 [ 38.339168][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.339183][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 38.339201][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 38.339220][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 38.339236][ C0] dummy_timer+0xa3f/0x4900 [ 38.339261][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.339279][ C0] ? timerqueue_del+0xd7/0x130 [ 38.339302][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 38.339329][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.339346][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 38.339373][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 38.339397][ C0] ? read_tsc+0xd/0x20 [ 38.339419][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 38.339442][ C0] hrtimer_run_softirq+0x159/0x560 [ 38.339457][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 38.339482][ C0] handle_softirqs+0x1aa/0x620 [ 38.339500][ C0] __irq_exit_rcu+0x47/0xb0 [ 38.339516][ C0] irq_exit_rcu+0xd/0x30 [ 38.339531][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 38.339553][ C0] [ 38.339559][ C0] [ 38.339565][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 38.339586][ C0] RIP: 0010:clear_page_erms+0xb/0x30 [ 38.339608][ C0] Code: 48 8d 7f 40 75 d9 90 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa e9 8e 7c 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 38.339622][ C0] RSP: 0018:ffffc9000b887538 EFLAGS: 00010246 [ 38.339657][ C0] RAX: 0000000000000000 RBX: 1ffff92001710eac RCX: 00000000000008c0 [ 38.339675][ C0] RDX: ffff88811da0b000 RSI: 0000000000000005 RDI: ffff88811da0b740 [ 38.339694][ C0] RBP: ffffc9000b8875f0 R08: ffffea00047683f7 R09: 0000000000000000 [ 38.339713][ C0] R10: ffffed1023b41000 R11: fffff940008ed07f R12: 0000000000000008 [ 38.339724][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000003 [ 38.339737][ C0] ? post_alloc_hook+0x179/0x3b0 [ 38.339761][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 38.339783][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 38.339801][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 38.339816][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 38.339842][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.339867][ C0] prep_new_page+0x2d/0x180 [ 38.339889][ C0] get_page_from_freelist+0x4aea/0x4ba0 [ 38.339915][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.339941][ C0] ? __kernel_text_address+0x11/0x40 [ 38.339966][ C0] ? stack_trace_save+0xaa/0x100 [ 38.339984][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 38.340008][ C0] ? static_key_count+0x45/0x70 [ 38.340029][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 38.340047][ C0] ? lruvec_init+0x211/0x280 [ 38.340065][ C0] ? kasan_save_track+0x4f/0x80 [ 38.340085][ C0] __alloc_pages_noprof+0x35a/0x7e0 [ 38.340109][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.340137][ C0] alloc_slab_page+0x6b/0x1e0 [ 38.340159][ C0] allocate_slab+0x69/0x430 [ 38.340179][ C0] ___slab_alloc+0x591/0x8c0 [ 38.340197][ C0] ? getname_flags+0xcc/0x6b0 [ 38.340215][ C0] ? __kmalloc_node_noprof+0x252/0x500 [ 38.340233][ C0] kmem_cache_alloc_noprof+0x290/0x410 [ 38.340249][ C0] ? __check_object_size+0x54c/0x870 [ 38.340266][ C0] ? getname_flags+0xcc/0x6b0 [ 38.340285][ C0] getname_flags+0xcc/0x6b0 [ 38.340302][ C0] ? _copy_from_user+0x87/0xa0 [ 38.340326][ C0] user_path_at+0x2b/0x60 [ 38.340345][ C0] path_setxattr+0x250/0x5a0 [ 38.340365][ C0] ? simple_xattrs_free+0x180/0x180 [ 38.340388][ C0] ? __cfi_do_fchownat+0x10/0x10 [ 38.340409][ C0] ? do_faccessat+0xd00/0xd00 [ 38.340424][ C0] __x64_sys_lsetxattr+0xc6/0xe0 [ 38.340440][ C0] x64_sys_call+0x2db8/0x2ee0 [ 38.340455][ C0] do_syscall_64+0x57/0xf0 [ 38.340469][ C0] ? clear_bhb_loop+0x50/0xa0 [ 38.340489][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.340507][ C0] RIP: 0033:0x7f420651d57a [ 38.340525][ C0] Code: 48 83 c4 08 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 31 db eb e4 0f 1f 40 00 49 89 ca b8 bd 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 4e 38 0d 00 f7 d8 64 89 01 48 [ 38.340538][ C0] RSP: 002b:00007fff3ab22e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 38.340553][ C0] RAX: ffffffffffffffda RBX: 000055e05c520c40 RCX: 00007f420651d57a [ 38.340565][ C0] RDX: 000055e05c520c40 RSI: 00007f4206bb429c RDI: 000055e05c4af200 [ 38.340595][ C0] RBP: 000055e05c2708d0 R08: 0000000000000000 R09: 0000000000000030 [ 38.340606][ C0] R10: 000000000000001f R11: 0000000000000246 R12: 000055e05c4af200 [ 38.340616][ C0] R13: 0000000000000001 R14: 000055e05c4af200 R15: 000055e05c51ff30 [ 38.340630][ C0] [ 38.340635][ C0] ---[ end trace ]--- [ 38.854519][ C0] ------------[ cut here ]------------ [ 38.859990][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 38.868575][ C0] index 6692 is out of range for type 'const int[34]' [ 38.875419][ C0] CPU: 0 UID: 0 PID: 335 Comm: udevd Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 38.875442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.875452][ C0] Call Trace: [ 38.875458][ C0] [ 38.875464][ C0] __dump_stack+0x21/0x30 [ 38.875491][ C0] dump_stack_lvl+0x140/0x1c0 [ 38.875514][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.875537][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.875555][ C0] dump_stack+0x19/0x20 [ 38.875576][ C0] ubsan_epilogue+0xe/0x40 [ 38.875591][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 38.875639][ C0] aiptek_irq+0x1f3c/0x2a00 [ 38.875676][ C0] ? __cfi_mon_bin_complete+0x10/0x10 [ 38.875699][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.875713][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 38.875731][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 38.875748][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 38.875764][ C0] dummy_timer+0xa3f/0x4900 [ 38.875789][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.875807][ C0] ? timerqueue_del+0xd7/0x130 [ 38.875829][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 38.875854][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.875871][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 38.875897][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 38.875921][ C0] ? read_tsc+0xd/0x20 [ 38.875942][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 38.875963][ C0] hrtimer_run_softirq+0x159/0x560 [ 38.875978][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 38.876003][ C0] handle_softirqs+0x1aa/0x620 [ 38.876020][ C0] __irq_exit_rcu+0x47/0xb0 [ 38.876035][ C0] irq_exit_rcu+0xd/0x30 [ 38.876050][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 38.876082][ C0] [ 38.876090][ C0] [ 38.876099][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 38.876134][ C0] RIP: 0010:clear_page_erms+0xb/0x30 [ 38.876156][ C0] Code: 48 8d 7f 40 75 d9 90 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa e9 8e 7c 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 38.876169][ C0] RSP: 0018:ffffc9000b887538 EFLAGS: 00010246 [ 38.876183][ C0] RAX: 0000000000000000 RBX: 1ffff92001710eac RCX: 00000000000008c0 [ 38.876195][ C0] RDX: ffff88811da0b000 RSI: 0000000000000005 RDI: ffff88811da0b740 [ 38.876206][ C0] RBP: ffffc9000b8875f0 R08: ffffea00047683f7 R09: 0000000000000000 [ 38.876217][ C0] R10: ffffed1023b41000 R11: fffff940008ed07f R12: 0000000000000008 [ 38.876228][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000003 [ 38.876240][ C0] ? post_alloc_hook+0x179/0x3b0 [ 38.876264][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 38.876286][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 38.876303][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 38.876317][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 38.876331][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.876357][ C0] prep_new_page+0x2d/0x180 [ 38.876379][ C0] get_page_from_freelist+0x4aea/0x4ba0 [ 38.876405][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.876430][ C0] ? __kernel_text_address+0x11/0x40 [ 38.876455][ C0] ? stack_trace_save+0xaa/0x100 [ 38.876474][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 38.876498][ C0] ? static_key_count+0x45/0x70 [ 38.876520][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 38.876538][ C0] ? lruvec_init+0x211/0x280 [ 38.876555][ C0] ? kasan_save_track+0x4f/0x80 [ 38.876575][ C0] __alloc_pages_noprof+0x35a/0x7e0 [ 38.876599][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.876640][ C0] alloc_slab_page+0x6b/0x1e0 [ 38.876661][ C0] allocate_slab+0x69/0x430 [ 38.876681][ C0] ___slab_alloc+0x591/0x8c0 [ 38.876699][ C0] ? getname_flags+0xcc/0x6b0 [ 38.876718][ C0] ? __kmalloc_node_noprof+0x252/0x500 [ 38.876736][ C0] kmem_cache_alloc_noprof+0x290/0x410 [ 38.876752][ C0] ? __check_object_size+0x54c/0x870 [ 38.876769][ C0] ? getname_flags+0xcc/0x6b0 [ 38.876787][ C0] getname_flags+0xcc/0x6b0 [ 38.876805][ C0] ? _copy_from_user+0x87/0xa0 [ 38.876829][ C0] user_path_at+0x2b/0x60 [ 38.876849][ C0] path_setxattr+0x250/0x5a0 [ 38.876868][ C0] ? simple_xattrs_free+0x180/0x180 [ 38.876891][ C0] ? __cfi_do_fchownat+0x10/0x10 [ 38.876912][ C0] ? do_faccessat+0xd00/0xd00 [ 38.876927][ C0] __x64_sys_lsetxattr+0xc6/0xe0 [ 38.876944][ C0] x64_sys_call+0x2db8/0x2ee0 [ 38.876958][ C0] do_syscall_64+0x57/0xf0 [ 38.876972][ C0] ? clear_bhb_loop+0x50/0xa0 [ 38.876992][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.877010][ C0] RIP: 0033:0x7f420651d57a [ 38.877034][ C0] Code: 48 83 c4 08 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 31 db eb e4 0f 1f 40 00 49 89 ca b8 bd 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 4e 38 0d 00 f7 d8 64 89 01 48 [ 38.877046][ C0] RSP: 002b:00007fff3ab22e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 38.877060][ C0] RAX: ffffffffffffffda RBX: 000055e05c520c40 RCX: 00007f420651d57a [ 38.877071][ C0] RDX: 000055e05c520c40 RSI: 00007f4206bb429c RDI: 000055e05c4af200 [ 38.877082][ C0] RBP: 000055e05c2708d0 R08: 0000000000000000 R09: 0000000000000030 [ 38.877091][ C0] R10: 000000000000001f R11: 0000000000000246 R12: 000055e05c4af200 [ 38.877101][ C0] R13: 0000000000000001 R14: 000055e05c4af200 R15: 000055e05c51ff30 [ 38.877115][ C0] [ 38.877120][ C0] ---[ end trace ]--- [ 39.310173][ T46] usb 4-1: USB disconnect, device number 5 [ 39.315862][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 39.415657][ T10] usb 3-1: USB disconnect, device number 6 [ 39.440010][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 39.440027][ T36] audit: type=1400 audit(1789685878.460:249): avc: denied { getattr } for pid=798 comm="syz.3.130" path="/34/tracing/events/eprobes/my_read_msr1/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.474036][ T36] audit: type=1400 audit(1789685878.500:250): avc: denied { setattr } for pid=798 comm="syz.3.130" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 39.495732][ T36] audit: type=1400 audit(1789685878.500:251): avc: denied { read } for pid=798 comm="syz.3.130" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.520655][ T36] audit: type=1400 audit(1789685878.500:252): avc: denied { open } for pid=798 comm="syz.3.130" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.544038][ T36] audit: type=1400 audit(1789685878.500:253): avc: denied { block_suspend } for pid=798 comm="syz.3.130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.568155][ T455] usb 2-1: USB disconnect, device number 5