last executing test programs: 2.284939293s ago: executing program 2 (id=251): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000200)={0x20, 0x11, 0xfc, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.202383246s ago: executing program 3 (id=254): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f00000005c0)=""/296, 0x128}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/164, 0xa4}], 0x9}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f72}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc3}, 0x3}], 0x8, 0x0, 0x0) 2.202228535s ago: executing program 3 (id=255): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x12) 2.201494906s ago: executing program 3 (id=256): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x15, 0x5, 0xf9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x700, 0x7, 0x3, 0x200, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0xc6, 0x4, 0x0, @multicast1, @empty}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x2c, 0x1, 0x0, 0x0, "897bcf02eec39d13b911d1b0c352e65f0df34d3b382c878de3a8cd9289d1399555196f5271c175de730eac0f52f2bb4ec3bc56f511b2c9fc164e0b8057c1c52f"}, 0xffffffffffffffaa}}, 0x40) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000310130003801") 2.133948797s ago: executing program 3 (id=259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe80000000000000000000aaff02fff5000000000000000000000001"], 0xfdef) 2.044892109s ago: executing program 3 (id=263): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000004000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980", @ANYRES8=r0], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.044529019s ago: executing program 3 (id=264): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write$eventfd(r2, 0x0, 0x0) write$P9_RLINK(r2, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f050000be3296a2473c0f1b9330a3e4d4de"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) syz_usb_control_io$hid(r1, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) recvmmsg(r3, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2}, 0x8}], 0x1, 0x140, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.143773702s ago: executing program 0 (id=268): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x15, 0x5, 0xf9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x700, 0x7, 0x3, 0x200, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0xc6, 0x4, 0x0, @multicast1, @empty}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x2c, 0x1, 0x0, 0x0, "897bcf02eec39d13b911d1b0c352e65f0df34d3b382c878de3a8cd9289d1399555196f5271c175de730eac0f52f2bb4ec3bc56f511b2c9fc164e0b8057c1c52f"}, 0xffffffffffffffaa}}, 0x40) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000310130003801") 1.118550262s ago: executing program 2 (id=269): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x800, 0x1, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, &(0x7f0000001080)) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x20, 0xc, 0x4, 0xff81, 0x0, 0x7, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r5, &(0x7f0000000240)={@void, @val={0x0, 0x3, 0x1c, 0x9, 0x14, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x6000, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x8}}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a91000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) gettid() 1.046619844s ago: executing program 0 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) getpriority(0x0, 0x0) write(r0, &(0x7f0000000300)="70f65f2d73742f6576656e7431202e2f66696c65303a3078302061", 0x1b) syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x8000000b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000140)="040000000058a1d66216b61a0e1c6369000000310130003801") 1.046500384s ago: executing program 0 (id=271): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x12c) write(r1, &(0x7f0000000100)="2a7648765f636f6d6d207e20222a224087a71046d59021822de4c293a2487bf31f28bf58498c56575ff4c4899d7598db45a094e7f6dc58212bbd3afa2ad97b463181fd6aa9acd4274390d1229885a2dc54781b29f8f593b55826df2f15607fdd3d45eaf2957dd879ad2edb1a27e5", 0x1fdc) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)=ANY=[@ANYBLOB="180000005400010000000000000080000723fd0000000000"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 1.046354344s ago: executing program 0 (id=272): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES8=r0], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.031285455s ago: executing program 0 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000400)={'wg1\x00', {0x2, 0x0, @broadcast}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [{0x40000094}, {0x9aa, 0x0, 0x232}, {0xb85, 0x0, 0x5}]}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x34, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x62, 0x30, 0x64, 0x30, 0x30, 0x61, 0x30, 0x66, 0x35, 0x65, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabb6700000000000000445501000100aabbccddeeff00110000010066778898aabbccddeeff", 0x2e}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24010000010201040000000000000000010000030f0006006e657462696f732d6e7300000800054006bab000740003801400018008000100ac14143208000200ac1414bb06000340000300002c000180140003000000000000000000000000000000000114000400ff01000000000000000000000000000106000340000400001400018008000100ac1414bb08000200ffffffff0c00028005200100840000000f000600746674702d3230303030000008000840000000020600074000020000640003802c000180140003"], 0x124}, 0x1, 0x0, 0x0, 0x8800}, 0x4008c00) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x63, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "8011778899aabbccddeefb001022445566778899f46ba8d9aa76001122bb4455577788000000000000010000000100", 0x41}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x64, 0x36, 0x37, 0x32, 0x30, 0x66, 0x30, 0x39, 0x64, 0x32, 0x65, 0x35, 0x38, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$user(&(0x7f0000000680), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 997.784595ms ago: executing program 2 (id=274): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x400000) 940.966727ms ago: executing program 2 (id=275): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$tcp_congestion(r4, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0xfffffffd, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4ea3, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @mcast2}}}, 0x108) dup2(r0, r4) 940.735477ms ago: executing program 0 (id=276): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xd0, 0x2a, 0xab, 0x8, 0x174f, 0x8a12, 0xb4d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x19, 0x30, 0x6, "", [{{0x9, 0x4, 0x6, 0x4, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0xb, 0x3, 0x41, 0xf, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000000180)={0x2b, 0x0, 0x6, 0x0, 0x0, [{0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "bdd2702db837"}}, {0x0, &(0x7f0000000040)=@string={0x0, 0x3, "d9bdc89dddcbb86e0490c43229d7af7df36bb0"}}, {0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x812}}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x14, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24040015}, 0x20040010) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r1, r2, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000700)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000740)={r3, 0x75, 0xd5}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'sha384\x00'}}, &(0x7f0000000800)="571e1090db3b6cfd55df0d34821da1a3d834efe46b08554aa8d955ce3d1bd640fc0197ac3edbff99bea25aa4b03fa7e8032487939b7d6dd1cba9c8c755397db5a65cf4eddbaf48abab675c5fa8fec1814aa858b43f44edd873a937324556f0ee990cfeab093f3e9e6700af7d616c2871229807d89f", &(0x7f0000000880)=""/213) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001e000100000000000000000004"], 0x14}], 0x1, 0x0, 0x0, 0x24040015}, 0x20040010) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x80000000, 0xa7, 0x1, 0x0, 0x7, 0x8, 0xf55}]}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0xd3, 0x6}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2f, 0xb, 0x2, 0x40, 0x1}, 0x106, &(0x7f00000005c0)={0x5, 0xf, 0x106, 0x1, [@generic={0x101, 0x10, 0x4, "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"}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1404}}, {0xd5, &(0x7f0000000340)=ANY=[@ANYBLOB="d503964c28d64d63543f9f5dac165890e82f180b055cc4cb613eea3c56f044452a190c30cbeef685f43ac1967e501b9ca6b8a078281da030e95ec58cb804aa4516fda1f751dafd5bb011b10b9645beff06216f460a73239c6cf5fbba9e465bbdedea21dd44a02003e89d4a67b22cfb2c22edd9fb1369312e759bc9e3794ed85e5bbcd666b1990f70f04fbf38f012a3c4463586ba9855002c98eb484e6808a3ed03b5d9b970333ac0cfdedca964a730844dfd8f99e3a393ea75ac71efcd8ac8a6b4a0070e51aa89bb5faac69fffff4f"]}, {0x6c, &(0x7f0000000440)=@string={0x6c, 0x3, "cb74c7bdcb50d607640a17f0b7a180e0d0dc463b02b7850dc92210304f8f76697c8e31094602e5f08f9f22d779cb68dcca5214658d0a048fe93746c6236864e7b761b205e549bdc8b85339af58e448248e2afe55b04d8e9d63d6362f7153236b4f87763ed2be12be3583"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) 912.529667ms ago: executing program 2 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe80000000000000000000aaff02e1fd000000000000000000000001"], 0xfdef) 863.159699ms ago: executing program 2 (id=278): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000200)={0x20, 0x11, 0xfc, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 72.986988ms ago: executing program 1 (id=279): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x15, 0x5, 0xf9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x700, 0x7, 0x3, 0x200, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0xc6, 0x4, 0x0, @multicast1, @empty}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x2c, 0x1, 0x0, 0x0, "897bcf02eec39d13b911d1b0c352e65f0df34d3b382c878de3a8cd9289d1399555196f5271c175de730eac0f52f2bb4ec3bc56f511b2c9fc164e0b8057c1c52f"}, 0xffffffffffffffaa}}, 0x40) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000310130003801") 68.742468ms ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) getpriority(0x0, 0x0) write(r0, &(0x7f0000000300)="70f65f2d73742f6576656e7431202e2f66696c65303a3078302061", 0x1b) syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x8000000b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000140)="040000000058a1d66216b61a0e1c6369000000310130003801") 60.924729ms ago: executing program 1 (id=281): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb7000000000002000100000000fffffffb020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) 8.86633ms ago: executing program 1 (id=282): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r1, r1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x97, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x4000000d20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x5, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x7ff, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x100000000, 0x100, 0x5, 0x933, 0x200000101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0xa, 0x6, 0x100, 0x40, 0x83, 0x1e13, 0x9, 0xda, 0x2, 0x0, 0x3, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x4, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0x1, 0x1fcc, 0x6, 0x0, 0xae4, 0x22, 0x1, 0x7, 0x1, 0x8000000000000001, 0x2000000009, 0x8, 0x4, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0xffe, 0x8000000000000001, 0x2, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x8000000000, 0x0, 0x9, 0x4, 0x7, 0xffc, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x10000000000000c, 0x3]}) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r3, 0xd9}, &(0x7f0000001180)=ANY=[], &(0x7f0000000980)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7fe01e9c88fbc79dc97601bddeea9d91438988e1cee39ee49b5542d47923d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c282058b525774e1af61664d062b5ad5d0f4c61431265373c44d5f91aeb92dfc0f7052f35", 0x0) setregid(0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x4b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0x32e, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x69100f2a4e3d44c5}}}, &(0x7f0000000100)=0x0) r6 = syz_ublk_setup_io_uring(0x20b9, &(0x7f00000001c0)={0x0, 0x5634, 0x2000, 0x3, 0x106}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)) r7 = syz_ublk_setup_io_uring(0x7f89, &(0x7f0000000340)={0x0, 0x7746, 0x8000, 0x3, 0x4b}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103) write$binfmt_misc(r8, 0x0, 0x0) syz_ublk_setup_queues(r4, r5, &(0x7f0000000140)={0x0, 0xad0a, 0x20000, 0x0, 0x2b8}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1dd8, 0x2, 0x3, 0x3c7, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab37, 0x8, 0x3, 0x30e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2532, 0x40, 0x1, 0x89, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a13, 0x40, 0x3, 0x220, 0x0, r0}}], 0x4, &(0x7f0000001700)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x1, 0x249, 0x0, &(0x7f0000000700)=@buf_1k="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"}}, &(0x7f0000001780)) 112.23µs ago: executing program 1 (id=283): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x400000) 0s ago: executing program 1 (id=284): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) getpid() syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}}, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 21.626352][ T36] audit: type=1400 audit(1791349215.259:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.627583][ T287] cgroup: Unknown subsys name 'net' [ 21.648993][ T36] audit: type=1400 audit(1791349215.259:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.676259][ T36] audit: type=1400 audit(1791349215.289:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.676415][ T287] cgroup: Unknown subsys name 'devices' [ 21.799082][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.804685][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.918372][ T36] audit: type=1400 audit(1791349215.559:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.941089][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.941564][ T36] audit: type=1400 audit(1791349215.559:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.974833][ T36] audit: type=1400 audit(1791349215.559:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.988701][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.997964][ T36] audit: type=1400 audit(1791349215.589:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.032123][ T36] audit: type=1400 audit(1791349215.589:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.057723][ T36] audit: type=1400 audit(1791349215.619:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.083204][ T36] audit: type=1400 audit(1791349215.619:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.014383][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.021513][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.028690][ T294] bridge_slave_0: entered allmulticast mode [ 23.035030][ T294] bridge_slave_0: entered promiscuous mode [ 23.051345][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.058504][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.065554][ T294] bridge_slave_1: entered allmulticast mode [ 23.071980][ T294] bridge_slave_1: entered promiscuous mode [ 23.155048][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.162182][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.169277][ T295] bridge_slave_0: entered allmulticast mode [ 23.175407][ T295] bridge_slave_0: entered promiscuous mode [ 23.183016][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.190069][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.197117][ T295] bridge_slave_1: entered allmulticast mode [ 23.203421][ T295] bridge_slave_1: entered promiscuous mode [ 23.276166][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.283234][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.290352][ T297] bridge_slave_0: entered allmulticast mode [ 23.296491][ T297] bridge_slave_0: entered promiscuous mode [ 23.303169][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.310223][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.317269][ T297] bridge_slave_1: entered allmulticast mode [ 23.323603][ T297] bridge_slave_1: entered promiscuous mode [ 23.343717][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.350843][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.357960][ T296] bridge_slave_0: entered allmulticast mode [ 23.364163][ T296] bridge_slave_0: entered promiscuous mode [ 23.372237][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.379293][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.386351][ T296] bridge_slave_1: entered allmulticast mode [ 23.392651][ T296] bridge_slave_1: entered promiscuous mode [ 23.449605][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.456656][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.463977][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471031][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.533323][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.540413][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.547716][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.554748][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.572154][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.579228][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.586504][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.593584][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.625914][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.633113][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.640575][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.648150][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.685211][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.713447][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.720529][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.735923][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.742991][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.750744][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.757785][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.783493][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.790579][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.800371][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807434][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828326][ T294] veth0_vlan: entered promiscuous mode [ 23.843373][ T295] veth0_vlan: entered promiscuous mode [ 23.858488][ T294] veth1_macvtap: entered promiscuous mode [ 23.875970][ T295] veth1_macvtap: entered promiscuous mode [ 23.889394][ T297] veth0_vlan: entered promiscuous mode [ 23.913502][ T296] veth0_vlan: entered promiscuous mode [ 23.924645][ T297] veth1_macvtap: entered promiscuous mode [ 23.936653][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.965066][ T296] veth1_macvtap: entered promiscuous mode [ 24.028463][ T320] tipc: Enabling of bearer rejected, failed to enable media [ 24.077866][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.357433][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.508486][ T313] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 24.518252][ T313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 24.525831][ T313] usb 3-1: can't read configurations, error -61 [ 24.554712][ T367] Zero length message leads to an empty skb [ 24.667470][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.691933][ T374] fuse: Unknown parameter 'group_i00000000000000000000' [ 24.775355][ T381] netlink: 'syz.1.24': attribute type 12 has an invalid length. [ 24.838585][ T313] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 24.847560][ T313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 24.855131][ T313] usb 3-1: can't read configurations, error -61 [ 24.861529][ T313] usb usb3-port1: attempt power cycle [ 24.918333][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 24.927801][ T399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=399 comm=syz.1.32 [ 25.197598][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.218126][ T313] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 25.227005][ T313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 25.234672][ T313] usb 3-1: can't read configurations, error -61 [ 25.367411][ T313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 25.398864][ T313] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 25.407717][ T313] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 25.415290][ T313] usb 3-1: can't read configurations, error -61 [ 25.421842][ T313] usb usb3-port1: unable to enumerate USB device [ 25.850772][ T416] netlink: 'syz.1.39': attribute type 12 has an invalid length. [ 25.866685][ T421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 25.884668][ T424] overlayfs: failed to resolve './file0': -2 [ 25.958132][ T430] can0: slcan on ttyS3. [ 25.997683][ T439] FAULT_INJECTION: forcing a failure. [ 25.997683][ T439] name failslab, interval 1, probability 0, space 0, times 1 [ 26.014814][ T429] can0 (unregistered): slcan off ttyS3. [ 26.017395][ T439] CPU: 1 UID: 0 PID: 439 Comm: syz.1.46 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 26.017423][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.017442][ T439] Call Trace: [ 26.017448][ T439] [ 26.017455][ T439] __dump_stack+0x21/0x30 [ 26.017491][ T439] dump_stack_lvl+0x140/0x1c0 [ 26.017515][ T439] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.017539][ T439] ? number+0xc9d/0xf00 [ 26.017558][ T439] dump_stack+0x19/0x20 [ 26.017580][ T439] should_fail_ex+0x3c2/0x510 [ 26.017603][ T439] should_failslab+0xac/0x100 [ 26.017626][ T439] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 26.017653][ T439] ? sidtab_sid2str_get+0x135/0x360 [ 26.017672][ T439] kmemdup_noprof+0x31/0x80 [ 26.017687][ T439] sidtab_sid2str_get+0x135/0x360 [ 26.017706][ T439] security_sid_to_context_core+0x30d/0x5d0 [ 26.017733][ T439] security_sid_to_context+0x2e/0x50 [ 26.017758][ T439] avc_audit_post_callback+0x117/0x790 [ 26.017782][ T439] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 26.017804][ T439] ? __cfi_audit_log_format+0x10/0x10 [ 26.017824][ T439] ? audit_log_untrustedstring+0xea/0x100 [ 26.017842][ T439] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 26.017864][ T439] common_lsm_audit+0x14b9/0x18b0 [ 26.017886][ T439] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 26.017909][ T439] ? __cfi_common_lsm_audit+0x10/0x10 [ 26.017929][ T439] ? __call_rcu_common+0x53c/0x710 [ 26.017951][ T439] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 26.017971][ T439] slow_avc_audit+0x19f/0x220 [ 26.017992][ T439] ? __cfi_slow_avc_audit+0x10/0x10 [ 26.018014][ T439] ? avc_denied+0x113/0x180 [ 26.018036][ T439] avc_has_extended_perms+0x8c6/0xe60 [ 26.018059][ T439] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 26.018080][ T439] ? __futex_queue+0x19f/0x350 [ 26.018104][ T439] ? schedule+0xc5/0x240 [ 26.018124][ T439] ? futex_unqueue+0x136/0x160 [ 26.018148][ T439] ? _raw_spin_lock+0x92/0x120 [ 26.018167][ T439] ioctl_has_perm+0x39a/0x500 [ 26.018186][ T439] ? has_cap_mac_admin+0xd0/0xd0 [ 26.018206][ T439] ? futex_wait+0x2b8/0x7c0 [ 26.018223][ T439] ? __cfi_futex_wait+0x10/0x10 [ 26.018240][ T439] selinux_file_ioctl+0x732/0x1480 [ 26.018259][ T439] ? vfs_write+0xbcf/0xfd0 [ 26.018278][ T439] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 26.018298][ T439] ? do_futex+0x32a/0x510 [ 26.018321][ T439] ? __cfi_do_futex+0x10/0x10 [ 26.018344][ T439] ? mutex_unlock+0x90/0x240 [ 26.018368][ T439] ? __fget_files+0x2bc/0x330 [ 26.018389][ T439] security_file_ioctl+0x87/0x110 [ 26.018408][ T439] __se_sys_ioctl+0x4e/0x1b0 [ 26.018430][ T439] __x64_sys_ioctl+0x7f/0xa0 [ 26.018452][ T439] x64_sys_call+0x1878/0x2ee0 [ 26.018469][ T439] do_syscall_64+0x57/0xf0 [ 26.018487][ T439] ? clear_bhb_loop+0x50/0xa0 [ 26.018511][ T439] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.018534][ T439] RIP: 0033:0x7fe39ed9e199 [ 26.018555][ T439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.018570][ T439] RSP: 002b:00007fe39fbaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.018597][ T439] RAX: ffffffffffffffda RBX: 00007fe39f025fa0 RCX: 00007fe39ed9e199 [ 26.018611][ T439] RDX: 0000200000000040 RSI: 0000000040186f02 RDI: 0000000000000004 [ 26.018623][ T439] RBP: 00007fe39ee358e0 R08: 0000000000000000 R09: 0000000000000000 [ 26.018635][ T439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.018651][ T439] R13: 00007fe39f026038 R14: 00007fe39f025fa0 R15: 00007ffd6bda4a88 [ 26.018667][ T439] [ 26.429218][ T470] netlink: 'syz.1.49': attribute type 3 has an invalid length. [ 26.797469][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.908962][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 26.908977][ T36] audit: type=1400 audit(1791349220.549:164): avc: denied { mount } for pid=506 comm="syz.3.56" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.924436][ T507] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 26.937636][ T36] audit: type=1400 audit(1791349220.549:165): avc: denied { read write } for pid=506 comm="syz.3.56" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 26.960946][ T313] usb 2-1: config 1 has an invalid interface number: 7 but max is 2 [ 26.968953][ T36] audit: type=1400 audit(1791349220.549:166): avc: denied { open } for pid=506 comm="syz.3.56" path="/15/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 26.976219][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.001232][ T36] audit: type=1400 audit(1791349220.549:167): avc: denied { ioctl } for pid=506 comm="syz.3.56" path="/15/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.014916][ T313] usb 2-1: config 1 has no interface number 2 [ 27.040947][ T36] audit: type=1400 audit(1791349220.599:168): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.042385][ T313] usb 2-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 27.075404][ T313] usb 2-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 27.094138][ T313] usb 2-1: config 1 interface 7 has no altsetting 0 [ 27.105904][ T36] audit: type=1400 audit(1791349220.739:169): avc: denied { create } for pid=515 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.109930][ T313] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 27.136462][ T36] audit: type=1400 audit(1791349220.739:170): avc: denied { write } for pid=515 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.137545][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.165566][ T313] usb 2-1: Product: syz [ 27.166965][ T36] audit: type=1400 audit(1791349220.809:171): avc: denied { name_bind } for pid=515 comm="syz.3.59" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.169773][ T313] usb 2-1: Manufacturer: syz [ 27.169790][ T313] usb 2-1: SerialNumber: syz [ 27.191566][ T36] audit: type=1400 audit(1791349220.809:172): avc: denied { node_bind } for pid=515 comm="syz.3.59" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.261179][ T524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2227317206 (2227317206 ns) > initial count (768048928 ns). Using initial count to start timer. [ 27.304192][ T36] audit: type=1400 audit(1791349220.939:173): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.340836][ T533] fuse: Bad value for 'group_id' [ 27.345910][ T533] fuse: Bad value for 'group_id' [ 27.423660][ T550] device-mapper: ioctl: Empty message received. [ 27.503568][ T560] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1986356271.1633973039.49), cmd(3) [ 27.517309][ T560] program syz.2.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 27.526630][ T560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 27.545109][ T562] netlink: 'syz.2.72': attribute type 12 has an invalid length. [ 27.657634][ T404] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.787544][ T404] usb 4-1: device descriptor read/64, error -71 [ 28.027419][ T404] usb 4-1: device descriptor read/64, error -71 [ 28.277413][ T404] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.417398][ T404] usb 4-1: device descriptor read/64, error -71 [ 28.477409][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.535151][ T313] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 28.550851][ T313] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 28.559884][ T313] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.572117][ T313] usb 2-1: USB disconnect, device number 2 [ 28.580605][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.627445][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 28.633750][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 28.644956][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 28.657782][ T404] usb 4-1: device descriptor read/64, error -71 [ 28.664048][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 28.673366][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.681944][ T31] usb 1-1: config 0 descriptor?? [ 28.767547][ T404] usb usb4-port1: attempt power cycle [ 29.090074][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.097127][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.104151][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.111146][ T404] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.118704][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.125677][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.132714][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.139783][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.146725][ T31] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 29.155000][ T31] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 29.167163][ T404] usb 4-1: device descriptor read/8, error -71 [ 29.308586][ T404] usb 4-1: device descriptor read/8, error -71 [ 29.354424][ T587] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 29.361117][ T587] netlink: 'syz.1.77': attribute type 8 has an invalid length. [ 29.557410][ T404] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.578475][ T404] usb 4-1: device descriptor read/8, error -71 [ 29.708849][ T589] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(14) [ 29.719411][ T404] usb 4-1: device descriptor read/8, error -71 [ 29.827567][ T404] usb usb4-port1: unable to enumerate USB device [ 29.891028][ T577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.899592][ T577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.909824][ T31] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 29.918796][ T31] usb 1-1: USB disconnect, device number 2 [ 30.475218][ T597] device-mapper: ioctl: Unsupported message sent to DM core: @ [ 30.551663][ T613] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.805306368.0), cmd(14) [ 30.679298][ T638] fuse: Bad value for 'fd' [ 30.725198][ T645] device-mapper: ioctl: Empty message received. [ 30.755746][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.822200][ T669] fuse: Unknown parameter 'fm ױpT[`H9b$Ék?Z0x0000000000000007' [ 30.875953][ T673] raw_sendmsg: syz.2.109 forgot to set AF_INET. Fix it! [ 30.912273][ T675] /dev/nbd2: Can't lookup blockdev [ 31.021806][ T683] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(14) [ 31.037436][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.097411][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.188349][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.199273][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.209006][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.218101][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.226587][ T31] usb 2-1: config 0 descriptor?? [ 31.247403][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 31.254099][ T10] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 31.262419][ T10] usb 1-1: config 8 has an invalid interface number: 200 but max is 0 [ 31.270679][ T10] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 31.279398][ T580] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.286899][ T10] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 31.295679][ T10] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 31.304782][ T10] usb 1-1: config 8 has no interface number 0 [ 31.310882][ T10] usb 1-1: config 8 has no interface number 1 [ 31.316953][ T10] usb 1-1: config 8 interface 160 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 31.329991][ T10] usb 1-1: config 8 interface 200 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 64 [ 31.339907][ T10] usb 1-1: config 8 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 31.350855][ T10] usb 1-1: config 8 interface 200 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 6 [ 31.363969][ T10] usb 1-1: config 8 interface 160 has no altsetting 0 [ 31.370908][ T10] usb 1-1: config 8 interface 200 has no altsetting 0 [ 31.379128][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1011, bcdDevice=8f.4e [ 31.388180][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.396161][ T10] usb 1-1: Product: 데ᔤꃛԀ輦釺몤瘮微䤮툩喱繄퍓䧚봰⇪蒡ⱘ⌨䊐㳋外ᥢ摜矲Ʒ㈽ごঁ裬뛳긇䇯逦橍讪排藘걥嗌樟ख़蠃폮碝 [ 31.413203][ T10] usb 1-1: Manufacturer: 捺【秃גּᘠ谾䡔䴌꫸罇ರ瓰쌬呼葠뾝仸ᶑࠪ郼 [ 31.423558][ T10] usb 1-1: SerialNumber: Т [ 31.448752][ T580] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.457167][ T580] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 31.469573][ T580] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 31.478660][ T580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.486651][ T580] usb 3-1: Product: syz [ 31.490836][ T580] usb 3-1: Manufacturer: syz [ 31.495436][ T580] usb 3-1: SerialNumber: syz [ 31.633751][ T31] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 31.653118][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input4 [ 31.700218][ T10] snd-usb-audio 1-1:8.160: probe with driver snd-usb-audio failed with error -2 [ 31.712304][ T10] snd-usb-audio 1-1:8.200: probe with driver snd-usb-audio failed with error -2 [ 31.721567][ T580] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.724109][ T31] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 31.733315][ T10] usb 1-1: USB disconnect, device number 3 [ 31.765239][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.910822][ T580] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 31.919286][ T580] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 31.927017][ T580] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 31.936487][ T580] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 31.945417][ T580] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 31.953159][ T580] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 32.222289][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 32.222305][ T36] audit: type=1400 audit(1791349225.859:207): avc: denied { getopt } for pid=690 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.259650][ T36] audit: type=1400 audit(1791349225.899:208): avc: denied { bind } for pid=694 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.260885][ T695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=695 comm=syz.0.118 [ 32.296191][ T695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=695 comm=syz.0.118 [ 32.309065][ T36] audit: type=1400 audit(1791349225.949:209): avc: denied { mounton } for pid=694 comm="syz.0.118" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.332811][ T580] usb 3-1: failed to enable PITCH for EP 0x82 [ 32.347450][ T580] usb 3-1: USB disconnect, device number 6 [ 32.360878][ T516] udevd[516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.827397][ T657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.827413][ T658] Bluetooth: hci0: command 0x1003 tx timeout [ 32.854161][ T36] audit: type=1400 audit(1791349226.489:210): avc: denied { mount } for pid=700 comm="syz.3.120" name="/" dev="ramfs" ino=6366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.876202][ T36] audit: type=1400 audit(1791349226.489:211): avc: denied { mounton } for pid=700 comm="syz.3.120" path="/file0" dev="ramfs" ino=5461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 32.898157][ T702] GUP no longer grows the stack in syz.3.120 (702): 200000005000-200000008000 (200000004000) [ 32.908346][ T702] CPU: 1 UID: 0 PID: 702 Comm: syz.3.120 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 32.908381][ T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.908395][ T702] Call Trace: [ 32.908401][ T702] [ 32.908406][ T702] __dump_stack+0x21/0x30 [ 32.908427][ T702] dump_stack_lvl+0x140/0x1c0 [ 32.908442][ T702] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.908456][ T702] ? find_vma+0xd3/0x120 [ 32.908468][ T702] dump_stack+0x19/0x20 [ 32.908482][ T702] fixup_user_fault+0x616/0x6a0 [ 32.908496][ T702] fault_in_user_writeable+0x75/0xe0 [ 32.908510][ T702] futex_lock_pi+0x2ed/0xa70 [ 32.908524][ T702] ? futex_unqueue+0x136/0x160 [ 32.908537][ T702] ? __cfi_futex_lock_pi+0x10/0x10 [ 32.908552][ T702] ? __cfi_futex_wake_mark+0x10/0x10 [ 32.908570][ T702] ? __cfi_futex_wake_mark+0x10/0x10 [ 32.908588][ T702] ? __seccomp_filter+0x897/0x1b70 [ 32.908613][ T702] do_futex+0x270/0x510 [ 32.908627][ T702] ? __cfi_do_futex+0x10/0x10 [ 32.908641][ T702] __se_sys_futex+0x13c/0x320 [ 32.908654][ T702] ? __x64_sys_futex+0x110/0x110 [ 32.908668][ T702] __x64_sys_futex+0xe9/0x110 [ 32.908682][ T702] x64_sys_call+0x227f/0x2ee0 [ 32.908691][ T702] do_syscall_64+0x57/0xf0 [ 32.908703][ T702] ? clear_bhb_loop+0x50/0xa0 [ 32.908717][ T702] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.908731][ T702] RIP: 0033:0x7f057099e199 [ 32.908741][ T702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.908750][ T702] RSP: 002b:00007f0571903028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.908763][ T702] RAX: ffffffffffffffda RBX: 00007f0570c25fa0 RCX: 00007f057099e199 [ 32.908772][ T702] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 32.908779][ T702] RBP: 00007f0570a358e0 R08: 0000000000000000 R09: 0000000000000001 [ 32.908785][ T702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.908792][ T702] R13: 00007f0570c26038 R14: 00007f0570c25fa0 R15: 00007fff74d263b8 [ 32.908801][ T702] [ 33.190752][ T705] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.202906][ T36] audit: type=1400 audit(1791349226.839:212): avc: denied { bind } for pid=704 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.222102][ T36] audit: type=1400 audit(1791349226.839:213): avc: denied { name_bind } for pid=704 comm="syz.0.122" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 33.242721][ T36] audit: type=1400 audit(1791349226.839:214): avc: denied { node_bind } for pid=704 comm="syz.0.122" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 33.255835][ T705] mmap: syz.0.122 (705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.265195][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.299530][ T714] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.3145728.0), cmd(14) [ 33.328774][ T719] ======================================================= [ 33.328774][ T719] WARNING: The mand mount option has been deprecated and [ 33.328774][ T719] and is ignored by this kernel. Remove the mand [ 33.328774][ T719] option from the mount to silence this warning. [ 33.328774][ T719] ======================================================= [ 33.365061][ T719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.373106][ T719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.381022][ T719] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 33.437421][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 33.445261][ T31] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 33.454222][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.464324][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.473336][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.485490][ T31] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 33.494574][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.502585][ T31] usb 4-1: Product: syz [ 33.506723][ T31] usb 4-1: Manufacturer: syz [ 33.511322][ T31] usb 4-1: SerialNumber: syz [ 33.688527][ T36] audit: type=1326 audit(1791349227.329:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=699 comm="syz.2.121" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a7f9e199 code=0x7fc00000 [ 33.701876][ T721] fuse: Bad value for 'fd' [ 33.732058][ T36] audit: type=1400 audit(1791349227.369:216): avc: denied { cmd } for pid=722 comm="syz.2.128" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 33.807402][ T404] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 33.815433][ T404] usb 2-1: device reset changed ep0 maxpacket size! [ 33.822310][ T580] usb 2-1: USB disconnect, device number 3 [ 33.957400][ T580] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.107397][ T580] usb 2-1: Using ep0 maxpacket: 8 [ 34.113806][ T580] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.124232][ T580] usb 2-1: string descriptor 0 read error: -22 [ 34.130465][ T580] usb 2-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 34.139518][ T580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.150066][ T580] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 34.159748][ T580] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 34.171401][ T580] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 34.174256][ T516] udevd[516]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.229456][ T31] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 34.238506][ T31] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 34.247760][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.260382][ T31] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 34.271011][ T31] usb 4-1: USB disconnect, device number 6 [ 34.278033][ T688] udevd[688]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.350880][ T404] usb 2-1: USB disconnect, device number 4 [ 34.577405][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.737403][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 34.743565][ T31] usb 4-1: config 0 has no interfaces? [ 34.750583][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.759646][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.767722][ T31] usb 4-1: Product: syz [ 34.771878][ T31] usb 4-1: Manufacturer: syz [ 34.776450][ T31] usb 4-1: SerialNumber: syz [ 34.781604][ T31] usb 4-1: config 0 descriptor?? [ 34.817471][ T580] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.864147][ T732] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 34.886801][ T736] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.805306368.0), cmd(14) [ 34.921111][ T743] fuse: Bad value for 'fd' [ 34.957434][ T580] usb 3-1: device descriptor read/64, error -71 [ 35.197446][ T580] usb 3-1: device descriptor read/64, error -71 [ 35.437413][ T580] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.567410][ T580] usb 3-1: device descriptor read/64, error -71 [ 35.807410][ T580] usb 3-1: device descriptor read/64, error -71 [ 35.917760][ T580] usb usb3-port1: attempt power cycle [ 36.257448][ T580] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.278410][ T580] usb 3-1: device descriptor read/8, error -71 [ 36.408448][ T580] usb 3-1: device descriptor read/8, error -71 [ 36.517467][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 36.647416][ T580] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.668462][ T580] usb 3-1: device descriptor read/8, error -71 [ 36.678460][ T763] device-mapper: ioctl: Empty message received. [ 36.678484][ T31] usb 1-1: config 3 has an invalid interface number: 193 but max is 0 [ 36.692984][ T31] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 36.703096][ T31] usb 1-1: config 3 has no interface number 0 [ 36.709198][ T31] usb 1-1: config 3 interface 193 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 36.712283][ T768] fuse: Bad value for 'fd' [ 36.722255][ T31] usb 1-1: config 3 interface 193 has no altsetting 0 [ 36.723821][ T31] usb 1-1: New USB device found, idVendor=045b, idProduct=0247, bcdDevice=6b.2b [ 36.742542][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.750598][ T31] usb 1-1: Product: syz [ 36.754781][ T31] usb 1-1: Manufacturer: syz [ 36.759417][ T31] usb 1-1: SerialNumber: syz [ 36.798431][ T580] usb 3-1: device descriptor read/8, error -71 [ 36.907502][ T580] usb usb3-port1: unable to enumerate USB device [ 36.967177][ T759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.975740][ T759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.121176][ T31] cdc_acm 1-1:3.193: Zero length descriptor references [ 37.128091][ T31] cdc_acm 1-1:3.193: probe with driver cdc_acm failed with error -22 [ 37.137642][ T31] usb 1-1: USB disconnect, device number 4 [ 37.243244][ T65] usb 4-1: USB disconnect, device number 7 [ 37.613000][ T796] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.805306368.0), cmd(14) [ 37.640867][ T799] fuse: Bad value for 'fd' [ 37.669115][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 37.669131][ T36] audit: type=1400 audit(1791349231.309:224): avc: denied { create } for pid=802 comm="syz.1.156" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.722280][ T36] audit: type=1400 audit(1791349231.329:225): avc: denied { write } for pid=802 comm="syz.1.156" name="file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.781907][ T36] audit: type=1400 audit(1791349231.329:226): avc: denied { open } for pid=802 comm="syz.1.156" path="/71/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.833476][ T36] audit: type=1400 audit(1791349231.439:227): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.860492][ T815] syzkaller1: entered promiscuous mode [ 37.865375][ T36] audit: type=1400 audit(1791349231.469:228): avc: denied { write } for pid=814 comm="syz.0.159" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.870353][ T815] syzkaller1: entered allmulticast mode [ 37.897961][ T815] loop7: detected capacity change from 0 to 8 [ 38.034296][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 38.044209][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 38.110226][ T827] device-mapper: ioctl: Empty message received. [ 38.125641][ T830] fuse: Bad value for 'fd' [ 38.140034][ T36] audit: type=1400 audit(1791349231.779:229): avc: denied { bind } for pid=831 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.164818][ T836] FAULT_INJECTION: forcing a failure. [ 38.164818][ T836] name failslab, interval 1, probability 0, space 0, times 0 [ 38.177699][ T836] CPU: 1 UID: 0 PID: 836 Comm: syz.0.167 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 38.177731][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.177744][ T836] Call Trace: [ 38.177751][ T836] [ 38.177759][ T836] __dump_stack+0x21/0x30 [ 38.177790][ T836] dump_stack_lvl+0x140/0x1c0 [ 38.177805][ T836] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.177820][ T836] dump_stack+0x19/0x20 [ 38.177834][ T836] should_fail_ex+0x3c2/0x510 [ 38.177855][ T836] should_failslab+0xac/0x100 [ 38.177870][ T836] kmem_cache_alloc_noprof+0x42/0x410 [ 38.177883][ T836] ? sk_prot_alloc+0x69/0x3a0 [ 38.177896][ T836] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 38.177907][ T836] sk_prot_alloc+0x69/0x3a0 [ 38.177921][ T836] ? bpf_lsm_inode_alloc_security+0xd/0x20 [ 38.177934][ T836] sk_alloc+0x40/0x590 [ 38.177948][ T836] ? inode_init_always_gfp+0x76e/0x9e0 [ 38.177961][ T836] inet6_create+0x5a8/0x11c0 [ 38.177973][ T836] __sock_create+0x3a2/0x810 [ 38.177988][ T836] sock_create_kern+0x3f/0x50 [ 38.178001][ T836] inet_ctl_sock_create+0xa3/0x230 [ 38.178013][ T836] ? proc_register+0x595/0x780 [ 38.178024][ T836] ? __cfi_inet_ctl_sock_create+0x10/0x10 [ 38.178036][ T836] ? proc_create_net_data+0x13d/0x1b0 [ 38.178047][ T836] ndisc_net_init+0x96/0x270 [ 38.178057][ T836] ? __cfi_ndisc_net_init+0x10/0x10 [ 38.178067][ T836] ? fib_default_rule_add+0x1f9/0x430 [ 38.178079][ T836] ? ip6mr_net_init+0x350/0x430 [ 38.178092][ T836] ops_init+0x2ff/0x5d0 [ 38.178103][ T836] ? __kasan_check_write+0x18/0x20 [ 38.178114][ T836] ? rwsem_read_trylock+0x275/0x5a0 [ 38.178130][ T836] setup_net+0x227/0x9b0 [ 38.178140][ T836] ? copy_net_ns+0xa20/0xa20 [ 38.178150][ T836] ? down_read_killable+0x7f/0x100 [ 38.178164][ T836] ? __cfi_down_read_killable+0x10/0x10 [ 38.178179][ T836] copy_net_ns+0x4fc/0xa20 [ 38.178189][ T836] create_new_namespaces+0x390/0x6f0 [ 38.178205][ T836] unshare_nsproxy_namespaces+0x124/0x180 [ 38.178220][ T836] ksys_unshare+0x4f9/0x920 [ 38.178233][ T836] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 38.178249][ T836] ? __cfi_ksys_unshare+0x10/0x10 [ 38.178262][ T836] ? __kasan_check_write+0x18/0x20 [ 38.178273][ T836] __x64_sys_unshare+0x3c/0x50 [ 38.178286][ T836] x64_sys_call+0x2998/0x2ee0 [ 38.178296][ T836] do_syscall_64+0x57/0xf0 [ 38.178307][ T836] ? clear_bhb_loop+0x50/0xa0 [ 38.178320][ T836] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.178334][ T836] RIP: 0033:0x7fd95359e199 [ 38.178345][ T836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.178357][ T836] RSP: 002b:00007fd954499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.178370][ T836] RAX: ffffffffffffffda RBX: 00007fd953825fa0 RCX: 00007fd95359e199 [ 38.178378][ T836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 38.178385][ T836] RBP: 00007fd9536358e0 R08: 0000000000000000 R09: 0000000000000000 [ 38.178396][ T836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.178407][ T836] R13: 00007fd953826038 R14: 00007fd953825fa0 R15: 00007fffeac03fa8 [ 38.178423][ T836] [ 38.178460][ T836] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 38.203561][ T36] audit: type=1400 audit(1791349231.839:230): avc: denied { read write } for pid=837 comm="syz.3.168" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.217478][ T404] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 38.228527][ T36] audit: type=1400 audit(1791349231.849:231): avc: denied { open } for pid=837 comm="syz.3.168" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.229444][ T31] hid-sensor-hub 0003:1234:5678.0003: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 38.239368][ T36] audit: type=1326 audit(1791349231.849:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=837 comm="syz.3.168" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f057099e199 code=0x0 [ 38.398510][ T404] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.603260][ T404] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 38.612378][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.620417][ T404] usb 3-1: Product: syz [ 38.624604][ T404] usb 3-1: Manufacturer: syz [ 38.629209][ T404] usb 3-1: SerialNumber: syz [ 38.635764][ T404] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 38.641735][ T404] cdc_wdm 3-1:1.0: Unknown control protocol [ 38.715468][ T848] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 38.733179][ T853] overlayfs: overlapping lowerdir path [ 38.750492][ T855] device-mapper: ioctl: Empty message received. [ 38.765728][ T858] fuse: Invalid rootmode [ 38.892008][ T36] audit: type=1400 audit(1791349232.529:233): avc: denied { read write } for pid=820 comm="syz.2.162" name="cdc-wdm0" dev="devtmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 39.096606][ T876] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.197797][ T880] fuse: Invalid rootmode [ 39.347413][ T404] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.498710][ T404] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.506457][ T404] usb 2-1: too many configurations: 18, using maximum allowed: 8 [ 39.514898][ T404] usb 2-1: config 0 has no interfaces? [ 39.521086][ T404] usb 2-1: config 0 has no interfaces? [ 39.527237][ T404] usb 2-1: config 0 has no interfaces? [ 39.533459][ T404] usb 2-1: config 0 has no interfaces? [ 39.539569][ T404] usb 2-1: config 0 has no interfaces? [ 39.545663][ T404] usb 2-1: config 0 has no interfaces? [ 39.551798][ T404] usb 2-1: config 0 has no interfaces? [ 39.557932][ T404] usb 2-1: config 0 has no interfaces? [ 39.564763][ T404] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 39.573849][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.581856][ T404] usb 2-1: Product: syz [ 39.586011][ T404] usb 2-1: Manufacturer: syz [ 39.590614][ T404] usb 2-1: SerialNumber: syz [ 39.595815][ T404] usb 2-1: config 0 descriptor?? [ 39.677641][ T887] process 'syz.0.184' launched './file0' with NULL argv: empty string added [ 39.707046][ T893] netlink: 6192 bytes leftover after parsing attributes in process `syz.0.186'. [ 39.761469][ T904] device-mapper: ioctl: Empty message received. [ 39.778016][ T907] fuse: Invalid rootmode [ 39.801539][ T404] usb 2-1: USB disconnect, device number 5 [ 40.075103][ T925] fuse: Bad value for 'rootmode' [ 40.100401][ T932] device-mapper: ioctl: Empty message received. [ 40.138987][ T944] FAULT_INJECTION: forcing a failure. [ 40.138987][ T944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.152152][ T944] CPU: 1 UID: 0 PID: 944 Comm: syz.3.207 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 40.152181][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.152196][ T944] Call Trace: [ 40.152202][ T944] [ 40.152210][ T944] __dump_stack+0x21/0x30 [ 40.152240][ T944] dump_stack_lvl+0x140/0x1c0 [ 40.152265][ T944] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.152290][ T944] ? check_stack_object+0x138/0x150 [ 40.152311][ T944] dump_stack+0x19/0x20 [ 40.152334][ T944] should_fail_ex+0x3c2/0x510 [ 40.152357][ T944] should_fail+0xf/0x20 [ 40.152378][ T944] should_fail_usercopy+0x1e/0x30 [ 40.152401][ T944] _copy_to_user+0x24/0xa0 [ 40.152425][ T944] simple_read_from_buffer+0xed/0x160 [ 40.152450][ T944] proc_fail_nth_read+0x1aa/0x220 [ 40.152476][ T944] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 40.152501][ T944] ? bpf_lsm_file_permission+0xd/0x20 [ 40.152527][ T944] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 40.152554][ T944] vfs_read+0x288/0xc70 [ 40.152575][ T944] ? __cfi_mutex_unlock+0x10/0x10 [ 40.152600][ T944] ? __cfi_vfs_read+0x10/0x10 [ 40.152620][ T944] ? __kasan_check_write+0x18/0x20 [ 40.152648][ T944] ? mutex_lock+0x97/0x1d0 [ 40.152671][ T944] ? __cfi_mutex_lock+0x10/0x10 [ 40.152697][ T944] ksys_read+0x145/0x260 [ 40.152717][ T944] ? __cfi_ksys_read+0x10/0x10 [ 40.152736][ T944] ? __kasan_check_write+0x18/0x20 [ 40.152757][ T944] ? __kasan_check_write+0x18/0x20 [ 40.152776][ T944] ? fpregs_restore_userregs+0x11c/0x260 [ 40.152800][ T944] __x64_sys_read+0x7f/0x90 [ 40.152820][ T944] x64_sys_call+0x2638/0x2ee0 [ 40.152839][ T944] do_syscall_64+0x57/0xf0 [ 40.152859][ T944] ? clear_bhb_loop+0x50/0xa0 [ 40.152885][ T944] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.152910][ T944] RIP: 0033:0x7f057095e9ce [ 40.152927][ T944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.152944][ T944] RSP: 002b:00007f0571902fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.152965][ T944] RAX: ffffffffffffffda RBX: 00007f05719036c0 RCX: 00007f057095e9ce [ 40.152980][ T944] RDX: 000000000000000f RSI: 00007f05719030a0 RDI: 0000000000000004 [ 40.152994][ T944] RBP: 00007f0571903090 R08: 0000000000000000 R09: 0000000000000000 [ 40.153007][ T944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.153019][ T944] R13: 00007f0570c26038 R14: 00007f0570c25fa0 R15: 00007fff74d263b8 [ 40.153036][ T944] [ 40.415892][ T954] fuse: Bad value for 'rootmode' [ 40.451940][ T961] tipc: Started in network mode [ 40.456856][ T961] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.463730][ T961] tipc: New replicast peer: 0.0.0.0 [ 40.468969][ T580] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 40.469296][ T961] tipc: Enabled bearer , priority 10 [ 40.516577][ T970] device-mapper: ioctl: Empty message received. [ 40.618561][ T979] fuse: Bad value for 'rootmode' [ 40.620444][ T580] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 40.632580][ T580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.644548][ T580] usb 1-1: Product: syz [ 40.650222][ T580] usb 1-1: Manufacturer: syz [ 40.656310][ T580] usb 1-1: SerialNumber: syz [ 40.663007][ T580] usb 1-1: config 0 descriptor?? [ 40.669072][ T580] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 40.871099][ T65] usb 1-1: USB disconnect, device number 5 [ 40.967400][ T404] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.979986][ T580] usb 3-1: USB disconnect, device number 11 [ 40.990228][ T992] ./dev/sda1: Can't lookup blockdev [ 41.019429][ T1000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 41.029008][ T1000] fuse: Unknown parameter 'yש.G:\GS5E#l]' [ 41.049301][ T1002] device-mapper: ioctl: Empty message received. [ 41.064499][ T1005] fuse: Unknown parameter 'use00000000000000000000' [ 41.117428][ T404] usb 4-1: Using ep0 maxpacket: 8 [ 41.123669][ T404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.134085][ T404] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.143150][ T404] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.154300][ T404] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 41.163480][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.172321][ T404] usb 4-1: Product: syz [ 41.176503][ T404] usb 4-1: Manufacturer: syz [ 41.181452][ T404] usb 4-1: SerialNumber: syz [ 41.220225][ T1017] ./dev/sda1: Can't lookup blockdev [ 41.295124][ T1026] fuse: Unknown parameter 'use00000000000000000000' [ 41.392509][ T404] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 41.401204][ T404] usb 4-1: clock source 0 is not valid, cannot use [ 41.401461][ T1035] device-mapper: ioctl: Empty message received. [ 41.408021][ T404] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 41.420886][ T404] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 41.435081][ T404] usb 4-1: USB disconnect, device number 8 [ 41.487426][ T580] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.597408][ T313] tipc: Node number set to 2886997162 [ 41.648410][ T580] usb 2-1: config 1 has an invalid interface number: 7 but max is 2 [ 41.656425][ T580] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.666677][ T580] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 41.675663][ T580] usb 2-1: config 1 has no interface number 3 [ 41.681757][ T580] usb 2-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 41.692544][ T580] usb 2-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 41.705495][ T580] usb 2-1: config 1 interface 7 has no altsetting 0 [ 41.713355][ T580] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 41.722444][ T580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.730447][ T580] usb 2-1: Product: syz [ 41.734602][ T580] usb 2-1: Manufacturer: syz [ 41.739200][ T580] usb 2-1: SerialNumber: syz [ 42.078107][ T1057] fuse: Unknown parameter 'use00000000000000000000' [ 42.153527][ T1063] device-mapper: ioctl: Empty message received. [ 42.174937][ T1068] program syz.3.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.184372][ T1068] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.320972][ T1086] program syz.0.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.330452][ T1086] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.397430][ T404] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.439025][ T1094] ./dev/sda1: Can't lookup blockdev [ 42.547634][ T404] usb 3-1: Using ep0 maxpacket: 8 [ 42.553734][ T404] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.563851][ T404] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.572865][ T404] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.583899][ T404] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 42.593010][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.601034][ T404] usb 3-1: Product: syz [ 42.605191][ T404] usb 3-1: Manufacturer: syz [ 42.609798][ T404] usb 3-1: SerialNumber: syz [ 42.627383][ T65] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.778424][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.789397][ T65] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.798462][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.807150][ T65] usb 4-1: config 0 descriptor?? [ 42.819269][ T404] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 42.827961][ T404] usb 3-1: clock source 0 is not valid, cannot use [ 42.834722][ T404] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 42.841412][ T404] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 42.854700][ T404] usb 3-1: USB disconnect, device number 12 [ 42.864845][ T688] udevd[688]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.015381][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 43.021405][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.030084][ T65] usb 4-1: USB disconnect, device number 9 [ 43.370150][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 43.370168][ T36] audit: type=1400 audit(1791349237.009:253): avc: denied { read } for pid=1108 comm="syz.0.271" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.427111][ T36] audit: type=1400 audit(1791349237.059:254): avc: denied { getopt } for pid=1112 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.440615][ T1115] ./dev/sda1: Can't lookup blockdev [ 43.458718][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.618400][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.629411][ T65] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 43.638493][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.646973][ T65] usb 4-1: config 0 descriptor?? [ 43.727399][ T687] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 43.817409][ T404] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 43.878087][ T687] usb 1-1: not running at top speed; connect to a high speed hub [ 43.886609][ T687] usb 1-1: config 6 has an invalid interface number: 6 but max is 0 [ 43.894654][ T687] usb 1-1: config 6 has no interface number 0 [ 43.900768][ T687] usb 1-1: config 6 interface 6 altsetting 4 endpoint 0xB has invalid maxpacket 65, setting to 64 [ 43.911483][ T687] usb 1-1: config 6 interface 6 has no altsetting 0 [ 43.919458][ T687] usb 1-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 43.928537][ T687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.936520][ T687] usb 1-1: Product: syz [ 43.940694][ T687] usb 1-1: Manufacturer: syz [ 43.945295][ T687] usb 1-1: SerialNumber: syz [ 43.950777][ T1120] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 43.977397][ T404] usb 3-1: Using ep0 maxpacket: 8 [ 43.983547][ T404] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.993643][ T404] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.002616][ T404] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.013664][ T404] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 44.022730][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.030743][ T404] usb 3-1: Product: syz [ 44.034926][ T404] usb 3-1: Manufacturer: syz [ 44.039565][ T404] usb 3-1: SerialNumber: syz [ 44.166813][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.175359][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.222848][ T687] usb 1-1: Found UVC 0.00 device syz (174f:8a12) [ 44.229281][ T687] usb 1-1: No valid video chain found. [ 44.235881][ T687] usb 1-1: USB disconnect, device number 6 [ 44.249549][ T404] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 44.258221][ T404] usb 3-1: clock source 0 is not valid, cannot use [ 44.264961][ T404] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 44.272411][ T404] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 44.283221][ T580] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 44.283425][ T404] usb 3-1: USB disconnect, device number 13 [ 44.308587][ T580] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 44.318308][ T580] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.335565][ T580] usb 2-1: USB disconnect, device number 6 [ 44.350423][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 44.457797][ T65] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 44.465226][ T65] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 44.493709][ C0] ------------[ cut here ]------------ [ 44.499172][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 44.507739][ C0] index 255 is out of range for type 'const int[34]' [ 44.514387][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 44.514405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.514413][ C0] Call Trace: [ 44.514418][ C0] [ 44.514423][ C0] __dump_stack+0x21/0x30 [ 44.514445][ C0] dump_stack_lvl+0x140/0x1c0 [ 44.514462][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.514479][ C0] ? start_kernel+0x462/0x4bb [ 44.514495][ C0] dump_stack+0x19/0x20 [ 44.514510][ C0] ubsan_epilogue+0xe/0x40 [ 44.514521][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 44.514539][ C0] aiptek_irq+0x208d/0x2a00 [ 44.514557][ C0] ? _raw_spin_unlock+0x45/0x60 [ 44.514570][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 44.514589][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 44.514603][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 44.514616][ C0] dummy_timer+0xa3f/0x4900 [ 44.514634][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 44.514647][ C0] ? timerqueue_del+0xd7/0x130 [ 44.514658][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 44.514678][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 44.514690][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 44.514709][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 44.514726][ C0] ? read_tsc+0xd/0x20 [ 44.514741][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 44.514756][ C0] hrtimer_run_softirq+0x159/0x560 [ 44.514767][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 44.514784][ C0] handle_softirqs+0x1aa/0x5b0 [ 44.514798][ C0] __irq_exit_rcu+0x47/0xb0 [ 44.514809][ C0] irq_exit_rcu+0xd/0x30 [ 44.514820][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 44.514837][ C0] [ 44.514841][ C0] [ 44.514852][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 44.514871][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 44.514890][ C0] Code: cc cc cc cc cc cc cc b8 2d 4c 1b e1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 c7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 44.514900][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 44.514912][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5953d [ 44.514922][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000096604 [ 44.514930][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 44.514939][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 44.514948][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed08e8 [ 44.514958][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 44.514969][ C0] default_idle+0x17/0x30 [ 44.514979][ C0] arch_cpu_idle+0xd/0x20 [ 44.514990][ C0] default_idle_call+0x3e/0x80 [ 44.515000][ C0] do_idle+0x2fc/0x570 [ 44.515013][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 44.515027][ C0] ? do_idle+0x543/0x570 [ 44.515039][ C0] cpu_startup_entry+0x47/0x60 [ 44.515052][ C0] rest_init+0x10b/0x130 [ 44.515064][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 44.515081][ C0] start_kernel+0x462/0x4bb [ 44.515094][ C0] x86_64_start_reservations+0x2e/0x30 [ 44.515111][ C0] x86_64_start_kernel+0x6a/0x7b [ 44.515126][ C0] common_startup_64+0x13b/0x157 [ 44.515144][ C0] [ 44.515148][ C0] ---[ end trace ]--- [ 44.829447][ C0] ------------[ cut here ]------------ [ 44.834883][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 44.843445][ C0] index 256 is out of range for type 'const int[34]' [ 44.850097][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 5fe152ef41c0f52d2b9838e2edd0515112f50e23 [ 44.850114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.850122][ C0] Call Trace: [ 44.850127][ C0] [ 44.850132][ C0] __dump_stack+0x21/0x30 [ 44.850154][ C0] dump_stack_lvl+0x140/0x1c0 [ 44.850170][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.850188][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 44.850203][ C0] dump_stack+0x19/0x20 [ 44.850218][ C0] ubsan_epilogue+0xe/0x40 [ 44.850228][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 44.850247][ C0] aiptek_irq+0x1f3c/0x2a00 [ 44.850265][ C0] ? _raw_spin_unlock+0x45/0x60 [ 44.850277][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 44.850290][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 44.850304][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 44.850315][ C0] dummy_timer+0xa3f/0x4900 [ 44.850333][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 44.850346][ C0] ? timerqueue_del+0xd7/0x130 [ 44.850357][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 44.850375][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 44.850387][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 44.850405][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 44.850421][ C0] ? read_tsc+0xd/0x20 [ 44.850437][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 44.850452][ C0] hrtimer_run_softirq+0x159/0x560 [ 44.850463][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 44.850480][ C0] handle_softirqs+0x1aa/0x5b0 [ 44.850493][ C0] __irq_exit_rcu+0x47/0xb0 [ 44.850504][ C0] irq_exit_rcu+0xd/0x30 [ 44.850515][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 44.850532][ C0] [ 44.850535][ C0] [ 44.850539][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 44.850557][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 44.850575][ C0] Code: cc cc cc cc cc cc cc b8 2d 4c 1b e1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 c7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 44.850585][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 44.850596][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5953d [ 44.850606][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000096604 [ 44.850613][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 44.850622][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 44.850631][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed08e8 [ 44.850640][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 44.850651][ C0] default_idle+0x17/0x30 [ 44.850661][ C0] arch_cpu_idle+0xd/0x20 [ 44.850672][ C0] default_idle_call+0x3e/0x80 [ 44.850687][ C0] do_idle+0x2fc/0x570 [ 44.850700][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 44.850714][ C0] ? do_idle+0x543/0x570 [ 44.850726][ C0] cpu_startup_entry+0x47/0x60 [ 44.850739][ C0] rest_init+0x10b/0x130 [ 44.850751][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 44.850769][ C0] start_kernel+0x462/0x4bb [ 44.850783][ C0] x86_64_start_reservations+0x2e/0x30 [ 44.850799][ C0] x86_64_start_kernel+0x6a/0x7b [ 44.850814][ C0] common_startup_64+0x13b/0x157 [ 44.850832][ C0] [ 44.850836][ C0] ---[ end trace ]--- [ 45.426431][ T65] usb 4-1: USB disconnect, device number 10 [ 45.432385][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19