last executing test programs: 4.444978204s ago: executing program 0 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x79, 0x0, 0x3, 0xcb, 0x2, 0xfe, 0x6, 0x6, 0xa}, {0x25000, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0x4}, {0x2, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x6, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x54000, 0x0, 0x9, 0x4, 0x81, 0x0, 0x97, 0x0, 0x3, 0x3, 0x9}, {0x0, 0x1ffc, 0x3, 0x0, 0x82, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x8, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0xfc, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x5, 0x1, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0xd000, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x20000001, 0x2]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}}, 0x10000000) sendmsg$nl_netfilter(r3, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac100000020803002abd7000fcdbdf250300000a0800ee00000000008f101580b0d44ece744a185dade766edf4a9b8401441365bf0017b82ed9624db52ffd9bfa85dfea6580c070193ccf884b1c91ff5957cfe89bac99e90b10101fd34377bba6c4959c7aa3d32ced53521493f875740c396cab28468390ec8554389e38488555ad259590ed688d15a91e33bef5c4ff81d5a27737c505fc6ba55145bcacdfc787acec218df9224ba293b02f740942bdc999d8edeb4264c20ca0eabb62a0ae44a626048b5edba1a21c814f2d01f4a422b6dd5ff75ffffdaeab75b4f9ec08c78f4a705bad33c495b4f2c6023bc67f3d7ab7cbedad3b405eef956de395201d6e9813d839532bff448ac2d8f9db6e6fb4b50e77e3fed94b5de45d781be197dcb768e038de28b1b8e019da076f91939ea7950f9b404b4982d794759c8247490917eabc6e7f5daf655f79aae0b4a45fe2b3d7b511605878ea3a2bdcb608a932cd929e0b171c0523b30fb38ad387c761cf22a58d44c17847ab295c6fc4f377823a2511fe25b1fbc7376ae0101b4c8d736a3fb7054eccf9b243c15c180d407355eface5523a16c8aebc33d68727ccc462e56db8f0ca5a7da6a794ecf0eb7da3a211bee65e65d8e99bdd111183a44db6540be7c59ef6d4373971923f38a24163e56c38fa0a0f84504da59ec3c235bfc49de6ca08b03ccfc41a8368e462e884e40c3cfa4b0828b7b961ca67c10eadb480d88127a96e9d0d6ad780fd76658b68a5e8f134c88dcd2ae145d081a957b911777821bd334f4c9b8153e9b329218ea386e466b135732eb9b36bb7cb7616f951cd4919e012ab9dc626d03ed32ceed9ebc16cbba344a48224787a462ea282d5d5ab6e0c01c5cec44dc5c51c6bb6c4e5e0cca44913c43b682347d726f5c4d0710916dd314106295e4d6a2a9099a8a54008d887f94a1a2c861f4d12ff03599734af4fdcadbf8570fed3ffd3bedc43a9ca9f787b377b0a23a49d775af9f9b980e950e1afeb8e6a0ea4e979d6213149afcbfcc31bf1318d568c6f614ce28fc5fe3e6740f5bb1eb021cf1570cbf2f6d4706f05874c4ad2fb96a96f0b76ae338fd1b077f8ed4efac3e4d116930bd69c6461e959172176c5cddf63285c3679330a07b4a86aaa8d13eb95ddb47ae1338f2d1f0cb30d804fa107a3aae9cf45f99ea5ef33ba79f611e1790150dbf4f3baa760e40a9e71eaa7b203fae4e0f22614c995f5d8a55a212160a1bc9870fdb3c82a7c2a9eb76d882564f1fe9cecff7ea52635ce3477746b5bee136f7bb36ccaaecb7b5162b8522ff52c0d74a8bbecdf8a1a449959f458cb4bd0ff3b8cee88275d1ae00fafddd21d6f4bcaac9d03f7a2d37267273181f1479ddd085ef51ce5228446697e8460e32bd50d8c8fb0a0b0a131015164fc59603d4bb846dc238611b51e3ea7d33eb1bd20929060ea4897b43cffd98e0c3d33786cb9f3d3b5e12705a31b9b247b4f642a1aac255929cdbab2601cf81018af9fbd23193c64b4b3aa51cdc8a87bbc49189dd6d3772dfb2a3e02207ff74152dec140e44a586134637f0442aede018e6417b6b6f06ce9a1b91a4dbf6b7ba60e988b670302511090f84fb873139b3f216e8e9e4b65f9ee6ed779b6de456172354c163f8f3558b43e8a2e30e921de57c461bb6beb1c915142293f1f248624e274b330017c1017c7ab4acf8c2ba2a6f91e751b61046e8085716ff558ce460f9db5d55b4bee1f251a8efa62c9141e9a474d080e364a5b621860723cf41c284926ea87ab4e247ceb36dacd2acb414ae9b6917dd4d1697765e4cceb609900b867d5dc728e8e6ae028116fbe386b73193383489bb5aeafd7b42778436871ffacd51c1ddc3114159916340e133780d39166a7ec0572bbbe64a692e11424e7444d9e96ba138a1e48e593a8ed00aaf9f5275477b068560d8bb745ef1aa37ee5b2863ebfc2066d0505a1c441cab84c16144bdfed8f67bfbcedc8d02083b9548621b62d92e3d9c9291b6f418fcc23526afa5d72807ee849967f304d0c6f2859643a77d7cd8b7edbb18ddc8592b21e1e22c9cbe718ed13351aa92e1402bc8c3cf5a0f548acc1c3cf4c8275004d1df26db910f8c22a3c7d42d371530123b77bf9d17e3a54588bc48c6992287ec19413def7a2d793aa89a2e9cb33408a5fdf96b9fa555b8f730095d6902d3a76a161ab7387f62ba87775ba549bedb6aac4ae73b5eb4ef5805ab4da9cfd3c8cd0131c95389b06461653a07ecf6ce9131595f4aec3e8c1e4e2cba43565b00766ab72b67735da0572f561d56bd0baa0e9567de184c4e7e9cea550b4e3d0b2c78f8afbc031a922014dbab9ff262077b13b0aee1f756abc331c6be89d2f24e2d62a3d84d42e1b125eda21d9ec0c67a00c928d4cb9fa2572daf19ec55f40292de0c791816fde3c9c1318795631a33582b1eac6275bcc5bdd8e4561f5a1788a381cfa4eb50b0c44b0094c246a0b50521ab27c637f2497b93bfe727af76652bcc218ca174fadd5acd3034c8218ba373077862389b0fac332f38dd7ca085db9a455eb4b18259aaf22e59cfc54adf82bf6eafeadcff801570431ddf5c95e5cd10632bb12c139bf114cd9f9d93cdd62b310d7589e954085498944b34f6cf0db4bbcf3d9c449f0631f7a1523ab9b84397916cf276d5b786e270046927d48c1e463ea4b9ac8fac63c29f048012d41fdfc6a82809a8ba6f34f38b3a8ded669c896304a3610c76f090157064e5d99b447ee0fead3577cbd2ea909156f6ffd60ebed661aa095904b7a4d64f42aaa3f694f3da55db4d526b6bc24eeb3ef1251c84b6c9eb83b34763c80efa7e270195e22f16d61356800ed2ad27e5f82766626df0843d4897d79f40c2f9276f2a3896102f9efafe92bf255c676780739e74aeb1a1d8795f8be441bc63bdf18f5fccf74e0b71b82c45d740f5dd4b1d794d3dad5992671b77879500efaedea6f10152a901005db9fa47795bc3688a5a8e2bb045e21b891ef2ca30fc760396464313c2c46f9f6a3b516f044642419972d19cf70b32eac1a001934099e1ebd23d1aef6623af4ce8c38ffd7f2459da949f2153f3d818806c88967cf0d7a9eb39887c3b9fef52a0a47559d2359366d63a7d53fd8334065587d53cfe24a02ff6395eed32ad2555f3647ce20cb99fc1e3cff025cedf94f801e331e681544502276edde00c52cdd0bc7618d1679663f545c065a54259c7546b02082440b823e720ef09971e14097f0bb14ab74861ff730c629c7f9dda52836523a18cdc9f393d73644a4935cffc4314bc0bd18aaa90a4312082ae67432317a923fa5cae147c2b458d106879e1fff4f9476c3d22af5b37e1f75a39b1e97959776588861cd41ad0be45e427bf6079666ebffd266a2c689885afc9767cf03e65f47a0481af24b6c89cec8ba02a6bbc56116d810fb07e1c986101428138cfc3b99419f827bbaeac37f4cba86cc0f187a5eeac9e950c05da2cb140d21cc77096be60545f44966f79336d07311ea6383ded49ed19412e75f957b6d9aa62565982b27339a3219cb8484c25a56ef4a5e0b4b4d8c88c59ef2a0eb5371bf9186ef9b869591f7abc32730d54865a31c98a1bf40cd34c00b659b884f5d2b0815f8e1dea173ee212f5c0a265b618e2b2de2a40d1e77740787cda2f0ba400c250883b5aeb80f9dda78f85d10e58b22b9faab0fd26532d7f3650fb2ce729532b8537cfdc4ef078378f0414c2ef1e300967847247f9a8f772631b45413082383eb8839c6d111b3fe71f890aabe8cb55773e2942733e4ad7ada74959ef199314b965d8ddd8c44ebd2de409a4b16dca7708f244d3e2d0c3174e143fa0177114c14f5ad41d05d4a22f0d9e68c5097cddc2f884e5df8cdf35289ba6cf49ddb2bbccdfd9ce15b26a27afeaeeac81c856e42af4f39ac97a08cf9a37c9a0a0c01122e0c5c7c2e87ef83421605f084ac6d3faefbf9735b75d4c590ecf784df2c6dae38f03ad2e4cbf214a94a85cbd7688fedaf9e87b2f309eb40db473de7cbbc41fae5f634986090780bebe39d2caa826fad120323312dda25cdb082aa7f712af0e26e9c7531917d1e1037751915536a47709ffa507195cc3a44bd95b5aa1c3eed7651436fb81cc89045fc4cb5fcb98fe40bb7f7fa4e78288ee5298b126d74ab9aa349b4f1aecd825a66d668ae86dd109565ed51b5f202422dfbadcccbe95296a07b800e84fc2d142a42d4d3b47289fd53013bbe73059a6761934976c42622c3309942da1028d8c6e00d61ef1d4b02d1d56f3ffa64fa7587f0339d1087b9530fa9f2b9e61b7e66d752c698c349de8925e844e4df806ee893187b46f23e7e0bff56b0d25f2853bc1dc5fa64d1cacae6e130fbd6cf947ebc12154668aac6b38ade9b774d4519e54d993f40d8f66e7181fdc61d8f7ab89eff4fead617273119b56021624e0d6694e0cf51156947284c772cfe182333d4dad4ae15cfdf88324dd55edfe308df578b89bbc51c136f09a3cb4b9ae7acbcb4ede33abb34530ab439f4415d970c6237f66380bc3483d19ab037fda3e7b43f402468b82d5a493b9b867a322e61445fe6e8ba65cf1bb08cc45f5242e7ec9a81e18582a56b4ec27f633b98cba1a72443d1f6e1229138746b2ab2a81b63db57df9f679ccb6b1741468c882587676450c92ba090d305ddcfe1fc5a97a399e509869d9c0d9b1490e394f4becfdd2fe9bc062b955485d4f8d881253f47f27bb748a02b57dbfa6bbeb85834448543d5cec6b7fcab97c9248735c6f165e011ee1bf7d21ea1a8c4eb6b7e62b5aa69472fa5e4cdcf7dac528e542ac6ea2ed815340bfc2a75c17cc515b782e1b1f4317cd6654c8f8180924a9564fc90534156c5501d3670ede145158e6b469727f0376ebc53ee6faa2f9355d0995e7cc73e510beb28d002743960d1a176d854df5240eef0c1b2be5ba4d17cb4e4aa8cb17636e08e4fc939300a3a0e5e12fb579b786c2ccb8cc7699f2e924a2f6007bab396c8af6e32cead90598e6ce9e722317fffcd59a8cafd54c616cb2df2becea39a9bcb5ef1381f29f38e82caa027ddf964a8177eac12ee6b983f0bc60cc6292e7facb74802788bce9158c9042ecc07cdadc5a347265aa305c93bfcf1da5c8c8080e4c468b50c7850ae1829fe90774dde8a3b347947d660dca19f00815803e6b564f41875368666c71cf7c16860445e8fa8a4e9bef674f7d2ea1a3038d72b0deb8c78a7bc5b71dc89c4ab65dfe3c4b5c596c1c2d8b3162ab5fba670346569315dce5919ecceddb62c7d00b4742521aeb7b3ff7ac828e940f3464914457fb736a7ed11a0264dd0a4bb9db3206b2879f0bdebbb1a022c193775e5e4f82d3909474e625fa2506e2923d3cbd724f5caeba49b9c4e57009d021a72dcd07de72517417b6d0b76479bc72c41a4acff7583b1da7f306eeb2da1d924b9abe51405601b669068d7d3b04a5dca02bf7a35ece89dfead99aa5f5f636653e3ae30c055cf89d349143a5dc8ce9dcf03dee4dc8dc4e03a5c628d4f5c1c5ef171e74ba42799a51831637ee9f44677b02ce2cd3465073d0cbf368a336077b23daf67485fad52dc0306e7ecf97f02cc43ced5566c9c81caab6af6a22e1a31f229d9355c649a57299bb72b76d3a0f4bae84957946b6b9fd3dbf70827903992a3ab859a296342d84ff898e68c04bec42503c6c4c31e2a0cf298f89c1e9e769b9a50363c200dc5c0151a540f32806a1f629a15572afa76887fa073cbf7edd0f50bf5550aee256143dae9ef4e99be6eb45c88cdf36f2cf59f29586bc9ed5a32397d148ebc4da21f6dfd6c10cdbdfa77095e8587e68629b45a2e3e8be5775f796d7b1254b3e5e372285b730218c4f4af4d01b7693141c4555cf058b2345249bd822203e43d2c9dba4cf1bb4338e1940683cbe2851a9a02df4c8393c4e83dec30942b78e5006a06544f679e7cd98afd960734d3586bee83312b305b7c6bfdd235e90370df08205c7e696aa9a0dc8b241fc9b5d20cfac25846f91e5b2c5fbb1ae326aa52d7e15"], 0x10ac}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.293127376s ago: executing program 0 (id=311): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = epoll_create1(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r5, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = epoll_create1(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) r10 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xf0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [{0x2, 0x3, r9}, {0x2, 0x0, r10}, {0x2, 0x4, r11}, {0x2, 0x0, r12}], {0x4, 0x1}, [{0x8, 0x1, 0xee01}], {}, {0x20, 0x4}}, 0x4c, 0x0) setxattr$security_capability(&(0x7f0000000080)='./dev\x00', &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x3, 0x781b}, {0x6c22, 0x10}], r11}, 0x18, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000180)={0x2002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) close_range(r0, r4, 0x0) 3.399791576s ago: executing program 0 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001, 0x8, 0x0, 0x6, 0x1, 0xffffff61, 0x80000000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.269815474s ago: executing program 0 (id=316): r0 = memfd_create(0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x8008770b, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0) 2.845325954s ago: executing program 3 (id=325): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) open(&(0x7f00000000c0)='./file2\x00', 0x8080, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', &(0x7f0000000340), 0x4000) 2.844747704s ago: executing program 2 (id=326): r0 = socket$pptp(0x18, 0x1, 0x2) close(0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r1) bind$pptp(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) execveat(r3, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 2.686811058s ago: executing program 2 (id=327): setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r0, r0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r2 = inotify_init() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flock(r2, 0x8) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x4}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000000)={0x7fff, 0x200000, 0x5}) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.685384868s ago: executing program 3 (id=328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040088) pselect6(0x40, &(0x7f0000000000)={0x3, 0x4, 0x5, 0x3, 0x8, 0x6, 0x0, 0x2}, &(0x7f0000000080)={0xe, 0x3, 0x0, 0x5, 0x1, 0x2, 0x9, 0x5}, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') readv(r4, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x2, 0xf838, 0x68, &(0x7f0000000040)=""/104}) 2.611948464s ago: executing program 2 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000002540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r2, &(0x7f0000000340)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c", 0x4b) r3 = openat(r0, &(0x7f0000000000)='./mnt/trace_pipe\x00', 0x0, 0x8c) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) (async) r4 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.560064155s ago: executing program 2 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000046c000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="420f01c90f40730b0f01cab9f00b0000b8322a0000ba000000000f300fc7afbd4400006567450f30c744240007000000c744240260dd47fdc7442406000000000f011424420f01cac4c1e6510dbb000000b9490a00000f32", 0x58}], 0x1, 0x60, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400903000000451cd732fe62ebd7b6179fa5e6c9cc57eb47019ac175f73ae25214df4f1fb87ec40f3b65b33f25ef721b67bb86443e647fc8e1e30128062c1a8f6d0bf529ce78942c1779eb19ca9bd66aa314c835a920"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) setpriority(0x2, 0xff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001280)=ANY=[@ANYBLOB="e01000001000010000000000fedbdf25070000001300000008000000ffffffffc0101a80bc1007"], 0x10e0}], 0x1}, 0x4004080) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xab16}]}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x591a0fd3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r7, r7, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updsa={0x190, 0x1a, 0x20, 0x70bd2b, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e24, 0xa2, 0x2, 0x20, 0xc0, 0x3b, r6, r7}, {@in6=@private1, 0x4d4, 0x2b}, @in6=@loopback, {0x800, 0x7f, 0x1ff, 0x2, 0x10001, 0x8000000000000001, 0xfffffffffffffff7, 0x1}, {0x80, 0x8, 0x2, 0x7}, {0x6, 0x0, 0x83ad}, 0x70bd2a, 0x3503, 0x0, 0x5, 0x5, 0x8}, [@algo_crypt={0x96, 0x2, {{'ctr-aes-ce\x00'}, 0x270, "220c9e949837af513ef67e674a8bcc9f4be99f1bc3b41290e6ef00e148fa827702c543dd3d0f2290ed6248d8bd16914f556519d27bec856b1e4cd4981901716f5bfc1f8b84821f490406e0cc3c0a"}}, @iptfs_init_delay={0x8, 0x27, 0x1}]}, 0x190}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000020040000000000000000600000000000000000000000800000000000000000000001000000000000004400050000000000000000000000000000000001000004d2320000001a000000000000000000000000000000010000000000000000000000000000000000000000c1569b5aef311ee57632f3dd7ca9710974d00677e48f921e07e9cd235c45d9e18f4cbd588519cc32ad94c3c1a3dcb1e3937bc9f6c91e"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x100000001, 0x9}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) 2.509339785s ago: executing program 1 (id=331): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x4, 0x7, 0x4a, @mcast1, @empty, 0x1, 0x1, 0xdff, 0x7}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa002803f}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000540)=0x8) 2.508998685s ago: executing program 1 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @random="3d9f8e260109"}, 0x10) 2.360385948s ago: executing program 1 (id=333): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x20, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{}, "e843f72bed5bf08c", "f9fd3a73fab1e6af0178c60533e8cf37", "174c2f7c", "04ca9414a7f2484c"}, 0x28) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000002100)=0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 986.17485ms ago: executing program 1 (id=334): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000018000000000007000a0002"], 0x30}}, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8900, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 822.332375ms ago: executing program 1 (id=335): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000019340)={0x20071026}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6f9, 0x0, 0x0, 0x1000, 0xb}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x83, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 793.043941ms ago: executing program 1 (id=336): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x9, @none, 0x4, 0x2}, 0xe) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2880) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1de) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) read(r6, &(0x7f0000000540)=""/242, 0xf2) pwrite64(r5, &(0x7f0000001000)="104e2ba9", 0x4, 0xffc) fsync(r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='md0', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000800)='1:0', 0x3) listen(r1, 0x3) 611.53182ms ago: executing program 2 (id=337): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 498.757084ms ago: executing program 3 (id=338): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) socket$inet6(0xa, 0x4, 0x3) 498.453334ms ago: executing program 3 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) setpgid(0x0, r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd07bb9061e7b300b052001000005362cf004200000060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 468.92888ms ago: executing program 2 (id=340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000130005000000000000000000030107fe100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x35) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4000008) (async, rerun: 64) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) (async) landlock_restrict_self(r7, 0x0) (async) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r11, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (rerun: 64) 162.861085ms ago: executing program 0 (id=341): openat$kvm(0xffffffffffffff9c, 0x0, 0x2702, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f000001a000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000011f000/0x4000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0xa1c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2c}}}, 0x0) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0xa1c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2c}}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$PTP_PEROUT_REQUEST2(r7, 0x800448d2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x410000, 0x104) (async) open(&(0x7f0000000000)='./file0\x00', 0x410000, 0x104) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/file0\x00', 0x111082, 0x48) pread64(r8, &(0x7f0000000100)=""/43, 0x2b, 0x5) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) (async) r9 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0) (async) syz_usb_control_io$uac1(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 34.993373ms ago: executing program 3 (id=342): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x0, 0x37e9, 0x10001) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) socket$inet6(0xa, 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x31, 0x63, 0x36, 0x35, 0x3, 0x30, 0x36, 0x31, 0x35, 0x61, 0x39, 0x32, 0x65, 0x33, 0x66]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccc9cc307a00844fc79e2bfe20c79db701e5ddeeff80000800", 0x31}, 0x48, r3) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x62, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x34, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x34, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x36, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233446366778899aabbccddeeff00112233445566eeff00112233445503000000aa91cc7b90e55b668fd3b900", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x38, 0x34, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r3) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x1, 0x65, 0x32, 0x66, 0x33, 0x64, 0x66, 0x2, 0x32, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f1de80700", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "d56222334400e600f198aabbccddeeff8899aabbccddeeff0011223344778899aabbccddeeff0050733ba9ff474400000000000000000000ef940ffa00", 0x30}, 0x48, r3) 17.995376ms ago: executing program 0 (id=343): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) r1 = fsopen(&(0x7f0000000300)='befs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(r2, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0xd9) (rerun: 32) syz_open_procfs$userns(0x0, &(0x7f0000002840)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 64) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/45, 0x2d) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) chroot(0x0) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) (rerun: 32) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = syz_ublk_setup_io_uring(0x58c3, &(0x7f0000000040)={0x0, 0x3dbf, 0x2, 0x2, 0x35f}, &(0x7f0000000000), &(0x7f0000000280), 0x0) (async, rerun: 32) r4 = open$dir(&(0x7f0000000040)='./mnt\x00', 0xa00, 0x2) (rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000200)={r1, 0x0, 0x9, 0x1, 0x7fffffffffffffff, 0x8, [0x2, 0xe14, 0x3, 0x800040, 0x1, 0x4aa]}) (rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) 0s ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mincore(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x9, 0xf, 0x5, 0x4, 0x44, 0xff, 0x0, 0x34, 0x9}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x1, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0x5, 0x8, 0x85}, {0x200000, 0x8080000, 0x10, 0x6, 0x7, 0x3, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0xfec00000, 0x2000, 0x10, 0x3, 0x5, 0x0, 0xab, 0x8, 0x11, 0x83, 0xf7, 0x7}, {0x2000, 0xb000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x9000, 0xc, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x18, 0xee, 0x9}, {0xe000, 0x3}, {0x3000, 0x2}, 0x80000031, 0x0, 0x26000, 0x42064, 0x400000006, 0x9000, 0x25000, [0x400000000000a2, 0x5, 0x400000000063, 0x7]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'macvtap0\x00', {0x2, 0x4e24, @multicast2}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 34.453791][ T36] audit: type=1400 audit(1790492036.040:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.458907][ T287] cgroup: Unknown subsys name 'net' [ 34.487253][ T36] audit: type=1400 audit(1790492036.040:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.525472][ T36] audit: type=1400 audit(1790492036.080:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.526147][ T287] cgroup: Unknown subsys name 'devices' [ 34.642655][ T287] cgroup: Unknown subsys name 'hugetlb' [ 34.652074][ T287] cgroup: Unknown subsys name 'rlimit' [ 34.754740][ T36] audit: type=1400 audit(1790492036.340:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.789606][ T36] audit: type=1400 audit(1790492036.340:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.828889][ T36] audit: type=1400 audit(1790492036.340:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.869682][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.885193][ T36] audit: type=1400 audit(1790492036.470:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 34.923859][ T36] audit: type=1400 audit(1790492036.470:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.984017][ T36] audit: type=1400 audit(1790492036.570:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.985613][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.034693][ T36] audit: type=1400 audit(1790492036.570:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.397552][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.412828][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.433570][ T297] bridge_slave_0: entered allmulticast mode [ 36.442240][ T297] bridge_slave_0: entered promiscuous mode [ 36.471611][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.483852][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.500117][ T294] bridge_slave_0: entered allmulticast mode [ 36.512322][ T294] bridge_slave_0: entered promiscuous mode [ 36.523865][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.537621][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.553430][ T297] bridge_slave_1: entered allmulticast mode [ 36.568209][ T297] bridge_slave_1: entered promiscuous mode [ 36.596270][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.606996][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.626361][ T294] bridge_slave_1: entered allmulticast mode [ 36.638416][ T294] bridge_slave_1: entered promiscuous mode [ 36.708578][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.721092][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.731381][ T296] bridge_slave_0: entered allmulticast mode [ 36.744381][ T296] bridge_slave_0: entered promiscuous mode [ 36.767215][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.779802][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.791000][ T296] bridge_slave_1: entered allmulticast mode [ 36.802216][ T296] bridge_slave_1: entered promiscuous mode [ 36.851240][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.861209][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.870959][ T295] bridge_slave_0: entered allmulticast mode [ 36.883394][ T295] bridge_slave_0: entered promiscuous mode [ 36.913366][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.926057][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.938874][ T295] bridge_slave_1: entered allmulticast mode [ 36.950365][ T295] bridge_slave_1: entered promiscuous mode [ 37.162000][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.178240][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.192414][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.213585][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.255101][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.268925][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.285890][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.300063][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.345260][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.359729][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.377645][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.393044][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.542850][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.559176][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.576396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599839][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.624094][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.639755][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.660548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.674500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.697985][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.707333][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.737693][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.748133][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.784601][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.796133][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.834249][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.851157][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.927850][ T294] veth0_vlan: entered promiscuous mode [ 37.950324][ T295] veth0_vlan: entered promiscuous mode [ 37.987640][ T294] veth1_macvtap: entered promiscuous mode [ 38.012721][ T296] veth0_vlan: entered promiscuous mode [ 38.026925][ T295] veth1_macvtap: entered promiscuous mode [ 38.048621][ T297] veth0_vlan: entered promiscuous mode [ 38.107773][ T296] veth1_macvtap: entered promiscuous mode [ 38.130679][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.164576][ T297] veth1_macvtap: entered promiscuous mode [ 38.426368][ T322] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 38.458515][ T315] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.476315][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.494124][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.546218][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.559355][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.701787][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 38.733984][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 38.844793][ T312] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.874015][ T312] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.885171][ T9] usb 2-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.968007][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.980377][ T339] fido_id[339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.010442][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 39.034997][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.067679][ T9] usb 2-1: config 0 descriptor?? [ 39.089503][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 39.274752][ T45] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 39.294491][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.313139][ T45] usb 3-1: Product: syz [ 39.321344][ T45] usb 3-1: Manufacturer: syz [ 39.330026][ T45] usb 3-1: SerialNumber: syz [ 39.511449][ T9] apple 0003:05AC:029F.0002: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 39.531856][ T9] input: HID 05ac:029f as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:029F.0002/input/input4 [ 39.570247][ T9] apple 0003:05AC:029F.0002: input,hidraw0: USB HID v80.06 Joystick [HID 05ac:029f] on usb-dummy_hcd.1-1/input0 [ 39.746677][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 39.746696][ T36] audit: type=1400 audit(1790492041.330:144): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.870065][ T366] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 39.887189][ T312] usb 2-1: USB disconnect, device number 2 [ 39.910021][ T36] audit: type=1400 audit(1790492041.490:145): avc: denied { execute } for pid=365 comm="syz.0.13" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.003268][ T45] (unnamed net_device) (uninitialized): Assigned a random MAC address: ae:a2:21:a0:02:e7 [ 40.054751][ T45] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 40.093076][ T36] audit: type=1400 audit(1790492041.680:146): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.134740][ T36] audit: type=1400 audit(1790492041.680:147): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.177719][ T36] audit: type=1400 audit(1790492041.680:148): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.217471][ T36] audit: type=1400 audit(1790492041.680:149): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.273492][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.393429][ T36] audit: type=1400 audit(1790492041.980:150): avc: denied { create } for pid=375 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.436962][ T36] audit: type=1400 audit(1790492041.980:151): avc: denied { write } for pid=375 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=524 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.493446][ T9] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.500214][ T36] audit: type=1400 audit(1790492041.980:152): avc: denied { append } for pid=375 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=524 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.544191][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.592310][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 40.620633][ T36] audit: type=1400 audit(1790492042.210:153): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.650422][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.697406][ T389] netlink: 'syz.1.15': attribute type 27 has an invalid length. [ 40.710466][ T390] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 40.734666][ T390] Zero length message leads to an empty skb [ 40.760358][ T9] usb 4-1: config 0 descriptor?? [ 40.786986][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.812955][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.917126][ T393] ======================================================= [ 40.917126][ T393] WARNING: The mand mount option has been deprecated and [ 40.917126][ T393] and is ignored by this kernel. Remove the mand [ 40.917126][ T393] option from the mount to silence this warning. [ 40.917126][ T393] ======================================================= [ 41.005193][ T9] kye 0003:0458:0087.0003: item fetching failed at offset 23/24 [ 41.029817][ T9] kye 0003:0458:0087.0003: parse failed [ 41.063388][ T9] kye 0003:0458:0087.0003: probe with driver kye failed with error -22 [ 41.178474][ T399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 41.243568][ T312] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 41.263560][ T312] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.287891][ T401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.927692][ T150] usb 3-1: device reset failed [ 42.017441][ T409] process 'syz.0.19' launched './file0' with NULL argv: empty string added [ 42.040469][ C0] usb 3-1: eth1: intr status -71 [ 42.040883][ T312] usb 3-1: USB disconnect, device number 2 [ 42.260158][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.449876][ T9] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 42.476412][ T9] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 42.509158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.530455][ T9] usb 2-1: config 0 descriptor?? [ 42.630718][ T312] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 42.772890][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.793758][ T312] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.810535][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.821918][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.851823][ T312] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 42.866469][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.887617][ T312] usb 3-1: config 0 descriptor?? [ 42.970031][ T446] overlayfs: failed to resolve './file2': -2 [ 43.143674][ T338] usb 4-1: USB disconnect, device number 2 [ 43.308008][ T312] apple 0003:05AC:029F.0005: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 43.339836][ T312] input: HID 05ac:029f as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:029F.0005/input/input5 [ 43.389887][ T312] apple 0003:05AC:029F.0005: input,hidraw0: USB HID v80.06 Joystick [HID 05ac:029f] on usb-dummy_hcd.2-1/input0 [ 43.543589][ T338] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 43.626240][ T63] usb 3-1: USB disconnect, device number 3 [ 43.707967][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 43.722438][ T338] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 43.743871][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.744550][ T338] usb 4-1: can't read configurations, error -22 [ 43.804077][ T455] fido_id[455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.857533][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.878095][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.893898][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.906711][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.909712][ T338] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 43.932210][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.959551][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.971068][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 43.993814][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.003659][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.019495][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.042024][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.054824][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.072236][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.085226][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.101780][ T338] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 44.106817][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.114900][ T338] usb 4-1: can't read configurations, error -22 [ 44.129573][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.144929][ T9] hid-generic 0006:000C:0008.0007: unknown main item tag 0x0 [ 44.164668][ T338] usb usb4-port1: attempt power cycle [ 44.191898][ T9] hid-generic 0006:000C:0008.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 44.226614][ T462] SELinux: failed to load policy [ 44.252248][ T460] fido_id[460]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.392917][ T469] 9pnet_fd: Insufficient options for proto=fd [ 44.549486][ T338] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 44.561519][ T312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.593977][ T338] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 44.611552][ T338] usb 4-1: can't read configurations, error -22 [ 44.729449][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 44.747331][ T312] usb 3-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 44.770260][ T338] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 44.782624][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.800975][ T312] usb 3-1: Product: syz [ 44.808482][ T312] usb 3-1: Manufacturer: syz [ 44.822051][ T312] usb 3-1: SerialNumber: syz [ 44.838092][ T338] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 44.859186][ T338] usb 4-1: can't read configurations, error -22 [ 44.876800][ T338] usb usb4-port1: unable to enumerate USB device [ 45.083006][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.100212][ T312] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 45.138795][ T312] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 45.157236][ T312] usb 3-1: USB disconnect, device number 4 [ 45.202470][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.243142][ T338] usb 2-1: USB disconnect, device number 3 [ 45.418449][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 45.418478][ T36] audit: type=1400 audit(1790492047.000:190): avc: denied { ioctl } for pid=473 comm="syz.0.35" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.637055][ T36] audit: type=1400 audit(1790492047.200:191): avc: denied { ioctl } for pid=480 comm="syz.1.36" path="socket:[4023]" dev="sockfs" ino=4023 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.741861][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 45.802079][ T36] audit: type=1400 audit(1790492047.380:192): avc: denied { read } for pid=485 comm="syz.1.38" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.814429][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.880836][ T488] GUP no longer grows the stack in syz.1.38 (488): 200000005000-200000008000 (200000004000) [ 45.929748][ T488] CPU: 0 UID: 0 PID: 488 Comm: syz.1.38 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 45.929780][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.929803][ T488] Call Trace: [ 45.929853][ T488] [ 45.929864][ T488] __dump_stack+0x21/0x30 [ 45.929909][ T488] dump_stack_lvl+0x140/0x1c0 [ 45.929940][ T488] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.929970][ T488] ? find_vma+0xd3/0x120 [ 45.930001][ T488] dump_stack+0x19/0x20 [ 45.930027][ T488] fixup_user_fault+0x616/0x6a0 [ 45.930055][ T488] fault_in_user_writeable+0x75/0xe0 [ 45.930085][ T488] futex_lock_pi+0x2ed/0xa70 [ 45.930114][ T488] ? plist_check_list+0x2a8/0x2c0 [ 45.930136][ T488] ? __cfi_futex_lock_pi+0x10/0x10 [ 45.930165][ T488] ? plist_del+0x3f0/0x410 [ 45.930184][ T488] ? __kasan_check_write+0x18/0x20 [ 45.930205][ T488] ? wake_up_q+0x10a/0x1c0 [ 45.930227][ T488] ? __cfi_futex_wake_mark+0x10/0x10 [ 45.930246][ T488] ? nf_setsockopt+0x2ab/0x2b0 [ 45.930270][ T488] do_futex+0x270/0x510 [ 45.930298][ T488] ? fput+0x1a4/0x230 [ 45.930628][ T488] ? __cfi_do_futex+0x10/0x10 [ 45.930664][ T488] __se_sys_futex+0x13c/0x320 [ 45.930707][ T488] ? __x64_sys_futex+0x110/0x110 [ 45.930741][ T488] ? __kasan_check_write+0x18/0x20 [ 45.930770][ T488] __x64_sys_futex+0xe9/0x110 [ 45.930800][ T488] x64_sys_call+0x227f/0x2ee0 [ 45.930820][ T488] do_syscall_64+0x57/0xf0 [ 45.930849][ T488] ? clear_bhb_loop+0x50/0xa0 [ 45.932548][ T488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.932582][ T488] RIP: 0033:0x7f71da79e159 [ 45.932618][ T488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.932640][ T488] RSP: 002b:00007f71db5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.932676][ T488] RAX: ffffffffffffffda RBX: 00007f71daa26090 RCX: 00007f71da79e159 [ 45.932695][ T488] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 45.932710][ T488] RBP: 00007f71da83506b R08: 0000000000000000 R09: 0000000000000001 [ 45.932724][ T488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.932737][ T488] R13: 00007f71daa26128 R14: 00007f71daa26090 R15: 00007ffe48e8d388 [ 45.932756][ T488] [ 45.951252][ T36] audit: type=1400 audit(1790492047.380:193): avc: denied { open } for pid=485 comm="syz.1.38" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.549609][ T500] support for the xor transformation has been removed. [ 46.579349][ T500] incfs: Options parsing error. -22 [ 46.579812][ T36] audit: type=1400 audit(1790492048.160:194): avc: denied { mounton } for pid=499 comm="syz.1.43" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.622701][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.654584][ T500] incfs: mount failed -22 [ 46.689970][ T504] netlink: 316 bytes leftover after parsing attributes in process `syz.0.44'. [ 46.704154][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.725169][ T36] audit: type=1400 audit(1790492048.220:195): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.757083][ T36] audit: type=1400 audit(1790492048.280:196): avc: denied { nlmsg_write } for pid=503 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.788895][ T36] audit: type=1326 audit(1790492048.310:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.0.44" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd09b19e159 code=0x0 [ 46.857240][ T36] audit: type=1400 audit(1790492048.440:198): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.906982][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.959895][ T36] audit: type=1400 audit(1790492048.540:199): avc: denied { create } for pid=515 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.069433][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 47.081149][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 47.096456][ T9] usb 3-1: config 0 has no interface number 0 [ 47.106588][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.125941][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.145515][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 47.164010][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.183998][ T9] usb 3-1: config 0 descriptor?? [ 47.206913][ T312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.231386][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 47.251560][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.389539][ T312] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 47.404998][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 47.421264][ T312] usb 2-1: Product: syz [ 47.426722][ T312] usb 2-1: Manufacturer: syz [ 47.451302][ T526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=526 comm=syz.0.50 [ 47.510179][ T529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=529 comm=syz.0.50 [ 47.752712][ T312] usb 2-1: USB disconnect, device number 4 [ 47.847449][ T9] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.000A/input/input6 [ 47.871161][ T338] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.888031][ T9] uclogic 0003:28BD:0094.000A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 48.029448][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 48.037284][ T9] usb 3-1: USB disconnect, device number 5 [ 48.043334][ T338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 48.067185][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 48.092129][ T338] usb 4-1: string descriptor 0 read error: -22 [ 48.101874][ T338] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 48.120026][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.147391][ T533] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 48.165174][ T338] usb 4-1: MIDIStreaming interface descriptor not found [ 48.399300][ T9] usb 4-1: USB disconnect, device number 7 [ 48.703667][ T553] usb usb6: usbfs: process 553 (syz.2.56) did not claim interface 3 before use [ 48.748736][ T553] kvm: apic: phys broadcast and lowest prio [ 48.763664][ T562] usb usb6: usbfs: process 562 (syz.2.56) did not claim interface 3 before use [ 48.763905][ T558] incfs: mount failed -22 [ 48.803513][ T558] incfs: mount failed -22 [ 48.809737][ T566] kvm: apic: phys broadcast and lowest prio [ 48.810364][ T558] incfs: mount failed -22 [ 48.861582][ T558] incfs: mount failed -22 [ 48.876309][ T558] incfs: mount failed -22 [ 48.885939][ T558] incfs: mount failed -22 [ 48.904203][ T558] incfs: mount failed -22 [ 48.912024][ T558] incfs: mount failed -22 [ 48.921206][ T558] incfs: mount failed -22 [ 48.928618][ T558] incfs: mount failed -22 [ 48.936941][ T558] incfs: mount failed -22 [ 48.946171][ T558] incfs: mount failed -22 [ 48.954013][ T558] incfs: mount failed -22 [ 48.985157][ T558] incfs: mount failed -22 [ 49.006487][ T63] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 49.024349][ T558] incfs: mount failed -22 [ 49.043412][ T63] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.080843][ T558] incfs: mount failed -22 [ 49.088013][ T558] incfs: mount failed -22 [ 49.128298][ T583] fido_id[583]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.155188][ T558] incfs: mount failed -22 [ 49.170377][ T558] incfs: mount failed -22 [ 49.172469][ T582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.210252][ T558] incfs: mount failed -22 [ 49.216471][ T558] incfs: mount failed -22 [ 49.236363][ T586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.280723][ T558] incfs: mount failed -22 [ 49.299318][ T558] incfs: mount failed -22 [ 49.309419][ T558] incfs: mount failed -22 [ 49.318670][ T558] incfs: mount failed -22 [ 49.334730][ T558] incfs: mount failed -22 [ 49.341491][ T558] incfs: mount failed -22 [ 49.352719][ T558] incfs: mount failed -22 [ 49.365170][ T596] netlink: 108 bytes leftover after parsing attributes in process `syz.1.62'. [ 49.378696][ T558] incfs: mount failed -22 [ 49.397485][ T558] incfs: mount failed -22 [ 49.405420][ T558] incfs: mount failed -22 [ 49.410939][ T558] incfs: mount failed -22 [ 49.418096][ T558] incfs: mount failed -22 [ 49.425630][ T558] incfs: mount failed -22 [ 49.435182][ T558] incfs: mount failed -22 [ 49.443325][ T558] incfs: mount failed -22 [ 49.452204][ T558] incfs: mount failed -22 [ 49.482183][ T558] incfs: mount failed -22 [ 49.515583][ T558] incfs: mount failed -22 [ 49.546702][ T558] incfs: mount failed -22 [ 49.570103][ T558] incfs: mount failed -22 [ 49.589341][ T558] incfs: mount failed -22 [ 49.609896][ T558] incfs: mount failed -22 [ 49.631580][ T558] incfs: mount failed -22 [ 49.638144][ T558] incfs: mount failed -22 [ 49.670882][ T558] incfs: mount failed -22 [ 49.687908][ T610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.67'. [ 49.711194][ T558] incfs: mount failed -22 [ 49.729602][ T558] incfs: mount failed -22 [ 49.738958][ T558] incfs: mount failed -22 [ 49.758818][ T558] incfs: mount failed -22 [ 49.769423][ T312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.787006][ T558] incfs: mount failed -22 [ 49.804866][ T558] incfs: mount failed -22 [ 49.817853][ T558] incfs: mount failed -22 [ 49.825054][ T558] incfs: mount failed -22 [ 49.837863][ T558] incfs: mount failed -22 [ 49.849489][ T558] incfs: mount failed -22 [ 49.857883][ T558] incfs: mount failed -22 [ 49.866046][ T558] incfs: mount failed -22 [ 49.877220][ T558] incfs: mount failed -22 [ 49.890039][ T558] incfs: mount failed -22 [ 49.898137][ T558] incfs: mount failed -22 [ 49.907018][ T558] incfs: mount failed -22 [ 49.920843][ T558] incfs: mount failed -22 [ 49.943232][ T609] SELinux: failed to load policy [ 49.952230][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 49.967220][ T312] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 49.984372][ T312] usb 4-1: config 0 has no interface number 0 [ 49.997791][ T312] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 50.021952][ T312] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 50.033178][ T63] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 50.045823][ T312] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 50.081333][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.091316][ T312] usb 4-1: Product: syz [ 50.104009][ T312] usb 4-1: Manufacturer: syz [ 50.109168][ T312] usb 4-1: SerialNumber: syz [ 50.120471][ T312] usb 4-1: config 0 descriptor?? [ 50.128806][ T603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.146048][ T603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.199747][ T63] usb 3-1: device descriptor read/64, error -71 [ 50.314995][ T338] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 50.337942][ T338] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.362241][ T602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.380708][ T602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.405009][ T312] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 50.423445][ T312] asix 4-1:0.34: probe with driver asix failed with error -32 [ 50.451591][ T616] fido_id[616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.479484][ T63] usb 3-1: device descriptor read/64, error -71 [ 50.511307][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 50.511338][ T36] audit: type=1400 audit(1790492052.100:221): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.532847][ T619] syzkaller1: entered promiscuous mode [ 50.579671][ T619] syzkaller1: entered allmulticast mode [ 50.595561][ T622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.71'. [ 50.619266][ T36] audit: type=1400 audit(1790492052.200:222): avc: denied { unlink } for pid=617 comm="syz.1.70" name="#1" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.659924][ T36] audit: type=1400 audit(1790492052.200:223): avc: denied { mount } for pid=617 comm="syz.1.70" name="/" dev="overlay" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.708073][ T36] audit: type=1400 audit(1790492052.210:224): avc: denied { setopt } for pid=617 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.740079][ T63] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 50.771035][ T36] audit: type=1400 audit(1790492052.210:225): avc: denied { create } for pid=617 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.821520][ T36] audit: type=1400 audit(1790492052.210:226): avc: denied { setattr } for pid=617 comm="syz.1.70" name="NETLINK" dev="sockfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.868558][ T36] audit: type=1400 audit(1790492052.220:227): avc: denied { accept } for pid=617 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.909675][ T63] usb 3-1: device descriptor read/64, error -71 [ 50.938073][ T36] audit: type=1400 audit(1790492052.520:228): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.099503][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.169597][ T63] usb 3-1: device descriptor read/64, error -71 [ 51.259591][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 51.266057][ T10] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 51.278692][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.293431][ T63] usb usb3-port1: attempt power cycle [ 51.303907][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.322035][ T10] usb 1-1: config 179 has no interface number 0 [ 51.335250][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.350288][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.369909][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.385332][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.402929][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.417728][ T10] usb 1-1: config 179 has no interface number 0 [ 51.428236][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.443123][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.463073][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.478533][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.491842][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.508885][ T10] usb 1-1: config 179 has no interface number 0 [ 51.522166][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.550062][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.575899][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.588696][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.601469][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.622617][ T10] usb 1-1: config 179 has no interface number 0 [ 51.638608][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.657940][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.686393][ T63] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 51.701584][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.716366][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.731683][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.754310][ T10] usb 1-1: config 179 has no interface number 0 [ 51.767236][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.786932][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.808223][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.820149][ T63] usb 3-1: device descriptor read/8, error -71 [ 51.834936][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.845639][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.864283][ T10] usb 1-1: config 179 has no interface number 0 [ 51.872578][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.890089][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 51.915114][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.928167][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.943723][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 51.963626][ T10] usb 1-1: config 179 has no interface number 0 [ 51.972183][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 51.993074][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 52.014969][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 52.028703][ T63] usb 3-1: device descriptor read/8, error -71 [ 52.041483][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.056551][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 52.072743][ T10] usb 1-1: config 179 has no interface number 0 [ 52.083637][ T10] usb 1-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 52.099373][ T10] usb 1-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 52.118157][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 52.135594][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.147347][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=255 [ 52.164918][ T10] usb 1-1: SerialNumber: syz [ 52.203558][ T36] audit: type=1400 audit(1790492053.790:229): avc: denied { mount } for pid=632 comm="syz.1.74" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.214214][ T634] sd 0:0:1:0: PR command failed: 1026 [ 52.236151][ T36] audit: type=1400 audit(1790492053.790:230): avc: denied { mounton } for pid=632 comm="syz.1.74" path="/22/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 52.258320][ T634] sd 0:0:1:0: Sense Key : 0x5 [current] [ 52.289639][ T63] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 52.312692][ T634] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 52.330548][ T63] usb 3-1: device descriptor read/8, error -71 [ 52.472774][ T63] usb 3-1: device descriptor read/8, error -71 [ 52.530679][ T10] usb 4-1: USB disconnect, device number 8 [ 52.589667][ T63] usb usb3-port1: unable to enumerate USB device [ 52.655144][ T338] usb 1-1: USB disconnect, device number 2 [ 52.702642][ T73] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 52.732204][ T73] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.926158][ T662] netlink: 17 bytes leftover after parsing attributes in process `syz.3.82'. [ 52.946918][ T662] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 53.026669][ T662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3835195433 (3835195433 ns) > initial count (1491690557 ns). Using initial count to start timer. [ 53.119508][ T630] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 53.217272][ T674] FAULT_INJECTION: forcing a failure. [ 53.217272][ T674] name failslab, interval 1, probability 0, space 0, times 1 [ 53.243803][ T674] CPU: 1 UID: 0 PID: 674 Comm: syz.0.86 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 53.243831][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.243842][ T674] Call Trace: [ 53.243848][ T674] [ 53.243854][ T674] __dump_stack+0x21/0x30 [ 53.243884][ T674] dump_stack_lvl+0x140/0x1c0 [ 53.243908][ T674] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.243933][ T674] dump_stack+0x19/0x20 [ 53.243955][ T674] should_fail_ex+0x3c2/0x510 [ 53.243976][ T674] should_failslab+0xac/0x100 [ 53.243998][ T674] kmem_cache_alloc_noprof+0x42/0x410 [ 53.244015][ T674] ? security_inode_alloc+0x51/0x230 [ 53.244038][ T674] ? __cfi_make_kgid+0x10/0x10 [ 53.244058][ T674] security_inode_alloc+0x51/0x230 [ 53.244081][ T674] inode_init_always_gfp+0x756/0x9e0 [ 53.244102][ T674] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 53.244124][ T674] alloc_inode+0xc5/0x270 [ 53.244145][ T674] ? __cfi__raw_spin_lock+0x10/0x10 [ 53.244162][ T674] new_inode+0x25/0x1e0 [ 53.244184][ T674] shmem_get_inode+0x352/0xc10 [ 53.244206][ T674] shmem_mknod+0x63/0x200 [ 53.244230][ T674] shmem_mkdir+0x3b/0x80 [ 53.244253][ T674] vfs_mkdir+0x591/0x810 [ 53.244287][ T674] do_mkdirat+0x240/0x530 [ 53.244338][ T674] ? __cfi_do_mkdirat+0x10/0x10 [ 53.244369][ T674] ? __kasan_check_write+0x18/0x20 [ 53.244398][ T674] ? getname_flags+0x203/0x6b0 [ 53.244417][ T674] ? __kasan_check_write+0x18/0x20 [ 53.244434][ T674] __x64_sys_mkdirat+0x8b/0xa0 [ 53.244458][ T674] x64_sys_call+0x2ba8/0x2ee0 [ 53.244473][ T674] do_syscall_64+0x57/0xf0 [ 53.244496][ T674] ? clear_bhb_loop+0x50/0xa0 [ 53.244518][ T674] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.244538][ T674] RIP: 0033:0x7fd09b19e159 [ 53.244552][ T674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.244566][ T674] RSP: 002b:00007fd09c007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 53.244584][ T674] RAX: ffffffffffffffda RBX: 00007fd09b425fa0 RCX: 00007fd09b19e159 [ 53.244597][ T674] RDX: 0000000000000000 RSI: 0000200000002000 RDI: ffffffffffffff9c [ 53.244608][ T674] RBP: 00007fd09b23506b R08: 0000000000000000 R09: 0000000000000000 [ 53.244619][ T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.244629][ T674] R13: 00007fd09b426038 R14: 00007fd09b425fa0 R15: 00007ffe4bd6bb18 [ 53.244643][ T674] [ 53.283352][ T630] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 53.682335][ T630] usb 3-1: config 0 has no interface number 0 [ 53.691248][ T630] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 53.707174][ T630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.722016][ T630] usb 3-1: Product: syz [ 53.727496][ T630] usb 3-1: Manufacturer: syz [ 53.733571][ T630] usb 3-1: SerialNumber: syz [ 53.742036][ T630] usb 3-1: config 0 descriptor?? [ 53.765449][ T338] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.799335][ T338] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.810730][ T73] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 53.849092][ T678] overlay: ./file2 is not a directory [ 53.884058][ T681] fido_id[681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.992013][ T73] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.008698][ T73] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.025816][ T73] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 54.043192][ T73] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.057668][ T73] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 54.070881][ T73] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.090918][ T73] usb 4-1: string descriptor 0 read error: -22 [ 54.099108][ T73] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.114863][ T73] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.152643][ T630] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 54.168964][ T630] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 54.185898][ T630] asix 3-1:0.251: probe with driver asix failed with error -5 [ 54.539755][ T73] cdc_ncm 4-1:1.0: bind() failure [ 54.547541][ T73] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 54.559313][ T73] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 54.574146][ T630] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.587624][ T73] usb 4-1: USB disconnect, device number 9 [ 54.739475][ T630] usb 2-1: Using ep0 maxpacket: 32 [ 54.752469][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.772401][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.791689][ T630] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.809249][ T630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.820400][ T630] usb 2-1: config 0 descriptor?? [ 54.834794][ T630] hub 2-1:0.0: USB hub found [ 55.036369][ T630] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 55.120137][ T73] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 55.139756][ T73] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.239531][ T630] usbhid 2-1:0.0: can't add hid device: -71 [ 55.255492][ T630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.294200][ T630] usb 2-1: USB disconnect, device number 5 [ 55.333017][ T338] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.513606][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.533665][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.554443][ T338] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.577778][ T338] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.593760][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.633312][ T338] usb 4-1: config 0 descriptor?? [ 55.638310][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 55.638365][ T36] audit: type=1400 audit(1790492057.220:258): avc: denied { write } for pid=726 comm="syz.0.102" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.746605][ T36] audit: type=1400 audit(1790492057.330:259): avc: denied { append } for pid=733 comm="syz.0.104" name="vsock" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.790879][ T36] audit: type=1400 audit(1790492057.380:260): avc: denied { listen } for pid=733 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.823247][ T734] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.104' sets config #1 [ 55.859022][ T36] audit: type=1400 audit(1790492057.390:261): avc: denied { accept } for pid=733 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.891248][ T312] usb 3-1: USB disconnect, device number 10 [ 55.914580][ T36] audit: type=1400 audit(1790492057.490:262): avc: denied { read write } for pid=733 comm="syz.0.104" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.957927][ T36] audit: type=1400 audit(1790492057.490:263): avc: denied { open } for pid=733 comm="syz.0.104" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.025738][ T476] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 56.048898][ T476] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.080123][ T338] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 56.109503][ T744] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 56.134974][ T338] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 56.186814][ T745] fido_id[745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.335083][ T630] usb 4-1: USB disconnect, device number 10 [ 56.409486][ T476] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.519435][ T73] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.573069][ T476] usb 1-1: Using ep0 maxpacket: 32 [ 56.581254][ T476] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 56.598357][ T476] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.615528][ T476] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.639941][ T476] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 56.672699][ T476] usb 1-1: config 0 interface 0 has no altsetting 0 [ 56.684442][ T476] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 56.702863][ T476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.710489][ T73] usb 2-1: Using ep0 maxpacket: 8 [ 56.723793][ T476] usb 1-1: config 0 descriptor?? [ 56.733686][ T73] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.752394][ T73] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 56.776686][ T73] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.786483][ T73] usb 2-1: config 0 descriptor?? [ 56.801528][ T73] usb 2-1: bad CDC descriptors [ 56.938715][ T476] usbhid 1-1:0.0: can't add hid device: -71 [ 56.949976][ T476] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.966690][ T476] usb 1-1: USB disconnect, device number 3 [ 57.003406][ T73] usb 2-1: USB disconnect, device number 6 [ 57.038031][ T36] audit: type=1326 audit(1790492058.620:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.3.110" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d51f9e159 code=0x7ffc0000 [ 57.088671][ T36] audit: type=1326 audit(1790492058.620:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.3.110" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d51f9e159 code=0x7ffc0000 [ 57.131191][ T36] audit: type=1326 audit(1790492058.620:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.3.110" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d51f9e159 code=0x7ffc0000 [ 57.170819][ T36] audit: type=1326 audit(1790492058.620:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.3.110" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6d51f9e159 code=0x7ffc0000 [ 57.272386][ T774] FAULT_INJECTION: forcing a failure. [ 57.272386][ T774] name fail_futex, interval 1, probability 0, space 0, times 1 [ 57.309603][ T774] CPU: 0 UID: 0 PID: 774 Comm: syz.2.112 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 57.309643][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.309663][ T774] Call Trace: [ 57.309672][ T774] [ 57.309680][ T774] __dump_stack+0x21/0x30 [ 57.309720][ T774] dump_stack_lvl+0x140/0x1c0 [ 57.309752][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.309785][ T774] dump_stack+0x19/0x20 [ 57.309816][ T774] should_fail_ex+0x3c2/0x510 [ 57.309846][ T774] should_fail+0xf/0x20 [ 57.309872][ T774] get_futex_key+0x178/0x940 [ 57.309902][ T774] ? __cfi___futex_wait+0x10/0x10 [ 57.309923][ T774] ? __cfi_get_futex_key+0x10/0x10 [ 57.309952][ T774] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.309989][ T774] futex_wake+0x150/0x950 [ 57.310011][ T774] ? futex_wait+0x2b8/0x7c0 [ 57.310032][ T774] ? __cfi_futex_wake+0x10/0x10 [ 57.310056][ T774] ? vfs_write+0xbcf/0xfd0 [ 57.310087][ T774] do_futex+0x37d/0x510 [ 57.310118][ T774] ? __cfi_do_futex+0x10/0x10 [ 57.310156][ T774] ? mutex_unlock+0x90/0x240 [ 57.310186][ T774] __se_sys_futex+0x13c/0x320 [ 57.310217][ T774] ? fdget_pos+0x299/0x310 [ 57.310247][ T774] ? __x64_sys_futex+0x110/0x110 [ 57.310279][ T774] ? __cfi_ksys_write+0x10/0x10 [ 57.310305][ T774] __x64_sys_futex+0xe9/0x110 [ 57.310337][ T774] x64_sys_call+0x227f/0x2ee0 [ 57.310359][ T774] do_syscall_64+0x57/0xf0 [ 57.310381][ T774] ? clear_bhb_loop+0x50/0xa0 [ 57.310411][ T774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.310440][ T774] RIP: 0033:0x7f242e79e159 [ 57.310476][ T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.310495][ T774] RSP: 002b:00007f242f6fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.310521][ T774] RAX: ffffffffffffffda RBX: 00007f242ea26188 RCX: 00007f242e79e159 [ 57.310539][ T774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f242ea2618c [ 57.310554][ T774] RBP: 00007f242ea26180 R08: 4000000000000000 R09: 0000000000000000 [ 57.310569][ T774] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 57.310584][ T774] R13: 00007f242ea26218 R14: 00007ffd255c0aa0 R15: 00007ffd255c0b88 [ 57.310603][ T774] [ 57.948506][ T780] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.968636][ T780] SELinux: failed to load policy [ 58.102358][ T63] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 58.112173][ T63] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.225066][ T806] kvm: emulating exchange as write [ 58.329451][ T73] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 58.416817][ T821] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 58.500178][ T73] usb 4-1: device descriptor read/64, error -71 [ 58.509976][ T827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=827 comm=syz.0.125 [ 58.739880][ T73] usb 4-1: device descriptor read/64, error -71 [ 58.977872][ T63] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.990475][ T73] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 59.011625][ T862] netlink: 104 bytes leftover after parsing attributes in process `syz.2.134'. [ 59.039607][ T863] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.061449][ T861] netlink: 104 bytes leftover after parsing attributes in process `syz.2.134'. [ 59.089603][ T862] netlink: 104 bytes leftover after parsing attributes in process `syz.2.134'. [ 59.151734][ T73] usb 4-1: device descriptor read/64, error -71 [ 59.162958][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.173479][ T63] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 59.220803][ T63] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 59.240669][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.251503][ T63] usb 2-1: Product: syz [ 59.270017][ T63] usb 2-1: Manufacturer: syz [ 59.289465][ T63] usb 2-1: SerialNumber: syz [ 59.429383][ T73] usb 4-1: device descriptor read/64, error -71 [ 59.549532][ T73] usb usb4-port1: attempt power cycle [ 59.909425][ T73] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 59.950574][ T73] usb 4-1: device descriptor read/8, error -71 [ 60.101158][ T73] usb 4-1: device descriptor read/8, error -71 [ 60.399407][ T73] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 60.431068][ T73] usb 4-1: device descriptor read/8, error -71 [ 60.519377][ T476] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.571303][ T73] usb 4-1: device descriptor read/8, error -71 [ 60.681691][ T476] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.697277][ T476] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 60.700255][ T73] usb usb4-port1: unable to enumerate USB device [ 60.720739][ T476] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 60.740349][ T476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.767191][ T476] usb 1-1: Product: syz [ 60.776631][ T476] usb 1-1: Manufacturer: syz [ 60.785141][ T476] usb 1-1: SerialNumber: syz [ 60.807205][ T476] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 60.822932][ T476] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 60.822932][ T476] Please send a copy of this message to and [ 60.868448][ T36] kauditd_printk_skb: 1131 callbacks suppressed [ 60.868503][ T36] audit: type=1400 audit(1700000003.230:1399): avc: denied { bind } for pid=888 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.904231][ T36] audit: type=1400 audit(1700000003.250:1400): avc: denied { read write } for pid=888 comm="syz.2.142" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.904254][ T889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.954870][ T36] audit: type=1400 audit(1700000003.250:1401): avc: denied { open } for pid=888 comm="syz.2.142" path="/32/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.065207][ T36] audit: type=1400 audit(1700000003.430:1402): avc: denied { mounton } for pid=895 comm="syz.2.143" path="/33/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 61.106471][ T899] capability: warning: `syz.2.143' uses 32-bit capabilities (legacy support in use) [ 61.144218][ T897] usb usb8: usbfs: process 897 (syz.2.143) did not claim interface 0 before use [ 61.161589][ T36] audit: type=1400 audit(1700000003.530:1403): avc: denied { ioctl } for pid=900 comm="syz.3.144" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.227498][ T36] audit: type=1400 audit(1700000003.530:1404): avc: denied { getopt } for pid=900 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.269246][ T36] audit: type=1400 audit(1700000003.580:1405): avc: denied { getopt } for pid=895 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.462364][ T476] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 61.474202][ T476] usb 1-1: USB disconnect, device number 4 [ 61.559306][ T73] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.616421][ T36] audit: type=1400 audit(1700000003.980:1406): avc: denied { shutdown } for pid=912 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.730847][ T73] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.766901][ T73] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.796400][ T73] usb 3-1: config 1 has no interface number 0 [ 61.806125][ T73] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.854914][ T63] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 61.868174][ T73] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.884437][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.901866][ T63] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 61.923173][ T73] usb 3-1: Product: syz [ 61.941062][ T73] usb 3-1: Manufacturer: syz [ 61.950877][ T73] usb 3-1: SerialNumber: syz [ 61.959523][ T63] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 61.985435][ T73] usb 3-1: selecting invalid altsetting 1 [ 62.006992][ T63] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 62.020763][ T63] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 62.040614][ T63] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 62.092890][ T63] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 62.123834][ T63] usb 2-1: USB disconnect, device number 7 [ 62.148726][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.414778][ T73] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 62.439644][ T476] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 62.449396][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 62.466252][ T73] cdc_ncm 3-1:1.1: bind() failure [ 62.481422][ T73] usb 3-1: USB disconnect, device number 11 [ 62.631077][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.649143][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.651468][ T476] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 62.689374][ T63] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.713581][ T476] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 62.721821][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.744603][ T476] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 62.766698][ T63] usb 2-1: config 0 descriptor?? [ 62.780509][ T476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.811072][ T476] usb 1-1: Product: syz [ 62.829351][ T476] usb 1-1: Manufacturer: syz [ 62.844941][ T476] usb 1-1: SerialNumber: syz [ 62.867999][ T476] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 62.888513][ T476] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 62.888513][ T476] Please send a copy of this message to and [ 63.018734][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 63.028298][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 63.051423][ T63] usb 2-1: USB disconnect, device number 8 [ 63.320351][ T73] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 63.483248][ T73] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.501840][ T73] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 63.517128][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.535820][ T73] usb 3-1: Product: syz [ 63.547740][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 63.563677][ T73] usb 3-1: Manufacturer: syz [ 63.569679][ T73] usb 3-1: SerialNumber: syz [ 63.584410][ T73] usb 3-1: config 0 descriptor?? [ 63.600555][ T73] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 63.729248][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 63.739396][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.762168][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.780359][ T63] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 63.807742][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.829406][ T63] usb 2-1: config 0 descriptor?? [ 63.871913][ T338] usb 3-1: USB disconnect, device number 12 [ 64.052635][ T31] usb 2-1: USB disconnect, device number 9 [ 64.423879][ T36] audit: type=1326 audit(1700000006.792:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=953 comm="syz.3.157" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d51f9e159 code=0x0 [ 64.489094][ T36] audit: type=1400 audit(1700000006.852:1408): avc: denied { write } for pid=953 comm="syz.3.157" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.558275][ T959] tipc: Started in network mode [ 64.567607][ T959] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.582629][ T959] tipc: New replicast peer: 100.1.1.1 [ 64.589047][ T959] tipc: Enabled bearer , priority 10 [ 65.010250][ T984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.023430][ T984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.035772][ T984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.051439][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 65.179076][ T338] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 65.288142][ T476] scsi host1: usb-storage 1-1:1.0 [ 65.313068][ T476] usb 1-1: USB disconnect, device number 5 [ 65.323119][ T338] usb 3-1: device descriptor read/64, error -71 [ 65.569139][ T338] usb 3-1: device descriptor read/64, error -71 [ 65.569139][ T63] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 65.699068][ T73] tipc: Node number set to 2886997162 [ 65.730959][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 47434, setting to 1024 [ 65.750508][ T63] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 65.778110][ T63] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 65.799974][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.811420][ T63] usb 4-1: Product: syz [ 65.821087][ T63] usb 4-1: Manufacturer: syz [ 65.827501][ T63] usb 4-1: SerialNumber: syz [ 65.839509][ T991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 65.859219][ T338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 66.013122][ T338] usb 3-1: device descriptor read/64, error -71 [ 66.033463][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 66.033481][ T36] audit: type=1400 audit(1700000008.402:1419): avc: denied { write } for pid=1003 comm="syz.1.174" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.113636][ T63] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 66.174438][ T36] audit: type=1400 audit(1700000008.542:1420): avc: denied { watch watch_reads } for pid=1007 comm="syz.0.175" path="/54" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.293296][ T338] usb 3-1: device descriptor read/64, error -71 [ 66.302533][ T36] audit: type=1400 audit(1700000008.672:1421): avc: denied { read write } for pid=989 comm="syz.3.168" name="lp0" dev="devtmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 66.416560][ T36] audit: type=1400 audit(1700000008.672:1422): avc: denied { open } for pid=989 comm="syz.3.168" path="/dev/usb/lp0" dev="devtmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 66.440183][ T338] usb usb3-port1: attempt power cycle [ 66.519817][ T31] usb 4-1: USB disconnect, device number 15 [ 66.540880][ T31] usblp0: removed [ 66.893059][ T338] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.954155][ T338] usb 3-1: device descriptor read/8, error -71 [ 67.090574][ T338] usb 3-1: device descriptor read/8, error -71 [ 67.185350][ T36] audit: type=1400 audit(1700000009.552:1423): avc: denied { append } for pid=1018 comm="syz.1.179" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.240095][ T36] audit: type=1400 audit(1700000009.602:1424): avc: denied { map } for pid=1018 comm="syz.1.179" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.283627][ T1020] netlink: 'syz.1.179': attribute type 4 has an invalid length. [ 67.289129][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 67.305988][ T1019] netlink: 'syz.1.179': attribute type 4 has an invalid length. [ 67.339039][ T338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.368842][ T36] audit: type=1400 audit(1700000009.732:1425): avc: denied { ioctl } for pid=1018 comm="syz.1.179" path="socket:[11965]" dev="sockfs" ino=11965 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.390782][ T338] usb 3-1: device descriptor read/8, error -71 [ 67.478885][ T31] usb 4-1: device descriptor read/64, error -71 [ 67.545158][ T338] usb 3-1: device descriptor read/8, error -71 [ 67.660284][ T338] usb usb3-port1: unable to enumerate USB device [ 67.728973][ T31] usb 4-1: device descriptor read/64, error -71 [ 67.772435][ T36] audit: type=1400 audit(1700000010.142:1426): avc: denied { cmd } for pid=1034 comm="iou-wrk-1036" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 67.817439][ T36] audit: type=1400 audit(1700000010.182:1427): avc: denied { map } for pid=1034 comm="syz.0.183" path="/dev/ublkc0" dev="devtmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.932763][ T36] audit: type=1400 audit(1700000010.302:1428): avc: denied { ioctl } for pid=1039 comm="syz.2.184" path="socket:[11180]" dev="sockfs" ino=11180 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.974705][ T1040] random: crng reseeded on system resumption [ 68.038930][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 68.178886][ T31] usb 4-1: device descriptor read/64, error -71 [ 68.248851][ T338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 68.410728][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.427714][ T31] usb 4-1: device descriptor read/64, error -71 [ 68.440382][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.463307][ T338] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 68.478140][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.497742][ T338] usb 3-1: config 0 descriptor?? [ 68.568913][ T31] usb usb4-port1: attempt power cycle [ 68.633309][ T1054] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.189' sets config #1 [ 68.788797][ T73] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 68.928811][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 68.961997][ T73] usb 2-1: Using ep0 maxpacket: 16 [ 68.982537][ T73] usb 2-1: config index 0 descriptor too short (expected 63524, got 36) [ 68.984206][ T31] usb 4-1: device descriptor read/8, error -71 [ 68.994472][ T73] usb 2-1: config 0 has too many interfaces: 64, using maximum allowed: 32 [ 69.026824][ T73] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 64 [ 69.055632][ T73] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.077782][ T73] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.106465][ T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 69.122993][ T73] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.136523][ T73] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 69.152538][ T73] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.180169][ T73] usb 2-1: config 0 descriptor?? [ 69.182037][ T31] usb 4-1: device descriptor read/8, error -71 [ 69.280371][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.308719][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.350249][ T63] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 69.400902][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.430887][ T63] usb 1-1: config 0 descriptor?? [ 69.479473][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 69.490520][ T1040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.504727][ T1040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.520519][ T31] usb 4-1: device descriptor read/8, error -71 [ 69.548339][ T338] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 69.597979][ T338] usb 3-1: USB disconnect, device number 17 [ 69.622138][ T73] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0x2 [ 69.664747][ T73] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0x5 [ 69.670536][ T31] usb 4-1: device descriptor read/8, error -71 [ 69.722395][ T73] kovaplus 0003:1E7D:2D50.0014: item fetching failed at offset 18/24 [ 69.760748][ T73] kovaplus 0003:1E7D:2D50.0014: parse failed [ 69.786399][ T73] kovaplus 0003:1E7D:2D50.0014: probe with driver kovaplus failed with error -22 [ 69.829892][ T31] usb usb4-port1: unable to enumerate USB device [ 69.848305][ T312] usb 2-1: USB disconnect, device number 10 [ 69.943716][ T63] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 69.967462][ T63] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 69.994919][ T63] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 70.015315][ T63] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 70.038878][ T63] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 70.078920][ T63] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 70.459246][ T73] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 70.536065][ T1078] fuse: Bad value for 'rootmode' [ 70.565689][ T1082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1082 comm=syz.1.199 [ 70.613096][ T63] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 5: -71 [ 70.620322][ T312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 70.645327][ T63] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense calibration info: -71 [ 70.663677][ T63] playstation 0003:054C:0DF2.0015: Failed to get calibration data from DualSense [ 70.678509][ T63] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 70.693219][ T73] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 70.713555][ T63] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -71 [ 70.728880][ T73] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.748788][ T63] usb 1-1: USB disconnect, device number 6 [ 70.760044][ T73] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.782290][ T73] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 70.797070][ T73] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.810425][ T73] usb 4-1: config 0 descriptor?? [ 70.821997][ T73] usb-storage 4-1:0.0: USB Mass Storage device detected [ 70.830625][ T312] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.853716][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 70.866054][ T312] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.870047][ T73] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 70.884935][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.906410][ T312] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 70.918583][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.934766][ T312] usb 3-1: config 0 descriptor?? [ 71.038685][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 71.045312][ T63] usb 4-1: USB disconnect, device number 20 [ 71.045793][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.094059][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 71.115716][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.138848][ T31] usb 2-1: config 0 descriptor?? [ 71.176931][ T312] playstation 0003:054C:09CC.0016: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 71.375082][ T312] playstation 0003:054C:09CC.0016: Invalid reportID received, expected 18 got 130 [ 71.395892][ T312] playstation 0003:054C:09CC.0016: Failed to retrieve DualShock4 pairing info: -22 [ 71.417809][ T312] playstation 0003:054C:09CC.0016: Failed to get MAC address from DualShock4 [ 71.438398][ T312] playstation 0003:054C:09CC.0016: Failed to create dualshock4. [ 71.474012][ T312] playstation 0003:054C:09CC.0016: probe with driver playstation failed with error -22 [ 71.559909][ T31] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x7 [ 71.578929][ T63] usb 3-1: USB disconnect, device number 18 [ 71.589439][ T31] magicmouse 0003:05AC:0265.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 71.762069][ T31] usb 2-1: USB disconnect, device number 11 [ 71.873807][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 71.873840][ T36] audit: type=1400 audit(1700000014.243:1438): avc: denied { setattr } for pid=1093 comm="syz.0.202" name="secretmem" dev="secretmem" ino=12357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.013898][ T36] audit: type=1400 audit(1700000014.383:1439): avc: denied { create } for pid=1097 comm="syz.3.204" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.053881][ T36] audit: type=1400 audit(1700000014.383:1440): avc: denied { link } for pid=1097 comm="syz.3.204" name="#d" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.220717][ T73] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.232262][ T1105] syzkaller0: entered promiscuous mode [ 72.250982][ T1105] syzkaller0: entered allmulticast mode [ 72.341450][ T63] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 72.389810][ T73] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.403601][ T73] usb 1-1: config 0 has no interface number 0 [ 72.415850][ T73] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.443082][ T73] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.461053][ T73] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 72.478646][ T73] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.509785][ T73] usb 1-1: config 0 descriptor?? [ 72.527288][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.541948][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 72.560802][ T63] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 72.583908][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.588649][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 72.601050][ T63] usb 4-1: Product: syz [ 72.610411][ T63] usb 4-1: Manufacturer: syz [ 72.619596][ T63] usb 4-1: SerialNumber: syz [ 72.768727][ T36] audit: type=1400 audit(1700000015.143:1441): avc: denied { write } for pid=1120 comm="syz.2.212" name="/" dev="incremental-fs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.814551][ T31] usb 2-1: device descriptor read/64, error -71 [ 72.832407][ T36] audit: type=1400 audit(1700000015.163:1442): avc: denied { add_name } for pid=1120 comm="syz.2.212" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.851357][ T63] usb 4-1: MIDIStreaming interface descriptor not found [ 72.879502][ T36] audit: type=1400 audit(1700000015.163:1443): avc: denied { create } for pid=1120 comm="syz.2.212" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.902006][ T63] usb 4-1: USB disconnect, device number 21 [ 72.920570][ T36] audit: type=1400 audit(1700000015.163:1444): avc: denied { associate } for pid=1120 comm="syz.2.212" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.978874][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 72.989341][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.004189][ T658] udevd[658]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.032264][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.044062][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.055189][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.070209][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.081423][ T73] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 73.092330][ T73] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 73.112472][ T73] hid_prodikeys: hid-prodikeys: failed to find output report [ 73.112472][ T73] [ 73.121307][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.378571][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 73.508553][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.599205][ T36] audit: type=1400 audit(1700000015.963:1445): avc: denied { read write } for pid=1136 comm="syz.2.214" name="vhost-vsock" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.645501][ T1138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.645660][ T36] audit: type=1400 audit(1700000015.963:1446): avc: denied { open } for pid=1136 comm="syz.2.214" path="/dev/vhost-vsock" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.715276][ T36] audit: type=1400 audit(1700000015.973:1447): avc: denied { ioctl } for pid=1136 comm="syz.2.214" path="/dev/vhost-vsock" dev="devtmpfs" ino=201 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.888469][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.929408][ T1147] SELinux: policydb string length 536870920 does not match expected length 8 [ 73.955749][ T1147] SELinux: failed to load policy [ 74.009252][ T31] usb usb2-port1: attempt power cycle [ 74.246540][ T1130] FAULT_INJECTION: forcing a failure. [ 74.246540][ T1130] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.264007][ T1130] CPU: 0 UID: 0 PID: 1130 Comm: syz.3.213 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 74.264046][ T1130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.264062][ T1130] Call Trace: [ 74.264069][ T1130] [ 74.264077][ T1130] __dump_stack+0x21/0x30 [ 74.264116][ T1130] dump_stack_lvl+0x140/0x1c0 [ 74.264149][ T1130] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.264193][ T1130] ? __call_rcu_common+0x53c/0x710 [ 74.264222][ T1130] dump_stack+0x19/0x20 [ 74.264252][ T1130] should_fail_ex+0x3c2/0x510 [ 74.264283][ T1130] should_fail+0xf/0x20 [ 74.264308][ T1130] get_futex_key+0x178/0x940 [ 74.264340][ T1130] ? __cfi_get_futex_key+0x10/0x10 [ 74.264371][ T1130] futex_wake+0x150/0x950 [ 74.264393][ T1130] ? __kasan_check_write+0x18/0x20 [ 74.264417][ T1130] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 74.264442][ T1130] ? __cfi_futex_wake+0x10/0x10 [ 74.264464][ T1130] ? perf_lock_task_context+0x398/0x450 [ 74.264492][ T1130] ? __perf_event_period+0x490/0x490 [ 74.264518][ T1130] ? mutex_unlock+0x90/0x240 [ 74.264548][ T1130] do_futex+0x37d/0x510 [ 74.264578][ T1130] ? __kasan_check_read+0x15/0x20 [ 74.264602][ T1130] ? __cfi_do_futex+0x10/0x10 [ 74.264633][ T1130] ? __kasan_check_write+0x18/0x20 [ 74.264658][ T1130] mm_release+0x15f/0x300 [ 74.264686][ T1130] ? exit_mm_release+0x50/0x50 [ 74.264714][ T1130] ? futex_exit_release+0x11d/0x1f0 [ 74.264746][ T1130] exit_mm_release+0x29/0x50 [ 74.264774][ T1130] do_exit+0x832/0x2850 [ 74.264804][ T1130] ? __kasan_check_read+0x15/0x20 [ 74.264827][ T1130] ? futex_wake+0x627/0x950 [ 74.264849][ T1130] ? __cfi_do_exit+0x10/0x10 [ 74.264883][ T1130] ? futex_wait+0x2b8/0x7c0 [ 74.264905][ T1130] ? __cfi_futex_wait+0x10/0x10 [ 74.264927][ T1130] ? __kasan_check_write+0x18/0x20 [ 74.264951][ T1130] ? _raw_spin_lock_irq+0x93/0x120 [ 74.264974][ T1130] do_group_exit+0x21f/0x2f0 [ 74.265004][ T1130] ? __kasan_check_write+0x18/0x20 [ 74.265028][ T1130] ? recalc_sigpending+0x16c/0x1d0 [ 74.265054][ T1130] get_signal+0x134c/0x1490 [ 74.265089][ T1130] arch_do_signal_or_restart+0xbc/0x700 [ 74.265113][ T1130] ? fput+0x1a4/0x230 [ 74.265143][ T1130] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.265186][ T1130] syscall_exit_to_user_mode+0x57/0xb0 [ 74.265219][ T1130] do_syscall_64+0x63/0xf0 [ 74.265241][ T1130] ? clear_bhb_loop+0x50/0xa0 [ 74.265272][ T1130] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.265300][ T1130] RIP: 0033:0x7f6d51f9e159 [ 74.265321][ T1130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.265341][ T1130] RSP: 002b:00007f6d52e700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.265366][ T1130] RAX: fffffffffffffe00 RBX: 00007f6d52225fa8 RCX: 00007f6d51f9e159 [ 74.265383][ T1130] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d52225fa8 [ 74.265398][ T1130] RBP: 00007f6d52225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.265413][ T1130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.265427][ T1130] R13: 00007f6d52226038 R14: 00007ffdfe4fc900 R15: 00007ffdfe4fc9e8 [ 74.265447][ T1130] [ 74.428556][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 74.889469][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.966768][ T1169] selinuxfs: Unknown parameter '/dev/kvm' [ 74.973367][ T1175] tmpfs: Bad value for 'size' [ 75.009252][ T63] usb 1-1: USB disconnect, device number 7 [ 75.043595][ T31] usb 2-1: device descriptor read/8, error -71 [ 75.210969][ T1185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 75.224540][ T1185] netlink: 35 bytes leftover after parsing attributes in process `syz.0.225'. [ 75.242511][ T1185] netlink: 'syz.0.225': attribute type 6 has an invalid length. [ 75.259968][ T1185] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 75.300693][ T1189] overlayfs: failed to resolve './file0': -2 [ 75.338362][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 75.528393][ T63] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 75.700237][ T63] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 75.717479][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.732020][ T63] usb 1-1: config 0 descriptor?? [ 75.745348][ T63] usbhid 1-1:0.0: can't add hid device: -22 [ 75.759658][ T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 75.778744][ T31] usb 2-1: device not accepting address 15, error -71 [ 75.792035][ T31] usb usb2-port1: unable to enumerate USB device [ 75.857587][ T1206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1206 comm=syz.2.232 [ 75.947434][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.960556][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.108352][ T338] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 76.159447][ T1209] exfat: Deprecated parameter 'debug' [ 76.167917][ T1209] No source specified [ 76.270134][ T338] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 76.280747][ T338] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.300684][ T338] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 76.312365][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.352840][ T1215] FAULT_INJECTION: forcing a failure. [ 76.352840][ T1215] name failslab, interval 1, probability 0, space 0, times 0 [ 76.377133][ T1215] CPU: 1 UID: 0 PID: 1215 Comm: syz.1.234 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 76.377173][ T1215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.377194][ T1215] Call Trace: [ 76.377201][ T1215] [ 76.377211][ T1215] __dump_stack+0x21/0x30 [ 76.377248][ T1215] dump_stack_lvl+0x140/0x1c0 [ 76.377279][ T1215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.377311][ T1215] ? stack_trace_save+0xaa/0x100 [ 76.377338][ T1215] dump_stack+0x19/0x20 [ 76.377378][ T1215] should_fail_ex+0x3c2/0x510 [ 76.377407][ T1215] should_failslab+0xac/0x100 [ 76.377480][ T1215] __kmalloc_cache_noprof+0x41/0x470 [ 76.377511][ T1215] ? proc_self_get_link+0x119/0x290 [ 76.377556][ T1215] proc_self_get_link+0x119/0x290 [ 76.377588][ T1215] ? security_inode_follow_link+0x7e/0x180 [ 76.377623][ T1215] ? __cfi_proc_self_get_link+0x10/0x10 [ 76.377656][ T1215] pick_link+0x6d4/0xe80 [ 76.377679][ T1215] step_into+0xc33/0xf10 [ 76.377700][ T1215] ? read_word_at_a_time+0x1a/0x40 [ 76.377726][ T1215] ? set_root+0x420/0x420 [ 76.377748][ T1215] ? inode_permission+0xf3/0x4c0 [ 76.377773][ T1215] link_path_walk+0x746/0xeb0 [ 76.377797][ T1215] path_openat+0x298/0x35a0 [ 76.377825][ T1215] ? schedule+0xc5/0x240 [ 76.377849][ T1215] ? kasan_save_alloc_info+0x3a/0x50 [ 76.377869][ T1215] ? __kasan_slab_alloc+0x73/0x90 [ 76.377907][ T1215] ? getname+0x1b/0x30 [ 76.377941][ T1215] ? x64_sys_call+0xe69/0x2ee0 [ 76.377961][ T1215] ? do_syscall_64+0x57/0xf0 [ 76.377983][ T1215] ? do_filp_open+0x440/0x440 [ 76.378023][ T1215] do_filp_open+0x1f2/0x440 [ 76.378086][ T1215] ? __cfi_do_filp_open+0x10/0x10 [ 76.378120][ T1215] ? alloc_fd+0x4c1/0x570 [ 76.378147][ T1215] do_sys_openat2+0x134/0x1d0 [ 76.378180][ T1215] ? fput+0x1a4/0x230 [ 76.378232][ T1215] ? do_sys_open+0x100/0x100 [ 76.378267][ T1215] ? __cfi_ksys_write+0x10/0x10 [ 76.378293][ T1215] __x64_sys_openat+0x13a/0x170 [ 76.378326][ T1215] x64_sys_call+0xe69/0x2ee0 [ 76.378346][ T1215] do_syscall_64+0x57/0xf0 [ 76.378367][ T1215] ? clear_bhb_loop+0x50/0xa0 [ 76.378414][ T1215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.378443][ T1215] RIP: 0033:0x7f71da75e98e [ 76.378461][ T1215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.378479][ T1215] RSP: 002b:00007f71db616f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.378503][ T1215] RAX: ffffffffffffffda RBX: 00007f71db6176c0 RCX: 00007f71da75e98e [ 76.378521][ T1215] RDX: 0000000000000000 RSI: 00007f71da8347a6 RDI: ffffffffffffff9c [ 76.378537][ T1215] RBP: 00007f71da83506b R08: 0000000000000000 R09: 0000000000000000 [ 76.378552][ T1215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.378582][ T1215] R13: 00007f71daa26038 R14: 00007f71daa25fa0 R15: 00007ffe48e8d388 [ 76.378602][ T1215] [ 76.401946][ T1213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.403514][ T1213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.565351][ T338] usb 3-1: string descriptor 0 read error: -71 [ 76.903854][ T338] uvcvideo 3-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 76.918561][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 76.918687][ T36] audit: type=1400 audit(1700000019.273:1457): avc: denied { write } for pid=1217 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.919519][ T338] usb 3-1: Found UVC 1.00 device (046d:0825) [ 76.939174][ T36] audit: type=1400 audit(1700000019.273:1458): avc: denied { read } for pid=1217 comm="syz.1.235" path="socket:[13611]" dev="sockfs" ino=13611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.971716][ T338] uvcvideo 3-1:1.1: No supported video formats found. [ 77.031723][ T338] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 77.046305][ T338] usb 3-1: USB disconnect, device number 19 [ 77.159144][ T1222] kvm: kvm [1221]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 77.300968][ T36] audit: type=1400 audit(1700000019.673:1459): avc: denied { create } for pid=1228 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.765742][ T36] audit: type=1400 audit(1700000020.133:1460): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 77.911256][ T1235] netlink: 'syz.2.239': attribute type 27 has an invalid length. [ 78.178484][ T63] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 78.348365][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 78.363840][ T338] usb 1-1: USB disconnect, device number 8 [ 78.382368][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.399245][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.428133][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.450204][ T63] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 78.468140][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.480941][ T1238] tipc: Started in network mode [ 78.488331][ T63] usb 3-1: Product: syz [ 78.496606][ T63] usb 3-1: Manufacturer: syz [ 78.504712][ T1238] tipc: Node identity aaaaaaaaaa19, cluster identity 4711 [ 78.516754][ T63] usb 3-1: SerialNumber: syz [ 78.524074][ T1238] tipc: Enabled bearer , priority 10 [ 78.535260][ T63] usb 3-1: 0:1 : does not exist [ 78.543774][ T63] usb 3-1: 0:2 : does not exist [ 78.683912][ T36] audit: type=1400 audit(1700000021.053:1461): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.908794][ T63] usb 3-1: 3:0: failed to get current value for ch 0 (-22) [ 78.926876][ T63] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 78.944206][ T63] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 78.968863][ T63] usb 3-1: USB disconnect, device number 20 [ 79.009740][ T630] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 79.151367][ T36] audit: type=1400 audit(1700000021.523:1462): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.173397][ T630] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.204427][ T630] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.251186][ T630] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.287084][ T630] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.303107][ T630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.316409][ T630] usb 1-1: Product: syz [ 79.326740][ T630] usb 1-1: Manufacturer: syz [ 79.349170][ T630] usb 1-1: SerialNumber: syz [ 79.369391][ T63] wacom 0003:056A:003F.0019: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 79.402344][ T630] hub 1-1:1.0: bad descriptor, ignoring hub [ 79.428967][ T630] hub 1-1:1.0: probe with driver hub failed with error -5 [ 79.524034][ T1260] Invalid argument reading file caps for ./file0 [ 79.594583][ T36] audit: type=1400 audit(1700000021.963:1463): avc: denied { create } for pid=1261 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.624171][ T630] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.641202][ T63] tipc: Node number set to 11774634 [ 79.661145][ T1241] overlay: Unknown parameter 'euid' [ 79.848050][ T630] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 80.409156][ T630] usb 1-1: USB disconnect, device number 9 [ 80.430515][ T630] usblp0: removed [ 80.511410][ T1285] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 80.590294][ T1285] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 80.862324][ T63] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 80.881557][ T1290] overlayfs: failed to resolve './file0': -2 [ 81.027995][ T63] usb 2-1: device descriptor read/64, error -71 [ 81.151170][ T1298] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 81.214904][ T1302] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 81.279430][ T63] usb 2-1: device descriptor read/64, error -71 [ 81.518404][ T63] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 81.678178][ T63] usb 2-1: device descriptor read/64, error -71 [ 81.790393][ T1330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.818043][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.918009][ T63] usb 2-1: device descriptor read/64, error -71 [ 81.988059][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 82.012293][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.028004][ T63] usb usb2-port1: attempt power cycle [ 82.044107][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 82.117955][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 82.158020][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.172064][ T31] usb 1-1: Product: syz [ 82.178713][ T31] usb 1-1: Manufacturer: syz [ 82.185436][ T31] usb 1-1: SerialNumber: syz [ 82.398031][ T63] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 82.415799][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.429395][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 82.440438][ T63] usb 2-1: device descriptor read/8, error -71 [ 82.456733][ T31] usb 1-1: USB disconnect, device number 10 [ 82.473990][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.579910][ T63] usb 2-1: device descriptor read/8, error -71 [ 82.598086][ T73] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 82.757987][ T73] usb 3-1: Using ep0 maxpacket: 16 [ 82.770226][ T73] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 82.788632][ T73] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.811801][ T73] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 82.836520][ T63] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 82.847287][ T73] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 82.863639][ T73] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 82.891202][ T63] usb 2-1: device descriptor read/8, error -71 [ 82.903474][ T73] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 82.923048][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.940858][ T73] usb 3-1: Product: syz [ 82.945780][ T73] usb 3-1: Manufacturer: syz [ 82.956223][ T73] usb 3-1: SerialNumber: syz [ 82.987368][ T1353] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.028958][ T63] usb 2-1: device descriptor read/8, error -71 [ 83.060572][ T36] audit: type=1400 audit(1700000025.433:1464): avc: denied { append } for pid=1361 comm="syz.0.267" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.148184][ T63] usb usb2-port1: unable to enumerate USB device [ 83.221532][ T36] audit: type=1400 audit(1700000025.593:1465): avc: denied { bind } for pid=1368 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.253898][ T1369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1369 comm=syz.0.269 [ 83.285024][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 83.295559][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 83.396849][ T1371] sit0: entered promiscuous mode [ 83.413110][ T1371] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 83.433433][ T1371] netlink: 1 bytes leftover after parsing attributes in process `syz.0.270'. [ 83.454668][ T73] usb 3-1: MIDIStreaming interface descriptor not found [ 83.459335][ T1371] ./dev/sda1: Can't lookup blockdev [ 83.480128][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 83.497308][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.521988][ T31] usb 4-1: config 179 has no interface number 0 [ 83.553873][ T73] usb 3-1: USB disconnect, device number 21 [ 83.574485][ T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 83.635298][ T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 83.660848][ T31] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 83.696445][ T31] usb 4-1: config 179 interface 65 has no altsetting 0 [ 83.714501][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 83.742243][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.880639][ T1378] netlink: 'syz.1.273': attribute type 13 has an invalid length. [ 84.037279][ T36] audit: type=1400 audit(1700000026.403:1466): avc: denied { getopt } for pid=1381 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.057219][ T1360] netlink: 188 bytes leftover after parsing attributes in process `syz.3.266'. [ 84.155046][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.180281][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.213964][ T63] usb 4-1: USB disconnect, device number 22 [ 84.234231][ T36] audit: type=1400 audit(1700000026.573:1467): avc: denied { create } for pid=1359 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 84.337952][ T73] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 84.507894][ T73] usb 3-1: Using ep0 maxpacket: 8 [ 84.516602][ T73] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 84.533844][ T73] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.551255][ T73] usb 3-1: config 0 has no interface number 0 [ 84.567679][ T73] usb 3-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.592959][ T73] usb 3-1: config 0 interface 200 has no altsetting 0 [ 84.607838][ T73] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 84.628036][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.647792][ T73] usb 3-1: Product: syz [ 84.662925][ T73] usb 3-1: Manufacturer: syz [ 84.677862][ T73] usb 3-1: SerialNumber: syz [ 84.693816][ T73] usb 3-1: config 0 descriptor?? [ 84.808363][ T1385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.824636][ T1388] netlink: 'syz.3.276': attribute type 27 has an invalid length. [ 84.891351][ T36] audit: type=1400 audit(1700000027.253:1468): avc: denied { write } for pid=1389 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.015345][ T73] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 85.035056][ T73] usb 3-1: USB disconnect, device number 22 [ 85.124020][ T1403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 85.207523][ T1410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 85.224161][ T1410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 85.397912][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 85.560761][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.583179][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.604920][ T31] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 85.619409][ T36] audit: type=1400 audit(1700000027.974:1469): avc: denied { map } for pid=1420 comm="syz.2.288" path="pipe:[2834]" dev="pipefs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.623295][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.677316][ T31] usb 2-1: Product: syz [ 85.684056][ T31] usb 2-1: Manufacturer: syz [ 85.690501][ T31] usb 2-1: SerialNumber: syz [ 85.707714][ T63] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 85.813996][ T1425] kvm: MWAIT instruction emulated as NOP! [ 85.869278][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.882993][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.901449][ T63] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 85.912838][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.928151][ T31] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 85.961011][ T31] usb 2-1: USB disconnect, device number 20 [ 85.970478][ T31] usblp0: removed [ 86.349612][ T63] hid-picolcd 0003:04D8:C002.001A: unknown main item tag 0x2 [ 86.364578][ T63] hid-picolcd 0003:04D8:C002.001A: unknown main item tag 0x1 [ 86.375587][ T63] hid-picolcd 0003:04D8:C002.001A: unknown main item tag 0x5 [ 86.390068][ T63] hid-picolcd 0003:04D8:C002.001A: item fetching failed at offset 51/53 [ 86.403619][ T63] hid-picolcd 0003:04D8:C002.001A: device report parse failed [ 86.412433][ T63] hid-picolcd 0003:04D8:C002.001A: probe with driver hid-picolcd failed with error -22 [ 86.550227][ T36] audit: type=1400 audit(1700000028.914:1470): avc: denied { connect } for pid=1439 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.608607][ T312] usb 4-1: USB disconnect, device number 23 [ 86.927656][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 87.089317][ T31] usb 2-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.106523][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.117572][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 87.129078][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.140163][ T31] usb 2-1: config 0 descriptor?? [ 87.172737][ T36] audit: type=1400 audit(1700000029.544:1471): avc: denied { write } for pid=1470 comm="syz.3.303" name="psched" dev="proc" ino=4026532562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.358438][ T36] audit: type=1400 audit(1700000029.734:1472): avc: denied { create } for pid=1472 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.412917][ T1476] SELinux: policydb version 111242858 does not match my version range 15-33 [ 87.425631][ T1476] SELinux: failed to load policy [ 87.529285][ T36] audit: type=1326 audit(1700000029.904:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.2.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242e79e159 code=0x7fc00000 [ 87.570304][ T31] apple 0003:05AC:029F.001B: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 87.597698][ T31] input: HID 05ac:029f as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:029F.001B/input/input12 [ 87.646646][ T31] apple 0003:05AC:029F.001B: input,hidraw0: USB HID v80.06 Joystick [HID 05ac:029f] on usb-dummy_hcd.1-1/input0 [ 87.891913][ T1502] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.905438][ T1502] sd 0:0:1:0: PR command failed: 1026 [ 87.916135][ T1502] sd 0:0:1:0: Sense Key : 0x5 [current] [ 87.929289][ T1502] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 87.965502][ T1502] sd 0:0:1:0: PR command failed: 1026 [ 87.987699][ T1502] sd 0:0:1:0: Sense Key : 0x5 [current] [ 88.017647][ T1502] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 88.118381][ T1511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1511 comm=syz.3.313 [ 88.221312][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 88.221332][ T36] audit: type=1400 audit(1700000030.594:1478): avc: denied { setattr } for pid=1510 comm="syz.3.313" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.303251][ T31] usb 2-1: USB disconnect, device number 21 [ 88.895124][ T1524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 88.913999][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 89.053452][ T1532] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 89.096546][ T1536] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 89.118450][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 89.269170][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.294269][ T36] audit: type=1400 audit(1700000031.664:1479): avc: denied { bind } for pid=1546 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.436212][ T1553] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.490134][ T36] audit: type=1400 audit(1700000031.864:1480): avc: denied { mounton } for pid=1556 comm="syz.2.329" path="/87/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 89.537503][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.576381][ T1562] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.596059][ T36] audit: type=1400 audit(1700000031.974:1481): avc: denied { getopt } for pid=1561 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.787521][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 89.837517][ T63] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 89.927665][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.997551][ T63] usb 3-1: Using ep0 maxpacket: 8 [ 90.011594][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.025521][ T63] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.039673][ T63] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.061149][ T63] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 90.078648][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.092420][ T63] usb 3-1: Product: syz [ 90.098218][ T63] usb 3-1: Manufacturer: syz [ 90.104882][ T63] usb 3-1: SerialNumber: syz [ 90.207595][ T31] usb 1-1: device descriptor read/64, error -71 [ 90.328298][ T31] usb usb1-port1: attempt power cycle [ 90.673118][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 90.711533][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.854885][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.934880][ T63] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 90.954033][ T63] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 90.976769][ T63] usb 3-1: USB disconnect, device number 23 [ 91.013758][ T658] udevd[658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.119829][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 91.140709][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 91.197446][ T31] usb 1-1: device descriptor read/8, error -71 [ 91.277013][ T1338] bridge_slave_1: left allmulticast mode [ 91.294866][ T1338] bridge_slave_1: left promiscuous mode [ 91.302672][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.333843][ T1338] bridge_slave_0: left allmulticast mode [ 91.340485][ T1338] bridge_slave_0: left promiscuous mode [ 91.358702][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.377088][ T31] usb 1-1: device descriptor read/8, error -71 [ 91.497291][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.513562][ T31] usb usb1-port1: unable to enumerate USB device [ 91.514276][ T1555] Bluetooth: hci0: command 0x1003 tx timeout [ 91.583671][ T36] audit: type=1400 audit(1700000033.944:1482): avc: denied { read write } for pid=1573 comm="syz.2.337" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 91.626980][ T36] audit: type=1400 audit(1700000033.944:1483): avc: denied { open } for pid=1573 comm="syz.2.337" path="/89/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 91.695623][ T1581] netlink: 'syz.2.340': attribute type 2 has an invalid length. [ 91.778467][ T36] audit: type=1400 audit(1700000034.144:1484): avc: denied { cmd } for pid=1580 comm="iou-wrk-1582" path="socket:[17185]" dev="sockfs" ino=17185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.832477][ T1579] veth1_macvtap: left promiscuous mode [ 91.846718][ T36] audit: type=1400 audit(1700000034.214:1485): avc: denied { mounton } for pid=1589 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.886243][ T1579] macsec0: entered allmulticast mode [ 91.952037][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.990205][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.103664][ T1338] ------------[ cut here ]------------ [ 92.116147][ T1338] WARNING: CPU: 1 PID: 1338 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 92.136630][ T1338] Modules linked in: [ 92.142289][ T1338] CPU: 1 UID: 0 PID: 1338 Comm: kworker/u8:18 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 92.162985][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.185416][ T1338] Workqueue: netns cleanup_net [ 92.195282][ T1338] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 92.200500][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.203004][ T1338] Code: e8 11 86 d5 fc 4b 83 3c 3e 00 75 19 e8 55 a8 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 a8 7c fc 49 83 c7 08 eb c9 e8 3c a8 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 92.232497][ T1589] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.245192][ T1338] RSP: 0018:ffffc9000f807b90 EFLAGS: 00010293 [ 92.265702][ T1338] RAX: ffffffff850ad134 RBX: ffff888130e70000 RCX: ffff88810df40000 [ 92.276258][ T1338] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103fa4000 [ 92.286160][ T1589] bridge_slave_0: entered allmulticast mode [ 92.287866][ T1338] RBP: ffffc9000f807bb0 R08: 0000000000000003 R09: 0000000000000004 [ 92.305307][ T1338] R10: dffffc0000000000 R11: fffff52001f00f04 R12: dffffc0000000000 [ 92.314788][ T1338] R13: dffffc0000000000 R14: ffff888103fa4000 R15: 0000000000000000 [ 92.324874][ T1338] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.326207][ T1589] bridge_slave_0: entered promiscuous mode [ 92.337540][ T1338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.337570][ T1338] CR2: 0000200000000144 CR3: 000000011a4a4000 CR4: 00000000003526b0 [ 92.337590][ T1338] DR0: 0000000000000009 DR1: 0000000000000006 DR2: 0000000000000083 [ 92.337604][ T1338] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 92.337619][ T1338] Call Trace: [ 92.337627][ T1338] [ 92.337637][ T1338] cleanup_net+0x6bd/0xc90 [ 92.338235][ T1338] ? __cfi_cleanup_net+0x10/0x10 [ 92.371366][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.377460][ T1338] ? kick_pool+0xb9/0x540 [ 92.403382][ T1589] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.406699][ T1338] process_scheduled_works+0x7f4/0x1060 [ 92.406740][ T1338] worker_thread+0xc99/0x13f0 [ 92.437580][ T1589] bridge_slave_1: entered allmulticast mode [ 92.443076][ T1338] kthread+0x2c4/0x360 [ 92.474540][ T1338] ? __cfi_worker_thread+0x10/0x10 [ 92.481993][ T1589] bridge_slave_1: entered promiscuous mode [ 92.482987][ T1338] ? __cfi_kthread+0x10/0x10 [ 92.499464][ T1338] ret_from_fork+0x67/0xa0 [ 92.505675][ T1338] ? __cfi_kthread+0x10/0x10 [ 92.511662][ T1338] ret_from_fork_asm+0x1a/0x30 [ 92.516937][ T1338] [ 92.520457][ T1338] ---[ end trace 0000000000000000 ]--- [ 92.529324][ T1338] ------------[ cut here ]------------ [ 92.540857][ T1338] WARNING: CPU: 1 PID: 1338 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 92.554789][ T1338] Modules linked in: [ 92.560731][ T1338] CPU: 1 UID: 0 PID: 1338 Comm: kworker/u8:18 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 92.578831][ T1338] Tainted: [W]=WARN [ 92.584388][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.599675][ T1338] Workqueue: netns cleanup_net [ 92.608670][ T1338] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 92.615778][ T1338] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 a8 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 a7 7c fc 49 83 c7 08 eb c5 e8 e7 a7 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 a7 7c fc 5b 41 5c 41 5e 41 [ 92.646505][ T1338] RSP: 0018:ffffc9000f807b90 EFLAGS: 00010293 [ 92.654841][ T1338] RAX: ffffffff850ad189 RBX: ffff888103fa4800 RCX: ffff88810df40000 [ 92.665501][ T1338] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103fa4808 [ 92.674891][ T1338] RBP: ffffc9000f807bb0 R08: 0000000000000003 R09: 0000000000000004 [ 92.685468][ T1338] R10: dffffc0000000000 R11: fffff52001f00f04 R12: dffffc0000000000 [ 92.698871][ T1338] R13: dffffc0000000000 R14: ffff888103fa4000 R15: 0000000000000008 [ 92.708494][ T1338] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.722342][ T1338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.730190][ T1338] CR2: 0000200000000144 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 92.743901][ T1338] DR0: 0000000000000009 DR1: 0000000000000006 DR2: 0000000000000083 [ 92.753064][ T1338] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 92.764864][ T1338] Call Trace: [ 92.769365][ T1338] [ 92.772936][ T1338] cleanup_net+0x6bd/0xc90 [ 92.780039][ T1338] ? __cfi_cleanup_net+0x10/0x10 [ 92.787305][ T1338] ? kick_pool+0xb9/0x540 [ 92.796316][ T1338] process_scheduled_works+0x7f4/0x1060 [ 92.803058][ T1338] worker_thread+0xc99/0x13f0 [ 92.809022][ T1338] kthread+0x2c4/0x360 [ 92.818393][ T1338] ? __cfi_worker_thread+0x10/0x10 [ 92.826537][ T1338] ? __cfi_kthread+0x10/0x10 [ 92.832907][ T1338] ret_from_fork+0x67/0xa0 [ 92.839857][ T1338] ? __cfi_kthread+0x10/0x10 [ 92.847237][ T1338] ret_from_fork_asm+0x1a/0x30 [ 92.855449][ T1338] [ 92.859753][ T1338] ---[ end trace 0000000000000000 ]--- [ 92.905594][ T1338] ------------[ cut here ]------------ [ 92.913981][ T1338] WARNING: CPU: 0 PID: 1338 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 92.929389][ T1338] Modules linked in: [ 92.934075][ T1338] CPU: 0 UID: 0 PID: 1338 Comm: kworker/u8:18 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 92.951469][ T1338] Tainted: [W]=WARN [ 92.957861][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.971619][ T1338] Workqueue: netns cleanup_net [ 92.980446][ T1338] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 92.991245][ T1338] Code: 3c 20 00 74 08 48 89 df e8 1f 49 f0 fc 48 8b 3b e8 57 39 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b3 b7 00 cc e8 52 6b 97 fc <0f> 0b e9 b0 fd ff ff e8 46 6b 97 fc 0f 0b e9 18 fe ff ff e8 3a 6b [ 93.021328][ T1338] RSP: 0018:ffffc9000f807b70 EFLAGS: 00010293 [ 93.036465][ T1338] RAX: ffffffff84f00e1e RBX: ffff888130e70000 RCX: ffff88810df40000 [ 93.050946][ T1338] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810df40000 [ 93.067472][ T1338] RBP: ffffc9000f807b98 R08: ffffffff87d44607 R09: 1ffffffff0fa88c0 [ 93.078893][ T1338] R10: dffffc0000000000 R11: fffffbfff0fa88c1 R12: 1ffffffff0fa8614 [ 93.091014][ T1338] R13: dffffc0000000000 R14: ffff888130e70c00 R15: dffffc0000000000 [ 93.103802][ T1338] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.116390][ T1338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.118852][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 93.126188][ T1338] CR2: 00005555601be918 CR3: 0000000123e7e000 CR4: 00000000003526b0 [ 93.150288][ T1338] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 93.164386][ T1338] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 93.184006][ T1338] Call Trace: [ 93.187582][ T1338] [ 93.193702][ T1338] xfrm_net_exit+0x31/0x80 [ 93.201115][ T1338] cleanup_net+0x6bd/0xc90 [ 93.206625][ T1338] ? __cfi_cleanup_net+0x10/0x10 [ 93.213896][ T1338] ? kick_pool+0xb9/0x540 [ 93.219545][ T1338] process_scheduled_works+0x7f4/0x1060 [ 93.227729][ T1338] worker_thread+0xc99/0x13f0 [ 93.234671][ T1338] kthread+0x2c4/0x360 [ 93.241719][ T1338] ? __cfi_worker_thread+0x10/0x10 [ 93.250866][ T1338] ? __cfi_kthread+0x10/0x10 [ 93.260587][ T1338] ret_from_fork+0x67/0xa0 [ 93.270753][ T1338] ? __cfi_kthread+0x10/0x10 [ 93.277778][ T1338] ret_from_fork_asm+0x1a/0x30 [ 93.284974][ T1338] [ 93.288499][ T1338] ---[ end trace 0000000000000000 ]--- [ 93.297503][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 93.310928][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.324515][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.339244][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.358092][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.359411][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.373485][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.384542][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.414159][ T31] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 93.432558][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.447835][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 93.463764][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.479315][ T31] usb 1-1: config 0 descriptor?? [ 93.505060][ T1589] veth0_vlan: entered promiscuous mode [ 93.523178][ T1589] veth1_macvtap: entered promiscuous mode [ 93.551993][ T36] audit: type=1400 audit(1700000035.924:1486): avc: denied { mounton } for pid=1589 comm="syz-executor" path="/root/syzkaller.NN3II9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 93.903373][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 93.920648][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.932777][ T31] usb 1-1: USB disconnect, device number 15