last executing test programs: 2.201371769s ago: executing program 1 (id=602): unshare(0x18010080) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1/file2/file3/file5\x00', 0xb2601, 0x11) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000004c0)={0x4, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) openat(r2, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x1a, 0x0, &(0x7f0000002740)) renameat2(r2, &(0x7f0000000540)='file3/file5\x00', r2, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) unlinkat(r0, &(0x7f0000000380)='./file0/file6\x00', 0x200) 2.17196918s ago: executing program 1 (id=605): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x830b41) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000340)=0x7) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 2.076154955s ago: executing program 1 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.013954538s ago: executing program 1 (id=610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x3, 0x7, 0x3, '\x00', 0x81}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic={0xeeef0000, 0xbf75, 0x0, 0xfb0, 0x0, [{0xe, 0x3, 0xff, '\x00', 0x4d}, {0x4, 0x5, 0x1, '\x00', 0x3}, {0x8, 0x4e, 0x8, '\x00', 0xcf}, {0x80, 0xf, 0x8, '\x00', 0x4}, {0x0, 0x1, 0x8, '\x00', 0x6}, {0x1, 0x4, 0x1, '\x00', 0xff}, {0x3, 0x6, 0x0, '\x00', 0x9}, {0xa, 0x2, 0xb, '\x00', 0x6}, {0xd, 0x83, 0x6, '\x00', 0x8}, {0x2, 0x0, 0xc, '\x00', 0x8}, {0x8, 0x4, 0x6, '\x00', 0xd}, {0x7f, 0x4, 0x9, '\x00', 0x6}, {0x81, 0x8, 0x0, '\x00', 0xfc}, {0xca, 0x4, 0xb, '\x00', 0x7f}, {0x5, 0x3, 0x5, '\x00', 0x4}, {0xba, 0x4, 0xf}, {0x7, 0x96, 0xba, '\x00', 0x10}, {0x0, 0xec, 0x0, '\x00', 0x3}, {0x40, 0x5c, 0xf, '\x00', 0x4}, {0x3, 0x5, 0x7, '\x00', 0x5}, {0x3, 0x8, 0xf7, '\x00', 0x60}, {0x92, 0x0, 0xf0, '\x00', 0x8}, {0x0, 0xaa, 0x3, '\x00', 0xbc}, {0xc0, 0x4, 0x63, '\x00', 0x7}]}}) 1.96017786s ago: executing program 0 (id=611): epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000005, &(0x7f0000000200)={[0x6]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x0, 0xd, 0xf, {0xf, 0x21, "71b4e281f1231c822b82d28ad8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000001ec0)={0x1, 0x3}) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3}, {0x4, 0x1, 0x0, 0x1}}], 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="8ecf0cdce016017e12aaf79c326afffbe21308f24d43d46d727a3806df8d72bd2c8f5b8a0a307b4d7af887f8583392be6564bc0597d8484c48f644ffe638391d715d2b7d64b5a846ec43eb107f9e58df", 0x50) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYRES16=r2], 0x6a) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="240000001e005f0214f6ffffffff0300000000000000000000000000080009000d000000", 0x24) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f00000001c0)) 1.945366691s ago: executing program 1 (id=612): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.822415808s ago: executing program 1 (id=614): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020000d21c0446402505a1a440000000010109023b00010100000009040000120206000005240600000524000a000d250f0109000000feff000000090582020002000000090503024002000200059f3eecbbb6387f82cdf19211016222441a586fec66a07ed10ddc361a000000000000000e82863796ccdb625cbeb62be61843c0f34fa74b9d31cdbf229d9550d8cf403b85dab0ab7772b0cf5d9b9370815993e03bb867d6e6e295e87434405a885c7ac86fd2bf582501808d2de5fe8e8dd1f4802467adaf6ae72b13976b9ba5668a531185498c17a2154e6205dee8448d747ac8ca4b4444d346b7120000000000"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x24}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000080, 0x0, 0xf027}]}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) r7 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x48, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x120, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5f, 0x1c, 0x4c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfa, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xd9, 0x8, 0xd5, 0xff, 0x1}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x0, 0x8e57}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "e52763073fbcd0d1019d44822474cbdc"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io$printer(r7, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0x1, 0x9a, {0xffffffffffffffa8, 0x5, "5f25a5833f11fbb43ff61338f739fe9821eeacd0c09a259595a22b77d2f0dc0a295335d3dca2195054951996a98c1cf8247fd0b9b6b27d3ba20a9eeb1322690713230da2b92bf1703b872ee7c8f363cfe74029badb28fde536dd92d07fab4ff847f544d7e51276bc83e9403d6de69ccdc23aa9fffdf50db2894c743ba6b9a0d5c72eef26c187e95995b2f87e64271c5676eb20f9a2c0cd10"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000680)={0x34, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0xdf, {0xdd, "730736464c10af684caa59285f9c18d28c44e5c87fd9837b706762e30b2cfdaae6490a664894d0261e467dce55ce34e54663bcb2d8e63e4d358ed391cbf5dc3c7a758617742434750d2cebd3434d823804ff1c7366b34fc05edd379daa9a412f270fd95bdee28c0b1f8071ed2ffaf9c04cbcb9fa7b27aaa9b526759ce79f8bd431ecee9bb1358da079efa5c8abe6ccbe66471a617329737ff1bf8769a0b1986dc03e91ac02b3508e378ee9f563ada53a009aaac8ca8c225512496d144ee3ca4055595ba906617c001be5112c36472774ef72be3254ef72bee6b5a8c004"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040027"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r8) mmap(&(0x7f0000acd000/0x4000)=nil, 0x4000, 0x2000009, 0x20010, 0xffffffffffffffff, 0xb1244000) r9 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f00000000c0)=""/55, 0x37) lseek(r11, 0x3, 0x0) 1.762970221s ago: executing program 2 (id=619): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003580)=""/4084, 0xff4}, {&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000680)=""/92, 0x5c}], 0xa}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0x1}], 0x6, 0x0, 0x0) 1.762662381s ago: executing program 2 (id=620): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x6}, {0x16, 0x0, 0x9b}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f", 0x8, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40204002}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x1cc, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x99d}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x661}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe689}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.708178674s ago: executing program 2 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.704352834s ago: executing program 2 (id=622): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0x1}], 0x6, 0x0, 0x0) 1.692698034s ago: executing program 2 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000180)={0x10201, 0x0, &(0x7f0000ed0000/0x4000)=nil}) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0x10, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000ec0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f01d1660f3a16a4008091ba200066ed640f0054370f30f336d06e0065d15db6650f18d1ba2100edba4000ed", 0x2c}], 0x1, 0x48, &(0x7f0000000100)=[@cr4], 0x1) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 1.540168742s ago: executing program 2 (id=624): pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a000007000000008300825f1792af63176b52ddea0000"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r4, 0x0, 0x0, 0x44001, &(0x7f0000000040)={0xa, 0x4e23, 0x11c9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x6, 0x0, [{}, {}, {}, {}, {}, {}]}}}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000000)={0x7, 0xbf}) clock_adjtime(0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000140)={0x5, 0x9, 0xffff2828, 0xf29, 0x38da}) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0089364, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ffc0000) 1.479318415s ago: executing program 0 (id=625): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000780)}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x0, 0x0) 1.469453635s ago: executing program 0 (id=626): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000825bd700049dbdf2505000000fcff07000400000005000700020000000800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r3 = gettid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r3, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 572.500141ms ago: executing program 0 (id=630): sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (fail_nth: 2) 572.31535ms ago: executing program 0 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 562.143551ms ago: executing program 0 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = accept4$packet(r1, 0x0, &(0x7f00000003c0), 0x800) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000400)=0x5, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a1070020eb688991a49201e66d2f00"/30, @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250a00000005002f000000000008000300", @ANYRES32=r6, @ANYBLOB="00000017a21d562c371832cedddd009ae6fd8c793eceeb19f8ee7a2d6c4260bb6e7fce3d518cf80063316eb5e857da8adab727abe8bc565879433f64687e10d87d69b90a073917e6c0961ac94183f5054601fc53bab237ba9c36ad5791dccdc29fe7e09fe3d3a8422483834fd752d42707061849b7bf6e925c65ac0aa20e409406d0b1292bbff413d26ff99713ea6a066386ff6618d85d2b40e0de6c1f00000000000000", @ANYRES32=r8, @ANYBLOB="08003400044a0000080032000008000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000000)={0xffffffff, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x7) 89.182385ms ago: executing program 3 (id=637): r0 = eventfd2(0x10, 0x80801) (async) mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000001d80), 0x6000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40800, 0x2, 0xc}, 0x18) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x1, 0x33) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000002580)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x8000000}}, 0x30) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2cea"]) 89.073425ms ago: executing program 3 (id=638): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r0], 0x20}}, 0x40816) 88.732285ms ago: executing program 3 (id=639): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup3(r1, r2, 0x80000) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r3, 0x0, r3, 0x0, 0x2, 0x99) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000008da88ff23180d647aa1d44720f2048c573e66f801db5e70f8a4a892c444a069757877ace31a8f92b6739812c7602157891766c9330580d424f59da451e70eef9bd430b8abf8306c9e504272a7247b594382a16d5d30a9885dbe377859722bdd19e54251996efc93f35ec08cc37b8157947e316ef54c7b238f79304d4e015982ae4", @ANYRES16=0x0, @ANYBLOB="01002fbd7000ffdbdf252b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000180000000a003400010101010101000004004600150024008916029298c88624c8ec48815c2483010c0000000400460028005180240000800800030005ac0f000900010016331a254b000000040006000500020003000000", @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@metacopy_on}, {@verity_require}]}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off}, {@redirect_dir_follow}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}], [{@obj_user={'obj_user', 0x3d, ':&],[+'}}]}) 24.826539ms ago: executing program 3 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.102378ms ago: executing program 3 (id=641): getpid() setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440)=0x1000, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x8, 0x0, 0x1}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x1000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0xffffffff, 0x38, @local, @private1, 0x8000, 0x40, 0x101, 0x6}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) 0s ago: executing program 3 (id=642): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0/file1/file2\x00', &(0x7f00000002c0)='./file0/file6\x00', 0x0, 0x1020, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x8, 0x54, 0x864, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0xc2, 0x5, 0x0, 0x1845, {[@md5sig={0x13, 0x12, "d965612ff5c11751214ada32ea9ebd17"}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x5, 0x1, 0xca}, @eol]}}}}}}}}, 0x66) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000004c0)={0x4, r5}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) openat(r3, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000540)='file3/file5\x00', r3, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 21.406153][ T36] audit: type=1400 audit(1773880636.590:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.407272][ T282] cgroup: Unknown subsys name 'net' [ 21.430092][ T36] audit: type=1400 audit(1773880636.590:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.458192][ T36] audit: type=1400 audit(1773880636.630:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.458382][ T282] cgroup: Unknown subsys name 'devices' [ 21.623914][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.629858][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.762921][ T36] audit: type=1400 audit(1773880636.950:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.788751][ T36] audit: type=1400 audit(1773880636.950:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.816770][ T36] audit: type=1400 audit(1773880636.950:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.826321][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.852380][ T36] audit: type=1400 audit(1773880637.040:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.878692][ T36] audit: type=1400 audit(1773880637.040:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.918424][ T36] audit: type=1400 audit(1773880637.100:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.945068][ T36] audit: type=1400 audit(1773880637.100:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.945336][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.782179][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.789850][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.798064][ T290] bridge_slave_0: entered allmulticast mode [ 22.804528][ T290] bridge_slave_0: entered promiscuous mode [ 22.820928][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.828249][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.835928][ T290] bridge_slave_1: entered allmulticast mode [ 22.842419][ T290] bridge_slave_1: entered promiscuous mode [ 22.855201][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.862979][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.870237][ T291] bridge_slave_0: entered allmulticast mode [ 22.876900][ T291] bridge_slave_0: entered promiscuous mode [ 22.886702][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.893901][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.901234][ T291] bridge_slave_1: entered allmulticast mode [ 22.908233][ T291] bridge_slave_1: entered promiscuous mode [ 22.931698][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.939029][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.946800][ T289] bridge_slave_0: entered allmulticast mode [ 22.953351][ T289] bridge_slave_0: entered promiscuous mode [ 22.963806][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.971683][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.979020][ T289] bridge_slave_1: entered allmulticast mode [ 22.986108][ T289] bridge_slave_1: entered promiscuous mode [ 23.037491][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.044723][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.052361][ T292] bridge_slave_0: entered allmulticast mode [ 23.058638][ T292] bridge_slave_0: entered promiscuous mode [ 23.068390][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.075876][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.083785][ T292] bridge_slave_1: entered allmulticast mode [ 23.090289][ T292] bridge_slave_1: entered promiscuous mode [ 23.213043][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.220618][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.228324][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.235840][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.260574][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.268042][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.275349][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.282756][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.302223][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.309714][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.317723][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.325091][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.349955][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.357301][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.364920][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.372257][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.394873][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.403023][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.410690][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.418906][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.426569][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.434214][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.442007][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.449431][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.464530][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471721][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.484743][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.492216][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.516996][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.524493][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.532522][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.540294][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.563185][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.570591][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.579216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.586312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.596841][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.604303][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.622398][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.629771][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.677347][ T289] veth0_vlan: entered promiscuous mode [ 23.692394][ T290] veth0_vlan: entered promiscuous mode [ 23.705628][ T292] veth0_vlan: entered promiscuous mode [ 23.723997][ T289] veth1_macvtap: entered promiscuous mode [ 23.735683][ T291] veth0_vlan: entered promiscuous mode [ 23.748513][ T292] veth1_macvtap: entered promiscuous mode [ 23.764100][ T290] veth1_macvtap: entered promiscuous mode [ 23.776869][ T291] veth1_macvtap: entered promiscuous mode [ 23.809600][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.847362][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.391566][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.542840][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 24.553211][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.569355][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.578817][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 24.587346][ T31] usb 2-1: SerialNumber: syz [ 24.594627][ T359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.811755][ T359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 25.062813][ T393] capability: warning: `syz.2.23' uses 32-bit capabilities (legacy support in use) [ 25.073759][ T393] ======================================================= [ 25.073759][ T393] WARNING: The mand mount option has been deprecated and [ 25.073759][ T393] and is ignored by this kernel. Remove the mand [ 25.073759][ T393] option from the mount to silence this warning. [ 25.073759][ T393] ======================================================= [ 25.135078][ T396] SELinux: policydb table sizes (4,0) do not match mine (8,7) [ 25.143411][ T396] SELinux: failed to load policy [ 25.235427][ T31] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 25.390015][ T403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.649191][ T9] usb 2-1: USB disconnect, device number 2 [ 25.656009][ T9] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 26.073481][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 26.098652][ T467] Zero length message leads to an empty skb [ 26.546077][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 26.546097][ T36] audit: type=1400 audit(1773880641.730:177): avc: denied { setopt } for pid=497 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.592988][ T502] tipc: Failed to remove unknown binding: 66,0,0/0:2448867605/2448867606 [ 26.593051][ T36] audit: type=1400 audit(1773880641.780:178): avc: denied { bind } for pid=501 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.612480][ T502] tipc: Failed to remove unknown binding: 66,0,0/0:2448867605/2448867606 [ 26.697328][ T36] audit: type=1400 audit(1773880641.880:179): avc: denied { bind } for pid=503 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.745640][ T36] audit: type=1400 audit(1773880641.880:180): avc: denied { setopt } for pid=503 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.776430][ T36] audit: type=1400 audit(1773880641.880:181): avc: denied { write } for pid=503 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.809470][ T36] audit: type=1400 audit(1773880641.990:182): avc: denied { remount } for pid=507 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.967254][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 26.979683][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 27.189125][ T36] audit: type=1400 audit(1773880642.370:183): avc: denied { shutdown } for pid=527 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.239227][ T36] audit: type=1400 audit(1773880642.370:184): avc: denied { remount } for pid=529 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.350334][ T36] audit: type=1400 audit(1773880642.530:185): avc: denied { ioctl } for pid=535 comm="syz.3.67" path="socket:[5130]" dev="sockfs" ino=5130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.680458][ T36] audit: type=1400 audit(1773880642.860:186): avc: denied { mount } for pid=565 comm="syz.3.79" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.961551][ T379] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.091719][ T379] usb 2-1: device descriptor read/64, error -71 [ 28.240760][ T584] raw_sendmsg: syz.0.87 forgot to set AF_INET. Fix it! [ 28.341577][ T379] usb 2-1: device descriptor read/64, error -71 [ 28.351590][ T63] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 28.491576][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.502828][ T63] usb 4-1: descriptor type invalid, skip [ 28.508632][ T63] usb 4-1: No LPM exit latency info found, disabling LPM. [ 28.516783][ T63] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 28.527688][ T63] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 28.539373][ T63] usb 4-1: string descriptor 0 read error: -22 [ 28.545912][ T63] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 28.555184][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.581677][ T379] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.643884][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.652625][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.663787][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.675839][ T10] usb 3-1: string descriptor 0 read error: -22 [ 28.682485][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 28.692172][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.702606][ T10] usb 3-1: 0:1 : does not exist [ 28.708018][ T10] usb 3-1: BAAD HEADSET c_chmask mismatch [ 28.715956][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.719401][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.742184][ T379] usb 2-1: device descriptor read/64, error -71 [ 28.773220][ T578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 28.786034][ T10] hid-generic 000F:FFFFFFFA:0009.0001: unknown main item tag 0x5 [ 28.796028][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 28.796952][ T10] hid-generic 000F:FFFFFFFA:0009.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 28.818901][ T10] usb 4-1: USB disconnect, device number 2 [ 28.874527][ T597] fido_id[597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 28.981685][ T379] usb 2-1: device descriptor read/64, error -71 [ 29.058833][ T599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.068057][ T599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.077821][ T10] usb 3-1: USB disconnect, device number 2 [ 29.091781][ T379] usb usb2-port1: attempt power cycle [ 29.154912][ T602] SELinux: policydb table sizes (4,0) do not match mine (8,7) [ 29.162757][ T602] SELinux: failed to load policy [ 29.451928][ T379] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.472655][ T379] usb 2-1: device descriptor read/8, error -71 [ 29.603289][ T379] usb 2-1: device descriptor read/8, error -71 [ 29.851970][ T379] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.882636][ T379] usb 2-1: device descriptor read/8, error -71 [ 30.008198][ T611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.94'. [ 30.023990][ T379] usb 2-1: device descriptor read/8, error -71 [ 30.181659][ T379] usb usb2-port1: unable to enumerate USB device [ 30.338142][ T630] netlink: 'syz.0.103': attribute type 19 has an invalid length. [ 30.346179][ T630] netlink: 5 bytes leftover after parsing attributes in process `syz.0.103'. [ 30.641701][ T379] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.725205][ T634] netlink: 68 bytes leftover after parsing attributes in process `syz.1.105'. [ 30.793298][ T379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.804730][ T379] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 30.814371][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.823276][ T379] usb 4-1: Product: syz [ 30.828000][ T379] usb 4-1: Manufacturer: syz [ 30.833055][ T379] usb 4-1: SerialNumber: syz [ 31.050700][ T632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.065546][ T632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.090437][ T379] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 31.115450][ T379] usb 4-1: unit 2 not found! [ 31.120370][ T379] usb 4-1: unit 8 not found! [ 31.177239][ T379] usb 4-1: USB disconnect, device number 3 [ 31.715430][ T36] kauditd_printk_skb: 7706 callbacks suppressed [ 31.715449][ T36] audit: type=1400 audit(1773880646.900:7893): avc: denied { read } for pid=655 comm="syz.1.111" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.804275][ T666] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 31.813051][ T666] netlink: 'syz.3.117': attribute type 27 has an invalid length. [ 31.821151][ T666] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.117'. [ 32.011532][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.141546][ T10] usb 3-1: device descriptor read/64, error -71 [ 32.357444][ T36] audit: type=1400 audit(1773880647.540:7894): avc: denied { read write } for pid=672 comm="syz.3.119" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.381938][ T10] usb 3-1: device descriptor read/64, error -71 [ 32.381951][ T36] audit: type=1400 audit(1773880647.540:7895): avc: denied { open } for pid=672 comm="syz.3.119" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.416267][ T36] audit: type=1400 audit(1773880647.570:7896): avc: denied { mounton } for pid=672 comm="syz.3.119" path="/31/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.491462][ T36] audit: type=1400 audit(1773880647.670:7897): avc: denied { create } for pid=672 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 32.621537][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.751546][ T10] usb 3-1: device descriptor read/64, error -71 [ 32.991578][ T10] usb 3-1: device descriptor read/64, error -71 [ 33.101800][ T10] usb usb3-port1: attempt power cycle [ 33.193400][ T36] audit: type=1400 audit(1773880648.380:7898): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.248636][ T683] SELinux: policydb version -963941548 does not match my version range 15-33 [ 33.257790][ T683] SELinux: failed to load policy [ 33.275504][ T36] audit: type=1400 audit(1773880648.460:7899): avc: denied { connect } for pid=686 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.302099][ T36] audit: type=1400 audit(1773880648.490:7900): avc: denied { getopt } for pid=686 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.441688][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.462982][ T10] usb 3-1: device descriptor read/8, error -71 [ 33.602750][ T10] usb 3-1: device descriptor read/8, error -71 [ 33.674930][ T36] audit: type=1400 audit(1773880648.860:7901): avc: denied { create } for pid=700 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.723439][ T703] netlink: 204 bytes leftover after parsing attributes in process `syz.1.131'. [ 33.861499][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.869232][ T36] audit: type=1400 audit(1773880649.050:7902): avc: denied { create } for pid=710 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.907618][ T10] usb 3-1: device descriptor read/8, error -71 [ 33.951113][ T717] SELinux: policydb string length 43 does not match expected length 8 [ 33.971531][ T717] SELinux: failed to load policy [ 34.042838][ T10] usb 3-1: device descriptor read/8, error -71 [ 34.149997][ T726] netlink: 'syz.3.141': attribute type 4 has an invalid length. [ 34.151646][ T10] usb usb3-port1: unable to enumerate USB device [ 34.157992][ T726] netlink: 'syz.3.141': attribute type 27 has an invalid length. [ 34.172875][ T726] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.141'. [ 34.680379][ T737] netlink: 68 bytes leftover after parsing attributes in process `syz.0.146'. [ 34.861485][ T764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.155'. [ 34.972251][ T773] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.061507][ T379] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.233738][ T379] usb 2-1: Using ep0 maxpacket: 32 [ 35.244125][ T379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.260964][ T379] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 35.273601][ T379] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 35.284740][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.294340][ T379] usb 2-1: Product: syz [ 35.303276][ T379] usb 2-1: Manufacturer: syz [ 35.309361][ T379] usb 2-1: SerialNumber: syz [ 35.318859][ T379] usb 2-1: config 0 descriptor?? [ 35.972752][ T818] capability: warning: `syz.0.188' uses deprecated v2 capabilities in a way that may be insecure [ 36.051551][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.201527][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 36.208774][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.220304][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.230716][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.245978][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.255850][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.265276][ T10] usb 3-1: config 0 descriptor?? [ 36.679998][ T809] netlink: 'syz.2.177': attribute type 12 has an invalid length. [ 36.793623][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 36.800010][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.809459][ T10] usb 3-1: USB disconnect, device number 7 [ 37.251314][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 37.251332][ T36] audit: type=1400 audit(1773913420.430:7918): avc: denied { getopt } for pid=823 comm="syz.0.190" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.314021][ T36] audit: type=1400 audit(1773913420.500:7919): avc: denied { ioctl } for pid=832 comm="syz.2.182" path="socket:[5819]" dev="sockfs" ino=5819 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.349431][ T36] audit: type=1400 audit(1773913420.530:7920): avc: denied { read } for pid=834 comm="syz.3.183" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.376139][ T835] netlink: 'syz.3.183': attribute type 20 has an invalid length. [ 37.387375][ T36] audit: type=1400 audit(1773913420.530:7921): avc: denied { open } for pid=834 comm="syz.3.183" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.414161][ T36] audit: type=1400 audit(1773913420.560:7922): avc: denied { ioctl } for pid=834 comm="syz.3.183" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.458536][ T833] netlink: 25 bytes leftover after parsing attributes in process `syz.2.182'. [ 37.470922][ T833] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 37.483136][ T36] audit: type=1400 audit(1773913420.670:7923): avc: denied { shutdown } for pid=832 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.584776][ T36] audit: type=1400 audit(1773913420.770:7924): avc: denied { mounton } for pid=851 comm="syz.3.192" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 37.601557][ T852] netlink: 260 bytes leftover after parsing attributes in process `syz.3.192'. [ 37.815534][ T587] usb 2-1: USB disconnect, device number 7 [ 38.587687][ T36] audit: type=1400 audit(1773913421.770:7925): avc: denied { read } for pid=890 comm="syz.2.208" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.611002][ T36] audit: type=1400 audit(1773913421.770:7926): avc: denied { open } for pid=890 comm="syz.2.208" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.711584][ T898] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 38.738969][ T36] audit: type=1400 audit(1773913421.920:7927): avc: denied { write } for pid=899 comm="syz.1.211" path="socket:[6950]" dev="sockfs" ino=6950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.928836][ T379] kernel read not supported for file /ppp (pid: 379 comm: kworker/1:4) [ 39.257347][ T926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 39.794132][ T933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=933 comm=syz.2.225 [ 39.839178][ T935] netlink: 25 bytes leftover after parsing attributes in process `syz.0.224'. [ 39.850597][ T935] netlink: 'syz.0.224': attribute type 4 has an invalid length. [ 39.881769][ T938] SELinux: policydb string length 43 does not match expected length 8 [ 39.890352][ T938] SELinux: failed to load policy [ 39.915717][ T942] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 39.923885][ T942] netlink: 17 bytes leftover after parsing attributes in process `syz.0.228'. [ 40.679954][ T959] SELinux: policydb string length 43 does not match expected length 8 [ 40.689117][ T959] SELinux: failed to load policy [ 40.834133][ T971] fuse: Bad value for 'user_id' [ 40.841571][ T971] fuse: Bad value for 'user_id' [ 41.023378][ T975] tmpfs: Unknown parameter 'indo64' [ 41.061532][ T587] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.094600][ T982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.244'. [ 41.231583][ T587] usb 4-1: Using ep0 maxpacket: 32 [ 41.238391][ T587] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.247139][ T587] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.258155][ T587] usb 4-1: config 0 has no interface number 0 [ 41.265209][ T587] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 41.275857][ T587] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.291977][ T587] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.301220][ T587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.309879][ T587] usb 4-1: Product: syz [ 41.314103][ T587] usb 4-1: Manufacturer: syz [ 41.318884][ T587] usb 4-1: SerialNumber: syz [ 41.324562][ T587] usb 4-1: config 0 descriptor?? [ 41.331085][ T587] smsc95xx v2.0.0 [ 41.335234][ T587] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 41.346241][ T587] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 41.601943][ T989] netlink: 'syz.2.246': attribute type 15 has an invalid length. [ 41.612054][ T989] rust_binder: 116: no such ref 1 [ 41.617766][ T989] rust_binder: 116: no such ref 2 [ 41.623051][ T989] rust_binder: Read failure Err(EAGAIN) in pid:116 [ 41.921520][ T379] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 42.016019][ T1000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=1000 comm=syz.0.252 [ 42.090030][ T379] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.099718][ T379] usb 3-1: not running at top speed; connect to a high speed hub [ 42.108911][ T379] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 42.121026][ T379] usb 3-1: config 1 interface 0 has no altsetting 0 [ 42.132761][ T1013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 42.133691][ T379] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 42.146632][ T1013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.258'. [ 42.153308][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.170592][ T379] usb 3-1: Product: 霍倐찓Ἄ 者沏魺ఁ䙃䡎糤Ⓚ䩜⾯㥺椚驔궫槂뭻쿻ᾖᯘ⃯䴡茋슞ズ叐櫽桲ﯗ࣪യ鲌砃⾹⏋碳綢꘧귷꧆锧絩廀⭏忒쩵땒㊏垣௖뼏夆틮覶䮨윴㩽찗㕬ꗣ殝쒡䍮㼢鍆蘃炑嘛嵐箪炠ꒀ亢≓죥什Ί᢯튬፬豬퉿懳銖ㇼ건↭霼刨몧஭퉸篤앉ၚ❐ [ 42.172070][ T1013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1013 comm=syz.0.258 [ 42.205251][ T379] usb 3-1: SerialNumber: syz [ 42.233859][ T997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 42.243792][ T1018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.260'. [ 42.260059][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 42.260078][ T36] audit: type=1400 audit(1773913425.440:7941): avc: denied { wake_alarm } for pid=1012 comm="syz.0.258" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.409505][ T1038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.269'. [ 42.465315][ T379] usbhid 3-1:1.0: can't add hid device: -71 [ 42.471668][ T379] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 42.483598][ T379] usb 3-1: USB disconnect, device number 8 [ 42.503320][ T36] audit: type=1400 audit(1773913425.690:7942): avc: denied { getopt } for pid=1035 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.004495][ T1052] fuse: Bad value for 'fd' [ 43.471574][ T379] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.570139][ T1072] tipc: Started in network mode [ 43.575472][ T1072] tipc: Node identity 7f000001, cluster identity 4711 [ 43.582786][ T1072] tipc: Enabling of bearer rejected, failed to enable media [ 43.593214][ T1072] 9pnet_fd: Insufficient options for proto=fd [ 43.602810][ T36] audit: type=1400 audit(1773913426.790:7943): avc: denied { create } for pid=1071 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.603197][ T1072] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 43.631100][ T1072] tipc: Enabled bearer , priority 10 [ 43.638449][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.656883][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.681004][ T379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.694533][ T379] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.705502][ T1091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 43.705600][ T36] audit: type=1400 audit(1773913426.890:7944): avc: denied { write } for pid=1089 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.715031][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.715839][ T379] usb 3-1: config 0 descriptor?? [ 43.737658][ T1091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.286'. [ 43.767403][ T1091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1091 comm=syz.1.286 [ 43.834793][ T31] usb 4-1: USB disconnect, device number 4 [ 44.009520][ T1118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 44.020153][ T1118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.298'. [ 44.034193][ T1118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1118 comm=syz.3.298 [ 44.151275][ T379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 44.159957][ T379] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 44.161549][ T587] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.172125][ T379] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 44.266856][ T1129] netlink: 68 bytes leftover after parsing attributes in process `syz.0.303'. [ 44.311635][ T820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.321790][ T587] usb 2-1: Using ep0 maxpacket: 32 [ 44.328583][ T587] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.337044][ T587] usb 2-1: config 0 has no interface number 0 [ 44.345055][ T587] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.354750][ T587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.363245][ T587] usb 2-1: Product: syz [ 44.367451][ T587] usb 2-1: Manufacturer: syz [ 44.372477][ T587] usb 2-1: SerialNumber: syz [ 44.378878][ T587] usb 2-1: config 0 descriptor?? [ 44.384880][ T587] smsc95xx v2.0.0 [ 44.421990][ T10] usb 3-1: USB disconnect, device number 9 [ 44.461534][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 44.462524][ T1136] incfs: Error accessing: ./file0. [ 44.467145][ T36] audit: type=1400 audit(1773913427.650:7945): avc: denied { mounton } for pid=1135 comm="syz.0.305" path="/125/file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 44.472472][ T1136] incfs: mount failed -20 [ 44.498011][ T820] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.509955][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.521583][ T820] usb 4-1: config 0 has no interface number 0 [ 44.528285][ T820] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 44.539802][ T820] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.556127][ T820] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.563194][ T1146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 44.566381][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.584040][ T820] usb 4-1: Product: syz [ 44.591297][ T820] usb 4-1: Manufacturer: syz [ 44.597045][ T820] usb 4-1: SerialNumber: syz [ 44.603338][ T820] usb 4-1: config 0 descriptor?? [ 44.611222][ T820] smsc95xx v2.0.0 [ 44.615987][ T820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 44.623370][ T1153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.312'. [ 44.626802][ T820] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 44.659837][ T1155] SELinux: policydb string length 43 does not match expected length 8 [ 44.668486][ T1155] SELinux: failed to load policy [ 44.716494][ T1157] netlink: 57 bytes leftover after parsing attributes in process `syz.0.314'. [ 44.728746][ T1157] netlink: 'syz.0.314': attribute type 4 has an invalid length. [ 44.737015][ T1157] netlink: 'syz.0.314': attribute type 27 has an invalid length. [ 44.745337][ T1157] netlink: 3609 bytes leftover after parsing attributes in process `syz.0.314'. [ 44.755031][ T31] tipc: Node number set to 2130706433 [ 44.789158][ T587] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 44.800646][ T587] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.821906][ T587] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 44.833251][ T587] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 44.966826][ T36] audit: type=1400 audit(1773913428.150:7946): avc: denied { map } for pid=1161 comm="syz.2.316" path="socket:[8021]" dev="sockfs" ino=8021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.992655][ T36] audit: type=1400 audit(1773913428.150:7947): avc: denied { accept } for pid=1161 comm="syz.2.316" path="socket:[8021]" dev="sockfs" ino=8021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.033157][ T36] audit: type=1400 audit(1773913428.220:7948): avc: denied { execstack } for pid=1165 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.271254][ T1184] GUP no longer grows the stack in syz.0.326 (1184): 200000005000-200000008000 (200000004000) [ 45.281996][ T1184] CPU: 1 UID: 0 PID: 1184 Comm: syz.0.326 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 45.282032][ T1184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.282044][ T1184] Call Trace: [ 45.282051][ T1184] [ 45.282057][ T1184] __dump_stack+0x21/0x30 [ 45.282078][ T1184] dump_stack_lvl+0x140/0x1c0 [ 45.282092][ T1184] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.282107][ T1184] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 45.282123][ T1184] dump_stack+0x19/0x20 [ 45.282137][ T1184] fixup_user_fault+0x62a/0x6b0 [ 45.282150][ T1184] fault_in_user_writeable+0x75/0xe0 [ 45.282171][ T1184] futex_lock_pi+0x2d7/0xa70 [ 45.282184][ T1184] ? __cfi_futex_lock_pi+0x10/0x10 [ 45.282198][ T1184] ? __cfi_futex_wake_mark+0x10/0x10 [ 45.282214][ T1184] ? futex_setup_timer+0xb4/0xd0 [ 45.282226][ T1184] ? __cfi_futex_wake_mark+0x10/0x10 [ 45.282242][ T1184] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 45.282259][ T1184] ? mas_find+0x358/0x5f0 [ 45.282271][ T1184] do_futex+0x270/0x510 [ 45.282283][ T1184] ? do_vmi_munmap+0x245/0x2e0 [ 45.282300][ T1184] ? __cfi_do_futex+0x10/0x10 [ 45.282313][ T1184] ? __vm_munmap+0x2de/0x390 [ 45.282328][ T1184] __se_sys_futex+0x13c/0x320 [ 45.282341][ T1184] ? __x64_sys_futex+0x110/0x110 [ 45.282353][ T1184] ? __kasan_check_write+0x18/0x20 [ 45.282368][ T1184] __x64_sys_futex+0xe9/0x110 [ 45.282380][ T1184] x64_sys_call+0x227f/0x2ee0 [ 45.282404][ T1184] do_syscall_64+0x57/0xf0 [ 45.282426][ T1184] ? clear_bhb_loop+0x50/0xa0 [ 45.282450][ T1184] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.282468][ T1184] RIP: 0033:0x7f3250d9c799 [ 45.282480][ T1184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.282489][ T1184] RSP: 002b:00007f324f7f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.282504][ T1184] RAX: ffffffffffffffda RBX: 00007f3251015fa0 RCX: 00007f3250d9c799 [ 45.282513][ T1184] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 45.282521][ T1184] RBP: 00007f3250e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 45.282528][ T1184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.282535][ T1184] R13: 00007f3251016038 R14: 00007f3251015fa0 R15: 00007fff3a46f398 [ 45.282545][ T1184] [ 45.681217][ T1197] netlink: 25 bytes leftover after parsing attributes in process `syz.0.331'. [ 45.693386][ T1197] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 46.401656][ T587] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.551529][ T587] usb 3-1: Using ep0 maxpacket: 32 [ 46.558134][ T587] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7 [ 46.570225][ T587] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 226, changing to 7 [ 46.584043][ T587] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 46.593476][ T587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.601882][ T587] usb 3-1: Product: syz [ 46.606441][ T587] usb 3-1: Manufacturer: syz [ 46.611732][ T587] usb 3-1: SerialNumber: syz [ 46.803931][ T1237] FAULT_INJECTION: forcing a failure. [ 46.803931][ T1237] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.817756][ T1237] CPU: 1 UID: 0 PID: 1237 Comm: syz.0.346 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 46.817791][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.817808][ T1237] Call Trace: [ 46.817816][ T1237] [ 46.817824][ T1237] __dump_stack+0x21/0x30 [ 46.817853][ T1237] dump_stack_lvl+0x140/0x1c0 [ 46.817876][ T1237] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.817899][ T1237] ? check_stack_object+0x12b/0x150 [ 46.817924][ T1237] dump_stack+0x19/0x20 [ 46.817940][ T1237] should_fail_ex+0x3d7/0x530 [ 46.817954][ T1237] should_fail+0xf/0x20 [ 46.817966][ T1237] should_fail_usercopy+0x1e/0x30 [ 46.817979][ T1237] _copy_to_user+0x24/0xa0 [ 46.818002][ T1237] simple_read_from_buffer+0xed/0x160 [ 46.818024][ T1237] proc_fail_nth_read+0x1aa/0x220 [ 46.818045][ T1237] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.818066][ T1237] ? bpf_lsm_file_permission+0xd/0x20 [ 46.818084][ T1237] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 46.818096][ T1237] vfs_read+0x289/0xcb0 [ 46.818111][ T1237] ? __cfi_vfs_read+0x10/0x10 [ 46.818124][ T1237] ? __kasan_check_write+0x18/0x20 [ 46.818140][ T1237] ? mutex_lock+0x97/0x1d0 [ 46.818167][ T1237] ? __cfi_mutex_lock+0x10/0x10 [ 46.818192][ T1237] ? __fget_files+0x2c5/0x340 [ 46.818388][ T1237] ksys_read+0x145/0x260 [ 46.818410][ T1237] ? __cfi_ksys_read+0x10/0x10 [ 46.818430][ T1237] ? fdget+0x188/0x1e0 [ 46.818452][ T1237] ? __kasan_check_read+0x15/0x20 [ 46.818474][ T1237] __x64_sys_read+0x7f/0x90 [ 46.818498][ T1237] x64_sys_call+0x2638/0x2ee0 [ 46.818523][ T1237] do_syscall_64+0x57/0xf0 [ 46.818547][ T1237] ? clear_bhb_loop+0x50/0xa0 [ 46.818570][ T1237] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.818585][ T1237] RIP: 0033:0x7f3250d5cfce [ 46.818597][ T1237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.818607][ T1237] RSP: 002b:00007f324f7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.818656][ T1237] RAX: ffffffffffffffda RBX: 00007f324f7f76c0 RCX: 00007f3250d5cfce [ 46.818671][ T1237] RDX: 000000000000000f RSI: 00007f324f7f70a0 RDI: 0000000000000003 [ 46.818684][ T1237] RBP: 00007f324f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.818697][ T1237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.818708][ T1237] R13: 00007f3251016038 R14: 00007f3251015fa0 R15: 00007fff3a46f398 [ 46.818804][ T1237] [ 46.935783][ T820] usb 2-1: USB disconnect, device number 8 [ 47.084903][ T45] usb 4-1: USB disconnect, device number 5 [ 47.094291][ T1251] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 47.181523][ T36] audit: type=1400 audit(1773913430.360:7949): avc: denied { ioctl } for pid=1262 comm="syz.0.356" path="socket:[9448]" dev="sockfs" ino=9448 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.285402][ T1267] netlink: 'syz.1.358': attribute type 4 has an invalid length. [ 47.414482][ T1284] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 47.433372][ T1284] sit0: entered promiscuous mode [ 47.439981][ T1284] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 47.571607][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.692796][ T1303] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 47.731502][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 47.739685][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.748295][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.759630][ T45] usb 4-1: config 0 has no interface number 0 [ 47.767325][ T45] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.783307][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.792798][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.801865][ T45] usb 4-1: Product: syz [ 47.806523][ T45] usb 4-1: Manufacturer: syz [ 47.811157][ T45] usb 4-1: SerialNumber: syz [ 47.817335][ T45] usb 4-1: config 0 descriptor?? [ 47.823562][ T45] smsc95xx v2.0.0 [ 47.827471][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 47.838033][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 47.941579][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.071523][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.311579][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.551539][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.681537][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.921574][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.031648][ T31] usb usb2-port1: attempt power cycle [ 49.171343][ T587] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 49.178695][ T587] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 49.189734][ T587] usb 3-1: USB disconnect, device number 10 [ 49.234749][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.371682][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.399976][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.532853][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.771643][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.797166][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.907069][ T1350] incfs: Backing dir is not set, filesystem can't be mounted. [ 49.915147][ T1350] incfs: mount failed -2 [ 49.932665][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.981156][ T36] audit: type=1400 audit(1773913433.160:7950): avc: denied { read } for pid=1359 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.041636][ T31] usb usb2-port1: unable to enumerate USB device [ 50.265772][ T1390] __nla_validate_parse: 4 callbacks suppressed [ 50.265787][ T1390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.406'. [ 50.284230][ T1390] syz.2.406: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 50.297687][ T10] usb 4-1: USB disconnect, device number 6 [ 50.307196][ T1390] CPU: 1 UID: 0 PID: 1390 Comm: syz.2.406 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 50.307229][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.307239][ T1390] Call Trace: [ 50.307244][ T1390] [ 50.307251][ T1390] __dump_stack+0x21/0x30 [ 50.307279][ T1390] dump_stack_lvl+0x140/0x1c0 [ 50.307300][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.307322][ T1390] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 50.307345][ T1390] dump_stack+0x19/0x20 [ 50.307365][ T1390] warn_alloc+0x1e7/0x2c0 [ 50.307385][ T1390] ? kasan_save_free_info+0x4a/0x60 [ 50.307406][ T1390] ? __cfi_warn_alloc+0x10/0x10 [ 50.307425][ T1390] ? __get_vm_area_node+0x201/0x3d0 [ 50.307445][ T1390] ? packet_set_ring+0x745/0x28c0 [ 50.307466][ T1390] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 50.307486][ T1390] ? packet_set_ring+0x679/0x28c0 [ 50.307506][ T1390] ? do_sock_setsockopt+0x27f/0x410 [ 50.307526][ T1390] ? __x64_sys_setsockopt+0x1b7/0x250 [ 50.307558][ T1390] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 50.307579][ T1390] ? __asan_memset+0x39/0x50 [ 50.307600][ T1390] ? __alloc_pages_noprof+0xe0/0x7e0 [ 50.307620][ T1390] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 50.307639][ T1390] ? packet_set_ring+0x745/0x28c0 [ 50.307658][ T1390] vzalloc_noprof+0x103/0x1d0 [ 50.307678][ T1390] ? packet_set_ring+0x745/0x28c0 [ 50.307697][ T1390] ? __cfi_vzalloc_noprof+0x10/0x10 [ 50.307717][ T1390] ? packet_set_ring+0x679/0x28c0 [ 50.307737][ T1390] packet_set_ring+0x745/0x28c0 [ 50.307758][ T1390] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 50.307779][ T1390] ? check_stack_object+0x12b/0x150 [ 50.307801][ T1390] ? packet_mmap+0x590/0x590 [ 50.307820][ T1390] ? __check_object_size+0xe0/0x830 [ 50.307841][ T1390] ? __asan_memcpy+0x5a/0x80 [ 50.307862][ T1390] ? __cfi___check_object_size+0x10/0x10 [ 50.307884][ T1390] ? avc_has_perm_noaudit+0x28a/0x360 [ 50.307909][ T1390] ? __kasan_check_write+0x18/0x20 [ 50.307931][ T1390] packet_setsockopt+0xdb5/0x1510 [ 50.307951][ T1390] ? __cfi_packet_setsockopt+0x10/0x10 [ 50.307971][ T1390] ? selinux_socket_setsockopt+0x324/0x3d0 [ 50.307997][ T1390] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 50.308022][ T1390] ? __kasan_check_read+0x15/0x20 [ 50.308043][ T1390] ? __seccomp_filter+0x483/0x1b60 [ 50.308062][ T1390] ? do_futex+0x32a/0x510 [ 50.308082][ T1390] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 50.308107][ T1390] ? security_socket_setsockopt+0x3d/0x100 [ 50.308123][ T1390] ? __cfi_packet_setsockopt+0x10/0x10 [ 50.308143][ T1390] do_sock_setsockopt+0x27f/0x410 [ 50.308164][ T1390] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 50.308187][ T1390] __x64_sys_setsockopt+0x1b7/0x250 [ 50.308208][ T1390] x64_sys_call+0x2adc/0x2ee0 [ 50.308232][ T1390] do_syscall_64+0x57/0xf0 [ 50.308254][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 50.308277][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.308299][ T1390] RIP: 0033:0x7f562ff9c799 [ 50.308314][ T1390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.308328][ T1390] RSP: 002b:00007f5630e5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.308347][ T1390] RAX: ffffffffffffffda RBX: 00007f5630215fa0 RCX: 00007f562ff9c799 [ 50.308360][ T1390] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 50.308370][ T1390] RBP: 00007f5630032c99 R08: 000000000000001c R09: 0000000000000000 [ 50.308381][ T1390] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 50.308391][ T1390] R13: 00007f5630216038 R14: 00007f5630215fa0 R15: 00007ffde70f5e98 [ 50.308405][ T1390] [ 50.308412][ T1390] Mem-Info: [ 50.308420][ T1390] active_anon:74457 inactive_anon:0 isolated_anon:0 [ 50.308420][ T1390] active_file:23389 inactive_file:2617 isolated_file:0 [ 50.308420][ T1390] unevictable:0 dirty:191 writeback:0 [ 50.308420][ T1390] slab_reclaimable:5493 slab_unreclaimable:71542 [ 50.308420][ T1390] mapped:24479 shmem:67989 pagetables:842 [ 50.308420][ T1390] sec_pagetables:0 bounce:0 [ 50.308420][ T1390] kernel_misc_reclaimable:0 [ 50.308420][ T1390] free:1453103 free_pcp:2596 free_cma:0 [ 50.308465][ T1390] Node 0 active_anon:297828kB inactive_anon:0kB active_file:93556kB inactive_file:10468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97916kB dirty:764kB writeback:0kB shmem:271956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5156kB pagetables:3368kB sec_pagetables:0kB all_unreclaimable? no [ 50.308510][ T1390] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:540kB free_cma:0kB [ 50.631098][ T1400] netlink: 'syz.1.409': attribute type 4 has an invalid length. [ 50.639204][ T1390] lowmem_reserve[]: [ 50.654075][ T1400] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.409'. [ 50.662922][ T1390] 0 [ 50.708478][ T1402] fuse: Bad value for 'fd' [ 50.767925][ T1390] 3921 3921 [ 50.831694][ T1390] Normal free:2854760kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:297872kB inactive_anon:0kB active_file:93556kB inactive_file:10476kB unevictable:0kB writepending:768kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4124kB local_pcp:2860kB free_cma:0kB [ 50.864612][ T1390] lowmem_reserve[]: 0 0 0 [ 50.869262][ T1390] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 6*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 50.885698][ T1390] Normal: 10*4kB (UME) 12*8kB (UE) 94*16kB (UME) 26*32kB (UME) 132*64kB (UME) 154*128kB (UME) 22*256kB (UME) 11*512kB (ME) 5*1024kB (ME) 9*2048kB (UME) 681*4096kB (M) = 2854824kB [ 50.905425][ T1390] 93991 total pagecache pages [ 50.910795][ T1390] 0 pages in swap cache [ 50.915480][ T1390] Free swap = 124668kB [ 50.919964][ T1390] Total swap = 124996kB [ 50.926477][ T1390] 2097051 pages RAM [ 50.930438][ T1390] 0 pages HighMem/MovableOnly [ 50.935541][ T1390] 352245 pages reserved [ 50.941106][ T1390] 0 pages cma reserved [ 50.948501][ T1390] Memory allocations: [ 50.952760][ T1390] 0 B 0 init/main.c:1477 func:do_initcalls [ 50.960179][ T1390] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 50.969371][ T1390] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 50.977881][ T1390] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 50.985996][ T1390] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 50.994440][ T1390] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 51.003222][ T1390] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 51.011753][ T1390] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 51.019941][ T1390] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 51.028076][ T1390] 0 B 0 init/initramfs.c:101 func:find_link [ 51.065806][ T1417] netlink: 25 bytes leftover after parsing attributes in process `syz.2.417'. [ 51.191638][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.218070][ T36] audit: type=1400 audit(1773913434.400:7951): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.341586][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 51.349027][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 51.360816][ T36] audit: type=1400 audit(1773913434.540:7952): avc: denied { write } for pid=1432 comm="syz.2.423" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.389551][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.400561][ T10] usb 4-1: config 0 has no interface number 0 [ 51.409473][ T10] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.434467][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 51.444408][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.452750][ T10] usb 4-1: Product: syz [ 51.457083][ T10] usb 4-1: Manufacturer: syz [ 51.464097][ T10] usb 4-1: SerialNumber: syz [ 51.470179][ T10] usb 4-1: config 0 descriptor?? [ 51.479643][ T10] smsc95xx v2.0.0 [ 51.483764][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 51.494389][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 51.617053][ T36] audit: type=1400 audit(1773913434.800:7953): avc: denied { map } for pid=1445 comm="syz.2.428" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.692803][ T1454] netlink: 'syz.2.432': attribute type 4 has an invalid length. [ 52.231637][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.378142][ T1473] SELinux: failed to load policy [ 52.395253][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.407381][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.413724][ T1476] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 52.418052][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.438710][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.447891][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.457060][ T45] usb 2-1: config 0 descriptor?? [ 52.596805][ T36] audit: type=1326 audit(1773913435.780:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.2.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f562ff9c799 code=0x0 [ 52.865765][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.873935][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.883024][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.890804][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.898610][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.906585][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.914496][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.922585][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.930527][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.938775][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.946824][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.954747][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.963499][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.971717][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.979862][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.988176][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 52.995974][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.003667][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.014068][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.021858][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.029450][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.037533][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.045576][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.053497][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.061595][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.069335][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.077471][ T1470] cgroup: Unknown subsys name 'measure' [ 53.083690][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.130194][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.138138][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.146449][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.154391][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.162539][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.170475][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.178528][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.186435][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.194041][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.202008][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.209904][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 53.218518][ T45] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 53.238482][ T45] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 53.545923][ T36] audit: type=1400 audit(1773913436.730:7955): avc: denied { write } for pid=1499 comm="syz.2.447" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.811560][ T379] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.955942][ T36] audit: type=1400 audit(1773913437.140:7956): avc: denied { create } for pid=1502 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 53.961507][ T379] usb 3-1: Using ep0 maxpacket: 16 [ 53.977723][ T36] audit: type=1400 audit(1773913437.170:7957): avc: denied { accept } for pid=1502 comm="syz.0.448" lport=102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.993195][ T45] usb 4-1: USB disconnect, device number 7 [ 54.019314][ T379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.020571][ T1507] SELinux: failed to load policy [ 54.034099][ T379] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 54.051534][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.059868][ T379] usb 3-1: Product: syz [ 54.064418][ T379] usb 3-1: Manufacturer: syz [ 54.067787][ T1509] netlink: 25 bytes leftover after parsing attributes in process `syz.0.451'. [ 54.069360][ T379] usb 3-1: SerialNumber: syz [ 54.086555][ T1509] netlink: 'syz.0.451': attribute type 4 has an invalid length. [ 54.154730][ T36] audit: type=1400 audit(1773913437.340:7958): avc: denied { ioctl } for pid=1519 comm="syz.3.456" path="socket:[11831]" dev="sockfs" ino=11831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.293982][ T1500] netlink: 68 bytes leftover after parsing attributes in process `syz.2.447'. [ 54.305419][ T379] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 54.312825][ T1529] netlink: 25 bytes leftover after parsing attributes in process `syz.3.460'. [ 54.316606][ T379] usb 3-1: USB disconnect, device number 11 [ 54.331468][ T1528] netlink: 'syz.3.460': attribute type 4 has an invalid length. [ 54.449087][ T1532] veth1_to_bond: entered allmulticast mode [ 54.456141][ T1532] veth1_to_bond: entered promiscuous mode [ 54.463837][ T1531] veth1_to_bond: left promiscuous mode [ 54.469579][ T1531] veth1_to_bond: left allmulticast mode [ 54.501682][ T293] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 54.762447][ T1548] SELinux: policydb version 516537429 does not match my version range 15-33 [ 54.771784][ T1548] SELinux: failed to load policy [ 54.782291][ T1550] netlink: 25 bytes leftover after parsing attributes in process `syz.3.469'. [ 54.796117][ T1550] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 54.940743][ T1574] SELinux: policydb version 516537429 does not match my version range 15-33 [ 54.950030][ T1574] SELinux: failed to load policy [ 54.989790][ T1578] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 55.038105][ T36] audit: type=1400 audit(1773913438.210:7959): avc: denied { set_context_mgr } for pid=1580 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.059075][ T1581] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 55.069698][ T36] audit: type=1400 audit(1773913438.210:7960): avc: denied { map } for pid=1580 comm="syz.2.481" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.102462][ T36] audit: type=1400 audit(1773913438.240:7961): avc: denied { call } for pid=1580 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.141493][ T587] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.264267][ T1596] SELinux: policydb version 516537429 does not match my version range 15-33 [ 55.273658][ T1596] SELinux: failed to load policy [ 55.291488][ T587] usb 4-1: Using ep0 maxpacket: 32 [ 55.298247][ T587] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.307685][ T587] usb 4-1: config 0 has no interface number 0 [ 55.314543][ T587] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 55.327485][ T587] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.337582][ T587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.345754][ T587] usb 4-1: Product: syz [ 55.350001][ T587] usb 4-1: Manufacturer: syz [ 55.354733][ T587] usb 4-1: SerialNumber: syz [ 55.360712][ T587] usb 4-1: config 0 descriptor?? [ 55.366058][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.375274][ T587] smsc95xx v2.0.0 [ 55.379558][ T587] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 55.390684][ T587] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 55.409225][ T36] audit: type=1400 audit(1773913438.590:7962): avc: denied { setcheckreqprot } for pid=1605 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.451855][ T1614] SELinux: policydb version 516537429 does not match my version range 15-33 [ 55.461361][ T1614] SELinux: failed to load policy [ 55.502511][ T10] usb 3-1: device descriptor read/64, error -71 [ 55.741624][ T10] usb 3-1: device descriptor read/64, error -71 [ 55.801876][ T45] usb 2-1: USB disconnect, device number 13 [ 55.981570][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.111501][ T10] usb 3-1: device descriptor read/64, error -71 [ 56.133573][ T1631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.504'. [ 56.143234][ T36] audit: type=1404 audit(1773913439.330:7963): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 56.159511][ T36] audit: type=1404 audit(1773913439.340:7964): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 56.178271][ T36] audit: type=1400 audit(1773913439.360:7965): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.197317][ T1636] SELinux: policydb version 516537429 does not match my version range 15-33 [ 56.203010][ T36] audit: type=1400 audit(1773913439.360:7966): avc: denied { open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.212387][ T1636] SELinux: failed to load policy [ 56.238605][ T36] audit: type=1400 audit(1773913439.360:7967): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.271905][ T36] audit: type=1400 audit(1773913439.380:7968): avc: denied { load_policy } for pid=1635 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.401622][ T10] usb 3-1: device descriptor read/64, error -71 [ 56.511658][ T10] usb usb3-port1: attempt power cycle [ 56.596795][ T1648] mmap: syz.0.510 (1648) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.648008][ T1657] SELinux: policydb version 516537429 does not match my version range 15-33 [ 56.657505][ T1657] SELinux: failed to load policy [ 56.851616][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 56.872843][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.002876][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.170209][ T1690] SELinux: policydb version 516537429 does not match my version range 15-33 [ 57.179887][ T1690] SELinux: failed to load policy [ 57.241622][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 57.264006][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.392808][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.501658][ T10] usb usb3-port1: unable to enumerate USB device [ 57.701560][ T293] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.852797][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.864593][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.875294][ T293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.888630][ T293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.897885][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.907623][ T293] usb 2-1: config 0 descriptor?? [ 57.917281][ T10] usb 4-1: USB disconnect, device number 8 [ 57.961673][ T1710] netlink: 25 bytes leftover after parsing attributes in process `syz.0.533'. [ 57.973001][ T1710] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 58.101585][ T1705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 58.112827][ T1725] SELinux: policydb string length 43 does not match expected length 8 [ 58.123162][ T1725] SELinux: failed to load policy [ 58.381684][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.389494][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.397350][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.405216][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.413151][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.420967][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.428765][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.436699][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.444559][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.452373][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.460117][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.468000][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.477658][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.485722][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.493587][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.501128][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.508889][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.516692][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.524446][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.532206][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.539763][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.547827][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.555551][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.563771][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.572867][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.590988][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.599299][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.607544][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.615725][ T1731] SELinux: policydb string length 43 does not match expected length 8 [ 58.624553][ T1731] SELinux: failed to load policy [ 58.629817][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.637780][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.645696][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.666467][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.675120][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.683060][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.690688][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.698964][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.707297][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.725934][ T293] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 58.734060][ T293] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 58.755421][ T293] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 59.447423][ T1765] netlink: 25 bytes leftover after parsing attributes in process `syz.0.558'. [ 59.458192][ T1765] netlink: 'syz.0.558': attribute type 4 has an invalid length. [ 59.822341][ T1788] netlink: 25 bytes leftover after parsing attributes in process `syz.3.567'. [ 59.832898][ T1788] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 59.851625][ T1588] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 60.001488][ T1588] usb 3-1: Using ep0 maxpacket: 32 [ 60.022569][ T1588] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.031062][ T1588] usb 3-1: config 0 has no interface number 0 [ 60.048927][ T1588] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.077942][ T1588] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.097707][ T1588] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.112957][ T1588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.131483][ T1588] usb 3-1: Product: syz [ 60.135862][ T1588] usb 3-1: Manufacturer: syz [ 60.140656][ T1588] usb 3-1: SerialNumber: syz [ 60.152325][ T1588] usb 3-1: config 0 descriptor?? [ 60.164219][ T1588] smsc95xx v2.0.0 [ 60.167998][ T1588] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 60.181092][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 60.181112][ T36] audit: type=1400 audit(1773913443.370:8026): avc: denied { accept } for pid=1806 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.200040][ T1588] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 60.211183][ T1807] netlink: 'syz.0.574': attribute type 63 has an invalid length. [ 60.225516][ T1807] netlink: 5 bytes leftover after parsing attributes in process `syz.0.574'. [ 60.232251][ T36] audit: type=1400 audit(1773913443.400:8027): avc: denied { bind } for pid=1806 comm="syz.0.574" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.258588][ T1807] can: request_module (can-proto-0) failed. [ 60.281372][ T36] audit: type=1400 audit(1773913443.400:8028): avc: denied { name_bind } for pid=1806 comm="syz.0.574" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.311519][ T36] audit: type=1400 audit(1773913443.400:8029): avc: denied { node_bind } for pid=1806 comm="syz.0.574" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.338105][ T36] audit: type=1400 audit(1773913443.490:8030): avc: denied { mount } for pid=1815 comm="syz.0.577" name="/" dev="configfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.361491][ T36] audit: type=1400 audit(1773913443.490:8031): avc: denied { search } for pid=1815 comm="syz.0.577" name="/" dev="configfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.362143][ T1814] netlink: 25 bytes leftover after parsing attributes in process `syz.3.576'. [ 60.390033][ T36] audit: type=1400 audit(1773913443.490:8032): avc: denied { setattr } for pid=1815 comm="syz.0.577" name="/" dev="configfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.407115][ T293] usb 2-1: USB disconnect, device number 15 [ 60.426636][ T1817] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 60.441855][ T36] audit: type=1400 audit(1773913443.620:8033): avc: denied { read write } for pid=1818 comm="syz.1.578" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.467174][ T36] audit: type=1400 audit(1773913443.620:8034): avc: denied { open } for pid=1818 comm="syz.1.578" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.491545][ T36] audit: type=1400 audit(1773913443.650:8035): avc: denied { bind } for pid=1820 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.616788][ T1839] FAULT_INJECTION: forcing a failure. [ 60.616788][ T1839] name failslab, interval 1, probability 0, space 0, times 1 [ 60.630845][ T1839] CPU: 1 UID: 0 PID: 1839 Comm: syz.1.587 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 60.630868][ T1839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.630876][ T1839] Call Trace: [ 60.630880][ T1839] [ 60.630885][ T1839] __dump_stack+0x21/0x30 [ 60.630905][ T1839] dump_stack_lvl+0x140/0x1c0 [ 60.630919][ T1839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.630933][ T1839] ? handle_mm_fault+0x171c/0x1bf0 [ 60.630950][ T1839] dump_stack+0x19/0x20 [ 60.630963][ T1839] should_fail_ex+0x3d7/0x530 [ 60.630977][ T1839] should_failslab+0xac/0x100 [ 60.630988][ T1839] kmem_cache_alloc_noprof+0x42/0x410 [ 60.631003][ T1839] ? lock_vma_under_rcu+0x4d1/0x590 [ 60.631019][ T1839] ? getname_flags+0xc5/0x700 [ 60.631035][ T1839] getname_flags+0xc5/0x700 [ 60.631050][ T1839] getname+0x1b/0x30 [ 60.631064][ T1839] do_sys_openat2+0xda/0x1d0 [ 60.631077][ T1839] ? do_sys_open+0x100/0x100 [ 60.631089][ T1839] ? __kasan_check_write+0x18/0x20 [ 60.631103][ T1839] ? do_user_addr_fault+0xbbb/0x11e0 [ 60.631118][ T1839] ? __cfi_ksys_write+0x10/0x10 [ 60.631133][ T1839] __x64_sys_openat+0x13a/0x170 [ 60.631145][ T1839] x64_sys_call+0xe69/0x2ee0 [ 60.631160][ T1839] do_syscall_64+0x57/0xf0 [ 60.631175][ T1839] ? clear_bhb_loop+0x50/0xa0 [ 60.631190][ T1839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.631204][ T1839] RIP: 0033:0x7f03a735cfce [ 60.631216][ T1839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.631226][ T1839] RSP: 002b:00007f03a81acb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.631241][ T1839] RAX: ffffffffffffffda RBX: 00007f03a81ad6c0 RCX: 00007f03a735cfce [ 60.631250][ T1839] RDX: 0000000000000000 RSI: 00007f03a81acc00 RDI: ffffffffffffff9c [ 60.631259][ T1839] RBP: 00007f03a81acc00 R08: 0000000000000000 R09: 0000000000000000 [ 60.631270][ T1839] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 60.631278][ T1839] R13: 00007f03a7616038 R14: 00007f03a7615fa0 R15: 00007fff523a0b78 [ 60.631288][ T1839] [ 60.922630][ T1845] netlink: 25 bytes leftover after parsing attributes in process `syz.1.589'. [ 60.932780][ T1845] netlink: 'syz.1.589': attribute type 4 has an invalid length. [ 60.971618][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 61.074227][ T1853] FAULT_INJECTION: forcing a failure. [ 61.074227][ T1853] name failslab, interval 1, probability 0, space 0, times 0 [ 61.087628][ T1853] CPU: 0 UID: 0 PID: 1853 Comm: syz.0.592 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 61.087664][ T1853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.087672][ T1853] Call Trace: [ 61.087677][ T1853] [ 61.087682][ T1853] __dump_stack+0x21/0x30 [ 61.087702][ T1853] dump_stack_lvl+0x140/0x1c0 [ 61.087716][ T1853] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.087731][ T1853] dump_stack+0x19/0x20 [ 61.087744][ T1853] should_fail_ex+0x3d7/0x530 [ 61.087758][ T1853] should_failslab+0xac/0x100 [ 61.087770][ T1853] __kmalloc_cache_node_noprof+0x46/0x430 [ 61.087785][ T1853] ? __get_vm_area_node+0x14d/0x3d0 [ 61.087799][ T1853] __get_vm_area_node+0x14d/0x3d0 [ 61.087811][ T1853] __vmalloc_node_range_noprof+0x30e/0x1480 [ 61.087825][ T1853] ? sel_write_load+0x235/0x5f0 [ 61.087839][ T1853] ? kernel_text_address+0xa9/0xe0 [ 61.087852][ T1853] ? unwind_get_return_address+0x51/0x90 [ 61.087866][ T1853] ? arch_stack_walk+0x10a/0x170 [ 61.087883][ T1853] ? _parse_integer_limit+0x195/0x1e0 [ 61.087901][ T1853] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 61.087918][ T1853] ? avc_has_perm_noaudit+0x26c/0x360 [ 61.087934][ T1853] ? __asan_memcpy+0x5a/0x80 [ 61.087948][ T1853] ? avc_has_perm_noaudit+0x28a/0x360 [ 61.087963][ T1853] ? sel_write_load+0x235/0x5f0 [ 61.087976][ T1853] vmalloc_noprof+0x103/0x1d0 [ 61.087988][ T1853] ? sel_write_load+0x235/0x5f0 [ 61.088001][ T1853] ? __cfi_avc_has_perm+0x10/0x10 [ 61.088015][ T1853] ? mutex_lock+0x97/0x1d0 [ 61.088031][ T1853] ? __cfi_vmalloc_noprof+0x10/0x10 [ 61.088045][ T1853] sel_write_load+0x235/0x5f0 [ 61.088058][ T1853] ? proc_fail_nth_write+0x184/0x220 [ 61.088071][ T1853] ? __cfi_sel_write_load+0x10/0x10 [ 61.088085][ T1853] ? bpf_lsm_file_permission+0xd/0x20 [ 61.088097][ T1853] ? __cfi_sel_write_load+0x10/0x10 [ 61.088110][ T1853] vfs_write+0x3c5/0xf90 [ 61.088125][ T1853] ? __cfi_vfs_write+0x10/0x10 [ 61.088138][ T1853] ? __kasan_check_write+0x18/0x20 [ 61.088152][ T1853] ? mutex_lock+0x97/0x1d0 [ 61.088167][ T1853] ? __cfi_mutex_lock+0x10/0x10 [ 61.088182][ T1853] ? __fget_files+0x2c5/0x340 [ 61.088199][ T1853] ksys_write+0x145/0x260 [ 61.088212][ T1853] ? __cfi_ksys_write+0x10/0x10 [ 61.088226][ T1853] ? __kasan_check_read+0x15/0x20 [ 61.088240][ T1853] __x64_sys_write+0x7f/0x90 [ 61.088255][ T1853] x64_sys_call+0x271c/0x2ee0 [ 61.088348][ T1853] do_syscall_64+0x57/0xf0 [ 61.088368][ T1853] ? clear_bhb_loop+0x50/0xa0 [ 61.088392][ T1853] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.088415][ T1853] RIP: 0033:0x7f3250d9c799 [ 61.088433][ T1853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.088443][ T1853] RSP: 002b:00007f324f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.088459][ T1853] RAX: ffffffffffffffda RBX: 00007f3251015fa0 RCX: 00007f3250d9c799 [ 61.088468][ T1853] RDX: 000000000000002d RSI: 0000200000000000 RDI: 0000000000000003 [ 61.088476][ T1853] RBP: 00007f324f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.088484][ T1853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.088492][ T1853] R13: 00007f3251016038 R14: 00007f3251015fa0 R15: 00007fff3a46f398 [ 61.088501][ T1853] [ 61.088508][ T1853] syz.0.592: vmalloc error: size 45, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 61.132020][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 61.134557][ T1853] ,cpuset= [ 61.140049][ T45] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.143526][ T1853] syz0 [ 61.149067][ T45] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.154733][ T1853] ,mems_allowed=0 [ 61.160493][ T45] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.166104][ T1853] [ 61.172314][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 61.177820][ T1853] CPU: 0 UID: 0 PID: 1853 Comm: syz.0.592 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 61.177849][ T1853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.177869][ T1853] Call Trace: [ 61.177875][ T1853] [ 61.177882][ T1853] __dump_stack+0x21/0x30 [ 61.177909][ T1853] dump_stack_lvl+0x140/0x1c0 [ 61.177931][ T1853] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.177961][ T1853] dump_stack+0x19/0x20 [ 61.177995][ T1853] warn_alloc+0x1e7/0x2c0 [ 61.178016][ T1853] ? __kasan_kmalloc+0x28/0xb0 [ 61.178033][ T1853] ? __cfi_warn_alloc+0x10/0x10 [ 61.178052][ T1853] ? __get_vm_area_node+0x3bd/0x3d0 [ 61.178074][ T1853] __vmalloc_node_range_noprof+0x333/0x1480 [ 61.178095][ T1853] ? kernel_text_address+0xa9/0xe0 [ 61.178117][ T1853] ? unwind_get_return_address+0x51/0x90 [ 61.178137][ T1853] ? arch_stack_walk+0x10a/0x170 [ 61.178162][ T1853] ? _parse_integer_limit+0x195/0x1e0 [ 61.178183][ T1853] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 61.178204][ T1853] ? avc_has_perm_noaudit+0x26c/0x360 [ 61.178229][ T1853] ? __asan_memcpy+0x5a/0x80 [ 61.178251][ T1853] ? avc_has_perm_noaudit+0x28a/0x360 [ 61.178274][ T1853] ? sel_write_load+0x235/0x5f0 [ 61.178301][ T1853] vmalloc_noprof+0x103/0x1d0 [ 61.178321][ T1853] ? sel_write_load+0x235/0x5f0 [ 61.178341][ T1853] ? __cfi_avc_has_perm+0x10/0x10 [ 61.178358][ T1853] ? mutex_lock+0x97/0x1d0 [ 61.178375][ T1853] ? __cfi_vmalloc_noprof+0x10/0x10 [ 61.178389][ T1853] sel_write_load+0x235/0x5f0 [ 61.178402][ T1853] ? proc_fail_nth_write+0x184/0x220 [ 61.178419][ T1853] ? __cfi_sel_write_load+0x10/0x10 [ 61.178440][ T1853] ? bpf_lsm_file_permission+0xd/0x20 [ 61.178467][ T1853] ? __cfi_sel_write_load+0x10/0x10 [ 61.178488][ T1853] vfs_write+0x3c5/0xf90 [ 61.178511][ T1853] ? __cfi_vfs_write+0x10/0x10 [ 61.178531][ T1853] ? __kasan_check_write+0x18/0x20 [ 61.178553][ T1853] ? mutex_lock+0x97/0x1d0 [ 61.178577][ T1853] ? __cfi_mutex_lock+0x10/0x10 [ 61.178601][ T1853] ? __fget_files+0x2c5/0x340 [ 61.178627][ T1853] ksys_write+0x145/0x260 [ 61.178649][ T1853] ? __cfi_ksys_write+0x10/0x10 [ 61.178671][ T1853] ? __kasan_check_read+0x15/0x20 [ 61.178693][ T1853] __x64_sys_write+0x7f/0x90 [ 61.178716][ T1853] x64_sys_call+0x271c/0x2ee0 [ 61.178739][ T1853] do_syscall_64+0x57/0xf0 [ 61.178760][ T1853] ? clear_bhb_loop+0x50/0xa0 [ 61.178783][ T1853] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.178805][ T1853] RIP: 0033:0x7f3250d9c799 [ 61.178822][ T1853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.178837][ T1853] RSP: 002b:00007f324f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.178859][ T1853] RAX: ffffffffffffffda RBX: 00007f3251015fa0 RCX: 00007f3250d9c799 [ 61.178873][ T1853] RDX: 000000000000002d RSI: 0000200000000000 RDI: 0000000000000003 [ 61.178885][ T1853] RBP: 00007f324f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.178897][ T1853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.178909][ T1853] R13: 00007f3251016038 R14: 00007f3251015fa0 R15: 00007fff3a46f398 [ 61.178924][ T1853] [ 61.178970][ T1853] Mem-Info: [ 61.184009][ T45] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 61.192422][ T1853] active_anon:74545 inactive_anon:2 isolated_anon:0 [ 61.192422][ T1853] active_file:23434 inactive_file:2640 isolated_file:0 [ 61.192422][ T1853] unevictable:0 dirty:254 writeback:0 [ 61.192422][ T1853] slab_reclaimable:5423 slab_unreclaimable:71439 [ 61.192422][ T1853] mapped:24564 shmem:67989 pagetables:871 [ 61.192422][ T1853] sec_pagetables:0 bounce:0 [ 61.192422][ T1853] kernel_misc_reclaimable:0 [ 61.192422][ T1853] free:1454476 free_pcp:1783 free_cma:0 [ 61.193576][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.199340][ T1853] Node 0 active_anon:298180kB inactive_anon:8kB active_file:93736kB inactive_file:10560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98256kB dirty:1016kB writeback:0kB shmem:271956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5376kB pagetables:3484kB sec_pagetables:0kB all_unreclaimable? no [ 61.206290][ T45] usb 4-1: Product: syz [ 61.212040][ T1853] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:4656kB free_cma:0kB [ 61.217448][ T45] usb 4-1: Manufacturer: syz [ 61.222325][ T1853] lowmem_reserve[]: [ 61.227372][ T45] usb 4-1: SerialNumber: syz [ 61.232887][ T1853] 0 [ 61.441540][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 61.445928][ T1853] 3921 3921 [ 62.010149][ T1853] Normal free:2859388kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:298320kB inactive_anon:8kB active_file:93736kB inactive_file:10564kB unevictable:0kB writepending:1016kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2236kB local_pcp:1896kB free_cma:0kB [ 62.043059][ T1853] lowmem_reserve[]: 0 0 0 [ 62.047565][ T1853] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 6*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 62.064135][ T1853] Normal: 1*4kB (E) 75*8kB (UM) 82*16kB (UME) 58*32kB (UM) 195*64kB (UME) 140*128kB (UME) 24*256kB (UME) 14*512kB (UME) 6*1024kB (ME) 8*2048kB (UME) 681*4096kB (M) = 2859388kB [ 62.083060][ T1853] 94064 total pagecache pages [ 62.087944][ T1853] 2 pages in swap cache [ 62.092586][ T1853] Free swap = 124668kB [ 62.097155][ T1853] Total swap = 124996kB [ 62.102179][ T1853] 2097051 pages RAM [ 62.106266][ T1853] 0 pages HighMem/MovableOnly [ 62.111216][ T1853] 352245 pages reserved [ 62.115867][ T1853] 0 pages cma reserved [ 62.121179][ T1853] Memory allocations: [ 62.125391][ T1853] 0 B 0 init/main.c:1477 func:do_initcalls [ 62.132991][ T1853] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 62.141422][ T1853] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 62.149740][ T1853] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 62.158447][ T1853] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 62.168133][ T1853] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 62.181820][ T1853] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 62.190578][ T1853] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 62.198953][ T1853] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 62.207266][ T1853] 0 B 0 init/initramfs.c:101 func:find_link [ 62.265251][ T1874] batadv_slave_1: entered promiscuous mode [ 62.275728][ T1873] batadv_slave_1: left promiscuous mode [ 62.622295][ T1588] usb 3-1: USB disconnect, device number 16 [ 62.684148][ T1914] batadv_slave_1: entered promiscuous mode [ 62.694048][ T1913] batadv_slave_1: left promiscuous mode [ 62.723919][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 62.901547][ T293] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.031541][ T293] usb 2-1: device descriptor read/64, error -71 [ 63.181491][ T1588] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.282494][ T293] usb 2-1: device descriptor read/64, error -71 [ 63.361478][ T1588] usb 3-1: Using ep0 maxpacket: 16 [ 63.367953][ T1588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.379643][ T1588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.390177][ T1588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.403742][ T1588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.413393][ T1588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.422942][ T1588] usb 3-1: config 0 descriptor?? [ 63.541508][ T293] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 63.608290][ T31] usb 4-1: USB disconnect, device number 9 [ 63.616127][ T31] usblp0: removed [ 63.647284][ T1940] SELinux: policydb string length 43 does not match expected length 8 [ 63.659280][ T1940] SELinux: failed to load policy [ 63.671677][ T293] usb 2-1: device descriptor read/64, error -71 [ 63.841257][ T1588] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 63.850188][ T1588] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 63.860395][ T1588] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 63.881666][ T1588] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 63.901470][ T1588] microsoft 0003:045E:07DA.0005: no inputs found [ 63.904249][ T1947] FAULT_INJECTION: forcing a failure. [ 63.904249][ T1947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.908190][ T1588] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 63.921671][ T293] usb 2-1: device descriptor read/64, error -71 [ 63.922189][ T1947] CPU: 1 UID: 0 PID: 1947 Comm: syz.0.630 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 63.922216][ T1947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.922228][ T1947] Call Trace: [ 63.922234][ T1947] [ 63.922250][ T1947] __dump_stack+0x21/0x30 [ 63.922279][ T1947] dump_stack_lvl+0x140/0x1c0 [ 63.922301][ T1947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.922324][ T1947] dump_stack+0x19/0x20 [ 63.922344][ T1947] should_fail_ex+0x3d7/0x530 [ 63.922366][ T1947] should_fail+0xf/0x20 [ 63.922384][ T1947] should_fail_usercopy+0x1e/0x30 [ 63.922407][ T1947] strncpy_from_user+0x29/0x270 [ 63.922427][ T1947] getname_flags+0x101/0x700 [ 63.922451][ T1947] getname+0x1b/0x30 [ 63.922473][ T1947] do_sys_openat2+0xda/0x1d0 [ 63.922494][ T1947] ? do_sys_open+0x100/0x100 [ 63.922512][ T1947] ? __kasan_check_write+0x18/0x20 [ 63.922535][ T1947] ? do_user_addr_fault+0xbbb/0x11e0 [ 63.922558][ T1947] ? __cfi_ksys_write+0x10/0x10 [ 63.922581][ T1947] __x64_sys_openat+0x13a/0x170 [ 63.922601][ T1947] x64_sys_call+0xe69/0x2ee0 [ 63.922624][ T1947] do_syscall_64+0x57/0xf0 [ 63.922646][ T1947] ? clear_bhb_loop+0x50/0xa0 [ 63.922668][ T1947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.922690][ T1947] RIP: 0033:0x7f3250d5cfce [ 63.922706][ T1947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.922721][ T1947] RSP: 002b:00007f324f7f6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.922743][ T1947] RAX: ffffffffffffffda RBX: 00007f324f7f76c0 RCX: 00007f3250d5cfce [ 63.922758][ T1947] RDX: 0000000000000000 RSI: 00007f324f7f6c00 RDI: ffffffffffffff9c [ 63.922771][ T1947] RBP: 00007f324f7f6c00 R08: 0000000000000000 R09: 0000000000000000 [ 63.922784][ T1947] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 63.922797][ T1947] R13: 00007f3251016038 R14: 00007f3251015fa0 R15: 00007fff3a46f398 [ 63.922812][ T1947] [ 64.041718][ T293] usb usb2-port1: attempt power cycle [ 64.065301][ T1588] usb 3-1: USB disconnect, device number 17 [ 64.418064][ T293] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 64.442400][ T1972] overlayfs: missing 'lowerdir' [ 64.447720][ T293] usb 2-1: device descriptor read/8, error -71 [ 64.505374][ T1977] batadv_slave_1: entered promiscuous mode [ 64.512592][ T1976] batadv_slave_1: left promiscuous mode [ 64.534425][ T1979] ------------[ cut here ]------------ [ 64.540050][ T1979] WARNING: CPU: 0 PID: 1979 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 64.550885][ T1979] Modules linked in: [ 64.555086][ T1979] CPU: 0 UID: 0 PID: 1979 Comm: syz.3.642 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 64.566938][ T1979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.577586][ T1979] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 64.584241][ T1979] Code: 4f 12 73 ff eb 08 e8 28 fb 09 ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 09 fb 09 ff <0f> 0b 45 31 e4 eb cb e8 fd fa 09 ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 64.592814][ T293] usb 2-1: device descriptor read/8, error -71 [ 64.604823][ T1979] RSP: 0018:ffffc9000f207af0 EFLAGS: 00010283 [ 64.604857][ T1979] RAX: ffffffff827da847 RBX: ffff888124d4f880 RCX: 0000000000080000 [ 64.626260][ T1979] RDX: ffffc90002244000 RSI: 00000000000001d5 RDI: 00000000000001d6 [ 64.634823][ T1979] RBP: ffffc9000f207b30 R08: ffff88810bfc5f00 R09: 0000000000000002 [ 64.643126][ T1979] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 64.652076][ T1979] R13: 0000000000002004 R14: 1ffffffff0e40896 R15: dffffc0000000000 [ 64.661007][ T1979] FS: 00007fa5730136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.670688][ T1979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.677605][ T1979] CR2: 000000110c347280 CR3: 000000011e936000 CR4: 00000000003526b0 [ 64.686445][ T1979] Call Trace: [ 64.689916][ T1979] [ 64.692892][ T1979] current_check_refer_path+0x8ee/0xd40 [ 64.698730][ T1979] ? hook_file_free_security+0xc0/0xc0 [ 64.704435][ T1979] hook_path_rename+0x44/0x60 [ 64.709388][ T1979] security_path_rename+0x1d8/0x2a0 [ 64.714887][ T1979] do_renameat2+0x634/0xc40 [ 64.720410][ T1979] ? __cfi_do_renameat2+0x10/0x10 [ 64.725790][ T1979] ? strncpy_from_user+0x14d/0x270 [ 64.731598][ T1979] ? __kasan_check_write+0x18/0x20 [ 64.736965][ T1979] ? __kasan_check_write+0x18/0x20 [ 64.742347][ T1979] __x64_sys_renameat2+0xdc/0x100 [ 64.747593][ T1979] x64_sys_call+0x2e18/0x2ee0 [ 64.752587][ T1979] do_syscall_64+0x57/0xf0 [ 64.757033][ T1979] ? clear_bhb_loop+0x50/0xa0 [ 64.762015][ T1979] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.768345][ T1979] RIP: 0033:0x7fa57219c799 [ 64.773058][ T1979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.793159][ T1979] RSP: 002b:00007fa573013028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 64.802088][ T1979] RAX: ffffffffffffffda RBX: 00007fa572415fa0 RCX: 00007fa57219c799 [ 64.810436][ T1979] RDX: 0000000000000006 RSI: 0000200000000540 RDI: 0000000000000006 [ 64.818674][ T1979] RBP: 00007fa572232c99 R08: 0000000000000000 R09: 0000000000000000 [ 64.826988][ T1979] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 64.835698][ T1979] R13: 00007fa572416038 R14: 00007fa572415fa0 R15: 00007ffcb315aa48 [ 64.844465][ T1979] [ 64.847510][ T1979] ---[ end trace 0000000000000000 ]--- [ 64.861505][ T293] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 64.882737][ T293] usb 2-1: device descriptor read/8, error -71 [ 65.012732][ T293] usb 2-1: device descriptor read/8, error -71 [ 65.121652][ T293] usb usb2-port1: unable to enumerate USB device