last executing test programs: 24.808732249s ago: executing program 2 (id=118): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r1 = syz_ublk_setup_io_uring(0x29, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x4158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e78, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x200) 24.272568563s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x81) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) (async) sendfile(r3, r3, 0x0, 0x1000000201005) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f00000000c0)='./cgroup/../file0\x00', 0x2802, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_clone3(&(0x7f0000000040)={0x2a1a20300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904000001ff615a000905880b"], 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x64) setuid(0xffffffffffffffff) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x57e, 0x2009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xf6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x5de, 0x4, 0x1, {0x22, 0x3b9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x0, 0x4, 0x8, 0x60}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450ffbff00"], 0x3, [{0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "1913d8e4cd29e64d1ac390cce18807acb4e22a9eb92775b3eb55872c29657ae84efa4a5db76e9673f2e264e211ac843b541c546bffc9abca"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x410}}]}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60501, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x30a) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r10, 0x0, 0x0, 0x100, &(0x7f0000003400)={0x0, 0x989680}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0)=r8, 0x12) (async) write(r6, &(0x7f00000001c0)='00:03\n\x00', 0x6) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23.689597063s ago: executing program 2 (id=124): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0xfffffffe, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x5, 0xfd}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x1, 0xb, 0x48a, 0xff, 0x0, 0x8001, 0xf, 0xee6f, 0x5, 0xffffbffc, 0x41, 0x9, 0x1000a9ab, 0x20000000000fc, 0x32, 0x4000400000000], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setpriority(0x2, 0x0, 0xd2f4) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_load(r6, &(0x7f0000000d40)=ANY=[@ANYBLOB="8cff7cf908000049fd2fcd24a4ec06c9"], 0x10) fcntl$setpipe(r5, 0x407, 0x401) syz_usb_connect$uac3(0x4, 0xa9, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xef, 0x17cc, 0x1940, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0xb, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x15, 0xb}, [@multiply_unit={0xb, 0x24, 0xd, 0x0, 0x40, 0x3, 0x1ded}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x25, 0x0, 0x5, {0xa, 0x25, 0x25, 0x404, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000380)='./dev/sda1\x00', &(0x7f00000001c0)='ext4\x00', 0x3218410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', './dev/sda1', [], 0xa, "b59e5aaaf50151abc7012b80df5362d728f112c8d9ed00a5d625fcb451d1f65fe615c0a6bba42082a013dc7f601ecd699705a3bcf0fe7662210141c735f6f83f55b59051666354a47544f792404731e84af7be1347"}, 0x63) fallocate(r7, 0x3, 0x9, 0x81) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000ea6829137bdd3c2755ec3d507aebd2000200"/87], 0x48) 23.166368634s ago: executing program 2 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x2000006, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$selinux_create(r1, &(0x7f0000000180)=@objname={'system_u:object_r:ssh_agent_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xca7, 0x20, './file1\x00'}, 0x61) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000000)='erofs\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x109142, 0x5) write$char_usb(r2, &(0x7f0000000240)="5ee39240672808ad45ef7468a20414ca136371ef417221651f6cd5170de20405650268cd1c7024cb92ff729a5b74cd0364f7bd51a1b09591184eb8d3f591cc744bd7e094e2521d99c06c275583d353865d8b43121544ac484766929166b083d259a2419a4c145df79e49b66cfd181a998a71d85a15a72df8df3d9e9f9b8bc16f56b34b4a625f1a0f13672244a57f33bf367872cf622bc5e10ef1f73f4423f6ee3bd0d462c25213e4bae308bcc1974cfe3912b144cbb86e6b0f3f", 0xba) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="700088caaaaaaaaaaabb00000000000081002a000806"], 0x4a) pwrite64(r2, &(0x7f0000000200)="0e", 0x1, 0x8000c5b) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x1) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x81, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000d5000/0x1000)=nil, 0x1000}, 0x2}) syz_clone(0x2800011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='-5'], 0x9) 22.984516867s ago: executing program 2 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80200, 0x11f) write(r1, &(0x7f0000000180)='\x00\x00\x00', 0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10000004}, 0x1c) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a0308000301010725"], 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x40005}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xb06f}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0x10, &(0x7f0000000400)={&(0x7f0000000300)={0x1, 0x23, 0x0, {0x77359400}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x8, 0x2, 0x0, 0x0, "767e715656da9958"}}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) clock_getres(0xd0df4d6948b78e6c, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x5]}, 0x8) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') 22.949489889s ago: executing program 2 (id=136): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0x20}, {0x6, 0x0, 0x700000, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0x80000000000000}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x0, 0x0, 0x3, 0x80e7, 0x0, 0x2}}, 0xe8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) syz_clone(0x10000, &(0x7f0000000240)="78a24f4a23f92a25e50000bbcfd6ab2e97ab971b86eb72469c3dd34626df7c2fd4bc5ea6c5d7c166ff370fb1ed70e0ffc2d973464d9658e6674bb1b2bec3ccce27b87338c3f5c3e75b529bfb9a8aaf32831bc1be04ae4f817bf16c01a7bd278e380dfa9f1257b1c7c840c29964cbca2452d8846c9def9a7df74df0642e89afff02b3cb59c1a20c51926f9271e70b175071008a87cf8ba0e89220fe4795ed105fc349da78a8106aa52c706dbd52e61b509e65422749f820475a93aa18f567c20fd7f5e997f7a45e2ee7bef8103fd78ab3c7e6dc08f93dd885", 0xd8, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000cc0)="e1b8cd2e85c1c024104434c18255") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (rerun: 32) chroot(&(0x7f0000000100)='./file0\x00') r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x44}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={r4, 0x8001, 0x1f6}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x200}) (rerun: 64) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 22.890869129s ago: executing program 32 (id=136): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x1000, 0xffff, 0x0, 0x2, 0x0, 0x20}, {0x6, 0x0, 0x700000, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0x80000000000000}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x0, 0x0, 0x3, 0x80e7, 0x0, 0x2}}, 0xe8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) syz_clone(0x10000, &(0x7f0000000240)="78a24f4a23f92a25e50000bbcfd6ab2e97ab971b86eb72469c3dd34626df7c2fd4bc5ea6c5d7c166ff370fb1ed70e0ffc2d973464d9658e6674bb1b2bec3ccce27b87338c3f5c3e75b529bfb9a8aaf32831bc1be04ae4f817bf16c01a7bd278e380dfa9f1257b1c7c840c29964cbca2452d8846c9def9a7df74df0642e89afff02b3cb59c1a20c51926f9271e70b175071008a87cf8ba0e89220fe4795ed105fc349da78a8106aa52c706dbd52e61b509e65422749f820475a93aa18f567c20fd7f5e997f7a45e2ee7bef8103fd78ab3c7e6dc08f93dd885", 0xd8, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000cc0)="e1b8cd2e85c1c024104434c18255") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (rerun: 32) chroot(&(0x7f0000000100)='./file0\x00') r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x44}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={r4, 0x8001, 0x1f6}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x200}) (rerun: 64) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 5.095825626s ago: executing program 4 (id=238): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14dd82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04020000", @ANYRES16=r5, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x4008041}, 0x40000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r7, &(0x7f00000006c0)='./cgroup\x00', r7, &(0x7f00000002c0)='./mnt\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x73f99000) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) 4.986973463s ago: executing program 4 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x60a02, 0x8c) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f00000001c0)=0x9, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f00000001c0)=0x9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x64042, 0x2f) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2]) syz_clone(0x183fa411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x183fa411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x5, 0x9, 0xff, 0x3, 0x6, 0x5}) (async) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x5, 0x9, 0xff, 0x3, 0x6, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a001501"], 0x1c}], 0x1}, 0x4000080) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) 4.969768099s ago: executing program 4 (id=240): recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/179, 0xb3}], 0x7}, 0x9a8}], 0x1, 0x40000021, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x2, 0xe9b, 0x100, 0xd, 0x7f, 0x44233, 0x200, 0x80, 0x941, 0x8001, 0x6, 0x4, 0x4, 0x20000, 0xb], 0x4, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0xad, 0x9, 0x0, 0x80, 0x7, 0x2, 0x37, 0x7, 0x5, 0x8, 0x7, 0x0, 0xbbf, 0xf, 0x89, 0x4, 0xc, 0x4, '\x00', 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x110}, 0x0) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}, 0x0) 3.66013016s ago: executing program 4 (id=247): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @multicast2}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) 2.443257059s ago: executing program 4 (id=250): landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) lseek(r1, 0x10000000003, 0x6) getdents64(r0, 0x0, 0xfb) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) fchdir(r3) creat(&(0x7f00000000c0)='./cgroup\x00', 0x19c) 2.407953121s ago: executing program 4 (id=251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x10, 0xc, 0x0, 0x2, 0x6}}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xa9, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}, {0x32, &(0x7f00000004c0)=@string={0x32, 0x3, "59f375266d7adaf6206fb401de790b13f8dfb1714160610111fad4286078a859f447ce0e604bf1c143a371ce52cff7dd"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}, {0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "54db8defbf4d9cae2c18d6e5336ccd809b1ddf7f5436846dcd4fdffeecad180fb6af367301895db20e84666302807c080da78914cc0f1afe4d64bcdf1b2bce5aec3730dc56e7aaaaca3a6dc6cd36a02f3b2186a835c34faee0262fe1c0517c6c2f42855e4d99f63ae25d724c6219fbabeb3a25a2147faae33a15fef2072f2528a2b7a1d203cdf46794a4b12679d5e2fc60051e43a525fc37ad9be8135c0f46fec204a8497e965591eb69a3fe245402c25714bb000f61796498f24e52eef61af4c045d5d313f3061823f04481d9"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.268282739s ago: executing program 3 (id=253): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100000000000000e2ff0a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050000000300000008000000f7ffffff0800030011"], 0x54}}, 0x20004010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_sco(r3, &(0x7f0000004340), 0x8) 2.244420287s ago: executing program 3 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.815994594s ago: executing program 3 (id=257): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001) (async) add_key$user(0x0, 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r1, r1, 0x0) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x800020, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) unshare(0x22020600) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x3) (async) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) (async) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x26000000, 0x1f000000}) 1.707623712s ago: executing program 3 (id=258): r0 = socket$inet6(0xa, 0xa, 0x4) clock_settime(0xcc80f84dcac64fc7, &(0x7f0000000680)) flistxattr(r0, &(0x7f0000000000)=""/224, 0xe0) 1.644815184s ago: executing program 3 (id=259): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0415c20000000000010902240001000000ef09040000090300030009210b0010002229000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000000)=0x8006) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r1) 1.594275051s ago: executing program 1 (id=261): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) pread64(r0, 0x0, 0x0, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r3) chown(&(0x7f0000000000)='./file0\x00', r1, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) chown(&(0x7f0000000140)='./file0\x00', r6, r7) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r9, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000000)=""/98, 0x62}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) (async) close(r4) 1.45277608s ago: executing program 1 (id=262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001200050104000000ffdbdf2528001a000a01010200000000000100000000ff01000000000000000000fcffffff0102000d004a8bc8"], 0x38}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000815) 1.45102128s ago: executing program 1 (id=263): setns(0xc9, 0x40000000) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x14, 0x0, 0x0) setns(0xc9, 0x40000000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$inet6(0x10, 0x2, 0x4) (async) sendto$inet6(r0, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x14, 0x0, 0x0) (async) 1.312809998s ago: executing program 1 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000023240000000d240f01000000000000000000090582020002fe0000090503020006000000"], 0x0) 1.270202583s ago: executing program 0 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x2, 0x100, 0x0, 0x8, {0x6, 0x5, 0x0, 0xe8, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x4000, 0x9, 0x0, 0x0, 0xfa5, 0x101}}, {0x20000000000000, 0x537, 0x2b, 0x3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\b\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x9, 0x4b9, 0x4f1b04e0, 0x9}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r3, 0x400c4d09, &(0x7f0000000a00)) 1.141294617s ago: executing program 0 (id=270): r0 = socket(0x18, 0x0, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2d, 0x6, 0x4, 0x7, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x6, 0x3}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bb000000004e2400000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414dfd8adb4e40825272f953bf9272f000000000000000000000000fc00000000000000000000000000f2001600000700429f86f096c02979000001fe8000000000002000005c00000000aa33000000ffe9dfc96b60b137b14fc90345aa88fec4ffffff02000200"], 0xa0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = syz_clone(0xb2a62000, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = dup(r8) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',debug=0x0000000100000000,access=', @ANYRESDEC=0x0, @ANYBLOB="7465017ab59706adade8aeb8389e6f77e90500000075d5b976adc7a200"/38, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2000000076001f0327bd7000fbdbdf2508000000000000000800e100", @ANYRES32=r10, @ANYBLOB="880098d5b8bc7f04f21b3f57e51dc14d53791ab618097f9dd5a3be53815e22da477cc4f0d73aaca20ee9e9ac2122f244380c24f3d7ad8e15907868cfb57d3346d77bc80f09c0ead873527a66b6860a100c602977dbb5d32c3a9bc89b211212245c5f65ab80e466b2ea2a18faed6a108dc47b559f9c858c4eb685c1187a67ff97cf0e"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) 1.080632588s ago: executing program 0 (id=271): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) (async) unshare(0x4000400) (async) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0xc, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8081}, 0x1c) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x800, 0x2) (async) pwrite64(r4, 0x0, 0x0, 0xc00) (async) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) getsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000180)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000400)="771487fec5edb0d64fb04da4e5e05c6ac5c1c256b30abdc483a0a0dc305ce481741f5162e6df06acfc5134dc4548292a8b994d2c8d4ee8c52ea19d838f154f8dbebf6811ef569997d8ff950b3ac1092864ab6e09467cb0a6ca28e5f3317d20ec58d70b1ef7ea47e8ce1e4e6b3f497460829beab1348138624d32fc4a486147dff7ca7a5242a37259d3b5e0ce07f96c0a5e1411d32ba38f75470692084291bb6fcb88dcbb28bab028bb9abec336dedd8a31f231650462e0926452b47072602d87d91d4b86", 0xc4, r5}, 0x68) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000080)={r4, 0x0, 0x3, 0x1, 0x9, 0x4, [0xfffffffffffffff8, 0x10, 0x80000001, 0x800, 0x0, 0x2]}) (async) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000240)) 1.047832209s ago: executing program 0 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x200014, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r0, 0x0, 0x0) r1 = socket(0x1d, 0x800, 0xaf) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4ea3, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @mcast2}}}, 0x108) 885.332025ms ago: executing program 0 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./mnt\x00', 0x1ba) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19cdb680e50ac337, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x1, 0x63, 0x6, @local}, 0x14) (async) setxattr$security_selinux(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setownex(r2, 0xf, 0x0) utime(&(0x7f00000001c0)='./dev/sda1\x00', &(0x7f0000000200)={0x8, 0x7}) 90.406319ms ago: executing program 0 (id=274): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r4, 0x7f812000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) fadvise64(r4, 0xfffffffffffffffd, 0xffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r8, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc3}, @NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdf3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff51ab}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xce9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4088015}, 0x4000) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000080)={0xb0, 0x7fff, 0x3, 0x100, 0x3, 0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 76.371764ms ago: executing program 3 (id=275): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) (async, rerun: 32) syz_clone(0x8f008000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x7000)=nil, 0x7000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 393.71µs ago: executing program 1 (id=276): capset(0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 0s ago: executing program 1 (id=277): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) syz_io_uring_setup(0x141c, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008090) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x41000, 0x45, &(0x7f0000000480)=""/69}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x2) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d8, 0x2, 0x33}, [@mark={0xc, 0x15, {0x4}}]}, 0x34}}, 0x4048840) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "e400a0ee061000", "19b766c932c05dc4ae5c56bc48624d0aaca57fb0042b97e6a427205b1df98609", "bf7e3d3a", "fc99e624f0f6de7d"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "e400a0ee061000", "19b766c932c05dc4ae5c56bc48624d0aaca57fb0042b97e6a427205b1df98609", "bf7e3d3a", "fc99e624f0f6de7d"}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[], 0x4a2) (async) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 22.774939][ T36] audit: type=1400 audit(1790343039.010:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.778390][ T287] cgroup: Unknown subsys name 'net' [ 22.797607][ T36] audit: type=1400 audit(1790343039.010:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.825139][ T36] audit: type=1400 audit(1790343039.040:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.825599][ T287] cgroup: Unknown subsys name 'devices' [ 22.946211][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.951870][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.067896][ T36] audit: type=1400 audit(1790343039.300:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.091123][ T36] audit: type=1400 audit(1790343039.300:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.115913][ T36] audit: type=1400 audit(1790343039.300:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.140447][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.149313][ T36] audit: type=1400 audit(1790343039.380:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.174969][ T36] audit: type=1400 audit(1790343039.380:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.181822][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.201475][ T36] audit: type=1400 audit(1790343039.410:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.234918][ T36] audit: type=1400 audit(1790343039.410:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.086974][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.094112][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.101372][ T296] bridge_slave_0: entered allmulticast mode [ 24.107998][ T296] bridge_slave_0: entered promiscuous mode [ 24.116439][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.123498][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.130662][ T296] bridge_slave_1: entered allmulticast mode [ 24.137012][ T296] bridge_slave_1: entered promiscuous mode [ 24.143138][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150281][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.157422][ T295] bridge_slave_0: entered allmulticast mode [ 24.163709][ T295] bridge_slave_0: entered promiscuous mode [ 24.170488][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177622][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.184767][ T295] bridge_slave_1: entered allmulticast mode [ 24.191019][ T295] bridge_slave_1: entered promiscuous mode [ 24.259483][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.266595][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.273673][ T294] bridge_slave_0: entered allmulticast mode [ 24.280144][ T294] bridge_slave_0: entered promiscuous mode [ 24.289490][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.296634][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.303736][ T294] bridge_slave_1: entered allmulticast mode [ 24.310165][ T294] bridge_slave_1: entered promiscuous mode [ 24.331533][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.338680][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.345826][ T297] bridge_slave_0: entered allmulticast mode [ 24.352038][ T297] bridge_slave_0: entered promiscuous mode [ 24.361434][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.368517][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.375618][ T297] bridge_slave_1: entered allmulticast mode [ 24.381975][ T297] bridge_slave_1: entered promiscuous mode [ 24.485799][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.492956][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.500293][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.507369][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.555385][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562475][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.569797][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.576873][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.586010][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.593075][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.600388][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.607453][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.616634][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.623691][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.631026][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.638124][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.671861][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.679505][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.687244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.695578][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.702768][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.710044][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.717825][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.725262][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.749827][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.757091][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.765080][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.772219][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.796398][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.803447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.811417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.818490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.826809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.833945][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.841673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.848723][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.872718][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879802][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.889719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.896781][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.939960][ T295] veth0_vlan: entered promiscuous mode [ 24.956722][ T297] veth0_vlan: entered promiscuous mode [ 24.967715][ T295] veth1_macvtap: entered promiscuous mode [ 24.996820][ T296] veth0_vlan: entered promiscuous mode [ 25.003123][ T294] veth0_vlan: entered promiscuous mode [ 25.021155][ T297] veth1_macvtap: entered promiscuous mode [ 25.034990][ T296] veth1_macvtap: entered promiscuous mode [ 25.047222][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.071061][ T294] veth1_macvtap: entered promiscuous mode [ 25.146547][ T316] overlayfs: regular lower layers cannot follow data lower layers [ 25.154977][ T316] Unsupported ieee802154 address type: 0 [ 25.189010][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.297508][ T310] smpboot: CPU 1 is now offline [ 25.305878][ T341] fuse: Unknown parameter 'smackfsdef' [ 25.352974][ T344] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9'. [ 25.369079][ T321] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.419277][ T348] Zero length message leads to an empty skb [ 25.465058][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.545332][ T321] usb 2-1: not running at top speed; connect to a high speed hub [ 25.553779][ T321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.564579][ T321] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 25.573608][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.585608][ T321] uvcvideo 2-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 25.614437][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 25.623352][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.635275][ T310] usb 3-1: too many configurations: 187, using maximum allowed: 8 [ 25.644123][ T318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.656170][ T310] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 25.665602][ T310] usb 3-1: can't read configurations, error -71 [ 25.797026][ T321] usb 2-1: string descriptor 0 read error: -71 [ 25.803246][ T321] usb 2-1: Found UVC 1.00 device (046d:0825) [ 25.811179][ T321] usb 2-1: No streaming interface found for terminal 2. [ 25.818304][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 25.830303][ T321] usb 2-1: USB disconnect, device number 2 [ 25.841380][ T318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.853089][ T318] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 25.864501][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.873611][ T318] usb 1-1: config 0 descriptor?? [ 26.033482][ T366] process 'syz.3.15' launched './file0' with NULL argv: empty string added [ 26.042708][ T366] Invalid argument reading file caps for ./file0 [ 26.325588][ T321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.341689][ T318] hid (null): unknown global tag 0xe [ 26.366491][ T318] kye 0003:0458:5012.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 26.420322][ T318] kye 0003:0458:5012.0001: unknown main item tag 0x0 [ 26.444255][ T318] kye 0003:0458:5012.0001: unknown global tag 0xe [ 26.471939][ T318] kye 0003:0458:5012.0001: item 0 4 1 14 parsing failed [ 26.479721][ T388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=388 comm=syz.1.22 [ 26.506413][ T318] kye 0003:0458:5012.0001: parse failed [ 26.517260][ T321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.529141][ T318] kye 0003:0458:5012.0001: probe with driver kye failed with error -22 [ 26.545640][ T398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=398 comm=syz.1.22 [ 26.562694][ T321] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 26.581681][ T318] usb 1-1: USB disconnect, device number 2 [ 26.597802][ T388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=388 comm=syz.1.22 [ 26.623737][ T321] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 26.642919][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.653602][ T398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=398 comm=syz.1.22 [ 26.678537][ T321] usb 4-1: Product: syz [ 26.689096][ T321] usb 4-1: Manufacturer: syz [ 26.696268][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.709398][ T321] usb 4-1: SerialNumber: syz [ 26.724227][ T321] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 26.733353][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.754951][ T321] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 26.754951][ T321] Please send a copy of this message to and [ 27.345255][ T321] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 27.364188][ T318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.385583][ T321] usb 4-1: USB disconnect, device number 2 [ 28.016490][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 28.016503][ T36] audit: type=1400 audit(1790343044.250:169): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.058826][ T321] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.114047][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.154974][ T36] audit: type=1400 audit(1790343044.390:170): avc: denied { mount } for pid=450 comm="syz.1.38" name="/" dev="configfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.214073][ T36] audit: type=1400 audit(1790343044.420:171): avc: denied { mounton } for pid=450 comm="syz.1.38" path="/7/config" dev="configfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.239717][ T36] audit: type=1400 audit(1790343044.430:172): avc: denied { search } for pid=450 comm="syz.1.38" name="/" dev="configfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.264191][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.274344][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 28.284266][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 28.304153][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.313623][ T36] audit: type=1400 audit(1790343044.520:173): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.334203][ T371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.344735][ T310] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 28.355804][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.364637][ T321] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.373776][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.383751][ T310] usb 4-1: config 0 descriptor?? [ 28.389872][ T321] usb 3-1: Product: syz [ 28.394282][ T321] usb 3-1: Manufacturer: syz [ 28.398976][ T321] usb 3-1: SerialNumber: syz [ 28.505094][ T371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.515333][ T371] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 28.525443][ T371] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 28.539877][ T371] usb 1-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 28.549432][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.557591][ T371] usb 1-1: Product: syz [ 28.561832][ T371] usb 1-1: Manufacturer: syz [ 28.566669][ T371] usb 1-1: SerialNumber: syz [ 28.577829][ T371] usb-storage 1-1:1.0: USB Mass Storage device detected [ 28.586664][ T371] scsi host1: usb-storage 1-1:1.0 [ 28.605498][ T310] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x7 [ 28.615874][ T321] usb 3-1: 0:2 : does not exist [ 28.620782][ T321] usb 3-1: unit 9 not found! [ 28.630603][ T310] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 28.644138][ T321] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 28.653661][ T321] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 28.665454][ T321] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 28.686615][ T321] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 28.699553][ T321] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 28.709360][ T321] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 28.719046][ T321] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 28.732189][ T321] usb 3-1: USB disconnect, device number 4 [ 28.781795][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.791352][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.801912][ T310] usb 1-1: USB disconnect, device number 3 [ 28.814295][ T318] usb 2-1: device descriptor read/64, error -71 [ 28.829521][ T36] audit: type=1400 audit(1790343045.060:174): avc: denied { mounton } for pid=443 comm="syz.3.37" path="/13/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.084056][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 29.091905][ T318] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 29.101276][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.109467][ T318] usb 2-1: Product: syz [ 29.113778][ T318] usb 2-1: Manufacturer: syz [ 29.118568][ T318] usb 2-1: SerialNumber: syz [ 29.132156][ T36] audit: type=1400 audit(1790343045.360:175): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.167089][ T36] audit: type=1400 audit(1790343045.390:176): avc: denied { write } for pid=464 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.231406][ T467] tipc: Enabling of bearer rejected, failed to enable media [ 29.240514][ T36] audit: type=1400 audit(1790343045.480:177): avc: denied { ioctl } for pid=466 comm="syz.2.43" path="socket:[4905]" dev="sockfs" ino=4905 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.282615][ T36] audit: type=1400 audit(1790343045.510:178): avc: denied { read } for pid=468 comm="syz.2.44" dev="sockfs" ino=4912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.396694][ T477] netlink: 224 bytes leftover after parsing attributes in process `syz.2.44'. [ 29.624069][ T321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.774447][ T321] usb 1-1: Using ep0 maxpacket: 8 [ 29.780573][ T321] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.791928][ T321] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.805026][ T321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 29.811674][ T321] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 29.821068][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.830271][ T321] usb 1-1: config 0 descriptor?? [ 30.240923][ T321] elecom 0003:056E:00FD.0003: item fetching failed at offset 20/24 [ 30.249370][ T321] elecom 0003:056E:00FD.0003: probe with driver elecom failed with error -22 [ 30.341767][ T488] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.443841][ T372] usb 1-1: USB disconnect, device number 4 [ 30.468832][ T492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.509493][ T492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.893476][ T372] usb 4-1: USB disconnect, device number 3 [ 31.234314][ T516] ./dev/sda1: Can't lookup blockdev [ 31.455528][ T524] capability: warning: `syz.2.60' uses deprecated v2 capabilities in a way that may be insecure [ 31.566129][ T318] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 31.595251][ T318] usb 2-1: USB disconnect, device number 3 [ 31.615913][ T529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.63'. [ 31.796180][ T536] rust_binder: 534:536 no such ref 3 [ 31.802180][ T536] rust_binder: Read failure Err(EAGAIN) in pid:42 [ 32.078709][ T561] overlayfs: overlapping lowerdir path [ 32.232596][ T454] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.239096][ T572] tipc: MTU too low for tipc bearer [ 32.324051][ T372] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.474046][ T372] usb 1-1: Using ep0 maxpacket: 8 [ 32.480431][ T372] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 32.491900][ T372] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.505083][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.511726][ T372] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 32.520972][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.529151][ T321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.537269][ T372] usb 1-1: config 0 descriptor?? [ 32.585783][ T582] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 32.695025][ T321] usb 3-1: config 1 has an invalid interface number: 7 but max is 2 [ 32.703145][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.713459][ T321] usb 3-1: config 1 has no interface number 2 [ 32.719655][ T321] usb 3-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 32.730654][ T321] usb 3-1: config 1 interface 7 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.740713][ T321] usb 3-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 32.754110][ T321] usb 3-1: config 1 interface 7 has no altsetting 0 [ 32.762042][ T321] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 32.771295][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.779395][ T321] usb 3-1: Product: syz [ 32.783637][ T321] usb 3-1: Manufacturer: syz [ 32.788437][ T321] usb 3-1: SerialNumber: syz [ 32.864045][ T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.961450][ T372] usbhid 1-1:0.0: can't add hid device: -71 [ 32.969664][ T372] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.979875][ T372] usb 1-1: USB disconnect, device number 5 [ 33.014027][ T318] usb 2-1: Using ep0 maxpacket: 32 [ 33.020235][ T318] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 33.028754][ T318] usb 2-1: config 0 has no interface number 0 [ 33.035072][ T318] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 33.046603][ T318] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 33.056028][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.064619][ T318] usb 2-1: Product: syz [ 33.068923][ T318] usb 2-1: Manufacturer: syz [ 33.073554][ T318] usb 2-1: SerialNumber: syz [ 33.079108][ T318] usb 2-1: config 0 descriptor?? [ 33.085692][ T586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 33.294190][ T586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 33.488411][ T588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.80'. [ 33.505805][ T318] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 33.524244][ T321] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 33.574801][ T597] raw_sendmsg: syz.2.82 forgot to set AF_INET. Fix it! [ 33.582135][ T318] asix 2-1:0.188: probe with driver asix failed with error -71 [ 33.596582][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 33.596595][ T36] audit: type=1400 audit(1790343049.830:225): avc: denied { map } for pid=592 comm="syz.0.81" path="pipe:[2237]" dev="pipefs" ino=2237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 33.631543][ T321] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 33.644085][ T318] usb 2-1: USB disconnect, device number 4 [ 33.675417][ T321] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.731677][ T321] usb 3-1: USB disconnect, device number 5 [ 33.744035][ T36] audit: type=1400 audit(1790343049.860:226): avc: denied { mount } for pid=592 comm="syz.0.81" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.767889][ T608] sock: sock_set_timeout: `syz.0.84' (pid 608) tries to set negative timeout [ 33.789911][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.836144][ T36] audit: type=1400 audit(1790343049.860:227): avc: denied { setopt } for pid=592 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.881151][ T36] audit: type=1400 audit(1790343049.930:228): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.054564][ T36] audit: type=1400 audit(1790343050.280:229): avc: denied { write } for pid=615 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.098995][ T618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 34.117874][ T618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 34.254054][ T577] Bluetooth: hci0: command 0x1003 tx timeout [ 34.260123][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.276561][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.293730][ T625] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 34.304028][ T36] audit: type=1400 audit(1790343050.520:230): avc: denied { execute } for pid=624 comm="syz.3.90" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 34.327488][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.336940][ T625] SELinux: failed to load policy [ 34.342181][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.352093][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.380105][ T36] audit: type=1400 audit(1790343050.520:231): avc: denied { load_policy } for pid=624 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.400001][ T321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.409275][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.435779][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.449622][ T36] audit: type=1400 audit(1790343050.660:232): avc: denied { name_bind } for pid=626 comm="syz.3.91" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 34.470869][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.480132][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.488371][ T318] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 34.496844][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.506408][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.554239][ T321] usb 2-1: device descriptor read/64, error -71 [ 34.655150][ T318] usb 1-1: descriptor type invalid, skip [ 34.660854][ T318] usb 1-1: No LPM exit latency info found, disabling LPM. [ 34.669300][ T318] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 34.677932][ T318] usb 1-1: config index 0 descriptor too short (expected 259, got 18) [ 34.686288][ T372] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.693827][ T318] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 34.702698][ T318] usb 1-1: can't read configurations, error -22 [ 34.804049][ T321] usb 2-1: device descriptor read/64, error -71 [ 34.834059][ T318] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 34.845057][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.856038][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.866018][ T372] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 34.879169][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.897419][ T372] usb 4-1: config 0 descriptor?? [ 34.933943][ T641] fuse: Bad value for 'fd' [ 34.985023][ T318] usb 1-1: descriptor type invalid, skip [ 34.990897][ T318] usb 1-1: No LPM exit latency info found, disabling LPM. [ 34.998688][ T318] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 35.007265][ T318] usb 1-1: config index 0 descriptor too short (expected 259, got 18) [ 35.015661][ T318] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.024218][ T318] usb 1-1: can't read configurations, error -22 [ 35.030666][ T318] usb usb1-port1: attempt power cycle [ 35.054025][ T321] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.184053][ T321] usb 2-1: device descriptor read/64, error -71 [ 35.305700][ T372] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 35.315278][ T372] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 35.374062][ T318] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 35.384158][ T372] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 35.392235][ T372] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 35.404376][ T318] usb 1-1: descriptor type invalid, skip [ 35.410663][ T372] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 35.417983][ T318] usb 1-1: No LPM exit latency info found, disabling LPM. [ 35.425536][ T321] usb 2-1: device descriptor read/64, error -71 [ 35.431956][ T318] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 35.440342][ T372] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 35.462894][ T318] usb 1-1: config index 0 descriptor too short (expected 259, got 18) [ 35.489631][ T318] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.504262][ T318] usb 1-1: can't read configurations, error -22 [ 35.516850][ T372] usb 4-1: USB disconnect, device number 4 [ 35.523942][ T372] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 35.554122][ T321] usb usb2-port1: attempt power cycle [ 35.634117][ T318] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 35.655472][ T318] usb 1-1: descriptor type invalid, skip [ 35.661201][ T318] usb 1-1: No LPM exit latency info found, disabling LPM. [ 35.668640][ T318] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 35.677194][ T318] usb 1-1: config index 0 descriptor too short (expected 259, got 18) [ 35.685578][ T318] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.694390][ T318] usb 1-1: can't read configurations, error -22 [ 35.700847][ T318] usb usb1-port1: unable to enumerate USB device [ 35.894053][ T321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.915142][ T321] usb 2-1: device descriptor read/8, error -71 [ 36.044984][ T321] usb 2-1: device descriptor read/8, error -71 [ 36.066155][ T36] audit: type=1400 audit(1790343052.300:233): avc: denied { ioctl } for pid=648 comm="syz.3.98" path="socket:[6177]" dev="sockfs" ino=6177 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.144168][ T650] fuse: Bad value for 'group_id' [ 36.149190][ T650] fuse: Bad value for 'group_id' [ 36.294091][ T321] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.315126][ T321] usb 2-1: device descriptor read/8, error -71 [ 36.445076][ T321] usb 2-1: device descriptor read/8, error -71 [ 36.554211][ T321] usb usb2-port1: unable to enumerate USB device [ 36.920046][ T36] audit: type=1326 audit(1790343053.150:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.101" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22bd39e159 code=0x0 [ 36.984572][ T663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 37.172691][ T671] fuse: Bad value for 'user_id' [ 37.183009][ T671] fuse: Bad value for 'user_id' [ 37.187952][ T372] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.346014][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 37.357179][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.381149][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.399600][ T372] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 37.408865][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.425488][ T372] usb 4-1: config 0 descriptor?? [ 37.836786][ T372] savu 0003:1E7D:2D5A.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 38.086726][ T700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.115311][ T700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.219866][ T712] x_tables: unsorted entry at hook 1 [ 38.453822][ T719] incfs: Can't find or create .index dir in ./cgroup [ 38.461448][ T719] incfs: mount failed -22 [ 38.880243][ T786] mmap: syz.1.120 (786) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.006580][ T372] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.144077][ T372] usb 1-1: device descriptor read/64, error -71 [ 39.254054][ T321] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 39.261814][ T318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 39.394145][ T372] usb 1-1: device descriptor read/64, error -71 [ 39.415228][ T318] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.426272][ T318] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.439290][ T318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.446082][ T318] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 39.455268][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.466221][ T318] usb 2-1: config 0 descriptor?? [ 39.583791][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 39.583805][ T36] audit: type=1400 audit(1790343055.810:250): avc: denied { getopt } for pid=797 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.611709][ T798] ./file0: Can't lookup blockdev [ 39.619243][ T36] audit: type=1400 audit(1790343055.850:251): avc: denied { mounton } for pid=797 comm="syz.2.124" path="/39/dev/sda1" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.643884][ T372] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.775498][ T372] usb 1-1: device descriptor read/64, error -71 [ 39.820745][ T36] audit: type=1400 audit(1790343056.050:252): avc: denied { setopt } for pid=804 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.844377][ T805] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.127'. [ 39.873901][ T318] hid-led 0003:1D34:000A.0007: collection stack underflow [ 39.888942][ T318] hid-led 0003:1D34:000A.0007: item 0 0 0 12 parsing failed [ 39.908217][ T318] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -22 [ 40.011147][ T36] audit: type=1400 audit(1790343056.240:253): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.038769][ T372] usb 1-1: device descriptor read/64, error -71 [ 40.054505][ T371] usb 4-1: USB disconnect, device number 5 [ 40.074650][ T10] usb 2-1: USB disconnect, device number 9 [ 40.092246][ T36] audit: type=1400 audit(1790343056.320:254): avc: denied { map } for pid=813 comm="syz.3.131" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.154167][ T372] usb usb1-port1: attempt power cycle [ 40.233292][ T36] audit: type=1400 audit(1790343056.460:255): avc: denied { mounton } for pid=817 comm="syz.2.132" path="/40/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 40.255901][ T820] ./dev/sda1: Can't open blockdev [ 40.360162][ T780] bridge_slave_1: left allmulticast mode [ 40.374025][ T780] bridge_slave_1: left promiscuous mode [ 40.384253][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.402035][ T780] bridge_slave_0: left allmulticast mode [ 40.411715][ T780] bridge_slave_0: left promiscuous mode [ 40.424145][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.516403][ T780] veth1_macvtap: left promiscuous mode [ 40.521940][ T780] veth0_vlan: left promiscuous mode [ 40.534065][ T372] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.556327][ T36] audit: type=1400 audit(1790343056.790:256): avc: denied { mounton } for pid=828 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 40.578737][ T371] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 40.605265][ T372] usb 1-1: device descriptor read/8, error -71 [ 40.710624][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.718021][ T828] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.725406][ T828] bridge_slave_0: entered allmulticast mode [ 40.735979][ T828] bridge_slave_0: entered promiscuous mode [ 40.736029][ T372] usb 1-1: device descriptor read/8, error -71 [ 40.748789][ T828] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.755977][ T828] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.763167][ T828] bridge_slave_1: entered allmulticast mode [ 40.769842][ T826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.779289][ T826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.794872][ T828] bridge_slave_1: entered promiscuous mode [ 40.809547][ T371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.819422][ T371] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 40.832410][ T371] usb 4-1: can't read configurations, error -71 [ 40.872016][ T828] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.879104][ T828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.886396][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.893418][ T828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.915078][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.922516][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.939181][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.946263][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.953935][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.960988][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.982474][ T828] veth0_vlan: entered promiscuous mode [ 40.993626][ T828] veth1_macvtap: entered promiscuous mode [ 41.000293][ T372] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 41.025392][ T372] usb 1-1: device descriptor read/8, error -71 [ 41.032833][ T36] audit: type=1400 audit(1790343057.260:257): avc: denied { mounton } for pid=828 comm="syz-executor" path="/root/syzkaller.ahVQ4H/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.092961][ T36] audit: type=1400 audit(1790343057.300:258): avc: denied { unmount } for pid=828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.121171][ T36] audit: type=1400 audit(1790343057.310:259): avc: denied { getopt } for pid=842 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.155123][ T372] usb 1-1: device descriptor read/8, error -71 [ 41.264222][ T372] usb usb1-port1: unable to enumerate USB device [ 41.854080][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.004991][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.024724][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.044168][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 42.075313][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.084597][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.092592][ T10] usb 2-1: Product: syz [ 42.097519][ T10] usb 2-1: Manufacturer: syz [ 42.102128][ T10] usb 2-1: SerialNumber: syz [ 42.112242][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 42.184069][ T372] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 42.204021][ T371] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.304035][ T321] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 42.335761][ T372] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 42.347102][ T372] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.360522][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.367760][ T372] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 42.377089][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.388297][ T371] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.397686][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.406148][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.415387][ T372] usb 1-1: config 0 descriptor?? [ 42.430622][ T371] usb 5-1: config 0 descriptor?? [ 42.465263][ T321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.476563][ T321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 42.487558][ T321] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.501741][ T321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.508576][ T321] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 42.517859][ T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.529740][ T321] usb 4-1: config 0 descriptor?? [ 42.535307][ T865] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 42.827341][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.834704][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.843941][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.851308][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.858322][ T371] usbhid 5-1:0.0: can't add hid device: -71 [ 42.864434][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.871393][ T372] belkin 0003:050D:3201.0008: unknown main item tag 0x0 [ 42.878396][ T371] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 42.887424][ T371] usb 5-1: USB disconnect, device number 2 [ 42.899303][ T372] belkin 0003:050D:3201.0008: hiddev96,hidraw0: USB HID v10.03 Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0 [ 43.053433][ T861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.063042][ T861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.084757][ T372] usb 1-1: USB disconnect, device number 14 [ 43.126804][ T10] cdc_mbim 2-1:1.0: bind() failure [ 43.135628][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 43.147810][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 43.156094][ T321] usbhid 4-1:0.0: can't add hid device: -71 [ 43.165045][ T10] usb 2-1: USB disconnect, device number 10 [ 43.171019][ T321] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.185141][ T321] usb 4-1: USB disconnect, device number 8 [ 43.364057][ T371] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.515156][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.526144][ T371] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 43.535355][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.546951][ T371] usb 5-1: config 0 descriptor?? [ 43.864033][ T321] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 43.914042][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.014047][ T321] usb 1-1: Using ep0 maxpacket: 8 [ 44.020266][ T321] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 44.030310][ T321] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.054736][ T321] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 44.064624][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.072712][ T321] usb 1-1: Product: syz [ 44.085789][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 44.098596][ T321] usb 1-1: Manufacturer: syz [ 44.103268][ T321] usb 1-1: SerialNumber: syz [ 44.114378][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.124985][ T869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 44.133682][ T10] usb 2-1: Product: syz [ 44.138691][ T10] usb 2-1: Manufacturer: syz [ 44.143347][ T10] usb 2-1: SerialNumber: syz [ 44.339170][ T869] netlink: 'syz.0.148': attribute type 27 has an invalid length. [ 44.355746][ T371] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 44.366573][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 44.379310][ T372] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 44.389727][ T869] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.396998][ T869] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.405342][ T371] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 44.417312][ T10] usb 2-1: USB disconnect, device number 11 [ 44.496359][ T321] usblp0: Disabling reads from problematic bidirectional printer [ 44.515573][ T321] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 44.533149][ T321] usb 1-1: USB disconnect, device number 15 [ 44.545192][ T321] usblp0: removed [ 44.575237][ T372] usb 4-1: config 1 interface 0 has no altsetting 0 [ 44.583304][ T372] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.593476][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.601702][ T372] usb 4-1: Product: syz [ 44.606221][ T372] usb 4-1: Manufacturer: syz [ 44.610835][ T372] usb 4-1: SerialNumber: syz [ 44.731631][ T321] usb 5-1: USB disconnect, device number 3 [ 44.737813][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 44.825161][ T372] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 44.836337][ T372] usb 4-1: USB disconnect, device number 9 [ 44.894319][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.046696][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 45.056209][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.078740][ T10] usb 2-1: Product: syz [ 45.086466][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 45.086480][ T36] audit: type=1400 audit(1790343061.320:268): avc: denied { append } for pid=878 comm="syz.0.152" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.115233][ T10] usb 2-1: Manufacturer: syz [ 45.119842][ T10] usb 2-1: SerialNumber: syz [ 45.126360][ T879] syzkaller1: entered promiscuous mode [ 45.131856][ T879] syzkaller1: entered allmulticast mode [ 45.356120][ T36] audit: type=1400 audit(1790343061.590:269): avc: denied { append } for pid=885 comm="syz.3.155" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 45.435459][ T36] audit: type=1400 audit(1790343061.670:270): avc: denied { bind } for pid=885 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.455272][ T321] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 45.463101][ T36] audit: type=1400 audit(1790343061.670:271): avc: denied { name_bind } for pid=885 comm="syz.3.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 45.484278][ T36] audit: type=1400 audit(1790343061.670:272): avc: denied { node_bind } for pid=885 comm="syz.3.155" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.544167][ T372] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.551967][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 45.635333][ T321] usb 1-1: not running at top speed; connect to a high speed hub [ 45.644163][ T321] usb 1-1: config 146 has an invalid interface number: 139 but max is 1 [ 45.652778][ T321] usb 1-1: config 146 contains an unexpected descriptor of type 0x1, skipping [ 45.661940][ T321] usb 1-1: config 146 has an invalid interface number: 61 but max is 1 [ 45.670429][ T321] usb 1-1: config 146 has no interface number 0 [ 45.676905][ T321] usb 1-1: config 146 has no interface number 1 [ 45.683349][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 45.695215][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 45.706929][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 45.718866][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 45.724374][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0xB has invalid maxpacket 2048, setting to 64 [ 45.736256][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 45.749934][ T321] usb 1-1: config 146 interface 139 altsetting 131 has a duplicate endpoint with address 0xB, skipping [ 45.762501][ T321] usb 1-1: config 146 interface 139 altsetting 131 has a duplicate endpoint with address 0x6, skipping [ 45.773909][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0x5 has an invalid bInterval 192, changing to 4 [ 45.785985][ T321] usb 1-1: config 146 interface 139 altsetting 131 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 45.798332][ T321] usb 1-1: config 146 interface 61 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 45.814067][ T36] audit: type=1400 audit(1790343062.050:273): avc: denied { read } for pid=882 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.833211][ T321] usb 1-1: config 146 interface 61 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 45.864134][ T321] usb 1-1: config 146 interface 61 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 45.885112][ T321] usb 1-1: config 146 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 45.907963][ T321] usb 1-1: config 146 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 45.919277][ T321] usb 1-1: config 146 interface 61 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 45.930790][ T321] usb 1-1: config 146 interface 61 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 45.942039][ T321] usb 1-1: config 146 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 45.953364][ T321] usb 1-1: config 146 interface 139 has no altsetting 0 [ 45.960523][ T321] usb 1-1: config 146 interface 61 has no altsetting 0 [ 45.968599][ T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.978805][ T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.987507][ T10] usb 2-1: USB disconnect, device number 12 [ 45.995940][ T321] usb 1-1: New USB device found, idVendor=079b, idProduct=0027, bcdDevice=16.98 [ 46.009772][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.031100][ T321] usb 1-1: Product: ㇿ罔랾⤗瑘襻ꇚⷄ踮䃪å£Ã– [ 46.039600][ T321] usb 1-1: Manufacturer: 䧤躔ì®é¨®â³³à¿‚æ—솃è”㬌㙀켼ä³â¦¬ [ 46.047978][ T321] usb 1-1: SerialNumber: á¥â“·ä•µâ„¯ç­ç™ºã•“狆á„皵蓄砚꺪믨é‹ï”ºê¼‡å¾’Ｊ护苗顯壋ცë¦ç¡œè´¬ç›¿ã¤„궖æ­¾é¥ë”ºìµ¯á¨›á¿œâ›”脹䂿ᑽꯃຽ냄泆賫髉쭄哬੄း縊霥䧓ç¹î‡¦î³—æ¦ã¡¥îŠœå™šâ¹³îƒà§ªï”ë ´á²åµç³šî¡Ÿá¤„ [ 46.076591][ T879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 46.085462][ T879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 46.221558][ T36] audit: type=1400 audit(1790343062.450:274): avc: denied { ioctl } for pid=889 comm="syz.3.156" path="socket:[10364]" dev="sockfs" ino=10364 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.250682][ T36] audit: type=1400 audit(1790343062.490:275): avc: denied { bind } for pid=889 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.296846][ T321] pl2303 1-1:146.139: required endpoints missing [ 46.305952][ T321] pl2303 1-1:146.61: required endpoints missing [ 46.317543][ T321] usb 1-1: USB disconnect, device number 16 [ 46.484039][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.573921][ T36] audit: type=1400 audit(1790343062.800:276): avc: denied { bind } for pid=891 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.595836][ T892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.157'. [ 46.634036][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 46.645055][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.658373][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.669015][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.678416][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.686637][ T10] usb 4-1: Product: syz [ 46.690978][ T10] usb 4-1: Manufacturer: syz [ 46.695809][ T10] usb 4-1: SerialNumber: syz [ 46.884075][ T321] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 46.909117][ T10] usb 4-1: 0:2 : does not exist [ 46.919369][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 46.933087][ T10] usb 4-1: USB disconnect, device number 10 [ 47.045007][ T321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.055417][ T321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.066885][ T321] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 47.081368][ T321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.090690][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.098850][ T321] usb 2-1: Product: syz [ 47.103136][ T321] usb 2-1: Manufacturer: syz [ 47.108135][ T321] usb 2-1: SerialNumber: syz [ 47.115729][ T321] cdc_mbim 2-1:1.0: skipping garbage [ 47.767637][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.791864][ T908] FAULT_INJECTION: forcing a failure. [ 47.791864][ T908] name failslab, interval 1, probability 0, space 0, times 0 [ 47.804698][ T908] CPU: 0 UID: 0 PID: 908 Comm: syz.0.164 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 47.804722][ T908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.804735][ T908] Call Trace: [ 47.804741][ T908] [ 47.804748][ T908] __dump_stack+0x21/0x30 [ 47.804782][ T908] dump_stack_lvl+0x140/0x1c0 [ 47.804805][ T908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.804832][ T908] dump_stack+0x19/0x20 [ 47.804857][ T908] should_fail_ex+0x3c2/0x510 [ 47.804877][ T908] should_failslab+0xac/0x100 [ 47.804897][ T908] kmem_cache_alloc_noprof+0x42/0x410 [ 47.804915][ T908] ? __kernfs_new_node+0xf1/0x740 [ 47.804937][ T908] __kernfs_new_node+0xf1/0x740 [ 47.804957][ T908] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 47.804979][ T908] ? kernfs_new_node+0x280/0x280 [ 47.805000][ T908] ? __kasan_check_write+0x18/0x20 [ 47.805015][ T908] ? down_write+0xee/0x2b0 [ 47.805036][ T908] ? rpm_resume+0xb92/0x1670 [ 47.805057][ T908] kernfs_new_node+0x154/0x280 [ 47.805078][ T908] kernfs_create_link+0xa8/0x200 [ 47.805092][ T908] sysfs_do_create_link_sd+0x8a/0x120 [ 47.805110][ T908] sysfs_create_link+0x6c/0x90 [ 47.805127][ T908] driver_sysfs_add+0x91/0x240 [ 47.805142][ T908] really_probe+0x178/0x8b0 [ 47.805157][ T908] __driver_probe_device+0x193/0x280 [ 47.805172][ T908] driver_probe_device+0x54/0x3f0 [ 47.805188][ T908] __driver_attach+0x422/0x5e0 [ 47.805202][ T908] bus_for_each_dev+0x249/0x2d0 [ 47.805228][ T908] ? __cfi___driver_attach+0x10/0x10 [ 47.805243][ T908] ? __cfi_bus_for_each_dev+0x10/0x10 [ 47.805262][ T908] ? __kasan_kmalloc+0x96/0xb0 [ 47.805281][ T908] ? _raw_spin_unlock+0x45/0x60 [ 47.805296][ T908] ? klist_add_tail+0x1dd/0x220 [ 47.805319][ T908] driver_attach+0x46/0x50 [ 47.805333][ T908] bus_add_driver+0x393/0x730 [ 47.805359][ T908] driver_register+0x2b7/0x3c0 [ 47.805376][ T908] usb_gadget_register_driver_owner+0xfc/0x270 [ 47.805397][ T908] raw_ioctl+0x144c/0x37a0 [ 47.805413][ T908] ? __cfi_raw_ioctl+0x10/0x10 [ 47.805427][ T908] ? selinux_file_ioctl+0x732/0x1480 [ 47.805445][ T908] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 47.805465][ T908] ? __fget_files+0x2bc/0x330 [ 47.805485][ T908] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.805505][ T908] ? security_file_ioctl+0x3e/0x110 [ 47.805521][ T908] ? __cfi_raw_ioctl+0x10/0x10 [ 47.805541][ T908] __se_sys_ioctl+0x126/0x1b0 [ 47.805561][ T908] __x64_sys_ioctl+0x7f/0xa0 [ 47.805580][ T908] x64_sys_call+0x1878/0x2ee0 [ 47.805595][ T908] do_syscall_64+0x57/0xf0 [ 47.805610][ T908] ? clear_bhb_loop+0x50/0xa0 [ 47.805631][ T908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.805651][ T908] RIP: 0033:0x7f9b9219ddeb [ 47.805670][ T908] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 47.805682][ T908] RSP: 002b:00007f9b93128f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.805707][ T908] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f9b9219ddeb [ 47.805718][ T908] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 47.805728][ T908] RBP: 00007f9b93129fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 47.805738][ T908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.805748][ T908] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000000 [ 47.805760][ T908] [ 47.805816][ T908] raw-gadget.3 gadget.0: really_probe: driver_sysfs_add failed [ 48.155254][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.164915][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.225061][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.236218][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.245593][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.254610][ T10] usb 4-1: config 0 descriptor?? [ 48.312271][ T372] usb 5-1: unable to get BOS descriptor or descriptor too short [ 48.324163][ T372] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 48.344182][ T372] usb 5-1: can't read configurations, error -71 [ 48.352202][ T321] cdc_mbim 2-1:1.0: bind() failure [ 48.358706][ T321] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 48.376164][ T321] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 48.384416][ T36] audit: type=1400 audit(1790343064.610:277): avc: denied { checkpoint_restore } for pid=910 comm="syz.4.165" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.415261][ T371] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 48.428637][ T321] usb 2-1: USB disconnect, device number 13 [ 48.441852][ T911] netlink: 'syz.4.165': attribute type 12 has an invalid length. [ 48.564031][ T371] usb 1-1: device descriptor read/64, error -71 [ 48.667499][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 48.674165][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 48.685853][ T10] usb 4-1: USB disconnect, device number 11 [ 48.814155][ T371] usb 1-1: device descriptor read/64, error -71 [ 49.054064][ T371] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 49.104036][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.194049][ T371] usb 1-1: device descriptor read/64, error -71 [ 49.234043][ T372] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.265004][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.280345][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.298292][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.319117][ T10] usb 4-1: config 0 descriptor?? [ 49.374425][ T372] usb 5-1: device descriptor read/64, error -71 [ 49.434072][ T371] usb 1-1: device descriptor read/64, error -71 [ 49.544182][ T371] usb usb1-port1: attempt power cycle [ 49.614038][ T372] usb 5-1: device descriptor read/64, error -71 [ 49.734127][ T372] usb usb5-port1: attempt power cycle [ 49.894082][ T371] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 49.925013][ T371] usb 1-1: device descriptor read/8, error -71 [ 50.064978][ T371] usb 1-1: device descriptor read/8, error -71 [ 50.084042][ T372] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.114962][ T372] usb 5-1: device descriptor read/8, error -71 [ 50.134397][ T10] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 50.154089][ T321] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.164078][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 50.245674][ T372] usb 5-1: device descriptor read/8, error -71 [ 50.304091][ T371] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 50.325059][ T371] usb 1-1: device descriptor read/8, error -71 [ 50.331983][ T321] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 50.352248][ T321] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 50.374045][ T321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.393332][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.411525][ T321] usb 2-1: Product: syz [ 50.415997][ T321] usb 2-1: Manufacturer: syz [ 50.420664][ T321] usb 2-1: SerialNumber: syz [ 50.454997][ T371] usb 1-1: device descriptor read/8, error -71 [ 50.467538][ T10] usb 4-1: USB disconnect, device number 12 [ 50.473533][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.494071][ T372] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.518605][ T372] usb 5-1: device descriptor read/8, error -71 [ 50.564127][ T371] usb usb1-port1: unable to enumerate USB device [ 50.640929][ T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.654960][ T372] usb 5-1: device descriptor read/8, error -71 [ 50.664380][ T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.685497][ T321] cdc_ncm 2-1:1.0: bind() failure [ 50.691443][ T321] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 50.714038][ T321] cdc_ncm 2-1:1.1: bind() failure [ 50.729378][ T321] usb 2-1: USB disconnect, device number 14 [ 50.764139][ T372] usb usb5-port1: unable to enumerate USB device [ 51.174057][ T321] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 51.345045][ T321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.377257][ T321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.414309][ T321] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.449099][ T321] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.506048][ T321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.526096][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.542475][ T321] usb 1-1: Product: syz [ 51.558333][ T321] usb 1-1: Manufacturer: syz [ 51.562957][ T321] usb 1-1: SerialNumber: syz [ 51.596740][ T321] cdc_mbim 1-1:1.0: skipping garbage [ 51.618160][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 51.669539][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 51.669562][ T36] audit: type=1400 audit(1790343067.900:283): avc: denied { remount } for pid=964 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.697128][ T965] ======================================================= [ 51.697128][ T965] WARNING: The mand mount option has been deprecated and [ 51.697128][ T965] and is ignored by this kernel. Remove the mand [ 51.697128][ T965] option from the mount to silence this warning. [ 51.697128][ T965] ======================================================= [ 51.774328][ T36] audit: type=1400 audit(1790343068.010:284): avc: denied { write } for pid=964 comm="syz.1.182" name="fib_triestat" dev="proc" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.799251][ T951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.064044][ T372] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.194037][ T372] usb 2-1: device descriptor read/64, error -71 [ 52.304073][ T371] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.417066][ T951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.434032][ T372] usb 2-1: device descriptor read/64, error -71 [ 52.440355][ T371] usb 5-1: device descriptor read/64, error -71 [ 52.624958][ T321] cdc_mbim 1-1:1.0: bind() failure [ 52.634139][ T321] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 52.642649][ T321] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 52.654102][ T321] usb 1-1: USB disconnect, device number 21 [ 52.684072][ T372] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.691715][ T371] usb 5-1: device descriptor read/64, error -71 [ 52.824095][ T372] usb 2-1: device descriptor read/64, error -71 [ 52.934051][ T371] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 53.064070][ T371] usb 5-1: device descriptor read/64, error -71 [ 53.074310][ T372] usb 2-1: device descriptor read/64, error -71 [ 53.134166][ T321] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 53.158094][ T36] audit: type=1400 audit(1790343070.393:285): avc: denied { read } for pid=991 comm="syz.0.192" name="file2" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.181794][ T36] audit: type=1400 audit(1790343070.423:286): avc: denied { open } for pid=991 comm="syz.0.192" path="/41/file2" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.210486][ T372] usb usb2-port1: attempt power cycle [ 53.249279][ T999] fuse: Invalid rootmode [ 53.276483][ T36] audit: type=1400 audit(1790343070.513:287): avc: denied { search } for pid=1000 comm="syz.0.195" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.311200][ T321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.325624][ T321] usb 4-1: not running at top speed; connect to a high speed hub [ 53.340415][ T36] audit: type=1400 audit(1790343070.533:288): avc: denied { append } for pid=1000 comm="syz.0.195" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.363618][ T371] usb 5-1: device descriptor read/64, error -71 [ 53.370483][ T321] usb 4-1: config 87 has an invalid interface number: 152 but max is 0 [ 53.381466][ T321] usb 4-1: config 87 has no interface number 0 [ 53.387872][ T321] usb 4-1: config 87 interface 152 has no altsetting 0 [ 53.400404][ T321] usb 4-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71 [ 53.409885][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.418046][ T321] usb 4-1: Product: syz [ 53.422412][ T321] usb 4-1: Manufacturer: syz [ 53.427371][ T321] usb 4-1: SerialNumber: syz [ 53.484120][ T371] usb usb5-port1: attempt power cycle [ 53.574035][ T372] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 53.595000][ T372] usb 2-1: device descriptor read/8, error -71 [ 53.644289][ T321] cdc_ether 4-1:87.152: More than one union descriptor, skipping ... [ 53.652391][ T321] usb 4-1: bad CDC descriptors [ 53.669704][ T321] usb 4-1: USB disconnect, device number 13 [ 53.718222][ T1013] Invalid argument reading file caps for ./file0 [ 53.728096][ T372] usb 2-1: device descriptor read/8, error -71 [ 53.834102][ T371] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 53.855184][ T371] usb 5-1: device descriptor read/8, error -71 [ 53.974087][ T372] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.985171][ T371] usb 5-1: device descriptor read/8, error -71 [ 53.995106][ T372] usb 2-1: device descriptor read/8, error -71 [ 54.015328][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 54.125194][ T372] usb 2-1: device descriptor read/8, error -71 [ 54.165917][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.191781][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.209056][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.224050][ T371] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 54.231744][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.254579][ T372] usb usb2-port1: unable to enumerate USB device [ 54.267377][ T36] audit: type=1400 audit(1790343071.503:289): avc: denied { getopt } for pid=1022 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.290774][ T371] usb 5-1: device descriptor read/8, error -71 [ 54.297094][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.306432][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.323969][ T36] audit: type=1400 audit(1790343071.553:290): avc: denied { write } for pid=1022 comm="syz.3.203" path="socket:[11738]" dev="sockfs" ino=11738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.349120][ T10] usb 1-1: Product: syz [ 54.353304][ T10] usb 1-1: Manufacturer: syz [ 54.361730][ T10] usb 1-1: SerialNumber: syz [ 54.371886][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 54.444957][ T371] usb 5-1: device descriptor read/8, error -71 [ 54.564119][ T371] usb usb5-port1: unable to enumerate USB device [ 54.579656][ T1017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 54.814083][ T371] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.895324][ T36] audit: type=1400 audit(1790343072.133:291): avc: denied { mounton } for pid=1032 comm="syz.1.207" path="/44/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 54.918196][ T1033] incfs: Can't find or create .index dir in ./file0 [ 54.927229][ T1033] incfs: mount failed -30 [ 54.974414][ T371] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 54.988040][ T371] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 54.997390][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.008649][ T371] usb 4-1: config 0 descriptor?? [ 55.197480][ T1017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.215976][ T1029] tipc: Started in network mode [ 55.220970][ T1029] tipc: Node identity 7f000001, cluster identity 4711 [ 55.228260][ T1029] tipc: Enabled bearer , priority 10 [ 55.235741][ T371] usb 4-1: USB disconnect, device number 14 [ 55.334060][ T310] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 55.405737][ T10] cdc_mbim 1-1:1.0: bind() failure [ 55.415134][ T10] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 55.423595][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 55.435077][ T10] usb 1-1: USB disconnect, device number 22 [ 55.484039][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 55.490356][ T310] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.498961][ T310] usb 5-1: config 0 has no interface number 0 [ 55.506997][ T310] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.517643][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.525892][ T310] usb 5-1: Product: syz [ 55.530188][ T310] usb 5-1: Manufacturer: syz [ 55.535023][ T310] usb 5-1: SerialNumber: syz [ 55.541900][ T310] usb 5-1: config 0 descriptor?? [ 55.548320][ T310] smsc95xx v2.0.0 [ 55.749684][ T310] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 55.775890][ T310] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 55.786704][ T36] audit: type=1400 audit(1790343073.023:292): avc: denied { mount } for pid=1046 comm="syz.3.210" name="/" dev="ramfs" ino=12257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.823927][ T310] usb 5-1: USB disconnect, device number 12 [ 56.043058][ T1063] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.124037][ T371] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 56.286889][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.323674][ T371] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.344904][ T310] tipc: Node number set to 2130706433 [ 56.353713][ T1081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1081 comm=syz.3.223 [ 56.366063][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 56.374677][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.396717][ T371] usb 2-1: config 0 descriptor?? [ 56.544991][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.571661][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.609311][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 56.618695][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.640565][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 56.664050][ T372] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 56.690836][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 56.690851][ T36] audit: type=1400 audit(1790343073.923:363): avc: denied { create } for pid=1096 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.806475][ T371] usbhid 2-1:0.0: can't add hid device: -71 [ 56.813950][ T371] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 56.824079][ T372] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.836063][ T371] usb 2-1: USB disconnect, device number 19 [ 56.845521][ T372] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.874091][ T372] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.894672][ T372] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.922032][ T372] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.931427][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.947375][ T372] usb 4-1: Product: syz [ 56.955977][ T372] usb 4-1: Manufacturer: syz [ 56.965003][ T372] usb 4-1: SerialNumber: syz [ 56.979996][ T372] cdc_mbim 4-1:1.0: skipping garbage [ 57.179649][ T1085] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.314041][ T371] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.463587][ T1109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.473231][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.484887][ T321] usb 1-1: USB disconnect, device number 23 [ 57.497281][ T371] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 57.516286][ T1109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.525490][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.541859][ T371] usb 2-1: config 0 descriptor?? [ 57.709925][ T36] audit: type=1400 audit(1790343074.943:364): avc: denied { bind } for pid=1125 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.755777][ T36] audit: type=1400 audit(1790343074.943:365): avc: denied { setopt } for pid=1125 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.792102][ T1085] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.874071][ T321] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 58.004030][ T321] usb 1-1: device descriptor read/64, error -71 [ 58.010662][ T372] cdc_mbim 4-1:1.0: bind() failure [ 58.021521][ T372] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 58.030030][ T372] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 58.041437][ T372] usb 4-1: USB disconnect, device number 15 [ 58.208137][ T36] audit: type=1400 audit(1790343075.443:366): avc: denied { ioctl } for pid=1138 comm="syz.4.238" path="/23/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=65 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.254711][ T321] usb 1-1: device descriptor read/64, error -71 [ 58.273557][ T36] audit: type=1400 audit(1790343075.503:367): avc: denied { execute } for pid=1138 comm="syz.4.238" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.364417][ T371] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 58.374340][ T371] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 58.494545][ T321] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 58.624044][ T371] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 58.631706][ T321] usb 1-1: device descriptor read/64, error -71 [ 58.671434][ T372] usb 2-1: USB disconnect, device number 20 [ 58.677401][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 58.785205][ T371] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 58.795526][ T371] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.810232][ T371] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 58.819918][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.828085][ T371] usb 5-1: Product: syz [ 58.832408][ T371] usb 5-1: Manufacturer: syz [ 58.837211][ T371] usb 5-1: SerialNumber: syz [ 58.844927][ T371] rtl8150 5-1:1.0: couldn't find required endpoints [ 58.852035][ T371] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 58.874067][ T321] usb 1-1: device descriptor read/64, error -71 [ 58.984169][ T321] usb usb1-port1: attempt power cycle [ 59.126483][ T371] usb 5-1: USB disconnect, device number 13 [ 59.212683][ T36] audit: type=1400 audit(1790343076.443:368): avc: denied { bind } for pid=1148 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.259866][ T36] audit: type=1400 audit(1790343076.473:369): avc: denied { map } for pid=1148 comm="syz.1.242" path="socket:[13581]" dev="sockfs" ino=13581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.328850][ T36] audit: type=1400 audit(1790343076.473:370): avc: denied { read } for pid=1148 comm="syz.1.242" path="socket:[13581]" dev="sockfs" ino=13581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.354032][ T321] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 59.390773][ T321] usb 1-1: device descriptor read/8, error -71 [ 59.525550][ T321] usb 1-1: device descriptor read/8, error -71 [ 59.654037][ T371] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 59.764052][ T321] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 59.785374][ T321] usb 1-1: device descriptor read/8, error -71 [ 59.814043][ T371] usb 4-1: Using ep0 maxpacket: 16 [ 59.820430][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.831706][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.841757][ T371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.855153][ T371] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 59.864507][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.874333][ T371] usb 4-1: config 0 descriptor?? [ 59.914022][ T372] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 59.922735][ T321] usb 1-1: device descriptor read/8, error -71 [ 60.034189][ T321] usb usb1-port1: unable to enumerate USB device [ 60.064013][ T372] usb 5-1: Using ep0 maxpacket: 32 [ 60.070309][ T372] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.079044][ T372] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.089338][ T372] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.100239][ T372] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.109630][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.119590][ T372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 60.132751][ T372] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.141988][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.152255][ T372] usb 5-1: config 0 descriptor?? [ 60.198826][ T1160] overlayfs: statfs failed on './file0' [ 60.227639][ T1165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.237519][ T1165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.290533][ T371] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 60.301459][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.309025][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.316463][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.323734][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.331206][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.338786][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.346226][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.353494][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.363584][ T310] usb 5-1: USB disconnect, device number 14 [ 60.371937][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.382471][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.389949][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.397383][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.404867][ T371] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 60.464036][ T372] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.500107][ T371] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 60.512885][ T371] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 60.537230][ T371] microsoft 0003:045E:07DA.0009: no inputs found [ 60.543597][ T371] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 60.560278][ T371] usb 4-1: USB disconnect, device number 16 [ 60.634087][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 60.640465][ T372] usb 2-1: config 0 has no interfaces? [ 60.647505][ T372] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.656842][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.665836][ T372] usb 2-1: Product: syz [ 60.670184][ T372] usb 2-1: Manufacturer: syz [ 60.675016][ T372] usb 2-1: SerialNumber: syz [ 60.683760][ T372] usb 2-1: config 0 descriptor?? [ 60.874073][ T321] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 60.890999][ T371] usb 2-1: USB disconnect, device number 21 [ 61.025239][ T321] usb 1-1: Using ep0 maxpacket: 8 [ 61.036410][ T321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.049304][ T321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.069646][ T321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.094683][ T321] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 61.108322][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.121560][ T321] usb 1-1: Product: syz [ 61.125942][ T321] usb 1-1: Manufacturer: syz [ 61.130702][ T321] usb 1-1: SerialNumber: syz [ 61.164027][ T372] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 61.315206][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.326419][ T372] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.335732][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.349295][ T321] usb 1-1: USB disconnect, device number 28 [ 61.357800][ T372] usb 5-1: config 0 descriptor?? [ 61.421730][ T36] audit: type=1400 audit(1790343078.653:371): avc: denied { create } for pid=1181 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 61.591879][ T36] audit: type=1400 audit(1790343078.823:372): avc: denied { remount } for pid=1189 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.705027][ T36] audit: type=1400 audit(1790343078.943:373): avc: denied { read } for pid=1201 comm="syz.1.260" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.747814][ T36] audit: type=1400 audit(1790343078.963:374): avc: denied { open } for pid=1201 comm="syz.1.260" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.774171][ T372] usbhid 5-1:0.0: can't add hid device: -71 [ 61.780140][ T372] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 61.790406][ T36] audit: type=1400 audit(1790343078.963:375): avc: denied { ioctl } for pid=1201 comm="syz.1.260" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.826311][ T372] usb 5-1: USB disconnect, device number 15 [ 61.914041][ T371] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 61.931904][ T36] audit: type=1400 audit(1790343079.163:376): avc: denied { setopt } for pid=1215 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.962643][ T1216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 62.076312][ T36] audit: type=1400 audit(1790343079.313:377): avc: denied { read write } for pid=1231 comm="syz.0.269" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 62.103545][ T36] audit: type=1400 audit(1790343079.343:378): avc: denied { open } for pid=1231 comm="syz.0.269" path="/60/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 62.127232][ T371] usb 4-1: Using ep0 maxpacket: 8 [ 62.139872][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.164360][ T36] audit: type=1400 audit(1790343079.343:379): avc: denied { ioctl } for pid=1231 comm="syz.0.269" path="/60/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 62.191646][ T371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.210544][ T1234] overlayfs: failed to resolve './bus': -2 [ 62.217786][ T1234] 9p: Unknown access argument 00000000000000000000tezµ—­­è®¸8žowé: -22 [ 62.226547][ T371] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 62.241512][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.262159][ T371] usb 4-1: config 0 descriptor?? [ 62.267188][ T321] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.283521][ T371] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 62.313126][ T1241] input: syz1 as /devices/virtual/input/input8 [ 62.319393][ T372] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 62.425010][ T321] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 62.432383][ T321] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.446510][ T321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.456620][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.464805][ T321] usb 2-1: SerialNumber: syz [ 62.474400][ T321] usb 2-1: bad CDC descriptors [ 62.479842][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.493962][ T372] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 62.503517][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.512947][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.518721][ T1249] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 62.529462][ T372] usb 5-1: config 0 descriptor?? [ 62.539225][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.544728][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.550176][ T36] audit: type=1400 audit(1790343079.783:380): avc: denied { relabelto } for pid=1243 comm="syz.0.273" name="mnt" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 62.577376][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.582783][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.588371][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.593790][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.599223][ T36] audit: type=1400 audit(1790343079.813:381): avc: denied { associate } for pid=1243 comm="syz.0.273" name="mnt" dev="tmpfs" ino=375 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_unit_file_t:s0" [ 62.626919][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.632306][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.637853][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.643236][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.648743][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.654413][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.659794][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.665344][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.670678][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.676272][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.681607][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.687195][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.693175][ T1200] netlink: 9 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.702572][ T310] usb 2-1: USB disconnect, device number 22 [ 62.714194][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.719817][ T1200] gretap0: entered promiscuous mode [ 62.728698][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.741937][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.747386][ T371] usbhid 4-1:0.0: can't add hid device: -71 [ 62.753714][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.760065][ T371] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.768189][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.776442][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.781758][ T371] usb 4-1: USB disconnect, device number 17 [ 62.788144][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.797052][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.802605][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.808230][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.813644][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.819219][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.824784][ T1248] ./dev/sda1: Can't lookup blockdev [ 62.830105][ T1248] ./dev/sda1: Can't lookup blockdev [ 63.321320][ T1260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 63.350628][ T372] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 63.360957][ T1259] netlink: 44 bytes leftover after parsing attributes in process `syz.1.277'. [ 63.374534][ T372] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 63.496423][ C0] ------------[ cut here ]------------ [ 63.501916][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 63.510518][ C0] index 8983 is out of range for type 'const int[34]' [ 63.517296][ C0] CPU: 0 UID: 0 PID: 1262 Comm: syz.0.274 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 63.517328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.517339][ C0] Call Trace: [ 63.517346][ C0] [ 63.517354][ C0] __dump_stack+0x21/0x30 [ 63.517384][ C0] dump_stack_lvl+0x140/0x1c0 [ 63.517408][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.517432][ C0] ? __folio_alloc_noprof+0x14/0x80 [ 63.517457][ C0] ? __get_user_pages+0x114b/0x22d0 [ 63.517480][ C0] ? do_mlock+0x7f3/0xa10 [ 63.517504][ C0] dump_stack+0x19/0x20 [ 63.517527][ C0] ubsan_epilogue+0xe/0x40 [ 63.517541][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 63.517568][ C0] aiptek_irq+0x208d/0x2a00 [ 63.517593][ C0] ? _raw_spin_unlock+0x45/0x60 [ 63.517610][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 63.517629][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 63.517647][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 63.517663][ C0] dummy_timer+0xa3f/0x4900 [ 63.517687][ C0] ? psi_account_irqtime+0x307/0x9a0 [ 63.517746][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 63.517764][ C0] ? timerqueue_del+0xd7/0x130 [ 63.517793][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 63.517819][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 63.517836][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 63.517864][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 63.517887][ C0] ? read_tsc+0xd/0x20 [ 63.517910][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 63.517932][ C0] hrtimer_run_softirq+0x159/0x560 [ 63.517947][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 63.517972][ C0] handle_softirqs+0x1ad/0x620 [ 63.517990][ C0] __irq_exit_rcu+0x47/0xb0 [ 63.518005][ C0] irq_exit_rcu+0xd/0x30 [ 63.518021][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 63.518043][ C0] [ 63.518049][ C0] [ 63.518055][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 63.518077][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x14/0x90 [ 63.518098][ C0] Code: 20 04 cc 0f 1f 00 b8 7b 1c a2 99 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 15 7c 6d 7d 7e <65> 8b 0d 7d 6d 7d 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 63.518112][ C0] RSP: 0018:ffffc9000d2def50 EFLAGS: 00000246 [ 63.518128][ C0] RAX: ffffffff81e695fb RBX: ffff888120e3ac00 RCX: 0000000000000000 [ 63.518140][ C0] RDX: ffff888120e3a600 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.518151][ C0] RBP: ffffc9000d2def50 R08: ffffc9000d2df01f R09: 0000000000000000 [ 63.518163][ C0] R10: ffffc9000d2defa0 R11: fffff52001a5be04 R12: dffffc0000000000 [ 63.518176][ C0] R13: 1ffff110241c7580 R14: 0000000000000041 R15: 1ffff92001a5bdf0 [ 63.518189][ C0] ? save_stack+0xeb/0x240 [ 63.518212][ C0] save_stack+0xeb/0x240 [ 63.518233][ C0] ? __reset_page_owner+0x450/0x450 [ 63.518257][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 63.518278][ C0] ? sched_clock_noinstr+0xd/0x30 [ 63.518298][ C0] __set_page_owner+0x8e/0x600 [ 63.518320][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 63.518342][ C0] ? __kasan_check_read+0x15/0x20 [ 63.518359][ C0] ? kasan_unpoison+0x4a/0x70 [ 63.518376][ C0] post_alloc_hook+0x37d/0x3b0 [ 63.518400][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 63.518422][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 63.518439][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 63.518454][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 63.518470][ C0] prep_new_page+0x2d/0x180 [ 63.518493][ C0] get_page_from_freelist+0x4aea/0x4ba0 [ 63.518518][ C0] ? xas_start+0x317/0x3e0 [ 63.518534][ C0] ? xas_load+0x3a6/0x3d0 [ 63.518553][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.518569][ C0] ? __mod_memcg_lruvec_state+0x186/0x460 [ 63.518592][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 63.518617][ C0] ? static_key_count+0x45/0x70 [ 63.518639][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 63.518657][ C0] ? lruvec_init+0x1f1/0x280 [ 63.518675][ C0] ? mlock_new_folio+0x24b/0x320 [ 63.518700][ C0] __alloc_pages_noprof+0x35a/0x7e0 [ 63.518725][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.518750][ C0] ? finish_fault+0xecf/0x11a0 [ 63.518770][ C0] ? folio_unlock+0x137/0x1b0 [ 63.518795][ C0] ? __cfi_folio_unlock+0x10/0x10 [ 63.518815][ C0] __folio_alloc_noprof+0x14/0x80 [ 63.518839][ C0] folio_prealloc+0x46/0x220 [ 63.518861][ C0] do_pte_missing+0x560/0x4440 [ 63.518883][ C0] ? preempt_schedule_irq+0xab/0x110 [ 63.518902][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 63.518922][ C0] ? pte_marker_clear+0x1b0/0x1b0 [ 63.518943][ C0] ? cgroup_rstat_updated+0x144/0x800 [ 63.518962][ C0] ? irqentry_exit+0x4a/0x60 [ 63.518985][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 63.519005][ C0] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 63.519022][ C0] handle_mm_fault+0x1189/0x1ba0 [ 63.519041][ C0] ? __kasan_check_write+0x18/0x20 [ 63.519061][ C0] ? __cfi_handle_mm_fault+0x10/0x10 [ 63.519081][ C0] ? follow_page_pte+0x4b2/0xba0 [ 63.519106][ C0] ? gup_must_unshare+0x1e0/0x1e0 [ 63.519129][ C0] ? vma_is_secretmem+0x11/0x50 [ 63.519153][ C0] ? check_vma_flags+0x36d/0x3a0 [ 63.519177][ C0] __get_user_pages+0x114b/0x22d0 [ 63.519203][ C0] ? populate_vma_page_range+0x220/0x220 [ 63.519225][ C0] ? down_read+0x7f/0xe0 [ 63.519246][ C0] ? __cfi_down_read+0x10/0x10 [ 63.519268][ C0] __mm_populate+0x300/0x440 [ 63.519291][ C0] do_mlock+0x7f3/0xa10 [ 63.519316][ C0] ? lru_gen_add_folio+0x880/0x880 [ 63.519341][ C0] ? xfd_validate_state+0x68/0x140 [ 63.519365][ C0] ? __kasan_check_write+0x18/0x20 [ 63.519383][ C0] __x64_sys_mlock+0x64/0x80 [ 63.519406][ C0] x64_sys_call+0x670/0x2ee0 [ 63.519421][ C0] do_syscall_64+0x57/0xf0 [ 63.519436][ C0] ? clear_bhb_loop+0x50/0xa0 [ 63.519457][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.519477][ C0] RIP: 0033:0x7f9b9219e159 [ 63.519491][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.519505][ C0] RSP: 002b:00007f9b9310a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 63.519521][ C0] RAX: ffffffffffffffda RBX: 00007f9b92426090 RCX: 00007f9b9219e159 [ 63.519534][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 63.519545][ C0] RBP: 00007f9b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 63.519555][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.519565][ C0] R13: 00007f9b92426128 R14: 00007f9b92426090 R15: 00007fff28edb518 [ 63.519579][ C0] [ 63.519585][ C0] ---[ end trace ]--- [ 64.162810][ C0] ================================================================== [ 64.170878][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 64.178434][ C0] Read of size 4 at addr ffffffff8670e3dc by task syz.0.274/1262 [ 64.186148][ C0] [ 64.188471][ C0] CPU: 0 UID: 0 PID: 1262 Comm: syz.0.274 Not tainted syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 64.188493][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.188504][ C0] Call Trace: [ 64.188510][ C0] [ 64.188518][ C0] __dump_stack+0x21/0x30 [ 64.188544][ C0] dump_stack_lvl+0x140/0x1c0 [ 64.188567][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.188591][ C0] ? __cfi__printk+0x10/0x10 [ 64.188613][ C0] print_address_description+0x71/0x210 [ 64.188638][ C0] print_report+0x4a/0x70 [ 64.188675][ C0] kasan_report+0x162/0x1a0 [ 64.188699][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 64.188724][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 64.188748][ C0] __asan_report_load4_noabort+0x18/0x20 [ 64.188765][ C0] aiptek_irq+0x20ab/0x2a00 [ 64.188790][ C0] ? _raw_spin_unlock+0x45/0x60 [ 64.188806][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 64.188825][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 64.188843][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 64.188860][ C0] dummy_timer+0xa3f/0x4900 [ 64.188882][ C0] ? psi_account_irqtime+0x307/0x9a0 [ 64.188908][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.188927][ C0] ? timerqueue_del+0xd7/0x130 [ 64.188950][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 64.188976][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.188994][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 64.189021][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 64.189046][ C0] ? read_tsc+0xd/0x20 [ 64.189068][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 64.189090][ C0] hrtimer_run_softirq+0x159/0x560 [ 64.189106][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 64.189131][ C0] handle_softirqs+0x1ad/0x620 [ 64.189149][ C0] __irq_exit_rcu+0x47/0xb0 [ 64.189165][ C0] irq_exit_rcu+0xd/0x30 [ 64.189180][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 64.189203][ C0] [ 64.189209][ C0] [ 64.189215][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 64.189237][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x14/0x90 [ 64.189258][ C0] Code: 20 04 cc 0f 1f 00 b8 7b 1c a2 99 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 15 7c 6d 7d 7e <65> 8b 0d 7d 6d 7d 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 64.189272][ C0] RSP: 0018:ffffc9000d2def50 EFLAGS: 00000246 [ 64.189287][ C0] RAX: ffffffff81e695fb RBX: ffff888120e3ac00 RCX: 0000000000000000 [ 64.189299][ C0] RDX: ffff888120e3a600 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.189310][ C0] RBP: ffffc9000d2def50 R08: ffffc9000d2df01f R09: 0000000000000000 [ 64.189322][ C0] R10: ffffc9000d2defa0 R11: fffff52001a5be04 R12: dffffc0000000000 [ 64.189335][ C0] R13: 1ffff110241c7580 R14: 0000000000000041 R15: 1ffff92001a5bdf0 [ 64.189348][ C0] ? save_stack+0xeb/0x240 [ 64.189372][ C0] save_stack+0xeb/0x240 [ 64.189393][ C0] ? __reset_page_owner+0x450/0x450 [ 64.189417][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 64.189439][ C0] ? sched_clock_noinstr+0xd/0x30 [ 64.189459][ C0] __set_page_owner+0x8e/0x600 [ 64.189481][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 64.189503][ C0] ? __kasan_check_read+0x15/0x20 [ 64.189532][ C0] ? kasan_unpoison+0x4a/0x70 [ 64.189548][ C0] post_alloc_hook+0x37d/0x3b0 [ 64.189571][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 64.189593][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 64.189610][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 64.189625][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 64.189640][ C0] prep_new_page+0x2d/0x180 [ 64.189667][ C0] get_page_from_freelist+0x4aea/0x4ba0 [ 64.189692][ C0] ? xas_start+0x317/0x3e0 [ 64.189708][ C0] ? xas_load+0x3a6/0x3d0 [ 64.189727][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.189743][ C0] ? __mod_memcg_lruvec_state+0x186/0x460 [ 64.189765][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 64.189789][ C0] ? static_key_count+0x45/0x70 [ 64.189811][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 64.189828][ C0] ? lruvec_init+0x1f1/0x280 [ 64.189846][ C0] ? mlock_new_folio+0x24b/0x320 [ 64.189870][ C0] __alloc_pages_noprof+0x35a/0x7e0 [ 64.189894][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.189918][ C0] ? finish_fault+0xecf/0x11a0 [ 64.189938][ C0] ? folio_unlock+0x137/0x1b0 [ 64.189957][ C0] ? __cfi_folio_unlock+0x10/0x10 [ 64.189976][ C0] __folio_alloc_noprof+0x14/0x80 [ 64.190000][ C0] folio_prealloc+0x46/0x220 [ 64.190020][ C0] do_pte_missing+0x560/0x4440 [ 64.190043][ C0] ? preempt_schedule_irq+0xab/0x110 [ 64.190061][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 64.190079][ C0] ? pte_marker_clear+0x1b0/0x1b0 [ 64.190100][ C0] ? cgroup_rstat_updated+0x144/0x800 [ 64.190118][ C0] ? irqentry_exit+0x4a/0x60 [ 64.190140][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 64.190159][ C0] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 64.190176][ C0] handle_mm_fault+0x1189/0x1ba0 [ 64.190195][ C0] ? __kasan_check_write+0x18/0x20 [ 64.190215][ C0] ? __cfi_handle_mm_fault+0x10/0x10 [ 64.190234][ C0] ? follow_page_pte+0x4b2/0xba0 [ 64.190259][ C0] ? gup_must_unshare+0x1e0/0x1e0 [ 64.190281][ C0] ? vma_is_secretmem+0x11/0x50 [ 64.190305][ C0] ? check_vma_flags+0x36d/0x3a0 [ 64.190328][ C0] __get_user_pages+0x114b/0x22d0 [ 64.190353][ C0] ? populate_vma_page_range+0x220/0x220 [ 64.190375][ C0] ? down_read+0x7f/0xe0 [ 64.190395][ C0] ? __cfi_down_read+0x10/0x10 [ 64.190416][ C0] __mm_populate+0x300/0x440 [ 64.190438][ C0] do_mlock+0x7f3/0xa10 [ 64.190463][ C0] ? lru_gen_add_folio+0x880/0x880 [ 64.190487][ C0] ? xfd_validate_state+0x68/0x140 [ 64.190510][ C0] ? __kasan_check_write+0x18/0x20 [ 64.190527][ C0] __x64_sys_mlock+0x64/0x80 [ 64.190550][ C0] x64_sys_call+0x670/0x2ee0 [ 64.190564][ C0] do_syscall_64+0x57/0xf0 [ 64.190579][ C0] ? clear_bhb_loop+0x50/0xa0 [ 64.190599][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.190618][ C0] RIP: 0033:0x7f9b9219e159 [ 64.190631][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.190645][ C0] RSP: 002b:00007f9b9310a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 64.190683][ C0] RAX: ffffffffffffffda RBX: 00007f9b92426090 RCX: 00007f9b9219e159 [ 64.190696][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 64.190707][ C0] RBP: 00007f9b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 64.190718][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.190728][ C0] R13: 00007f9b92426128 R14: 00007f9b92426090 R15: 00007fff28edb518 [ 64.190742][ C0] [ 64.190748][ C0] [ 64.836602][ C0] The buggy address belongs to the variable: [ 64.842584][ C0] .str.39+0x1c/0x20 [ 64.846501][ C0] [ 64.848822][ C0] The buggy address belongs to the physical page: [ 64.855237][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x670e [ 64.863924][ C0] flags: 0x4000(reserved|zone=0) [ 64.868872][ C0] raw: 0000000000004000 ffffea000019c388 ffffea000019c388 0000000000000000 [ 64.877455][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 64.886041][ C0] page dumped because: kasan: bad access detected [ 64.892472][ C0] page_owner info is not present (never set?) [ 64.898542][ C0] [ 64.900860][ C0] Memory state around the buggy address: [ 64.906495][ C0] ffffffff8670e280: f9 f9 f9 f9 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 [ 64.914553][ C0] ffffffff8670e300: 00 00 00 06 f9 f9 f9 f9 00 00 00 01 f9 f9 f9 f9 [ 64.922625][ C0] >ffffffff8670e380: 04 f9 f9 f9 00 03 f9 f9 06 f9 f9 f9 07 f9 f9 f9 [ 64.930679][ C0] ^ [ 64.937605][ C0] ffffffff8670e400: 05 f9 f9 f9 06 f9 f9 f9 04 f9 f9 f9 00 00 02 f9 [ 64.945678][ C0] ffffffff8670e480: f9 f9 f9 f9 04 f9 f9 f9 00 00 00 00 07 f9 f9 f9 [ 64.953738][ C0] ================================================================== [ 64.961805][ C0] Disabling lock debugging due to kernel taint [ 64.968008][ C0] ------------[ cut here ]------------ [ 64.973473][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 64.982068][ C0] index 8984 is out of range for type 'const int[34]' [ 64.988828][ C0] CPU: 0 UID: 0 PID: 1262 Comm: syz.0.274 Tainted: G B syzkaller #0 ffcc03b7087851531ca4478bc989862769751c2e [ 64.988855][ C0] Tainted: [B]=BAD_PAGE [ 64.988861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.988871][ C0] Call Trace: [ 64.988878][ C0] [ 64.988885][ C0] __dump_stack+0x21/0x30 [ 64.988914][ C0] dump_stack_lvl+0x140/0x1c0 [ 64.988937][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.988961][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 64.988979][ C0] dump_stack+0x19/0x20 [ 64.989001][ C0] ubsan_epilogue+0xe/0x40 [ 64.989015][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 64.989042][ C0] aiptek_irq+0x1f3c/0x2a00 [ 64.989068][ C0] ? _raw_spin_unlock+0x45/0x60 [ 64.989083][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 64.989102][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 64.989120][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 64.989137][ C0] dummy_timer+0xa3f/0x4900 [ 64.989159][ C0] ? psi_account_irqtime+0x307/0x9a0 [ 64.989185][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.989203][ C0] ? timerqueue_del+0xd7/0x130 [ 64.989227][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 64.989253][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 64.989270][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 64.989297][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 64.989322][ C0] ? read_tsc+0xd/0x20 [ 64.989344][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 64.989366][ C0] hrtimer_run_softirq+0x159/0x560 [ 64.989382][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 64.989406][ C0] handle_softirqs+0x1ad/0x620 [ 64.989424][ C0] __irq_exit_rcu+0x47/0xb0 [ 64.989440][ C0] irq_exit_rcu+0xd/0x30 [ 64.989455][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 64.989477][ C0] [ 64.989482][ C0] [ 64.989488][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 64.989510][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x14/0x90 [ 64.989530][ C0] Code: 20 04 cc 0f 1f 00 b8 7b 1c a2 99 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 15 7c 6d 7d 7e <65> 8b 0d 7d 6d 7d 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 64.989544][ C0] RSP: 0018:ffffc9000d2def50 EFLAGS: 00000246 [ 64.989560][ C0] RAX: ffffffff81e695fb RBX: ffff888120e3ac00 RCX: 0000000000000000 [ 64.989572][ C0] RDX: ffff888120e3a600 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.989583][ C0] RBP: ffffc9000d2def50 R08: ffffc9000d2df01f R09: 0000000000000000 [ 64.989594][ C0] R10: ffffc9000d2defa0 R11: fffff52001a5be04 R12: dffffc0000000000 [ 64.989607][ C0] R13: 1ffff110241c7580 R14: 0000000000000041 R15: 1ffff92001a5bdf0 [ 64.989620][ C0] ? save_stack+0xeb/0x240 [ 64.989649][ C0] save_stack+0xeb/0x240 [ 64.989670][ C0] ? __reset_page_owner+0x450/0x450 [ 64.989695][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 64.989716][ C0] ? sched_clock_noinstr+0xd/0x30 [ 64.989736][ C0] __set_page_owner+0x8e/0x600 [ 64.989758][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 64.989780][ C0] ? __kasan_check_read+0x15/0x20 [ 64.989797][ C0] ? kasan_unpoison+0x4a/0x70 [ 64.989814][ C0] post_alloc_hook+0x37d/0x3b0 [ 64.989838][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 64.989860][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 64.989877][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 64.989892][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 64.989908][ C0] prep_new_page+0x2d/0x180 [ 64.989930][ C0] get_page_from_freelist+0x4aea/0x4ba0 [ 64.989955][ C0] ? xas_start+0x317/0x3e0 [ 64.989972][ C0] ? xas_load+0x3a6/0x3d0 [ 64.989991][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.990007][ C0] ? __mod_memcg_lruvec_state+0x186/0x460 [ 64.990030][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 64.990055][ C0] ? static_key_count+0x45/0x70 [ 64.990077][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 64.990095][ C0] ? lruvec_init+0x1f1/0x280 [ 64.990113][ C0] ? mlock_new_folio+0x24b/0x320 [ 64.990137][ C0] __alloc_pages_noprof+0x35a/0x7e0 [ 64.990162][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.990187][ C0] ? finish_fault+0xecf/0x11a0 [ 64.990207][ C0] ? folio_unlock+0x137/0x1b0 [ 64.990226][ C0] ? __cfi_folio_unlock+0x10/0x10 [ 64.990246][ C0] __folio_alloc_noprof+0x14/0x80 [ 64.990270][ C0] folio_prealloc+0x46/0x220 [ 64.990291][ C0] do_pte_missing+0x560/0x4440 [ 64.990315][ C0] ? preempt_schedule_irq+0xab/0x110 [ 64.990333][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 64.990352][ C0] ? pte_marker_clear+0x1b0/0x1b0 [ 64.990373][ C0] ? cgroup_rstat_updated+0x144/0x800 [ 64.990391][ C0] ? irqentry_exit+0x4a/0x60 [ 64.990414][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 64.990433][ C0] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 64.990450][ C0] handle_mm_fault+0x1189/0x1ba0 [ 64.990469][ C0] ? __kasan_check_write+0x18/0x20 [ 64.990488][ C0] ? __cfi_handle_mm_fault+0x10/0x10 [ 64.990508][ C0] ? follow_page_pte+0x4b2/0xba0 [ 64.990533][ C0] ? gup_must_unshare+0x1e0/0x1e0 [ 64.990556][ C0] ? vma_is_secretmem+0x11/0x50 [ 64.990580][ C0] ? check_vma_flags+0x36d/0x3a0 [ 64.990604][ C0] __get_user_pages+0x114b/0x22d0 [ 64.990631][ C0] ? populate_vma_page_range+0x220/0x220 [ 64.990658][ C0] ? down_read+0x7f/0xe0 [ 64.990678][ C0] ? __cfi_down_read+0x10/0x10 [ 64.990700][ C0] __mm_populate+0x300/0x440 [ 64.990723][ C0] do_mlock+0x7f3/0xa10 [ 64.990748][ C0] ? lru_gen_add_folio+0x880/0x880 [ 64.990773][ C0] ? xfd_validate_state+0x68/0x140 [ 64.990797][ C0] ? __kasan_check_write+0x18/0x20 [ 64.990814][ C0] __x64_sys_mlock+0x64/0x80 [ 64.990837][ C0] x64_sys_call+0x670/0x2ee0 [ 64.990852][ C0] do_syscall_64+0x57/0xf0 [ 64.990867][ C0] ? clear_bhb_loop+0x50/0xa0 [ 64.990888][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.990907][ C0] RIP: 0033:0x7f9b9219e159 [ 64.990921][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.990934][ C0] RSP: 002b:00007f9b9310a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 64.990950][ C0] RAX: ffffffffffffffda RBX: 00007f9b92426090 RCX: 00007f9b9219e159 [ 64.990962][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 64.990973][ C0] RBP: 00007f9b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 64.990983][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.990993][ C0] R13: 00007f9b92426128 R14: 00007f9b92426090 R15: 00007fff28edb518 [ 64.991007][ C0] [ 64.991013][ C0] ---[ end trace ]--- [ 65.987014][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 65.995153][ T372] usb 5-1: USB disconnect, device number 16 [ 66.026332][ T36] audit: type=1400 audit(1790343083.253:382): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1