last executing test programs: 21.022180825s ago: executing program 0 (id=1798): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r1, &(0x7f0000000140)) unshare(0x28000600) (async) unshare(0x28000600) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$inet6(r0, &(0x7f0000002a80)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x31b}, 0x1c) 20.86160014s ago: executing program 0 (id=1799): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x5, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000820fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0x50}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r2 = syz_ublk_setup_io_uring(0x13fe, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) 20.85271477s ago: executing program 0 (id=1800): umount2(&(0x7f0000000040)='./cgroup/file0\x00', 0x9) utimes(&(0x7f0000000000)='./cgroup\x00', 0x0) 20.789473832s ago: executing program 0 (id=1802): mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20.787912572s ago: executing program 0 (id=1804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x141840, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x26000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) 20.756146383s ago: executing program 0 (id=1806): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000280)="8a63da260dfb805b2f87782165", 0xd}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000bbbb0300bbbb3bbbbbbbbbbb0800451e0030006740000701907864010100ac1414aa05039078ffffffff451000ff006500010829000fac1414aae0000002"], 0x42) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x16de85, 0x0) socket$netlink(0x10, 0x3, 0x8) write$binfmt_format(r6, &(0x7f0000006240)='-1\x00', 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000002c0)=ANY=[], 0x200002e6) read$FUSE(r7, &(0x7f00000027c0)={0x2020}, 0x2020) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) setuid(0xee00) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r9 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000480)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xa002}], 0x20000000000000f9, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4058854}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x800, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x5) 20.732881964s ago: executing program 32 (id=1806): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000280)="8a63da260dfb805b2f87782165", 0xd}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000bbbb0300bbbb3bbbbbbbbbbb0800451e0030006740000701907864010100ac1414aa05039078ffffffff451000ff006500010829000fac1414aae0000002"], 0x42) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x16de85, 0x0) socket$netlink(0x10, 0x3, 0x8) write$binfmt_format(r6, &(0x7f0000006240)='-1\x00', 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000002c0)=ANY=[], 0x200002e6) read$FUSE(r7, &(0x7f00000027c0)={0x2020}, 0x2020) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) setuid(0xee00) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r9 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000480)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xa002}], 0x20000000000000f9, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4058854}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x800, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x5) 9.072040409s ago: executing program 1 (id=1842): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000003f80)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000004040)=0x2, 0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000086a05b400000000000001090224000100004020090400290203"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\xa0^a\xf8\xc5a\x9f\x05\xdf;}\xe3\x00', 0x1) readv(r3, &(0x7f0000000540), 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000"], 0x28}], 0x1}, 0x14008010) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3, 0x2, 0x64, 0x7}]}, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10011, 0x3, 0x3}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000040)={0x410, r0}, 0x0) 9.071141679s ago: executing program 2 (id=1843): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[], 0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0x12) r6 = syz_ublk_setup_io_uring(0x45d2, &(0x7f0000000080)={0x0, 0x61ec, 0x4, 0x2, 0x204}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) io_setup(0x8e87, &(0x7f00000009c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000980)={0x118, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/11, 0xb, 0x0, 0x3c}, @flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x4, 0x2, 0x18}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @request_death, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/125, 0x7d, 0x2, 0x27}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}, 0x2e214f9704015ed8}, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x1}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/175, 0xaf, 0x2, 0xa}}, &(0x7f0000000740)={0x0, 0x18, 0x30}}}], 0xb1, 0x0, &(0x7f00000008c0)="3dc4a5e1f4ebcbbe0d5eb5520dbdc1e171bf1eea743b285107e63339279d34d6bbbfa01069a3370ac69ed550d0039537b0c769d4f9b259edd95d5bf2acb868023fba38f2ae41d06d91baf20404b8343dea9e7db9a3cf3517d12bb88479798dba7ae86d3c01e55e0ac609879c5b7551b4f30a82c1e1dcc7ac9206516c56e5a09334369c7b0e8bd1ea689ac31e36b556b89d2077452a2759413c787e8bf7671e7513b2ebf71d443582548111dcbf3affb41d"}) syz_io_uring_setup(0x5216, &(0x7f0000000200)={0x0, 0xf638, 0x8, 0x1, 0xd4, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) (async) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[], 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0x12) (async) syz_ublk_setup_io_uring(0x45d2, &(0x7f0000000080)={0x0, 0x61ec, 0x4, 0x2, 0x204}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) (async) io_setup(0x8e87, &(0x7f00000009c0)) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000980)={0x118, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/11, 0xb, 0x0, 0x3c}, @flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x4, 0x2, 0x18}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @request_death, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/125, 0x7d, 0x2, 0x27}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}, 0x2e214f9704015ed8}, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x1}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/175, 0xaf, 0x2, 0xa}}, &(0x7f0000000740)={0x0, 0x18, 0x30}}}], 0xb1, 0x0, &(0x7f00000008c0)="3dc4a5e1f4ebcbbe0d5eb5520dbdc1e171bf1eea743b285107e63339279d34d6bbbfa01069a3370ac69ed550d0039537b0c769d4f9b259edd95d5bf2acb868023fba38f2ae41d06d91baf20404b8343dea9e7db9a3cf3517d12bb88479798dba7ae86d3c01e55e0ac609879c5b7551b4f30a82c1e1dcc7ac9206516c56e5a09334369c7b0e8bd1ea689ac31e36b556b89d2077452a2759413c787e8bf7671e7513b2ebf71d443582548111dcbf3affb41d"}) (async) syz_io_uring_setup(0x5216, &(0x7f0000000200)={0x0, 0xf638, 0x8, 0x1, 0xd4, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) 9.070892209s ago: executing program 3 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000400)="1200000012000300007b000000000000a100b84dc47e18e6c1177a7f044e32965da889a1940e6dff2f95da749f2b11e3c4b7bf9bd7c10ba84ddde1bc4430ca06681ad0ff5d65cf8b4f6bff4639f1b108499dcb3ec459527c4f372f8e3bbf6ea9963119bea534d3d3bb498f4108d45d63943db20e8d22028294f1719f61a9c91bffd963d84051446255bfc8e8eeced15690257e38495cfa74af6901f307168400d785d27e913fbdc701cee883693b3cebf0195c2a09e9f8e91934ff3e09d8f79becef178f91d8d811bc75fd51b4816a", 0xcf, 0x20000000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f00000000c0)=""/58, 0x3a}], 0x4}, 0xffffe37d}], 0x1, 0x2040040, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000260003fe809bb3ff505d58d6b499916eee9dda0b9445756696f7d05e6ede329a039ed0520000", @ANYRES16=r1], 0x28}], 0x1, 0x0, 0x0, 0x20048085}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1, 0x88}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x9004) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0xd862eee2311db9b5, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x200, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84a}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x20040010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000680015"], 0x1c}], 0x1}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000400)="1200000012000300007b000000000000a100b84dc47e18e6c1177a7f044e32965da889a1940e6dff2f95da749f2b11e3c4b7bf9bd7c10ba84ddde1bc4430ca06681ad0ff5d65cf8b4f6bff4639f1b108499dcb3ec459527c4f372f8e3bbf6ea9963119bea534d3d3bb498f4108d45d63943db20e8d22028294f1719f61a9c91bffd963d84051446255bfc8e8eeced15690257e38495cfa74af6901f307168400d785d27e913fbdc701cee883693b3cebf0195c2a09e9f8e91934ff3e09d8f79becef178f91d8d811bc75fd51b4816a", 0xcf, 0x20000000, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f00000000c0)=""/58, 0x3a}], 0x4}, 0xffffe37d}], 0x1, 0x2040040, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000260003fe809bb3ff505d58d6b499916eee9dda0b9445756696f7d05e6ede329a039ed0520000", @ANYRES16=r1], 0x28}], 0x1, 0x0, 0x0, 0x20048085}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1, 0x88}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x9004) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0xd862eee2311db9b5, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x200, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84a}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x20040010) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000680015"], 0x1c}], 0x1}, 0x4000080) (async) 7.45843417s ago: executing program 1 (id=1845): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f00000001c0)="ac04d8", 0x3, 0x20004014, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0xfffffffd, 0x4, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0xe, @in6={0xa, 0x4e20, 0x8, @empty, 0x800}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa8, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}]}, 0x60}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) read$FUSE(0xffffffffffffffff, &(0x7f0000001a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r0, 0xf, &(0x7f0000003ac0)={0x1, r8}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)={0x1508, 0x0, 0x604, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "ec371fa295a842abc815f809103f"}, @NL80211_ATTR_FILS_ERP_RRK={0x6f, 0xfc, "f83d1ae5cfe89392f049e43ecfea9f0ca2929bd58695019dbbd33565aea2e464440e4c224c06dc35f0a77beb43251d23669677997860e35294ee0ead882f1da975c5d9ea859d682c3451bf930fc9dea03398af480df07e26985afdaae6a127bf87996fe4afdb3db31a3291"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}], @NL80211_ATTR_IE={0x26, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x55, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x400, 0x8}}, @challenge={0x10, 0x1, 0xf9}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@random_vendor={0xdd, 0x1a, "25d024f3c6bc265f72069a6f5ce399ebe3eb5011151c14f2ebff"}, @mesh_chsw={0x76, 0x6, {0xb6, 0x2, 0x39, 0x7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "57bd0d752cfdaae943b04e58e8cdff36"}, @NL80211_ATTR_FILS_ERP_REALM={0xc2, 0xfa, "0592f10754f322eeda95da172e91ab64c0272c657cd4d1450b294928a1f2ed2507015963bdde24a9808601298a48daf233066fea8c00008d0e6b63e301cf6f2d0e0e36a5ace04faf279e0405837dc71f8214b04a39ea0608e2f42a46ac13b96cb03c0cda5be3fd6c0a5e72ff90309565e27e8e43d99b1db61f890089fc93b0bd54f5824f3954dc7c09a68bf941a63c769156890ddf3f9704f90ec4f6990e32908825682e8b13d4f3d47d006273f41602cc6b3b3652ce891b199c9f368e1b"}, @NL80211_ATTR_FILS_ERP_RRK={0xaa, 0xfc, "dbfb26421555c3344ab63c4ef712de5c57673a80a977f39b4f01e87508998fb8ecfa6b55b7ffe25321ad8893ae56cfce7f4dd08f2baa0f4f1238aaad3fa70396bc04b6f93a793db50d12828f5fd0289927083100d5045e838f409e1da061d88b7600b50abec515814843889567b3ca6f5bc7ee63665b938dbaf641170d18d6577d1ef04a724d3a4d820e7202c8e394cba64a9b22e58c4da7eae8c1d66ba461b6276edaae84ce"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xcd9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "17ff"}, @NL80211_ATTR_FILS_ERP_REALM={0x2e, 0xfa, "e225563d8c3d608ba15d528e027a85146ade915520e028701cb8b5cfee9c56ef743c0ae364c44a73552d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "8ba88fbf2e5a24db4c38b314973a22df"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "665556d2d47139"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0xeb, 0xfa, "20282192380dd67234805382192db55015ccae504edcd8a422ba6ef27944bdf9dfe1aa5f36478597baddf21f522f56ec53f90af75fab09004f669a8ef3821923caa0888e19aac9f3e14a0a9867fc8b3ca7d7336b6553307c75310b5653f504a14829f4991424c385839db281816404bf8ba71b5328f7dbfd45432a31d108a250bae5ed5b7293e09e70282cbe410b0e3e2077e4e88e575defe282e9dee4820c8d039fbe68a301a07f30391ca81e3a5c1206c8a71fb998ce942f7df83fd7a979daeea856748a165e688f92eb259a36f8f8183af76b48a91a870a025c80ca050c1f2279f82f58ee7c"}, @NL80211_ATTR_FILS_ERP_RRK={0xf3, 0xfc, "a528d7814cf50c5d35c6cec863c0ae4dc8143ed5b524df787a5ba836d0e23bf40350a90692c2d884dcc8c460e8fb3768ad0622503b124ac14bfc4d725ff866c919b6c0983c038d418a2ad1621662e10c4e8fec9fc1583c6178707a12cfd45d4b681f9c285f13f4cf388810dd9431ebd22a23db107acc89fbfbb572f74f0d70806e1668dc5432b6e423153f4eb1fc5d6cdc2533c213e2e0f07e150e92bcfe6f66972ef68e50c73676d910ab15e6eb11a48970a33a1e0154fab881b15a78f897361481c67e7ed53100093d8c096fdedd14bef0b6034dde71990fbc01cd49a034f0296e6089312e39dcbb8ba7661c48a5"}, @NL80211_ATTR_FILS_ERP_RRK={0x28, 0xfc, "4de1c1f80a5dac4c73eb9e561c0c6a45c4c97c82d0a1769553eca97b46862a0f4f709171"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}]]}, 0x1508}}, 0x8008890) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r9 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r9, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r9, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x306, @broadcast}, 0x8, {0x2, 0x4e22, @multicast2}, 'veth1_to_bridge\x00'}) 7.45816309s ago: executing program 2 (id=1846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xb6) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r5, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x16) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c001}, 0x5800) 7.45785232s ago: executing program 3 (id=1847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x11, 0x0, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x11, 0x0, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x50) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 5.690285797s ago: executing program 1 (id=1848): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r3 = syz_open_dev$ublk_chdev(&(0x7f0000000180), 0x0, 0x202) pread64$ublk_ch(r3, &(0x7f00000003c0)=@buf_max_buf, 0x1000, 0xd) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000013c0)={@none, 0x92d, 0x7, 0xfffd, 0x7, 0x101, "bf37f4782cb3cd1e5330153b9ebef6019a55526376029acd7369f56822291f26b6ee3f09d48693593f4272b92bd030db1c90e2aa56af5f5f92b39a8dad627e1c374df3169233073aa8c82e069f6e26de6d60de21d62fa2a378d77d0842bef6f6a83ffd778210c9df3a54e97857998a2c0811294de21392f6ad5e35ae286a5a33"}) setpriority(0x2, 0xff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="654004e330a520734a25aad102ab2618f7b5fa263e0dc9a240969ffd563fb350ccfaeb72f274ac80c4afc25888b536b63977436625a5f7d50097fcaaced341c09b5bb0ae751b290b6f5e0547574f6922172bda10992421805a33bc2f4e23e5c87acbdebbb013e29c55f449148b14137793daf27ccc73bb80d97d2534a9b4ec287c33051f1f2da61bed5760e2811814bc3a61f8590f4658e8d210d757ad4b08f9adf02a7e4a8546b8613c6e011b62fd4b8ec331b03087", @ANYBLOB="150000000300000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x80080}, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x96}]}, 0x24}, 0x1, 0x0, 0x0, 0x14000000}, 0x0) 5.689878227s ago: executing program 2 (id=1849): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r2, 0x5452, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20008045, &(0x7f0000000340)={0xa, 0x2, 0x1, @empty}, 0x1c) r3 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000200)={0x0, 0x1001460, 0x4c00, 0x0, 0xb2, 0x0, r3}, &(0x7f0000000bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b7, 0x10002, 0x5, 0x80003ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x134, 0x9, 0x2020008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x200, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x80, 0x2, 0x255, 0x0, r3}}], 0x4, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r8) ioctl$EVIOCRMFF(r8, 0x5509, &(0x7f0000000100)=0x1b) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x6, 0x3, 0x0, 0x7fff, 0x4}}) shutdown(r2, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x80000000, 0x1, 0x1, 0xfffffbff, 0x609, 0x3, 0x9}, {0xa, 0x8c6, 0x6, 0xc7, 0x9, 0xb2b5, 0xcd}]}) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r12, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) r13 = socket$inet6(0xa, 0x800000000000002, 0x200000) connect$inet6(r13, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c) write(r13, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), 0x4) 5.689510747s ago: executing program 3 (id=1850): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x5, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000820fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0xea, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r2 = syz_ublk_setup_io_uring(0x13fe, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) 3.932620933s ago: executing program 1 (id=1851): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@arm64={0xe, 0x4, 0xa, '\x00', 0x37}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 3.932147073s ago: executing program 2 (id=1852): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x6, 0x0, [{0x80000019, 0x8, 0x4, 0x5, 0xd74d, 0x6, 0x5}, {0x0, 0xfffffffa, 0x1, 0x30a, 0xaba, 0x85b0, 0x4}, {0x40000000, 0x0, 0x5, 0x3, 0xfffff066, 0x7, 0xa694}, {0x0, 0xfff, 0x2, 0x5, 0x1, 0x1, 0xb}, {0xb, 0x5, 0x3, 0x120, 0x3, 0xf, 0x6}, {0x80000008, 0x6, 0x4, 0x6, 0x2}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x4) 3.931814254s ago: executing program 3 (id=1853): futex(0x0, 0xb, 0x1, 0x0, 0xfffffffffffffffd, 0x5) syslog(0x3, &(0x7f0000000000)=""/168, 0xa8) (async) syslog(0x3, &(0x7f0000000000)=""/168, 0xa8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) setresgid(0x0, 0x0, 0xee01) setfsgid(0xee01) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x95}, 0x4800) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.017923466s ago: executing program 1 (id=1854): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x4b, 0x3, 0x8, 0x100, 0x7, 0x0, "bc15fa51a9b9b9548f7c6f229ff61ed788fe89e73817ccc424fffe1b9ddb7de0182318457dfbdb89062125f2d281b08c307a57897f164e8d77a3fc53172faa431515fabdcf2f17896e9a21"}}, 0x163) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103000, 0x0) ftruncate(r1, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1.966228097s ago: executing program 2 (id=1855): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) setuid(0xee01) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1800) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724010f0c04000905030c4000014007080b71ad"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x0, 0x3}}, 0x26) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.965951077s ago: executing program 3 (id=1856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}]]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x150, 0x10, 0x713, 0x210000, 0x25dfdbfc, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, {0x6, 0x0, 0xfffffffffffffffd, 0x4, 0x1, 0x9, 0x0, 0x2000000543}, {0x9, 0x2, 0x3, 0xfffffffffffffffe}, {0x3, 0x0, 0x6}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "21046821a8d9aa540db9a200000000c538c7cb7e"}}]}, 0x150}}, 0x48080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) sendmsg$netlink(r0, &(0x7f000000f2c0)={0x0, 0x0, &(0x7f000000f240)=[{&(0x7f0000009180)=ANY=[@ANYBLOB="10000014190010002dbd7000fbdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x8010) 1.44425ms ago: executing program 1 (id=1857): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 817.75µs ago: executing program 2 (id=1858): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xc01, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xc01, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x240008d1) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000006c0)=0x9, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000006c0)=0x9, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r3) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000180)=0x7) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) (async) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) 0s ago: executing program 3 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x59, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6tnl0\x00', @multicast}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x14, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}}, {0x4e20, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0x80}}}}}, 0x32) kernel console output (not intermixed with test programs): reg index 0x0001: -19 [ 128.222775][ T149] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 128.230755][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 128.238809][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 128.246951][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 128.255542][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 128.264425][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 128.272982][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 128.281749][ T310] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 128.289772][ T310] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 128.297893][ T310] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 128.305979][ T4072] usb 4-1: Using ep0 maxpacket: 16 [ 128.311198][ T310] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 128.320493][ T4072] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 128.332338][ T4072] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.343552][ T4072] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.353404][ T4072] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 128.366526][ T4072] usb 4-1: config 7 interface 0 has no altsetting 0 [ 128.375615][ T4072] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 128.386442][ T4072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.402958][ T310] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.412378][ T310] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.422796][ T310] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 128.495027][ T10] uclogic 0003:2179:0077.0002: interface is invalid, ignoring [ 128.620226][ T4164] rust_binder: 1035: no such ref 1 [ 128.625403][ T4164] rust_binder: Write failure EINVAL in pid:1035 [ 128.633207][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.648002][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.657053][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.665592][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.673997][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.683276][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.691894][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.701256][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.706113][ T310] usb 2-1: USB disconnect, device number 5 [ 128.711569][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.724894][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.739185][ T4170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1397'. [ 128.858764][ T4072] usbhid 4-1:7.0: can't add hid device: -32 [ 128.864825][ T4072] usbhid 4-1:7.0: probe with driver usbhid failed with error -32 [ 129.038972][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.188952][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 129.195226][ T10] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 129.205195][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.216885][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.222257][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 129.225390][ T10] usb 1-1: Product: syz [ 129.238258][ T10] usb 1-1: Manufacturer: syz [ 129.248444][ T10] usb 1-1: SerialNumber: syz [ 129.259022][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 129.270493][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 129.478684][ T10] r8152-cfgselector 1-1: Needed 1 retries to read version [ 129.485955][ T10] r8152-cfgselector 1-1: Unknown version 0x2830 [ 129.492321][ T10] r8152-cfgselector 1-1: bad CDC descriptors [ 129.508970][ T4072] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.638977][ T4072] usb 2-1: device descriptor read/64, error -71 [ 129.681305][ T10] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 129.698964][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.851776][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.860933][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.868961][ T66] usb 3-1: Product: syz [ 129.873166][ T66] usb 3-1: Manufacturer: syz [ 129.877768][ T66] usb 3-1: SerialNumber: syz [ 129.888958][ T4072] usb 2-1: device descriptor read/64, error -71 [ 130.128970][ T4072] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.195501][ T4249] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1404'. [ 130.258992][ T4072] usb 2-1: device descriptor read/64, error -71 [ 130.337028][ T4253] netlink: 'syz.0.1405': attribute type 2 has an invalid length. [ 130.486101][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 130.486141][ T36] audit: type=1400 audit(1779465670.105:681261): avc: denied { mounton } for pid=4246 comm="syz.2.1403" path="/proc/1040/task" dev="proc" ino=16555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 130.515252][ T36] audit: type=1400 audit(1779465670.105:681262): avc: denied { mount } for pid=4246 comm="syz.2.1403" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 130.537522][ T4072] usb 2-1: device descriptor read/64, error -71 [ 130.649108][ T4072] usb usb2-port1: attempt power cycle [ 130.886695][ T45] usb 4-1: USB disconnect, device number 7 [ 130.895510][ T66] cdc_ncm 3-1:1.0: failed to get mac address [ 130.906292][ T66] cdc_ncm 3-1:1.0: bind() failure [ 130.912562][ T36] audit: type=1400 audit(1779465670.535:681263): avc: denied { getopt } for pid=4254 comm="syz.3.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.936518][ T66] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 130.947160][ T66] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 130.959002][ T66] usb 3-1: USB disconnect, device number 9 [ 130.988951][ T4072] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.010045][ T4072] usb 2-1: device descriptor read/8, error -71 [ 131.113198][ T4265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.125704][ T36] audit: type=1400 audit(1779465670.745:681264): avc: denied { listen } for pid=4264 comm="syz.0.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.127167][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 131.160096][ T4072] usb 2-1: device descriptor read/8, error -71 [ 131.173346][ T36] audit: type=1400 audit(1779465670.795:681265): avc: denied { mount } for pid=4266 comm="syz.0.1412" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 131.207004][ T4269] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1413'. [ 131.260616][ T36] audit: type=1400 audit(1779465670.885:681266): avc: denied { append } for pid=4272 comm="syz.0.1415" name="pfkey" dev="proc" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.312704][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.409271][ T4072] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.429985][ T4072] usb 2-1: device descriptor read/8, error -71 [ 131.469182][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 131.475394][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 131.486395][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 131.498842][ T45] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 131.508032][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.516083][ T45] usb 4-1: Product: syz [ 131.520295][ T45] usb 4-1: Manufacturer: syz [ 131.524922][ T45] usb 4-1: SerialNumber: syz [ 131.529589][ T310] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 131.560041][ T4072] usb 2-1: device descriptor read/8, error -71 [ 131.649000][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.669063][ T4072] usb usb2-port1: unable to enumerate USB device [ 131.679940][ T310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.690093][ T310] usb 1-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.703072][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.709722][ T310] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 131.718770][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.727626][ T310] usb 1-1: config 0 descriptor?? [ 131.739304][ T4263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4263 comm=syz.3.1410 [ 131.754101][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.762683][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.808969][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 131.815763][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.824365][ T66] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 131.832831][ T66] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 131.837954][ T45] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 131.843970][ T66] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 131.854404][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.859655][ T66] usb 3-1: config 128 has no interface number 0 [ 131.871981][ T45] usb 4-1: USB disconnect, device number 8 [ 131.881644][ T66] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 131.887160][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.892942][ T66] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.918827][ T66] usb 3-1: config 128 interface 127 has no altsetting 0 [ 131.927376][ T66] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 131.936466][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.944504][ T66] usb 3-1: Product: â¶ì”Œï·ëµ…┮｜勪⛒燱⩒䰕⸸媽å¤ã¹œë¾‰ï’”ïŽá„˜à²ºá‹«è–¯ì¼ á´±æ¨‡ä¢êµ”䂫㿯贲ᕡëšë¹ªÉ勪桮櫶赛ã“ṹ땓ᩛ넻ê£ë™¤è§…ꀕ絳⨽Ý힠邔绽἞箕凊쳄뛵㾢Ṓ칫옂✃꜅ì·ì‡«ç·™è£µî¬ÐŒïµ«ê‹­æŒ¸á—«ç¡¡î‰–ꦈ숿຾◯諞┕ⵠຎꢠ [ 131.971961][ T66] usb 3-1: Manufacturer: 믋쬿孷෈êƒæ¹ƒïš»ì¼¦è³¢ã…飲숾䳑朂唥鬷쯒⫄쪋䊭Ήኌ⦎쒽瘀⥓誋鑚䩟쵯괌 [ 131.984600][ T66] usb 3-1: SerialNumber: syz [ 132.211624][ T66] usb 3-1: USB disconnect, device number 10 [ 132.218832][ T310] usb 1-1: string descriptor 0 read error: -71 [ 132.224193][ T4282] tipc: Started in network mode [ 132.230294][ T4282] tipc: Node identity 7f000001, cluster identity 4711 [ 132.230803][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.237176][ T4282] tipc: Enabling of bearer rejected, failed to enable media [ 132.257511][ T310] usb 1-1: USB disconnect, device number 7 [ 132.270767][ T4282] tipc: Enabled bearer , priority 27 [ 132.365715][ T4289] tipc: Started in network mode [ 132.370657][ T4289] tipc: Node identity , cluster identity 4711 [ 132.376740][ T4289] tipc: Failed to set node id, please configure manually [ 132.383886][ T4289] tipc: Enabling of bearer rejected, failed to enable media [ 132.403460][ T36] audit: type=1400 audit(1779465672.025:681267): avc: denied { set_context_mgr } for pid=4291 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.404456][ T4292] rust_binder: Error while translating object. [ 132.423619][ T4292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 132.429110][ T36] audit: type=1400 audit(1779465672.025:681268): avc: denied { map } for pid=4291 comm="syz.3.1422" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.429916][ T4292] rust_binder: 4291:4292 transaction to 4291 failed: ENOENT [ 132.439867][ T36] audit: type=1400 audit(1779465672.025:681269): avc: denied { call } for pid=4291 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.490138][ T36] audit: type=1400 audit(1779465672.025:681270): avc: denied { transfer } for pid=4291 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.511417][ T4295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1423'. [ 132.555362][ T4301] netlink: 'syz.3.1426': attribute type 26 has an invalid length. [ 132.563354][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 132.598995][ T66] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.698997][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.755584][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.774020][ T66] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 132.791747][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.808965][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.818285][ T66] usb 3-1: Product: syz [ 132.822652][ T66] usb 3-1: Manufacturer: syz [ 132.827268][ T66] usb 3-1: SerialNumber: syz [ 132.828945][ T45] usb 2-1: device descriptor read/64, error -71 [ 132.968968][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 132.976338][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.986969][ T310] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 132.996082][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.005283][ T310] usb 4-1: config 0 descriptor?? [ 133.043190][ T66] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.076559][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 133.079039][ T45] usb 2-1: device descriptor read/64, error -71 [ 133.090859][ T66] usb 3-1: USB disconnect, device number 11 [ 133.105030][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.212119][ T4325] netlink: 'syz.3.1426': attribute type 26 has an invalid length. [ 133.220137][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 133.236598][ T310] usb 4-1: string descriptor 0 read error: -71 [ 133.244469][ T310] usb 4-1: USB disconnect, device number 9 [ 133.278957][ T10] tipc: Node number set to 2130706433 [ 133.295370][ T4334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1432'. [ 133.329042][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.459018][ T45] usb 2-1: device descriptor read/64, error -71 [ 133.582715][ T4341] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1434'. [ 133.658996][ T66] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.697797][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.709151][ T4363] netlink: 'syz.2.1438': attribute type 27 has an invalid length. [ 133.719002][ T45] usb 2-1: device descriptor read/64, error -71 [ 133.719984][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.735264][ T4363] tipc: Resetting bearer [ 133.744136][ T4363] gretap0: left allmulticast mode [ 133.757776][ T4363] sit0: left promiscuous mode [ 133.772598][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.820576][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.829133][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.829409][ T45] usb usb2-port1: attempt power cycle [ 133.839598][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.860537][ T66] usb 4-1: string descriptor 0 read error: -22 [ 133.869209][ T66] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 133.886091][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.900784][ T66] usb 4-1: selecting invalid altsetting 1 [ 133.906803][ T66] usb 4-1: unit 3 not found! [ 133.928954][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.041962][ T4390] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1443'. [ 134.100030][ T66] usb 4-1: unit 0 not found! [ 134.105122][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 134.120429][ T4402] tipc: Enabling of bearer rejected, failed to enable media [ 134.131330][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.149717][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.164195][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 134.173436][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.181105][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 134.182356][ T10] usb 1-1: Product: ﯢÓ▇丽櫉芸샅탳⃟镘한톩麮祠墟⫬ì…ã⒒རî®á¹ã¼žâ­žážŽ [ 134.199672][ T10] usb 1-1: Manufacturer: Ðœ [ 134.206338][ T10] usb 1-1: SerialNumber: ᇠ[ 134.220001][ T45] usb 2-1: device descriptor read/8, error -71 [ 134.227113][ T4414] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=4414 comm=syz.2.1447 [ 134.350218][ T45] usb 2-1: device descriptor read/8, error -71 [ 134.421819][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 134.437355][ T10] usb 1-1: USB disconnect, device number 8 [ 134.559063][ T66] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.589018][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.610061][ T45] usb 2-1: device descriptor read/8, error -71 [ 134.709032][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 134.715430][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 134.728139][ T66] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 134.737478][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.745514][ T66] usb 3-1: Product: syz [ 134.749700][ T66] usb 3-1: Manufacturer: syz [ 134.754283][ T66] usb 3-1: SerialNumber: syz [ 134.761430][ T45] usb 2-1: device descriptor read/8, error -71 [ 134.869756][ T45] usb usb2-port1: unable to enumerate USB device [ 134.962509][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.971117][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.992162][ T66] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.009100][ T66] usb 3-1: USB disconnect, device number 12 [ 135.019758][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.168964][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.318954][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 135.325273][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.334809][ T10] usb 1-1: config 179 has no interface number 0 [ 135.341215][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.352415][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.363803][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.376016][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.387586][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.401110][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.410209][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.419086][ T4428] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 135.631002][ T4428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.639780][ T4428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.708997][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.748966][ T4072] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.852480][ T310] usb 1-1: USB disconnect, device number 9 [ 135.852606][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.860870][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.866992][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 135.875832][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 135.893062][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 135.905526][ T45] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 135.914620][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.922678][ T45] usb 2-1: Product: syz [ 135.926871][ T45] usb 2-1: Manufacturer: syz [ 135.931668][ T45] usb 2-1: SerialNumber: syz [ 135.936811][ T4072] usb 3-1: config index 0 descriptor too short (expected 64911, got 72) [ 135.946883][ T4072] usb 3-1: string descriptor 0 read error: -71 [ 135.953188][ T4072] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.962291][ T4072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.973646][ T4072] usb 3-1: can't set config #1, error -71 [ 135.981588][ T4072] usb 3-1: USB disconnect, device number 13 [ 136.149626][ T45] usb 2-1: Can't get UAC3 power state for id 10 [ 136.156856][ T45] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 136.166512][ T45] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 136.178824][ T45] usb 2-1: USB disconnect, device number 14 [ 136.198650][ T4021] udevd[4021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.330012][ T4072] usb 4-1: USB disconnect, device number 10 [ 136.345134][ T4441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1453'. [ 136.442130][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 136.442149][ T36] audit: type=1400 audit(1779465676.065:681279): avc: denied { append } for pid=4451 comm="syz.0.1457" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.473199][ T4454] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 136.494184][ T36] audit: type=1400 audit(1779465676.115:681280): avc: denied { connect } for pid=4451 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.514015][ T36] audit: type=1400 audit(1779465676.115:681281): avc: denied { write } for pid=4451 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.681964][ T4457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1459'. [ 136.691007][ T4457] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1459'. [ 136.700124][ T4457] netlink: 'syz.1.1459': attribute type 6 has an invalid length. [ 136.700149][ T4072] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 136.708004][ T4457] netlink: 'syz.1.1459': attribute type 5 has an invalid length. [ 136.723716][ T4457] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1459'. [ 136.723730][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.860022][ T4072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.872034][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.882997][ T4072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.894347][ T4072] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.898939][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 136.907598][ T4072] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 136.921443][ T4072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.931070][ T4072] usb 4-1: config 0 descriptor?? [ 136.938641][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.948094][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.968372][ T10] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.989855][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 136.999013][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.007073][ T10] usb 3-1: Product: syz [ 137.011361][ T10] usb 3-1: Manufacturer: syz [ 137.016017][ T10] usb 3-1: SerialNumber: syz [ 137.068944][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 137.075514][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.083386][ T45] usb 1-1: can't read configurations, error -61 [ 137.219025][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.227148][ T4454] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 137.238987][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.250230][ T10] usb 3-1: USB disconnect, device number 14 [ 137.261649][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.352192][ T4072] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 137.359979][ T4072] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 137.367741][ T4072] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 137.375530][ T4072] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 137.383319][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 137.389563][ T4072] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 137.402205][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.409851][ T45] usb 1-1: can't read configurations, error -61 [ 137.418017][ T45] usb usb1-port1: attempt power cycle [ 137.555685][ T10] usb 4-1: USB disconnect, device number 11 [ 137.752341][ T36] audit: type=1400 audit(1779465677.375:681282): avc: denied { append } for pid=4469 comm="syz.2.1464" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.776048][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.799292][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 137.805983][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.813752][ T45] usb 1-1: can't read configurations, error -61 [ 137.949046][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.969336][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 137.975980][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.983825][ T45] usb 1-1: can't read configurations, error -61 [ 137.990379][ T45] usb usb1-port1: unable to enumerate USB device [ 138.038980][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.189028][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 138.195364][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.205855][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.218105][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.227240][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.235294][ T10] usb 3-1: Product: syz [ 138.239506][ T10] usb 3-1: Manufacturer: syz [ 138.244098][ T10] usb 3-1: SerialNumber: syz [ 138.328975][ T66] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.454837][ T10] usb 3-1: 0:2 : does not exist [ 138.462813][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 138.473547][ T10] usb 3-1: USB disconnect, device number 15 [ 138.479541][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 138.489041][ T66] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.500005][ T66] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.510899][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.520109][ T66] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 138.528589][ T66] usb 4-1: Product: syz [ 138.532804][ T66] usb 4-1: Manufacturer: syz [ 138.540448][ T66] hub 4-1:4.0: USB hub found [ 138.739040][ T66] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 138.939977][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.948550][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.289094][ T66] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 139.306418][ T36] audit: type=1400 audit(1779465678.925:681283): avc: denied { create } for pid=4478 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.326532][ T36] audit: type=1400 audit(1779465678.925:681284): avc: denied { ioctl } for pid=4478 comm="syz.1.1467" path="socket:[21929]" dev="sockfs" ino=21929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.351639][ T36] audit: type=1400 audit(1779465678.935:681285): avc: denied { mount } for pid=4478 comm="syz.1.1467" name="/" dev="incremental-fs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.376249][ T36] audit: type=1400 audit(1779465678.935:681286): avc: denied { write } for pid=4478 comm="syz.1.1467" name="/" dev="incremental-fs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.399176][ T36] audit: type=1400 audit(1779465678.935:681287): avc: denied { add_name } for pid=4478 comm="syz.1.1467" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.420895][ T36] audit: type=1400 audit(1779465678.935:681288): avc: denied { create } for pid=4478 comm="syz.1.1467" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.470425][ T66] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 139.480127][ T66] usb 3-1: config 0 has no interface number 0 [ 139.486303][ T66] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 139.505012][ T66] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.515423][ T66] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 139.528331][ T66] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 139.553088][ T66] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 139.563414][ T66] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 139.571502][ T66] usb 3-1: Product: syz [ 139.575727][ T66] usb 3-1: Manufacturer: syz [ 139.580445][ T66] usb 3-1: SerialNumber: syz [ 139.586414][ T66] usb 3-1: config 0 descriptor?? [ 139.605939][ T66] xpad 3-1:0.237: probe with driver xpad failed with error -5 [ 139.664869][ T4511] __nla_validate_parse: 2 callbacks suppressed [ 139.664975][ T4511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1472'. [ 139.710753][ T4516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1473'. [ 139.804279][ T4072] usb 3-1: USB disconnect, device number 16 [ 140.018991][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.158962][ T310] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 140.171418][ T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 140.180585][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.188596][ T45] usb 1-1: Product: syz [ 140.192857][ T45] usb 1-1: Manufacturer: syz [ 140.197479][ T45] usb 1-1: SerialNumber: syz [ 140.308972][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 140.315165][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 140.324278][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.333237][ T310] usb 2-1: config 0 descriptor?? [ 140.408519][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 140.415495][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.428074][ T45] usb 1-1: USB disconnect, device number 14 [ 140.540789][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.548983][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.557077][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.565298][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.573452][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.581564][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.589677][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.597747][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.605948][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.614312][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.622438][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.628972][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 140.630554][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.646179][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.654488][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.662589][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.670706][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.678876][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.686994][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.695100][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.703203][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.711303][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.719413][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.727479][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.735743][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.743867][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.752002][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.760121][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.768213][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.776343][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.784475][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.792613][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.800087][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.800729][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.811944][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.829530][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.829806][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 140.837635][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.847009][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.854970][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.864102][ T10] usb 3-1: config 0 descriptor?? [ 140.870912][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.883963][ T310] logitech-djreceiver 0003:046D:C539.0004: unknown main item tag 0x0 [ 140.894822][ T310] usb 2-1: USB disconnect, device number 15 [ 141.080538][ T4536] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 141.088409][ T4536] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 141.098815][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.107377][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.120983][ T4541] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1482'. [ 141.143927][ T4543] ======================================================= [ 141.143927][ T4543] WARNING: The mand mount option has been deprecated and [ 141.143927][ T4543] and is ignored by this kernel. Remove the mand [ 141.143927][ T4543] option from the mount to silence this warning. [ 141.143927][ T4543] ======================================================= [ 141.179005][ T66] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.209111][ T321] usb 4-1: USB disconnect, device number 12 [ 141.218075][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 141.227655][ T4547] incfs: Options parsing error. -22 [ 141.232968][ T4547] incfs: mount failed -22 [ 141.427968][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.461138][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.471782][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.482279][ T66] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 141.491454][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.500531][ T66] usb 1-1: Product: syz [ 141.504766][ T66] usb 1-1: Manufacturer: syz [ 141.510256][ T66] usb 1-1: SerialNumber: syz [ 141.520010][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 141.526030][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.536325][ T10] usb 3-1: USB disconnect, device number 17 [ 141.709008][ T45] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 141.717590][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.726623][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.734888][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.743840][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.758053][ T66] usb 1-1: selecting invalid altsetting 1 [ 141.760875][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 141.760891][ T36] audit: type=1400 audit(1779465681.375:681302): avc: denied { accept } for pid=4560 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 141.766297][ T66] usb 1-1: unit 3 not found! [ 141.796713][ T66] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 141.804002][ T66] usb 1-1: invalid MIXER UNIT descriptor 6 [ 141.812463][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 141.832424][ T66] usb 1-1: USB disconnect, device number 15 [ 141.836949][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.871449][ T45] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 141.880933][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.888973][ T45] usb 2-1: Product: syz [ 141.893158][ T45] usb 2-1: Manufacturer: syz [ 141.897781][ T45] usb 2-1: SerialNumber: syz [ 141.904436][ T45] ftdi_sio 2-1:4.0: FTDI USB Serial Device converter detected [ 141.912266][ T45] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 142.079268][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.105568][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.114223][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.126041][ T36] audit: type=1400 audit(1779465681.745:681303): avc: denied { map } for pid=4554 comm="syz.1.1487" path="socket:[23162]" dev="sockfs" ino=23162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 142.127024][ T310] usb 2-1: USB disconnect, device number 16 [ 142.155700][ T310] ftdi_sio 2-1:4.0: device disconnected [ 142.228963][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 142.235167][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.246065][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.255883][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 142.265053][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.274372][ T10] usb 4-1: config 0 descriptor?? [ 142.287537][ T4569] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1491'. [ 142.318957][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 142.470478][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.481500][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.491368][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 142.500585][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.509397][ T45] usb 3-1: config 0 descriptor?? [ 142.677055][ T36] audit: type=1400 audit(1779465682.295:681304): avc: denied { ioctl } for pid=4574 comm="syz.1.1494" path="socket:[22483]" dev="sockfs" ino=22483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.709378][ T10] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 142.779022][ T310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.815865][ T4584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4584 comm=syz.1.1496 [ 142.923416][ T45] wacom 0003:056A:030C.0006: unknown main item tag 0x0 [ 142.930452][ T45] wacom 0003:056A:030C.0006: unknown main item tag 0x0 [ 142.937358][ T45] wacom 0003:056A:030C.0006: unknown main item tag 0x0 [ 142.944470][ T45] wacom 0003:056A:030C.0006: unknown main item tag 0x0 [ 142.951505][ T45] wacom 0003:056A:030C.0006: unknown main item tag 0x0 [ 142.959929][ T4072] usb 4-1: USB disconnect, device number 13 [ 142.966063][ T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.975380][ T45] wacom 0003:056A:030C.0006: hidraw1: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.2-1/input0 [ 142.987018][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.995419][ T310] usb 1-1: Product: syz [ 143.000613][ T310] usb 1-1: Manufacturer: syz [ 143.006815][ T310] usb 1-1: SerialNumber: syz [ 143.078977][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.125515][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.134147][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.142706][ T45] usb 3-1: USB disconnect, device number 18 [ 143.230197][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 143.233327][ T310] rtl8150 1-1:1.0: couldn't reset the device [ 143.239402][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.245429][ T310] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 143.254459][ T10] usb 2-1: config 0 descriptor?? [ 143.263154][ T310] usb 1-1: USB disconnect, device number 16 [ 143.276158][ T10] usb 2-1: selecting invalid altsetting 1 [ 143.283980][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 143.286413][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.480799][ T36] audit: type=1326 audit(1779465683.105:681305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.1498" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03b9ce59 code=0x0 [ 143.532124][ T4591] netlink: 'syz.3.1498': attribute type 4 has an invalid length. [ 143.701072][ T4593] cgroup: Name too long [ 143.705739][ T4593] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1499'. [ 143.718574][ T4595] cgroup: Name too long [ 143.734020][ T4599] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1500'. [ 143.761504][ T36] audit: type=1400 audit(1779465683.385:681306): avc: denied { shutdown } for pid=4604 comm="syz.0.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.782085][ T36] audit: type=1400 audit(1779465683.385:681307): avc: denied { map } for pid=4604 comm="syz.0.1502" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.805525][ T36] audit: type=1400 audit(1779465683.385:681308): avc: denied { read } for pid=4604 comm="syz.0.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.844753][ T4609] block device autoloading is deprecated and will be removed. [ 143.983110][ T45] usb 2-1: USB disconnect, device number 17 [ 143.999459][ T310] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.004039][ T36] audit: type=1400 audit(1779465683.625:681309): avc: denied { bind } for pid=4611 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.008100][ T4612] process 'syz.1.1505' launched '/dev/fd/10' with NULL argv: empty string added [ 144.026792][ T36] audit: type=1400 audit(1779465683.625:681310): avc: denied { execute } for pid=4611 comm="syz.1.1505" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.058000][ T36] audit: type=1400 audit(1779465683.655:681311): avc: denied { execute_no_trans } for pid=4611 comm="syz.1.1505" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.060108][ T4614] overlayfs: cannot append lower layer [ 144.160692][ T310] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 144.169847][ T310] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 144.177923][ T310] usb 1-1: Product: syz [ 144.182871][ T310] usb 1-1: config 0 descriptor?? [ 144.188830][ T310] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 144.196713][ T310] usb 1-1: Detected FT232H [ 144.381387][ T4625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4625 comm=syz.3.1510 [ 144.394547][ T4625] netlink: 'syz.3.1510': attribute type 11 has an invalid length. [ 144.402918][ T4625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4625 comm=syz.3.1510 [ 144.406394][ T310] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 144.422215][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 144.430139][ T310] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 144.437345][ T310] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 144.444600][ T310] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.453974][ T310] usb 1-1: USB disconnect, device number 17 [ 144.461042][ T310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.470610][ T310] ftdi_sio 1-1:0.0: device disconnected [ 144.580446][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.588848][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 144.599932][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 144.612319][ T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 144.621396][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.629428][ T45] usb 2-1: Product: syz [ 144.633764][ T45] usb 2-1: Manufacturer: syz [ 144.639235][ T45] usb 2-1: SerialNumber: syz [ 144.658142][ T4629] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1512'. [ 144.794589][ T4637] rust_binder: Error while translating object. [ 144.794654][ T4637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 144.800928][ T4637] rust_binder: 4635:4637 transaction to 4635 failed: EPERM [ 144.855597][ T45] usb 2-1: unit 4: unexpected type 0x03 [ 144.870378][ T45] usb 2-1: unit 8 not found! [ 144.878545][ T45] usb 2-1: USB disconnect, device number 18 [ 145.408976][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 145.442609][ T4647] bridge_slave_0: mtu less than device minimum [ 145.481438][ T4653] : renamed from veth0_vlan (while UP) [ 145.558942][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 145.565561][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.590796][ T45] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 145.606035][ T45] usb 4-1: config 1 has no interface number 0 [ 145.622416][ T45] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 145.623254][ T4665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1527'. [ 145.636940][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.650827][ T45] usb 4-1: Product: syz [ 145.656921][ T45] usb 4-1: Manufacturer: syz [ 145.665287][ T45] usb 4-1: SerialNumber: syz [ 145.695409][ T4667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1528'. [ 145.873689][ T4645] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 145.881693][ T4645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1517'. [ 145.890958][ T4645] veth1: entered promiscuous mode [ 145.904870][ T45] usb 4-1: USB disconnect, device number 14 [ 146.008957][ T310] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.138953][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.379006][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.432064][ T4682] xt_NFQUEUE: number of total queues is 0 [ 146.452239][ T4684] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1536'. [ 146.464761][ T4686] usb usb8: usbfs: process 4686 (syz.3.1537) did not claim interface 5 before use [ 146.474825][ T4686] netlink: 'syz.3.1537': attribute type 29 has an invalid length. [ 146.483313][ T4690] devpts: called with bogus options [ 146.488949][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.498435][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.512351][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.618964][ T310] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.652015][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.662858][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 146.670642][ T45] usb 3-1: can't read configurations, error -61 [ 146.748949][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.768961][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 146.808956][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 146.898971][ T10] usb 4-1: device descriptor read/64, error -71 [ 146.919012][ T66] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 146.970487][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.979162][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 146.986834][ T45] usb 3-1: can't read configurations, error -61 [ 146.993198][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.999593][ T45] usb usb3-port1: attempt power cycle [ 147.068979][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 147.075461][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.083947][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 147.094946][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.104841][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 147.115908][ T66] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 147.119050][ T310] usb usb1-port1: attempt power cycle [ 147.125931][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 147.141016][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 147.150685][ T66] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 147.160405][ T10] usb 4-1: device descriptor read/64, error -71 [ 147.168064][ T66] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 147.177151][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.185159][ T66] usb 2-1: Product: syz [ 147.189360][ T66] usb 2-1: Manufacturer: syz [ 147.193974][ T66] usb 2-1: SerialNumber: syz [ 147.199234][ T66] usb 2-1: config 0 descriptor?? [ 147.204498][ T4697] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 147.215524][ T66] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 147.231457][ T4021] udevd[4021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.339049][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 147.360745][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.369671][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 147.377343][ T45] usb 3-1: can't read configurations, error -61 [ 147.398988][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.412427][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.421012][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.429206][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.437739][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.445829][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.454430][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.462682][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.471234][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.479085][ T310] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 147.479857][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.495219][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.504134][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.507382][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 147.507396][ T36] audit: type=1400 audit(1779465687.125:681330): avc: denied { ioctl } for pid=4695 comm="syz.1.1540" path="socket:[24695]" dev="sockfs" ino=24695 ioctlcmd=0x551d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.511372][ T4072] usb 2-1: USB disconnect, device number 19 [ 147.538960][ T10] usb 4-1: device descriptor read/64, error -71 [ 147.544033][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 147.581030][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.589992][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 147.597828][ T45] usb 3-1: can't read configurations, error -61 [ 147.604517][ T45] usb usb3-port1: unable to enumerate USB device [ 147.640085][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.788983][ T10] usb 4-1: device descriptor read/64, error -71 [ 147.878996][ T310] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 147.899098][ T10] usb usb4-port1: attempt power cycle [ 147.900131][ T310] usb 1-1: device descriptor read/8, error -71 [ 148.050045][ T310] usb 1-1: device descriptor read/8, error -71 [ 148.159172][ T310] usb usb1-port1: unable to enumerate USB device [ 148.238970][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 148.259934][ T10] usb 4-1: device descriptor read/8, error -71 [ 148.268946][ T66] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 148.390061][ T10] usb 4-1: device descriptor read/8, error -71 [ 148.420278][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.431306][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 148.442123][ T66] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 148.451193][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.459976][ T66] usb 2-1: config 0 descriptor?? [ 148.465213][ T4700] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 148.628968][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 148.649891][ T10] usb 4-1: device descriptor read/8, error -71 [ 148.682724][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 148.687952][ T4705] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.695304][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 148.712419][ T66] usb 2-1: USB disconnect, device number 20 [ 148.724787][ T4705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1124 sclass=netlink_tcpdiag_socket pid=4705 comm=syz.1.1542 [ 148.738077][ T36] audit: type=1400 audit(1779465688.355:681331): avc: denied { getopt } for pid=4704 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.780087][ T10] usb 4-1: device descriptor read/8, error -71 [ 148.897334][ T10] usb usb4-port1: unable to enumerate USB device [ 149.033769][ T36] audit: type=1400 audit(1779465688.655:681332): avc: denied { getopt } for pid=4714 comm="syz.0.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.054342][ T36] audit: type=1400 audit(1779465688.655:681333): avc: denied { setattr } for pid=4714 comm="syz.0.1545" name="NETLINK" dev="sockfs" ino=24739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.081141][ T36] audit: type=1400 audit(1779465688.705:681334): avc: denied { connect } for pid=4716 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.110557][ T4719] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 149.131371][ T4721] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1548'. [ 149.264224][ T36] audit: type=1400 audit(1779465688.885:681335): avc: denied { create } for pid=4724 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.284173][ T36] audit: type=1400 audit(1779465688.885:681336): avc: denied { ioctl } for pid=4724 comm="syz.2.1550" path="socket:[24160]" dev="sockfs" ino=24160 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.298679][ T4727] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.309743][ T36] audit: type=1400 audit(1779465688.885:681337): avc: denied { create } for pid=4724 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.323066][ T4727] IPv6: NLM_F_REPLACE set, but no existing node found! [ 149.388958][ T310] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 149.454531][ T4742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1557'. [ 149.512413][ T36] audit: type=1400 audit(1779465689.135:681338): avc: denied { create } for pid=4739 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.532812][ T310] usb 1-1: device descriptor read/64, error -71 [ 149.544763][ T36] audit: type=1326 audit(1779465689.165:681339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4746 comm="syz.2.1559" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f661939ce59 code=0x0 [ 149.589486][ T4221] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.596284][ T4221] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.718968][ T4072] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 149.778967][ T310] usb 1-1: device descriptor read/64, error -71 [ 149.870475][ T4072] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.878955][ T4072] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 149.890409][ T4072] usb 2-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 149.899525][ T4072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.907507][ T4072] usb 2-1: Product: syz [ 149.911687][ T4072] usb 2-1: Manufacturer: syz [ 149.916294][ T4072] usb 2-1: SerialNumber: syz [ 149.921821][ T4744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.018949][ T310] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 150.131625][ T4744] cgroup: Invalid name [ 150.139032][ T4072] usb 2-1: MIDIStreaming interface descriptor not found [ 150.149917][ T310] usb 1-1: device descriptor read/64, error -71 [ 150.156312][ T4072] usb 2-1: USB disconnect, device number 21 [ 150.398996][ T310] usb 1-1: device descriptor read/64, error -71 [ 150.413997][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.423115][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.509166][ T310] usb usb1-port1: attempt power cycle [ 150.649254][ T4072] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 150.719315][ T4769] syzkaller1: entered promiscuous mode [ 150.724804][ T4769] syzkaller1: entered allmulticast mode [ 150.802811][ T4072] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.811485][ T4072] usb 3-1: config 172 has an invalid interface number: 178 but max is 0 [ 150.819894][ T4072] usb 3-1: config 172 has no interface number 0 [ 150.826172][ T4072] usb 3-1: config 172 interface 178 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE [ 150.837924][ T4072] usb 3-1: config 172 interface 178 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 150.849054][ T310] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 150.856557][ T4072] usb 3-1: config 172 interface 178 has no altsetting 0 [ 150.865539][ T4072] usb 3-1: string descriptor 0 read error: -22 [ 150.871781][ T4072] usb 3-1: New USB device found, idVendor=2020, idProduct=2060, bcdDevice=3d.9e [ 150.880894][ T4072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.890360][ T4760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.897575][ T310] usb 1-1: device descriptor read/8, error -71 [ 150.904478][ T4072] usb 3-1: Found UVC 0.00 device (2020:2060) [ 150.911435][ T4072] usb 3-1: No valid video chain found. [ 151.040115][ T310] usb 1-1: device descriptor read/8, error -71 [ 151.048977][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 151.198941][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 151.205159][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.216822][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.226757][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.233409][ T10] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 151.242477][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.251098][ T10] usb 2-1: config 0 descriptor?? [ 151.262240][ T66] usb 3-1: USB disconnect, device number 23 [ 151.278978][ T310] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 151.300059][ T310] usb 1-1: device descriptor read/8, error -71 [ 151.340930][ T4776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1567'. [ 151.430103][ T310] usb 1-1: device descriptor read/8, error -71 [ 151.539114][ T310] usb usb1-port1: unable to enumerate USB device [ 151.608944][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.608971][ T3389] Bluetooth: hci0: command 0x1003 tx timeout [ 151.658605][ T10] smartjoyplus 0003:6666:8804.0008: unknown main item tag 0xe [ 151.667679][ T10] smartjoyplus 0003:6666:8804.0008: item fetching failed at offset 4/5 [ 151.683853][ T10] smartjoyplus 0003:6666:8804.0008: parse failed [ 151.699247][ T10] smartjoyplus 0003:6666:8804.0008: probe with driver smartjoyplus failed with error -22 [ 151.858283][ T321] usb 2-1: USB disconnect, device number 22 [ 152.019048][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 152.170069][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.180320][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.190844][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 152.199934][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.208273][ T10] usb 4-1: Product: syz [ 152.212479][ T10] usb 4-1: Manufacturer: syz [ 152.217094][ T10] usb 4-1: SerialNumber: syz [ 152.558975][ T66] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 152.608999][ T4072] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 152.624300][ T10] usb 4-1: cannot find UAC_HEADER [ 152.631643][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.646842][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.709150][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 152.710206][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 152.710221][ T36] audit: type=1400 audit(1779465692.335:681343): avc: denied { bind } for pid=4796 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.716704][ T4797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1575'. [ 152.749943][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.761008][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.778276][ T66] usb 1-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 152.785287][ T4072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.797404][ T66] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 152.800014][ T4072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.806622][ T66] usb 1-1: Product: syz [ 152.817968][ T4072] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.824302][ T66] usb 1-1: config 0 descriptor?? [ 152.839972][ T4072] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 152.848087][ T4072] usb 2-1: Manufacturer: syz [ 152.853553][ T4072] usb 2-1: config 0 descriptor?? [ 152.864020][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.872677][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.890776][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 152.899788][ T4801] bridge_slave_1: left allmulticast mode [ 152.905495][ T4801] bridge_slave_1: left promiscuous mode [ 152.911238][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.919065][ T4801] bridge_slave_0: left allmulticast mode [ 152.924870][ T4801] bridge_slave_0: left promiscuous mode [ 152.925953][ T310] usb 4-1: USB disconnect, device number 19 [ 152.930773][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.038161][ T66] usbhid 1-1:0.0: can't add hid device: -71 [ 153.044258][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 153.053831][ T66] usb 1-1: USB disconnect, device number 26 [ 153.263928][ T4072] usbhid 2-1:0.0: can't add hid device: -71 [ 153.269982][ T4072] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.279176][ T4072] usb 2-1: USB disconnect, device number 23 [ 153.452630][ T4803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1577'. [ 153.538850][ T36] audit: type=1400 audit(1779465693.155:681344): avc: denied { setopt } for pid=4809 comm="syz.3.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.672915][ T4818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4818 comm=syz.2.1582 [ 153.736830][ T36] audit: type=1400 audit(1779465693.355:681345): avc: denied { read } for pid=4825 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.777166][ T4828] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 153.784845][ T4828] SELinux: failed to load policy [ 153.807462][ T4836] z00ªX¹¦: left allmulticast mode [ 153.813008][ T4835] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 153.821192][ T4072] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 153.841822][ T4840] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1587'. [ 153.852479][ T4842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4842 comm=syz.2.1588 [ 153.873959][ T36] audit: type=1400 audit(1779465693.495:681346): avc: denied { create } for pid=4843 comm="syz.1.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.916891][ T36] audit: type=1400 audit(1779465693.525:681347): avc: denied { create } for pid=4841 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.936731][ T36] audit: type=1400 audit(1779465693.535:681348): avc: denied { checkpoint_restore } for pid=4847 comm="syz.1.1591" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.978999][ T4072] usb 1-1: Using ep0 maxpacket: 16 [ 153.985396][ T4072] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 153.996244][ T4072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.006414][ T4072] usb 1-1: config 0 has no interface number 0 [ 154.013868][ T4072] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 154.023273][ T4072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.031324][ T4072] usb 1-1: Product: syz [ 154.035502][ T4072] usb 1-1: Manufacturer: syz [ 154.040249][ T4072] usb 1-1: SerialNumber: syz [ 154.046088][ T36] audit: type=1400 audit(1779465693.665:681349): avc: denied { connect } for pid=4850 comm="syz.1.1592" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.048975][ T4072] usb 1-1: config 0 descriptor?? [ 154.148958][ T310] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 154.282654][ T4072] usb 1-1: USB disconnect, device number 27 [ 154.298981][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 154.305593][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.314025][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.327235][ T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.334126][ T36] audit: type=1400 audit(1779465693.955:681350): avc: denied { listen } for pid=4853 comm="syz.3.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.336780][ T310] usb 3-1: too many endpoints for config 1 interface 1 altsetting 97: 108, using maximum allowed: 30 [ 154.373029][ T310] usb 3-1: config 1 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 154.386451][ T310] usb 3-1: config 1 interface 1 has no altsetting 0 [ 154.394888][ T310] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 154.404256][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.412648][ T310] usb 3-1: Product: syz [ 154.417110][ T310] usb 3-1: Manufacturer: syz [ 154.422208][ T310] usb 3-1: SerialNumber: syz [ 154.638184][ T310] usb 3-1: 0:2 : does not exist [ 154.643288][ T310] usb 3-1: unit 181 not found! [ 154.654117][ T310] usb 3-1: USB disconnect, device number 24 [ 154.739004][ T66] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 154.808426][ T4865] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1597'. [ 154.839945][ T4868] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1598'. [ 154.855355][ T4870] input: syz0 as /devices/virtual/input/input13 [ 154.862500][ T36] audit: type=1400 audit(1779465694.485:681351): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.888035][ T36] audit: type=1400 audit(1779465694.485:681352): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.893067][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 154.920405][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 154.931399][ T66] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.937318][ T4877] tmpfs: Unknown parameter '18446744073709551615' [ 154.946390][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 154.966510][ T66] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 154.977090][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.985496][ T66] usb 4-1: Product: syz [ 154.990098][ T66] usb 4-1: Manufacturer: syz [ 154.994848][ T66] usb 4-1: SerialNumber: syz [ 155.055241][ T4890] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1608'. [ 155.211549][ T66] usb 4-1: MIDIStreaming interface descriptor not found [ 155.221343][ T66] usb 4-1: USB disconnect, device number 20 [ 155.229238][ T4021] udevd[4021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.329025][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 155.490196][ T10] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 155.498558][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 155.507763][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.516766][ T10] usb 2-1: config 0 descriptor?? [ 155.522753][ T10] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 155.599063][ T4072] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 155.750976][ T4072] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.762101][ T4072] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 155.772880][ T4072] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.782004][ T4072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.793796][ T4072] usb 3-1: invalid MIDI out EP 0 [ 155.806708][ T4072] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 155.999003][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 156.032600][ T310] usb 3-1: USB disconnect, device number 25 [ 156.108542][ T4921] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1619'. [ 156.178942][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 156.185334][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.196285][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.206081][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.220220][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.229371][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.238063][ T10] usb 4-1: config 0 descriptor?? [ 156.446811][ T4901] syzkaller1: entered promiscuous mode [ 156.452363][ T4901] syzkaller1: entered allmulticast mode [ 156.459275][ T310] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 156.589013][ T310] usb 3-1: device descriptor read/64, error -71 [ 156.661476][ T4901] cgroup: Name too long [ 156.667368][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.674658][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.681951][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.689208][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.696431][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.703699][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.711017][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.718226][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.725549][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.732812][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 156.743788][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input14 [ 156.759374][ T10] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 156.838995][ T310] usb 3-1: device descriptor read/64, error -71 [ 156.950926][ T4072] usb 4-1: USB disconnect, device number 21 [ 156.996164][ T4932] fuse: Bad value for 'fd' [ 157.079015][ T310] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 157.209042][ T310] usb 3-1: device descriptor read/64, error -71 [ 157.238957][ T66] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 157.390497][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.398977][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.409137][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.420202][ T66] usb 1-1: string descriptor 0 read error: -22 [ 157.426417][ T66] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 157.435483][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.446014][ T66] usb 1-1: selecting invalid altsetting 1 [ 157.449356][ T310] usb 3-1: device descriptor read/64, error -71 [ 157.452412][ T66] usb 1-1: unit 3 not found! [ 157.487179][ T4937] x_tables: duplicate entry at hook 1 [ 157.569093][ T310] usb usb3-port1: attempt power cycle [ 157.645377][ T66] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 157.652603][ T66] usb 1-1: invalid MIXER UNIT descriptor 6 [ 157.660530][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 157.662841][ T3906] udevd[3906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.846343][ T4944] fuse: Bad value for 'fd' [ 157.846592][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.859605][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.919059][ T310] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 157.939957][ T310] usb 3-1: device descriptor read/8, error -71 [ 158.070112][ T310] usb 3-1: device descriptor read/8, error -71 [ 158.096870][ T4933] usb 2-1: USB disconnect, device number 24 [ 158.119769][ T4954] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1629'. [ 158.176369][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 158.176387][ T36] audit: type=1400 audit(1779465697.795:681368): avc: denied { append } for pid=4960 comm="syz.1.1632" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.268979][ T66] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.309048][ T310] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 158.330045][ T310] usb 3-1: device descriptor read/8, error -71 [ 158.418952][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 158.425377][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.435541][ T66] usb 4-1: config 0 has no interfaces? [ 158.442719][ T66] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 158.451824][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.459866][ T66] usb 4-1: Product: syz [ 158.464034][ T66] usb 4-1: Manufacturer: syz [ 158.468638][ T66] usb 4-1: SerialNumber: syz [ 158.470046][ T310] usb 3-1: device descriptor read/8, error -71 [ 158.474035][ T66] usb 4-1: config 0 descriptor?? [ 158.538981][ T4933] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 158.589152][ T310] usb usb3-port1: unable to enumerate USB device [ 158.685505][ T310] usb 4-1: USB disconnect, device number 22 [ 158.692553][ T4933] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 158.701023][ T4933] usb 2-1: config 0 has no interface number 0 [ 158.708575][ T4933] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 158.717703][ T4933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.725859][ T4933] usb 2-1: Product: syz [ 158.730082][ T4933] usb 2-1: Manufacturer: syz [ 158.734705][ T4933] usb 2-1: SerialNumber: syz [ 158.740094][ T4933] usb 2-1: config 0 descriptor?? [ 158.950417][ T4933] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 158.956932][ T4933] usb 2-1: No valid video chain found. [ 158.963249][ T4933] usb 2-1: USB disconnect, device number 25 [ 159.193540][ T36] audit: type=1400 audit(1779465698.815:681369): avc: denied { create } for pid=4964 comm="syz.2.1634" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.227470][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'. [ 159.239016][ T36] audit: type=1400 audit(1779465698.855:681370): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.298160][ T4974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1638'. [ 159.474811][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 159.483805][ T4983] bridge_slave_1: left allmulticast mode [ 159.489610][ T4983] bridge_slave_1: left promiscuous mode [ 159.495291][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.503178][ T4983] bridge_slave_0: left allmulticast mode [ 159.509030][ T4983] bridge_slave_0: left promiscuous mode [ 159.514870][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.522405][ T4933] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 159.625809][ T36] audit: type=1400 audit(1779465699.245:681371): avc: denied { bind } for pid=4985 comm="syz.1.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.658985][ T310] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 159.681116][ T4933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.689539][ T4933] usb 3-1: not running at top speed; connect to a high speed hub [ 159.698151][ T4933] usb 3-1: config 2 has an invalid interface number: 222 but max is 0 [ 159.706542][ T4933] usb 3-1: config 2 has no interface number 0 [ 159.712690][ T4933] usb 3-1: config 2 interface 222 has no altsetting 0 [ 159.729340][ T4933] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 159.738440][ T4933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.746578][ T36] audit: type=1400 audit(1779465699.355:681372): avc: denied { audit_control } for pid=4992 comm="syz.1.1645" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.768538][ T4933] usb 3-1: Product: syz [ 159.772966][ T4933] usb 3-1: Manufacturer: syz [ 159.777579][ T4933] usb 3-1: SerialNumber: syz [ 159.840410][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.848982][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 159.862396][ T310] usb 4-1: string descriptor 0 read error: -22 [ 159.868642][ T310] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 159.877758][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.978997][ T66] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 159.991327][ T36] audit: type=1400 audit(1779465699.615:681373): avc: denied { mount } for pid=4971 comm="syz.2.1637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.021653][ T4072] usb 1-1: USB disconnect, device number 28 [ 160.036675][ T4933] usb-storage 3-1:2.222: USB Mass Storage device detected [ 160.037157][ T4998] FAULT_INJECTION: forcing a failure. [ 160.037157][ T4998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.049823][ T4933] usb-storage 3-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 160.057268][ T4998] CPU: 0 UID: 0 PID: 4998 Comm: syz.0.1647 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 160.057297][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.057309][ T4998] Call Trace: [ 160.057315][ T4998] [ 160.057322][ T4998] __dump_stack+0x21/0x30 [ 160.057354][ T4998] dump_stack_lvl+0x140/0x1c0 [ 160.057380][ T4998] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.057407][ T4998] ? check_stack_object+0x106/0x150 [ 160.057428][ T4998] dump_stack+0x19/0x20 [ 160.057452][ T4998] should_fail_ex+0x3d7/0x530 [ 160.057470][ T4998] should_fail+0xf/0x20 [ 160.057487][ T4998] should_fail_usercopy+0x1e/0x30 [ 160.057506][ T4998] _copy_from_user+0x20/0xa0 [ 160.057527][ T4998] kstrtouint_from_user+0xde/0x170 [ 160.057555][ T4998] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 160.057582][ T4998] ? 0xffffffff81000000 [ 160.057597][ T4998] proc_loginuid_write+0x1c4/0x2d0 [ 160.057623][ T4998] ? __cfi_proc_loginuid_write+0x10/0x10 [ 160.057648][ T4998] ? bpf_lsm_file_permission+0xd/0x20 [ 160.057673][ T4998] vfs_writev+0x650/0xe50 [ 160.057696][ T4998] ? __cfi_proc_loginuid_write+0x10/0x10 [ 160.057721][ T4998] ? do_writev+0x2e0/0x2e0 [ 160.057745][ T4998] ? __cfi_mutex_unlock+0x10/0x10 [ 160.057770][ T4998] __x64_sys_pwritev+0x1a6/0x2c0 [ 160.057792][ T4998] ? __cfi___x64_sys_pwritev+0x10/0x10 [ 160.057812][ T4998] ? __kasan_check_read+0x15/0x20 [ 160.057832][ T4998] x64_sys_call+0x29bc/0x2ee0 [ 160.057850][ T4998] do_syscall_64+0x57/0xf0 [ 160.057868][ T4998] ? clear_bhb_loop+0x50/0xa0 [ 160.057890][ T4998] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.057911][ T4998] RIP: 0033:0x7fdc99f9ce59 [ 160.057926][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.057943][ T4998] RSP: 002b:00007fdc989f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 160.057965][ T4998] RAX: ffffffffffffffda RBX: 00007fdc9a215fa0 RCX: 00007fdc99f9ce59 [ 160.057980][ T4998] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 160.057992][ T4998] RBP: 00007fdc989f7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.058004][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.058016][ T4998] R13: 00007fdc9a216038 R14: 00007fdc9a215fa0 R15: 00007fff4b9c0618 [ 160.058033][ T4998] [ 160.092632][ T5006] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1650'. [ 160.101508][ T4933] usb-storage 3-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 160.101508][ T4933] Please send a copy of this message to and [ 160.132859][ T66] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 160.333679][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.340073][ T66] usb 2-1: can't read configurations, error -22 [ 160.350004][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.374143][ T4981] veth1: entered allmulticast mode [ 160.379029][ T4933] usb 3-1: USB disconnect, device number 30 [ 160.423585][ T5011] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1652'. [ 160.479031][ T66] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 160.558146][ T36] audit: type=1400 audit(1779465700.175:681374): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.585437][ T4980] veth1: left allmulticast mode [ 160.587919][ T36] audit: type=1400 audit(1779465700.205:681375): avc: denied { connect } for pid=5016 comm="syz.2.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.611461][ T310] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 160.622571][ T310] usb 4-1: USB disconnect, device number 23 [ 160.640783][ T66] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 160.650057][ T66] usb 2-1: can't read configurations, error -22 [ 160.659895][ T66] usb usb2-port1: attempt power cycle [ 160.829061][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 160.979017][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 160.985584][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.995482][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 161.004588][ T66] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 161.012198][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.020294][ T10] usb 3-1: Product: syz [ 161.024529][ T10] usb 3-1: Manufacturer: syz [ 161.029178][ T10] usb 3-1: SerialNumber: syz [ 161.040766][ T66] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 161.048712][ T66] usb 2-1: can't read configurations, error -22 [ 161.179032][ T66] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 161.184229][ T36] audit: type=1400 audit(1779465700.805:681376): avc: denied { create } for pid=5031 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 161.202457][ T66] usb 2-1: device descriptor read/8, error -71 [ 161.208126][ T36] audit: type=1404 audit(1779465700.805:681377): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 161.236334][ T10] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 161.243895][ T10] usb 3-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 161.251326][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 161.261067][ T10] usb 3-1: unit 3 not found! [ 161.273466][ T10] usb 3-1: USB disconnect, device number 31 [ 161.339582][ T66] usb 2-1: device descriptor read/8, error -71 [ 161.449088][ T66] usb usb2-port1: unable to enumerate USB device [ 161.746123][ T5040] FAULT_INJECTION: forcing a failure. [ 161.746123][ T5040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.759476][ T5040] CPU: 0 UID: 0 PID: 5040 Comm: syz.1.1662 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 161.759513][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.759522][ T5040] Call Trace: [ 161.759526][ T5040] [ 161.759532][ T5040] __dump_stack+0x21/0x30 [ 161.759555][ T5040] dump_stack_lvl+0x140/0x1c0 [ 161.759571][ T5040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.759588][ T5040] ? _parse_integer_limit+0x195/0x1e0 [ 161.759606][ T5040] ? check_stack_object+0x106/0x150 [ 161.759619][ T5040] dump_stack+0x19/0x20 [ 161.759634][ T5040] should_fail_ex+0x3d7/0x530 [ 161.759646][ T5040] should_fail+0xf/0x20 [ 161.759656][ T5040] should_fail_usercopy+0x1e/0x30 [ 161.759674][ T5040] _copy_from_user+0x20/0xa0 [ 161.759687][ T5040] kstrtouint_from_user+0xde/0x170 [ 161.759704][ T5040] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 161.759721][ T5040] ? 0xffffffff81000000 [ 161.759730][ T5040] ? audit_set_loginuid+0x3a8/0x5d0 [ 161.759744][ T5040] proc_loginuid_write+0x1c4/0x2d0 [ 161.759761][ T5040] ? __cfi_proc_loginuid_write+0x10/0x10 [ 161.759776][ T5040] ? iov_iter_advance+0x12f/0x1e0 [ 161.759791][ T5040] vfs_writev+0x650/0xe50 [ 161.759805][ T5040] ? __cfi_proc_loginuid_write+0x10/0x10 [ 161.759821][ T5040] ? do_writev+0x2e0/0x2e0 [ 161.759836][ T5040] ? __cfi_mutex_unlock+0x10/0x10 [ 161.759852][ T5040] __x64_sys_pwritev+0x1a6/0x2c0 [ 161.759866][ T5040] ? __cfi___x64_sys_pwritev+0x10/0x10 [ 161.759879][ T5040] ? __kasan_check_read+0x15/0x20 [ 161.759892][ T5040] x64_sys_call+0x29bc/0x2ee0 [ 161.759904][ T5040] do_syscall_64+0x57/0xf0 [ 161.759916][ T5040] ? clear_bhb_loop+0x50/0xa0 [ 161.759930][ T5040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.759947][ T5040] RIP: 0033:0x7fdc2cd9ce59 [ 161.759962][ T5040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.759977][ T5040] RSP: 002b:00007fdc2dc73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 161.759998][ T5040] RAX: ffffffffffffffda RBX: 00007fdc2d015fa0 RCX: 00007fdc2cd9ce59 [ 161.760009][ T5040] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 161.760017][ T5040] RBP: 00007fdc2dc73090 R08: 0000000000000000 R09: 0000000000000000 [ 161.760025][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.760033][ T5040] R13: 00007fdc2d016038 R14: 00007fdc2d015fa0 R15: 00007ffe0779ca08 [ 161.760043][ T5040] [ 162.045919][ T5055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=207 sclass=netlink_route_socket pid=5055 comm=syz.0.1668 [ 162.564167][ T5084] netlink: 'syz.1.1680': attribute type 4 has an invalid length. [ 163.290566][ T36] kauditd_printk_skb: 154 callbacks suppressed [ 163.290586][ T36] audit: type=1400 audit(1779465702.915:681526): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.321112][ T36] audit: type=1400 audit(1779465702.915:681527): avc: denied { create } for pid=5143 comm="syz.2.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 163.337670][ T5156] FAULT_INJECTION: forcing a failure. [ 163.337670][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 163.341784][ T36] audit: type=1400 audit(1779465702.925:681528): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.354566][ T5156] CPU: 1 UID: 0 PID: 5156 Comm: syz.2.1706 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 163.354594][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.354606][ T5156] Call Trace: [ 163.354612][ T5156] [ 163.354621][ T5156] __dump_stack+0x21/0x30 [ 163.354653][ T5156] dump_stack_lvl+0x140/0x1c0 [ 163.354679][ T5156] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.354706][ T5156] dump_stack+0x19/0x20 [ 163.354731][ T5156] should_fail_ex+0x3d7/0x530 [ 163.354750][ T5156] should_failslab+0xac/0x100 [ 163.354773][ T5156] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 163.354795][ T5156] ? sidtab_sid2str_get+0x135/0x360 [ 163.354822][ T5156] kmemdup_noprof+0x31/0x80 [ 163.354849][ T5156] sidtab_sid2str_get+0x135/0x360 [ 163.354875][ T5156] security_sid_to_context_core+0x30d/0x5d0 [ 163.354900][ T5156] security_sid_to_context+0x2e/0x50 [ 163.354924][ T5156] avc_audit_post_callback+0x117/0x790 [ 163.354945][ T5156] ? audit_log_format+0xe9/0x160 [ 163.354963][ T5156] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.354984][ T5156] ? __cfi_audit_log_format+0x10/0x10 [ 163.355003][ T5156] ? audit_log_untrustedstring+0xea/0x100 [ 163.355022][ T5156] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.355043][ T5156] common_lsm_audit+0x14ef/0x18e0 [ 163.355063][ T5156] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.355084][ T5156] ? __cfi_common_lsm_audit+0x10/0x10 [ 163.355103][ T5156] ? selinux_file_open+0x46c/0x630 [ 163.355122][ T5156] ? __cfi_selinux_file_open+0x10/0x10 [ 163.355140][ T5156] slow_avc_audit+0x19f/0x220 [ 163.355168][ T5156] ? __cfi_slow_avc_audit+0x10/0x10 [ 163.355188][ T5156] ? avc_denied+0xae/0x180 [ 163.355208][ T5156] ? avc_has_perm_noaudit+0x2bd/0x360 [ 163.355230][ T5156] cred_has_capability+0x224/0x3a0 [ 163.355256][ T5156] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.355280][ T5156] ? selinux_perf_event_alloc+0x110/0x110 [ 163.355308][ T5156] ? kstrtoull+0x13b/0x1e0 [ 163.355335][ T5156] selinux_capable+0x38/0x50 [ 163.355357][ T5156] security_capable+0x9d/0x130 [ 163.355376][ T5156] capable+0x71/0xf0 [ 163.355393][ T5156] audit_set_loginuid+0xb9/0x5d0 [ 163.355413][ T5156] proc_loginuid_write+0x277/0x2d0 [ 163.355439][ T5156] ? __cfi_proc_loginuid_write+0x10/0x10 [ 163.355465][ T5156] ? iov_iter_advance+0x12f/0x1e0 [ 163.355487][ T5156] vfs_writev+0x650/0xe50 [ 163.355515][ T5156] ? __cfi_proc_loginuid_write+0x10/0x10 [ 163.355540][ T5156] ? do_writev+0x2e0/0x2e0 [ 163.355563][ T5156] ? __cfi_mutex_unlock+0x10/0x10 [ 163.355589][ T5156] __x64_sys_pwritev+0x1a6/0x2c0 [ 163.355610][ T5156] ? __cfi___x64_sys_pwritev+0x10/0x10 [ 163.355631][ T5156] ? __kasan_check_read+0x15/0x20 [ 163.355650][ T5156] x64_sys_call+0x29bc/0x2ee0 [ 163.355668][ T5156] do_syscall_64+0x57/0xf0 [ 163.355686][ T5156] ? clear_bhb_loop+0x50/0xa0 [ 163.355707][ T5156] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.355728][ T5156] RIP: 0033:0x7f661939ce59 [ 163.355745][ T5156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.355761][ T5156] RSP: 002b:00007f6617df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 163.355782][ T5156] RAX: ffffffffffffffda RBX: 00007f6619615fa0 RCX: 00007f661939ce59 [ 163.355797][ T5156] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 163.355810][ T5156] RBP: 00007f6617df7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.355822][ T5156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.355834][ T5156] R13: 00007f6619616038 R14: 00007f6619615fa0 R15: 00007ffca8d913a8 [ 163.355850][ T5156] [ 163.732402][ T36] audit: type=1400 audit(1779465702.935:681529): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.756695][ T36] audit: type=1400 audit(1779465702.945:681530): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.777614][ T36] audit: type=1400 audit(1779465702.945:681531): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.799096][ T36] audit: type=1400 audit(1779465702.945:681532): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.820073][ T36] audit: type=1400 audit(1779465702.945:681533): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.840921][ T36] audit: type=1400 audit(1779465702.945:681534): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.861831][ T36] audit: type=1400 audit(1779465702.945:681535): avc: denied { create } for pid=5150 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 163.948226][ T5175] FAULT_INJECTION: forcing a failure. [ 163.948226][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 163.960935][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz.3.1715 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 163.960972][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.960985][ T5175] Call Trace: [ 163.960993][ T5175] [ 163.961001][ T5175] __dump_stack+0x21/0x30 [ 163.961025][ T5175] dump_stack_lvl+0x140/0x1c0 [ 163.961049][ T5175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.961066][ T5175] ? skb_put+0x112/0x1f0 [ 163.961081][ T5175] dump_stack+0x19/0x20 [ 163.961097][ T5175] should_fail_ex+0x3d7/0x530 [ 163.961109][ T5175] should_failslab+0xac/0x100 [ 163.961124][ T5175] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 163.961138][ T5175] ? sidtab_sid2str_get+0x135/0x360 [ 163.961170][ T5175] ? sidtab_sid2str_put+0x6a9/0x6c0 [ 163.961186][ T5175] kmemdup_noprof+0x31/0x80 [ 163.961203][ T5175] sidtab_sid2str_get+0x135/0x360 [ 163.961219][ T5175] security_sid_to_context_core+0x30d/0x5d0 [ 163.961235][ T5175] security_sid_to_context+0x2e/0x50 [ 163.961250][ T5175] avc_audit_post_callback+0x1a8/0x790 [ 163.961264][ T5175] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.961277][ T5175] ? __cfi_audit_log_format+0x10/0x10 [ 163.961290][ T5175] ? audit_log_untrustedstring+0xea/0x100 [ 163.961302][ T5175] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.961319][ T5175] common_lsm_audit+0x14ef/0x18e0 [ 163.961332][ T5175] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 163.961345][ T5175] ? __cfi_common_lsm_audit+0x10/0x10 [ 163.961357][ T5175] ? selinux_file_open+0x46c/0x630 [ 163.961369][ T5175] ? __cfi_selinux_file_open+0x10/0x10 [ 163.961381][ T5175] slow_avc_audit+0x19f/0x220 [ 163.961394][ T5175] ? __cfi_slow_avc_audit+0x10/0x10 [ 163.961406][ T5175] ? avc_denied+0xae/0x180 [ 163.961418][ T5175] ? avc_has_perm_noaudit+0x2bd/0x360 [ 163.961432][ T5175] cred_has_capability+0x224/0x3a0 [ 163.961449][ T5175] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.961465][ T5175] ? selinux_perf_event_alloc+0x110/0x110 [ 163.961482][ T5175] ? kstrtoull+0x13b/0x1e0 [ 163.961499][ T5175] selinux_capable+0x38/0x50 [ 163.961513][ T5175] security_capable+0x9d/0x130 [ 163.961525][ T5175] capable+0x71/0xf0 [ 163.961537][ T5175] audit_set_loginuid+0xb9/0x5d0 [ 163.961550][ T5175] proc_loginuid_write+0x277/0x2d0 [ 163.961566][ T5175] ? __cfi_proc_loginuid_write+0x10/0x10 [ 163.961582][ T5175] ? iov_iter_advance+0x12f/0x1e0 [ 163.961596][ T5175] vfs_writev+0x650/0xe50 [ 163.961611][ T5175] ? __cfi_proc_loginuid_write+0x10/0x10 [ 163.961627][ T5175] ? do_writev+0x2e0/0x2e0 [ 163.961641][ T5175] ? __cfi_mutex_unlock+0x10/0x10 [ 163.961658][ T5175] __x64_sys_pwritev+0x1a6/0x2c0 [ 163.961672][ T5175] ? __cfi___x64_sys_pwritev+0x10/0x10 [ 163.961685][ T5175] ? __kasan_check_read+0x15/0x20 [ 163.961697][ T5175] x64_sys_call+0x29bc/0x2ee0 [ 163.961709][ T5175] do_syscall_64+0x57/0xf0 [ 163.961721][ T5175] ? clear_bhb_loop+0x50/0xa0 [ 163.961736][ T5175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.961750][ T5175] RIP: 0033:0x7f1c03b9ce59 [ 163.961762][ T5175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.961773][ T5175] RSP: 002b:00007f1c04b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 163.961788][ T5175] RAX: ffffffffffffffda RBX: 00007f1c03e15fa0 RCX: 00007f1c03b9ce59 [ 163.961799][ T5175] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 163.961808][ T5175] RBP: 00007f1c04b03090 R08: 0000000000000000 R09: 0000000000000000 [ 163.961817][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.961825][ T5175] R13: 00007f1c03e16038 R14: 00007f1c03e15fa0 R15: 00007ffcb7932708 [ 163.961837][ T5175] [ 164.773499][ T5201] FAULT_INJECTION: forcing a failure. [ 164.773499][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.786631][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.1.1725 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 164.786665][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.786677][ T5201] Call Trace: [ 164.786684][ T5201] [ 164.786693][ T5201] __dump_stack+0x21/0x30 [ 164.786728][ T5201] dump_stack_lvl+0x140/0x1c0 [ 164.786755][ T5201] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.786774][ T5201] ? check_stack_object+0x12b/0x150 [ 164.786790][ T5201] dump_stack+0x19/0x20 [ 164.786805][ T5201] should_fail_ex+0x3d7/0x530 [ 164.786817][ T5201] should_fail+0xf/0x20 [ 164.786827][ T5201] should_fail_usercopy+0x1e/0x30 [ 164.786839][ T5201] _copy_to_user+0x24/0xa0 [ 164.786852][ T5201] simple_read_from_buffer+0xed/0x160 [ 164.786868][ T5201] proc_fail_nth_read+0x1aa/0x220 [ 164.786884][ T5201] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.786907][ T5201] ? iov_iter_advance+0x12f/0x1e0 [ 164.786921][ T5201] ? bpf_lsm_file_permission+0xd/0x20 [ 164.786936][ T5201] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.786952][ T5201] vfs_read+0x286/0xcb0 [ 164.786964][ T5201] ? do_writev+0x2e0/0x2e0 [ 164.786978][ T5201] ? __cfi_vfs_read+0x10/0x10 [ 164.786989][ T5201] ? __kasan_check_write+0x18/0x20 [ 164.787002][ T5201] ? mutex_lock+0x97/0x1d0 [ 164.787016][ T5201] ? __cfi_mutex_lock+0x10/0x10 [ 164.787030][ T5201] ? __fget_files+0x2c5/0x340 [ 164.787044][ T5201] ksys_read+0x145/0x260 [ 164.787055][ T5201] ? fput+0x1a4/0x240 [ 164.787069][ T5201] ? __cfi_ksys_read+0x10/0x10 [ 164.787085][ T5201] ? __x64_sys_pwritev+0x1e4/0x2c0 [ 164.787099][ T5201] ? __kasan_check_read+0x15/0x20 [ 164.787111][ T5201] __x64_sys_read+0x7f/0x90 [ 164.787122][ T5201] x64_sys_call+0x2638/0x2ee0 [ 164.787134][ T5201] do_syscall_64+0x57/0xf0 [ 164.787148][ T5201] ? clear_bhb_loop+0x50/0xa0 [ 164.787162][ T5201] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.787175][ T5201] RIP: 0033:0x7fdc2cd5d68e [ 164.787186][ T5201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.787197][ T5201] RSP: 002b:00007fdc2dc72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.787212][ T5201] RAX: ffffffffffffffda RBX: 00007fdc2dc736c0 RCX: 00007fdc2cd5d68e [ 164.787222][ T5201] RDX: 000000000000000f RSI: 00007fdc2dc730a0 RDI: 0000000000000004 [ 164.787230][ T5201] RBP: 00007fdc2dc73090 R08: 0000000000000000 R09: 0000000000000000 [ 164.787238][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.787246][ T5201] R13: 00007fdc2d016038 R14: 00007fdc2d015fa0 R15: 00007ffe0779ca08 [ 164.787257][ T5201] [ 167.442215][ T4183] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.845171][ T5294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1762'. [ 168.359366][ T36] kauditd_printk_skb: 262 callbacks suppressed [ 168.359384][ T36] audit: type=1400 audit(1779465707.985:681798): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.390121][ T36] audit: type=1400 audit(1779465707.985:681799): avc: denied { create } for pid=5315 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 168.410326][ T36] audit: type=1400 audit(1779465707.985:681800): avc: denied { create } for pid=5315 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 168.430318][ T36] audit: type=1400 audit(1779465707.985:681801): avc: denied { read write } for pid=5315 comm="syz.1.1772" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 168.454494][ T36] audit: type=1400 audit(1779465707.995:681802): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.479203][ T36] audit: type=1400 audit(1779465708.015:681803): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.503701][ T36] audit: type=1400 audit(1779465708.015:681804): avc: denied { read write } for pid=5323 comm="syz.1.1774" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 168.527134][ T36] audit: type=1400 audit(1779465708.015:681805): avc: denied { read } for pid=5323 comm="syz.1.1774" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 168.548645][ T36] audit: type=1400 audit(1779465708.025:681806): avc: denied { read write } for pid=5323 comm="syz.1.1774" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 168.653734][ T36] audit: type=1400 audit(1779465708.275:681807): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.674701][ T5328] syzkaller1: entered promiscuous mode [ 168.683484][ T5328] syzkaller1: entered allmulticast mode [ 169.327688][ T5356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5356 comm=syz.3.1786 [ 169.448958][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.833279][ T5367] netlink: 'syz.1.1791': attribute type 16 has an invalid length. [ 169.841203][ T5367] netlink: 'syz.1.1791': attribute type 3 has an invalid length. [ 169.849069][ T5367] netlink: 'syz.1.1791': attribute type 2 has an invalid length. [ 169.856863][ T5367] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 169.864656][ T5367] netlink: 64022 bytes leftover after parsing attributes in process `syz.1.1791'. [ 173.147984][ T5432] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1816'. [ 173.952415][ T36] kauditd_printk_skb: 205 callbacks suppressed [ 173.952433][ T36] audit: type=1400 audit(1779465713.575:682013): avc: denied { execmem } for pid=5438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 173.993691][ T36] audit: type=1326 audit(1779465713.575:682014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.019342][ T36] audit: type=1326 audit(1779465713.575:682015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.045027][ T36] audit: type=1326 audit(1779465713.575:682016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.070719][ T36] audit: type=1400 audit(1779465713.575:682017): avc: denied { read } for pid=5440 comm="syz.2.1820" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 174.093645][ T36] audit: type=1326 audit(1779465713.575:682018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.119211][ T36] audit: type=1326 audit(1779465713.575:682019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.144618][ T36] audit: type=1326 audit(1779465713.575:682020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.170279][ T36] audit: type=1326 audit(1779465713.575:682021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 174.195749][ T36] audit: type=1326 audit(1779465713.575:682022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5440 comm="syz.2.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661939ce59 code=0x7ffc0000 [ 175.929219][ T5467] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1829'. [ 179.577376][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 179.577398][ T36] audit: type=1400 audit(1779465719.195:682084): avc: denied { execmem } for pid=5489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 179.604020][ T36] audit: type=1400 audit(1779465719.195:682085): avc: denied { read write } for pid=5493 comm="syz.1.1836" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 179.628004][ T36] audit: type=1400 audit(1779465719.195:682086): avc: denied { read } for pid=5490 comm="syz.2.1837" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 179.649395][ T36] audit: type=1400 audit(1779465719.195:682087): avc: denied { create } for pid=5491 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 179.670013][ T36] audit: type=1400 audit(1779465719.205:682088): avc: denied { create } for pid=5491 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 179.690650][ T36] audit: type=1400 audit(1779465719.205:682089): avc: denied { create } for pid=5491 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 179.711101][ T36] audit: type=1400 audit(1779465719.205:682090): avc: denied { create } for pid=5491 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 179.731565][ T36] audit: type=1400 audit(1779465719.245:682091): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.755737][ T36] audit: type=1400 audit(1779465719.245:682092): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.084511][ T36] audit: type=1400 audit(1779465719.705:682093): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.999972][ T5502] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1839'. [ 182.511728][ T5509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5509 comm=syz.3.1844 [ 182.525113][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 182.535532][ T5509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5509 comm=syz.3.1844 [ 185.835272][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 185.835292][ T36] audit: type=1400 audit(1779465725.455:682136): avc: denied { execmem } for pid=5523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 185.861013][ T36] audit: type=1400 audit(1779465725.455:682137): avc: denied { create } for pid=5526 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 185.881845][ T36] audit: type=1400 audit(1779465725.465:682138): avc: denied { create } for pid=5526 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 185.905065][ T36] audit: type=1400 audit(1779465725.465:682139): avc: denied { create } for pid=5526 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 185.925514][ T36] audit: type=1400 audit(1779465725.465:682140): avc: denied { create } for pid=5526 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 185.946062][ T36] audit: type=1400 audit(1779465725.465:682141): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.970431][ T36] audit: type=1400 audit(1779465725.475:682142): avc: denied { read } for pid=5524 comm="syz.1.1848" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 185.993314][ T36] audit: type=1400 audit(1779465725.475:682143): avc: denied { create } for pid=5524 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 186.013889][ T36] audit: type=1400 audit(1779465725.475:682144): avc: denied { create } for pid=5524 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 186.034490][ T36] audit: type=1400 audit(1779465725.485:682145): avc: denied { name_bind } for pid=5525 comm="syz.2.1849" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 191.576352][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 191.576370][ T36] audit: type=1400 audit(1779465731.195:682172): avc: denied { execmem } for pid=5548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 191.605877][ T36] audit: type=1400 audit(1779465731.195:682173): avc: denied { read } for pid=5549 comm="syz.2.1858" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 191.659921][ T36] audit: type=1400 audit(1779465731.205:682174): avc: denied { read } for pid=5549 comm="syz.2.1858" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 191.714895][ T36] audit: type=1400 audit(1779465731.205:682175): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.749618][ T36] audit: type=1400 audit(1779465731.205:682176): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.770457][ T36] audit: type=1400 audit(1779465731.205:682177): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.791414][ T36] audit: type=1400 audit(1779465731.205:682178): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.828924][ T36] audit: type=1400 audit(1779465731.205:682179): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.859040][ T36] audit: type=1400 audit(1779465731.205:682180): avc: denied { create } for pid=5549 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.902535][ T36] audit: type=1400 audit(1779465731.205:682181): avc: denied { read write } for pid=5549 comm="syz.2.1858" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 192.051722][ T4209] veth1_macvtap: left promiscuous mode [ 192.057250][ T4209] : left promiscuous mode [ 192.270250][ T4209] ------------[ cut here ]------------ [ 192.275742][ T4209] WARNING: CPU: 0 PID: 4209 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 192.286000][ T4209] Modules linked in: [ 192.289949][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: kworker/u8:35 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 192.301816][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.312028][ T4209] Workqueue: netns cleanup_net [ 192.316820][ T4209] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 192.322878][ T4209] Code: e8 d1 f9 d2 fc 4b 83 3c 3e 00 75 19 e8 05 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 f7 6d 7a fc 49 83 c7 08 eb c9 e8 ec 6d 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 192.342642][ T4209] RSP: 0018:ffffc9000c05fb90 EFLAGS: 00010293 [ 192.348765][ T4209] RAX: ffffffff850d55b4 RBX: ffff8881248191c0 RCX: ffff888116a09300 [ 192.357516][ T4209] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bc80b8 [ 192.365599][ T4209] RBP: ffffc9000c05fbb0 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 192.373810][ T4209] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: dffffc0000000000 [ 192.381876][ T4209] R13: dffffc0000000000 R14: ffff888103bc8000 R15: 00000000000000b8 [ 192.389949][ T4209] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 192.399031][ T4209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.405626][ T4209] CR2: 00007fdc2cdea540 CR3: 000000010bff4000 CR4: 00000000003526b0 [ 192.413664][ T4209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.421789][ T4209] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 192.429890][ T4209] Call Trace: [ 192.433188][ T4209] [ 192.436116][ T4209] cleanup_net+0x6bd/0xc90 [ 192.440577][ T4209] ? __cfi_cleanup_net+0x10/0x10 [ 192.445554][ T4209] process_scheduled_works+0x7d4/0x1020 [ 192.451125][ T4209] worker_thread+0xc51/0x1370 [ 192.455818][ T4209] kthread+0x2c9/0x370 [ 192.459913][ T4209] ? __cfi_worker_thread+0x10/0x10 [ 192.465044][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.469662][ T4209] ret_from_fork+0x67/0xa0 [ 192.474116][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.478701][ T4209] ret_from_fork_asm+0x1a/0x30 [ 192.483498][ T4209] [ 192.486529][ T4209] ---[ end trace 0000000000000000 ]--- [ 192.492328][ T4209] ------------[ cut here ]------------ [ 192.497790][ T4209] WARNING: CPU: 1 PID: 4209 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 192.508003][ T4209] Modules linked in: [ 192.511935][ T4209] CPU: 1 UID: 0 PID: 4209 Comm: kworker/u8:35 Tainted: G W syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 192.525425][ T4209] Tainted: [W]=WARN [ 192.529253][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.539346][ T4209] Workqueue: netns cleanup_net [ 192.544128][ T4209] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 192.550239][ T4209] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 6d 7a fc 49 81 ff f8 07 00 00 74 1b e8 a2 6d 7a fc 49 83 c7 08 eb c5 e8 97 6d 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 6d 7a fc 5b 41 5c 41 5e 41 [ 192.569902][ T4209] RSP: 0018:ffffc9000c05fb90 EFLAGS: 00010293 [ 192.575985][ T4209] RAX: ffffffff850d5609 RBX: ffff888103bc8800 RCX: ffff888116a09300 [ 192.584033][ T4209] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bc8808 [ 192.592061][ T4209] RBP: ffffc9000c05fbb0 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 192.600113][ T4209] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: dffffc0000000000 [ 192.608121][ T4209] R13: dffffc0000000000 R14: ffff888103bc8000 R15: 0000000000000008 [ 192.616150][ T4209] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 192.625124][ T4209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.631769][ T4209] CR2: 000055bc8eb33af8 CR3: 000000010bff4000 CR4: 00000000003526b0 [ 192.639842][ T4209] Call Trace: [ 192.643145][ T4209] [ 192.646080][ T4209] cleanup_net+0x6bd/0xc90 [ 192.650641][ T4209] ? __cfi_cleanup_net+0x10/0x10 [ 192.655609][ T4209] process_scheduled_works+0x7d4/0x1020 [ 192.661227][ T4209] worker_thread+0xc51/0x1370 [ 192.665950][ T4209] kthread+0x2c9/0x370 [ 192.670079][ T4209] ? __cfi_worker_thread+0x10/0x10 [ 192.675273][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.679919][ T4209] ret_from_fork+0x67/0xa0 [ 192.684356][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.688988][ T4209] ret_from_fork_asm+0x1a/0x30 [ 192.693856][ T4209] [ 192.696866][ T4209] ---[ end trace 0000000000000000 ]--- [ 192.704762][ T4209] ------------[ cut here ]------------ [ 192.710252][ T4209] WARNING: CPU: 1 PID: 4209 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 192.719830][ T4209] Modules linked in: [ 192.723745][ T4209] CPU: 1 UID: 0 PID: 4209 Comm: kworker/u8:35 Tainted: G W syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 192.737067][ T4209] Tainted: [W]=WARN [ 192.740898][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.750970][ T4209] Workqueue: netns cleanup_net [ 192.755783][ T4209] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 192.761354][ T4209] Code: 3c 20 00 74 08 48 89 df e8 3f c6 ed fc 48 8b 3b e8 07 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 3a 95 fc <0f> 0b e9 b0 fd ff ff e8 56 3a 95 fc 0f 0b e9 18 fe ff ff e8 4a 3a [ 192.781093][ T4209] RSP: 0018:ffffc9000c05fb70 EFLAGS: 00010293 [ 192.787165][ T4209] RAX: ffffffff84f2893e RBX: ffff8881248191c0 RCX: ffff888116a09300 [ 192.795152][ T4209] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888116a09300 [ 192.803161][ T4209] RBP: ffffc9000c05fb98 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 192.811161][ T4209] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: 1ffffffff0fa8f80 [ 192.819172][ T4209] R13: dffffc0000000000 R14: ffff888124819dc0 R15: dffffc0000000000 [ 192.827148][ T4209] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 192.836128][ T4209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.842866][ T4209] CR2: 000055bc8eb33af8 CR3: 000000010bff4000 CR4: 00000000003526b0 [ 192.850886][ T4209] Call Trace: [ 192.854178][ T4209] [ 192.857120][ T4209] xfrm_net_exit+0x31/0x80 [ 192.861589][ T4209] cleanup_net+0x6bd/0xc90 [ 192.866107][ T4209] ? __cfi_cleanup_net+0x10/0x10 [ 192.871073][ T4209] process_scheduled_works+0x7d4/0x1020 [ 192.876634][ T4209] worker_thread+0xc51/0x1370 [ 192.881332][ T4209] kthread+0x2c9/0x370 [ 192.885414][ T4209] ? __cfi_worker_thread+0x10/0x10 [ 192.890543][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.895147][ T4209] ret_from_fork+0x67/0xa0 [ 192.899613][ T4209] ? __cfi_kthread+0x10/0x10 [ 192.904308][ T4209] ret_from_fork_asm+0x1a/0x30 [ 192.909094][ T4209] [ 192.912120][ T4209] ---[ end trace 0000000000000000 ]--- [ 192.930655][ T4209] bridge_slave_1: left allmulticast mode [ 192.936409][ T4209] bridge_slave_1: left promiscuous mode [ 192.942373][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.950059][ T4209] bridge_slave_0: left allmulticast mode [ 192.955800][ T4209] bridge_slave_0: left promiscuous mode [ 192.961473][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.111018][ T4209] veth1_macvtap: left promiscuous mode [ 196.578937][ T36] kauditd_printk_skb: 32281 callbacks suppressed [ 196.578957][ T36] audit: type=1400 audit(1779465736.195:714463): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.586030][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.607264][ T36] audit: type=1400 audit(1779465736.205:714464): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.613609][ T149] audit: audit_lost=12144 audit_rate_limit=0 audit_backlog_limit=64 [ 196.634976][ T36] audit: type=1400 audit(1779465736.205:714465): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.642719][ T149] audit: backlog limit exceeded [ 196.642993][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.663996][ T36] audit: type=1400 audit(1779465736.205:714466): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.669019][ T149] audit: audit_lost=12145 audit_rate_limit=0 audit_backlog_limit=64 [ 196.675390][ T36] audit: type=1400 audit(1779465736.205:714467): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.588899][ T36] kauditd_printk_skb: 49904 callbacks suppressed [ 201.588917][ T36] audit: type=1400 audit(1779465741.205:762892): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.595960][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.616587][ T36] audit: type=1400 audit(1779465741.215:762893): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.623038][ T149] audit: audit_lost=12639 audit_rate_limit=0 audit_backlog_limit=64 [ 201.644855][ T36] audit: type=1400 audit(1779465741.215:762894): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.652368][ T149] audit: backlog limit exceeded [ 201.673544][ T36] audit: type=1400 audit(1779465741.215:762895): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.678787][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.699528][ T36] audit: type=1400 audit(1779465741.215:762896): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.705961][ T149] audit: audit_lost=12640 audit_rate_limit=0 audit_backlog_limit=64