last executing test programs: 1m43.839896167s ago: executing program 3 (id=257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (fail_nth: 3) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.009317118s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m42.93358467s ago: executing program 3 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES64=r0], 0xd) 1m42.876080371s ago: executing program 3 (id=267): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x200c, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r7, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e79") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0xc68c2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00009f5000/0x3000)=nil, 0x3000}, 0x4}) 1m41.979894343s ago: executing program 3 (id=272): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/unix\x00') close(r4) r5 = socket(0xa, 0x3, 0x3a) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x5ca2, 0x8]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x100000}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) 1m41.755962149s ago: executing program 3 (id=278): mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000280)={0x7fffffff, 0x9, 0x8000, 0x7, 0x8f, 0x7, 0x1, 0xfffffffffffffffa, 0x6}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/uprobe_events\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780"], 0x3e0}}, 0x20010000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x2c, r5, 0xacf5e67dd0b583a1, 0x4, 0x0, {{0x5}, {@val={0x6}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x40048c1) faccessat2(r0, &(0x7f0000000040)='./trace\x00', 0x2, 0x300) write(r2, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) read$FUSE(r2, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002580)={0x50, 0x0, r6, {0x7, 0x2d, 0x1, 0x20000000, 0x1, 0x3, 0x23649ce6, 0x5, 0x0, 0x0, 0x2, 0x6}}, 0x50) 1m41.695314331s ago: executing program 32 (id=278): mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000280)={0x7fffffff, 0x9, 0x8000, 0x7, 0x8f, 0x7, 0x1, 0xfffffffffffffffa, 0x6}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/uprobe_events\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780"], 0x3e0}}, 0x20010000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x2c, r5, 0xacf5e67dd0b583a1, 0x4, 0x0, {{0x5}, {@val={0x6}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x40048c1) faccessat2(r0, &(0x7f0000000040)='./trace\x00', 0x2, 0x300) write(r2, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) read$FUSE(r2, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002580)={0x50, 0x0, r6, {0x7, 0x2d, 0x1, 0x20000000, 0x1, 0x3, 0x23649ce6, 0x5, 0x0, 0x0, 0x2, 0x6}}, 0x50) 1m24.487003337s ago: executing program 4 (id=494): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x14, 0x0, &(0x7f0000000e80)) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 1m24.420098409s ago: executing program 4 (id=495): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) (async) close(0x3) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x44a08, 0x3, 0x26d}}], 0x1, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1m24.419909369s ago: executing program 4 (id=496): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x10, 0x6, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x40010) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') 1m24.417075429s ago: executing program 4 (id=497): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000a80)=""/256, 0x100}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f0000000380)=""/7, 0x7}], 0x7) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1m24.38837026s ago: executing program 4 (id=498): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000065b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000267000/0x3000)=nil) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x180000) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.36179349s ago: executing program 4 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) mount$9p_rdma(&(0x7f0000000a40), &(0x7f0000000a80)='./bus\x00', &(0x7f0000000ac0), 0x1, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7fffffff}}, {@common=@cache_fscache}, {@common=@dfltgid}, {@sq={'sq', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r2}}, {@subj_user={'subj_user', 0x3d, '{^'}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r3, 0x0, 0x863, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000c80)={0x1, 0x5}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) open$dir(&(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x400, 0x120) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x1, 0x7d, {0x7d, 0x23, "7892a974ad93cf798d29b11ebd89652c7c91386c03f270504db641608c754a726b7094977a5f34cb3f1e06890cb1bd186bf56e3d8aa916550e5303408a083fedbf9758a8666c24152fb3fc6f27b3b47f7bf7a4aff304a6324f63198767654620b64c5fc72d116260fe737e64c54339ef6a68e740fd6f4b39c7950f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000380)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x7, 0x8001}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x6, 0x4, "89fbd375", "c8513061"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x58, 0x4, 0xfa, 0x4, 0x9, 0x10, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0x33, 0xda, "821ee1554acaf4909cf62e7bd7387173d36b037071b092332f7aa9e751035e1af4e921fdcf9d76056dabcc87ea710c8d93743c2e483c041e3dfe294c00bd4809c40b8774cccae35a0037a294c6f868499496c6b1e6269c2d6ff15551488afecb363828487f364329726a9d53103ec192c9bd96a745caafd697888c71dc54f0c5398382313feb717b32388ea30c99b38d8c3a13a4be8276fe984858b2a34a0175864163442a35710c81dd6a218b6a915ce119b249ca99ef9c955b80fbf33c24fc27bb310bb389d85be278e03899ee0262c459d3b55a55cc017319"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x40}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f60b"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xe689}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "7ef0"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xa}}) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"f54490bb3e708f2cd4047e1af92335e7", r7, 0x0, {0x2c}, {0x4, 0x80000001}, 0x7ff, [0x8, 0x7, 0x4, 0xac, 0x7, 0x8000100000001, 0x3, 0x7fc, 0x1, 0xffffffffffff5c2c, 0x1, 0x1, 0xd8f8, 0x1, 0xffffffffffff484c, 0x8]}) ptrace$poke(0x1, r6, 0x0, 0x180000000000103) unlinkat(r0, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x0) mlockall(0x5) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 1m9.243418274s ago: executing program 33 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) mount$9p_rdma(&(0x7f0000000a40), &(0x7f0000000a80)='./bus\x00', &(0x7f0000000ac0), 0x1, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7fffffff}}, {@common=@cache_fscache}, {@common=@dfltgid}, {@sq={'sq', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r2}}, {@subj_user={'subj_user', 0x3d, '{^'}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r3, 0x0, 0x863, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000c80)={0x1, 0x5}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) open$dir(&(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x400, 0x120) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x1, 0x7d, {0x7d, 0x23, "7892a974ad93cf798d29b11ebd89652c7c91386c03f270504db641608c754a726b7094977a5f34cb3f1e06890cb1bd186bf56e3d8aa916550e5303408a083fedbf9758a8666c24152fb3fc6f27b3b47f7bf7a4aff304a6324f63198767654620b64c5fc72d116260fe737e64c54339ef6a68e740fd6f4b39c7950f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000380)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x7, 0x8001}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x6, 0x4, "89fbd375", "c8513061"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x58, 0x4, 0xfa, 0x4, 0x9, 0x10, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0x33, 0xda, "821ee1554acaf4909cf62e7bd7387173d36b037071b092332f7aa9e751035e1af4e921fdcf9d76056dabcc87ea710c8d93743c2e483c041e3dfe294c00bd4809c40b8774cccae35a0037a294c6f868499496c6b1e6269c2d6ff15551488afecb363828487f364329726a9d53103ec192c9bd96a745caafd697888c71dc54f0c5398382313feb717b32388ea30c99b38d8c3a13a4be8276fe984858b2a34a0175864163442a35710c81dd6a218b6a915ce119b249ca99ef9c955b80fbf33c24fc27bb310bb389d85be278e03899ee0262c459d3b55a55cc017319"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x40}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f60b"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xe689}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "7ef0"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xa}}) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"f54490bb3e708f2cd4047e1af92335e7", r7, 0x0, {0x2c}, {0x4, 0x80000001}, 0x7ff, [0x8, 0x7, 0x4, 0xac, 0x7, 0x8000100000001, 0x3, 0x7fc, 0x1, 0xffffffffffff5c2c, 0x1, 0x1, 0xd8f8, 0x1, 0xffffffffffff484c, 0x8]}) ptrace$poke(0x1, r6, 0x0, 0x180000000000103) unlinkat(r0, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x0) mlockall(0x5) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 5.048237552s ago: executing program 0 (id=1243): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100acef000108000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x323202, 0x3, 0x5}, 0x18) syz_usb_connect$uac1(0x1, 0x79, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0) 4.436274308s ago: executing program 5 (id=1252): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffeffffe) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@wrmsr={0x65, 0x20, {0x95b, 0x8}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}], 0x50}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000080)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x9, 0x10, 0x5, 0x80, 0x7, 0x1, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff, 0x0, '\x00', 0x2}) 4.108431236s ago: executing program 5 (id=1255): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="012e190000001923fc747120e3292e62"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2}, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.426971929s ago: executing program 1 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r5, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="0962d3ffc6ba5f9a28c59ff7b5c7e2817773a5542055b61cf2b90e12d9674068a32400ec572dffa6bf6ea23ab5a77139d297a8ac20be1c814f2e8aab6471e0fc", 0x40, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r8) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, r8, &(0x7f0000000440)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r9, &(0x7f0000000900)='1', 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0010}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x48, 0x29, 0x20, 0x5, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffff}, {0x2, 0x7}, {0xe, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_atm={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20800}, 0x4010) mkdirat(r9, &(0x7f0000000000)='./tracing\x00', 0x1bf) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x80) write$FUSE_NOTIFY_INVAL_INODE(r10, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0x81, 0xe2a}}, 0xfce9) r11 = dup(r1) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f0000000000)=0x9, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c990102030109022400010000000009040000025c291d0009050900000000095ad3cad15e128001044b2566000009051f", @ANYBLOB="69228c20fcd36cfaae0d00db4c2d3b5f1a0b5434385042"], 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x15}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 2.422684229s ago: executing program 2 (id=1265): r0 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x408f}) r2 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) 2.3774914s ago: executing program 2 (id=1266): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='dummy_udc.0\n', 0xc) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/227) r2 = gettid() mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) tkill(r2, 0x11) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 2.204931245s ago: executing program 5 (id=1267): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffeffffe) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@wrmsr={0x65, 0x20, {0x95b, 0x8}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}], 0x50}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"60ddfe05cf5ab44163f210bc961ad8d06825126d28a0dc6c6f8b4966456546e376981a00febc7c6e84f40ecc8426c26140af6064e773de180c55e2415a39c76082d6e0365d40970183aa59a45c23058e1a3bab96548e07eccc538d9cd92e94cf08e063d898eee5d6b9cb67827f2a690f89db08250cc8fbdae590d7196381607df366bd7343763dacf64432449df9ce150050aacd5cb1ddb1d50758eb44e171bc5a927c1c8f6e2e869cb8f25bd622182b2f531caf0c4b3bdcf8c6c6e4896ac9c83a7622f9606d319e7e8d8e3dea8b54a7872f11fab1190fa3b9aa1f68213b9cade6731b46657a288e4dafc236cb510841af38c3de8cee93483ead0829c2baee5a7d08b84028a53394d4c66b7110a20b06b4d039be18da617ade0091224a31c5791611f66d36e75d722d9fdfe30d2438cb5933f8c1d833c85e3cf4f12d60ec7425ee40611eb915c342fef4b532685ea878099950ef51cdeb555fb371716c34482517ee5877970c0e675a07d16987e27c0ec50b6f7ecd9e4fdaf09ea8c3e558675e92758104ebd05e8b3a01e037e32865668bedb183ef4c90f0d7ff7b24645520cccacd166a44f145426cf7d496b9ea19c2aec33650ceaee005ac2fd742820e21f62ba28fe96ed4111a0954740e12ddf113fbad49266ffc86cb45cbfba35b4298e61cff8cd209ed4efaecbae24c0ae5ebcd6edbdd5b96ed6817a37c9d6848e6d65b59013ae11fffda70e4197364b5ab7948ade0301a48997901c7b912e73d23e4ccaa33bb6528f967af7bfd4bf728d0a43cdf1db7797da7fdc479c9c07d76a0528e239c2b0d4877708f00baeaa2ff06cd1a0efd30cdfd871cd9db248ef7ef1a960955089e1f49060e4e477070078c4405b04b295b801773787ef3a36d16cfcec5f3a6e00c6e3a490dd4cfff6b2ce9a8baa70df2da6878c9e86ae01c423b71ab88e83c6c230ec4874d149b31a4d74769e43b0875636bf94bde1196f994adc44eb921a3119cce3fb48499d013b2566ceb1eabd234c79cb169aff7aae16ed890725be47ab8208c9daca87c0f7710999d2a579936c7cde984e69f230244a6272e7ca14660eaf76cc9c47405d096d7738b601206ae76b1472c5bdcd236aafefdce7f73b4bfcfda90887a38f88e55f6fd7392ca6cfbbb2d6d7f389d205a9a656c32c47e8bb0fa641df4a5354a733b008bcf7ee101c7e67ab8fcdbc0ae3c09e4ad5dee614a23c73d5873301cf0a046959f9afb214ad98fc6b6f9ab80ed4ed893ba3951be1cc14197926775e5a51dd3877b3a079a1f269fa1e4a203a849c8c12ccb195dcea9e86f10937e3c0ce65f954eab99192392818d5b75dcafdcadc70da2100c908ffb2a60edfa7807b3391968631b8f415d7f2d1390696d8e8e743879d697afd34ab0205339b36c10f4e9f88b195100f6d9e6d22b3c10d82d9d7f7c8b9b74eebdf622"}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x9, 0x10, 0x5, 0x80, 0x7, 0x1, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff, 0x0, '\x00', 0x2}) 1.99584282s ago: executing program 0 (id=1268): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8009, 0x5, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x1, 0xffffffffffffffff}) capset(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) 1.99400279s ago: executing program 5 (id=1269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x5) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x4000000, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x5, 0x7, 0x6, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d4, 0x8001, 0x8a, 0x79, 0x2, 0xaa, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006e, 0x91, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x5, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x3, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x2, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x63f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1.776045095s ago: executing program 1 (id=1270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) sendmmsg$inet(r2, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014000000000000000000000002000000bb00000000000000400000000000000000000000070000008624"], 0x70}}], 0x1, 0x24008084) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x17b}]}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) fstat(r0, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000280)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x1192410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x40000000000000, 0x68, 0x1fffffffffffd, 0x3fc, 0xc, {0xffffffffffffffff, 0x9, 0x8000000008, 0x1, 0x1, 0x4, 0xcac0, 0x1000, 0x5, 0x8000, 0xfffffffd, r9, r10, 0x3, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100, &(0x7f00000004c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r11}}]}) getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), 0x6000) 1.713067506s ago: executing program 1 (id=1271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000580)={&(0x7f0000000100)=[{0xfffffffffffffff8, 0x2}, {0x8, 0x4, 0x1}, {0xa, 0x3, 0x3}], 0x3, 0x10, 0xffff, 0x6}) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1001ff) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000140)=""/123, 0x7b}], 0x9}, 0x61}], 0x1, 0x40000040, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/160) timer_create(0x3, 0x0, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x24000080}}], 0x2, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) fcntl$setlease(r5, 0x400, 0x2) 1.493997662s ago: executing program 2 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) capset(&(0x7f0000000000)={0x20071026}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x15c, 0x1b, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @uid=r4}]}, @nested={0x13c, 0x6, 0x0, 0x1, [@nested={0x138, 0xce, 0x0, 0x1, [@nested={0x134, 0x13e, 0x0, 0x1, [@nested={0x130, 0xa0, 0x0, 0x1, [@nested={0x12c, 0x61, 0x0, 0x1, [@nested={0x128, 0x9d, 0x0, 0x1, [@nested={0x121, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @typed={0x8, 0x10c, 0x0, 0x0, @u32}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0xfd, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @fd=r3}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f", @nested={0x4, 0xb8}]}]}]}]}]}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, 0x0) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x3) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 800.25941ms ago: executing program 2 (id=1273): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000a80)=""/256, 0x100}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000580)=""/49, 0x31}, {0x0}, {&(0x7f00000002c0)=""/164, 0xa4}], 0x7) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 761.332891ms ago: executing program 2 (id=1274): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r0, 0x180000000) syz_usb_connect(0x3, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501"], 0x0) syz_usb_connect$uac1(0x4, 0xdb, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xe6, 0xa0, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x40}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x4, 0x3, [0xa, 0x7, 0x5], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x3, 0x5, 0x2}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x4, 0xb, "ffb775013779"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x4, 0x5, 0x7, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x5, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x9, 0xfff4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x81, "", "38b2"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x3, 0x9, "410546", "63b445"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x8, "251b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xfd, 0xff, 0x6, {0x7, 0x25, 0x1, 0x4, 0x82, 0xfffc}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xff, 0x1, 0x80, 0xff, 0x4}, 0xff, &(0x7f0000000200)={0x5, 0xf, 0xff, 0x6, [@generic={0xbe, 0x10, 0x2, "f7b54c745ada3ade2a51ba42b1362a55c72bcc4e6a346ec2368c58d0df5c106e454b6a9139da49d7b0e2262ed45463520852d6d22ae2ac688d79a428a82728d8da7e18754fd5518149e68446b5f8a0e764fb953ec47131fb8f2c4b97d7c5155ab505fa5593cba9a394af8bc684d153a81e85e166c29c786de3d2eb3ccf97cd93426881ff6abbecea6eb4bf9902e468907e934dcd4d8b7aeeb6c75c339102b22bdfaf3fd628fa266ec8e40bc5e49c833700a0d6e677616e99e3fb97"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x6, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1085387a0ee474550b4365d2a4b24497"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf2, 0xd0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x6, 0x0, 0xd3, [0x30]}]}}) 690.050403ms ago: executing program 5 (id=1275): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0xe0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 600.141445ms ago: executing program 5 (id=1276): r0 = socket(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x6, 0x80000}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0x4, 0x8001ff, 0x2, 0x3, 0x7, "ea710000000000f9000000024200000200", 0x303, 0xf0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xe) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050001280"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000000000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000400000)={0x0, 0x0}) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000400100)={{0x4000, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x0, 0x1}, {0x0, 0xffffffff, 0xe, 0x3, 0x1, 0x0, 0x7, 0x1, 0x0, 0x1}, {0xeeee0000, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {0x25000, 0xffffffff, 0xc, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfd}, {0x41000, 0x0, 0x10, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, 0xb4}, {0x0, 0xffffffff, 0x10, 0x6, 0x1, 0x0, 0x1, 0xff, 0x0, 0x1, 0x0, 0x5}, {0x0, 0xffffffff, 0x18, 0xb, 0x1, 0x9, 0x10, 0x0, 0x0, 0x1}, {0x100000, 0x2000, 0x8, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x0, 0xb}, 0x80000001, 0x0, 0x1000, 0x0, 0x100000c, 0x8400, 0xfee00000, 0x200000000000000, [0x2002]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0751ff0000000000", @ANYRES16=r3, @ANYRESOCT=r3], 0xffdd) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r11 = dup(r10) ioctl$BTRFS_IOC_SCRUB(r11, 0x40603d07, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 398.80374ms ago: executing program 0 (id=1277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x50) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x81]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x6, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x20040800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = epoll_create1(0x80000) r5 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x20000004}) epoll_wait(r4, &(0x7f0000000240)=[{}], 0x1, 0xfffffffc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 330.827012ms ago: executing program 1 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x9, &(0x7f0000000040)={[{}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 208.266775ms ago: executing program 0 (id=1279): r0 = socket(0x8000000010, 0x3, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 200.265175ms ago: executing program 2 (id=1280): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='dummy_udc.0\n', 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) tkill(r2, 0x11) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 131.942077ms ago: executing program 0 (id=1281): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x278) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 68.132449ms ago: executing program 1 (id=1282): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000a80)=""/256, 0x100}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000000)=""/114, 0x72}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000002c0)=""/164, 0xa4}], 0x6) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 30.091689ms ago: executing program 0 (id=1283): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x23, 0x5, {0x5, 0x2, "c07dc6"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x383f}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xf, 0xde, "6d411b630ce4c80492a7dbd414e407ff938f440a809784842b40695472aa1dc1333e0734ba51b3ec76055c4af1aeeb2cafd6e0ef7fda1071c5acda1f5195864452ea7f2eac9f87c25e55a69c1b1c1ed6733596239cc9c5bc3431948dd56d32329bf35de6e4fca18bd8380b4e88b146dba97e82fb169637d54533ef7a07e7a3e80fd44bc55401cb0bb45b6d5cc30e725a968f61bc1b59ae065eef79709d771470314ac20d42fd7525789817fd2f806016e09dffee1b14136f4b2a9a85eab690eb682262e267774062705f26346338626656a4a54a77eabcba1c00e5ffe96d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000380)={0x20, 0x81, 0x3, "878d97"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "e50b"}, &(0x7f0000000400)={0x20, 0x83, 0x2, '\a?'}, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/313], &(0x7f0000000480)={0x20, 0x85, 0x3, "f29861"}}) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) 0s ago: executing program 1 (id=1284): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f0000000380)='%(l\xf9^/*w\xc1\x12\xa8\xe2s\xbd\x94\x9b\xef\xfa\xc4\x19\xc0\x18q\xdc\xf8 \x11\xeb\xdb\xfd\xf2\x82\x9a\xca\x8c\x0e\xf7\xb5f\xe6b\xcek\xc6\xb6\x0f\xd3\xa8\xabK\x9d\xdd\xdc\xa3\x9bz\x8c.\x7f\xc9\xe8\xf8\t0\x04\x95\xf7\xadS\x150-\xe16\xfdL\xd7-\xbb02\x8f{\xc5', 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x0, 0x2000000}, @clear_death], 0xfcff, 0x200000000000000, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./tracing/events/enable\x00', 0x40000) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x80800) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) kernel console output (not intermixed with test programs): 00 audit(1786105214.094:879): avc: denied { search } for pid=1978 comm="syz.0.656" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.070015][ T36] audit: type=1400 audit(1786105214.134:880): avc: denied { getopt } for pid=1980 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.125001][ T36] audit: type=1400 audit(1786105214.194:881): avc: denied { write } for pid=1984 comm="syz.0.659" name="UDC" dev="configfs" ino=15474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 88.148971][ T1985] Need at least one configuration in g1. [ 88.154734][ T1985] udc dummy_udc.0: failed to start g1: -22 [ 88.160887][ T1985] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 88.170902][ T36] audit: type=1400 audit(1786105214.224:882): avc: denied { open } for pid=1984 comm="syz.0.659" path="/170/config/usb_gadget/g1/UDC" dev="configfs" ino=15474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 88.196281][ T1985] UDC core: g1: couldn't find an available UDC or it's busy [ 88.357221][ T36] audit: type=1326 audit(1786105214.424:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.0.659" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0928b9e0d9 code=0x7fc00000 [ 88.420138][ T1989] netlink: 'syz.2.660': attribute type 19 has an invalid length. [ 88.429197][ T1989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 88.440049][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 88.960625][ T36] audit: type=1326 audit(1786105215.024:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.0.659" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0928b3f459 code=0x7fc00000 [ 89.028031][ T1996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1996 comm=syz.0.664 [ 89.077616][ T36] audit: type=1400 audit(1786105215.144:885): avc: denied { read write } for pid=1998 comm="syz.0.665" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.125788][ T36] audit: type=1400 audit(1786105215.144:886): avc: denied { open } for pid=1998 comm="syz.0.665" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.180144][ T2005] FAULT_INJECTION: forcing a failure. [ 89.180144][ T2005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.193718][ T2005] CPU: 0 UID: 0 PID: 2005 Comm: syz.0.666 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 89.193751][ T2005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.193766][ T2005] Call Trace: [ 89.193773][ T2005] [ 89.193781][ T2005] __dump_stack+0x21/0x30 [ 89.193816][ T2005] dump_stack_lvl+0x140/0x1c0 [ 89.193846][ T2005] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.193888][ T2005] ? __sys_recvmsg_sock+0x60/0x60 [ 89.193913][ T2005] dump_stack+0x19/0x20 [ 89.193940][ T2005] should_fail_ex+0x3c2/0x510 [ 89.193965][ T2005] should_fail+0xf/0x20 [ 89.193987][ T2005] should_fail_usercopy+0x1e/0x30 [ 89.194014][ T2005] _copy_from_user+0x20/0xa0 [ 89.194043][ T2005] ___sys_recvmsg+0x174/0x590 [ 89.194067][ T2005] ? __sys_recvmsg+0x2a0/0x2a0 [ 89.194090][ T2005] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 89.194133][ T2005] ? selinux_file_permission+0x318/0xb60 [ 89.194160][ T2005] do_recvmmsg+0x36d/0x7f0 [ 89.194186][ T2005] ? __sys_recvmmsg+0x2a0/0x2a0 [ 89.194210][ T2005] ? __cfi_vfs_write+0x10/0x10 [ 89.194237][ T2005] ? fput+0x1a4/0x230 [ 89.194267][ T2005] __x64_sys_recvmmsg+0x199/0x250 [ 89.194292][ T2005] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 89.194317][ T2005] ? __kasan_check_read+0x15/0x20 [ 89.194341][ T2005] x64_sys_call+0x292c/0x2ee0 [ 89.194362][ T2005] do_syscall_64+0x57/0xf0 [ 89.194392][ T2005] ? clear_bhb_loop+0x50/0xa0 [ 89.194423][ T2005] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.194452][ T2005] RIP: 0033:0x7f0928b9e0d9 [ 89.194472][ T2005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.194491][ T2005] RSP: 002b:00007f0929a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 89.194516][ T2005] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 89.194533][ T2005] RDX: 0000000000000003 RSI: 0000200000006480 RDI: 0000000000000003 [ 89.194548][ T2005] RBP: 00007f0929a97090 R08: 0000000000000000 R09: 0000000000000000 [ 89.194563][ T2005] R10: 0000000040000040 R11: 0000000000000246 R12: 0000000000000002 [ 89.194578][ T2005] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007ffe91dfc928 [ 89.194598][ T2005] [ 89.449885][ T2004] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.462819][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.469934][ T2004] bridge_slave_0: entered allmulticast mode [ 89.476750][ T2004] bridge_slave_0: entered promiscuous mode [ 89.483475][ T2004] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.495541][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.502742][ T2004] bridge_slave_1: entered allmulticast mode [ 89.509149][ T2004] bridge_slave_1: entered promiscuous mode [ 89.567162][ T2004] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.574338][ T2004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.581661][ T2004] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.588712][ T2004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.599404][ T710] bridge_slave_1: left allmulticast mode [ 89.603443][ T67] usb 2-1: USB disconnect, device number 28 [ 89.605415][ T710] bridge_slave_1: left promiscuous mode [ 89.626334][ T710] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.634840][ T710] bridge_slave_0: left allmulticast mode [ 89.640552][ T710] bridge_slave_0: left promiscuous mode [ 89.652388][ T710] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.723694][ T710] veth1_macvtap: left promiscuous mode [ 89.729249][ T710] veth0_vlan: left promiscuous mode [ 89.803469][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.811451][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.827779][ T717] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.834962][ T717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.846655][ T717] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.853736][ T717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.936292][ T2004] veth0_vlan: entered promiscuous mode [ 89.940802][ T67] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 89.980920][ T2004] veth1_macvtap: entered promiscuous mode [ 90.100618][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 90.113294][ T67] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.124091][ T67] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.134395][ T67] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 90.144937][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.154984][ T67] usb 2-1: config 0 descriptor?? [ 90.451546][ T2020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37978 sclass=netlink_route_socket pid=2020 comm=syz.0.670 [ 90.542133][ T2025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2025 comm=syz.0.672 [ 90.639802][ T2027] kvm: pic: non byte write [ 91.372087][ T2048] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 91.520470][ T2052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2052 comm=syz.0.681 [ 91.543380][ T36] kauditd_printk_skb: 243 callbacks suppressed [ 91.543398][ T36] audit: type=1400 audit(1786105217.614:1130): avc: denied { read write } for pid=2049 comm="syz.5.680" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.605028][ T36] audit: type=1400 audit(1786105217.644:1131): avc: denied { read write open } for pid=2049 comm="syz.5.680" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.630837][ T36] audit: type=1400 audit(1786105217.644:1132): avc: denied { mounton } for pid=2049 comm="syz.5.680" path="/7/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.654292][ T36] audit: type=1400 audit(1786105217.644:1133): avc: denied { mount } for pid=2049 comm="syz.5.680" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.676873][ T36] audit: type=1400 audit(1786105217.654:1134): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.701661][ T36] audit: type=1400 audit(1786105217.654:1135): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.727302][ T36] audit: type=1400 audit(1786105217.654:1136): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.773920][ T36] audit: type=1400 audit(1786105217.704:1137): avc: denied { create } for pid=2054 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.797772][ T36] audit: type=1400 audit(1786105217.704:1138): avc: denied { create } for pid=2054 comm="syz.0.682" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.842726][ T36] audit: type=1400 audit(1786105217.714:1139): avc: denied { read } for pid=2054 comm="syz.0.682" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.871610][ T2061] netlink: 'syz.0.684': attribute type 5 has an invalid length. [ 91.879364][ T2061] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.684'. [ 91.890567][ T2061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.644165][ T311] usb 2-1: USB disconnect, device number 29 [ 92.772468][ T2074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2074 comm=syz.0.690 [ 93.262628][ T2096] netlink: 'syz.2.698': attribute type 27 has an invalid length. [ 93.470678][ T46] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 93.620676][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 93.628546][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.636609][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.646769][ T46] usb 1-1: config 0 has no interface number 0 [ 93.652957][ T46] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.665920][ T46] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 93.675067][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.685339][ T46] usb 1-1: config 0 descriptor?? [ 93.701284][ T46] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 93.731393][ T2100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2100 comm=syz.1.699 [ 93.925690][ T2108] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 93.943545][ T2108] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 94.222963][ T2119] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 94.311704][ T2122] incfs: Options parsing error. -22 [ 94.317092][ T2122] incfs: mount failed -22 [ 94.471482][ T2128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2128 comm=syz.1.708 [ 94.940658][ T392] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.111368][ T392] usb 6-1: Using ep0 maxpacket: 8 [ 95.133300][ T392] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 95.150669][ T392] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 95.165010][ T2152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2152 comm=syz.1.718 [ 95.172555][ T392] usb 6-1: config 0 has no interface number 0 [ 95.195432][ T392] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.206898][ T392] usb 6-1: config 0 interface 200 has no altsetting 0 [ 95.218446][ T392] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 95.234107][ T392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.249238][ T392] usb 6-1: Product: syz [ 95.254209][ T392] usb 6-1: Manufacturer: syz [ 95.258864][ T392] usb 6-1: SerialNumber: syz [ 95.270242][ T392] usb 6-1: config 0 descriptor?? [ 95.490932][ T2139] syzkaller1: entered promiscuous mode [ 95.496458][ T2139] syzkaller1: entered allmulticast mode [ 95.569331][ T2165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.577945][ T2165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.646671][ T392] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input11 [ 95.680333][ T392] usb 6-1: USB disconnect, device number 2 [ 96.218861][ T46] usb 1-1: USB disconnect, device number 37 [ 96.328713][ T2172] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 96.378192][ T2172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 96.587581][ T2184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2184 comm=syz.2.727 [ 96.607365][ T36] kauditd_printk_skb: 479 callbacks suppressed [ 96.607385][ T36] audit: type=1400 audit(1786105222.674:1619): avc: denied { create } for pid=2183 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.665938][ T36] audit: type=1400 audit(1786105222.704:1620): avc: denied { create } for pid=2183 comm="syz.0.728" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.687743][ T36] audit: type=1400 audit(1786105222.704:1621): avc: denied { read } for pid=2183 comm="syz.0.728" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.731158][ T36] audit: type=1400 audit(1786105222.704:1622): avc: denied { read open } for pid=2183 comm="syz.0.728" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.794855][ T36] audit: type=1400 audit(1786105222.714:1623): avc: denied { execmem } for pid=2183 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.870620][ T36] audit: type=1400 audit(1786105222.714:1624): avc: denied { mmap_zero } for pid=2183 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 96.922665][ T36] audit: type=1400 audit(1786105222.724:1625): avc: denied { read } for pid=2183 comm="syz.0.728" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.000633][ T36] audit: type=1400 audit(1786105222.724:1626): avc: denied { read open } for pid=2183 comm="syz.0.728" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.070632][ T36] audit: type=1400 audit(1786105222.724:1627): avc: denied { create } for pid=2183 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.101585][ T36] audit: type=1400 audit(1786105222.724:1628): avc: denied { write } for pid=2183 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.130631][ T392] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 97.283818][ T2212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2212 comm=syz.1.737 [ 97.309703][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 97.327735][ T392] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.350612][ T392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.370615][ T392] usb 1-1: config 0 has no interface number 0 [ 97.388568][ T392] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.404335][ T392] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 97.414111][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.430006][ T392] usb 1-1: config 0 descriptor?? [ 97.441960][ T392] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 97.453996][ T2215] tmpfs: Bad value for 'uid' [ 97.464079][ T2215] tmpfs: Bad value for 'uid' [ 97.481826][ T2215] bpf: Bad value for 'gid' [ 98.000697][ T392] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 98.108341][ T2230] netlink: 'syz.5.744': attribute type 12 has an invalid length. [ 98.151402][ T392] usb 2-1: Using ep0 maxpacket: 16 [ 98.169311][ T392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.180339][ T392] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 98.191637][ T392] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 98.208964][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.217151][ T392] usb 2-1: Product: syz [ 98.221807][ T392] usb 2-1: Manufacturer: syz [ 98.226556][ T392] usb 2-1: SerialNumber: syz [ 98.450799][ T392] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.460483][ T392] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 98.474086][ T2238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2238 comm=syz.2.746 [ 98.486794][ T392] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 98.497375][ T392] usb 2-1: USB disconnect, device number 30 [ 98.589163][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.670672][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.820642][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 98.828471][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.839414][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.852454][ T46] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 98.862043][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.872085][ T46] usb 6-1: config 0 descriptor?? [ 98.882234][ T46] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 98.890260][ T46] usbhid 6-1:0.0: can't add hid device: -22 [ 98.897171][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 99.096438][ T392] usb 6-1: USB disconnect, device number 3 [ 99.483073][ T2261] 9pnet_fd: p9_fd_create_unix (2261): problem connecting socket: ./file0: -13 [ 99.593632][ T2265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2265 comm=syz.1.755 [ 99.677117][ T2267] tipc: New replicast peer: 255.255.255.255 [ 99.694026][ T2267] tipc: Enabled bearer , priority 10 [ 99.904955][ T46] usb 1-1: USB disconnect, device number 38 [ 100.061656][ T2277] mmap: syz.5.762 (2277): VmData 29335552 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 100.093590][ T2284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2284 comm=syz.2.763 [ 100.210140][ T2288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2288 comm=syz.0.765 [ 100.277599][ T2293] netlink: 182 bytes leftover after parsing attributes in process `syz.2.767'. [ 100.500641][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.650651][ T46] usb 6-1: device descriptor read/64, error -71 [ 100.890657][ T46] usb 6-1: device descriptor read/64, error -71 [ 100.971540][ T2313] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 100.980275][ T2313] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.101807][ T2319] syz.2.775 (2319): attempted to duplicate a private mapping with mremap. This is not supported. [ 101.131240][ T46] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.142398][ T2321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2321 comm=syz.1.776 [ 101.280689][ T46] usb 6-1: device descriptor read/64, error -71 [ 101.521433][ T46] usb 6-1: device descriptor read/64, error -71 [ 101.560651][ T311] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 101.640774][ T46] usb usb6-port1: attempt power cycle [ 101.641940][ T36] kauditd_printk_skb: 582 callbacks suppressed [ 101.641981][ T36] audit: type=1400 audit(1786105227.714:2211): avc: denied { ioctl } for pid=2289 comm="syz.5.766" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.677372][ T36] audit: type=1400 audit(1786105227.714:2212): avc: denied { ioctl } for pid=2289 comm="syz.5.766" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.702414][ T311] usb 2-1: device descriptor read/64, error -71 [ 101.705902][ T36] audit: type=1400 audit(1786105227.714:2213): avc: denied { ioctl } for pid=2326 comm="syz.1.779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.733750][ T36] audit: type=1400 audit(1786105227.714:2214): avc: denied { ioctl } for pid=2289 comm="syz.5.766" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.759234][ T36] audit: type=1400 audit(1786105227.744:2215): avc: denied { ioctl } for pid=2330 comm="syz.0.781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.784131][ T36] audit: type=1400 audit(1786105227.784:2216): avc: denied { ioctl } for pid=2289 comm="syz.5.766" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.809046][ T36] audit: type=1400 audit(1786105227.784:2217): avc: denied { ioctl } for pid=2289 comm="syz.5.766" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.833918][ T67] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 101.841042][ T36] audit: type=1400 audit(1786105227.834:2218): avc: denied { ioctl } for pid=2330 comm="syz.0.781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.866415][ T36] audit: type=1400 audit(1786105227.914:2219): avc: denied { ioctl } for pid=2330 comm="syz.0.781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.891312][ T36] audit: type=1400 audit(1786105227.914:2220): avc: denied { ioctl } for pid=2330 comm="syz.0.781" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.981253][ T46] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.000644][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 102.006594][ T46] usb 6-1: device descriptor read/8, error -71 [ 102.017194][ T67] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.032618][ T67] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.044760][ T2339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2339 comm=syz.2.785 [ 102.050754][ T311] usb 2-1: device descriptor read/64, error -71 [ 102.057454][ T67] usb 1-1: config 0 has no interface number 0 [ 102.075954][ T67] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.106539][ T67] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 102.120480][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.134772][ T67] usb 1-1: config 0 descriptor?? [ 102.142644][ T67] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 102.163586][ T46] usb 6-1: device descriptor read/8, error -71 [ 102.300720][ T311] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 102.400668][ T46] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 102.423066][ T46] usb 6-1: device descriptor read/8, error -71 [ 102.440713][ T311] usb 2-1: device descriptor read/64, error -71 [ 102.553549][ T46] usb 6-1: device descriptor read/8, error -71 [ 102.661180][ T46] usb usb6-port1: unable to enumerate USB device [ 102.680679][ T311] usb 2-1: device descriptor read/64, error -71 [ 102.791159][ T311] usb usb2-port1: attempt power cycle [ 102.870988][ T2358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2358 comm=syz.2.794 [ 103.130694][ T311] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 103.153074][ T311] usb 2-1: device descriptor read/8, error -71 [ 103.293889][ T311] usb 2-1: device descriptor read/8, error -71 [ 103.530678][ T311] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 103.554092][ T311] usb 2-1: device descriptor read/8, error -71 [ 103.683503][ T311] usb 2-1: device descriptor read/8, error -71 [ 103.790866][ T311] usb usb2-port1: unable to enumerate USB device [ 104.125443][ T2380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2380 comm=syz.2.803 [ 104.558032][ T67] usb 1-1: USB disconnect, device number 39 [ 104.639381][ T2406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2406 comm=syz.0.813 [ 104.810650][ T906] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 104.999688][ T2417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 105.021357][ T906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 105.035271][ T906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 105.049020][ T906] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 105.058929][ T906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.069764][ T906] usb 2-1: config 0 descriptor?? [ 105.077151][ T2401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.174242][ T2424] bridge0: port 3(dummy0) entered blocking state [ 105.180825][ T2424] bridge0: port 3(dummy0) entered disabled state [ 105.200713][ T2424] dummy0: entered allmulticast mode [ 105.211945][ T2424] dummy0: entered promiscuous mode [ 105.218494][ T2424] bridge0: port 3(dummy0) entered blocking state [ 105.224905][ T2424] bridge0: port 3(dummy0) entered forwarding state [ 105.232567][ T2425] dummy0: left allmulticast mode [ 105.237588][ T2425] dummy0: left promiscuous mode [ 105.242665][ T2425] bridge0: port 3(dummy0) entered disabled state [ 105.380177][ T2434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2434 comm=syz.5.823 [ 105.488530][ T906] usbhid 2-1:0.0: can't add hid device: -71 [ 105.494577][ T906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.509109][ T906] usb 2-1: USB disconnect, device number 35 [ 105.580675][ T392] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 105.690672][ T67] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 105.730702][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 105.738519][ T392] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.746713][ T392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.763210][ T392] usb 1-1: config 0 has no interface number 0 [ 105.769345][ T392] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.801297][ T392] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 105.810362][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.830672][ T67] usb 6-1: device descriptor read/64, error -71 [ 105.849560][ T392] usb 1-1: config 0 descriptor?? [ 105.860162][ T392] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 106.070619][ T67] usb 6-1: device descriptor read/64, error -71 [ 106.107054][ T2448] overlayfs: conflicting lowerdir path [ 106.193699][ T2450] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 106.217828][ T2450] overlayfs: missing 'lowerdir' [ 106.322102][ T67] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 106.452178][ T2455] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 106.470632][ T67] usb 6-1: device descriptor read/64, error -71 [ 106.548807][ T2457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2457 comm=syz.1.832 [ 106.651221][ T36] kauditd_printk_skb: 1363 callbacks suppressed [ 106.651242][ T36] audit: type=1400 audit(1786105232.724:3584): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.690630][ T36] audit: type=1400 audit(1786105232.724:3585): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.711128][ T36] audit: type=1400 audit(1786105232.724:3586): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.720833][ T67] usb 6-1: device descriptor read/64, error -71 [ 106.734025][ T36] audit: type=1400 audit(1786105232.724:3587): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.757189][ T36] audit: type=1400 audit(1786105232.734:3588): avc: denied { ioctl } for pid=2436 comm="syz.5.824" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.784462][ T36] audit: type=1400 audit(1786105232.734:3589): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.804841][ T36] audit: type=1400 audit(1786105232.744:3590): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.825487][ T36] audit: type=1400 audit(1786105232.744:3591): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.845834][ T36] audit: type=1400 audit(1786105232.744:3592): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.852118][ T67] usb usb6-port1: attempt power cycle [ 106.868265][ T36] audit: type=1400 audit(1786105232.744:3593): avc: denied { accept } for pid=2444 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.005470][ T700] tipc: Subscription rejected, illegal request [ 107.240672][ T67] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 107.263347][ T67] usb 6-1: device descriptor read/8, error -71 [ 107.393506][ T67] usb 6-1: device descriptor read/8, error -71 [ 107.552530][ T10] rust_binder: 2469: undelivered transaction 4, process died [ 107.580697][ T10] rust_binder: 2469: undelivered TRANSACTION_COMPLETE [ 107.640667][ T67] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 107.663973][ T67] usb 6-1: device descriptor read/8, error -71 [ 107.803385][ T67] usb 6-1: device descriptor read/8, error -71 [ 107.893992][ T2478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2478 comm=syz.2.841 [ 107.911328][ T67] usb usb6-port1: unable to enumerate USB device [ 107.930653][ T906] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 108.093778][ T906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.105544][ T906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.116348][ T906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.127868][ T906] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.137704][ T906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.148722][ T906] usb 2-1: config 0 descriptor?? [ 108.335678][ T46] usb 1-1: USB disconnect, device number 40 [ 108.622059][ T906] plantronics 0003:047F:FFFF.0010: item fetching failed at offset 23/24 [ 108.638295][ T906] plantronics 0003:047F:FFFF.0010: parse failed [ 108.651338][ T906] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 108.742219][ T2500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2500 comm=syz.2.850 [ 108.826635][ T2498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.860774][ T2498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.917110][ T2510] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 109.210661][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 109.305511][ T2524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2524 comm=syz.5.860 [ 109.360613][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.378884][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.395041][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.406023][ T10] usb 1-1: config 0 has no interface number 0 [ 109.412964][ T10] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.425977][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 109.435069][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.445069][ T10] usb 1-1: config 0 descriptor?? [ 109.455094][ T10] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 109.590670][ T67] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 109.743485][ T67] usb 6-1: config 1 interface 0 has no altsetting 0 [ 109.759979][ T67] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.780802][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.788908][ T67] usb 6-1: Product: 䍙昶뤌ජ澮龶楎俌埇磪ᚭꖃഔ㟾堧᪦艢찗䣢忀望觸滯荠圭益楱컀뮚艭漰昴︆顗肈櫚긡偃य़䦵ⱈ [ 109.812248][ T67] usb 6-1: Manufacturer: 쟀摘宣瞦睃닌࣏勂ꎋ抨࿒ꣳ齥䝾盼㸘䵔좯㄂콀⦥饀罹Ő젴龩仚ꐢ㦁⨉狈궮䃸俞췎멸鈂썮⫧蜼䑤䆢⤽व羀뙞᫣᰸ꖴ涸輘ᆘⵢ±⚧Ꚑ닲າ噒寭猈蚸ꡤେ䃸᧸횰鞼嗣홥詽鰙줏쾠ᑭ䎟᷹樘㹯⥔Ꙭ鍵 [ 109.841552][ T67] usb 6-1: SerialNumber: ы [ 110.058365][ T67] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 110.074608][ T67] usb 6-1: USB disconnect, device number 12 [ 110.088748][ T67] usblp0: removed [ 110.673872][ T2538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.865'. [ 110.734722][ T311] usb 2-1: USB disconnect, device number 36 [ 110.770772][ T2545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.865'. [ 110.801918][ T2548] x_tables: duplicate underflow at hook 1 [ 110.906992][ T2554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2554 comm=syz.1.869 [ 111.278671][ T2562] loop7: detected capacity change from 0 to 7 [ 111.322830][ C1] blk_print_req_error: 16 callbacks suppressed [ 111.322851][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.341610][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.350882][ C0] buffer_io_error: 15 callbacks suppressed [ 111.350899][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.374730][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.383963][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.393977][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.403518][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.413635][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.422814][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.431870][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.441061][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.668296][ T36] kauditd_printk_skb: 455 callbacks suppressed [ 111.668317][ T36] audit: type=1326 audit(1786105237.734:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2573 comm="syz.2.878" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce59d9e0d9 code=0x0 [ 111.773588][ T36] audit: type=1400 audit(1786105237.844:4050): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.834152][ T36] audit: type=1400 audit(1786105237.844:4051): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.874931][ T36] audit: type=1400 audit(1786105237.884:4052): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.930686][ T36] audit: type=1400 audit(1786105237.884:4053): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.985420][ T2582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2582 comm=syz.1.879 [ 112.015512][ T67] usb 1-1: USB disconnect, device number 41 [ 112.041997][ T36] audit: type=1400 audit(1786105237.884:4054): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.088593][ T36] audit: type=1400 audit(1786105238.054:4055): avc: denied { read write } for pid=2004 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.162857][ T36] audit: type=1400 audit(1786105238.054:4056): avc: denied { read write open } for pid=2004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.243633][ T36] audit: type=1400 audit(1786105238.054:4057): avc: denied { ioctl } for pid=2004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.287308][ T2592] FAULT_INJECTION: forcing a failure. [ 112.287308][ T2592] name failslab, interval 1, probability 0, space 0, times 0 [ 112.314704][ T36] audit: type=1400 audit(1786105238.104:4058): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.363147][ T2592] CPU: 1 UID: 0 PID: 2592 Comm: syz.5.883 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 112.363182][ T2592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.363197][ T2592] Call Trace: [ 112.363204][ T2592] [ 112.363212][ T2592] __dump_stack+0x21/0x30 [ 112.363249][ T2592] dump_stack_lvl+0x140/0x1c0 [ 112.363281][ T2592] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.363315][ T2592] dump_stack+0x19/0x20 [ 112.363345][ T2592] should_fail_ex+0x3c2/0x510 [ 112.363372][ T2592] should_failslab+0xac/0x100 [ 112.363401][ T2592] kmem_cache_alloc_noprof+0x42/0x410 [ 112.363425][ T2592] ? security_inode_alloc+0x51/0x230 [ 112.363456][ T2592] security_inode_alloc+0x51/0x230 [ 112.363484][ T2592] inode_init_always_gfp+0x756/0x9e0 [ 112.363513][ T2592] ? __cfi_sock_alloc_inode+0x10/0x10 [ 112.363542][ T2592] alloc_inode+0xc5/0x270 [ 112.363572][ T2592] new_inode_pseudo+0x19/0x40 [ 112.363601][ T2592] do_accept+0x199/0x6e0 [ 112.363641][ T2592] ? _raw_spin_lock+0x92/0x120 [ 112.363668][ T2592] ? __cfi_do_accept+0x10/0x10 [ 112.363705][ T2592] __sys_accept4+0x130/0x1f0 [ 112.363738][ T2592] ? __cfi___sys_accept4+0x10/0x10 [ 112.363772][ T2592] __x64_sys_accept4+0x9e/0xb0 [ 112.363805][ T2592] x64_sys_call+0x2527/0x2ee0 [ 112.363824][ T2592] do_syscall_64+0x57/0xf0 [ 112.363850][ T2592] ? clear_bhb_loop+0x50/0xa0 [ 112.363881][ T2592] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.363911][ T2592] RIP: 0033:0x7f6760f9e0d9 [ 112.363931][ T2592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.363951][ T2592] RSP: 002b:00007f6761e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 112.363976][ T2592] RAX: ffffffffffffffda RBX: 00007f6761225fa0 RCX: 00007f6760f9e0d9 [ 112.363994][ T2592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 112.364009][ T2592] RBP: 00007f6761e23090 R08: 0000000000000000 R09: 0000000000000000 [ 112.364024][ T2592] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 112.364039][ T2592] R13: 00007f6761226038 R14: 00007f6761225fa0 R15: 00007fff85f73298 [ 112.364060][ T2592] [ 112.710639][ T46] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 112.863759][ T46] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.874839][ T46] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 112.885530][ T46] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.898396][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.905067][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 112.914223][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.924033][ T46] usb 1-1: config 0 descriptor?? [ 112.930385][ T2588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.220408][ T2610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2610 comm=syz.5.890 [ 113.271569][ T2612] SELinux: policydb string length 6488072 does not match expected length 8 [ 113.280367][ T2612] SELinux: failed to load policy [ 113.365119][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 113.376820][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.408461][ T46] usb 1-1: USB disconnect, device number 42 [ 113.628013][ T2629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2629 comm=syz.2.899 [ 113.680620][ T67] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 113.840645][ T67] usb 6-1: Invalid ep0 maxpacket: 64 [ 113.970680][ T67] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 113.990667][ T392] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 114.120752][ T67] usb 6-1: Invalid ep0 maxpacket: 64 [ 114.126333][ T67] usb usb6-port1: attempt power cycle [ 114.143217][ T392] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.159433][ T392] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 114.170449][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.178570][ T392] usb 2-1: Product: syz [ 114.180764][ T906] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 114.190609][ T392] usb 2-1: Manufacturer: syz [ 114.195276][ T392] usb 2-1: SerialNumber: syz [ 114.340636][ T906] usb 1-1: Using ep0 maxpacket: 8 [ 114.353960][ T906] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 114.363093][ T906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.371156][ T906] usb 1-1: Product: syz [ 114.375581][ T906] usb 1-1: Manufacturer: syz [ 114.380213][ T906] usb 1-1: SerialNumber: syz [ 114.416019][ T392] scsi host1: uas [ 114.421447][ T721] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 114.430990][ T721] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 114.470652][ T67] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 114.490699][ T62] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 114.500262][ T62] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 114.508671][ T67] usb 6-1: Invalid ep0 maxpacket: 64 [ 114.560709][ T62] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 114.570365][ T62] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 114.617640][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.626313][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.634150][ T62] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 114.637410][ T46] usb 2-1: USB disconnect, device number 37 [ 114.643679][ T62] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 114.644128][ T67] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 114.693880][ T67] usb 6-1: Invalid ep0 maxpacket: 64 [ 114.699848][ T67] usb usb6-port1: unable to enumerate USB device [ 114.847476][ T2646] netlink: 1412 bytes leftover after parsing attributes in process `syz.2.906'. [ 115.101157][ T906] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.116163][ T906] usb 1-1: unit 4 not found! [ 115.130476][ T906] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 115.163614][ T906] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 115.184395][ T906] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.230682][ T906] usb 1-1: USB disconnect, device number 43 [ 115.386647][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.425410][ T2654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2654 comm=syz.0.909 [ 115.476158][ T2655] syz.1.908 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.810901][ T906] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 115.970659][ T906] usb 1-1: Using ep0 maxpacket: 32 [ 115.978215][ T906] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.986361][ T906] usb 1-1: config 0 has no interface number 0 [ 115.992547][ T906] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.005691][ T906] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 116.014838][ T906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.024695][ T906] usb 1-1: config 0 descriptor?? [ 116.032114][ T906] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 116.688404][ T36] kauditd_printk_skb: 377 callbacks suppressed [ 116.688424][ T36] audit: type=1400 audit(1786105242.754:4436): avc: denied { mounton } for pid=2679 comm="syz.1.917" path="/236" dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.690552][ T2680] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 116.726151][ T2680] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 116.735422][ T2680] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 116.748509][ T36] audit: type=1400 audit(1786105242.814:4437): avc: denied { read write } for pid=2679 comm="syz.1.917" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.773422][ T2680] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 116.826155][ T36] audit: type=1400 audit(1786105242.814:4438): avc: denied { read write open } for pid=2679 comm="syz.1.917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.862581][ T2683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2683 comm=syz.5.918 [ 116.886290][ T36] audit: type=1400 audit(1786105242.814:4439): avc: denied { ioctl } for pid=2679 comm="syz.1.917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.917053][ T36] audit: type=1400 audit(1786105242.814:4440): avc: denied { ioctl } for pid=2679 comm="syz.1.917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.943053][ T36] audit: type=1400 audit(1786105242.844:4441): avc: denied { ioctl } for pid=2679 comm="syz.1.917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.968830][ T36] audit: type=1400 audit(1786105242.844:4442): avc: denied { ioctl } for pid=2679 comm="syz.1.917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.995292][ T36] audit: type=1400 audit(1786105242.864:4443): avc: denied { unmount } for pid=2004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 117.016625][ T36] audit: type=1400 audit(1786105242.874:4444): avc: denied { read write } for pid=2004 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.045284][ T36] audit: type=1400 audit(1786105242.874:4445): avc: denied { read write open } for pid=2004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.050805][ T906] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 117.138686][ T2687] input: syz0 as /devices/virtual/input/input13 [ 117.233570][ T906] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.242454][ T906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.252705][ T906] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.261767][ T906] usb 2-1: config 1 has no interface number 1 [ 117.267882][ T906] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 117.284460][ T906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.293556][ T906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.305996][ T906] usb 2-1: Product: syz [ 117.310209][ T906] usb 2-1: Manufacturer: syz [ 117.314865][ T906] usb 2-1: SerialNumber: syz [ 117.526889][ T2680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.535619][ T2680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.547383][ T2681] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.556533][ T2681] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 117.565303][ T2681] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.573677][ T2681] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 117.590899][ T906] usb 2-1: MIDIStreaming interface descriptor not found [ 117.620746][ T906] usb 2-1: USB disconnect, device number 38 [ 117.713873][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.768287][ T2693] UDC core: g1: couldn't find an available UDC or it's busy [ 118.571439][ T336] usb 1-1: USB disconnect, device number 44 [ 118.655386][ T2713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2713 comm=syz.1.928 [ 119.190632][ T906] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 119.214294][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 119.350657][ T906] usb 1-1: device descriptor read/64, error -71 [ 119.460633][ T46] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 119.610696][ T906] usb 1-1: device descriptor read/64, error -71 [ 119.630628][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 119.638852][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.650784][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.665341][ T46] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 119.675223][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.685002][ T46] usb 6-1: Product: syz [ 119.689450][ T46] usb 6-1: Manufacturer: syz [ 119.696116][ T46] usb 6-1: SerialNumber: syz [ 119.870641][ T906] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 119.923891][ T46] usb 6-1: invalid UAC_HEADER (v1) [ 119.941124][ T46] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.964587][ T46] usb 6-1: USB disconnect, device number 17 [ 120.010639][ T906] usb 1-1: device descriptor read/64, error -71 [ 120.078548][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.280663][ T906] usb 1-1: device descriptor read/64, error -71 [ 120.390671][ T311] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 120.398472][ T906] usb usb1-port1: attempt power cycle [ 120.550656][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 120.559097][ T311] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.568967][ T311] usb 2-1: config 0 has no interface number 0 [ 120.575932][ T311] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.586820][ T311] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 120.596838][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.607568][ T311] usb 2-1: config 0 descriptor?? [ 120.618560][ T311] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 120.750623][ T906] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 120.774033][ T906] usb 1-1: device descriptor read/8, error -71 [ 120.785130][ T2767] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 120.803093][ T2767] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 120.910920][ T906] usb 1-1: device descriptor read/8, error -71 [ 121.150673][ T906] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 121.175184][ T2780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2780 comm=syz.5.944 [ 121.191906][ T906] usb 1-1: device descriptor read/8, error -71 [ 121.323808][ T906] usb 1-1: device descriptor read/8, error -71 [ 121.441262][ T906] usb usb1-port1: unable to enumerate USB device [ 121.648106][ T2793] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 121.680901][ T2793] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 121.798140][ T36] kauditd_printk_skb: 2032 callbacks suppressed [ 121.798159][ T36] audit: type=1400 audit(1786105247.864:6478): avc: denied { read write } for pid=2004 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.890621][ T36] audit: type=1400 audit(1786105247.904:6479): avc: denied { read write open } for pid=2004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.946739][ T36] audit: type=1400 audit(1786105247.904:6480): avc: denied { ioctl } for pid=2004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.020617][ T36] audit: type=1400 audit(1786105248.014:6481): avc: denied { create } for pid=2794 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.085815][ T36] audit: type=1400 audit(1786105248.014:6482): avc: denied { setopt } for pid=2794 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.130633][ T36] audit: type=1400 audit(1786105248.014:6483): avc: denied { map } for pid=2794 comm="syz.2.950" path="socket:[23090]" dev="sockfs" ino=23090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.204358][ T36] audit: type=1400 audit(1786105248.014:6484): avc: denied { read write } for pid=2794 comm="syz.2.950" path="socket:[23090]" dev="sockfs" ino=23090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.237856][ T2806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2806 comm=syz.2.953 [ 122.255319][ T36] audit: type=1400 audit(1786105248.044:6485): avc: denied { create } for pid=2794 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.307891][ T36] audit: type=1400 audit(1786105248.044:6486): avc: denied { execmem } for pid=2794 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 122.351573][ T36] audit: type=1400 audit(1786105248.044:6487): avc: denied { mmap_zero } for pid=2794 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 122.401546][ T2810] FAULT_INJECTION: forcing a failure. [ 122.401546][ T2810] name failslab, interval 1, probability 0, space 0, times 0 [ 122.414345][ T2810] CPU: 0 UID: 0 PID: 2810 Comm: syz.0.956 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 122.414391][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.414407][ T2810] Call Trace: [ 122.414415][ T2810] [ 122.414425][ T2810] __dump_stack+0x21/0x30 [ 122.414471][ T2810] dump_stack_lvl+0x140/0x1c0 [ 122.414507][ T2810] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.414545][ T2810] ? skb_put+0x10e/0x200 [ 122.414582][ T2810] dump_stack+0x19/0x20 [ 122.414622][ T2810] should_fail_ex+0x3c2/0x510 [ 122.414651][ T2810] should_failslab+0xac/0x100 [ 122.414683][ T2810] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 122.414713][ T2810] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 122.414753][ T2810] ? sidtab_sid2str_get+0x135/0x360 [ 122.414791][ T2810] ? sidtab_sid2str_put+0x72e/0x750 [ 122.414830][ T2810] kmemdup_noprof+0x31/0x80 [ 122.414868][ T2810] sidtab_sid2str_get+0x135/0x360 [ 122.414907][ T2810] security_sid_to_context_core+0x30d/0x5d0 [ 122.414953][ T2810] security_sid_to_context+0x2e/0x50 [ 122.414988][ T2810] avc_audit_post_callback+0x1a8/0x790 [ 122.415020][ T2810] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 122.415059][ T2810] ? __cfi_audit_log_format+0x10/0x10 [ 122.415085][ T2810] ? audit_log_untrustedstring+0xea/0x100 [ 122.415111][ T2810] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 122.415142][ T2810] common_lsm_audit+0x14b9/0x18b0 [ 122.415171][ T2810] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 122.415201][ T2810] ? __kasan_slab_free+0x6a/0x80 [ 122.415233][ T2810] ? __cfi_common_lsm_audit+0x10/0x10 [ 122.415261][ T2810] ? avc_node_kill+0x29b/0x2e0 [ 122.415292][ T2810] ? __kasan_check_write+0x18/0x20 [ 122.415317][ T2810] ? avc_node_kill+0x2b3/0x2e0 [ 122.415347][ T2810] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 122.415378][ T2810] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 122.415411][ T2810] slow_avc_audit+0x19f/0x220 [ 122.415439][ T2810] ? __cfi_slow_avc_audit+0x10/0x10 [ 122.415469][ T2810] ? avc_denied+0x113/0x180 [ 122.415499][ T2810] ? avc_perm_nonode+0x19a/0x1d0 [ 122.415530][ T2810] audit_inode_permission+0x1a0/0x280 [ 122.415557][ T2810] ? may_create+0x820/0x820 [ 122.415580][ T2810] ? selinux_inode_permission+0x3f2/0x5d0 [ 122.415619][ T2810] ? avc_has_perm_noaudit+0x21f/0x360 [ 122.415650][ T2810] selinux_inode_permission+0x4e5/0x5d0 [ 122.415689][ T2810] ? __cfi_selinux_inode_permission+0x10/0x10 [ 122.415729][ T2810] ? make_vfsuid+0x4d/0xa0 [ 122.415753][ T2810] ? generic_permission+0x1ec/0x590 [ 122.415784][ T2810] security_inode_permission+0xb0/0x150 [ 122.415821][ T2810] inode_permission+0xf3/0x4c0 [ 122.415851][ T2810] may_open+0x197/0x430 [ 122.415885][ T2810] path_openat+0x2ae5/0x35a0 [ 122.415925][ T2810] ? do_filp_open+0x440/0x440 [ 122.415970][ T2810] do_filp_open+0x1f2/0x440 [ 122.416002][ T2810] ? __x64_sys_openat+0x13a/0x170 [ 122.416040][ T2810] ? __cfi_do_filp_open+0x10/0x10 [ 122.416080][ T2810] ? __asan_memcpy+0x5a/0x80 [ 122.416105][ T2810] do_open_execat+0x14e/0x420 [ 122.416143][ T2810] ? open_exec+0x70/0x70 [ 122.416178][ T2810] ? __check_object_size+0x54c/0x870 [ 122.416206][ T2810] ? __cfi___check_object_size+0x10/0x10 [ 122.416233][ T2810] alloc_bprm+0x2b/0xb30 [ 122.416272][ T2810] do_execveat_common+0x199/0xae0 [ 122.416296][ T2810] ? __kasan_check_write+0x18/0x20 [ 122.416321][ T2810] ? getname_flags+0x203/0x6b0 [ 122.416351][ T2810] __x64_sys_execve+0x96/0xb0 [ 122.416390][ T2810] x64_sys_call+0x12c4/0x2ee0 [ 122.416414][ T2810] do_syscall_64+0x57/0xf0 [ 122.416443][ T2810] ? clear_bhb_loop+0x50/0xa0 [ 122.416479][ T2810] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.416513][ T2810] RIP: 0033:0x7f0928b9e0d9 [ 122.416535][ T2810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.416558][ T2810] RSP: 002b:00007f0929a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 122.416586][ T2810] RAX: ffffffffffffffda RBX: 00007f0928e25fa0 RCX: 00007f0928b9e0d9 [ 122.416607][ T2810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 122.416624][ T2810] RBP: 00007f0929a97090 R08: 0000000000000000 R09: 0000000000000000 [ 122.416641][ T2810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.416657][ T2810] R13: 00007f0928e26038 R14: 00007f0928e25fa0 R15: 00007ffe91dfc928 [ 122.416681][ T2810] [ 123.150509][ T311] usb 2-1: USB disconnect, device number 39 [ 123.418426][ T2828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2828 comm=syz.2.962 [ 123.946544][ T2846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2846 comm=syz.0.970 [ 123.985732][ T2846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2846 comm=syz.0.970 [ 124.001237][ T906] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 124.173728][ T2852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2852 comm=syz.5.973 [ 124.190650][ T906] usb 2-1: Using ep0 maxpacket: 32 [ 124.204252][ T906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.212449][ T906] usb 2-1: config 0 has no interface number 0 [ 124.218576][ T906] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.228447][ T906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 124.237547][ T906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.252751][ T906] usb 2-1: config 0 descriptor?? [ 124.268096][ T906] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 124.534843][ T2857] Need at least one configuration in g1. [ 124.554305][ T2857] udc dummy_udc.0: failed to start g1: -22 [ 124.560184][ T2857] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 124.641075][ T2857] UDC core: g1: couldn't find an available UDC or it's busy [ 124.671548][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 124.680389][ T2866] bridge_slave_1: left allmulticast mode [ 124.730641][ T2866] bridge_slave_1: left promiscuous mode [ 124.738400][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.756841][ T2866] bridge_slave_0: left allmulticast mode [ 124.770229][ T2866] bridge_slave_0: left promiscuous mode [ 124.777203][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.793413][ T2866] bridge0 (unregistering): left allmulticast mode [ 124.833511][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 125.270695][ T2880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2880 comm=syz.2.983 [ 125.474727][ T2888] netlink: 100 bytes leftover after parsing attributes in process `syz.2.987'. [ 126.083142][ T2913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2913 comm=syz.0.995 [ 126.108920][ T2906] loop7: detected capacity change from 0 to 7 [ 126.152615][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.161841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.174209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.183416][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.192530][ T2906] loop7: unable to read partition table [ 126.225552][ T2906] loop_reread_partitions: partition scan of loop7 (j̖ 8?}X%`ր{֐ȵ4FLQ5) failed (rc=-5) [ 126.254686][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.263909][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.274049][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.283262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.293948][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.303143][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.314070][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.323261][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.333378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.342565][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.352703][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.363405][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.380163][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.389366][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.397292][ T2914] loop7: unable to read partition table [ 126.541228][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.550446][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.568179][ T2918] loop7: unable to read partition table [ 126.620989][ T111] loop7: unable to read partition table [ 126.780820][ T906] usb 2-1: USB disconnect, device number 40 [ 126.876090][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 126.876109][ T36] audit: type=1400 audit(1786105252.944:6908): avc: denied { read } for pid=2921 comm="syz.1.1000" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.978054][ T36] audit: type=1400 audit(1786105252.944:6909): avc: denied { read open } for pid=2921 comm="syz.1.1000" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.070688][ T36] audit: type=1400 audit(1786105252.954:6910): avc: denied { create } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.160656][ T36] audit: type=1400 audit(1786105252.974:6911): avc: denied { setopt } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.215489][ T2931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 127.228159][ T36] audit: type=1400 audit(1786105252.974:6912): avc: denied { create } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.292708][ T36] audit: type=1400 audit(1786105252.974:6913): avc: denied { ioctl } for pid=2921 comm="syz.1.1000" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.334670][ T2933] syz.0.1001 uses obsolete (PF_INET,SOCK_PACKET) [ 127.393947][ T36] audit: type=1400 audit(1786105252.974:6914): avc: denied { write } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.470635][ T36] audit: type=1400 audit(1786105252.974:6915): avc: denied { read } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.505926][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2937 comm=syz.1.1004 [ 127.514291][ T2927] tipc: Can't bind to reserved service type 0 [ 127.548638][ T36] audit: type=1400 audit(1786105252.994:6916): avc: denied { read } for pid=2922 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.619068][ T36] audit: type=1400 audit(1786105253.034:6917): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.810806][ T2945] Need at least one configuration in g1. [ 127.840746][ T2945] udc dummy_udc.0: failed to start g1: -22 [ 127.846655][ T2945] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 127.904500][ T2945] UDC core: g1: couldn't find an available UDC or it's busy [ 127.957810][ T2951] cgroup: release_agent respecified [ 128.140624][ T336] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 128.290628][ T336] usb 1-1: Using ep0 maxpacket: 32 [ 128.303532][ T336] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.318228][ T336] usb 1-1: config 0 has no interface number 0 [ 128.330643][ T336] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.340397][ T336] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 128.370639][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.387039][ T336] usb 1-1: config 0 descriptor?? [ 128.402960][ T2961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2961 comm=syz.2.1013 [ 128.416407][ T336] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 128.900435][ T2983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2983 comm=syz.2.1022 [ 129.030930][ T2991] UDC core: g1: couldn't find an available UDC or it's busy [ 130.240826][ T906] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 130.394286][ T906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.405491][ T906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.415291][ T906] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.424402][ T906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.433923][ T3036] 9pnet_fd: Insufficient options for proto=fd [ 130.438248][ T906] usb 6-1: config 0 descriptor?? [ 130.653252][ T3024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.661836][ T3024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.832831][ T311] usb 1-1: USB disconnect, device number 49 [ 130.883762][ T906] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 130.902568][ T906] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0011/input/input14 [ 130.968152][ T3040] 9pnet_fd: Insufficient options for proto=fd [ 131.024583][ T906] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 131.087852][ T906] usb 6-1: USB disconnect, device number 18 [ 131.203762][ T3041] fido_id[3041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 131.723023][ T3063] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 131.800636][ T379] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 131.856005][ T3067] UDC core: g1: couldn't find an available UDC or it's busy [ 131.904316][ T36] kauditd_printk_skb: 434 callbacks suppressed [ 131.904336][ T36] audit: type=1400 audit(1786105257.974:7352): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.960634][ T379] usb 1-1: device descriptor read/64, error -71 [ 131.983182][ T36] audit: type=1400 audit(1786105258.054:7353): avc: denied { mounton } for pid=3066 comm="syz.5.1057" path="/87/file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.984101][ T3068] 9pnet_fd: Insufficient options for proto=fd [ 132.030667][ T36] audit: type=1326 audit(1786105258.084:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.5.1057" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6760f9e0d9 code=0x7fc00000 [ 132.059290][ T36] audit: type=1400 audit(1786105258.084:7355): avc: denied { ioctl } for pid=3066 comm="syz.5.1057" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.095170][ T36] audit: type=1400 audit(1786105258.154:7356): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.135121][ T36] audit: type=1400 audit(1786105258.154:7357): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.220616][ T379] usb 1-1: device descriptor read/64, error -71 [ 132.223289][ T36] audit: type=1400 audit(1786105258.164:7358): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.276405][ T36] audit: type=1400 audit(1786105258.164:7359): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.328980][ T36] audit: type=1400 audit(1786105258.164:7360): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.379709][ T36] audit: type=1400 audit(1786105258.164:7361): avc: denied { ioctl } for pid=3058 comm="syz.0.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.420630][ T906] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 132.510761][ T379] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 132.590639][ T906] usb 2-1: Using ep0 maxpacket: 32 [ 132.602846][ T906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.620606][ T906] usb 2-1: config 0 has no interface number 0 [ 132.630634][ T906] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.650607][ T906] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.661293][ T379] usb 1-1: device descriptor read/64, error -71 [ 132.682384][ T906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 132.695041][ T906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.737246][ T906] usb 2-1: config 0 descriptor?? [ 132.920639][ T379] usb 1-1: device descriptor read/64, error -71 [ 133.030792][ T379] usb usb1-port1: attempt power cycle [ 133.200634][ T906] usbhid 2-1:0.1: can't add hid device: -71 [ 133.210659][ T906] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 133.221889][ T906] usb 2-1: USB disconnect, device number 41 [ 133.370698][ T379] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 133.393112][ T379] usb 1-1: device descriptor read/8, error -71 [ 133.525090][ T379] usb 1-1: device descriptor read/8, error -71 [ 133.640523][ T3096] cgroup: release_agent respecified [ 133.770629][ T379] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 133.812069][ T379] usb 1-1: device descriptor read/8, error -71 [ 133.946704][ T379] usb 1-1: device descriptor read/8, error -71 [ 133.967007][ T3113] UDC core: g1: couldn't find an available UDC or it's busy [ 134.061251][ T379] usb usb1-port1: unable to enumerate USB device [ 134.079625][ T3114] 9pnet_fd: Insufficient options for proto=fd [ 134.629058][ T3118] rtc_cmos 00:00: Alarms can be up to one day in the future [ 135.070712][ T379] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 135.220637][ T379] usb 2-1: Using ep0 maxpacket: 32 [ 135.228786][ T379] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.238613][ T379] usb 2-1: config 0 has no interface number 0 [ 135.245557][ T379] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.261999][ T379] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.278073][ T379] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 135.299430][ T379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.311012][ T379] usb 2-1: config 0 descriptor?? [ 135.512029][ T3138] : renamed from vlan0 (while UP) [ 135.743925][ T379] usbhid 2-1:0.1: can't add hid device: -71 [ 135.749956][ T379] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 135.759372][ T379] usb 2-1: USB disconnect, device number 42 [ 135.773514][ T3145] 9pnet_fd: Insufficient options for proto=fd [ 136.624028][ T3163] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1094'. [ 136.655092][ T3168] fuseblk: Bad value for 'source' [ 136.761891][ T3174] incfs_lookup_dentry err:-13 [ 136.766675][ T3174] incfs: Can't find or create .index dir in ./file0 [ 136.801900][ T3174] incfs: mount failed -13 [ 136.919741][ T36] kauditd_printk_skb: 439 callbacks suppressed [ 136.919763][ T36] audit: type=1400 audit(1786105262.984:7801): avc: denied { read write } for pid=3179 comm="syz.0.1100" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.975747][ T36] audit: type=1400 audit(1786105262.984:7802): avc: denied { read write open } for pid=3179 comm="syz.0.1100" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 137.000829][ T36] audit: type=1400 audit(1786105262.994:7803): avc: denied { read } for pid=3179 comm="syz.0.1100" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.024175][ T36] audit: type=1400 audit(1786105262.994:7804): avc: denied { read open } for pid=3179 comm="syz.0.1100" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.048215][ T36] audit: type=1400 audit(1786105263.004:7805): avc: denied { ioctl } for pid=3175 comm="syz.1.1099" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.060751][ T67] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 137.085160][ T36] audit: type=1400 audit(1786105263.034:7806): avc: denied { read } for pid=3181 comm="syz.5.1101" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.150656][ T36] audit: type=1400 audit(1786105263.034:7807): avc: denied { read open } for pid=3181 comm="syz.5.1101" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.179714][ T36] audit: type=1400 audit(1786105263.054:7808): avc: denied { read } for pid=3179 comm="syz.0.1100" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.254537][ T36] audit: type=1400 audit(1786105263.054:7809): avc: denied { read open } for pid=3179 comm="syz.0.1100" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.278725][ T67] usb 2-1: device descriptor read/64, error -71 [ 137.301177][ T3187] UDC core: g1: couldn't find an available UDC or it's busy [ 137.320660][ T36] audit: type=1400 audit(1786105263.054:7810): avc: denied { ioctl } for pid=3181 comm="syz.5.1101" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.418865][ T3192] 9pnet_fd: Insufficient options for proto=fd [ 137.471102][ T336] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 137.530654][ T67] usb 2-1: device descriptor read/64, error -71 [ 137.620635][ T336] usb 1-1: Using ep0 maxpacket: 16 [ 137.638199][ T336] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 137.651015][ T336] usb 1-1: config 0 has no interface number 0 [ 137.670641][ T336] usb 1-1: config 0 interface 84 has no altsetting 0 [ 137.681932][ T336] usb 1-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=91.33 [ 137.699544][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.710881][ T3198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3198 comm=syz.2.1107 [ 137.723468][ T336] usb 1-1: Product: syz [ 137.728098][ T336] usb 1-1: Manufacturer: syz [ 137.735010][ T336] usb 1-1: SerialNumber: syz [ 137.748157][ T336] usb 1-1: config 0 descriptor?? [ 137.780638][ T67] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 137.920721][ T67] usb 2-1: device descriptor read/64, error -71 [ 137.969394][ T336] usb 1-1: Found UVC 0.00 device syz (18ec:3188) [ 137.975921][ T336] usb 1-1: No valid video chain found. [ 137.983932][ T336] usb 1-1: USB disconnect, device number 54 [ 138.160619][ T67] usb 2-1: device descriptor read/64, error -71 [ 138.280742][ T67] usb usb2-port1: attempt power cycle [ 138.317870][ T3208] cgroup: release_agent respecified [ 138.630699][ T67] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 138.658529][ T67] usb 2-1: device descriptor read/8, error -71 [ 138.750673][ T336] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 138.783810][ T3222] incfs: Options parsing error. -22 [ 138.789101][ T3222] incfs: mount failed -22 [ 138.803138][ T67] usb 2-1: device descriptor read/8, error -71 [ 138.920665][ T336] usb 1-1: Using ep0 maxpacket: 8 [ 138.928334][ T336] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 138.937707][ T336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.949403][ T3225] 9pnet_fd: Insufficient options for proto=fd [ 138.956524][ T336] usb 1-1: config 0 has no interfaces? [ 138.965642][ T336] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 138.974786][ T336] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.983181][ T336] usb 1-1: Product: syz [ 138.987466][ T336] usb 1-1: Manufacturer: syz [ 138.992177][ T336] usb 1-1: SerialNumber: syz [ 138.998501][ T336] usb 1-1: config 0 descriptor?? [ 139.040655][ T67] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 139.062951][ T67] usb 2-1: device descriptor read/8, error -71 [ 139.193129][ T67] usb 2-1: device descriptor read/8, error -71 [ 139.215549][ T336] usb 1-1: USB disconnect, device number 55 [ 139.300849][ T67] usb usb2-port1: unable to enumerate USB device [ 139.988051][ T3239] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.023983][ T3242] 9pnet_fd: Insufficient options for proto=fd [ 140.032847][ T3239] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 140.056853][ T3239] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.066075][ T3239] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 140.266152][ T3248] fuse: Unknown parameter '00000000000000000000022000000000000000000180xffffffffffffffff00000000000000000000' [ 140.485385][ T3264] input: syz1 as /devices/virtual/input/input15 [ 140.580996][ T3266] UDC core: g1: couldn't find an available UDC or it's busy [ 140.593457][ T3266] 9pnet_fd: Insufficient options for proto=fd [ 140.760669][ T311] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 140.852242][ T3274] FAULT_INJECTION: forcing a failure. [ 140.852242][ T3274] name failslab, interval 1, probability 0, space 0, times 0 [ 140.865038][ T3274] CPU: 0 UID: 0 PID: 3274 Comm: syz.1.1139 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 140.865074][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.865089][ T3274] Call Trace: [ 140.865097][ T3274] [ 140.865106][ T3274] __dump_stack+0x21/0x30 [ 140.865143][ T3274] dump_stack_lvl+0x140/0x1c0 [ 140.865174][ T3274] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.865207][ T3274] ? __kasan_check_write+0x18/0x20 [ 140.865231][ T3274] ? _raw_spin_trylock+0xb5/0x140 [ 140.865258][ T3274] ? __cfi__raw_spin_trylock+0x10/0x10 [ 140.865284][ T3274] dump_stack+0x19/0x20 [ 140.865311][ T3274] should_fail_ex+0x3c2/0x510 [ 140.865335][ T3274] should_failslab+0xac/0x100 [ 140.865362][ T3274] kmem_cache_alloc_node_noprof+0x45/0x420 [ 140.865386][ T3274] ? __alloc_skb+0x10c/0x360 [ 140.865413][ T3274] ? avc_xperms_populate+0x2a8/0x620 [ 140.865441][ T3274] __alloc_skb+0x10c/0x360 [ 140.865473][ T3274] alloc_skb_with_frags+0xd0/0x8b0 [ 140.865506][ T3274] ? avc_perm_nonode+0x118/0x1d0 [ 140.865532][ T3274] ? avc_has_perm_noaudit+0x360/0x360 [ 140.865560][ T3274] sock_alloc_send_pskb+0x883/0x9a0 [ 140.865587][ T3274] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 140.865613][ T3274] ? __cfi___scm_send+0x10/0x10 [ 140.865636][ T3274] ? security_socket_getpeersec_dgram+0xf1/0x120 [ 140.865680][ T3274] unix_stream_sendmsg+0x49b/0xfd0 [ 140.865736][ T3274] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 140.865769][ T3274] ? __check_object_size+0xdc/0x870 [ 140.865793][ T3274] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.865821][ T3274] ? __cfi___check_object_size+0x10/0x10 [ 140.865847][ T3274] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 140.865873][ T3274] ? security_socket_sendmsg+0x3d/0x100 [ 140.865905][ T3274] ____sys_sendmsg+0x9a1/0xa00 [ 140.865930][ T3274] ? __sys_sendmsg_sock+0x50/0x50 [ 140.865955][ T3274] ? import_iovec+0x80/0xb0 [ 140.865989][ T3274] ___sys_sendmsg+0x2a6/0x370 [ 140.866013][ T3274] ? __sys_sendmsg+0x2a0/0x2a0 [ 140.866036][ T3274] ? proc_fail_nth_write+0x184/0x220 [ 140.866071][ T3274] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 140.866109][ T3274] ? __fget_files+0x2bc/0x330 [ 140.866139][ T3274] __x64_sys_sendmsg+0x206/0x2e0 [ 140.866163][ T3274] ? fput+0x1a4/0x230 [ 140.866192][ T3274] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 140.866216][ T3274] ? ksys_write+0x1f3/0x260 [ 140.866242][ T3274] ? __kasan_check_read+0x15/0x20 [ 140.866265][ T3274] x64_sys_call+0x2a4c/0x2ee0 [ 140.866287][ T3274] do_syscall_64+0x57/0xf0 [ 140.866311][ T3274] ? clear_bhb_loop+0x50/0xa0 [ 140.866343][ T3274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.866374][ T3274] RIP: 0033:0x7f2fbfd9e0d9 [ 140.866394][ T3274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.866414][ T3274] RSP: 002b:00007f2fc0c13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.866440][ T3274] RAX: ffffffffffffffda RBX: 00007f2fc0025fa0 RCX: 00007f2fbfd9e0d9 [ 140.866457][ T3274] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 140.866473][ T3274] RBP: 00007f2fc0c13090 R08: 0000000000000000 R09: 0000000000000000 [ 140.866489][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.866504][ T3274] R13: 00007f2fc0026038 R14: 00007f2fc0025fa0 R15: 00007ffce6513c88 [ 140.866525][ T3274] [ 141.009788][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.222160][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.236200][ T311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.257875][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.267205][ T311] usb 1-1: SerialNumber: syz [ 141.480767][ T311] usb 1-1: 0:2 : does not exist [ 141.503735][ T311] usb 1-1: unit 5: unexpected type 0x09 [ 141.532332][ T3297] overlayfs: failed to clone upperpath [ 141.538238][ T311] usb 1-1: USB disconnect, device number 56 [ 141.724276][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.843516][ T379] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 141.890322][ T3304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 141.922633][ T36] kauditd_printk_skb: 800 callbacks suppressed [ 141.922654][ T36] audit: type=1400 audit(1786105267.994:8611): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.040628][ T379] usb 6-1: Using ep0 maxpacket: 32 [ 142.046555][ T36] audit: type=1400 audit(1786105268.114:8612): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.084328][ T379] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.100449][ T379] usb 6-1: config 0 has no interface number 0 [ 142.116027][ T379] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.130484][ T36] audit: type=1400 audit(1786105268.114:8613): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.153638][ T379] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.158167][ T36] audit: type=1400 audit(1786105268.154:8614): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.190853][ T36] audit: type=1400 audit(1786105268.154:8615): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.196026][ T379] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 142.228511][ T36] audit: type=1400 audit(1786105268.154:8616): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.256394][ T379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.257251][ T36] audit: type=1400 audit(1786105268.164:8617): avc: denied { ioctl } for pid=3298 comm="syz.5.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.280648][ T379] usb 6-1: config 0 descriptor?? [ 142.295292][ T36] audit: type=1400 audit(1786105268.164:8618): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.320098][ T36] audit: type=1400 audit(1786105268.164:8619): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.358906][ T36] audit: type=1400 audit(1786105268.164:8620): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.682051][ T3319] Need at least one configuration in g1. [ 142.693901][ T3319] udc dummy_udc.0: failed to start g1: -22 [ 142.706923][ T3319] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 142.720968][ T3319] UDC core: g1: couldn't find an available UDC or it's busy [ 142.742104][ T3322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 142.754820][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 142.763509][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 142.767436][ T3322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 142.772806][ T379] usbhid 6-1:0.1: can't add hid device: -32 [ 142.792864][ T379] usbhid 6-1:0.1: probe with driver usbhid failed with error -32 [ 142.813131][ T379] usb 6-1: USB disconnect, device number 19 [ 143.016263][ T3332] syzkaller1: entered promiscuous mode [ 143.022442][ T3332] syzkaller1: entered allmulticast mode [ 143.140011][ T3335] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 143.157965][ T3335] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 143.237312][ T336] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 143.258753][ T336] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.556679][ T3345] Need at least one configuration in g1. [ 143.562621][ T3345] udc dummy_udc.0: failed to start g1: -22 [ 143.568866][ T3345] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 143.581302][ T3345] UDC core: g1: couldn't find an available UDC or it's busy [ 144.453377][ T3359] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 144.475365][ T3359] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 144.493328][ T336] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 144.653384][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.664636][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.674495][ T336] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.683910][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.695873][ T336] usb 6-1: config 0 descriptor?? [ 144.810637][ T67] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 144.970601][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 144.990081][ T67] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.010504][ T67] usb 1-1: config 0 has no interface number 0 [ 145.024929][ T67] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.049313][ T67] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.070537][ T67] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 145.079975][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.097411][ T3368] pimreg1: tun_chr_ioctl cmd 1074025676 [ 145.098585][ T67] usb 1-1: config 0 descriptor?? [ 145.103546][ T3368] pimreg1: owner set to 0 [ 145.139721][ T336] usbhid 6-1:0.0: can't add hid device: -71 [ 145.146891][ T336] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 145.163553][ T336] usb 6-1: USB disconnect, device number 20 [ 145.175081][ T3370] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=275 sclass=netlink_xfrm_socket pid=3370 comm=syz.1.1175 [ 145.769483][ T3380] UDC core: g1: couldn't find an available UDC or it's busy [ 145.779024][ T67] usbhid 1-1:0.1: can't add hid device: -71 [ 145.794988][ T67] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 145.820404][ T67] usb 1-1: USB disconnect, device number 57 [ 145.940648][ T379] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 146.022266][ T3385] netlink: 'syz.2.1181': attribute type 11 has an invalid length. [ 146.030201][ T3385] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 146.039030][ T3385] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.1181'. [ 146.090633][ T379] usb 2-1: Using ep0 maxpacket: 8 [ 146.099113][ T379] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 146.109932][ T379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.121042][ T379] usb 2-1: config 0 descriptor?? [ 146.338329][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.349765][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.360646][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.368926][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.378480][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.390144][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.418723][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.440613][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.460479][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.469629][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.478624][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.488528][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.497537][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.507838][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.518228][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.532322][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.541875][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.550082][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.559537][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.568653][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.577695][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.626274][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.672120][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.680285][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.709620][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.725141][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.738891][ T3399] syzkaller1: entered promiscuous mode [ 146.744502][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.753824][ T3399] syzkaller1: entered allmulticast mode [ 146.759787][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.772891][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.793699][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.820058][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.853424][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.883471][ T379] logitech-djreceiver 0003:046D:C517.0013: unknown main item tag 0x0 [ 146.927305][ T379] logitech-djreceiver 0003:046D:C517.0013: hidraw0: USB HID v9.42 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 146.971572][ T36] kauditd_printk_skb: 473 callbacks suppressed [ 146.971590][ T36] audit: type=1400 audit(1786105273.044:9094): avc: denied { read } for pid=3404 comm="syz.0.1189" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.020639][ T379] usb 2-1: USB disconnect, device number 47 [ 147.057116][ T36] audit: type=1400 audit(1786105273.074:9095): avc: denied { read open } for pid=3404 comm="syz.0.1189" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.132879][ T3405] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 147.154990][ T36] audit: type=1400 audit(1786105273.094:9096): avc: denied { ioctl } for pid=3404 comm="syz.0.1189" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.218020][ T3406] fido_id[3406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 147.232913][ T36] audit: type=1400 audit(1786105273.114:9097): avc: denied { ioctl } for pid=3404 comm="syz.0.1189" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.257606][ T3411] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 147.286639][ T3409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.299978][ T3409] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 147.330694][ T3409] audit: backlog limit exceeded [ 147.335738][ T36] audit: type=1400 audit(1786105273.114:9098): avc: denied { read } for pid=3404 comm="syz.0.1189" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.358472][ T3409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.365339][ T3409] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 147.630753][ T3419] Need at least one configuration in g1. [ 147.636598][ T3419] udc dummy_udc.0: failed to start g1: -22 [ 147.690609][ T3419] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 147.741039][ T3419] UDC core: g1: couldn't find an available UDC or it's busy [ 149.143689][ T3456] Need at least one configuration in g1. [ 149.161788][ T3456] udc dummy_udc.0: failed to start g1: -22 [ 149.200708][ T3456] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 149.250950][ T3456] UDC core: g1: couldn't find an available UDC or it's busy [ 150.138510][ T3487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37978 sclass=netlink_route_socket pid=3487 comm=syz.5.1216 [ 150.262307][ T3489] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1218'. [ 150.302668][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 150.561920][ T3502] Need at least one configuration in g1. [ 150.580674][ T3502] udc dummy_udc.0: failed to start g1: -22 [ 150.586575][ T3502] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 150.597266][ T3500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1221'. [ 150.611701][ T3502] UDC core: g1: couldn't find an available UDC or it's busy [ 150.740704][ T67] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 150.903417][ T67] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.938842][ T67] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.950621][ T67] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 150.969905][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.992262][ T67] usb 2-1: config 0 descriptor?? [ 151.130661][ T336] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 151.321285][ T336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.328000][ T336] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 151.337910][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.350893][ T336] usb 1-1: config 0 descriptor?? [ 151.510031][ T67] uclogic 0003:5543:0042.0014: No inputs registered, leaving [ 151.550791][ T67] uclogic 0003:5543:0042.0014: hidraw0: USB HID v10.01 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 151.612976][ T3520] tipc: New replicast peer: 127.0.0.1 [ 151.618662][ T3520] tipc: Enabled bearer , priority 10 [ 151.643525][ T3520] tipc: Disabling bearer [ 151.731438][ T67] usb 2-1: USB disconnect, device number 48 [ 151.792858][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.810127][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.819960][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.828908][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.858475][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.867152][ T3524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=3524 comm=syz.2.1230 [ 151.883699][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.891668][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.908643][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.931682][ T336] wacom 0003:056A:00D0.0015: unknown main item tag 0x0 [ 151.951026][ T336] wacom 0003:056A:00D0.0015: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 151.977712][ T336] wacom 0003:056A:00D0.0015: hidraw0: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 152.029267][ T336] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0015/input/input16 [ 152.068209][ T36] kauditd_printk_skb: 752 callbacks suppressed [ 152.068229][ T36] audit: type=1400 audit(1786105278.134:9832): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.157607][ T36] audit: type=1400 audit(1786105278.164:9833): avc: denied { read open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.185288][ T336] usb 1-1: USB disconnect, device number 58 [ 152.221274][ T36] audit: type=1400 audit(1786105278.224:9834): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.314732][ T36] audit: type=1400 audit(1786105278.224:9835): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.395073][ T36] audit: type=1400 audit(1786105278.224:9836): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.472163][ T36] audit: type=1400 audit(1786105278.224:9837): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.528499][ T36] audit: type=1400 audit(1786105278.224:9838): avc: denied { read open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.603181][ T36] audit: type=1400 audit(1786105278.294:9839): avc: denied { sqpoll } for pid=3530 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.668077][ T36] audit: type=1400 audit(1786105278.314:9840): avc: denied { create } for pid=3530 comm="syz.2.1233" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.682230][ T3539] Need at least one configuration in g1. [ 152.720652][ T3539] udc dummy_udc.0: failed to start g1: -22 [ 152.726540][ T3539] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 152.747857][ T36] audit: type=1400 audit(1786105278.314:9841): avc: denied { map } for pid=3530 comm="syz.2.1233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.761532][ T3539] UDC core: g1: couldn't find an available UDC or it's busy [ 152.861740][ T3544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1237'. [ 153.082017][ T3549] tipc: Enabled bearer , priority 10 [ 153.118689][ T3551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3551 comm=syz.2.1240 [ 153.285453][ T3557] tipc: New replicast peer: 127.0.0.1 [ 153.297770][ T3557] tipc: Enabled bearer , priority 10 [ 153.320665][ T3557] tipc: Disabling bearer [ 153.460613][ T46] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 153.600630][ T46] usb 1-1: device descriptor read/64, error -71 [ 153.749950][ T3576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1251'. [ 153.850629][ T46] usb 1-1: device descriptor read/64, error -71 [ 153.973405][ T3583] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 154.022464][ T3583] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 154.106107][ T46] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 154.250647][ T46] usb 1-1: device descriptor read/64, error -71 [ 154.420647][ T336] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 154.500646][ T46] usb 1-1: device descriptor read/64, error -71 [ 154.555502][ T3590] UDC core: g1: couldn't find an available UDC or it's busy [ 154.570654][ T336] usb 6-1: Using ep0 maxpacket: 32 [ 154.579981][ T336] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.589484][ T336] usb 6-1: config 0 has no interface number 0 [ 154.596410][ T336] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.610756][ T46] usb usb1-port1: attempt power cycle [ 154.628496][ T336] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.648576][ T336] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 154.658638][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.678144][ T336] usb 6-1: config 0 descriptor?? [ 154.960679][ T46] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 154.983905][ T46] usb 1-1: device descriptor read/8, error -71 [ 155.113540][ T46] usb 1-1: device descriptor read/8, error -71 [ 155.303395][ T336] uclogic 0003:28BD:0094.0016: pen parameters not found [ 155.310425][ T336] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 155.350692][ T46] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 155.373090][ T46] usb 1-1: device descriptor read/8, error -71 [ 155.437545][ T3596] tipc: New replicast peer: 127.0.0.1 [ 155.443311][ T3596] tipc: Enabled bearer , priority 10 [ 155.514388][ T311] usb 6-1: USB disconnect, device number 21 [ 155.522192][ T46] usb 1-1: device descriptor read/8, error -71 [ 155.573708][ T3601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1260'. [ 155.631891][ T46] usb usb1-port1: unable to enumerate USB device [ 155.738929][ T3605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3605 comm=syz.1.1262 [ 155.753818][ T3605] netlink: 'syz.1.1262': attribute type 12 has an invalid length. [ 155.795951][ T3609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3609 comm=syz.2.1263 [ 156.114158][ T3620] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 156.132174][ T3620] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 156.530649][ T311] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 156.576552][ T3628] x_tables: unsorted entry at hook 1 [ 156.610624][ T46] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 156.693027][ T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.704041][ T311] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.713171][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.724653][ T311] usb 6-1: config 0 descriptor?? [ 156.766412][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 156.789209][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 156.790137][ T3630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3630 comm=syz.2.1272 [ 156.806523][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 156.824506][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.834639][ T46] usb 1-1: config 0 descriptor?? [ 156.841890][ T3624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.870640][ T336] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 156.970135][ T311] usbhid 6-1:0.0: can't add hid device: -71 [ 156.976245][ T311] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 156.985494][ T311] usb 6-1: USB disconnect, device number 22 [ 157.020616][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 157.028777][ T336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.044326][ T336] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 157.060592][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.078788][ T336] usb 2-1: Product: syz [ 157.089546][ T336] usb 2-1: Manufacturer: syz [ 157.098987][ T336] usb 2-1: SerialNumber: syz [ 157.109183][ T336] usb 2-1: config 0 descriptor?? [ 157.115895][ T36] kauditd_printk_skb: 469 callbacks suppressed [ 157.115910][ T36] audit: type=1400 audit(1786105283.184:10311): avc: denied { ioctl } for pid=3627 comm="syz.1.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.150803][ T336] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 157.162441][ T36] audit: type=1400 audit(1786105283.214:10312): avc: denied { ioctl } for pid=3627 comm="syz.1.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.189392][ T36] audit: type=1400 audit(1786105283.214:10313): avc: denied { ioctl } for pid=3627 comm="syz.1.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.226543][ T36] audit: type=1400 audit(1786105283.294:10314): avc: denied { read write } for pid=3621 comm="syz.0.1268" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.252853][ T36] audit: type=1400 audit(1786105283.294:10315): avc: denied { read write open } for pid=3621 comm="syz.0.1268" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.278097][ T36] audit: type=1400 audit(1786105283.294:10316): avc: denied { ioctl } for pid=3621 comm="syz.0.1268" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.339623][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 157.347623][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.367598][ T36] audit: type=1400 audit(1786105283.434:10317): avc: denied { create } for pid=3627 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.372000][ T46] usb 1-1: USB disconnect, device number 63 [ 157.399790][ T336] usb 2-1: USB disconnect, device number 49 [ 157.458038][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3633 comm=syz.2.1273 [ 157.498174][ T36] audit: type=1400 audit(1786105283.564:10318): avc: denied { create } for pid=3634 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.530718][ T36] audit: type=1400 audit(1786105283.574:10319): avc: denied { execmem } for pid=3634 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.560710][ T36] audit: type=1400 audit(1786105283.574:10320): avc: denied { mmap_zero } for pid=3634 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 157.974067][ T3644] overlayfs: missing 'lowerdir' [ 157.989225][ T392] rust_binder: 3641: undelivered transaction 8, process died [ 158.002967][ T392] rust_binder: 3641: undelivered TRANSACTION_COMPLETE [ 158.014821][ T3644] rust_binder: Write failure EFAULT in pid:788 [ 158.017239][ T3644] dummy_hcd dummy_hcd.0: remove, state 4 [ 158.057679][ T3644] usb usb1: USB disconnect, device number 1 [ 158.085003][ T3644] dummy_hcd dummy_hcd.0: stopped [ 158.097791][ T3644] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 158.173713][ T3652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3652 comm=syz.1.1282 [ 158.187756][ T3651] loop6: detected capacity change from 0 to 1 [ 158.243520][ T3655] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 158.256177][ T3655] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 158.264633][ T3655] CPU: 0 UID: 0 PID: 3655 Comm: syz.0.1283 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 158.276237][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.286333][ T3655] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 158.291866][ T3655] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 24 05 ce fd eb 0c e8 1d 05 ce fd eb 05 e8 16 05 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 70 c9 26 fe 4d 8b 36 4c 89 f7 e8 [ 158.311612][ T3655] RSP: 0018:ffffc9000f80f818 EFLAGS: 00010246 [ 158.317741][ T3655] RAX: 0000000000000000 RBX: ffff88814219e010 RCX: 0000000000080000 [ 158.325770][ T3655] RDX: ffffc900015f1000 RSI: 0000000000007c06 RDI: 0000000000007c07 [ 158.333792][ T3655] RBP: ffffc9000f80f840 R08: ffff888134fb2600 R09: 0000000000000004 [ 158.341814][ T3655] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 158.349828][ T3655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 158.357857][ T3655] FS: 00007f0929a976c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 158.366930][ T3655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.373561][ T3655] CR2: 00007f0928b87240 CR3: 0000000101680000 CR4: 00000000003526b0 [ 158.381582][ T3655] Call Trace: [ 158.384907][ T3655] [ 158.387872][ T3655] ? __cfi_dummy_udc_start+0x10/0x10 [ 158.393249][ T3655] gadget_bind_driver+0x3e1/0x9c0 [ 158.398335][ T3655] ? __cfi_gadget_bind_driver+0x10/0x10 [ 158.403940][ T3655] really_probe+0x2e1/0x8b0 [ 158.408503][ T3655] __driver_probe_device+0x193/0x280 [ 158.413850][ T3655] driver_probe_device+0x54/0x3f0 [ 158.418943][ T3655] __driver_attach+0x422/0x5e0 [ 158.423772][ T3655] bus_for_each_dev+0x249/0x2d0 [ 158.428677][ T3655] ? __cfi___driver_attach+0x10/0x10 [ 158.434114][ T3655] ? __cfi_bus_for_each_dev+0x10/0x10 [ 158.439540][ T3655] ? __kasan_kmalloc+0x96/0xb0 [ 158.444363][ T3655] ? _raw_spin_unlock+0x45/0x60 [ 158.449260][ T3655] ? klist_add_tail+0x1dd/0x220 [ 158.454158][ T3655] driver_attach+0x46/0x50 [ 158.458631][ T3655] bus_add_driver+0x393/0x730 [ 158.463357][ T3655] driver_register+0x2b7/0x3c0 [ 158.468162][ T3655] usb_gadget_register_driver_owner+0xfc/0x270 [ 158.474347][ T3655] raw_ioctl+0x144c/0x37a0 [ 158.478811][ T3655] ? __cfi_raw_ioctl+0x10/0x10 [ 158.483627][ T3655] ? selinux_file_ioctl+0x732/0x1480 [ 158.488957][ T3655] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 158.494554][ T3655] ? bpf_lsm_file_ioctl+0xd/0x20 [ 158.499574][ T3655] ? security_file_ioctl+0x3e/0x110 [ 158.504836][ T3655] ? __cfi_raw_ioctl+0x10/0x10 [ 158.509685][ T3655] __se_sys_ioctl+0x135/0x1b0 [ 158.514415][ T3655] __x64_sys_ioctl+0x7f/0xa0 [ 158.519059][ T3655] x64_sys_call+0x1878/0x2ee0 [ 158.523779][ T3655] do_syscall_64+0x57/0xf0 [ 158.528240][ T3655] ? clear_bhb_loop+0x50/0xa0 [ 158.532976][ T3655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.538920][ T3655] RIP: 0033:0x7f0928b9dd6b [ 158.543377][ T3655] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 158.563120][ T3655] RSP: 002b:00007f0929a94f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.571591][ T3655] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0928b9dd6b [ 158.579607][ T3655] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 158.587624][ T3655] RBP: 00007f0929a95fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 158.595732][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.603752][ T3655] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 158.611772][ T3655] [ 158.615268][ T3655] Modules linked in: [ 158.619348][ T3655] ---[ end trace 0000000000000000 ]--- [ 158.650286][ T3655] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 158.655942][ T3655] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 24 05 ce fd eb 0c e8 1d 05 ce fd eb 05 e8 16 05 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 70 c9 26 fe 4d 8b 36 4c 89 f7 e8 [ 158.676889][ T3655] RSP: 0018:ffffc9000f80f818 EFLAGS: 00010246 [ 158.683862][ T3655] RAX: 0000000000000000 RBX: ffff88814219e010 RCX: 0000000000080000 [ 158.692828][ T3655] RDX: ffffc900015f1000 RSI: 0000000000007c06 RDI: 0000000000007c07 [ 158.763115][ T3655] RBP: ffffc9000f80f840 R08: ffff888134fb2600 R09: 0000000000000004 [ 158.777758][ T3655] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 158.786656][ T3655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 158.795525][ T3655] FS: 00007f0929a976c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 158.805371][ T3655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.812834][ T3655] CR2: 00007f2fbfd87240 CR3: 0000000101680000 CR4: 00000000003526b0 [ 158.821705][ T3655] Kernel panic - not syncing: Fatal exception [ 158.828385][ T3655] Kernel Offset: disabled [ 158.832745][ T3655] Rebooting in 86400 seconds..