last executing test programs: 9.431642778s ago: executing program 2 (id=29): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="401403"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0x3, "61dcd7"}, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000016c0)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.175615493s ago: executing program 2 (id=53): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x0, 0x4, &(0x7f0000000080)="d69012773a47c11765a02651cc7105b65e13c8ef3749e75a7603d45ae2b9fae33107f0be6cf5adfef007", 0x2a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000000)={&(0x7f0000000240)=[{0x9, 0x9, 0xc, 0x6, 0x10001}], 0x1, 0x28, 0x5, 0x7634}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a009100ffffffffffffaaaaaaaaaaaa86dd694fd2cd016088fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x19a) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x200000001, 0x0, 0x4, 0x40, 0x2, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0xe, 0x17, {0x17, 0x32, "7bd04cb0434f528e5818af9215f479d9eb5acfb0e2"}}, &(0x7f0000000680)={0x0, 0x3, 0x57, @string={0x57, 0x3, "73894de18ebcd346c7b6fb696c2de337b4b0a796e988de12e3823cd8c23dbfd6130ee9893eddf4aee17f22e02ae54d89fc6695719f02abd1b2d519a3b19b774079253ff835914e492f1062723f9ef47b3709cae16a"}}, &(0x7f0000000700)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x97, 0x1, 0x2, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x34, 0x0, 0x0, 0xf, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x4, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0x1e00, 0x4, [0xc007, 0xff003f, 0x0, 0x0]}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x55, 0x0, 0x5, 0xdf, "1052293b", "637f2c11"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x0, 0x4, 0x2, 0x80, 0x8}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000840)={0x0, 0x0, 0x18, "9e6c96eada9d8c07b66613ec04898b41fa64502f0926349f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1320, 0x20}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "11c4"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "ed9b"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xd, {0xd, 0x31, "310d3069d118983757793f"}}, &(0x7f0000000300)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "4f85e700155e8e666c630a155671b539321113fc8c4808fa181db65b707623c967da98282c737e9b9a61a18ec3ab8b5464baa6a3650a3bbbdc455f7206632adfd9f6be719a47d6be1de0cc215a6f3236102a19abbd587baf24b8557a1232647ed20fb095c28af5e4082911f9eddaa19252852f7391d988830cffea5deb883431423f99fba1ec77bfd0cfb0c34c218d3d8df1a05c9f49bb408be7e24be90680c788a73e286c62575a2d4b95983c48665c4dd85bbfc082f267ad3ac2cb47dd52a91c6e78fe71eec548521a2da1927f8601d5fbfc0e"}}, &(0x7f0000000100)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xc, "9314dc4a"}, @main=@item_012={0x1, 0x0, 0xa, "93"}, @local=@item_012={0x1, 0x2, 0x7, "b0"}, @global=@item_012={0x1, 0x1, 0xb, "8f"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x9e4}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0x31, 0x84, "62a1626c0d2022fdb53df4b87e2e411b1726c9ea5ef47dfde35c4be745c1fc5b4182711bf15cf0f7661facce7273ef522750703bb25f89b333fad224b7245e8dee6fc15c8712c5b4f9d5e43deae2760ba242930c52bc7655d58092e359008b35e32665713fcfb579d2c28182078bf72177746e7c0db6f340098dca628b4c7165ba94bfe6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000540)={0x20, 0x1, 0x5f, "081bb95d9f7af6ae09229fd71cd82574f2613990e75cd13ae24ee176a89c691532e87de134ed5c435ef4aa24306d58d6c113320ba6e844255ae11c4b02d921b821ff0a8c37ae23b25ecfb04b3f7a4d6fb1bbcd149eb4ed7c7377b687a4b13a"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 4.08891088s ago: executing program 1 (id=57): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x319840, 0x0) fstat(r0, &(0x7f00000000c0)) 4.077469771s ago: executing program 1 (id=58): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x900) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 4.000751664s ago: executing program 1 (id=59): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) 3.999891233s ago: executing program 1 (id=62): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) flock(r0, 0x8) 3.936550986s ago: executing program 1 (id=64): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}]}]}, 0x78}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.927565856s ago: executing program 0 (id=65): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x33, [0x10001, 0x5, 0x5, 0x7fff, 0x2, 0x3], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000100)=""/51}, &(0x7f00000001c0)=0x78) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.503933181s ago: executing program 0 (id=66): syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x2e3}, 0x0, 0x0, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0xeeee8000, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x8, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xa52e5f8d5bb586b5, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x6000, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x2, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x60, 0x6, 0x1000, 0xeeef0000, [0x4, 0x8001, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="ba4000b027eebaf80c66b87445be8766efbafc0cb8325aef660f40770066b9800000c00f326635004000000f3066b80500000066b9000000000f01c126f20f2dfe3e0f38062bf30fc7b1bfec660f38dfcebaa10066ed", 0x56}], 0x1, 0x8, &(0x7f0000000200)=[@dstype0={0x6, 0x5}, @dstype3={0x7, 0x9}], 0x2) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000900)={r8, 0x3, 0x0, [0x9, 0x1, 0x10001, 0x10001, 0x24], [0x5, 0x2, 0x11fa, 0x2, 0x1, 0x9, 0xf, 0x9, 0x711ed3e8, 0x589d, 0x6, 0x2, 0x1000, 0x800, 0x6, 0xfffffffffffffff9, 0x6, 0xf, 0x3, 0x0, 0x8, 0x8, 0x6, 0x4, 0x0, 0x4, 0x3, 0x1000, 0x3000000000000, 0x8, 0x1, 0x10, 0x32f, 0x7, 0xeb08, 0x40, 0x67, 0x9543, 0x7fff, 0x10, 0x100000000, 0x0, 0x401, 0x7ff, 0x6, 0x5, 0xd183, 0x6, 0x0, 0x10, 0x3, 0xffffffffffffffff, 0xa0000, 0x0, 0x6, 0x9, 0x70c, 0x372, 0x17a, 0x33f9, 0x200, 0x4, 0x1ff, 0x3, 0x100, 0xd1, 0x6, 0x40, 0x1fe, 0x4, 0x7fff, 0x6, 0x8, 0x1, 0x8, 0xd74e, 0x2, 0x3, 0x3, 0x7fff, 0x6, 0x3, 0xc, 0x8, 0x0, 0x7fff, 0x3, 0x4, 0xfffffffffffff208, 0xc000000000000000, 0x0, 0x95, 0x6, 0x6, 0x4, 0x0, 0x9, 0xfffffffffffffffc, 0x8, 0x9, 0xffffffffffff7fff, 0x5, 0x0, 0x5, 0x9, 0x2, 0xa, 0x5, 0x1, 0x7, 0x7, 0xffffffffffffffff, 0xdc8c, 0x4, 0x0, 0x9, 0x7ff, 0x8, 0x9, 0x1, 0x3]}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000080)) r10 = syz_open_pts(r7, 0x2) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000300)={0x7f, 0x80004, 0x199, 0x1800, 0x7, "ab5aa8000600000000000000000000dd00", 0x80, 0x20b}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xa) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0xc}) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x48040, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000100)=0x7) 3.187655851s ago: executing program 0 (id=67): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x307fffd, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf2d01000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000080000000b0"], 0x20}}, 0x0) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.141964332s ago: executing program 2 (id=68): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) unshare(0x400) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0xa0000013}) 3.137056923s ago: executing program 0 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000002c0), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x4000, r4}) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r8, r6, r7, 0x0) keyctl$link(0x8, r5, r8) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x2, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x2, r4, 0x1}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) 3.051546926s ago: executing program 2 (id=70): r0 = userfaultfd(0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xd377, 0x17}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x8, 0x0, 0xdf, "00ff00221aed5eb7641a5500000000000050df"}) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000500)=""/179, 0xb3}], 0x9) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x8, 0x50, 0x1, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x16, 0x6}, [@source_unit={0xc, 0x24, 0xb, 0x8, 0x1, 0x3, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x9, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x4, 0x0, {0xa, 0x25, 0x25, 0x460, 0x40, 0x44}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x3a, 0x52, 0x1, 0x8, 0x6}, 0xfffffffffffffced, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x1, 0xed7cec195d9f74aa, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x4, 0xfff8}]}, 0x1, [{0x0, 0x0}]}) 2.597093501s ago: executing program 1 (id=71): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x20000000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) move_mount(r4, &(0x7f0000000080)='./file0/../file0/file0\x00', r5, &(0x7f0000000180)='./file0/../file0\x00', 0x54) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400afeffffe89ffd79a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000380)={0x0, {0x1, 0x0, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$uinput_user_dev(r7, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfebf, 0x4, 0x9, 0x0, 0xa4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x9, 0xfffffffd, 0x0, 0x7, 0x200, 0x7, 0x2, 0x6, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x20800000], [0x11, 0xffff0003, 0x7, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffe, 0x5, 0x800, 0x218001, 0xfffffffd, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xffffffff, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x10000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8000008f, 0x7], [0xf, 0x14, 0x0, 0x0, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x800007, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x7, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x2, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x81, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xd420, 0x0, 0x8, 0x0, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x2, 0x8, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x101, 0x40074, 0x6, 0x0, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x20000, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x3, 0x400]}, 0x45c) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x10) fcntl$setstatus(r4, 0x4, 0x6000) read$FUSE(r5, &(0x7f0000000b00)={0x2020}, 0x2046) fcntl$getown(r5, 0x9) shutdown(r6, 0x0) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x25b7edb3, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffffa, 0x1}, &(0x7f0000000ac0)={0xc, 0x9, 0x0, 0x800, 0xc, 0x10001, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') 2.34767114s ago: executing program 3 (id=74): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x9, 0x50000}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r2 = syz_io_uring_setup(0x38e5, &(0x7f0000000000)={0x0, 0x7c79, 0x1000, 0x1, 0x3cc}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) syz_io_uring_setup(0x4c09, &(0x7f0000000200)={0x0, 0x443c, 0x1000, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) madvise(&(0x7f0000802000/0x3000)=nil, 0x3000, 0x9) 2.279661392s ago: executing program 3 (id=75): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 671.697827ms ago: executing program 3 (id=76): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) socketpair(0x20, 0x0, 0x7, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) fallocate(r0, 0x0, 0x0, 0x10fff9) (async) socketpair(0x20, 0x0, 0x7, &(0x7f0000000080)) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) (async) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92) (async) 669.432937ms ago: executing program 3 (id=77): ioprio_set$pid(0x1, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1d08, 0x8) (async) syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0) 657.127667ms ago: executing program 3 (id=78): syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 618.692929ms ago: executing program 3 (id=79): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0xb, 0xf4, 0x40000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22182, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r2, &(0x7f0000000500)=""/166, 0xa6) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x200000, 0xd6, 0x403, 0x0, 0x0, [{0xf8, 0x2, 0x81, '\x00', 0x6}, {0x6, 0x3, 0x8, '\x00', 0x5f}, {0x3, 0x6, 0x3, '\x00', 0x3}, {0xee, 0x2, 0x2, '\x00', 0x1}, {0x1, 0xa0, 0x6, '\x00', 0x7}, {0x7, 0x0, 0x82, '\x00', 0x7f}, {0x1, 0x0, 0x8}, {0x3, 0x81, 0xe3, '\x00', 0x9}, {0x6, 0xfe, 0x9, '\x00', 0x6}, {0x5, 0xf0, 0x9, '\x00', 0xa}, {0x40, 0xc7, 0x3, '\x00', 0x8}, {0x3, 0x1, 0xf1, '\x00', 0x8}, {0x8, 0x1, 0x0, '\x00', 0x7}, {0x82, 0x81, 0x4, '\x00', 0x8}, {0x24, 0x6, 0xf, '\x00', 0x5}, {0xfb, 0x4, 0x4, '\x00', 0x6}, {0x4, 0x28, 0x0, '\x00', 0x6}, {0x8, 0x5, 0x3}, {0x9, 0x7, 0xff, '\x00', 0x9f}, {0x4, 0xd, 0x3}, {0x4, 0x55, 0xdc, '\x00', 0x4}, {0xe1, 0x6, 0x1f, '\x00', 0x3}, {0x8, 0x1, 0x5}, {0x4, 0xfb, 0x0, '\x00', 0xae}]}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="f3720f23e7430f01b76b2400000f01c866baf80cb96a020000b80d800000ba000000000f30b805000000b9a51100000f01c166bafc0cec440f01df0f3066400f6fbb0b0000000fc7c0", 0x49}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402", @ANYRES32], 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000340)={0x2f5, 0x0, 0x9, 0x0, 0x0, [{{r3}, 0x7}, {{r3}, 0x22c}, {{r0}, 0x5}, {{r1}, 0x5}, {{r6}, 0x8}, {{r5}, 0x3}, {{r2}, 0xd}, {{}, 0xdec}, {{r2}, 0x7}]}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x2d) close(r5) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x16, r9}) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20c82, 0x0) write(r10, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/224, 0xe0) 63.750638ms ago: executing program 0 (id=80): prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0xfffffffc, 0x5}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 63.432888ms ago: executing program 2 (id=81): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) r0 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) 15.485039ms ago: executing program 2 (id=82): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) fcntl$dupfd(r0, 0x0, r0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000011000000000000001400000000000000290000000b0000003a50c8d48671514888b078e52a4b430000000600000000"], 0x30}}], 0x1, 0x40000) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="a514ca", 0x3}], 0x1}}], 0x2, 0x40884) (async) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="a514ca", 0x3}], 0x1}}], 0x2, 0x40884) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="010800019078000501fe12f9898bfaff75f51d36f245caf5d66919080a000000000000000201052600008001fffffffd00000f7900000007000000060000000300000009800000000000e973030303080a000000340000000802047d000310d8433dfbde11f6625c256523ca88fe06e2d4c3d9006fdfbee717bad845023d48ed4058270d6a9021678ffa093753a9d2a122a638e1e7d87b6da2b367da63bfa855922f218e06b41e1a84ec9a71a759bb6f7d41cfd154340aa5cb4f70ebaf50e735cb39d34df13c36"], 0x192) (async) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="010800019078000501fe12f9898bfaff75f51d36f245caf5d66919080a000000000000000201052600008001fffffffd00000f7900000007000000060000000300000009800000000000e973030303080a000000340000000802047d000310d8433dfbde11f6625c256523ca88fe06e2d4c3d9006fdfbee717bad845023d48ed4058270d6a9021678ffa093753a9d2a122a638e1e7d87b6da2b367da63bfa855922f218e06b41e1a84ec9a71a759bb6f7d41cfd154340aa5cb4f70ebaf50e735cb39d34df13c36"], 0x192) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/229, 0xe5, 0x1, 0x0}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/229, 0xe5, 0x1, 0x0}, &(0x7f00000001c0)=0x40) io_setup(0x7, &(0x7f00000009c0)=0x0) io_submit(r6, 0x0, 0x0) 0s ago: executing program 0 (id=83): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x91a4b000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000021c0)=ANY=[@ANYBLOB="fc00000019"], 0xfc}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000200)={0x0, 0xe3, 0x3}) write$selinux_load(r1, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1c18b9f8bccaf19d12ca3ae56f9bcd2959e55d6130a10c8c10138962b61b8d1a64ce88b8de3c4cff802b175b8fdcc8f3b83b5aa24e5c371ef1233dac46652315e90f17af0091d6cd513e8a07de0fb919119464af9e654553d7b44f09a32c3e450d3d7cbfd448b0547768e41547e869d21c032129a15ae9775ca1c0892b4ba5ea341267"}, 0x93) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xadb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x93f243b4e81895ac}, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/softnet_stat\x00') capset(&(0x7f0000000180)={0x20071026, r3}, &(0x7f00000001c0)={0x0, 0x5, 0x2, 0x0, 0x1, 0x3}) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 20.295107][ T36] audit: type=1400 audit(1774813701.860:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.296858][ T282] cgroup: Unknown subsys name 'net' [ 20.317809][ T36] audit: type=1400 audit(1774813701.860:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.345255][ T36] audit: type=1400 audit(1774813701.890:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.345362][ T282] cgroup: Unknown subsys name 'devices' [ 20.490487][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.496090][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.608205][ T36] audit: type=1400 audit(1774813702.170:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.631395][ T36] audit: type=1400 audit(1774813702.170:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.656150][ T36] audit: type=1400 audit(1774813702.170:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.664851][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.688444][ T36] audit: type=1400 audit(1774813702.250:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.713891][ T36] audit: type=1400 audit(1774813702.250:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.742930][ T36] audit: type=1400 audit(1774813702.310:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.768565][ T36] audit: type=1400 audit(1774813702.310:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.768926][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.547738][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.554846][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.561936][ T292] bridge_slave_0: entered allmulticast mode [ 21.568098][ T292] bridge_slave_0: entered promiscuous mode [ 21.577178][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.584254][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.591332][ T292] bridge_slave_1: entered allmulticast mode [ 21.597446][ T292] bridge_slave_1: entered promiscuous mode [ 21.605277][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.612421][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.619510][ T289] bridge_slave_0: entered allmulticast mode [ 21.625640][ T289] bridge_slave_0: entered promiscuous mode [ 21.642245][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.649373][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.656400][ T289] bridge_slave_1: entered allmulticast mode [ 21.662647][ T289] bridge_slave_1: entered promiscuous mode [ 21.670090][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.677118][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.684224][ T290] bridge_slave_0: entered allmulticast mode [ 21.690375][ T290] bridge_slave_0: entered promiscuous mode [ 21.708796][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.715832][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.722921][ T290] bridge_slave_1: entered allmulticast mode [ 21.729100][ T290] bridge_slave_1: entered promiscuous mode [ 21.752853][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.759932][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.766983][ T291] bridge_slave_0: entered allmulticast mode [ 21.773236][ T291] bridge_slave_0: entered promiscuous mode [ 21.779566][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.786596][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.793680][ T291] bridge_slave_1: entered allmulticast mode [ 21.799909][ T291] bridge_slave_1: entered promiscuous mode [ 21.921085][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.928138][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.935456][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.942491][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.954982][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.962021][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.969270][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.976275][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.987290][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.994339][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.001608][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.008621][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.033049][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.040186][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.047473][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.054510][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.091039][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.098660][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.106355][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.113633][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.121300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.128502][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.135773][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.143047][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.160410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.167440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.174955][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.181977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.189557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.196577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.204018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.211045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.230866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.237891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.246848][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.253883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.270018][ T290] veth0_vlan: entered promiscuous mode [ 22.281633][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.288680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.296083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.303107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.325282][ T290] veth1_macvtap: entered promiscuous mode [ 22.355988][ T289] veth0_vlan: entered promiscuous mode [ 22.381698][ T291] veth0_vlan: entered promiscuous mode [ 22.391629][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.394877][ T291] veth1_macvtap: entered promiscuous mode [ 22.414805][ T292] veth0_vlan: entered promiscuous mode [ 22.425480][ T289] veth1_macvtap: entered promiscuous mode [ 22.466589][ T292] veth1_macvtap: entered promiscuous mode [ 22.513157][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 22.521962][ T319] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 22.533918][ T319] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 22.541695][ T324] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 22.557859][ T319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 22.558055][ T324] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 22.586806][ T324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=324 comm=syz.2.6 [ 22.612917][ T330] netlink: 'syz.1.7': attribute type 5 has an invalid length. [ 22.620613][ T330] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7'. [ 22.667259][ T334] tmpfs: Bad value for 'nr_blocks' [ 22.748734][ T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.798771][ T306] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 22.853668][ T339] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10'. [ 22.878733][ T308] usb 1-1: device descriptor read/64, error -71 [ 22.949812][ T306] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 22.958693][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.961262][ T306] usb 4-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 22.982258][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 22.991631][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 23.000536][ T306] usb 4-1: SerialNumber: syz [ 23.108711][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 23.115007][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.126154][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.128736][ T308] usb 1-1: device descriptor read/64, error -71 [ 23.139317][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.152825][ T64] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 23.161955][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.170873][ T64] usb 2-1: config 0 descriptor?? [ 23.267834][ T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.276382][ T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.318696][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 23.324908][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.336139][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.345893][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.359035][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 23.368090][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.377087][ T10] usb 3-1: config 0 descriptor?? [ 23.384822][ T306] rndis_host 4-1:253.0: skipping garbage [ 23.390549][ T308] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.399738][ T306] usb 4-1: USB disconnect, device number 2 [ 23.528712][ T308] usb 1-1: device descriptor read/64, error -71 [ 23.578034][ T64] belkin 0003:1020:0006.0001: unknown main item tag 0x0 [ 23.585383][ T64] belkin 0003:1020:0006.0001: unknown main item tag 0x0 [ 23.592608][ T64] belkin 0003:1020:0006.0001: unknown main item tag 0x0 [ 23.600768][ T64] belkin 0003:1020:0006.0001: item fetching failed at offset 7/41 [ 23.609295][ T64] belkin 0003:1020:0006.0001: parse failed [ 23.615125][ T64] belkin 0003:1020:0006.0001: probe with driver belkin failed with error -22 [ 23.768710][ T308] usb 1-1: device descriptor read/64, error -71 [ 23.779765][ T335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.788914][ T335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.878858][ T308] usb usb1-port1: attempt power cycle [ 23.990684][ T341] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 24.003706][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 24.010685][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 24.020817][ T10] usb 3-1: USB disconnect, device number 2 [ 24.128698][ T306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.228742][ T308] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.259687][ T308] usb 1-1: device descriptor read/8, error -71 [ 24.288717][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 24.294869][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.306279][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.317798][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.330780][ T306] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.339848][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.356454][ T306] usb 4-1: config 0 descriptor?? [ 24.402809][ T308] usb 1-1: device descriptor read/8, error -71 [ 24.564405][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.589026][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.648739][ T308] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 24.666636][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.684402][ T308] usb 1-1: device descriptor read/8, error -71 [ 24.810793][ T306] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 24.818063][ T306] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 24.831535][ T306] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input4 [ 24.844304][ T306] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 24.856322][ T308] usb 1-1: device descriptor read/8, error -71 [ 24.968827][ T308] usb usb1-port1: unable to enumerate USB device [ 25.015739][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.024238][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.038734][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.229819][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 25.554411][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.570836][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=b4a8, bcdDevice= 0.41 [ 25.580869][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 25.592849][ T45] usb 3-1: Product: syz [ 25.606051][ T45] usb 3-1: Manufacturer: syz [ 25.614332][ T45] usb 3-1: SerialNumber: syz [ 25.629509][ T360] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 25.689584][ T308] usb 2-1: USB disconnect, device number 2 [ 25.717944][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 25.717977][ T36] audit: type=1400 audit(1774813707.280:144): avc: denied { block_suspend } for pid=367 comm="syz.1.18" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.759356][ T36] audit: type=1400 audit(1774813707.310:145): avc: denied { create } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.781097][ T36] audit: type=1400 audit(1774813707.310:146): avc: denied { shutdown } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.800836][ T36] audit: type=1400 audit(1774813707.320:147): avc: denied { append } for pid=367 comm="syz.1.18" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.830438][ T36] audit: type=1400 audit(1774813707.320:148): avc: denied { bind } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.858330][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xB4A8 [ 25.870869][ T36] audit: type=1400 audit(1774813707.320:149): avc: denied { listen } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.878688][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 25.897662][ T36] audit: type=1400 audit(1774813707.320:150): avc: denied { accept } for pid=367 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.917333][ T36] audit: type=1400 audit(1774813707.420:151): avc: denied { read } for pid=372 comm="syz.1.19" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.939909][ T36] audit: type=1400 audit(1774813707.420:152): avc: denied { open } for pid=372 comm="syz.1.19" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.963964][ T36] audit: type=1400 audit(1774813707.420:153): avc: denied { ioctl } for pid=372 comm="syz.1.19" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.039812][ T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 253, using maximum allowed: 30 [ 26.058719][ T9] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 26.064744][ T378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8213 sclass=netlink_route_socket pid=378 comm=syz.2.16 [ 26.078928][ T10] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 26.098549][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.109595][ T380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.127831][ T9] usb 1-1: string descriptor 0 read error: -22 [ 26.134267][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.40 [ 26.148795][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.577503][ T9] usbhid 1-1:1.0: can't add hid device: -32 [ 26.583556][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 26.593246][ T9] usb 1-1: USB disconnect, device number 6 [ 26.688695][ T346] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.838717][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 26.849553][ T346] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 26.859898][ T346] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.868909][ T346] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 26.878068][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.887028][ T346] usb 2-1: config 0 descriptor?? [ 26.964407][ T393] SELinux: failed to load policy [ 26.970750][ T393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.24'. [ 27.096524][ T403] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 27.110748][ T403] overlayfs: overlapping lowerdir path [ 27.117373][ T403] netlink: 'syz.0.28': attribute type 13 has an invalid length. [ 27.358827][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 27.447607][ T405] netlink: 9 bytes leftover after parsing attributes in process `syz.1.23'. [ 27.456807][ T405] z00ªX¹¦: renamed from gretap0 (while UP) [ 27.463281][ T405] z00ªX¹¦: entered allmulticast mode [ 27.518871][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 27.525362][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.533874][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 27.544808][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 27.554467][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 27.565818][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 27.575741][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 27.585398][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 27.596883][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 120 [ 27.608513][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 27.617625][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.625676][ T45] usb 1-1: Product: syz [ 27.629893][ T45] usb 1-1: Manufacturer: syz [ 27.634479][ T45] usb 1-1: SerialNumber: syz [ 27.639727][ T45] usb 1-1: config 0 descriptor?? [ 27.644949][ T403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.652217][ T403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.670280][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.718929][ T64] usb 4-1: USB disconnect, device number 3 [ 27.791228][ T308] usb 3-1: USB disconnect, device number 3 [ 27.800749][ T308] usblp0: removed [ 27.863731][ T45] usb 1-1: USB disconnect, device number 7 [ 28.058760][ T410] can: request_module (can-proto-0) failed. [ 28.089376][ T308] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.239767][ T308] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 28.251395][ T308] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 28.262417][ T308] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 28.273668][ T308] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 28.282743][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.291509][ T408] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.394007][ T425] process 'syz.0.35' launched './file0' with NULL argv: empty string added [ 28.638935][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 28.789779][ T45] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 28.798106][ T45] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 28.806987][ T45] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 28.817285][ T45] usb 1-1: config 220 has no interface number 2 [ 28.823555][ T45] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 28.836693][ T45] usb 1-1: config 220 interface 0 has no altsetting 0 [ 28.843480][ T45] usb 1-1: config 220 interface 76 has no altsetting 0 [ 28.850367][ T45] usb 1-1: config 220 interface 1 has no altsetting 0 [ 28.858376][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 28.867415][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.875407][ T45] usb 1-1: Product: syz [ 28.879573][ T45] usb 1-1: Manufacturer: syz [ 28.884157][ T45] usb 1-1: SerialNumber: syz [ 29.035851][ T430] x_tables: duplicate underflow at hook 1 [ 29.092487][ T45] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 29.099039][ T45] usb 1-1: No valid video chain found. [ 29.104559][ T45] usb 1-1: selecting invalid altsetting 0 [ 29.113745][ T45] usb 1-1: USB disconnect, device number 8 [ 29.418732][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.499652][ T10] usb 2-1: USB disconnect, device number 3 [ 29.548720][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.788683][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.838730][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.988721][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 29.995063][ T10] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 30.005238][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.014355][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.022379][ T10] usb 2-1: Product: syz [ 30.026529][ T10] usb 2-1: Manufacturer: syz [ 30.031125][ T10] usb 2-1: SerialNumber: syz [ 30.037418][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 30.038711][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.043740][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 30.178771][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.418731][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.460844][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 30.467398][ T10] r8152-cfgselector 2-1: bad CDC descriptors [ 30.475423][ T10] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 30.528798][ T31] usb usb4-port1: attempt power cycle [ 30.535969][ T447] kvm: kvm [446]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x6b17 [ 30.783264][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 30.783279][ T36] audit: type=1400 audit(1774813712.350:193): avc: denied { create } for pid=457 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.787656][ T458] kvm: pic: non byte write [ 30.789985][ T36] audit: type=1400 audit(1774813712.360:194): avc: denied { ioctl } for pid=457 comm="syz.0.46" path="socket:[5223]" dev="sockfs" ino=5223 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.809265][ T458] kvm: pic: non byte write [ 30.868733][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.889655][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.019746][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.208709][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.258722][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.279743][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.358704][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 31.365044][ T64] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.374089][ T64] usb 2-1: config 1 has no interface number 1 [ 31.380204][ T64] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 31.390952][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 31.403863][ T64] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 31.416173][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.425311][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.426045][ T31] usb 4-1: device descriptor read/8, error -71 [ 31.433516][ T64] usb 2-1: Product: syz [ 31.443769][ T64] usb 2-1: Manufacturer: syz [ 31.448362][ T64] usb 2-1: SerialNumber: syz [ 31.457099][ T36] audit: type=1400 audit(1774813713.020:195): avc: denied { set_context_mgr } for pid=407 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.457864][ T437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.476667][ T437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 31.477015][ T36] audit: type=1400 audit(1774813713.020:196): avc: denied { map } for pid=407 comm="syz.2.29" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.491866][ T437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.495592][ T36] audit: type=1400 audit(1774813713.020:197): avc: denied { call } for pid=407 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.518624][ T437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 31.550518][ T31] usb usb4-port1: unable to enumerate USB device [ 31.567980][ T308] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 31.575573][ T308] aiptek 3-1:17.0: probe with driver aiptek failed with error -22 [ 31.589574][ T308] usb 3-1: USB disconnect, device number 4 [ 31.656075][ T36] audit: type=1400 audit(1774813713.220:198): avc: denied { setopt } for pid=461 comm="syz.1.47" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.676125][ T36] audit: type=1400 audit(1774813713.220:199): avc: denied { bind } for pid=461 comm="syz.1.47" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.685851][ T64] usb 2-1: failed to enable PITCH for EP 0x82 [ 31.698729][ T468] »»»»»»: renamed from veth0_vlan (while UP) [ 31.722888][ T36] audit: type=1400 audit(1774813713.220:200): avc: denied { name_bind } for pid=461 comm="syz.1.47" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 31.729963][ T64] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 31.745547][ T36] audit: type=1400 audit(1774813713.220:201): avc: denied { node_bind } for pid=461 comm="syz.1.47" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 31.782223][ T64] usb 2-1: USB disconnect, device number 5 [ 31.857843][ T36] audit: type=1400 audit(1774813713.420:202): avc: denied { write } for pid=474 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.078724][ T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.118692][ T308] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.228675][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 32.234538][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.243070][ T64] usb 2-1: config 222 has too many interfaces: 249, using maximum allowed: 32 [ 32.251957][ T64] usb 2-1: config 222 has an invalid descriptor of length 151, skipping remainder of the config [ 32.262411][ T64] usb 2-1: config 222 has 0 interfaces, different from the descriptor's value: 249 [ 32.273072][ T64] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 32.282193][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.289814][ T308] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 32.290226][ T64] usb 2-1: Product: syz [ 32.299099][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.303048][ T64] usb 2-1: Manufacturer: syz [ 32.313340][ T308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 32.317692][ T64] usb 2-1: SerialNumber: syz [ 32.326741][ T308] usb 1-1: config 1 has no interface number 0 [ 32.338220][ T308] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 32.349042][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.356530][ T308] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 32.371023][ T308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.380429][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.388410][ T308] usb 1-1: Product: syz [ 32.392578][ T308] usb 1-1: Manufacturer: syz [ 32.397174][ T308] usb 1-1: SerialNumber: syz [ 32.528714][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 32.538706][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.549652][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.558689][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.559412][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.579634][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.588710][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.597533][ T45] usb 3-1: config 0 descriptor?? [ 32.609369][ T64] usb 2-1: USB disconnect, device number 6 [ 32.708698][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 32.715928][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 32.724165][ T10] usb 4-1: config 0 has no interface number 0 [ 32.730332][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 32.741795][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 32.750884][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.758896][ T10] usb 4-1: Product: syz [ 32.763057][ T10] usb 4-1: Manufacturer: syz [ 32.767645][ T10] usb 4-1: SerialNumber: syz [ 32.772924][ T10] usb 4-1: config 0 descriptor?? [ 32.778108][ T484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.805875][ T308] usb 1-1: USB disconnect, device number 9 [ 32.986071][ T484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.042299][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.051301][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.206470][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 33.217326][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 33.228301][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 33.254548][ T10] usb 4-1: USB disconnect, device number 8 [ 33.282783][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 33.295534][ T513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.305945][ T513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.307352][ T45] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 33.538713][ T346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.610956][ T45] usb 3-1: USB disconnect, device number 5 [ 33.628718][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.699875][ T346] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.714128][ T346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 33.723248][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 33.731398][ T346] usb 2-1: Product: syz [ 33.735657][ T346] usb 2-1: Manufacturer: syz [ 33.740319][ T346] usb 2-1: SerialNumber: syz [ 33.778685][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 33.786633][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 33.797715][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 33.814756][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 33.823942][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.831991][ T10] usb 4-1: Product: syz [ 33.836249][ T10] usb 4-1: Manufacturer: syz [ 33.840900][ T10] usb 4-1: SerialNumber: syz [ 33.951109][ T346] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 33.977866][ T524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.146980][ T532] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 34.156960][ T45] usb 2-1: USB disconnect, device number 7 [ 34.177114][ T45] usblp0: removed [ 34.186638][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.193525][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.204048][ T10] usb 4-1: USB disconnect, device number 9 [ 34.230709][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.438721][ T346] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 34.568721][ T346] usb 1-1: device descriptor read/64, error -71 [ 34.598708][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.716002][ T542] bridge0: port 3(veth0_vlan) entered blocking state [ 34.723668][ T542] bridge0: port 3(veth0_vlan) entered disabled state [ 34.730780][ T542] veth0_vlan: entered allmulticast mode [ 34.736631][ T542] bridge0: port 3(veth0_vlan) entered blocking state [ 34.743326][ T542] bridge0: port 3(veth0_vlan) entered forwarding state [ 34.750313][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 34.757964][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.769850][ T9] usb 3-1: string descriptor 0 read error: -22 [ 34.776037][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 34.785096][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.808697][ T346] usb 1-1: device descriptor read/64, error -71 [ 34.839821][ T545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.908745][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.048712][ T346] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 35.068692][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 35.074937][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.083144][ T45] usb 2-1: config 0 has no interface number 0 [ 35.089254][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 35.097403][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.106685][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.114698][ T45] usb 2-1: Product: syz [ 35.118975][ T45] usb 2-1: Manufacturer: syz [ 35.123562][ T45] usb 2-1: SerialNumber: syz [ 35.128896][ T45] usb 2-1: config 0 descriptor?? [ 35.134662][ T45] smsc75xx v1.0.0 [ 35.188709][ T346] usb 1-1: device descriptor read/64, error -71 [ 35.228691][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.379736][ T31] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 35.387868][ T31] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 35.398082][ T31] usb 4-1: config 0 has no interface number 0 [ 35.405622][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 35.414722][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.422768][ T31] usb 4-1: Product: syz [ 35.426940][ T31] usb 4-1: Manufacturer: syz [ 35.431569][ T31] usb 4-1: SerialNumber: syz [ 35.436893][ T31] usb 4-1: config 0 descriptor?? [ 35.439130][ T346] usb 1-1: device descriptor read/64, error -71 [ 35.536049][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 35.546922][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 35.556591][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 35.558790][ T346] usb usb1-port1: attempt power cycle [ 35.566858][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 35.843751][ T31] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 35.850198][ T31] usb 4-1: No valid video chain found. [ 35.908696][ T346] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 35.929630][ T346] usb 1-1: device descriptor read/8, error -71 [ 36.045530][ T31] usb 4-1: USB disconnect, device number 10 [ 36.059707][ T346] usb 1-1: device descriptor read/8, error -71 [ 36.298696][ T346] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 36.319680][ T346] usb 1-1: device descriptor read/8, error -71 [ 36.449731][ T346] usb 1-1: device descriptor read/8, error -71 [ 36.558801][ T346] usb usb1-port1: unable to enumerate USB device [ 36.565201][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 36.565215][ T36] audit: type=1400 audit(1774813718.130:219): avc: denied { create } for pid=557 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 36.657999][ T569] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.670849][ T36] audit: type=1400 audit(1774813718.240:220): avc: denied { bind } for pid=568 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.908690][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.038716][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.207617][ T9] usb 3-1: USB disconnect, device number 6 [ 37.226628][ T36] audit: type=1400 audit(1774813718.790:221): avc: denied { setopt } for pid=573 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.269666][ T36] audit: type=1400 audit(1774813718.840:222): avc: denied { write } for pid=580 comm="syz.0.83" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.293582][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.336486][ T581] SELinux: policydb version -122087396 does not match my version range 15-33 [ 37.345490][ T581] SELinux: failed to load policy [ 37.366391][ T581] ------------[ cut here ]------------ [ 37.371907][ T581] WARNING: CPU: 1 PID: 581 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 37.381324][ T581] Modules linked in: [ 37.385232][ T581] CPU: 1 UID: 0 PID: 581 Comm: syz.0.83 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 37.396598][ T581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.406693][ T581] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 37.412712][ T581] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a 7f 0b 06 00 0f 85 c2 00 00 00 c6 05 fd 7e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 37.432342][ T581] RSP: 0018:ffffc9000e177560 EFLAGS: 00010246 [ 37.438404][ T581] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 37.446461][ T581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e177618 [ 37.454493][ T581] RBP: ffffc9000e1776a0 R08: ffffc9000e177617 R09: 0000000000000000 [ 37.462485][ T581] R10: ffffc9000e177600 R11: fffff52001c2eec3 R12: ffffc9000e1775a0 [ 37.470477][ T581] R13: dffffc0000000000 R14: 1ffff92001c2eeb0 R15: 0000000000000000 [ 37.478439][ T581] FS: 00007fd8189f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.487374][ T581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.493975][ T581] CR2: 0000200000005000 CR3: 0000000120880000 CR4: 00000000003526b0 [ 37.501963][ T581] Call Trace: [ 37.505235][ T581] [ 37.508147][ T581] ? vfs_write+0x3c5/0xf90 [ 37.512596][ T581] ? ksys_write+0x145/0x260 [ 37.517121][ T581] ? x64_sys_call+0x271c/0x2ee0 [ 37.522011][ T581] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.527739][ T581] ? hashtab_init+0xdb/0x1f0 [ 37.532344][ T581] ___kmalloc_large_node+0x81/0x210 [ 37.537547][ T581] ? hashtab_init+0xdb/0x1f0 [ 37.542150][ T581] __kmalloc_large_node_noprof+0x1e/0xd0 [ 37.547790][ T581] ? hashtab_init+0xdb/0x1f0 [ 37.548690][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 37.552392][ T581] __kmalloc_noprof+0x326/0x500 [ 37.564771][ T581] ? kasan_save_alloc_info+0x40/0x50 [ 37.570066][ T581] hashtab_init+0xdb/0x1f0 [ 37.574774][ T581] ? common_read+0x175/0x490 [ 37.579383][ T581] symtab_init+0x44/0x70 [ 37.583622][ T581] common_read+0x1e6/0x490 [ 37.588020][ T581] ? hashtab_init+0xdb/0x1f0 [ 37.592614][ T581] ? __cfi_common_read+0x10/0x10 [ 37.597554][ T581] ? hashtab_init+0x105/0x1f0 [ 37.602248][ T581] policydb_read+0xab8/0x28b0 [ 37.606927][ T581] ? __kasan_kmalloc+0x96/0xb0 [ 37.611692][ T581] ? __cfi_policydb_read+0x10/0x10 [ 37.616808][ T581] ? security_load_policy+0x130/0x12d0 [ 37.622277][ T581] security_load_policy+0x16a/0x12d0 [ 37.627561][ T581] ? irqentry_exit+0x4a/0x60 [ 37.632156][ T581] ? asm_exc_page_fault+0x2b/0x30 [ 37.637185][ T581] ? __cfi_security_load_policy+0x10/0x10 [ 37.642939][ T581] ? rep_movs_alternative+0x4a/0xa0 [ 37.648142][ T581] sel_write_load+0x2a7/0x5f0 [ 37.652829][ T581] ? __cfi_sel_write_load+0x10/0x10 [ 37.658043][ T581] ? bpf_lsm_file_permission+0xd/0x20 [ 37.663450][ T581] ? __cfi_sel_write_load+0x10/0x10 [ 37.668680][ T581] vfs_write+0x3c5/0xf90 [ 37.672920][ T581] ? __cfi_vfs_write+0x10/0x10 [ 37.677677][ T581] ? __kasan_check_write+0x18/0x20 [ 37.682805][ T581] ? mutex_lock+0x97/0x1d0 [ 37.687227][ T581] ? __cfi_mutex_lock+0x10/0x10 [ 37.689479][ T9] usb 2-1: USB disconnect, device number 8 [ 37.692116][ T581] ? __fget_files+0x2c5/0x340 [ 37.702346][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.702638][ T581] ksys_write+0x145/0x260 [ 37.713126][ T581] ? __cfi_ksys_write+0x10/0x10 [ 37.717993][ T581] ? __kasan_check_write+0x18/0x20 [ 37.723158][ T581] ? fpregs_restore_userregs+0x11c/0x260 [ 37.728814][ T581] __x64_sys_write+0x7f/0x90 [ 37.733392][ T581] x64_sys_call+0x271c/0x2ee0 [ 37.738052][ T581] do_syscall_64+0x57/0xf0 [ 37.742482][ T581] ? clear_bhb_loop+0x50/0xa0 [ 37.747169][ T581] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.753082][ T581] RIP: 0033:0x7fd819f9c819 [ 37.757508][ T581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.777143][ T581] RSP: 002b:00007fd8189f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.785576][ T581] RAX: ffffffffffffffda RBX: 00007fd81a215fa0 RCX: 00007fd819f9c819 [ 37.793580][ T581] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004 [ 37.801579][ T581] RBP: 00007fd81a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 37.809582][ T581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.817554][ T581] R13: 00007fd81a216038 R14: 00007fd81a215fa0 R15: 00007fffec583528 [ 37.825606][ T581] [ 37.828629][ T581] ---[ end trace 0000000000000000 ]--- [ 37.834211][ T581] SELinux: failed to load policy [ 37.958708][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.068817][ T10] usb usb4-port1: attempt power cycle [ 38.408693][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 38.429744][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.559718][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.798706][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 38.819711][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.949805][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.058753][ T10] usb usb4-port1: unable to enumerate USB device