last executing test programs: 3m18.880124025s ago: executing program 3 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 3m18.836379356s ago: executing program 3 (id=390): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 3m18.736139989s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) 3m17.86143384s ago: executing program 3 (id=403): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x3b, 0x2) 3m17.86124683s ago: executing program 3 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.000694071s ago: executing program 3 (id=409): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m2.056366897s ago: executing program 32 (id=409): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m3.135880838s ago: executing program 4 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x78}, 0x1, 0x1100}, 0x0) 2m3.020086731s ago: executing program 4 (id=934): syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a", 0x42}], 0x1}, 0x44000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="c021", 0x2}], 0x1, 0x7, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfb, {0x9, 0x21, 0x7ffd, 0x1, 0x1, {0x22, 0xfd}}, {{{0x9, 0x5, 0x81, 0x3, 0x210, 0xf, 0x1d}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xc0, 0x4, 0x9}}]}}}]}}]}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m59.892296557s ago: executing program 4 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.size\x00', &(0x7f00000001c0)=""/237, 0xed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd0a, &(0x7f0000000000)) 1m59.860499488s ago: executing program 4 (id=960): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) userfaultfd(0x801) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x0, 0x13, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x7800, 0x100, 0x5, {{0xe, 0x4, 0x0, 0x30, 0x38, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x2, [{@private=0xa010102, 0x2}, {@rand_addr=0x64010102, 0x2}, {@multicast1}, {@private=0xa010101, 0x3560000}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, 0x13, 0x800, 0x70bd2c, 0x25dfdbfd, {0x6, 0x7, 0x7, 0x4b, {0x4e22, 0x4e21, [0x6, 0x0, 0x8001, 0x3], [0x9b1, 0x7, 0xf, 0x10001], r11, [0x10001]}, 0x40, 0x211}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "3457bad30a9e563f63e033e201eb364b3fba0d467bd608bacd1f2c38e0a9f2252e5755b60198e9a075b8acc7b8596b6be514718a3a4f305efd8c572545783a5a797018a116b512ce55f34ddca5cf100b02da460bc4bfc59dd58ddaabf6772075706c41058702bfe6ab7aa9ecbe2a3c4e21f873c3eee7c1e0a5"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "77dd60b2b8e6c258bcdfdecba17f5f2b229fa062557f6d3866c366fc8b524b731f5b99a5f7d0d91a3d801cda150ed69ada720eafd869a3faf10a9691e73afa47ddc866db2ac32024b589005147c1a98c2d4ac661232630b4d0c1"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008010}, 0x24000000) r12 = dup(r10) syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e22, @loopback}}) 1m59.704046862s ago: executing program 4 (id=962): ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x5) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x5) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f0000000180)='./config/usb_gadget/g1\x00') r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x18, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='fd/3\x00') socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) (async) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) unshare(0x20000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x54}) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x54}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x0, &(0x7f00000001c0)) (async) io_submit(r6, 0x0, &(0x7f00000001c0)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x1, 0x81, 0xfffe, 0x8a5, 0xa}) 1m59.452930428s ago: executing program 4 (id=963): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = gettid() capset(&(0x7f0000000740)={0x20080522, r2}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) getdents64(r1, 0x0, 0x0) syz_ublk_setup_io_uring(0x61b, &(0x7f0000000040)={0x0, 0xe230, 0x10389, 0x0, 0x215}, 0x0, 0x0, 0x0) 1m44.424489605s ago: executing program 33 (id=963): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = gettid() capset(&(0x7f0000000740)={0x20080522, r2}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) getdents64(r1, 0x0, 0x0) syz_ublk_setup_io_uring(0x61b, &(0x7f0000000040)={0x0, 0xe230, 0x10389, 0x0, 0x215}, 0x0, 0x0, 0x0) 13.50640144s ago: executing program 5 (id=1887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x0) 13.448142801s ago: executing program 5 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000000000000000000001ff0200000000000000000000000000014e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='R'], 0x46) 13.349910684s ago: executing program 5 (id=1891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000001b0001000000000000000000ff02000000000000000000000000000120010000000000000000000000000001000000004e2100"/64, @ANYRES64=r0, @ANYBLOB="f8c4af57072cce05624cd1711cebb2cee8328e61ac4b1ce8d15263e6ad10a63ace2971fa9a12fc7758b9dff7efb25180069c9c0507000000f09e61ffb688a086bc303d7573b45742d0fd4f794466c74a3df461cbccf4c82f442619457984d94e8cdc3540949c3be5fd5fd1161d0b70f0c4271b3ec8892d65f9b05871d4b70eef00a8ccfde276f387788b8874d1dd4595420656f612c6a904f61c81f6e79ebee06bf77a91a4de2c44912f2be0de", @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000500000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000010101030000000000000000000000002b000800"], 0xf8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x76) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x6, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1001, 0x5, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x8, "cbd009c1"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.654848925s ago: executing program 5 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r3 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) 11.488100239s ago: executing program 5 (id=1904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x1, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x466cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530482d) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) 11.431559351s ago: executing program 5 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0', 0x1) accept$unix(r2, 0x0, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev, 0x800}, 0x1c, 0x0}, 0x4000001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x8ef4, 0x400101005d, 0x400000000008, 0x42, 0x400000000000004, 0x2, 0x30, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9867, 0xd, 0x6, 0x4, 0x8], 0x0, 0x310900}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$P9_RLERROR(r5, &(0x7f0000000040)=ANY=[], 0x9) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x30) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000180)=""/180) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x56, {"b80000c0fe3acb80"}}], 0xffffffffffffff35}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.281092474s ago: executing program 34 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0', 0x1) accept$unix(r2, 0x0, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev, 0x800}, 0x1c, 0x0}, 0x4000001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x8ef4, 0x400101005d, 0x400000000008, 0x42, 0x400000000000004, 0x2, 0x30, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9867, 0xd, 0x6, 0x4, 0x8], 0x0, 0x310900}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$P9_RLERROR(r5, &(0x7f0000000040)=ANY=[], 0x9) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x30) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000180)=""/180) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x56, {"b80000c0fe3acb80"}}], 0xffffffffffffff35}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.717442501s ago: executing program 2 (id=1939): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x69, 0x0, 0x8, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x68, 0x0, 0xf6, 0x2f, 0x0, @empty, @loopback, {[@generic={0x44, 0xb, "d150643c389f07ccea"}, @end]}}}}}) recvfrom$packet(r0, &(0x7f0000000240)=""/173, 0xad, 0x1, &(0x7f0000000380)={0x11, 0x11, r1, 0x1, 0x8}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c008e8014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300000000000114000400ff020000000000000000000000000001080007400000000100"/148], 0x94}}, 0x0) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4050) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x800407fd, 0xfdd5) 6.336025775s ago: executing program 2 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000000000000000000001ff0200000000000000000000000000014e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='R'], 0x46) 6.270004077s ago: executing program 2 (id=1941): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r0) (async) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c4604ff78233e0200000000000003003e00cd002100cb0300000000000040000000000088bac842000000000000000001000500380001"], 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_GET_TSC_KHZ_cpu(r1, 0xaea3) 6.255291057s ago: executing program 2 (id=1942): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/42, 0x2a, 0x2040, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$packet(r3, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10120) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010050000904000001020d0000052406000105240002000d240f010000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000000008000"/107], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="66410f6fcac482cd3ede643664660f1bb000000080c7442400d077685cc744240200000000c7442406000000000f011c2466baf80cb8445d358cef66bafc0c66b8020066eff30f016b08f2662e44d2d72666440f38800166b833000f00d0b9800000c00f3235004000000f30", 0x6c}], 0x1, 0x11, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002b80)={0x2, 0x14, 0x6, 0x0, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20040000) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.865317581s ago: executing program 2 (id=1952): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000300)='p:_est/event1 ./file0:0x0 arg2=', 0x1f) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) (async) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000001040)="74fbff27a684df54db788ea943eb3860e7e35ddbb24dee5d25c1a2a2385a8f5f0246bb323183398a519c734e3b8998c60136b0511fad60ec058e7b04d03d004bb9b6457e18324d5b4304822029c29644a2f3c5180362db8a2e", 0x59) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1], 0x76) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0x0, 0x225c17d03, &(0x7f0000000140), 0x0) (async) syz_usb_connect(0x6, 0x39, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYBLOB="e5af6cb386ba9de34477f60834d79c90cebb77db78906cc0fb9a9cf53425aa641eb64f2624baa3556d6aa090d85747cb841af76fb19354e6531404eda871a5a40aadb8e0bbdf658d95717db51a7bd54315b7392dc84145cd3deee7811abd08ee30186ba679825ba60efd7990200d5ae7790e45ffeea0c0c6746f45b61476751e80d076b62d102aaa100a8b111b5d1f414a5528d5497788c611fb622bea9d255cad7008316392d455c85198d40a0e3d"], 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 3.251981131s ago: executing program 1 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x6}, 0x11) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x10000000000001e5}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000021c0)=ANY=[@ANYBLOB="1201100100000008e700000000000000000109022400010000002009040002030300038009210110ff012205000905810308007f01087f93569a2d058295d012c2075c1a8e96235463c584a0b38d70aae37d3791a404f30f7c05d9c251504110112cce5142a440d56e86a8ad3ef7ee2ef2274601673b6ab1c577e8d6dc8396f6c5629a2f717bffbf319ac736b8ddfffc1789bcfed6d1339cdd21eb77"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10002, 0x3, 0x4002004bd, 0x7ff, 0x9, 0x101, 0x402, 0x172a20000000000, 0x89, 0x0, 0x8, 0x8d], 0x170000, 0x21a456}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) write$binfmt_format(r9, &(0x7f0000002100)='1\x00', 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @none, 0x3, 0x1}, 0xe) writev(r0, &(0x7f0000000080)=[{&(0x7f0000002440)="a10100001500add427323b470c45b45602067fffffff81104e22000d08ff0028925aa80020007b00090080000efffeffe809142000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000de8a36858fc79a47b292c8ff6dbe80e1475ce352bd6847db19843292ff10fa5760e12a58d9ea96f45d71dd33934e9daaea2f013efe10a44613fa9458f91ed0a1458d293b25e97092cbdd913d9820dc70e1de17ba448156daf6d67cef98076bce5f3c7f21d01b3d0e1ef8", 0xc2}], 0x1) 2.524173028s ago: executing program 6 (id=1973): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x14) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0, 0xffffffffffffff88}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6e2, 0x20480) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) 2.483280369s ago: executing program 6 (id=1974): socket$pppl2tp(0x18, 0x1, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140004003a00110200001700fdffffff0a000000fab89bdbbfcb921873f63f0e5719a10eb8f6ea34a2ee673c137fa2cee9fcdcdecd83074f2df6aac990"], 0x14}, 0x1, 0x6000000}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x7b50, &(0x7f0000000180)={0x0, 0xdd34, 0x10000, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x89b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8c}}}, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9630e8ca6e223bbdf2cdeb7cad4d7d0ee290db86c59284677beaa811ad22dbf995", @ANYRES8], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r5, 0xfffffffffffffc01, 0x0) 1.878174234s ago: executing program 0 (id=1978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x413, 0x2070bd28, 0x0, {{@in=@local, @in=@empty, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x4, 0x7, 0x0, 0x40000000000005, 0xffffffffff7fffff, 0x100, 0x7f, 0x2}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x100}, 0x70bd2a, 0x34fc, 0x2, 0x1, 0xbe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x20004800) 1.877637424s ago: executing program 0 (id=1979): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 1.855441685s ago: executing program 0 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000000000000000000001ff0200000000000000000000000000014e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='R'], 0x46) 1.853854795s ago: executing program 1 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f1f, 0xfffb, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x104, 0xfefffffffffffffe, 0x4, 0x800009}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210005, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x1, 0x17, 0x5, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x400e, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 1.788140386s ago: executing program 0 (id=1982): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a0308000301010725"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x404c885, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r4 = inotify_init1(0x80000) close(r4) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, r5, 0x73a50000) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x700, 0xfdef) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r9, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/timer_list\x00', 0x0, 0x0) (async) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3263cd9f09587e3906da08111b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c0e14dcfbb"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e78f944944"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004044}, 0x14) write$cgroup_subtree(r0, &(0x7f0000000400), 0x0) 1.691808889s ago: executing program 2 (id=1983): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x4, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x0, 0x7, 0x11, "aec4511db2ef242bb5e9a20e4c7bcf37ec"}, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x4, 0x20, [0xff0f]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000440)={0x40, 0xb, 0x2, "0505"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x40, 0x16, 0x2, "ff37"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r2, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmmsg$inet(r2, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 1.691367119s ago: executing program 1 (id=1984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) (async) fcntl$getown(r0, 0x9) (async, rerun: 32) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup3(r6, r5, 0x80000) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000013740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x20008054) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x84) sendmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)="2c46b29a7e4bd11a38b56893de6fbaca07ee1cdd031d65b7049e780ceaee3b3df6dcaea9ce5926fe4db7dbfa0406af353b1255cf474a0840efc4f823406cec8e3fd6109524", 0x45}], 0x1}}], 0x1, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) 1.585230621s ago: executing program 6 (id=1985): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 1.541585252s ago: executing program 1 (id=1986): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x4283cafe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys\x00', 0x42401, 0x50) write$binfmt_format(r1, &(0x7f0000000100)='1\x00', 0x2) io_setup(0xfffffffc, &(0x7f0000000000)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000002c0)="570b5f0f8daa97cd3a3a65db5c6d9794b589ae7cb83e73fe5ec801a4017387cf2842b07e21fec49423d0802561684c5daca79b0cee9c5fe12c8dd8121034a91db7ad43a80a90c498dfff4046cc2400debc7f741b31ead85a817be4812eb7883169adf9b3f4a936912a5f27a12564a5d80ead8a9f3b38d8a3d96a367be7f4bf5d8f9b1b36b5ed", 0x86, 0x9, 0x0, 0x1}, &(0x7f0000000280)) 1.432138875s ago: executing program 6 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xf5ff}, 0x0) 1.418036105s ago: executing program 6 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000009600)='iocharset', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000440)=[@nested_load_code={0x12e, 0x4f, {0x3, "470f320fbc094298640f01c90f01c3660f72f4b2650f0666baf80cb80c1d8582ef66bafc0cb800000080efb9de0a00000f32f20f1b6e76"}}], 0x4f}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file4/file7\x00', 0x148) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) getdents64(r9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.367178947s ago: executing program 6 (id=1989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x158, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x70bd26, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(cast6-generic)\x00'}, 0x0, 0x18}}]}, 0x158}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="3b839a75561e47a674be6ff5b910493b193d8198fcff6ab64f9e787bf9e0560bcb00e1ac8b661f3fb7b9bdd7c63bbf7249b8d4880173d82abfeadb"]) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) r3 = syz_clone(0x20000091, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000240)='oom_score_adj\x00') (async) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', &(0x7f0000000100)={0x0, 0x1b, 0x2c}, 0x18) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000180)) (async) fchdir(r4) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000040)='attr/exec\x00') write$binfmt_misc(r6, 0x0, 0x0) r7 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) (async) r8 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122350007058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff00750895019102c0"], 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) fchdir(r9) creat(&(0x7f00000002c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x102) 1.176290511s ago: executing program 1 (id=1990): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) lstat(&(0x7f0000000280)='./mnt\x00', &(0x7f0000000440)) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b06032300010102030109022d0001010080000904000003ff000000090501020002000092090582020002000000090583030a00010000"], 0x0) 420.24777ms ago: executing program 0 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000000000000000000001ff0200000000000000000000000000014e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='R'], 0x46) 369.499541ms ago: executing program 0 (id=1992): r0 = syz_io_uring_setup(0x1efe, &(0x7f0000000140)={0x0, 0x72b, 0x3010, 0xfffffffc, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) r1 = epoll_create(0xaf2) pause() syz_clone3(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 0s ago: executing program 1 (id=1993): r0 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140004003a00110200001700fdffffff0a000000fab89bdbbfcb921873f63f0e5719a10eb8f6ea34a2ee673c137fa2cee9fcdcdecd83074f2df6aac990"], 0x14}, 0x1, 0x6000000}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x7b50, &(0x7f0000000180)={0x0, 0xdd34, 0x10000, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x89b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8c}}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="9630e8ca6e223bbdf2cdeb7cad4d7d0ee290db86c59284677beaa811ad22dbf995", @ANYRES8=r0], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r6, 0xfffffffffffffc01, 0x0) kernel console output (not intermixed with test programs): 8] fuse: Unknown parameter '' [ 168.253133][ T4098] overlayfs: failed to resolve 'redirect_dir=on': -2 [ 168.670588][ T4134] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 168.707240][ T4134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'. [ 168.716455][ T4134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 168.725601][ T4134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'. [ 169.110230][ T383] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 169.153977][ T383] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.434128][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 169.434153][ T36] audit: type=1400 audit(1789086561.493:869): avc: denied { write } for pid=4156 comm="syz.0.1206" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.461174][ T36] audit: type=1400 audit(1789086561.493:870): avc: denied { map } for pid=4156 comm="syz.0.1206" path="socket:[148487]" dev="sockfs" ino=148487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.488951][ T36] audit: type=1400 audit(1789086561.493:871): avc: denied { accept } for pid=4156 comm="syz.0.1206" path="socket:[148487]" dev="sockfs" ino=148487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.547452][ T36] audit: type=1400 audit(1789086561.603:872): avc: denied { setattr } for pid=4158 comm="syz.0.1207" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 169.711741][ T4165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 169.723091][ T4165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 169.728061][ T4162] netlink: 'syz.0.1208': attribute type 27 has an invalid length. [ 169.738754][ T4166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 169.767278][ T4165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.791792][ T4165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.793063][ T4162] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.924946][ T4178] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 170.008696][ T383] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 170.129703][ T4188] syzkaller1: entered promiscuous mode [ 170.135592][ T4188] syzkaller1: entered allmulticast mode [ 170.148511][ T383] usb 6-1: device descriptor read/64, error -71 [ 170.408716][ T383] usb 6-1: device descriptor read/64, error -71 [ 170.648617][ T383] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.798516][ T383] usb 6-1: device descriptor read/64, error -71 [ 170.991248][ T2404] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 171.019439][ T2404] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.049901][ T383] usb 6-1: device descriptor read/64, error -71 [ 171.168967][ T383] usb usb6-port1: attempt power cycle [ 171.228480][ T36] audit: type=1400 audit(1789086563.283:873): avc: denied { write } for pid=4218 comm="syz.0.1224" name="hidraw0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.268640][ T4219] hid-generic 0000:0000:0000.000B: pid 4219 passed too short report [ 171.287656][ T4219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 171.528524][ T383] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 171.560160][ T383] usb 6-1: device descriptor read/8, error -71 [ 171.689820][ T383] usb 6-1: device descriptor read/8, error -71 [ 171.708522][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 171.870655][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.885882][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.911496][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 171.922649][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.936597][ T383] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 171.946701][ T9] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 171.956498][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.964906][ T9] usb 1-1: Product: syz [ 171.969830][ T9] usb 1-1: Manufacturer: syz [ 171.975338][ T383] usb 6-1: device descriptor read/8, error -71 [ 171.981911][ T9] usb 1-1: SerialNumber: syz [ 171.991432][ T9] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 172.004370][ T9] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 172.016020][ T9] usbserial_generic 1-1:1.0: generic converter detected [ 172.026722][ T9] usb 1-1: generic converter now attached to ttyUSB0 [ 172.119827][ T383] usb 6-1: device descriptor read/8, error -71 [ 172.195173][ T2404] usb 1-1: USB disconnect, device number 43 [ 172.209038][ T2404] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 172.219689][ T2404] usbserial_generic 1-1:1.0: device disconnected [ 172.228687][ T383] usb usb6-port1: unable to enumerate USB device [ 172.764735][ T36] audit: type=1400 audit(1789086564.823:874): avc: denied { append } for pid=4274 comm="syz.0.1239" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.769142][ T4275] Invalid logical block size (4) [ 172.925251][ T36] audit: type=1400 audit(1789086564.983:875): avc: denied { mounton } for pid=4277 comm="syz.5.1241" path="/39/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 172.959329][ T4278] overlayfs: workdir and upperdir must reside under the same mount [ 173.037061][ T4282] block device autoloading is deprecated and will be removed. [ 173.073174][ T4282] syz.0.1242: attempt to access beyond end of device [ 173.073174][ T4282] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 173.179351][ T4289] futex_wake_op: syz.0.1245 tries to shift op by 144; fix this program [ 173.243008][ T36] audit: type=1400 audit(1789086565.293:876): avc: denied { create } for pid=4290 comm="syz.5.1246" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 173.298523][ T36] audit: type=1400 audit(1789086565.313:877): avc: denied { unmount } for pid=3584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 173.347654][ T36] audit: type=1400 audit(1789086565.403:878): avc: denied { mounton } for pid=4294 comm="syz.5.1248" path="/43/dev_mnt" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 173.473815][ T4298] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 173.686762][ T4306] netlink: 'syz.0.1251': attribute type 12 has an invalid length. [ 173.978638][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 174.079671][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 174.176128][ T9] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 174.196402][ T9] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 174.218790][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.243447][ T9] usb 1-1: config 0 descriptor?? [ 174.474489][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 174.474515][ T36] audit: type=1400 audit(1789086566.533:892): avc: denied { setopt } for pid=4305 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.522546][ T36] audit: type=1400 audit(1789086566.543:893): avc: denied { write } for pid=4347 comm="syz.1.1268" path="socket:[148788]" dev="sockfs" ino=148788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.549248][ T4351] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 174.567828][ T36] audit: type=1400 audit(1789086566.563:894): avc: denied { write } for pid=4305 comm="syz.0.1251" name="dynamic_events" dev="tracefs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.573707][ T4351] netlink: 'syz.1.1268': attribute type 32 has an invalid length. [ 174.601017][ T36] audit: type=1400 audit(1789086566.563:895): avc: denied { accept } for pid=4305 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.654361][ T36] audit: type=1400 audit(1789086566.563:896): avc: denied { cmd } for pid=4345 comm="iou-wrk-4346" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 174.699650][ T36] audit: type=1400 audit(1789086566.573:897): avc: denied { map } for pid=4345 comm="syz.5.1267" path="/dev/ublkc0" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.765069][ T36] audit: type=1400 audit(1789086566.763:898): avc: denied { relabelfrom } for pid=4353 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.801815][ T36] audit: type=1400 audit(1789086566.763:899): avc: denied { relabelto } for pid=4353 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 175.045514][ T9] usb 1-1: USB disconnect, device number 44 [ 175.142409][ T4361] FAULT_INJECTION: forcing a failure. [ 175.142409][ T4361] name failslab, interval 1, probability 0, space 0, times 0 [ 175.204480][ T4361] CPU: 0 UID: 0 PID: 4361 Comm: syz.0.1270 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 175.204526][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.204543][ T4361] Call Trace: [ 175.204554][ T4361] [ 175.204566][ T4361] __dump_stack+0x21/0x30 [ 175.204605][ T4361] dump_stack_lvl+0x140/0x1c0 [ 175.204638][ T4361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.204672][ T4361] ? avc_has_perm_noaudit+0x289/0x360 [ 175.204703][ T4361] dump_stack+0x19/0x20 [ 175.204733][ T4361] should_fail_ex+0x3c2/0x510 [ 175.204763][ T4361] ? sk_prot_alloc+0x104/0x3a0 [ 175.204791][ T4361] should_failslab+0xac/0x100 [ 175.204821][ T4361] __kmalloc_noprof+0x69/0x510 [ 175.204931][ T4361] ? sk_prot_alloc+0x104/0x3a0 [ 175.204972][ T4361] ? security_inode_alloc+0x51/0x230 [ 175.205007][ T4361] sk_prot_alloc+0x104/0x3a0 [ 175.205036][ T4361] ? bpf_lsm_capable+0xd/0x20 [ 175.205071][ T4361] sk_alloc+0x40/0x590 [ 175.205100][ T4361] ? ns_capable+0x90/0xf0 [ 175.205124][ T4361] packet_create+0x108/0xa10 [ 175.205159][ T4361] __sock_create+0x3a2/0x810 [ 175.205188][ T4361] __sys_socket+0xe1/0x1c0 [ 175.205215][ T4361] __x64_sys_socket+0x7e/0x90 [ 175.205242][ T4361] x64_sys_call+0x2608/0x2ee0 [ 175.205265][ T4361] do_syscall_64+0x57/0xf0 [ 175.205301][ T4361] ? clear_bhb_loop+0x50/0xa0 [ 175.205333][ T4361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.205363][ T4361] RIP: 0033:0x7f180679e159 [ 175.205386][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.205409][ T4361] RSP: 002b:00007f18076a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 175.205441][ T4361] RAX: ffffffffffffffda RBX: 00007f1806a26090 RCX: 00007f180679e159 [ 175.205462][ T4361] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 175.205478][ T4361] RBP: 00007f180683503b R08: 0000000000000000 R09: 0000000000000000 [ 175.205499][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.205517][ T4361] R13: 00007f1806a26128 R14: 00007f1806a26090 R15: 00007ffcbc3cece8 [ 175.205539][ T4361] [ 175.573188][ T4367] ./dev/sda1: Can't lookup blockdev [ 175.657969][ T36] audit: type=1400 audit(1789086567.713:900): avc: denied { create } for pid=4368 comm="syz.1.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.025068][ T4399] ./dev/sda1: Can't lookup blockdev [ 176.614503][ T4407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.745781][ T36] audit: type=1400 audit(1789086568.803:901): avc: denied { map } for pid=4413 comm="syz.0.1287" path="/proc/704/task/705/mounts" dev="proc" ino=149043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 176.907057][ T4425] .N: renamed from veth0_to_bond (while UP) [ 177.113328][ T4440] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.176995][ T4443] overlayfs: failed to clone upperpath [ 177.254662][ T4450] : renamed from veth0_vlan (while UP) [ 177.538603][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 177.688540][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 177.697395][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 177.708278][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.716629][ T9] usb 6-1: Product: syz [ 177.721014][ T9] usb 6-1: Manufacturer: syz [ 177.726358][ T9] usb 6-1: SerialNumber: syz [ 178.677921][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 178.727536][ T4491] overlayfs: missing 'lowerdir' [ 178.822488][ T4491] ./file0: Can't lookup blockdev [ 178.847982][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 178.866377][ T9] usb 6-1: USB disconnect, device number 10 [ 178.948497][ T2404] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 179.013081][ T4494] cgroup: fork rejected by pids controller in /syz0 [ 179.149170][ T4536] ./dev/sda1: Can't lookup blockdev [ 179.165251][ T2404] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.181384][ T2404] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 179.195947][ T2404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.208435][ T2404] usb 1-1: Product: syz [ 179.215547][ T2404] usb 1-1: Manufacturer: syz [ 179.220870][ T2404] usb 1-1: SerialNumber: syz [ 179.232260][ T2404] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 179.238217][ T2404] cdc_wdm 1-1:1.0: Unknown control protocol [ 179.263388][ T4543] netlink: 'syz.2.1313': attribute type 27 has an invalid length. [ 179.594648][ T9] usb 1-1: USB disconnect, device number 45 [ 180.139497][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 180.139522][ T36] audit: type=1400 audit(1789086572.203:911): avc: denied { append } for pid=4583 comm="syz.0.1315" name="uprobe_events" dev="tracefs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 180.170093][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1315'. [ 180.182136][ T4584] rust_binder: validate_parent_fixup: new_min_offset=210, sg_entry.length=0 [ 180.182168][ T4584] rust_binder: 4583:4584 error while translating object: EINVAL [ 180.199761][ T4584] rust_binder: Failure in copy_transaction_data: EINVAL [ 180.199803][ T4584] rust_binder: 4583:4584 transaction call to 4583:0 failed EINVAL, code 0 size 104-24 [ 180.225239][ T9] rust_binder: 4583: undelivered TRANSACTION_ERROR: 29201 [ 180.377583][ T36] audit: type=1400 audit(1789086572.433:912): avc: denied { read } for pid=4585 comm="syz.0.1316" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.402287][ T36] audit: type=1400 audit(1789086572.433:913): avc: denied { open } for pid=4585 comm="syz.0.1316" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.563853][ T63] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 180.585564][ T63] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.808654][ T4607] overlayfs: failed to resolve 'lo': -2 [ 180.944205][ T4609] overlayfs: failed to clone upperpath [ 181.592982][ T4615] fuse: blksize only supported for fuseblk [ 181.593721][ T36] audit: type=1400 audit(1789086573.653:914): avc: denied { create } for pid=4614 comm="syz.2.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.645216][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 181.665483][ T36] audit: type=1400 audit(1789086573.663:915): avc: denied { ioctl } for pid=4610 comm="syz.1.1325" path="socket:[150879]" dev="sockfs" ino=150879 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.666208][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 181.850645][ T4624] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 181.868570][ T4624] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1329'. [ 182.004058][ T4635] kernel profiling enabled (shift: 5) [ 182.126093][ T4645] netlink: 'syz.1.1332': attribute type 27 has an invalid length. [ 182.493034][ T4671] rust_binder: 4670:4671 no such ref 0 [ 182.985917][ T36] audit: type=1326 audit(1789086575.043:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.0.1347" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f180679e159 code=0x0 [ 183.088535][ T36] audit: type=1400 audit(1789086575.143:917): avc: denied { write } for pid=4678 comm="syz.0.1347" path="socket:[151056]" dev="sockfs" ino=151056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.151902][ T36] audit: type=1400 audit(1789086575.203:918): avc: denied { sqpoll } for pid=4686 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 183.215683][ T36] audit: type=1400 audit(1789086575.273:919): avc: denied { create } for pid=4686 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 183.440230][ T4692] 9pnet: Could not find request transport: xen [ 183.454737][ T36] audit: type=1400 audit(1789086575.513:920): avc: denied { create } for pid=4691 comm="syz.5.1350" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.669471][ T4699] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 183.693327][ T4699] FAULT_INJECTION: forcing a failure. [ 183.693327][ T4699] name failslab, interval 1, probability 0, space 0, times 0 [ 183.716276][ T4699] CPU: 0 UID: 0 PID: 4699 Comm: syz.5.1353 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 183.716320][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.716337][ T4699] Call Trace: [ 183.716347][ T4699] [ 183.716358][ T4699] __dump_stack+0x21/0x30 [ 183.716398][ T4699] dump_stack_lvl+0x140/0x1c0 [ 183.716433][ T4699] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.716468][ T4699] ? __d_alloc+0x42/0x8c0 [ 183.716495][ T4699] dump_stack+0x19/0x20 [ 183.716525][ T4699] should_fail_ex+0x3c2/0x510 [ 183.716554][ T4699] should_failslab+0xac/0x100 [ 183.716585][ T4699] kmem_cache_alloc_noprof+0x42/0x410 [ 183.716622][ T4699] ? alloc_empty_file+0xbf/0x270 [ 183.716653][ T4699] ? _raw_spin_unlock+0x45/0x60 [ 183.716677][ T4699] alloc_empty_file+0xbf/0x270 [ 183.716707][ T4699] ? _raw_spin_unlock+0x45/0x60 [ 183.716729][ T4699] alloc_file_pseudo+0x142/0x1f0 [ 183.716760][ T4699] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 183.716790][ T4699] ? shmem_get_inode+0x81c/0xc10 [ 183.716820][ T4699] ? __kasan_check_write+0x18/0x20 [ 183.716844][ T4699] ? clear_nlink+0x8e/0xf0 [ 183.716872][ T4699] __shmem_file_setup+0x242/0x2c0 [ 183.716901][ T4699] shmem_zero_setup+0x90/0x130 [ 183.716930][ T4699] mmap_region+0x1659/0x1d10 [ 183.716958][ T4699] ? __cfi_mmap_region+0x10/0x10 [ 183.716983][ T4699] ? avc_has_perm_noaudit+0x289/0x360 [ 183.717017][ T4699] ? __kasan_check_read+0x15/0x20 [ 183.717041][ T4699] ? __get_unmapped_area+0x406/0x470 [ 183.717066][ T4699] do_mmap+0xb61/0x13b0 [ 183.717089][ T4699] ? __cfi_do_mmap+0x10/0x10 [ 183.717112][ T4699] ? __cfi_down_write_killable+0x10/0x10 [ 183.717142][ T4699] vm_mmap_pgoff+0x367/0x4b0 [ 183.717172][ T4699] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 183.717197][ T4699] ? trace_event_buffer_commit+0x256/0x8f0 [ 183.717226][ T4699] ksys_mmap_pgoff+0xfa/0x1e0 [ 183.717250][ T4699] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 183.717288][ T4699] __x64_sys_mmap+0x121/0x140 [ 183.717313][ T4699] x64_sys_call+0x13bf/0x2ee0 [ 183.717335][ T4699] do_syscall_64+0x57/0xf0 [ 183.717358][ T4699] ? clear_bhb_loop+0x50/0xa0 [ 183.717387][ T4699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.717415][ T4699] RIP: 0033:0x7f40ad99e159 [ 183.717438][ T4699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.717460][ T4699] RSP: 002b:00007f40ae8ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.717491][ T4699] RAX: ffffffffffffffda RBX: 00007f40adc25fa0 RCX: 00007f40ad99e159 [ 183.717510][ T4699] RDX: 0000000001000009 RSI: 0000000000001100 RDI: 0000000000000000 [ 183.717529][ T4699] RBP: 00007f40ada3503b R08: ffffffffffffffff R09: 0000000010000000 [ 183.717549][ T4699] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 183.717567][ T4699] R13: 00007f40adc26038 R14: 00007f40adc25fa0 R15: 00007ffe40019128 [ 183.717591][ T4699] [ 183.729509][ T4701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4701 comm=syz.2.1354 [ 183.743866][ T4699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1353'. [ 184.039743][ T4705] netlink: 'syz.5.1353': attribute type 27 has an invalid length. [ 184.178516][ T310] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 184.318507][ T310] usb 1-1: device descriptor read/64, error -71 [ 184.569003][ T310] usb 1-1: device descriptor read/64, error -71 [ 184.828602][ T310] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 184.965509][ T310] usb 1-1: device descriptor read/64, error -71 [ 185.058588][ T63] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 185.218546][ T310] usb 1-1: device descriptor read/64, error -71 [ 185.239971][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 185.239993][ T36] audit: type=1400 audit(1789086577.303:930): avc: denied { setopt } for pid=4737 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.338968][ T310] usb usb1-port1: attempt power cycle [ 185.349265][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.370656][ T63] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 185.388732][ T63] usb 6-1: can't read configurations, error -71 [ 185.562278][ T36] audit: type=1326 audit(1789086577.623:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.1.1373" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7524b9e159 code=0x0 [ 185.699137][ T310] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 185.719961][ T310] usb 1-1: device descriptor read/8, error -71 [ 185.869910][ T310] usb 1-1: device descriptor read/8, error -71 [ 186.128508][ T310] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 186.169842][ T310] usb 1-1: device descriptor read/8, error -71 [ 186.259603][ T4791] tmpfs: Bad value for 'nr_blocks' [ 186.299920][ T310] usb 1-1: device descriptor read/8, error -71 [ 186.408830][ T310] usb usb1-port1: unable to enumerate USB device [ 186.749088][ T4810] overlay: Unknown parameter './file0/file2' [ 186.755507][ T4810] overlay: Unknown parameter './file0/file2' [ 186.762686][ T4810] overlay: Unknown parameter './file0/file2' [ 186.769194][ T4810] overlay: Unknown parameter './file0/file2' [ 186.775433][ T4810] overlay: Unknown parameter './file0/file2' [ 186.782386][ T4810] overlay: Unknown parameter './file0/file2' [ 186.788759][ T4810] overlay: Unknown parameter './file0/file2' [ 186.795158][ T4810] overlay: Unknown parameter './file0/file2' [ 186.801472][ T4810] overlay: Unknown parameter './file0/file2' [ 186.807687][ T4810] overlay: Unknown parameter './file0/file2' [ 186.814116][ T4810] overlay: Unknown parameter './file0/file2' [ 186.820554][ T4810] overlay: Unknown parameter './file0/file2' [ 186.826927][ T4810] overlay: Unknown parameter './file0/file2' [ 186.833854][ T4810] overlay: Unknown parameter './file0/file2' [ 186.840551][ T4810] overlay: Unknown parameter './file0/file2' [ 186.846887][ T4810] overlay: Unknown parameter './file0/file2' [ 186.853742][ T4810] overlay: Unknown parameter './file0/file2' [ 186.863328][ T4810] overlay: Unknown parameter './file0/file2' [ 186.873753][ T4810] overlay: Unknown parameter './file0/file2' [ 186.881103][ T4810] overlay: Unknown parameter './file0/file2' [ 186.888228][ T4810] overlay: Unknown parameter './file0/file2' [ 186.896773][ T4810] overlay: Unknown parameter './file0/file2' [ 186.898630][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1388'. [ 186.913576][ T4810] overlay: Unknown parameter './file0/file2' [ 186.920788][ T4810] overlay: Unknown parameter './file0/file2' [ 186.923288][ T4816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1388'. [ 186.936536][ T4810] overlay: Unknown parameter './file0/file2' [ 186.944069][ T4810] overlay: Unknown parameter './file0/file2' [ 186.951568][ T4810] overlay: Unknown parameter './file0/file2' [ 186.959310][ T4810] overlay: Unknown parameter './file0/file2' [ 186.968910][ T4810] overlay: Unknown parameter './file0/file2' [ 186.975448][ T4810] overlay: Unknown parameter './file0/file2' [ 186.978561][ T36] audit: type=1400 audit(1789086579.033:932): avc: denied { mount } for pid=4818 comm="syz.0.1389" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.004744][ T4810] overlay: Unknown parameter './file0/file2' [ 187.014530][ T4810] overlay: Unknown parameter './file0/file2' [ 187.022108][ T4810] overlay: Unknown parameter './file0/file2' [ 187.029719][ T4822] ./dev/sda1: Can't lookup blockdev [ 187.132018][ T4827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 187.143746][ T4827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 187.459103][ T310] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 187.609939][ T310] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.621593][ T310] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 187.632147][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.640620][ T310] usb 6-1: Product: syz [ 187.645369][ T310] usb 6-1: Manufacturer: syz [ 187.650594][ T310] usb 6-1: SerialNumber: syz [ 187.656914][ T310] usb 6-1: config 0 descriptor?? [ 187.870369][ T63] usb 6-1: USB disconnect, device number 13 [ 187.982503][ T36] audit: type=1400 audit(1789086580.043:933): avc: denied { create } for pid=4839 comm="syz.2.1397" name="udmabuf" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 188.428526][ T310] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 188.568487][ T310] usb 1-1: device descriptor read/64, error -71 [ 188.747673][ T36] audit: type=1400 audit(1789086580.803:934): avc: denied { bind } for pid=4867 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.818645][ T310] usb 1-1: device descriptor read/64, error -71 [ 188.998567][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 189.068589][ T310] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 189.161286][ T31] usb 6-1: config index 0 descriptor too short (expected 65340, got 60) [ 189.170215][ T31] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 189.179631][ T31] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 189.190554][ T31] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 189.200177][ T31] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 189.209933][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.219225][ T310] usb 1-1: device descriptor read/64, error -71 [ 189.297239][ T36] audit: type=1400 audit(1789086581.353:935): avc: denied { setopt } for pid=4887 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.345790][ T36] audit: type=1400 audit(1789086581.403:936): avc: denied { read } for pid=4889 comm="syz.1.1411" name="file0" dev="tmpfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.352884][ T4890] fuse: Unknown parameter '' [ 189.408059][ T36] audit: type=1400 audit(1789086581.403:937): avc: denied { open } for pid=4889 comm="syz.1.1411" path="/500/file0" dev="tmpfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.452324][ T36] audit: type=1400 audit(1789086581.413:938): avc: denied { mounton } for pid=4889 comm="syz.1.1411" path="/500/file0" dev="tmpfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.476483][ T310] usb 1-1: device descriptor read/64, error -71 [ 189.483163][ T36] audit: type=1400 audit(1789086581.443:939): avc: denied { append } for pid=4889 comm="syz.1.1411" name="file0" dev="tmpfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.523173][ T31] usb 6-1: string descriptor 0 read error: -71 [ 189.540339][ T31] usb 6-1: USB disconnect, device number 14 [ 189.608692][ T310] usb usb1-port1: attempt power cycle [ 189.948580][ T310] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 189.970199][ T310] usb 1-1: device descriptor read/8, error -71 [ 190.100069][ T310] usb 1-1: device descriptor read/8, error -71 [ 190.134383][ T4906] ./dev/sda1: Can't lookup blockdev [ 190.278089][ T4920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4920 comm=syz.2.1418 [ 190.300698][ T4920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1418'. [ 190.340149][ T310] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 190.390918][ T310] usb 1-1: device descriptor read/8, error -71 [ 190.533318][ T4929] overlayfs: option "workdir=./upper" is useless in a non-upper mount, ignore [ 190.542695][ T4929] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.549680][ T310] usb 1-1: device descriptor read/8, error -71 [ 190.555459][ T4929] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.678664][ T310] usb usb1-port1: unable to enumerate USB device [ 191.470330][ T36] audit: type=1400 audit(1789086583.533:940): avc: denied { name_bind } for pid=4957 comm="syz.0.1432" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 191.851348][ T4974] netlink: 'syz.2.1439': attribute type 5 has an invalid length. [ 191.858530][ T310] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 191.859674][ T4974] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1439'. [ 191.968605][ T521] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 192.009945][ T310] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.018565][ T310] usb 1-1: config 0 has no interface number 0 [ 192.024900][ T310] usb 1-1: config 0 interface 41 has no altsetting 0 [ 192.033734][ T310] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 192.043110][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.051438][ T310] usb 1-1: Product: syz [ 192.055674][ T310] usb 1-1: Manufacturer: syz [ 192.060349][ T310] usb 1-1: SerialNumber: syz [ 192.065798][ T310] usb 1-1: config 0 descriptor?? [ 192.128562][ T521] usb 6-1: Using ep0 maxpacket: 32 [ 192.135337][ T521] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 192.147422][ T521] usb 6-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice=e2.40 [ 192.156741][ T521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.164981][ T521] usb 6-1: Product: syz [ 192.169362][ T521] usb 6-1: Manufacturer: syz [ 192.178511][ T521] usb 6-1: SerialNumber: syz [ 192.201827][ T4972] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 192.278490][ T310] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 192.292300][ T310] usb 1-1: USB disconnect, device number 54 [ 192.422467][ T4982] ./dev/sda1: Can't lookup blockdev [ 192.431478][ T521] usb 6-1: USB disconnect, device number 15 [ 192.485275][ T4984] IPv6: syztnl0: Disabled Multicast RS [ 192.718592][ T310] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 192.898489][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 192.909799][ T310] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.918016][ T310] usb 1-1: config 0 has no interface number 0 [ 192.928834][ T310] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 192.981539][ T310] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.021890][ T310] usb 1-1: config 0 interface 41 has no altsetting 0 [ 193.040887][ T310] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.052841][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.068524][ T310] usb 1-1: Product: syz [ 193.072895][ T310] usb 1-1: Manufacturer: syz [ 193.077623][ T310] usb 1-1: SerialNumber: syz [ 193.094696][ T310] usb 1-1: config 0 descriptor?? [ 193.106875][ T4966] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.115709][ T4966] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.190543][ T5016] fuse: Bad value for 'group_id' [ 193.196541][ T5016] fuse: Bad value for 'group_id' [ 193.203606][ T36] audit: type=1400 audit(1789086585.263:941): avc: denied { read } for pid=5017 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.272788][ T36] audit: type=1400 audit(1789086585.333:942): avc: denied { map } for pid=5019 comm="syz.5.1455" path="pipe:[145760]" dev="pipefs" ino=145760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.302944][ T5021] netlink: 'syz.1.1454': attribute type 32 has an invalid length. [ 193.329322][ T5022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1455'. [ 193.330414][ T4966] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.356949][ T36] audit: type=1400 audit(1789086585.363:943): avc: denied { shutdown } for pid=5017 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.399117][ T4966] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.400508][ T5022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1455'. [ 193.417100][ T36] audit: type=1400 audit(1789086585.443:944): avc: denied { getopt } for pid=5023 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.868592][ T521] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 194.018600][ T521] usb 6-1: Using ep0 maxpacket: 8 [ 194.026092][ T521] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.035061][ T521] usb 6-1: config 179 has no interface number 0 [ 194.041675][ T521] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.053185][ T521] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.054640][ T4966] wireguard: wg1: Could not create IPv4 socket [ 194.064930][ T521] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.084422][ T310] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 194.097755][ T521] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.111120][ T521] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.125665][ T310] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 194.135026][ T521] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.136382][ T5044] .N: renamed from veth1_to_batadv (while UP) [ 194.150355][ T310] usb 1-1: USB disconnect, device number 55 [ 194.161137][ T521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.176559][ T5042] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 194.225563][ T36] audit: type=1400 audit(1789086586.283:945): avc: denied { watch watch_reads } for pid=5047 comm="syz.1.1463" path="/515/file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.241961][ T5050] overlayfs: failed to clone lowerpath [ 194.288903][ T36] audit: type=1400 audit(1789086586.343:946): avc: denied { mounton } for pid=5056 comm="syz.2.1465" path="/440/file0" dev="tmpfs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.368831][ T63] kernel write not supported for file [eventfd] (pid: 63 comm: kworker/0:2) [ 194.647419][ T10] usb 6-1: USB disconnect, device number 16 [ 194.647515][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 194.662647][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.726188][ T63] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 194.743644][ T63] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.902683][ T36] audit: type=1400 audit(1789086586.963:947): avc: denied { read } for pid=5072 comm="syz.1.1470" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.385612][ T36] audit: type=1326 audit(1789086587.443:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.2.1475" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f792b79e159 code=0x0 [ 195.657759][ T5097] input: syz1 as /devices/virtual/input/input14 [ 195.668631][ T36] audit: type=1400 audit(1789086587.723:949): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=688 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.641874][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 196.641890][ T36] audit: type=1400 audit(1789086588.703:952): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.757077][ T5114] binder: Bad value for 'max' [ 196.760354][ T36] audit: type=1400 audit(1789086588.813:953): avc: denied { mounton } for pid=5113 comm="syz.0.1482" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.035963][ T36] audit: type=1400 audit(1789086589.093:954): avc: denied { read } for pid=5115 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.414888][ T521] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 197.429059][ T521] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.914363][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1485'. [ 197.938024][ T5126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1486'. [ 198.458165][ T36] audit: type=1400 audit(1789086590.513:955): avc: denied { mounton } for pid=5158 comm="syz.5.1497" path="/105/file0" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.483909][ T36] audit: type=1400 audit(1789086590.513:956): avc: denied { read } for pid=5158 comm="syz.5.1497" name="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.508985][ T36] audit: type=1400 audit(1789086590.513:957): avc: denied { open } for pid=5158 comm="syz.5.1497" path="/105/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.543112][ T36] audit: type=1400 audit(1789086590.603:958): avc: denied { read write } for pid=5162 comm="syz.5.1499" name="max_speed" dev="configfs" ino=153646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 198.590230][ T36] audit: type=1400 audit(1789086590.603:959): avc: denied { open } for pid=5162 comm="syz.5.1499" path="/106/config/usb_gadget/g1/max_speed" dev="configfs" ino=153646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 198.632313][ T63] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 198.828483][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 198.828664][ T36] audit: type=1400 audit(1789086590.893:960): avc: denied { ioctl } for pid=5170 comm="syz.5.1501" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.836392][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.873370][ T63] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 198.880158][ T5171] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 198.899321][ T5171] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 198.903876][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.915972][ T5171] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 198.956850][ T63] usb 1-1: Product: syz [ 198.970962][ T63] usb 1-1: Manufacturer: syz [ 198.976424][ T63] usb 1-1: SerialNumber: syz [ 199.029983][ T5176] tipc: Started in network mode [ 199.035329][ T5176] tipc: Node identity ac14140f, cluster identity 4711 [ 199.043208][ T5176] tipc: New replicast peer: 255.255.255.255 [ 199.050427][ T5176] tipc: Enabled bearer , priority 24 [ 199.358494][ T521] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 199.508901][ T521] usb 6-1: Invalid ep0 maxpacket: 64 [ 199.552069][ T63] usb 1-1: selecting invalid altsetting 1 [ 199.564070][ T63] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.574173][ T5185] overlayfs: failed to clone lowerpath [ 199.580496][ T63] usb 1-1: USB disconnect, device number 56 [ 199.599920][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.620551][ T5188] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1508'. [ 199.629692][ T5192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1509'. [ 199.642517][ T36] audit: type=1400 audit(1789086591.703:961): avc: denied { create } for pid=5191 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.663586][ T521] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 199.818550][ T521] usb 6-1: Invalid ep0 maxpacket: 64 [ 199.824108][ T521] usb usb6-port1: attempt power cycle [ 200.048565][ T63] tipc: Node number set to 2886997007 [ 200.171996][ T521] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 200.209014][ T521] usb 6-1: Invalid ep0 maxpacket: 64 [ 200.358707][ T521] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 200.379232][ T521] usb 6-1: Invalid ep0 maxpacket: 64 [ 200.387078][ T521] usb usb6-port1: unable to enumerate USB device [ 201.146905][ T5231] 9pnet_fd: Insufficient options for proto=fd [ 201.295641][ T5243] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1527'. [ 201.338619][ T521] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 201.478559][ T521] usb 1-1: device descriptor read/64, error -71 [ 201.718660][ T521] usb 1-1: device descriptor read/64, error -71 [ 201.983594][ T521] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 202.131480][ T521] usb 1-1: device descriptor read/64, error -71 [ 202.408506][ T521] usb 1-1: device descriptor read/64, error -71 [ 202.478707][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 202.519033][ T521] usb usb1-port1: attempt power cycle [ 202.639945][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.651691][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 202.662885][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 202.674711][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 202.687824][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.697842][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.706180][ T9] usb 6-1: Product: syz [ 202.710903][ T9] usb 6-1: Manufacturer: syz [ 202.715625][ T9] usb 6-1: SerialNumber: syz [ 202.728941][ T5261] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 202.858538][ T521] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 202.897355][ T521] usb 1-1: device descriptor read/8, error -71 [ 202.942648][ T5261] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 202.951014][ T5261] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 203.034619][ T521] usb 1-1: device descriptor read/8, error -71 [ 203.278490][ T521] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 203.299819][ T521] usb 1-1: device descriptor read/8, error -71 [ 203.429766][ T521] usb 1-1: device descriptor read/8, error -71 [ 203.539162][ T521] usb usb1-port1: unable to enumerate USB device [ 203.564662][ T5261] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 203.578265][ T5261] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 203.614230][ T5297] overlayfs: conflicting options: metacopy=off,verity=on [ 203.682619][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 203.682646][ T36] audit: type=1400 audit(1789086595.743:963): avc: denied { nlmsg_write } for pid=5300 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 203.739397][ T5304] overlayfs: failed to resolve '!l  AndvyTK': -2 [ 203.787647][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 203.794780][ T9] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 203.802689][ T9] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 203.842592][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 204.318413][ T36] audit: type=1400 audit(1789086596.373:964): avc: denied { setopt } for pid=5333 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.720403][ T5355] No source specified [ 204.729562][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.738334][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.968566][ T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 205.125694][ T5360] overlayfs: failed to clone lowerpath [ 205.133969][ T10] usb 1-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 205.147044][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.180003][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.189426][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.201094][ T9] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 205.208604][ T10] usb 1-1: Product: syz [ 205.212853][ T10] usb 1-1: Manufacturer: syz [ 205.217556][ T10] usb 1-1: SerialNumber: syz [ 205.223859][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 205.244643][ T9] usb 6-1: USB disconnect, device number 21 [ 205.252879][ T36] audit: type=1400 audit(1789086597.303:965): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.276426][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 205.304895][ T36] audit: type=1400 audit(1789086597.313:966): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.335972][ T36] audit: type=1400 audit(1789086597.313:967): avc: denied { read } for pid=149 comm="dhcpcd" name="n17" dev="tmpfs" ino=4950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.363969][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.375207][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.386934][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.399609][ T36] audit: type=1400 audit(1789086597.313:968): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=4950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.430643][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.439300][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.447183][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.455558][ T36] audit: type=1400 audit(1789086597.313:969): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=4950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.499403][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.506985][ T63] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 205.558763][ T63] hid-generic 0000:0000:0001.000F: hidraw0: HID v0.10 Device [syz0] on syz1 [ 205.569051][ T36] audit: type=1400 audit(1789086597.353:970): avc: denied { mounton } for pid=5364 comm="syz.5.1564" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 205.624903][ T36] audit: type=1400 audit(1789086597.393:971): avc: denied { read } for pid=5370 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.655338][ T5384] fido_id[5384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.692933][ T10] usb 1-1: unknown interface protocol 0xb8, assuming v1 [ 205.708437][ T10] usb 1-1: cannot find UAC_HEADER [ 205.748584][ T36] audit: type=1400 audit(1789086597.393:972): avc: denied { open } for pid=5370 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.774650][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.808131][ T10] usb 1-1: USB disconnect, device number 61 [ 205.873288][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.088518][ T63] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 206.258540][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 206.266059][ T63] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.277776][ T63] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.291500][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 206.298425][ T63] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 206.308210][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.325030][ T63] usb 6-1: config 0 descriptor?? [ 206.455975][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 206.739990][ T63] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C215.0010/input/input15 [ 206.776622][ T63] logitech 0003:046D:C215.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0 [ 206.953666][ T63] usb 6-1: USB disconnect, device number 22 [ 208.169054][ T63] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 208.320070][ T63] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 208.330873][ T63] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 208.340885][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.349796][ T63] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 208.359033][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.367562][ T63] usb 1-1: Product: syz [ 208.372013][ T63] usb 1-1: Manufacturer: syz [ 208.376812][ T63] usb 1-1: SerialNumber: syz [ 208.383267][ T5466] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.390737][ T5466] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.915430][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 209.201508][ T5503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=5503 comm=syz.5.1600 [ 209.201763][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 209.201828][ T36] audit: type=1400 audit(1789086601.263:983): avc: denied { write } for pid=5502 comm="syz.5.1600" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.321234][ T36] audit: type=1400 audit(1789086601.383:984): avc: denied { unmount } for pid=3584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.448655][ T63] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:1c:87:13:33:5c [ 209.461801][ T63] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 209.471218][ T63] usb 1-1: USB disconnect, device number 62 [ 209.733452][ T5528] bridge0: port 3(erspan0) entered blocking state [ 209.751503][ T5528] bridge0: port 3(erspan0) entered disabled state [ 209.766119][ T5528] erspan0: entered allmulticast mode [ 209.772388][ T5528] erspan0: entered promiscuous mode [ 209.778627][ T5528] bridge0: port 3(erspan0) entered blocking state [ 209.785103][ T5528] bridge0: port 3(erspan0) entered forwarding state [ 210.239418][ T36] audit: type=1400 audit(1789086602.303:985): avc: denied { mounton } for pid=5552 comm="syz.2.1617" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 210.282400][ T36] audit: type=1400 audit(1789086602.323:986): avc: denied { unmount } for pid=5552 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 210.708479][ T5581] veth1: entered allmulticast mode [ 210.756895][ T5581] veth1: left allmulticast mode [ 211.230296][ T36] audit: type=1400 audit(1789086603.293:987): avc: denied { append } for pid=5609 comm="syz.0.1639" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 211.298266][ T5614] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 211.309246][ T5614] SELinux: failed to load policy [ 211.691824][ T5627] bridge_slave_0: mtu less than device minimum [ 211.713389][ T5627] overlayfs: failed to clone upperpath [ 211.721675][ T36] audit: type=1400 audit(1789086603.783:988): avc: denied { read write } for pid=5626 comm="syz.2.1644" name="udmabuf" dev="tmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.758472][ T31] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 211.782462][ T36] audit: type=1400 audit(1789086603.783:989): avc: denied { open } for pid=5626 comm="syz.2.1644" path="/dev/udmabuf" dev="tmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.806413][ T36] audit: type=1400 audit(1789086603.783:990): avc: denied { ioctl } for pid=5626 comm="syz.2.1644" path="/dev/udmabuf" dev="tmpfs" ino=2319 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.838534][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 211.928495][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 211.935611][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.946592][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.960886][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.971851][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.980212][ T31] usb 1-1: Product: syz [ 211.985008][ T31] usb 1-1: Manufacturer: syz [ 211.990255][ T31] usb 1-1: SerialNumber: syz [ 212.018462][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 212.025369][ T9] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 1023 [ 212.035990][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 212.045229][ T9] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 212.054826][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.063265][ T9] usb 6-1: Product: ᐁ [ 212.067724][ T9] usb 6-1: Manufacturer: 养䲃ᩫꋶ嗼ሐ菡譟鳲⤸■躞ハ [ 212.075848][ T9] usb 6-1: SerialNumber: ࡘ [ 212.092107][ T5621] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 212.253773][ T36] audit: type=1400 audit(1789086604.313:991): avc: denied { create } for pid=5617 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.318513][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.338904][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.348839][ T36] audit: type=1400 audit(1789086604.413:992): avc: denied { getopt } for pid=5617 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.364886][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.416113][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.416946][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.429705][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.449296][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.474842][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.499676][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.527113][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.562535][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.588796][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.002838][ T5656] syzkaller1: entered promiscuous mode [ 213.026878][ T5656] syzkaller1: entered allmulticast mode [ 213.216384][ T5662] new mount options do not match the existing superblock, will be ignored [ 214.545466][ T31] usb 1-1: 0:2 : does not exist [ 214.566012][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 214.626164][ T31] usb 1-1: USB disconnect, device number 63 [ 214.633450][ T9] usb 6-1: USB disconnect, device number 23 [ 214.655270][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1668'. [ 214.692347][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.721560][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 214.721581][ T36] audit: type=1400 audit(1789086606.783:995): avc: denied { ioctl } for pid=5695 comm="syz.5.1669" path="socket:[155998]" dev="sockfs" ino=155998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.806356][ T5694] overlayfs: failed to clone upperpath [ 214.978456][ T36] audit: type=1400 audit(1789086607.033:996): avc: denied { create } for pid=5702 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 215.088477][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 215.253393][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.276844][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.310606][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.340744][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 215.364050][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 215.375083][ T9] usb 6-1: Product: syz [ 215.380268][ T9] usb 6-1: Manufacturer: syz [ 215.385784][ T9] usb 6-1: SerialNumber: syz [ 215.501412][ T5720] tipc: Enabling of bearer rejected, already enabled [ 215.604175][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 215.640556][ T5735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 215.678498][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 215.770609][ T36] audit: type=1400 audit(1789086607.833:997): avc: denied { mounton } for pid=5739 comm="syz.1.1686" path="/file0" dev="ramfs" ino=155432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 215.794697][ T5740] ./dev/sda1: Can't lookup blockdev [ 215.820562][ T9] usb 6-1: USB disconnect, device number 24 [ 215.827194][ T36] audit: type=1400 audit(1789086607.873:998): avc: denied { read write } for pid=5698 comm="syz.5.1670" name="lp0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 215.856515][ T9] usblp0: removed [ 215.873749][ T36] audit: type=1400 audit(1789086607.873:999): avc: denied { open } for pid=5698 comm="syz.5.1670" path="/dev/usb/lp0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 216.078428][ T36] audit: type=1400 audit(1789086608.133:1000): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 216.158510][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 216.321527][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 216.335958][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 216.358649][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.393342][ T9] usb 6-1: Product: syz [ 216.397600][ T9] usb 6-1: Manufacturer: 䰊 [ 216.423508][ T9] usb 6-1: SerialNumber: syz [ 216.491715][ T36] audit: type=1400 audit(1789086608.553:1001): avc: denied { setattr } for pid=5771 comm="syz.1.1696" name="NETLINK" dev="sockfs" ino=155473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.036330][ T36] audit: type=1400 audit(1789086609.093:1002): avc: denied { listen } for pid=5784 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.085198][ T36] audit: type=1400 audit(1789086609.143:1003): avc: denied { name_bind } for pid=5786 comm="syz.0.1701" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 217.166151][ T9] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 217.180151][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 217.194143][ T9] usb 6-1: USB disconnect, device number 25 [ 217.221985][ T5791] netlink: 'syz.5.1703': attribute type 27 has an invalid length. [ 217.223558][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.242091][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1703'. [ 217.314409][ T5792] 9pnet_fd: Insufficient options for proto=fd [ 217.318532][ T521] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 217.446977][ T36] audit: type=1400 audit(1789086609.503:1004): avc: denied { accept } for pid=5799 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.448712][ T5800] overlayfs: failed to clone upperpath [ 217.488522][ T521] usb 1-1: Using ep0 maxpacket: 32 [ 217.495547][ T521] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 217.504443][ T521] usb 1-1: config 0 has no interface number 0 [ 217.511097][ T521] usb 1-1: config 0 interface 184 has no altsetting 0 [ 217.520106][ T521] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 217.529612][ T521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.537787][ T521] usb 1-1: Product: syz [ 217.542497][ T521] usb 1-1: Manufacturer: syz [ 217.547123][ T521] usb 1-1: SerialNumber: syz [ 217.552656][ T521] usb 1-1: config 0 descriptor?? [ 217.562186][ T521] smsc75xx v1.0.0 [ 217.668532][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 217.818554][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 217.825578][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.837008][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.846889][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 217.856445][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.865867][ T9] usb 6-1: config 0 descriptor?? [ 217.961030][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.969881][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.280446][ T9] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 218.288304][ T9] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 218.296529][ T9] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 218.304500][ T9] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 218.312170][ T9] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0 [ 218.326113][ T9] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 218.682462][ T9] usb 6-1: USB disconnect, device number 26 [ 218.788217][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 218.809798][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 218.822659][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 218.833848][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 218.849230][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 218.861545][ T521] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 218.873774][ T521] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 218.887978][ T521] usb 1-1: USB disconnect, device number 64 [ 218.942753][ T5807] 9p: Unknown Cache mode or invalid value dev/kvm [ 219.006835][ T5814] ./dev/sda1: Can't lookup blockdev [ 219.688502][ T521] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 219.828850][ T521] usb 6-1: device descriptor read/64, error -71 [ 219.888479][ T31] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 219.907882][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 219.907906][ T36] audit: type=1400 audit(1789086611.963:1007): avc: denied { lock } for pid=5849 comm="syz.2.1724" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=155638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.038714][ T31] usb 1-1: device descriptor read/64, error -71 [ 220.059392][ T5861] overlayfs: failed to clone upperpath [ 220.067894][ T5861] overlayfs: failed to clone upperpath [ 220.075249][ T5861] overlayfs: failed to clone upperpath [ 220.098912][ T521] usb 6-1: device descriptor read/64, error -71 [ 220.298466][ T31] usb 1-1: device descriptor read/64, error -71 [ 220.324566][ T5867] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1731'. [ 220.348588][ T521] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 220.432286][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.439458][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.446857][ T5870] bridge_slave_0: entered allmulticast mode [ 220.453640][ T5870] bridge_slave_0: entered promiscuous mode [ 220.461257][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.468536][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.475879][ T5870] bridge_slave_1: entered allmulticast mode [ 220.482570][ T5870] bridge_slave_1: entered promiscuous mode [ 220.488579][ T521] usb 6-1: device descriptor read/64, error -71 [ 220.498806][ T3983] bridge_slave_1: left allmulticast mode [ 220.504691][ T3983] bridge_slave_1: left promiscuous mode [ 220.510925][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.518962][ T3983] bridge_slave_0: left allmulticast mode [ 220.524790][ T3983] bridge_slave_0: left promiscuous mode [ 220.530570][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.538563][ T31] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 220.676643][ T3983] tipc: Disabling bearer [ 220.678555][ T31] usb 1-1: device descriptor read/64, error -71 [ 220.683890][ T3983] tipc: Left network mode [ 220.726675][ T3983] veth1_macvtap: left promiscuous mode [ 220.728481][ T521] usb 6-1: device descriptor read/64, error -71 [ 220.732767][ T3983] veth0_vlan: left promiscuous mode [ 220.858733][ T521] usb usb6-port1: attempt power cycle [ 220.866115][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.873463][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.880980][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.888316][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.938113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.946210][ T31] usb 1-1: device descriptor read/64, error -71 [ 220.956224][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.973118][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.980296][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.003546][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.010900][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.059207][ T31] usb usb1-port1: attempt power cycle [ 221.080414][ T5870] veth0_vlan: entered promiscuous mode [ 221.103438][ T5870] veth1_macvtap: entered promiscuous mode [ 221.147154][ T36] audit: type=1400 audit(1789086613.203:1008): avc: denied { mounton } for pid=5870 comm="syz-executor" path="/root/syzkaller.L7tZK4/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 221.189793][ T36] audit: type=1400 audit(1789086613.233:1009): avc: denied { mounton } for pid=5870 comm="syz-executor" path="/root/syzkaller.L7tZK4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 221.218550][ T521] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 221.219461][ T36] audit: type=1400 audit(1789086613.233:1010): avc: denied { mounton } for pid=5870 comm="syz-executor" path="/root/syzkaller.L7tZK4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=156918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 221.249658][ T521] usb 6-1: device descriptor read/8, error -71 [ 221.288170][ T36] audit: type=1400 audit(1789086613.243:1011): avc: denied { mounton } for pid=5870 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 221.400019][ T521] usb 6-1: device descriptor read/8, error -71 [ 221.408972][ T31] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 221.440390][ T31] usb 1-1: device descriptor read/8, error -71 [ 221.570746][ T31] usb 1-1: device descriptor read/8, error -71 [ 221.648549][ T521] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 221.679937][ T521] usb 6-1: device descriptor read/8, error -71 [ 221.808513][ T31] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 221.827174][ T521] usb 6-1: device descriptor read/8, error -71 [ 221.853841][ T31] usb 1-1: device descriptor read/8, error -71 [ 221.938752][ T521] usb usb6-port1: unable to enumerate USB device [ 221.942985][ T36] audit: type=1400 audit(1789086614.003:1012): avc: denied { create } for pid=5890 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.009685][ T31] usb 1-1: device descriptor read/8, error -71 [ 222.119395][ T31] usb usb1-port1: unable to enumerate USB device [ 222.678994][ T5920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1744'. [ 222.728256][ T36] audit: type=1400 audit(1789086614.783:1013): avc: denied { mounton } for pid=5923 comm="syz.0.1745" path="/300/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 222.940072][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 223.166980][ T36] audit: type=1400 audit(1789086615.223:1014): avc: denied { getopt } for pid=5933 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.590847][ T5939] tipc: Started in network mode [ 223.607979][ T5939] tipc: Node identity 4, cluster identity 4711 [ 223.631889][ T5939] tipc: Node number set to 4 [ 223.982646][ T5937] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.008491][ T521] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 224.189916][ T521] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.220396][ T521] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 224.238454][ T521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.246696][ T521] usb 1-1: Product: syz [ 224.258489][ T521] usb 1-1: Manufacturer: syz [ 224.263258][ T521] usb 1-1: SerialNumber: syz [ 224.289769][ T521] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 224.295725][ T521] cdc_wdm 1-1:1.0: Unknown control protocol [ 224.368476][ T63] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.421681][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.436471][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.454775][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.469282][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.476888][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 224.498483][ T36] audit: type=1400 audit(1789086616.553:1015): avc: denied { read write } for pid=5942 comm="syz.0.1751" name="cdc-wdm0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.535001][ T63] usb 2-1: device descriptor read/64, error -71 [ 224.563695][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 224.564523][ T521] usb 1-1: USB disconnect, device number 69 [ 224.570365][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 224.570394][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 224.574396][ T36] audit: type=1400 audit(1789086616.553:1016): avc: denied { open } for pid=5942 comm="syz.0.1751" path="/dev/cdc-wdm0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.662450][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 224.688457][ T5956] netlink: 'syz.2.1756': attribute type 2 has an invalid length. [ 224.697265][ T5956] overlayfs: failed to clone upperpath [ 224.775456][ T5964] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1759'. [ 224.784854][ T63] usb 2-1: device descriptor read/64, error -71 [ 225.028625][ T321] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 225.038788][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.168542][ T63] usb 2-1: device descriptor read/64, error -71 [ 225.190159][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.201496][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.211907][ T321] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 225.223770][ T321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.233831][ T321] usb 6-1: config 0 descriptor?? [ 225.408511][ T63] usb 2-1: device descriptor read/64, error -71 [ 225.519259][ T63] usb usb2-port1: attempt power cycle [ 225.649096][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.658069][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.679049][ T321] usbhid 6-1:0.0: can't add hid device: -71 [ 225.685040][ T321] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.698917][ T321] usb 6-1: USB disconnect, device number 31 [ 225.859562][ T63] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 225.889956][ T63] usb 2-1: device descriptor read/8, error -71 [ 225.971556][ T5989] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.020056][ T63] usb 2-1: device descriptor read/8, error -71 [ 226.217199][ T5999] futex_wake_op: syz.5.1771 tries to shift op by 144; fix this program [ 226.258612][ T63] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.309732][ T63] usb 2-1: device descriptor read/8, error -71 [ 226.449907][ T63] usb 2-1: device descriptor read/8, error -71 [ 226.569324][ T63] usb usb2-port1: unable to enumerate USB device [ 226.698591][ T10] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 226.848472][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 226.979213][ T10] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 226.992723][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 227.002064][ T6006] bridge_slave_1: left allmulticast mode [ 227.007728][ T6006] bridge_slave_1: left promiscuous mode [ 227.013746][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.022116][ T6006] bridge_slave_0: left allmulticast mode [ 227.028160][ T6006] bridge_slave_0: left promiscuous mode [ 227.034148][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.149054][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 227.177127][ T10] usb usb6-port1: attempt power cycle [ 227.230458][ T6014] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 227.244769][ T6014] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 227.306855][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 227.377309][ T36] audit: type=1400 audit(1789086619.433:1017): avc: denied { append } for pid=6026 comm="syz.0.1782" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 227.528488][ T521] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.528501][ T10] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 227.549599][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 227.688642][ T10] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 227.689151][ T521] usb 2-1: Using ep0 maxpacket: 16 [ 227.710579][ T521] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 227.719166][ T521] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.729890][ T521] usb 2-1: config 0 has no interface number 0 [ 227.729971][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 227.736119][ T521] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 227.736156][ T521] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 227.736186][ T521] usb 2-1: config 0 interface 98 has no altsetting 0 [ 227.766562][ T10] usb usb6-port1: unable to enumerate USB device [ 227.780516][ T521] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 227.789782][ T521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.797974][ T521] usb 2-1: Product: syz [ 227.811727][ T521] usb 2-1: Manufacturer: syz [ 227.816437][ T521] usb 2-1: SerialNumber: syz [ 227.824941][ T521] usb 2-1: config 0 descriptor?? [ 227.834283][ T6012] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 227.842426][ T6012] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 228.065954][ T6012] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 228.073846][ T6012] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 228.297563][ T521] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 228.308129][ T521] asix 2-1:0.98: probe with driver asix failed with error -71 [ 228.329116][ T521] usb 2-1: USB disconnect, device number 17 [ 228.558578][ T321] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 228.710008][ T321] usb 1-1: config 0 has no interfaces? [ 228.717313][ T321] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 228.726697][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.734790][ T321] usb 1-1: Product: syz [ 228.739454][ T321] usb 1-1: Manufacturer: syz [ 228.744709][ T321] usb 1-1: SerialNumber: syz [ 228.750948][ T321] usb 1-1: config 0 descriptor?? [ 228.780749][ T36] audit: type=1326 audit(1789086620.843:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.2.1766" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792b79e159 code=0x7fc00000 [ 228.874033][ T6049] 9pnet_fd: Insufficient options for proto=fd [ 228.967423][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.987540][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.008905][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.017662][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.039768][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.058930][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.079712][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.099444][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.107919][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.128716][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.163115][ T10] usb 1-1: USB disconnect, device number 70 [ 229.446453][ T6057] overlayfs: failed to resolve './bus': -2 [ 230.346304][ T6080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6080 comm=syz.2.1796 [ 230.729001][ T36] audit: type=1400 audit(1789086622.793:1019): avc: denied { mounton } for pid=6089 comm="syz.5.1799" path="/proc/479/task" dev="proc" ino=157676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 230.836278][ T6094] netlink: 'syz.5.1801': attribute type 8 has an invalid length. [ 230.860938][ T36] audit: type=1400 audit(1789086622.923:1020): avc: denied { write } for pid=6100 comm="syz.0.1800" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.939168][ T6107] overlayfs: failed to clone upperpath [ 231.198508][ T321] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 231.338543][ T321] usb 6-1: device descriptor read/64, error -71 [ 231.578481][ T321] usb 6-1: device descriptor read/64, error -71 [ 231.635376][ T6133] netlink: 'syz.1.1808': attribute type 27 has an invalid length. [ 231.818528][ T321] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 231.888986][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.978502][ T321] usb 6-1: device descriptor read/64, error -71 [ 232.078477][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 232.084984][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.097384][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.107163][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.115251][ T9] usb 2-1: Product: syz [ 232.119587][ T9] usb 2-1: Manufacturer: syz [ 232.124482][ T9] usb 2-1: SerialNumber: syz [ 232.130233][ T9] usb 2-1: config 0 descriptor?? [ 232.136992][ T9] smsc75xx v1.0.0 [ 232.140761][ T9] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 232.150817][ T9] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 232.238513][ T321] usb 6-1: device descriptor read/64, error -71 [ 232.348859][ T321] usb usb6-port1: attempt power cycle [ 232.443815][ T6162] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 232.539768][ T36] audit: type=1400 audit(1789086624.603:1021): avc: denied { read } for pid=6163 comm="syz.0.1820" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 232.588468][ T36] audit: type=1400 audit(1789086624.603:1022): avc: denied { open } for pid=6163 comm="syz.0.1820" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 232.708530][ T321] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 232.749866][ T321] usb 6-1: device descriptor read/8, error -71 [ 232.858500][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 232.879762][ T321] usb 6-1: device descriptor read/8, error -71 [ 233.048450][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.058652][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.069059][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.078142][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.086644][ T9] usb 1-1: SerialNumber: syz [ 233.128484][ T321] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 233.159735][ T321] usb 6-1: device descriptor read/8, error -71 [ 233.289787][ T321] usb 6-1: device descriptor read/8, error -71 [ 233.304187][ T9] usb 1-1: 0:2 : does not exist [ 233.311353][ T36] audit: type=1400 audit(1789086625.363:1023): avc: denied { ioctl } for pid=6163 comm="syz.0.1820" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.339434][ T9] usb 1-1: unit 5 not found! [ 233.348922][ T9] usb 1-1: USB disconnect, device number 71 [ 233.360540][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.400672][ T321] usb usb6-port1: unable to enumerate USB device [ 233.877628][ T6178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.001237][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1827'. [ 234.011590][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1827'. [ 234.027846][ T6190] overlay: ./file0 is not a directory [ 234.034593][ T6187] overlay: ./file0 is not a directory [ 234.089049][ T36] audit: type=1400 audit(1789086626.153:1024): avc: denied { read } for pid=6193 comm="syz.5.1829" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 234.118485][ T6194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6194 comm=syz.5.1829 [ 234.163098][ T36] audit: type=1400 audit(1789086626.153:1025): avc: denied { open } for pid=6193 comm="syz.5.1829" path="/158/proc/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 234.198696][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 234.360267][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 234.385837][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 192 [ 234.398635][ T9] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.412912][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 234.423764][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.435949][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.444885][ T9] usb 1-1: Product: ఉ [ 234.449744][ T9] usb 1-1: Manufacturer: Ẽᆟ板⭛첤긡畅첐㤮鈎읳诳氆篈쳖矮岲轑ꀸ菧ꢕ哞옆膘䗫侔䦕⸉ꓖ⡱⏓쯔兣纄 [ 234.466421][ T906] usb 2-1: USB disconnect, device number 18 [ 234.493106][ T9] usb 1-1: SerialNumber: ࠊ [ 234.520530][ T6181] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 234.538551][ T6181] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 234.558172][ T6202] overlay: ./file0 is not a directory [ 234.564226][ T36] audit: type=1400 audit(1789086626.613:1026): avc: denied { mounton } for pid=6201 comm="syz.5.1830" path="/159/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 234.614409][ T36] audit: type=1400 audit(1789086626.653:1027): avc: denied { setopt } for pid=6201 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.003628][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 235.016133][ T9] usb 1-1: USB disconnect, device number 72 [ 235.406987][ T6217] fuse: Unknown parameter '00000000000000000000003' [ 235.478633][ T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 235.608504][ T9] usb 6-1: device descriptor read/64, error -71 [ 235.648484][ T521] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 235.800723][ T521] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.811198][ T521] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 235.820508][ T521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.828697][ T521] usb 2-1: Product: syz [ 235.833021][ T521] usb 2-1: Manufacturer: syz [ 235.837790][ T521] usb 2-1: SerialNumber: syz [ 235.858634][ T9] usb 6-1: device descriptor read/64, error -71 [ 236.050905][ T521] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.058503][ T521] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 236.073737][ T521] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 236.083656][ T521] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.095365][ T521] usb 2-1: USB disconnect, device number 19 [ 236.109307][ T9] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 236.114737][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.238533][ T9] usb 6-1: device descriptor read/64, error -71 [ 236.478508][ T9] usb 6-1: device descriptor read/64, error -71 [ 236.588745][ T9] usb usb6-port1: attempt power cycle [ 236.630696][ T6219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.648907][ T6223] overlay: ./file1 is not a directory [ 236.669525][ T6223] 9pnet_fd: Insufficient options for proto=fd [ 236.818505][ T6230] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 236.828811][ T36] audit: type=1400 audit(1789086628.893:1028): avc: denied { relabelto } for pid=6229 comm="syz.0.1838" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 236.855421][ T6234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.856905][ T36] audit: type=1400 audit(1789086628.893:1029): avc: denied { associate } for pid=6229 comm="syz.0.1838" name="fuse" dev="devtmpfs" ino=23 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 236.892321][ T36] audit: type=1400 audit(1789086628.893:1030): avc: denied { map } for pid=6229 comm="syz.0.1838" path="socket:[158375]" dev="sockfs" ino=158375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.948557][ T9] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 236.979857][ T9] usb 6-1: device descriptor read/8, error -71 [ 237.122817][ T9] usb 6-1: device descriptor read/8, error -71 [ 237.368527][ T9] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 237.411534][ T9] usb 6-1: device descriptor read/8, error -71 [ 237.549974][ T9] usb 6-1: device descriptor read/8, error -71 [ 237.658728][ T9] usb usb6-port1: unable to enumerate USB device [ 237.916438][ T6281] kvm: pic: non byte read [ 237.922461][ T6281] kvm: pic: non byte read [ 238.090609][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 238.090679][ T36] audit: type=1400 audit(1789086630.153:1033): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 238.307026][ T36] audit: type=1400 audit(1789086630.363:1034): avc: denied { create } for pid=6307 comm="syz.5.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.365490][ T36] audit: type=1400 audit(1789086630.393:1035): avc: denied { cmd } for pid=6312 comm="iou-wrk-6313" path="socket:[159580]" dev="sockfs" ino=159580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.395765][ T36] audit: type=1400 audit(1789086630.453:1036): avc: denied { connect } for pid=6317 comm="syz.5.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.008460][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 239.166824][ T36] audit: type=1400 audit(1789086631.223:1037): avc: denied { ioctl } for pid=6347 comm="syz.0.1870" path="socket:[159672]" dev="sockfs" ino=159672 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.198529][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 239.227376][ T9] usb 6-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.234268][ T6352] batadv_slave_1: entered promiscuous mode [ 239.254257][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 239.275207][ T6350] batadv_slave_1: left promiscuous mode [ 239.280677][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 239.301159][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.318312][ T9] usb 6-1: config 0 descriptor?? [ 239.530676][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 239.536831][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 239.546374][ T9] usb 6-1: USB disconnect, device number 44 [ 239.738565][ T521] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 239.890108][ T521] usb 1-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 239.901003][ T521] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.914693][ T521] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 239.924000][ T521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.933277][ T521] usb 1-1: config 0 descriptor?? [ 239.941162][ T521] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 240.427346][ T36] audit: type=1326 audit(1789086632.483:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.1879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40ad99e159 code=0x0 [ 241.618837][ T6410] : renamed from xfrm0 (while UP) [ 241.628193][ T36] audit: type=1400 audit(1789086633.683:1039): avc: denied { write } for pid=6409 comm="syz.1.1889" name="ftrace" dev="tracefs" ino=161067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 241.728888][ T6417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1891'. [ 241.908478][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 241.998489][ T63] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 242.058505][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 242.068221][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 242.078860][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.087427][ T9] usb 2-1: Product: syz [ 242.092483][ T9] usb 2-1: Manufacturer: syz [ 242.097356][ T9] usb 2-1: SerialNumber: syz [ 242.150174][ T63] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 242.164098][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.171670][ T63] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 242.181773][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.198668][ T63] usb 6-1: config 0 descriptor?? [ 242.543220][ T906] usb 1-1: USB disconnect, device number 73 [ 242.612053][ T63] kone 0003:1E7D:2CED.0012: report_id 3238645963 is invalid [ 242.624926][ T63] kone 0003:1E7D:2CED.0012: item 0 4 1 8 parsing failed [ 242.633052][ T63] kone 0003:1E7D:2CED.0012: parse failed [ 242.639067][ T63] kone 0003:1E7D:2CED.0012: probe with driver kone failed with error -22 [ 242.815578][ T906] usb 6-1: USB disconnect, device number 45 [ 243.128767][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 243.140762][ T9] usb 2-1: USB disconnect, device number 20 [ 243.198513][ T63] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 243.262387][ T6449] SELinux: Context system_u: is not valid (left unmapped). [ 243.270452][ T36] audit: type=1400 audit(1789086635.333:1040): avc: denied { relabelto } for pid=6448 comm="syz.2.1900" name="585" dev="tmpfs" ino=3284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 243.295651][ T36] audit: type=1400 audit(1789086635.333:1041): avc: denied { associate } for pid=6448 comm="syz.2.1900" name="585" dev="tmpfs" ino=3284 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 243.322509][ T36] audit: type=1400 audit(1789086635.353:1042): avc: denied { write } for pid=295 comm="syz-executor" name="585" dev="tmpfs" ino=3284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 243.348777][ T36] audit: type=1400 audit(1789086635.353:1043): avc: denied { remove_name } for pid=295 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 243.350348][ T63] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 243.374909][ T36] audit: type=1400 audit(1789086635.353:1044): avc: denied { rmdir } for pid=295 comm="syz-executor" name="585" dev="tmpfs" ino=3284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 243.383556][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.482966][ T63] usb 1-1: config 0 descriptor?? [ 243.489648][ T63] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 243.497696][ T63] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 243.638547][ T4007] erspan0: left allmulticast mode [ 243.643781][ T4007] erspan0: left promiscuous mode [ 243.649218][ T4007] bridge0: port 3(erspan0) entered disabled state [ 243.656588][ T4007] bridge_slave_1: left allmulticast mode [ 243.662655][ T4007] bridge_slave_1: left promiscuous mode [ 243.668593][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.680382][ T4007] bridge_slave_0: left allmulticast mode [ 243.686195][ T4007] bridge_slave_0: left promiscuous mode [ 243.692137][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.720597][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.720949][ T36] audit: type=1400 audit(1789086635.783:1045): avc: denied { lock } for pid=6442 comm="syz.0.1897" path="socket:[160467]" dev="sockfs" ino=160467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.729430][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.781866][ T63] usb 1-1: USB disconnect, device number 74 [ 243.793916][ T63] ftdi_sio 1-1:0.0: device disconnected [ 243.943451][ T4007] tipc: Disabling bearer [ 243.950805][ T4007] tipc: Left network mode [ 243.961793][ T4007] veth1_macvtap: left promiscuous mode [ 243.967659][ T4007] veth0_vlan: left promiscuous mode [ 244.111538][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.119189][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.126519][ T6469] bridge_slave_0: entered allmulticast mode [ 244.134205][ T6469] bridge_slave_0: entered promiscuous mode [ 244.141478][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.148760][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.156036][ T6469] bridge_slave_1: entered allmulticast mode [ 244.163187][ T6469] bridge_slave_1: entered promiscuous mode [ 244.232346][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.239513][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.246793][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.253926][ T6469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.288773][ T321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 244.307664][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.322108][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.361679][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.369018][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.378150][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.385393][ T3986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.437601][ T6469] veth0_vlan: entered promiscuous mode [ 244.452194][ T321] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 244.466636][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.482999][ T321] usb 2-1: Product: syz [ 244.495783][ T6469] veth1_macvtap: entered promiscuous mode [ 244.503205][ T321] usb 2-1: Manufacturer: syz [ 244.507934][ T321] usb 2-1: SerialNumber: syz [ 244.625619][ T6496] netlink: 'syz.2.1916': attribute type 16 has an invalid length. [ 244.637013][ T6496] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1916'. [ 244.753127][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.765772][ T6507] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1920'. [ 244.777477][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.801884][ T6505] process '/newroot/598/file0' started with executable stack [ 244.850566][ T321] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 244.888627][ T321] usb 2-1: USB disconnect, device number 21 [ 244.932761][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.936351][ T906] usb 3-1: USB disconnect, device number 17 [ 245.221093][ T36] audit: type=1400 audit(1789086637.283:1046): avc: denied { listen } for pid=6518 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.609294][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.616739][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.678651][ T6522] bridge_slave_0: entered allmulticast mode [ 245.711290][ T6522] bridge_slave_0: entered promiscuous mode [ 245.739670][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.768574][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.776063][ T6522] bridge_slave_1: entered allmulticast mode [ 245.798475][ T6522] bridge_slave_1: entered promiscuous mode [ 245.958790][ T2291] tipc: Resetting bearer [ 245.979860][ T2291] tipc: Disabling bearer [ 246.092791][ T6559] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1934'. [ 246.207597][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.215354][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.237829][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.248333][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.298629][ T906] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 246.322133][ T6522] veth0_vlan: entered promiscuous mode [ 246.346365][ T6522] veth1_macvtap: entered promiscuous mode [ 246.464883][ T906] usb 1-1: Using ep0 maxpacket: 32 [ 246.474457][ T906] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 246.483853][ T906] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 246.494097][ T906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 246.505878][ T906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.517680][ T906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.528284][ T906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.543115][ T906] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.552836][ T906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.563110][ T906] usb 1-1: config 0 descriptor?? [ 246.772817][ T906] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.786618][ T906] usb 1-1: USB disconnect, device number 75 [ 246.794228][ T906] usblp0: removed [ 246.948562][ T321] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 247.088539][ T906] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 247.118736][ T321] usb 2-1: Using ep0 maxpacket: 32 [ 247.126993][ T321] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 247.138019][ T321] usb 2-1: config 0 has no interface number 0 [ 247.146839][ T321] usb 2-1: config 0 interface 184 has no altsetting 0 [ 247.156992][ T321] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.166428][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.175347][ T321] usb 2-1: Product: syz [ 247.180319][ T321] usb 2-1: Manufacturer: syz [ 247.185668][ T321] usb 2-1: SerialNumber: syz [ 247.191303][ T321] usb 2-1: config 0 descriptor?? [ 247.197938][ T321] smsc75xx v1.0.0 [ 247.248501][ T906] usb 1-1: Using ep0 maxpacket: 32 [ 247.255340][ T906] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.264410][ T906] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.273914][ T906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.283645][ T906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.294267][ T906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.305017][ T906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.319587][ T906] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.328764][ T906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.338996][ T906] usb 1-1: config 0 descriptor?? [ 247.371160][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 247.382882][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1939'. [ 247.553430][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.559020][ T906] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.563432][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.575515][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.589980][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.600371][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.609026][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 247.622502][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.628566][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.631079][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 247.648508][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 247.657265][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.669883][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 247.680815][ T321] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 247.810662][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.819332][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 247.828777][ T9] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 247.837228][ T9] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 247.846157][ T9] usb 3-1: config 8 has no interface number 0 [ 247.852415][ T9] usb 3-1: config 8 has no interface number 1 [ 247.859114][ T9] usb 3-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 247.871223][ T9] usb 3-1: config 8 interface 43 has no altsetting 0 [ 247.877915][ T9] usb 3-1: config 8 interface 35 has no altsetting 0 [ 247.886492][ T9] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 247.895747][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.904040][ T9] usb 3-1: Product: syz [ 247.908226][ T9] usb 3-1: Manufacturer: syz [ 247.912902][ T9] usb 3-1: SerialNumber: syz [ 248.172736][ T9] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 248.183136][ T9] scsi host1: usb-storage 3-1:8.43 [ 248.192357][ T9] hub 3-1:8.35: Invalid hub with more than one config or interface [ 248.201644][ T9] hub 3-1:8.35: probe with driver hub failed with error -22 [ 248.209877][ T9] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 248.262581][ T9] usb 3-1: USB disconnect, device number 18 [ 249.062234][ T906] usb 1-1: USB disconnect, device number 76 [ 249.069438][ T321] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.089446][ T906] usblp0: removed [ 249.156269][ T319] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.239742][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.250497][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.259508][ T321] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.285414][ T321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.294575][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.303266][ T321] usb 3-1: Product: syz [ 249.312267][ T321] usb 3-1: Manufacturer: syz [ 249.323388][ T321] usb 3-1: SerialNumber: syz [ 249.348109][ T321] cdc_ncm 3-1:1.0: skipping garbage [ 249.354037][ T321] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 249.361239][ T321] cdc_ncm 3-1:1.0: bind() failure [ 249.557154][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.566304][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.663293][ T906] usb 3-1: USB disconnect, device number 19 [ 249.724346][ T9] usb 2-1: USB disconnect, device number 22 [ 250.000033][ T36] audit: type=1400 audit(1789086642.063:1047): avc: denied { map } for pid=6624 comm="syz.1.1951" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.351849][ T6634] kvm: kvm [6633]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb707 [ 250.760074][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'. [ 250.863598][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'. [ 251.038638][ T6658] input: syz0 as /devices/virtual/input/input16 [ 251.218454][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.219173][ T446] Bluetooth: hci0: command 0x1003 tx timeout [ 252.038550][ T321] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 252.198615][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 252.210495][ T321] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 252.224996][ T321] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.241569][ T321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.249032][ T321] usb 2-1: New USB device found, idVendor=00e7, idProduct=0000, bcdDevice= 0.00 [ 252.259312][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.260368][ T6687] FAULT_INJECTION: forcing a failure. [ 252.260368][ T6687] name fail_futex, interval 1, probability 0, space 0, times 0 [ 252.268574][ T321] usb 2-1: config 0 descriptor?? [ 252.287411][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.6.1972 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 252.287451][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.287467][ T6687] Call Trace: [ 252.287487][ T6687] [ 252.287499][ T6687] __dump_stack+0x21/0x30 [ 252.287537][ T6687] dump_stack_lvl+0x140/0x1c0 [ 252.287568][ T6687] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.287602][ T6687] dump_stack+0x19/0x20 [ 252.287632][ T6687] should_fail_ex+0x3c2/0x510 [ 252.287662][ T6687] should_fail+0xf/0x20 [ 252.287688][ T6687] get_futex_key+0x178/0x940 [ 252.287718][ T6687] ? __cfi_get_futex_key+0x10/0x10 [ 252.287747][ T6687] ? __cfi_trace_clock_local+0x10/0x10 [ 252.287772][ T6687] futex_wake+0x150/0x950 [ 252.287794][ T6687] ? __rb_reserve_next+0x7d4/0xdf0 [ 252.287826][ T6687] ? __cfi_futex_wake+0x10/0x10 [ 252.287851][ T6687] ? __kasan_check_read+0x15/0x20 [ 252.287876][ T6687] ? rb_commit+0x753/0x7b0 [ 252.287903][ T6687] do_futex+0x37d/0x510 [ 252.287934][ T6687] ? __cfi_do_futex+0x10/0x10 [ 252.287966][ T6687] __se_sys_futex+0x13c/0x320 [ 252.287998][ T6687] ? __x64_sys_futex+0x110/0x110 [ 252.288030][ T6687] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 252.288065][ T6687] __x64_sys_futex+0xe9/0x110 [ 252.288095][ T6687] x64_sys_call+0x227f/0x2ee0 [ 252.288118][ T6687] do_syscall_64+0x57/0xf0 [ 252.288141][ T6687] ? clear_bhb_loop+0x50/0xa0 [ 252.288171][ T6687] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.288198][ T6687] RIP: 0033:0x7fe8dab9e159 [ 252.288224][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.288245][ T6687] RSP: 002b:00007fe8dbabf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.288275][ T6687] RAX: ffffffffffffffda RBX: 00007fe8dae25fa8 RCX: 00007fe8dab9e159 [ 252.288293][ T6687] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe8dae25fac [ 252.288311][ T6687] RBP: 00007fe8dae25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 252.288329][ T6687] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 252.288347][ T6687] R13: 00007fe8dae26038 R14: 00007ffc13899e00 R15: 00007ffc13899ee8 [ 252.288367][ T6687] [ 252.535715][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.540779][ T36] audit: type=1400 audit(1789086644.593:1048): avc: denied { append } for pid=6693 comm="syz.6.1973" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.545472][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.589669][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.599341][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.628508][ T36] audit: type=1400 audit(1789086644.633:1049): avc: denied { ioctl } for pid=6693 comm="syz.6.1973" path="/dev/usbmon2" dev="devtmpfs" ino=97 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.693289][ T321] usb 2-1: string descriptor 0 read error: -71 [ 252.706498][ T321] usbhid 2-1:0.0: can't add hid device: -71 [ 252.718496][ T321] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.744119][ T321] usb 2-1: USB disconnect, device number 23 [ 253.172977][ T6711] syz.0.1979: attempt to access beyond end of device [ 253.172977][ T6711] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 253.186412][ T6711] FAT-fs (loop0): unable to read boot sector [ 253.424392][ T6723] cgroup: fork rejected by pids controller in /syz1 [ 253.493720][ T6759] netlink: 'syz.6.1985': attribute type 4 has an invalid length. [ 253.502021][ T6759] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1985'. [ 253.528549][ T63] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 253.603302][ T321] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 253.748575][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 253.755768][ T63] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 253.764369][ T63] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 253.773395][ T63] usb 1-1: config 3 has no interface number 0 [ 253.779697][ T63] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.793085][ T63] usb 1-1: config 3 interface 45 has no altsetting 0 [ 253.798468][ T321] usb 3-1: Using ep0 maxpacket: 8 [ 253.801744][ T63] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 253.806933][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.813954][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.825820][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.833262][ T63] usb 1-1: Product: syz [ 253.833288][ T63] usb 1-1: Manufacturer: syz [ 253.843898][ T321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.847473][ T63] usb 1-1: SerialNumber: syz [ 253.852472][ T321] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 253.880086][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.896037][ T321] usb 3-1: config 0 descriptor?? [ 254.099692][ T63] usb 1-1: USB disconnect, device number 77 [ 254.112192][ T4168] udevd[4168]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.138500][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 254.292778][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 254.303135][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.312080][ T9] usb 2-1: Product: syz [ 254.316477][ T9] usb 2-1: Manufacturer: syz [ 254.321209][ T9] usb 2-1: SerialNumber: syz [ 254.330102][ T9] pl2303 2-1:1.0: pl2303 converter detected [ 254.337810][ T9] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 254.532067][ T9] usb 2-1: USB disconnect, device number 24 [ 254.539710][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 254.548107][ T9] pl2303 2-1:1.0: device disconnected [ 254.661992][ T319] bridge_slave_1: left allmulticast mode [ 254.668128][ T319] bridge_slave_1: left promiscuous mode [ 254.674220][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.683067][ T319] bridge_slave_0: left allmulticast mode [ 254.689117][ T319] bridge_slave_0: left promiscuous mode [ 254.704180][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.812742][ T319] tipc: Disabling bearer [ 254.818497][ T319] tipc: Left network mode [ 254.826928][ T319] veth1_macvtap: left promiscuous mode [ 254.832754][ T319] : left promiscuous mode [ 254.936938][ T321] sony 0003:054C:042F.0013: can't set operational mode: step 3, ignoring [ 255.020785][ T321] input: HID 054c:042f as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:042F.0013/input/input17 [ 255.047606][ T321] sony 0003:054C:042F.0013: input,hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 255.127227][ T319] ------------[ cut here ]------------ [ 255.132883][ T319] WARNING: CPU: 0 PID: 319 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 255.143548][ T319] Modules linked in: [ 255.147612][ T319] CPU: 0 UID: 0 PID: 319 Comm: kworker/u8:4 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 255.159845][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.170273][ T319] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.175270][ T319] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 255.181487][ T319] Code: e8 c1 be d5 fc 4b 83 3c 3e 00 75 19 e8 45 e4 7c fc 49 81 ff f8 07 00 00 74 1b e8 37 e4 7c fc 49 83 c7 08 eb c9 e8 2c e4 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 255.192845][ T36] audit: type=1400 audit(1789086647.233:1050): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2928]" dev="pipefs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 255.201753][ T319] RSP: 0018:ffffc9000b7dfb90 EFLAGS: 00010293 [ 255.231976][ T319] RAX: ffffffff850a9334 RBX: ffff88811fc9d8c0 RCX: ffff88810bb80000 [ 255.240536][ T319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043d07e0 [ 255.247016][ T6720] tipc: Enabling of bearer rejected, failed to enable media [ 255.249083][ T319] RBP: ffffc9000b7dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 255.265771][ T319] R10: dffffc0000000000 R11: fffff520016fbf04 R12: dffffc0000000000 [ 255.274234][ T319] R13: dffffc0000000000 R14: ffff8881043d0000 R15: 00000000000007e0 [ 255.282548][ T319] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 255.288447][ T310] usb 3-1: USB disconnect, device number 20 [ 255.291880][ T319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.305717][ T319] CR2: 00007f8a6d925018 CR3: 00000001317f0000 CR4: 00000000003526b0 [ 255.313998][ T319] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 255.322070][ T319] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 255.330334][ T319] Call Trace: [ 255.333646][ T319] [ 255.336604][ T319] cleanup_net+0x6ba/0xc90 [ 255.341199][ T319] ? __cfi_cleanup_net+0x10/0x10 [ 255.346178][ T319] ? kick_pool+0xb9/0x540 [ 255.350782][ T319] process_scheduled_works+0x7f4/0x1060 [ 255.356749][ T319] worker_thread+0xc99/0x13f0 [ 255.361709][ T319] kthread+0x2c4/0x360 [ 255.365824][ T319] ? __cfi_worker_thread+0x10/0x10 [ 255.371156][ T319] ? __cfi_kthread+0x10/0x10 [ 255.375968][ T319] ret_from_fork+0x64/0xa0 [ 255.380599][ T319] ? __cfi_kthread+0x10/0x10 [ 255.385233][ T319] ret_from_fork_asm+0x1a/0x30 [ 255.390485][ T319] [ 255.393716][ T319] ---[ end trace 0000000000000000 ]--- [ 255.419137][ T319] ------------[ cut here ]------------ [ 255.424676][ T319] WARNING: CPU: 0 PID: 319 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 255.435206][ T319] Modules linked in: [ 255.439230][ T319] CPU: 0 UID: 0 PID: 319 Comm: kworker/u8:4 Tainted: G W syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 255.452897][ T319] Tainted: [W]=WARN [ 255.457261][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.468051][ T319] Workqueue: netns cleanup_net [ 255.472890][ T319] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 255.479152][ T319] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 e3 7c fc 49 81 ff f8 07 00 00 74 1b e8 e2 e3 7c fc 49 83 c7 08 eb c5 e8 d7 e3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 e3 7c fc 5b 41 5c 41 5e 41 [ 255.499861][ T319] RSP: 0018:ffffc9000b7dfb90 EFLAGS: 00010293 [ 255.506063][ T319] RAX: ffffffff850a9389 RBX: ffff8881043d0800 RCX: ffff88810bb80000 [ 255.514288][ T319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043d0810 [ 255.522543][ T319] RBP: ffffc9000b7dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 255.531033][ T319] R10: dffffc0000000000 R11: fffff520016fbf04 R12: dffffc0000000000 [ 255.539417][ T319] R13: dffffc0000000000 R14: ffff8881043d0000 R15: 0000000000000010 [ 255.547803][ T319] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 255.557061][ T319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.563856][ T319] CR2: 00007f8a6d925018 CR3: 000000012b06e000 CR4: 00000000003526b0 [ 255.572055][ T319] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 255.580446][ T319] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 255.588596][ T319] Call Trace: [ 255.592006][ T319] [ 255.595227][ T319] cleanup_net+0x6ba/0xc90 [ 255.600451][ T319] ? __cfi_cleanup_net+0x10/0x10 [ 255.605642][ T319] ? kick_pool+0xb9/0x540 [ 255.610209][ T319] process_scheduled_works+0x7f4/0x1060 [ 255.615949][ T319] worker_thread+0xc99/0x13f0 [ 255.621116][ T319] kthread+0x2c4/0x360 [ 255.625328][ T319] ? __cfi_worker_thread+0x10/0x10 [ 255.630847][ T319] ? __cfi_kthread+0x10/0x10 [ 255.635674][ T319] ret_from_fork+0x64/0xa0 [ 255.640754][ T319] ? __cfi_kthread+0x10/0x10 [ 255.645569][ T319] ret_from_fork_asm+0x1a/0x30 [ 255.650864][ T319] [ 255.654024][ T319] ---[ end trace 0000000000000000 ]--- [ 255.899419][ T319] ------------[ cut here ]------------ [ 255.905135][ T319] WARNING: CPU: 0 PID: 319 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 255.915088][ T319] Modules linked in: [ 255.919093][ T319] CPU: 0 UID: 0 PID: 319 Comm: kworker/u8:4 Tainted: G W syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 255.933724][ T319] Tainted: [W]=WARN [ 255.937741][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.948746][ T319] Workqueue: netns cleanup_net [ 255.953693][ T319] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 255.959339][ T319] Code: 3c 20 00 74 08 48 89 df e8 df 7c f0 fc 48 8b 3b e8 f7 6d db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 9c b7 00 cc e8 52 a2 97 fc <0f> 0b e9 b0 fd ff ff e8 46 a2 97 fc 0f 0b e9 18 fe ff ff e8 3a a2 [ 255.979875][ T319] RSP: 0018:ffffc9000b7dfb70 EFLAGS: 00010293 [ 255.986155][ T319] RAX: ffffffff84efd50e RBX: ffff88811fc9d8c0 RCX: ffff88810bb80000 [ 255.994859][ T319] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810bb80000 [ 256.004104][ T319] RBP: ffffc9000b7dfb98 R08: ffffffff87d43d07 R09: 1ffffffff0fa87a0 [ 256.012907][ T319] R10: dffffc0000000000 R11: fffffbfff0fa87a1 R12: 1ffffffff0fa84f4 [ 256.021740][ T319] R13: dffffc0000000000 R14: ffff88811fc9e4c0 R15: dffffc0000000000 [ 256.030300][ T319] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 256.039406][ T319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.046381][ T319] CR2: 00007fd3b7e36286 CR3: 000000014d59e000 CR4: 00000000003526b0 [ 256.054483][ T319] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 256.062535][ T319] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 256.070816][ T319] Call Trace: [ 256.074123][ T319] [ 256.077077][ T319] xfrm_net_exit+0x31/0x80 [ 256.081628][ T319] cleanup_net+0x6ba/0xc90 [ 256.086089][ T319] ? __cfi_cleanup_net+0x10/0x10 [ 256.091433][ T319] ? kick_pool+0xb9/0x540 [ 256.095991][ T319] process_scheduled_works+0x7f4/0x1060 [ 256.101909][ T319] worker_thread+0xc99/0x13f0 [ 256.106811][ T319] kthread+0x2c4/0x360 [ 256.111158][ T319] ? __cfi_worker_thread+0x10/0x10 [ 256.116428][ T319] ? __cfi_kthread+0x10/0x10 [ 256.121250][ T319] ret_from_fork+0x64/0xa0 [ 256.125968][ T319] ? __cfi_kthread+0x10/0x10 [ 256.131054][ T319] ret_from_fork_asm+0x1a/0x30 [ 256.135866][ T319] [ 256.139010][ T319] ---[ end trace 0000000000000000 ]--- [ 256.287309][ T319] bridge_slave_1: left allmulticast mode [ 256.304228][ T319] bridge_slave_1: left promiscuous mode [ 256.338566][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.355725][ T319] bridge_slave_0: left allmulticast mode [ 256.378430][ T319] bridge_slave_0: left promiscuous mode [ 256.384320][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.669635][ T319] tipc: Left network mode [ 256.681225][ T319] veth1_macvtap: left promiscuous mode [ 256.686866][ T319] veth0_vlan: left promiscuous mode [ 256.693302][ T319] veth1_macvtap: left promiscuous mode [ 257.132721][ T319] bridge_slave_1: left allmulticast mode [ 257.138576][ T319] bridge_slave_1: left promiscuous mode [ 257.144248][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.152985][ T319] bridge_slave_0: left allmulticast mode [ 257.158986][ T319] bridge_slave_0: left promiscuous mode [ 257.164718][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.173141][ T319] bridge_slave_1: left allmulticast mode [ 257.179081][ T319] bridge_slave_1: left promiscuous mode [ 257.184944][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.193807][ T319] bridge_slave_0: left allmulticast mode [ 257.200112][ T319] bridge_slave_0: left promiscuous mode [ 257.205951][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.351653][ T319] tipc: Left network mode [ 257.362547][ T319] veth1_macvtap: left promiscuous mode [ 257.368167][ T319] veth0_vlan: left promiscuous mode [ 257.374157][ T319] veth1_macvtap: left promiscuous mode [ 257.379762][ T319] veth0_vlan: left promiscuous mode [ 259.743808][ T36] audit: type=1400 audit(1789086651.803:1051): avc: denied { read } for pid=6836 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.334653][ T36] audit: type=1400 audit(1789086652.393:1052): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 260.363537][ T36] audit: type=1400 audit(1789086652.423:1053): avc: denied { read write } for pid=6858 comm="ip" path="/dev/console" dev="rootfs" ino=90 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 260.469044][ T36] audit: type=1400 audit(1789086652.533:1054): avc: denied { read write } for pid=6862 comm="iptables" path="/dev/console" dev="rootfs" ino=90 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 260.492972][ T36] audit: type=1400 audit(1789086652.553:1055): avc: denied { search } for pid=6862 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.515250][ T36] audit: type=1400 audit(1789086652.553:1056): avc: denied { write } for pid=6862 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.537334][ T36] audit: type=1400 audit(1789086652.553:1057): avc: denied { add_name } for pid=6862 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.559073][ T36] audit: type=1400 audit(1789086652.553:1058): avc: denied { create } for pid=6862 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.580478][ T36] audit: type=1400 audit(1789086652.553:1059): avc: denied { read open } for pid=6862 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=6420 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.604791][ T36] audit: type=1400 audit(1789086652.553:1060): avc: denied { lock } for pid=6862 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=6420 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.847878][ T36] audit: type=1400 audit(1789086652.903:1061): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.103768][ T6882] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro. [ 264.143562][ T6883] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 264.150927][ T6883] ACPI: PM: Preparing to enter system sleep state S5 [ 264.157859][ T6883] kvm: exiting hardware virtualization [ 264.163452][ T6883] reboot: Power down serialport: VM disconnected.