last executing test programs: 1m4.498925388s ago: executing program 3 (id=163): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000c40)=@ethtool_per_queue_op={0x2d, 0xe, [0x8, 0x7, 0x9, 0x70, 0x1, 0xffff7fff, 0x5, 0xa, 0x5, 0x9, 0x5, 0x2, 0x3, 0xeac5, 0xea9f, 0xfff, 0x1, 0x70, 0xb58f41d, 0x7ff, 0x7, 0x7fffffff, 0x14, 0x1000024e, 0x10001, 0xf, 0x200009, 0x6, 0xc4, 0x9, 0x61cb, 0x1f34d744, 0x7, 0x9, 0xc6, 0xfffffffe, 0x4, 0x1, 0x3, 0x270, 0xb5fd, 0x8001, 0xa0, 0x1, 0x8, 0x2008000, 0xfff, 0x27, 0x0, 0x3, 0x7fffffff, 0x2, 0xfffffffe, 0x3, 0xfffffffe, 0x2, 0x800, 0x8, 0x3ff, 0x4, 0x8, 0x100, 0xd, 0x8000, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5, 0xfffffffe, 0x7a, 0xc, 0x0, 0x1000, 0xffff, 0x200004, 0x10000, 0x100, 0x2002, 0x5, 0x2, 0xb86, 0x8, 0x5fb0, 0x4, 0x40, 0x0, 0xe, 0x3, 0x5, 0xffffe8bb, 0x1, 0x7fff, 0x7, 0x8c81, 0x6, 0x1, 0x8, 0x2, 0x4, 0x10001, 0xff, 0x80000000, 0xfffffc00, 0x9, 0x10000, 0x40, 0x9, 0x9, 0xa3c, 0x8b4c, 0x10, 0xa, 0x10, 0xec, 0x4, 0x8fe7, 0x0, 0xe, 0xfffffffc, 0x5, 0x3, 0x81, 0x36, 0x6, 0xae5, 0xe]}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r9, 0x0, r7, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4000044) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) r11 = dup3(r1, r0, 0x0) connect$unix(r11, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x20048030) 1m4.482385438s ago: executing program 3 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x54, [{0x19, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x1, "78b41b9af53b"}]}}}}}}}, 0x1a2) 1m4.37720633s ago: executing program 3 (id=165): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000600), 0x0, 0xff, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2b7, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000001740), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m4.37693769s ago: executing program 3 (id=166): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="9201100181acd840f60d56004bd20102030109022400017f00500f0904390002d99d712c09058202200007050209050c02ff03030c09"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000580)={&(0x7f00000004c0)="ad5a513e77977a3093a7a8b69331d6c204028d1cf587c6ba0c60c43b6e69f8662a0c0b984f540163df903da19cda1204f4a3edbf4eeef1ea06723294b6ac49ab86b3def27c73c282604b3c9b1134dba1ca325fc6e519f80feb0a9e4c4d56f64216865ef8cde7e1b7c5111e10b0b9e8c4835dd2f078508a58ede7cb04b0a50ec50ca0e86e3cd649b52ce4e19957eb2eb3c6b36ab2014a10ffb146c464e09946eae034ba821b", 0xa5}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1, 0x0, 0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x37]}}]}) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) socket$tipc(0x1e, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.503463562s ago: executing program 3 (id=177): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b8010000380000005e020000080400000400200003"], 0x98) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x14, 0x9, 0x803, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x45000) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b8010000380000005e020000080400000400200003"], 0x98) (async) close(r2) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x14, 0x9, 0x803, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x45000) (async) setns(r4, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) (async) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) (async) 1m2.452103743s ago: executing program 3 (id=178): syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb020303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x6f, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x71, 0x2, 0x2, 0x6, 0x0, 0x3f, {{0x7, 0x24, 0x6, 0x0, 0x0, "1c20"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x40, 0x6d}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf801, 0x4, 0xffff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x7, 0xfd}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0xc9, 0xa5, 0x8, 0x1}, 0xf0, &(0x7f00000000c0)={0x5, 0xf, 0xf0, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x2, 0x2, 0x8, 0x81}, @generic={0xdd, 0x10, 0xb, "cdfcf64cd3c095d70c4c1fbadafb76a0e080cb60122f6d5f8c3a7cd07cd8789920251edc7747be7a08d1d84ee98c6feeeeaed3dd2f189c8f2367ccdccf213643fb11b443d466dfb927fab236024387412b1a3edfb9a0976e4b9daafeff3b77094ed6c78ce527c4aac38ccc63ca8e8bb89b063618a055c434586ccc257bf59d0cb0fabc5bc78c2037509a41d041ae8eaa2e183dd0dd3c52e25b64d7184f3b2aad43027397724f2b07afd8a331dd28e8380f4dc976f40c6dfb601c00979f812b92aabc4cf8f9a2c02d8baf72a895d707e5209e6b9f7ca4992ba789"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}]}) 1m2.406413634s ago: executing program 32 (id=178): syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb020303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x6f, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x71, 0x2, 0x2, 0x6, 0x0, 0x3f, {{0x7, 0x24, 0x6, 0x0, 0x0, "1c20"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x40, 0x6d}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf801, 0x4, 0xffff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x7, 0xfd}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0xc9, 0xa5, 0x8, 0x1}, 0xf0, &(0x7f00000000c0)={0x5, 0xf, 0xf0, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x2, 0x2, 0x8, 0x81}, @generic={0xdd, 0x10, 0xb, "cdfcf64cd3c095d70c4c1fbadafb76a0e080cb60122f6d5f8c3a7cd07cd8789920251edc7747be7a08d1d84ee98c6feeeeaed3dd2f189c8f2367ccdccf213643fb11b443d466dfb927fab236024387412b1a3edfb9a0976e4b9daafeff3b77094ed6c78ce527c4aac38ccc63ca8e8bb89b063618a055c434586ccc257bf59d0cb0fabc5bc78c2037509a41d041ae8eaa2e183dd0dd3c52e25b64d7184f3b2aad43027397724f2b07afd8a331dd28e8380f4dc976f40c6dfb601c00979f812b92aabc4cf8f9a2c02d8baf72a895d707e5209e6b9f7ca4992ba789"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}]}) 22.70095998s ago: executing program 1 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4}}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x20, 0x6, 0x2f, {0x2f, 0xd, "e75bcf47a88a34d2dd23ee24020010da0300000069cf2fa3d3d4832d0e95ce301f08dd21aa6394c59aa60200e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x1, 0x4) splice(r3, 0x0, r4, &(0x7f0000000240)=0x7e, 0x1, 0x4) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) brk(0x689d80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 22.141238042s ago: executing program 1 (id=666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x7a8f3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x7a8f3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f00003ef000/0x2000)=nil, &(0x7f00009a8000/0x1000)=nil, 0x2000, 0x1}) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x16, 0x2e, 0xb5, 0x10, 0x582, 0xf1a4, 0x77d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0xc8, 0x20, 0x73, "", [{{0x9, 0x4, 0x7f, 0x2a, 0x1, 0xff, 0x6e, 0xa8, 0xc1, [@hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x714}}], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x1, 0x7f, 0x1}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x16, 0x2e, 0xb5, 0x10, 0x582, 0xf1a4, 0x77d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0xc8, 0x20, 0x73, "", [{{0x9, 0x4, 0x7f, 0x2a, 0x1, 0xff, 0x6e, 0xa8, 0xc1, [@hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x714}}], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x1, 0x7f, 0x1}}]}}]}}]}}, 0x0) 21.630754393s ago: executing program 1 (id=670): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = epoll_create(0x7) epoll_create1(0x80000) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) close(0x3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085504, &(0x7f00000010c0)=0x40000010) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES32=r8], 0x48}}, 0x410) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r7, 0x10, r0}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x13, r0, 0x180000000) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=0x60) listen(r9, 0x4) 20.87612201s ago: executing program 1 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x800, 0x88002) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000a00)='1\x00', 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.825196031s ago: executing program 1 (id=677): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}, 0x5}], 0x1, 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_MSRS_sys(r0, 0x4018aee2, &(0x7f00000000c0)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x39c2, 0x19, [{0x0, 0x1}, {0xa}, {0xc}, {0x2}, {0xf, 0x1}, {0xb, 0x1}, {0x6, 0x1}, {0xa}, {0xf}, {0xa, 0x1}, {0x7, 0x1}, {}, {0x1}, {0xf}, {0xf, 0x1}, {0xe, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0xd, 0x1}, {0x5}, {0x9}, {0x2, 0x1}, {0xc, 0x1}, {0x7}]}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x21800, &(0x7f0000000240)='/dev/kvm\x00') 20.779533752s ago: executing program 1 (id=678): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000042c0)={0x0, 0x0, "1f015886a31584e44ea0d16030cb5d7b90c9fb5e8de990b599cd7ae6c9001844ac10e6834a990b4f99f14f1030c80d9b59fe7847dfe053c572e38e530717c3a8879c2573856f4d1adfaf5462ec2a06301c75f6bce83ba8d324879ceac2934a6d93a27a0da218d88801f8ffffffffffff221b797cb0c0c94e84604bb8b2930804c91018d00cb30128e7bb842873dfbe05be9dc8a51d6200c31153dc79e61aa283cc889b04c303dac11783811c41a1ab9bd53489909cc82daba981350a9ff260722ddd17ae1e3c5d3705fe4ea0d17fdd134dc6df19fba9d42d9d25bb0df5d4e99307c9e452a46c4247630700e8c07ae5048951ae30f35100", "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"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040)=0x10, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000000)) 10.605035106s ago: executing program 4 (id=707): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) (async, rerun: 64) socket$inet6(0xa, 0x800000000000002, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8090) (async, rerun: 64) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test\x1fdummy_ejcryption', 0x0, r0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8c\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xcf\x12\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fcntl$addseals(r5, 0x409, 0x7) (async, rerun: 32) r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x2000}) (rerun: 32) close_range(r4, r7, 0x0) (async) r8 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xe6\x93\x01\x7f\xbd\x9aS\x0e\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\x87W\xdfs\xe6\x06\xdb\xfeH\x19\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xef\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe1\xf7Y\x90\xf1\xe1i=V\xed\r)\tT\xf8\x00\x00\x00\x00', 0x4) ftruncate(r8, 0xffff) (async) fcntl$addseals(r8, 0x409, 0x7) setfsuid(0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 9.146149018s ago: executing program 2 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x14, 0x9, 0x3, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20048016}, 0x4000) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x8e, "7a58bea88a00"}) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000001c0)={0x1, 0x101, 0xffdffc00, 0xff7fffff, 0xa, "54d2f6b4bdf74000000000000000e907d53db1"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x8c}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) 9.145427548s ago: executing program 4 (id=710): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="a0e4b0e66cb86eb787b0dc85a92707e8169f9f302f"], 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0xa, 0x6b, {0x6b, 0x2, "1247c01c44528d607049b312706f1162ba50a5f69db75b90dba2de1ca559e913b15957c59571cc061dd8b2d5144b3b0f218b8881a10cc4c3977cf9bc0bd11eef32b862ea777d5d11e114bd2adf738ccd788a6a7a074e3a5d6f1d66eec8a0d65d981b198e23a985d7a7"}}, &(0x7f00000001c0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "40c6a5f983352fadabc12eceff"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x25, 0x7b, "958500771b53c2f7097d90f0d12c71005e365b9fc9e40d36a8dcc29b790314c682cd2cb4b89444a1721bf9666bbacbbbc48e91c6429f7067f8128998f9999d9ab7ee40818cc73d42d3aceda10477515a7dc15011f80fa9315d2cb3d5d1489dede1b5c7533f1d1a6a6957f9330ec4cb04523964bc2457788ad6964b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)={0x20, 0x82, 0x2, "0c18"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "a3"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '*'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "fe5a59"}}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 7.535883444s ago: executing program 0 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="42e83e590000000001000000010c6bf5caf9ef6d014ba291511939baa78245f11eb05ec252397d70879ecf35cc59d113a93218c79dac407b1da5f5e57277aa68b6ae400714c12a0aa959376a351d1c80fda135f7e4a3859ebf1239c65b0377227422a0f1de557cc2eb50a0aa9e8f0200d4ef8d0888b68ee1c670422ab2ba8d8669f1c5d262c4b7d51ce6de21bbe0d5c22be8400e1c7e06bf61dba4d3bfe7a9479fb22975cddc240a0c89dc3d6103080aef141f2423707e9dc590f27456521dfe58e19701dacb0637553f37c237e250106df7a088cc2fc9be02663ef3e0d04afee0d08876ebc0889608f22d825ccd96675db6a3111e45c11489b97d8925333db67351f1d29fcd4eec2a7543dc8783f870fb945a623c16a131787523cb34ad42c028e4dd00cf6350be3e6a3885f0007d3b4585540131696a364388cc97b255102ff3ec9565dc1d2048eb1458a36cc3f201b4841d2bfb311c1a592c854bf0bdfc60623da1d91ba403cd35a87c7c319d65f8085762e0be793062cc32df"], 0x128}, 0x20000810) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) open(&(0x7f0000000140)='./file0\x00', 0x88180, 0x162) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc88800fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r6, @ANYRES64=r5], 0xffe) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 32) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r10, &(0x7f0000004640)={0x2020}, 0x2020) (async) ioctl$KVM_GET_IRQCHIP(r9, 0xc208ae62, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x1, 0x6, 0x0, 0x100, 0x8000, 0x10001}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x0, 0x4, 0xff, 0x6, 0x6, 0x455, 0x7, 0x3, 0xffffffff, 0x0, 0x9, 0x1, 0x13, 0x80000003, 0x9], 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.535296324s ago: executing program 2 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x4, 0x1, [0x6]}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf, 0xbca, 0x8, 0x0, 0x401, 0x2}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x4, 0x2, 0x1}]}]}]}, 0x34}}, 0x0) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 7.535052704s ago: executing program 4 (id=713): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3, 0x60000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x4004000) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x13, r0, 0x180000000) 5.761217373s ago: executing program 0 (id=714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180)) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x6, 0x6, 0x1, 0x8}, {0x7, 0x3, 0x0, 0xfff}, {0x2, 0x0, 0x7, 0x8}, {0x15, 0x1, 0x7, 0x2}, {0x81, 0x7, 0x7, 0x8}, {0xff81, 0x8, 0x9, 0xff}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{r1, &(0x7f00000002c0)='security.selinux\x00', 0x105000, &(0x7f0000000300)={@align, {0x126, 0x6, 0xffffffff, 0x8000}}, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x7ff}, {[0xb2, 0x808, 0xd28, 0x7]}, 0xe76, 0xb3, &(0x7f00000003c0)=""/179}) fstat(r3, &(0x7f0000000240)) setxattr$security_selinux(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:su_exec_t:s0\x00', 0x1f, 0x1) 5.761022093s ago: executing program 2 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x6}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="383c8a4b8af3f457dd7c2a1c9501dbf3cf3b9f9f1dea2c8b34cd7715b402227507e59c41d254756d2ea842ebc75c642e5e3181de300e138f7d61de67551a0e3af5af9a6ca8fd81b328232a53b38c43cdcc35c09170d9427b0e78d209d503562d01495ac91b7eb3805f7e6f23618825df74f22a32adabe7656fadbafdce289581e3bbd3aaaad1f16e1bed67031a528d0ff4cc45b681fb90e39a11a955f07fbc7e4ea130adddef56fad05533bd7a6b335f53a8d7b977f8d131ece2c74d58634bf91a749718e17724", 0xc7) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) 5.759839243s ago: executing program 4 (id=716): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x69c382) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x200, 0x1}) 5.758818073s ago: executing program 0 (id=717): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0xd80, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='\x14:[-,%\x8c%+^%%!\\{/)\x00') (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000200)=""/6) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x5ea2, 0x0, @remote, 0x9}, 0x1c) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.978331663s ago: executing program 0 (id=718): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x80, 0x3, 0x0, 0x281, 0xc, 0x2}, 0x30, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r2, 0x701, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x4000) listen(r0, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r0, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1}, 0x10010) socket$packet(0x11, 0x2, 0x300) pwrite64(r8, &(0x7f0000000140)="84493253c96591b05e5064375132200f77082af7d193454d4bdf62872059657e8242001e18614eb58cf46a305b555fe46fec5784c0fcabb3", 0x38, 0x1) 3.977970323s ago: executing program 2 (id=719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x2}, 0x1c) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"0f380a669766ba6100b000eeb98f090000b88c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cde08c461f8ae18"}}, @rdmsr={0x32, 0x18, {0x2bd}}, @in_dx={0x82, 0x20, {0xfd90, 0x6}}, @cpuid={0x14, 0x18}, @rdmsr={0x32, 0x18, {0x40000082}}], 0xc0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa3, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) 3.977562573s ago: executing program 4 (id=720): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1d, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db"}}) 2.054394425s ago: executing program 2 (id=721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103002, 0x0) setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445bb9800000c00f3235000100000f30b88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x62}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.053896035s ago: executing program 0 (id=722): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="a0e4b0e66cb86eb787b0dc85a92707e8169f9f302f"], 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0xa, 0x6b, {0x6b, 0x2, "1247c01c44528d607049b312706f1162ba50a5f69db75b90dba2de1ca559e913b15957c59571cc061dd8b2d5144b3b0f218b8881a10cc4c3977cf9bc0bd11eef32b862ea777d5d11e114bd2adf738ccd788a6a7a074e3a5d6f1d66eec8a0d65d981b198e23a985d7a7"}}, &(0x7f00000001c0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "40c6a5f983352fadabc12eceff"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x25, 0x7b, "958500771b53c2f7097d90f0d12c71005e365b9fc9e40d36a8dcc29b790314c682cd2cb4b89444a1721bf9666bbacbbbc48e91c6429f7067f8128998f9999d9ab7ee40818cc73d42d3aceda10477515a7dc15011f80fa9315d2cb3d5d1489dede1b5c7533f1d1a6a6957f9330ec4cb04523964bc2457788ad6964b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)={0x20, 0x82, 0x2, "0c18"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "a3"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '*'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "fe5a59"}}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 2.053378065s ago: executing program 4 (id=723): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x40, 0x8000, 0x3, 0x3ff, {{0x4a, 0x4, 0x3, 0x31, 0x128, 0x66, 0x0, 0x0, 0x7b, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@generic={0x7, 0x8, "87b3f4c60a23"}, @timestamp_addr={0x44, 0x34, 0x91, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@rand_addr=0x64010100, 0x180000}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@loopback, 0x8}, {@private=0xa010100, 0x75c2}, {@private=0xa010100, 0x8001}]}, @ssrr={0x89, 0x1b, 0x17, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_addr={0x44, 0x44, 0xf7, 0x1, 0x1, [{@rand_addr=0x64010102, 0xb4}, {@broadcast, 0x1}, {@loopback}, {@private=0x6280, 0x4}, {@multicast2, 0x9}, {@local, 0x2fc}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5259db0f}]}, @timestamp_addr={0x44, 0x2c, 0x40, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xf}, {@loopback, 0xa}, {@loopback, 0x5}, {@local, 0xf}, {@local, 0x81}]}, @cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "b277a64176d5508706"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x6, 0x3, 0x4, [{@rand_addr=0x1, 0x3}, {@multicast2, 0x6}, {@remote, 0xa}]}, @ssrr={0x89, 0x1b, 0x6, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @remote]}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@delqdisc={0xa8, 0x25, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0x8}, {0x5, 0xe}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xceff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) umount2(&(0x7f0000000000)='./file0\x00', 0x4) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000080)={0x40, 0x17, 0x4, "aa3579bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000340)={0x6, 0xce9, 0x80, 0x0, 0x21f0, 0x8, 0x0, &(0x7f00000002c0)=[{0x4, 0x1ff, 0x9}, {0xffffffff, 0xfe}, {0xe, 0x101, 0x1}, {0x1, 0xfe, 0xffffffff}, {0x9, 0x1ff, 0x5}, {0x8, 0x1ff, 0xc36}, {0x8, 0xfe, 0x2}, {0xd, 0x101, 0x262}]}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d000000000000090400"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000740)={0x0, 0xe}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x81, 0x1, 's'}, 0x0, &(0x7f0000000940)={0x20, 0x83, 0x1, ']'}, 0x0, 0x0}) 358.05µs ago: executing program 0 (id=724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setresuid(0xee00, 0xee00, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setopts(0x4200, r6, 0xb27, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000400)=0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000440)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) r10 = syz_clone(0x42100, &(0x7f0000000500)="d00bc5ae18fb6e72ec3c3db8ee8bd8ae2fa1fc4dd1c1f0da3241faed1af51b09b1acaf3277d9b08d1b7196e5e186ead2969625aef45a74c6e4b5a1b2571a0636f4526ae1d4cc0b252ff8405bf45428554f04a65d1397af081bfabdbebb5050d301c82f02f6149535a9832ac10b568c1172d04a9d65c1add01246bff82a1c80843d29f503f36bbc820b45bf295202ff0f5db4580ead662758e352073246fb54066dfbd0b92df9ce97cf04a796fd6fbd64a35e68c6a2169def4eb6e38f3d5fc79326a716f1d4d598f222496059e857f9eca6fe", 0xd2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="44dc1722c2e355531e377de650f41e5e3d2c3f88074e0cd30af4db2525bb3034f15ab45e9484496bbddf6c8d13398fdf895edff300cfb3aac802e5ba7e6dbfdcefa0f2d0094bd30b84aedba14abdf0f600aeda5e8cc43d526f2d1994dec41a8a20185939dc802300") r11 = fcntl$getown(r1, 0x9) syz_clone3(&(0x7f0000000740)={0x100000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300), {0xe}, &(0x7f0000000340)=""/123, 0x7b, &(0x7f00000003c0)=""/3, &(0x7f0000000700)=[r6, r7, 0xffffffffffffffff, r8, r9, r10, r11], 0x7, {r0}}, 0x58) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ftruncate(r2, 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472c4666416000000000000000000", @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r12, @ANYRESHEX=r13], 0x15) r14 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 0s ago: executing program 2 (id=725): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x17, 0x1, @tid=r1}, &(0x7f0000000100)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8ebfe456, 0x0) r10 = openat$incfs(r9, &(0x7f0000000280)='.pending_reads\x00', 0x100, 0x130) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000400)=@usbdevfs_connect={0x10007ff}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x8) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r11, 0x4010e501, &(0x7f0000002240)={r8}) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') kernel console output (not intermixed with test programs): plus failed with error -22 [ 37.909365][ T311] usb 1-1: USB disconnect, device number 7 [ 38.291681][ T373] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.369228][ T535] fuseblk: Bad value for 'fd' [ 38.421159][ T540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=540 comm=syz.2.54 [ 38.451597][ T373] usb 4-1: Using ep0 maxpacket: 8 [ 38.460632][ T373] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 38.471411][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.479494][ T373] usb 4-1: Product: syz [ 38.483795][ T373] usb 4-1: Manufacturer: syz [ 38.488439][ T373] usb 4-1: SerialNumber: syz [ 38.566937][ T550] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 38.624848][ T556] ======================================================= [ 38.624848][ T556] WARNING: The mand mount option has been deprecated and [ 38.624848][ T556] and is ignored by this kernel. Remove the mand [ 38.624848][ T556] option from the mount to silence this warning. [ 38.624848][ T556] ======================================================= [ 38.671651][ T325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.712271][ T557] Zero length message leads to an empty skb [ 38.821552][ T325] usb 3-1: Using ep0 maxpacket: 8 [ 38.827647][ T325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.837782][ T325] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.846783][ T409] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 38.855618][ T325] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 38.864724][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.872753][ T325] usb 3-1: Product: syz [ 38.876926][ T325] usb 3-1: Manufacturer: syz [ 38.881593][ T325] usb 3-1: SerialNumber: syz [ 38.961572][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.002760][ T409] usb 2-1: config 3 has an invalid interface number: 3 but max is 0 [ 39.010930][ T409] usb 2-1: config 3 has no interface number 0 [ 39.017093][ T409] usb 2-1: config 3 interface 3 has no altsetting 0 [ 39.025792][ T409] usb 2-1: string descriptor 0 read error: -22 [ 39.032039][ T409] usb 2-1: New USB device found, idVendor=09fb, idProduct=6026, bcdDevice=ae.dc [ 39.041233][ T409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.053059][ T409] ftdi_sio 2-1:3.3: FTDI USB Serial Device converter detected [ 39.061470][ T409] ftdi_sio ttyUSB0: unknown device type: 0xaedc [ 39.091591][ T311] usb 1-1: device descriptor read/64, error -71 [ 39.253045][ T409] usb 2-1: USB disconnect, device number 6 [ 39.255548][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 39.255565][ T36] audit: type=1400 audit(1784199799.210:207): avc: denied { connect } for pid=553 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.259554][ T409] ftdi_sio 2-1:3.3: device disconnected [ 39.331581][ T311] usb 1-1: device descriptor read/64, error -71 [ 39.571570][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.605267][ T325] usb 3-1: unit 3 not found! [ 39.615201][ T325] usb 3-1: USB disconnect, device number 9 [ 39.629982][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.711572][ T311] usb 1-1: device descriptor read/64, error -71 [ 39.799344][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 39.848149][ T36] audit: type=1400 audit(1784199799.800:208): avc: denied { create } for pid=571 comm="syz.1.67" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.870158][ T36] audit: type=1400 audit(1784199799.820:209): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.911601][ T325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.961584][ T311] usb 1-1: device descriptor read/64, error -71 [ 40.041633][ T325] usb 3-1: device descriptor read/64, error -71 [ 40.071675][ T311] usb usb1-port1: attempt power cycle [ 40.101575][ T326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.231571][ T326] usb 2-1: device descriptor read/64, error -71 [ 40.281651][ T325] usb 3-1: device descriptor read/64, error -71 [ 40.411570][ T311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.432710][ T311] usb 1-1: device descriptor read/8, error -71 [ 40.471585][ T326] usb 2-1: device descriptor read/64, error -71 [ 40.521572][ T325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.562612][ T311] usb 1-1: device descriptor read/8, error -71 [ 40.651585][ T325] usb 3-1: device descriptor read/64, error -71 [ 40.711572][ T326] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.801582][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 40.822612][ T311] usb 1-1: device descriptor read/8, error -71 [ 40.841577][ T326] usb 2-1: device descriptor read/64, error -71 [ 40.901573][ T325] usb 3-1: device descriptor read/64, error -71 [ 40.958423][ T311] usb 1-1: device descriptor read/8, error -71 [ 40.959276][ T373] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.014183][ T325] usb usb3-port1: attempt power cycle [ 41.019967][ T373] usb 4-1: unit 3 not found! [ 41.028683][ T373] usb 4-1: USB disconnect, device number 6 [ 41.040135][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.071718][ T311] usb usb1-port1: unable to enumerate USB device [ 41.091631][ T326] usb 2-1: device descriptor read/64, error -71 [ 41.201880][ T326] usb usb2-port1: attempt power cycle [ 41.361567][ T325] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 41.392624][ T325] usb 3-1: device descriptor read/8, error -71 [ 41.522769][ T325] usb 3-1: device descriptor read/8, error -71 [ 41.551651][ T326] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.572731][ T326] usb 2-1: device descriptor read/8, error -71 [ 41.651061][ T36] audit: type=1400 audit(1784199801.600:210): avc: denied { connect } for pid=582 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.689589][ T13] tipc: Subscription rejected, illegal request [ 41.690712][ T36] audit: type=1400 audit(1784199801.640:211): avc: denied { read } for pid=582 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.722656][ T326] usb 2-1: device descriptor read/8, error -71 [ 41.771600][ T325] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 41.793012][ T325] usb 3-1: device descriptor read/8, error -71 [ 41.852666][ T36] audit: type=1400 audit(1784199801.810:212): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 41.932753][ T325] usb 3-1: device descriptor read/8, error -71 [ 41.961644][ T326] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.983686][ T36] audit: type=1400 audit(1784199801.940:213): avc: denied { write } for pid=591 comm="syz.0.73" name="/" dev="configfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.005862][ T36] audit: type=1400 audit(1784199801.940:214): avc: denied { add_name } for pid=591 comm="syz.0.73" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.006129][ T36] audit: type=1400 audit(1784199801.940:215): avc: denied { create } for pid=591 comm="syz.0.73" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.097600][ T325] usb usb3-port1: unable to enumerate USB device [ 42.099642][ T326] usb 2-1: device descriptor read/8, error -71 [ 42.268143][ T597] capability: warning: `syz.0.75' uses deprecated v2 capabilities in a way that may be insecure [ 42.293864][ T36] audit: type=1400 audit(1784199802.250:216): avc: denied { append } for pid=598 comm="syz.0.76" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.332765][ T326] usb 2-1: device descriptor read/8, error -71 [ 42.366569][ T601] syz.0.77(601): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 42.442343][ T326] usb usb2-port1: unable to enumerate USB device [ 42.661630][ T325] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 42.811614][ T325] usb 1-1: Using ep0 maxpacket: 16 [ 42.818010][ T325] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 42.827944][ T325] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 42.837153][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.845175][ T325] usb 1-1: Product: syz [ 42.849344][ T325] usb 1-1: Manufacturer: syz [ 42.853950][ T325] usb 1-1: SerialNumber: syz [ 42.860444][ T325] r8152-cfgselector 1-1: Unknown version 0x0000 [ 42.866792][ T325] r8152-cfgselector 1-1: config 0 descriptor?? [ 42.947702][ T614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 43.001581][ T409] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 43.152675][ T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.163693][ T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.173507][ T409] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 43.182592][ T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.191646][ T409] usb 3-1: config 0 descriptor?? [ 43.275709][ T325] r8152-cfgselector 1-1: Needed 1 retries to read version [ 43.283798][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.399515][ T409] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 43.407069][ T409] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 43.443074][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.451622][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 43.462762][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 43.471412][ T9] usb 2-1: string descriptor 0 read error: -22 [ 43.477657][ T409] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 43.485666][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.40 [ 43.494801][ T409] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 43.504230][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.515978][ T409] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 43.526934][ T409] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 43.598816][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.608141][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.618453][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.622759][ T326] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 43.627934][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.657503][ T409] usb 3-1: USB disconnect, device number 14 [ 43.677197][ T409] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 43.917148][ T9] microsoft 0003:045E:00F9.0006: unknown main item tag 0x7 [ 43.924496][ T9] microsoft 0003:045E:00F9.0006: collection stack underflow [ 43.931856][ T9] microsoft 0003:045E:00F9.0006: item 0 1 0 12 parsing failed [ 43.939499][ T9] microsoft 0003:045E:00F9.0006: parse failed [ 43.945650][ T9] microsoft 0003:045E:00F9.0006: probe with driver microsoft failed with error -22 [ 44.003018][ T326] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 44.137483][ T9] usb 2-1: USB disconnect, device number 11 [ 44.154335][ T326] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 44.170661][ T326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.190609][ T326] usb 1-1: Product: syz [ 44.198627][ T326] usb 1-1: Manufacturer: syz [ 44.204620][ T326] usb 1-1: SerialNumber: syz [ 44.262793][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 44.262812][ T36] audit: type=1400 audit(1784199804.220:221): avc: denied { write } for pid=681 comm="syz.3.92" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.267296][ T682] ip6_tunnel: non-ECT from fedb:4000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 44.268919][ T36] audit: type=1400 audit(1784199804.220:222): avc: denied { setattr } for pid=681 comm="syz.3.92" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 44.325439][ T36] audit: type=1400 audit(1784199804.250:223): avc: denied { sqpoll } for pid=681 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.450767][ T36] audit: type=1400 audit(1784199804.400:224): avc: denied { setopt } for pid=691 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.537443][ T326] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 44.546160][ T326] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.556166][ T326] usb 1-1: USB disconnect, device number 13 [ 44.701601][ T409] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 44.841695][ T394] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.851705][ T409] usb 3-1: Using ep0 maxpacket: 32 [ 44.857966][ T409] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.866158][ T409] usb 3-1: config 0 has no interface number 0 [ 44.873555][ T409] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.882623][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.890613][ T409] usb 3-1: Product: syz [ 44.894789][ T409] usb 3-1: Manufacturer: syz [ 44.899386][ T409] usb 3-1: SerialNumber: syz [ 44.904693][ T409] usb 3-1: config 0 descriptor?? [ 44.910390][ T409] smsc95xx v2.0.0 [ 45.003636][ T394] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 45.012068][ T394] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 45.021134][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.030960][ T394] usb 4-1: config 0 descriptor?? [ 45.035985][ T326] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.044859][ T394] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 45.078603][ T36] audit: type=1400 audit(1784199805.030:225): avc: denied { read } for pid=771 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.111903][ T409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 45.124093][ T36] audit: type=1400 audit(1784199805.080:226): avc: denied { read } for pid=775 comm="syz.0.104" name="/" dev="configfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.145918][ T409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.145925][ T36] audit: type=1400 audit(1784199805.080:227): avc: denied { open } for pid=775 comm="syz.0.104" path="/" dev="configfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.201567][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 45.207160][ T326] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 45.216166][ T326] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.223817][ T326] usb 2-1: can't read configurations, error -61 [ 45.254091][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.262681][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.271137][ T394] usb 4-1: USB disconnect, device number 7 [ 45.321953][ T409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 45.332772][ T409] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 45.361630][ T326] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.381609][ T324] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 45.511572][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 45.517186][ T326] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 45.526221][ T326] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.533840][ T326] usb 2-1: can't read configurations, error -61 [ 45.540215][ T326] usb usb2-port1: attempt power cycle [ 45.543082][ T324] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.553263][ T324] usb 1-1: can't read configurations, error -61 [ 45.681604][ T324] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 45.786947][ T780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 45.796014][ T781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 45.833126][ T324] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.851622][ T324] usb 1-1: can't read configurations, error -61 [ 45.858016][ T324] usb usb1-port1: attempt power cycle [ 45.868046][ T36] audit: type=1400 audit(1784199805.820:228): avc: denied { append } for pid=782 comm="syz.3.106" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.891684][ T326] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.899542][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.900357][ T36] audit: type=1400 audit(1784199805.850:229): avc: denied { setopt } for pid=782 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.902501][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.906921][ T36] audit: type=1400 audit(1784199805.850:230): avc: denied { map } for pid=782 comm="syz.3.106" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.957317][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 45.963119][ T326] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 45.979282][ T326] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.986921][ T326] usb 2-1: can't read configurations, error -61 [ 46.018936][ T409] usb 3-1: USB disconnect, device number 15 [ 46.078181][ T720] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.121706][ T326] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 46.151993][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 46.157646][ T326] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 46.166750][ T326] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.174362][ T326] usb 2-1: can't read configurations, error -61 [ 46.180716][ T326] usb usb2-port1: unable to enumerate USB device [ 46.201673][ T324] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 46.243548][ T324] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 46.251223][ T324] usb 1-1: can't read configurations, error -61 [ 46.381631][ T324] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 46.403316][ T324] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 46.411010][ T324] usb 1-1: can't read configurations, error -61 [ 46.417454][ T324] usb usb1-port1: unable to enumerate USB device [ 48.131694][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.131713][ T811] Bluetooth: hci0: command 0x1003 tx timeout [ 48.201850][ T324] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.331578][ T324] usb 2-1: device descriptor read/64, error -71 [ 48.571632][ T324] usb 2-1: device descriptor read/64, error -71 [ 48.670839][ T840] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.811658][ T324] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 48.941621][ T324] usb 2-1: device descriptor read/64, error -71 [ 48.981712][ T326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.983541][ T848] netlink: 324 bytes leftover after parsing attributes in process `syz.0.122'. [ 49.000752][ T848] : renamed from vlan0 (while UP) [ 49.073199][ T853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.082360][ T853] wg1: entered allmulticast mode [ 49.088249][ T854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'. [ 49.121586][ T326] usb 4-1: device descriptor read/64, error -71 [ 49.181592][ T324] usb 2-1: device descriptor read/64, error -71 [ 49.291719][ T324] usb usb2-port1: attempt power cycle [ 49.381601][ T326] usb 4-1: device descriptor read/64, error -71 [ 49.541652][ T325] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 49.581620][ T394] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 49.621588][ T326] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 49.631583][ T324] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 49.652758][ T324] usb 2-1: device descriptor read/8, error -71 [ 49.671605][ T325] usb 1-1: device descriptor read/64, error -71 [ 49.711595][ T394] usb 3-1: device descriptor read/64, error -71 [ 49.751657][ T326] usb 4-1: device descriptor read/64, error -71 [ 49.782884][ T324] usb 2-1: device descriptor read/8, error -71 [ 49.911614][ T325] usb 1-1: device descriptor read/64, error -71 [ 49.951583][ T394] usb 3-1: device descriptor read/64, error -71 [ 49.991669][ T326] usb 4-1: device descriptor read/64, error -71 [ 50.021705][ T324] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 50.042586][ T324] usb 2-1: device descriptor read/8, error -71 [ 50.101697][ T326] usb usb4-port1: attempt power cycle [ 50.151583][ T325] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 50.172755][ T324] usb 2-1: device descriptor read/8, error -71 [ 50.191628][ T394] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.281637][ T325] usb 1-1: device descriptor read/64, error -71 [ 50.288093][ T324] usb usb2-port1: unable to enumerate USB device [ 50.321613][ T394] usb 3-1: device descriptor read/64, error -71 [ 50.441628][ T326] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.462761][ T326] usb 4-1: device descriptor read/8, error -71 [ 50.541585][ T325] usb 1-1: device descriptor read/64, error -71 [ 50.561655][ T394] usb 3-1: device descriptor read/64, error -71 [ 50.603353][ T326] usb 4-1: device descriptor read/8, error -71 [ 50.651676][ T325] usb usb1-port1: attempt power cycle [ 50.671712][ T394] usb usb3-port1: attempt power cycle [ 50.841677][ T326] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.862792][ T326] usb 4-1: device descriptor read/8, error -71 [ 50.992709][ T326] usb 4-1: device descriptor read/8, error -71 [ 51.001578][ T325] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 51.011630][ T394] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 51.032681][ T325] usb 1-1: device descriptor read/8, error -71 [ 51.032681][ T394] usb 3-1: device descriptor read/8, error -71 [ 51.101824][ T326] usb usb4-port1: unable to enumerate USB device [ 51.162686][ T325] usb 1-1: device descriptor read/8, error -71 [ 51.172701][ T394] usb 3-1: device descriptor read/8, error -71 [ 51.211600][ T311] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 51.362878][ T311] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 51.373990][ T311] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.386833][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.393499][ T311] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 51.402596][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.411137][ T311] usb 2-1: config 0 descriptor?? [ 51.412383][ T325] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 51.416153][ T394] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 51.432341][ T311] usbhid 2-1:0.0: can't add hid device: -22 [ 51.438313][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 51.452694][ T394] usb 3-1: device descriptor read/8, error -71 [ 51.452794][ T325] usb 1-1: device descriptor read/8, error -71 [ 51.582828][ T394] usb 3-1: device descriptor read/8, error -71 [ 51.592698][ T325] usb 1-1: device descriptor read/8, error -71 [ 51.635261][ T868] overlayfs: conflicting options: userxattr,redirect_dir=on [ 51.691696][ T394] usb usb3-port1: unable to enumerate USB device [ 51.701690][ T325] usb usb1-port1: unable to enumerate USB device [ 52.151642][ T325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 52.302965][ T325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 52.311673][ T325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.323546][ T325] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.341289][ T325] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 52.345919][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 52.345935][ T36] audit: type=1400 audit(1784199812.290:240): avc: denied { ioctl } for pid=874 comm="syz.0.132" path="socket:[5976]" dev="sockfs" ino=5976 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.353698][ T325] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 52.395236][ T311] usb 2-1: USB disconnect, device number 20 [ 52.406359][ T325] usb 4-1: config 1 interface 1 has no altsetting 1 [ 52.416251][ T325] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 52.425574][ T325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.437124][ T325] usb 4-1: Product: ь [ 52.441242][ T325] usb 4-1: Manufacturer: Ѓ [ 52.455934][ T325] usb 4-1: SerialNumber: ᐁ [ 52.566501][ T36] audit: type=1400 audit(1784199812.520:241): avc: denied { append } for pid=899 comm="syz.0.137" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.630768][ T36] audit: type=1400 audit(1784199812.580:242): avc: denied { bind } for pid=909 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.685016][ T325] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.698967][ T325] usb 4-1: USB disconnect, device number 12 [ 52.806070][ T921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.817853][ T889] udevd[889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.346885][ T939] fuse: Bad value for 'user_id' [ 53.354301][ T939] fuse: Bad value for 'user_id' [ 53.651818][ T311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 53.661650][ T394] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 53.781594][ T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 53.801572][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 53.808211][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.816680][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 2023, setting to 1024 [ 53.827782][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 53.838507][ T394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.846974][ T394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 53.858424][ T311] usb 1-1: string descriptor 0 read error: -22 [ 53.864784][ T311] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 53.873875][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.882967][ T394] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 53.883231][ T946] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.899609][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.907707][ T394] usb 2-1: Product: syz [ 53.913427][ T394] usb 2-1: Manufacturer: syz [ 53.918513][ T394] usb 2-1: SerialNumber: syz [ 53.931598][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 53.939433][ T65] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 53.948695][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.956733][ T65] usb 3-1: Product: syz [ 53.960907][ T65] usb 3-1: Manufacturer: syz [ 53.965951][ T65] usb 3-1: SerialNumber: syz [ 53.973737][ T65] r8152-cfgselector 3-1: Unknown version 0x0000 [ 53.980020][ T65] r8152-cfgselector 3-1: config 0 descriptor?? [ 54.108585][ T326] usb 1-1: USB disconnect, device number 22 [ 54.142917][ T394] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.190428][ T65] r8152-cfgselector 3-1: Needed 1 retries to read version [ 54.244562][ T961] cgroup: noprefix used incorrectly [ 54.297373][ T36] audit: type=1400 audit(1784199814.250:243): avc: denied { setopt } for pid=968 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.341623][ T394] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.350451][ T394] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 54.390948][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.399631][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.415098][ T326] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 54.542457][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.551040][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.671568][ T325] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 54.743725][ T394] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.752262][ T394] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 54.781612][ T326] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 54.792329][ T36] audit: type=1400 audit(1784199814.750:244): avc: denied { execute } for pid=994 comm="syz.0.169" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.875819][ T325] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 54.884578][ T325] usb 4-1: config 127 has no interface number 0 [ 54.890904][ T325] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 54.903469][ T325] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 54.912559][ T325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.920728][ T325] usb 4-1: Product: syz [ 54.925120][ T325] usb 4-1: Manufacturer: syz [ 54.929757][ T325] usb 4-1: SerialNumber: syz [ 54.941567][ T326] usb 3-1: Using ep0 maxpacket: 16 [ 54.947798][ T326] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 54.956445][ T394] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 54.968711][ T326] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.979400][ T394] usb 2-1: USB disconnect, device number 21 [ 54.985495][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.994238][ T326] usb 3-1: Product: syz [ 55.000340][ T326] usb 3-1: Manufacturer: syz [ 55.005662][ T326] usb 3-1: SerialNumber: syz [ 55.012162][ T326] r8152-cfgselector 3-1: Unknown version 0x0000 [ 55.012490][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.018436][ T326] r8152-cfgselector 3-1: config 0 descriptor?? [ 55.121622][ T311] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 55.272681][ T311] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.280879][ T311] usb 1-1: config 0 has no interface number 0 [ 55.287034][ T311] usb 1-1: config 0 interface 41 has no altsetting 0 [ 55.295227][ T311] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.304458][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.312564][ T311] usb 1-1: Product: syz [ 55.316764][ T311] usb 1-1: Manufacturer: syz [ 55.321374][ T311] usb 1-1: SerialNumber: syz [ 55.326952][ T311] usb 1-1: config 0 descriptor?? [ 55.394455][ T36] audit: type=1400 audit(1784199815.350:245): avc: denied { remount } for pid=984 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.437432][ T326] r8152-cfgselector 3-1: Needed 1 retries to read version [ 55.614538][ T325] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 55.686028][ T326] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 55.734678][ T311] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 55.737722][ T1009] process 'syz.0.170' launched './file0' with NULL argv: empty string added [ 55.743092][ T36] audit: type=1400 audit(1784199815.690:246): avc: denied { watch watch_reads } for pid=996 comm="syz.0.170" path="/47/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.776091][ T36] audit: type=1400 audit(1784199815.690:247): avc: denied { execute } for pid=996 comm="syz.0.170" name="file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.798198][ T36] audit: type=1400 audit(1784199815.710:248): avc: denied { execute_no_trans } for pid=996 comm="syz.0.170" path="/47/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.823686][ T325] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 55.833941][ T325] asix 4-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 55.844534][ T325] asix 4-1:127.57: probe with driver asix failed with error -71 [ 55.853220][ T325] usb 4-1: USB disconnect, device number 13 [ 55.935983][ T409] usb 1-1: USB disconnect, device number 23 [ 56.011670][ T324] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 56.161583][ T324] usb 2-1: Using ep0 maxpacket: 16 [ 56.167916][ T324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.178136][ T324] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.189129][ T324] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.198934][ T324] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.215689][ T324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.224856][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.233875][ T324] usb 2-1: SerialNumber: syz [ 56.240997][ T324] hub 2-1:1.0: bad descriptor, ignoring hub [ 56.246984][ T324] hub 2-1:1.0: probe with driver hub failed with error -5 [ 56.254283][ T324] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 56.375066][ T720] bridge_slave_1: left allmulticast mode [ 56.381091][ T720] bridge_slave_1: left promiscuous mode [ 56.387032][ T720] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.401315][ T720] bridge_slave_0: left allmulticast mode [ 56.407098][ T720] bridge_slave_0: left promiscuous mode [ 56.412959][ T720] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.471614][ T409] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 56.510220][ T36] audit: type=1400 audit(1784199816.460:249): avc: denied { mounton } for pid=1021 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.536967][ T720] veth1_macvtap: left promiscuous mode [ 56.584190][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.591339][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.598681][ T1021] bridge_slave_0: entered allmulticast mode [ 56.604984][ T1021] bridge_slave_0: entered promiscuous mode [ 56.611315][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.618391][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.622787][ T409] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.625500][ T1021] bridge_slave_1: entered allmulticast mode [ 56.640010][ T409] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 56.640450][ T1021] bridge_slave_1: entered promiscuous mode [ 56.650439][ T409] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.656116][ T1007] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 56.665275][ T409] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.681998][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.686636][ T409] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.702806][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.713938][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.722524][ T409] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.730563][ T409] usb 3-1: Product: syz [ 56.735239][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.741575][ T326] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 56.743986][ T409] usb 3-1: Manufacturer: syz [ 56.768566][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.770995][ T409] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 56.775662][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.775757][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.798247][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.828209][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.835734][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.846404][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.853476][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.862299][ T324] usb 2-1: USB disconnect, device number 22 [ 56.872890][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.879947][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.893543][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.904945][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.915134][ T326] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.926100][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.934976][ T326] usb 1-1: config 0 descriptor?? [ 56.942595][ T1021] veth0_vlan: entered promiscuous mode [ 56.953748][ T1021] veth1_macvtap: entered promiscuous mode [ 56.986869][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.002433][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.011129][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.020050][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.029087][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.037802][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.042590][ T1035] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 57.046646][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.054827][ T1035] netlink: 'syz.1.184': attribute type 5 has an invalid length. [ 57.063925][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.077259][ T1035] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 57.078824][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.093924][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.104980][ T394] usb 3-1: USB disconnect, device number 22 [ 57.184925][ T1039] netlink: 104 bytes leftover after parsing attributes in process `syz.1.186'. [ 57.401690][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 57.401709][ T36] audit: type=1326 audit(1784199817.350:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.4.189" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059c99de59 code=0x7fc00000 [ 57.446460][ T36] audit: type=1400 audit(1784199817.400:255): avc: denied { ioctl } for pid=1044 comm="syz.4.189" path="socket:[7728]" dev="sockfs" ino=7728 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.542950][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.552706][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.698005][ T36] audit: type=1400 audit(1784199817.650:256): avc: denied { ioctl } for pid=1059 comm="syz.2.194" path="socket:[8777]" dev="sockfs" ino=8777 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.781570][ T65] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 57.933035][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.941104][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 57.949219][ T65] usb 2-1: too many configurations: 152, using maximum allowed: 8 [ 57.961573][ T324] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 57.964642][ T65] usb 2-1: New USB device found, idVendor=0582, idProduct=0aca, bcdDevice=f0.ba [ 57.978296][ T65] usb 2-1: New USB device strings: Mfr=112, Product=210, SerialNumber=69 [ 57.986810][ T326] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 57.995772][ T65] usb 2-1: Product: syz [ 57.999963][ T65] usb 2-1: Manufacturer: syz [ 58.004703][ T326] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 58.012262][ T326] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 58.021672][ T65] usb 2-1: SerialNumber: syz [ 58.032428][ T326] usb 1-1: USB disconnect, device number 24 [ 58.064897][ T36] audit: type=1326 audit(1784199818.020:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.4.189" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f059c997bd7 code=0x7fc00000 [ 58.111614][ T324] usb 3-1: device descriptor read/64, error -71 [ 58.230528][ T65] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 58.236439][ T65] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.244316][ T65] usb 2-1: 2:1: invalid format type 0x2001 is detected, processed as PCM [ 58.252795][ T65] usb 2-1: 2:1 : sample bitwidth 9 in over sample bytes 1 [ 58.259918][ T65] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 58.268815][ T65] usb 2-1: USB disconnect, device number 23 [ 58.279479][ T889] udevd[889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.341598][ T394] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.361684][ T324] usb 3-1: device descriptor read/64, error -71 [ 58.471596][ T394] usb 5-1: device descriptor read/64, error -71 [ 58.507109][ T1065] 9pnet_virtio: no channels available for device 127.0.0.1 [ 58.601613][ T324] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 58.711761][ T394] usb 5-1: device descriptor read/64, error -71 [ 58.731794][ T324] usb 3-1: device descriptor read/64, error -71 [ 58.742203][ T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 58.762206][ T1069] x_tables: duplicate underflow at hook 1 [ 58.891669][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 58.897787][ T65] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 58.906000][ T65] usb 1-1: config 1 has no interface number 0 [ 58.912122][ T65] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 58.923354][ T65] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.933449][ T65] usb 1-1: config 1 interface 105 has no altsetting 0 [ 58.941807][ T65] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 58.950850][ T65] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 58.958982][ T394] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.966560][ T65] usb 1-1: Product: syz [ 58.970751][ T65] usb 1-1: Manufacturer: syz [ 58.975632][ T65] usb 1-1: SerialNumber: syz [ 58.981505][ T1064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.988783][ T1064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.988895][ T324] usb 3-1: device descriptor read/64, error -71 [ 59.061631][ T325] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 59.101592][ T394] usb 5-1: device descriptor read/64, error -71 [ 59.111790][ T324] usb usb3-port1: attempt power cycle [ 59.191595][ T325] usb 2-1: device descriptor read/64, error -71 [ 59.198069][ T65] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 59.207118][ T65] usb 1-1: USB disconnect, device number 25 [ 59.341677][ T394] usb 5-1: device descriptor read/64, error -71 [ 59.441610][ T325] usb 2-1: device descriptor read/64, error -71 [ 59.451738][ T324] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 59.451761][ T394] usb usb5-port1: attempt power cycle [ 59.482944][ T324] usb 3-1: device descriptor read/8, error -71 [ 59.612669][ T324] usb 3-1: device descriptor read/8, error -71 [ 59.681610][ T325] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 59.762994][ T1075] netlink: 'syz.0.201': attribute type 2 has an invalid length. [ 59.791690][ T394] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.813517][ T394] usb 5-1: device descriptor read/8, error -71 [ 59.821605][ T325] usb 2-1: device descriptor read/64, error -71 [ 59.829148][ T36] audit: type=1400 audit(1784199819.780:258): avc: denied { create } for pid=1079 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.851805][ T324] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 59.864383][ T36] audit: type=1400 audit(1784199819.810:259): avc: denied { sys_admin } for pid=1079 comm="syz.0.202" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 59.892600][ T324] usb 3-1: device descriptor read/8, error -71 [ 59.895471][ T36] audit: type=1400 audit(1784199819.850:260): avc: denied { mount } for pid=1079 comm="syz.0.202" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.925032][ T36] audit: type=1400 audit(1784199819.850:261): avc: denied { read } for pid=1079 comm="syz.0.202" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.946612][ T36] audit: type=1400 audit(1784199819.850:262): avc: denied { open } for pid=1079 comm="syz.0.202" path="/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.970558][ T394] usb 5-1: device descriptor read/8, error -71 [ 60.023054][ T324] usb 3-1: device descriptor read/8, error -71 [ 60.101568][ T325] usb 2-1: device descriptor read/64, error -71 [ 60.141722][ T324] usb usb3-port1: unable to enumerate USB device [ 60.211655][ T325] usb usb2-port1: attempt power cycle [ 60.221575][ T394] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.252571][ T394] usb 5-1: device descriptor read/8, error -71 [ 60.382747][ T394] usb 5-1: device descriptor read/8, error -71 [ 60.501581][ T394] usb usb5-port1: unable to enumerate USB device [ 60.545654][ T36] audit: type=1400 audit(1784199820.500:263): avc: denied { create } for pid=1084 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 60.571628][ T325] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 60.602680][ T325] usb 2-1: device descriptor read/8, error -71 [ 60.732555][ T325] usb 2-1: device descriptor read/8, error -71 [ 60.831598][ T324] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 60.971663][ T324] usb 1-1: device descriptor read/64, error -71 [ 60.977999][ T325] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 61.003455][ T325] usb 2-1: device descriptor read/8, error -71 [ 61.101635][ T394] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 61.132751][ T325] usb 2-1: device descriptor read/8, error -71 [ 61.211745][ T324] usb 1-1: device descriptor read/64, error -71 [ 61.231592][ T394] usb 3-1: device descriptor read/64, error -71 [ 61.241685][ T325] usb usb2-port1: unable to enumerate USB device [ 61.451577][ T324] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 61.471581][ T394] usb 3-1: device descriptor read/64, error -71 [ 61.511603][ T409] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.581702][ T324] usb 1-1: device descriptor read/64, error -71 [ 61.661603][ T409] usb 5-1: Using ep0 maxpacket: 16 [ 61.667848][ T409] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 61.676064][ T409] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.686209][ T409] usb 5-1: config 0 has no interface number 0 [ 61.693850][ T409] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 61.702962][ T409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.710959][ T409] usb 5-1: Product: syz [ 61.711580][ T394] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 61.715132][ T409] usb 5-1: Manufacturer: syz [ 61.727290][ T409] usb 5-1: SerialNumber: syz [ 61.732673][ T409] usb 5-1: config 0 descriptor?? [ 61.738666][ T409] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 61.745229][ T409] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 61.751600][ T409] usb 5-1: No valid video chain found. [ 61.841638][ T324] usb 1-1: device descriptor read/64, error -71 [ 61.851663][ T394] usb 3-1: device descriptor read/64, error -71 [ 61.939636][ T956] usb 5-1: USB disconnect, device number 6 [ 61.951749][ T324] usb usb1-port1: attempt power cycle [ 62.101618][ T394] usb 3-1: device descriptor read/64, error -71 [ 62.211744][ T394] usb usb3-port1: attempt power cycle [ 62.231640][ T409] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 62.291632][ T324] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 62.312786][ T324] usb 1-1: device descriptor read/8, error -71 [ 62.361810][ T409] usb 2-1: device descriptor read/64, error -71 [ 62.443113][ T324] usb 1-1: device descriptor read/8, error -71 [ 62.493759][ T1095] overlayfs: failed to resolve './file1': -2 [ 62.561621][ T394] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 62.582677][ T394] usb 3-1: device descriptor read/8, error -71 [ 62.601772][ T409] usb 2-1: device descriptor read/64, error -71 [ 62.681729][ T324] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 62.712752][ T394] usb 3-1: device descriptor read/8, error -71 [ 62.712769][ T324] usb 1-1: device descriptor read/8, error -71 [ 62.741603][ T956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.841866][ T409] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 62.850458][ T324] usb 1-1: device descriptor read/8, error -71 [ 62.893805][ T956] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 62.903009][ T956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.911019][ T956] usb 5-1: Product: syz [ 62.915378][ T956] usb 5-1: Manufacturer: syz [ 62.919985][ T956] usb 5-1: SerialNumber: syz [ 62.961844][ T324] usb usb1-port1: unable to enumerate USB device [ 62.971622][ T394] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 62.991552][ T409] usb 2-1: device descriptor read/64, error -71 [ 62.992573][ T394] usb 3-1: device descriptor read/8, error -71 [ 63.127150][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 63.127170][ T36] audit: type=1400 audit(1784199823.080:270): avc: denied { create } for pid=1096 comm="syz.4.208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.154976][ T36] audit: type=1400 audit(1784199823.090:271): avc: denied { unlink } for pid=1021 comm="syz-executor" name="file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.178522][ T394] usb 3-1: device descriptor read/8, error -71 [ 63.200776][ T956] rtl8150 5-1:1.0: couldn't reset the device [ 63.206852][ T956] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 63.216396][ T956] usb 5-1: USB disconnect, device number 7 [ 63.231566][ T409] usb 2-1: device descriptor read/64, error -71 [ 63.291701][ T394] usb usb3-port1: unable to enumerate USB device [ 63.341723][ T409] usb usb2-port1: attempt power cycle [ 63.613671][ T1113] cgroup: fork rejected by pids controller in /syz0 [ 63.641822][ T956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.691569][ T409] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 63.712691][ T409] usb 2-1: device descriptor read/8, error -71 [ 63.801547][ T956] usb 5-1: Using ep0 maxpacket: 32 [ 63.810730][ T956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.822243][ T956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.837103][ T956] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.851583][ T956] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 63.859571][ T409] usb 2-1: device descriptor read/8, error -71 [ 63.864297][ T956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.879998][ T956] usb 5-1: Product: syz [ 63.884236][ T956] usb 5-1: Manufacturer: syz [ 63.889101][ T956] usb 5-1: SerialNumber: syz [ 63.941966][ T1363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 63.993490][ T36] audit: type=1400 audit(1784199823.950:272): avc: denied { search } for pid=1364 comm="syz.2.222" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.016305][ T36] audit: type=1400 audit(1784199823.960:273): avc: denied { accept } for pid=1364 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.101604][ T409] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 64.122762][ T409] usb 2-1: device descriptor read/8, error -71 [ 64.211565][ T394] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 64.252636][ T409] usb 2-1: device descriptor read/8, error -71 [ 64.261583][ T65] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 64.298530][ T956] usb 5-1: unit 0 not found! [ 64.361666][ T409] usb usb2-port1: unable to enumerate USB device [ 64.362700][ T394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.378242][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 64.387913][ T394] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.400751][ T65] usb 3-1: device descriptor read/64, error -71 [ 64.408297][ T394] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 64.417374][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.425395][ T394] usb 1-1: Product: syz [ 64.429561][ T394] usb 1-1: Manufacturer: syz [ 64.434177][ T394] usb 1-1: SerialNumber: syz [ 64.439542][ T394] usb 1-1: config 0 descriptor?? [ 64.502860][ T956] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 64.641562][ T65] usb 3-1: device descriptor read/64, error -71 [ 64.651025][ T956] usb 5-1: unit 0 not found! [ 64.662105][ T956] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 64.672891][ T956] usb 5-1: unit 0 not found! [ 64.680963][ T956] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 64.691183][ T956] usb 5-1: USB disconnect, device number 8 [ 64.699649][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 64.854689][ T409] usb 1-1: USB disconnect, device number 30 [ 64.870667][ T1374] Invalid argument reading file caps for ./file0 [ 64.891579][ T65] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 64.970432][ T1384] batadv_slave_1: entered promiscuous mode [ 64.976969][ T1383] batadv_slave_1: left promiscuous mode [ 65.020579][ T1391] netlink: 6164 bytes leftover after parsing attributes in process `syz.4.231'. [ 65.031604][ T65] usb 3-1: device descriptor read/64, error -71 [ 65.281635][ T409] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 65.281639][ T65] usb 3-1: device descriptor read/64, error -71 [ 65.301628][ T324] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 65.374721][ T36] audit: type=1400 audit(1784199825.330:274): avc: denied { bind } for pid=1396 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.394219][ T36] audit: type=1400 audit(1784199825.330:275): avc: denied { listen } for pid=1396 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.420428][ T65] usb usb3-port1: attempt power cycle [ 65.431587][ T324] usb 2-1: device descriptor read/64, error -71 [ 65.437925][ T409] usb 5-1: Using ep0 maxpacket: 8 [ 65.444144][ T409] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.457944][ T409] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.464690][ T409] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 65.478584][ T409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.491362][ T409] usb 5-1: config 0 descriptor?? [ 65.540170][ T36] audit: type=1400 audit(1784199825.490:276): avc: denied { getopt } for pid=1404 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.681681][ T324] usb 2-1: device descriptor read/64, error -71 [ 65.771580][ T65] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 65.792672][ T65] usb 3-1: device descriptor read/8, error -71 [ 65.903812][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0xd [ 65.910820][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x0 [ 65.917804][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x1 [ 65.922593][ T65] usb 3-1: device descriptor read/8, error -71 [ 65.924803][ T324] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 65.938813][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x0 [ 65.945757][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x0 [ 65.952702][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x3 [ 65.959618][ T409] wacom 0003:056A:0015.0008: unknown main item tag 0x6 [ 65.966945][ T409] wacom 0003:056A:0015.0008: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 65.977204][ T409] wacom 0003:056A:0015.0008: hidraw0: USB HID v0.05 Device [HID 056a:0015] on usb-dummy_hcd.4-1/input0 [ 65.991705][ T409] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0015.0008/input/input6 [ 66.004830][ T36] audit: type=1400 audit(1784199825.960:277): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=551 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.027798][ T36] audit: type=1400 audit(1784199825.960:278): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=551 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.061978][ T36] audit: type=1400 audit(1784199826.020:279): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=551 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.105282][ T409] usb 5-1: USB disconnect, device number 9 [ 66.111704][ T324] usb 2-1: device descriptor read/64, error -71 [ 66.221738][ T65] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 66.242780][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.371657][ T324] usb 2-1: device descriptor read/64, error -71 [ 66.372710][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.461591][ T325] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 66.481685][ T324] usb usb2-port1: attempt power cycle [ 66.491742][ T65] usb usb3-port1: unable to enumerate USB device [ 66.618886][ T325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.627395][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 66.638602][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.648293][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 66.658302][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 66.668210][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 66.683345][ T325] usb 1-1: string descriptor 0 read error: -22 [ 66.689668][ T325] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 66.698770][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.707667][ T325] usb 1-1: config 0 descriptor?? [ 66.712961][ T1417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.725946][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.821623][ T324] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 66.842740][ T324] usb 2-1: device descriptor read/8, error -71 [ 66.923149][ T65] usb 1-1: USB disconnect, device number 31 [ 66.972838][ T324] usb 2-1: device descriptor read/8, error -71 [ 67.221672][ T324] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 67.242754][ T324] usb 2-1: device descriptor read/8, error -71 [ 67.372840][ T324] usb 2-1: device descriptor read/8, error -71 [ 67.481686][ T324] usb usb2-port1: unable to enumerate USB device [ 67.551598][ T394] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 67.681596][ T394] usb 3-1: device descriptor read/64, error -71 [ 67.701642][ T325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 67.711580][ T65] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 67.861634][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 67.861634][ T325] usb 5-1: Using ep0 maxpacket: 16 [ 67.862873][ T325] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.867904][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.872359][ T325] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.882901][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.894079][ T325] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 67.900384][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.910424][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.919201][ T65] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.933450][ T325] usb 5-1: config 0 descriptor?? [ 67.939997][ T394] usb 3-1: device descriptor read/64, error -71 [ 67.960266][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.969128][ T65] usb 1-1: config 0 descriptor?? [ 68.211612][ T394] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 68.341650][ T394] usb 3-1: device descriptor read/64, error -71 [ 68.352588][ T325] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 68.360095][ T325] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 68.367557][ T325] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 68.375120][ T325] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 68.377956][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 68.382579][ T325] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 68.391244][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 68.397169][ T325] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 68.410252][ T65] usb 1-1: USB disconnect, device number 32 [ 68.481648][ T311] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 68.569161][ T1429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.577790][ T1429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.585759][ T394] usb 3-1: device descriptor read/64, error -71 [ 68.641597][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 68.647864][ T311] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.656308][ T311] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.664940][ T311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.673945][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.683971][ T311] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.693826][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.703744][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.716757][ T394] usb usb3-port1: attempt power cycle [ 68.722477][ T311] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.731562][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.740157][ T311] usb 2-1: config 0 descriptor?? [ 68.945684][ T36] audit: type=1400 audit(1784199828.900:280): avc: denied { bind } for pid=1439 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.948377][ T311] usb 2-1: USB disconnect, device number 36 [ 68.966142][ T36] audit: type=1400 audit(1784199828.900:281): avc: denied { mount } for pid=1432 comm="syz.1.246" name="/" dev="overlay" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.061711][ T394] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 69.092726][ T394] usb 3-1: device descriptor read/8, error -71 [ 69.162939][ T36] audit: type=1400 audit(1784199829.120:282): avc: denied { write } for pid=1453 comm="syz.4.252" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.233333][ T36] audit: type=1400 audit(1784199829.190:283): avc: denied { listen } for pid=1455 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.240188][ T394] usb 3-1: device descriptor read/8, error -71 [ 69.271593][ T324] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 69.401655][ T311] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 69.421661][ T324] usb 1-1: Using ep0 maxpacket: 8 [ 69.428164][ T324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.437928][ T324] usb 1-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 69.447024][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.455061][ T324] usb 1-1: Product: у [ 69.459149][ T324] usb 1-1: Manufacturer: 戅甩쑻㨣茰칛䆲죆ᬤ嚲͘Ꙫ箪亃궫㳫켑癵黈楱ڂ⟣揢鶭鰅ﰎ큚珖⤻ኑ剃彲솑샑혽괊₄䓆Ӵ뇦⤄뷁瘁躭쩎鉼컓ⵖ뙣᧗Ĭ飱㉘ꎋ䓛⚃ጁ֛棭륲掇歈〒㆓瘍㠊⭵穋栿黮鬏❵悲덍⬁≼ [ 69.459865][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.486219][ T324] usb 1-1: SerialNumber: ခ [ 69.494025][ T394] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 69.499375][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.520560][ T36] audit: type=1400 audit(1784199829.470:284): avc: denied { accept } for pid=1455 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.541200][ T394] usb 3-1: device descriptor read/8, error -71 [ 69.551569][ T311] usb 2-1: device descriptor read/64, error -71 [ 69.672877][ T394] usb 3-1: device descriptor read/8, error -71 [ 69.722206][ T324] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 69.730784][ T324] usb 1-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 69.738902][ T324] usb 1-1: failed to enable PITCH for EP 0x1 [ 69.745139][ T324] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 69.756681][ T324] usb 1-1: USB disconnect, device number 33 [ 69.768917][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.791802][ T394] usb usb3-port1: unable to enumerate USB device [ 69.801629][ T311] usb 2-1: device descriptor read/64, error -71 [ 70.051641][ T311] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 70.109289][ T36] audit: type=1400 audit(1784199830.060:285): avc: denied { setattr } for pid=1458 comm="syz.2.254" name="CAN_RAW" dev="sockfs" ino=8131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.131988][ T36] audit: type=1400 audit(1784199830.060:286): avc: denied { bind } for pid=1458 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.169977][ T36] audit: type=1400 audit(1784199830.120:287): avc: denied { audit_write } for pid=1462 comm="syz.2.256" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.191458][ T36] audit: type=1107 audit(1784199830.120:288): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=']ڙ$/jsBa%Dp͐xͰ|B' [ 70.192328][ T311] usb 2-1: device descriptor read/64, error -71 [ 70.228145][ T36] audit: type=1400 audit(1784199830.180:289): avc: denied { create } for pid=1468 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.229797][ T1469] incfs: Error accessing: ./cgroup.cpu/cpuset.cpus. [ 70.259413][ T1469] incfs: mount failed -20 [ 70.270438][ T1469] tipc: MTU too low for tipc bearer [ 70.324659][ T1478] netlink: 182 bytes leftover after parsing attributes in process `syz.0.263'. [ 70.345138][ T1481] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 70.426393][ T1486] netlink: 'syz.0.266': attribute type 4 has an invalid length. [ 70.451769][ T311] usb 2-1: device descriptor read/64, error -71 [ 70.571742][ T311] usb usb2-port1: attempt power cycle [ 70.781610][ T325] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 70.911572][ T311] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 70.931564][ T325] usb 1-1: Using ep0 maxpacket: 16 [ 70.932656][ T311] usb 2-1: device descriptor read/8, error -71 [ 70.937895][ T325] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 70.952658][ T325] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.961736][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.969721][ T325] usb 1-1: Product: syz [ 70.973902][ T325] usb 1-1: Manufacturer: syz [ 70.978511][ T325] usb 1-1: SerialNumber: syz [ 70.985849][ T325] r8152-cfgselector 1-1: Unknown version 0x0000 [ 70.992144][ T325] r8152-cfgselector 1-1: config 0 descriptor?? [ 71.072623][ T311] usb 2-1: device descriptor read/8, error -71 [ 71.292388][ T1517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 71.316121][ T1521] 9p: Unknown uid 00000000004294967295 [ 71.316965][ T1516] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 71.341125][ T1516] kvm: kvm [1515]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 71.350022][ T1516] kvm: kvm [1515]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 71.400888][ T325] r8152-cfgselector 1-1: Needed 1 retries to read version [ 71.420605][ T1527] mmap: syz.2.280 (1527) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.548427][ T1531] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 71.556308][ T1531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.281'. [ 71.977820][ T325] r8152-cfgselector 1-1: USB disconnect, device number 34 [ 72.318737][ T1545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.328118][ T1545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.621610][ T325] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 72.651753][ T394] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 72.771635][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 72.778222][ T325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.786602][ T325] usb 3-1: config 1 has an invalid interface number: 36 but max is 0 [ 72.791582][ T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 72.794806][ T325] usb 3-1: config 1 has no interface number 0 [ 72.808496][ T325] usb 3-1: too many endpoints for config 1 interface 36 altsetting 79: 140, using maximum allowed: 30 [ 72.819510][ T325] usb 3-1: config 1 interface 36 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 72.832727][ T325] usb 3-1: config 1 interface 36 has no altsetting 0 [ 72.840670][ T325] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 72.842721][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.849766][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.868534][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.874989][ T325] usb 3-1: Product: syz [ 72.881121][ T394] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.885341][ T325] usb 3-1: Manufacturer: syz [ 72.891936][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.901541][ T325] usb 3-1: SerialNumber: syz [ 72.905231][ T394] usb 2-1: config 0 descriptor?? [ 72.951546][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 72.957811][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 72.966600][ T45] usb 1-1: config 0 has no interface number 0 [ 72.972948][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 72.987481][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 72.999140][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 73.008370][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.016419][ T45] usb 1-1: Product: syz [ 73.020602][ T45] usb 1-1: Manufacturer: syz [ 73.025260][ T45] usb 1-1: SerialNumber: syz [ 73.030713][ T45] usb 1-1: config 0 descriptor?? [ 73.036088][ T1561] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.043539][ T1561] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.069439][ T1574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.078175][ T1574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.145717][ T325] usb 3-1: USB disconnect, device number 39 [ 73.253727][ T1561] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.260941][ T1561] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.287794][ T1574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.296432][ T1574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.468942][ T45] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 73.479083][ T45] asix 1-1:0.34: probe with driver asix failed with error -61 [ 73.671376][ T45] usb 1-1: USB disconnect, device number 35 [ 73.723149][ T394] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 73.732068][ T394] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 73.739559][ T394] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 73.750442][ T394] usb 2-1: USB disconnect, device number 41 [ 73.882821][ T1590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.891330][ T1590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.027548][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 74.027566][ T36] audit: type=1400 audit(1784199833.980:303): avc: denied { relabelfrom } for pid=1591 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 74.053530][ T36] audit: type=1400 audit(1784199833.980:304): avc: denied { relabelto } for pid=1591 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 74.191313][ T36] audit: type=1400 audit(1784199834.140:305): avc: denied { getattr } for pid=1601 comm="syz.0.307" name="/" dev="incremental-fs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.221338][ T36] audit: type=1400 audit(1784199834.140:306): avc: denied { rename } for pid=1601 comm="syz.0.307" name="file0" dev="overlay" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.249374][ T36] audit: type=1400 audit(1784199834.140:307): avc: denied { write open } for pid=1601 comm="syz.0.307" path=2F202864656C6574656429 dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.287203][ T1609] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 74.291177][ T36] audit: type=1400 audit(1784199834.140:308): avc: denied { setattr } for pid=1601 comm="syz.0.307" name="#458" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.302812][ T1609] syzkaller1: owner set to 0 [ 74.316246][ T36] audit: type=1400 audit(1784199834.140:309): avc: denied { link } for pid=1601 comm="syz.0.307" name="#458" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.351289][ T36] audit: type=1400 audit(1784199834.140:310): avc: denied { read } for pid=1601 comm="syz.0.307" name="file2" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.391128][ T36] audit: type=1400 audit(1784199834.200:311): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.501871][ T1618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 74.529817][ T36] audit: type=1400 audit(1784199834.480:312): avc: denied { setcurrent } for pid=1621 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.551559][ T409] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 74.573464][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.587299][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.651563][ T394] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 74.731534][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 74.742591][ T409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.749286][ T409] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 74.768509][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.782873][ T409] usb 2-1: config 0 descriptor?? [ 74.801685][ T394] usb 1-1: Using ep0 maxpacket: 8 [ 74.807880][ T394] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.821728][ T394] usb 1-1: config 179 has no interface number 0 [ 74.831540][ T394] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.851528][ T394] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.862838][ T394] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.881550][ T394] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.901533][ T394] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.915002][ T394] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.924268][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.936239][ T1616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 75.029447][ T409] usbhid 2-1:0.0: can't add hid device: -71 [ 75.035513][ T409] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.052749][ T409] usb 2-1: USB disconnect, device number 42 [ 75.150708][ T394] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9 [ 75.220719][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.251697][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.552123][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.552124][ T324] usb 1-1: USB disconnect, device number 36 [ 75.552264][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 75.574950][ T324] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 75.641588][ T409] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 75.791578][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 75.798019][ T409] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 75.807872][ T409] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 75.817023][ T409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.825062][ T409] usb 2-1: Product: syz [ 75.829243][ T409] usb 2-1: Manufacturer: syz [ 75.833887][ T409] usb 2-1: SerialNumber: syz [ 75.840706][ T409] r8152-cfgselector 2-1: Unknown version 0x0000 [ 75.850048][ T409] r8152-cfgselector 2-1: config 0 descriptor?? [ 76.094208][ T1672] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.108362][ T1672] loop6: detected capacity change from 0 to 9 [ 76.118934][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 76.226745][ T1678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.235386][ T1678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.259140][ T409] r8152-cfgselector 2-1: Needed 1 retries to read version [ 76.381576][ T324] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 76.523491][ T394] r8152-cfgselector 2-1: USB disconnect, device number 43 [ 76.531948][ T324] usb 1-1: Using ep0 maxpacket: 16 [ 76.538227][ T324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 76.549844][ T324] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 76.559068][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.567771][ T324] usb 1-1: config 0 descriptor?? [ 76.621615][ T409] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 76.762313][ T1686] rust_binder: 1685:1686 transaction to 0 failed: EINVAL [ 76.762742][ T1686] overlay: Unknown parameter 'permit_directio' [ 76.777664][ T1688] overlay: Unknown parameter 'permit_directio' [ 76.781557][ T409] usb 3-1: Using ep0 maxpacket: 32 [ 76.790229][ T409] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.798776][ T409] usb 3-1: config 0 has no interface number 0 [ 76.805370][ T409] usb 3-1: config 0 interface 184 has no altsetting 0 [ 76.814379][ T409] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.821010][ T1690] syz.4.340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 76.823807][ T409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.838241][ T1690] CPU: 1 UID: 0 PID: 1690 Comm: syz.4.340 Not tainted syzkaller #0 ea5b7897df5a307b165a8956328ee25f321bdeb9 [ 76.838273][ T1690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 76.838285][ T1690] Call Trace: [ 76.838292][ T1690] [ 76.838300][ T1690] __dump_stack+0x21/0x30 [ 76.838334][ T1690] dump_stack_lvl+0x140/0x1c0 [ 76.838361][ T1690] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.838389][ T1690] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 76.838413][ T1690] dump_stack+0x19/0x20 [ 76.838437][ T1690] warn_alloc+0x1e7/0x2c0 [ 76.838463][ T1690] ? stack_depot_save_flags+0x38/0x800 [ 76.838486][ T1690] ? __cfi_warn_alloc+0x10/0x10 [ 76.838512][ T1690] ? kasan_save_track+0x3e/0x80 [ 76.838532][ T1690] ? kasan_save_alloc_info+0x3a/0x50 [ 76.838558][ T1690] ? xsk_init_queue+0xb2/0x120 [ 76.838582][ T1690] ? xsk_setsockopt+0x411/0x760 [ 76.838604][ T1690] ? do_sock_setsockopt+0x27f/0x410 [ 76.838631][ T1690] ? __x64_sys_setsockopt+0x1b7/0x250 [ 76.838649][ T1690] ? x64_sys_call+0x2adc/0x2ee0 [ 76.838666][ T1690] ? do_syscall_64+0x57/0xf0 [ 76.838687][ T1690] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.838711][ T1690] __vmalloc_node_range_noprof+0x136/0x1300 [ 76.838743][ T1690] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 76.838771][ T1690] ? kasan_save_alloc_info+0x3a/0x50 [ 76.838798][ T1690] ? __kasan_kmalloc+0x96/0xb0 [ 76.838820][ T1690] ? __kmalloc_cache_noprof+0x23c/0x470 [ 76.838841][ T1690] vmalloc_user_noprof+0x77/0x90 [ 76.838867][ T1690] ? xskq_create+0xdb/0x290 [ 76.838890][ T1690] xskq_create+0xdb/0x290 [ 76.838914][ T1690] xsk_init_queue+0xb2/0x120 [ 76.838936][ T1690] xsk_setsockopt+0x411/0x760 [ 76.838958][ T1690] ? __cfi_xsk_setsockopt+0x10/0x10 [ 76.838980][ T1690] ? do_futex+0x32a/0x510 [ 76.839036][ T1690] ? errseq_sample+0x48/0x70 [ 76.839064][ T1690] ? file_init_path+0x434/0x590 [ 76.839090][ T1690] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 76.839114][ T1690] ? security_socket_setsockopt+0x3d/0x100 [ 76.839141][ T1690] ? __cfi_xsk_setsockopt+0x10/0x10 [ 76.839164][ T1690] do_sock_setsockopt+0x27f/0x410 [ 76.839194][ T1690] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 76.839224][ T1690] ? xfd_validate_state+0x68/0x140 [ 76.839254][ T1690] ? __kasan_check_read+0x15/0x20 [ 76.839274][ T1690] __x64_sys_setsockopt+0x1b7/0x250 [ 76.839293][ T1690] x64_sys_call+0x2adc/0x2ee0 [ 76.839310][ T1690] do_syscall_64+0x57/0xf0 [ 76.839330][ T1690] ? clear_bhb_loop+0x50/0xa0 [ 76.839354][ T1690] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.839377][ T1690] RIP: 0033:0x7f059c99de59 [ 76.839395][ T1690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.839412][ T1690] RSP: 002b:00007f059b3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.839433][ T1690] RAX: ffffffffffffffda RBX: 00007f059cc25fa0 RCX: 00007f059c99de59 [ 76.839448][ T1690] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 76.839461][ T1690] RBP: 00007f059ca33e6f R08: 0000000000000004 R09: 0000000000000000 [ 76.839474][ T1690] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.839487][ T1690] R13: 00007f059cc26038 R14: 00007f059cc25fa0 R15: 00007ffd601bfc58 [ 76.839504][ T1690] [ 76.839512][ T1690] Mem-Info: [ 76.850116][ T409] usb 3-1: Product: syz [ 76.857883][ T1690] active_anon:8058 inactive_anon:2 isolated_anon:0 [ 76.857883][ T1690] active_file:16786 inactive_file:2587 isolated_file:0 [ 76.857883][ T1690] unevictable:0 dirty:65 writeback:0 [ 76.857883][ T1690] slab_reclaimable:4716 slab_unreclaimable:72429 [ 76.857883][ T1690] mapped:25097 shmem:169 pagetables:1002 [ 76.857883][ T1690] sec_pagetables:0 bounce:0 [ 76.857883][ T1690] kernel_misc_reclaimable:0 [ 76.857883][ T1690] free:1522551 free_pcp:2390 free_cma:0 [ 76.868422][ T409] usb 3-1: Manufacturer: syz [ 76.871191][ T1690] Node 0 active_anon:32232kB inactive_anon:8kB active_file:67144kB inactive_file:10348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100388kB dirty:260kB writeback:0kB shmem:676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6756kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no [ 76.874284][ T409] usb 3-1: SerialNumber: syz [ 76.878793][ T1690] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963396kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:0kB free_cma:0kB [ 76.884613][ T409] usb 3-1: config 0 descriptor?? [ 76.892269][ T1690] lowmem_reserve[]: [ 76.895529][ T409] smsc75xx v1.0.0 [ 76.898388][ T1690] 0 3921 3921 [ 76.898421][ T1690] Normal free:3131912kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32232kB inactive_anon:8kB active_file:67144kB inactive_file:10348kB unevictable:0kB writepending:260kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4264kB local_pcp:3928kB free_cma:0kB [ 76.980383][ T324] input: HID 28bd:0934 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.000B/input/input10 [ 76.981520][ T1690] lowmem_reserve[]: [ 76.988888][ T324] uclogic 0003:28BD:0934.000B: input,hidraw1: USB HID v9.62 Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0 [ 76.992860][ T1690] 0 [ 77.181612][ T9] usb 1-1: USB disconnect, device number 37 [ 77.273029][ T1690] 0 [ 77.300651][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.302787][ T1690] 0 [ 77.305790][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.338015][ T1690] [ 77.350781][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 77.373920][ T1690] DMA32: [ 77.377576][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 77.388001][ T1690] 5*4kB [ 77.388877][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 77.401350][ T1690] (M) [ 77.410784][ T409] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 77.413575][ T1690] 4*8kB [ 77.425502][ T409] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 77.427094][ T1690] (M) [ 77.441599][ T324] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 77.448327][ T1690] 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 77.482702][ T1690] Normal: 302*4kB (UME) 414*8kB (UME) 291*16kB (UME) 323*32kB (UME) 238*64kB (UME) 101*128kB (UME) 12*256kB (UME) 23*512kB (UME) 6*1024kB (ME) 7*2048kB (UM) 745*4096kB (UM) = 3134520kB [ 77.501086][ T1690] 19544 total pagecache pages [ 77.505793][ T1690] 5 pages in swap cache [ 77.509934][ T1690] Free swap = 124728kB [ 77.514120][ T1690] Total swap = 124996kB [ 77.518298][ T1690] 2097051 pages RAM [ 77.522119][ T1690] 0 pages HighMem/MovableOnly [ 77.526801][ T1690] 352236 pages reserved [ 77.530986][ T1690] 0 pages cma reserved [ 77.536647][ T1690] Memory allocations: [ 77.540637][ T1690] 0 B 0 init/main.c:1477 func:do_initcalls [ 77.547896][ T1690] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 77.555993][ T1690] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 77.563790][ T1690] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 77.571855][ T1690] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 77.579764][ T1690] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 77.588390][ T1690] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 77.596337][ T1690] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 77.601548][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 77.604279][ T1690] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 77.610933][ T324] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.617297][ T1690] 0 B 0 init/initramfs.c:101 func:find_link [ 77.638394][ T324] usb 2-1: config 0 has no interface number 0 [ 77.644657][ T324] usb 2-1: config 0 interface 184 has no altsetting 0 [ 77.657147][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 77.667049][ T324] usb 2-1: string descriptor 0 read error: -71 [ 77.675939][ T324] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.685242][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.695381][ T324] usb 2-1: config 0 descriptor?? [ 77.700584][ T324] usb 2-1: can't set config #0, error -71 [ 77.707842][ T324] usb 2-1: USB disconnect, device number 44 [ 79.356731][ T36] kauditd_printk_skb: 219 callbacks suppressed [ 79.356751][ T36] audit: type=1400 audit(1784199839.310:532): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.386992][ T36] audit: type=1400 audit(1784199839.320:533): avc: denied { read write } for pid=1774 comm="syz.4.371" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 79.410765][ T36] audit: type=1400 audit(1784199839.320:534): avc: denied { read } for pid=1774 comm="syz.4.371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 79.419277][ T45] usb 3-1: USB disconnect, device number 40 [ 79.436108][ T36] audit: type=1400 audit(1784199839.370:535): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.463182][ T36] audit: type=1400 audit(1784199839.390:536): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.501055][ T36] audit: type=1400 audit(1784199839.420:537): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.529703][ T36] audit: type=1400 audit(1784199839.440:538): avc: denied { create } for pid=1778 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 79.550983][ T36] audit: type=1400 audit(1784199839.440:539): avc: denied { create } for pid=1778 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 79.571619][ T36] audit: type=1400 audit(1784199839.440:540): avc: denied { execute } for pid=1778 comm="syz.1.373" name="file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 79.599909][ T36] audit: type=1400 audit(1784199839.450:541): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.908376][ T1819] syz.4.389 uses obsolete (PF_INET,SOCK_PACKET) [ 80.692277][ T1848] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 80.699956][ T1848] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 81.723242][ T1904] netlink: 9 bytes leftover after parsing attributes in process `syz.0.423'. [ 81.733061][ T1904] gretap0: entered promiscuous mode [ 81.747558][ T1914] netlink: 'syz.0.426': attribute type 46 has an invalid length. [ 81.844890][ T1929] IPv6: A: Disabled Multicast RS [ 82.996036][ T1984] syzkaller1: entered promiscuous mode [ 83.001631][ T1984] syzkaller1: entered allmulticast mode [ 83.019890][ T1988] netlink: 'syz.0.454': attribute type 19 has an invalid length. [ 84.416033][ T36] kauditd_printk_skb: 351 callbacks suppressed [ 84.416052][ T36] audit: type=1400 audit(1784199844.370:893): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.487493][ T36] audit: type=1400 audit(1784199844.440:894): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.511583][ T36] audit: type=1400 audit(1784199844.450:895): avc: denied { create } for pid=2051 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 84.531479][ T36] audit: type=1400 audit(1784199844.450:896): avc: denied { create } for pid=2051 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 84.552160][ T36] audit: type=1400 audit(1784199844.450:897): avc: denied { create } for pid=2051 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 84.574872][ T36] audit: type=1400 audit(1784199844.450:898): avc: denied { create } for pid=2051 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 84.595530][ T36] audit: type=1400 audit(1784199844.450:899): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.619812][ T36] audit: type=1400 audit(1784199844.550:900): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.643931][ T36] audit: type=1400 audit(1784199844.550:901): avc: denied { read write } for pid=2059 comm="syz.4.480" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 84.667303][ T36] audit: type=1400 audit(1784199844.550:902): avc: denied { read } for pid=2059 comm="syz.4.480" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 84.730561][ T2066] FAULT_INJECTION: forcing a failure. [ 84.730561][ T2066] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.743689][ T2066] CPU: 1 UID: 0 PID: 2066 Comm: syz.0.483 Not tainted syzkaller #0 ea5b7897df5a307b165a8956328ee25f321bdeb9 [ 84.743723][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 84.743732][ T2066] Call Trace: [ 84.743737][ T2066] [ 84.743744][ T2066] __dump_stack+0x21/0x30 [ 84.743768][ T2066] dump_stack_lvl+0x140/0x1c0 [ 84.743786][ T2066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.743803][ T2066] ? check_stack_object+0x138/0x150 [ 84.743817][ T2066] dump_stack+0x19/0x20 [ 84.743833][ T2066] should_fail_ex+0x3c2/0x510 [ 84.743848][ T2066] should_fail+0xf/0x20 [ 84.743860][ T2066] should_fail_usercopy+0x1e/0x30 [ 84.743874][ T2066] _copy_to_user+0x24/0xa0 [ 84.743891][ T2066] simple_read_from_buffer+0xed/0x160 [ 84.743908][ T2066] proc_fail_nth_read+0x1aa/0x220 [ 84.743925][ T2066] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.743943][ T2066] ? bpf_lsm_file_permission+0xd/0x20 [ 84.743960][ T2066] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.743984][ T2066] vfs_read+0x288/0xc70 [ 84.744005][ T2066] ? __cfi_vfs_read+0x10/0x10 [ 84.744022][ T2066] ? __kasan_check_write+0x18/0x20 [ 84.744041][ T2066] ? mutex_lock+0x97/0x1d0 [ 84.744058][ T2066] ? __cfi_mutex_lock+0x10/0x10 [ 84.744075][ T2066] ksys_read+0x145/0x260 [ 84.744087][ T2066] ? __cfi_ksys_read+0x10/0x10 [ 84.744100][ T2066] ? __kasan_check_read+0x15/0x20 [ 84.744112][ T2066] __x64_sys_read+0x7f/0x90 [ 84.744125][ T2066] x64_sys_call+0x2638/0x2ee0 [ 84.744136][ T2066] do_syscall_64+0x57/0xf0 [ 84.744149][ T2066] ? clear_bhb_loop+0x50/0xa0 [ 84.744165][ T2066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.744181][ T2066] RIP: 0033:0x7f7f5ff5e68e [ 84.744193][ T2066] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.744205][ T2066] RSP: 002b:00007f7f60e94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.744221][ T2066] RAX: ffffffffffffffda RBX: 00007f7f60e956c0 RCX: 00007f7f5ff5e68e [ 84.744230][ T2066] RDX: 000000000000000f RSI: 00007f7f60e950a0 RDI: 0000000000000005 [ 84.744239][ T2066] RBP: 00007f7f60e95090 R08: 0000000000000000 R09: 0000000000000000 [ 84.744247][ T2066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.744254][ T2066] R13: 00007f7f60226038 R14: 00007f7f60225fa0 R15: 00007ffce2c15268 [ 84.744265][ T2066] [ 85.538562][ T2111] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 86.652993][ T2151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 86.832124][ T2161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 87.227404][ T2173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27461 sclass=netlink_route_socket pid=2173 comm=syz.1.524 [ 87.240299][ T2173] netlink: 'syz.1.524': attribute type 3 has an invalid length. [ 87.250579][ T2173] syzkaller1: entered promiscuous mode [ 87.256105][ T2173] syzkaller1: entered allmulticast mode [ 88.054843][ T2209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2209 comm=syz.0.536 [ 88.351983][ T2215] netlink: 'syz.1.539': attribute type 28 has an invalid length. [ 89.122425][ T2227] batadv_slave_1: entered promiscuous mode [ 89.441283][ T36] kauditd_printk_skb: 316 callbacks suppressed [ 89.441303][ T36] audit: type=1400 audit(1784199849.390:1219): avc: denied { read write } for pid=2231 comm="syz.2.547" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 89.841532][ T36] audit: type=1400 audit(1784199849.790:1220): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.865630][ T36] audit: type=1400 audit(1784199849.800:1221): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 89.885308][ T36] audit: type=1400 audit(1784199849.800:1222): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 89.904953][ T36] audit: type=1400 audit(1784199849.800:1223): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 89.925451][ T36] audit: type=1400 audit(1784199849.800:1224): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 89.946165][ T36] audit: type=1400 audit(1784199849.800:1225): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 89.966590][ T36] audit: type=1400 audit(1784199849.800:1226): avc: denied { create } for pid=2241 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 89.986976][ T36] audit: type=1400 audit(1784199849.800:1227): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.011070][ T36] audit: type=1400 audit(1784199849.810:1228): avc: denied { create } for pid=2243 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 90.463477][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 91.688555][ T2316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2316 comm=syz.4.575 [ 91.710941][ T2319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49010 sclass=netlink_route_socket pid=2319 comm=syz.4.576 [ 91.724329][ T2320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49010 sclass=netlink_route_socket pid=2320 comm=syz.4.576 [ 91.838914][ T2329] netlink: 'syz.4.580': attribute type 25 has an invalid length. [ 91.868895][ T2333] netlink: 188 bytes leftover after parsing attributes in process `syz.4.582'. [ 92.219302][ T2348] netlink: 'syz.1.587': attribute type 3 has an invalid length. [ 92.227085][ T2348] netlink: 944 bytes leftover after parsing attributes in process `syz.1.587'. [ 94.085130][ T2438] syzkaller1: entered promiscuous mode [ 94.092541][ T2438] syzkaller1: entered allmulticast mode [ 94.512704][ T36] kauditd_printk_skb: 404 callbacks suppressed [ 94.512723][ T36] audit: type=1400 audit(1784202432.469:1633): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.547967][ T36] audit: type=1400 audit(1784202432.499:1634): avc: denied { create } for pid=2450 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 94.681521][ T36] audit: type=1400 audit(1784202432.619:1635): avc: denied { read } for pid=2450 comm="syz.2.626" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 94.716084][ T36] audit: type=1400 audit(1784202432.619:1636): avc: denied { sys_module } for pid=2450 comm="syz.2.626" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 94.738320][ T36] audit: type=1400 audit(1784202432.659:1637): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.763164][ T36] audit: type=1400 audit(1784202432.669:1638): avc: denied { create } for pid=2454 comm="syz.4.627" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 94.803019][ T36] audit: type=1400 audit(1784202432.729:1639): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.828524][ T36] audit: type=1400 audit(1784202432.739:1640): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.853804][ T36] audit: type=1400 audit(1784202432.749:1641): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.878444][ T36] audit: type=1400 audit(1784202432.749:1642): avc: denied { read write } for pid=2456 comm="syz.2.629" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 95.029197][ T2479] netlink: 1 bytes leftover after parsing attributes in process `syz.1.637'. [ 97.968454][ T295] cgroup: fork rejected by pids controller in /syz1 [ 99.636930][ T36] kauditd_printk_skb: 272 callbacks suppressed [ 99.636950][ T36] audit: type=1400 audit(1784202437.590:1915): avc: denied { read write } for pid=2598 comm="syz.4.682" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 99.666612][ T36] audit: type=1400 audit(1784202437.590:1916): avc: denied { execmem } for pid=2596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 99.686026][ T36] audit: type=1400 audit(1784202437.600:1917): avc: denied { read write } for pid=2597 comm="syz.0.681" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 99.709447][ T36] audit: type=1400 audit(1784202437.600:1918): avc: denied { read write } for pid=2597 comm="syz.0.681" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 100.153492][ T36] audit: type=1400 audit(1784202438.110:1919): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.177650][ T36] audit: type=1400 audit(1784202438.110:1920): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.278063][ T36] audit: type=1400 audit(1784202438.230:1921): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.356585][ T36] audit: type=1400 audit(1784202438.310:1922): avc: denied { execmem } for pid=2601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 100.378171][ T2607] netlink: 5 bytes leftover after parsing attributes in process `syz.0.683'. [ 100.378252][ T36] audit: type=1400 audit(1784202438.310:1923): avc: denied { create } for pid=2604 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 100.393599][ T2607] netlink: 5 bytes leftover after parsing attributes in process `syz.0.683'. [ 100.409807][ T36] audit: type=1400 audit(1784202438.310:1924): avc: denied { read } for pid=2604 comm="syz.4.685" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 101.195896][ T2617] netlink: 'syz.4.688': attribute type 4 has an invalid length. [ 104.740219][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 104.740238][ T36] audit: type=1400 audit(1784202442.690:1999): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.447638][ T36] audit: type=1400 audit(1784202443.400:2001): avc: denied { create } for pid=2644 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 105.467067][ T36] audit: type=1400 audit(1784202443.400:2000): avc: denied { read write } for pid=2645 comm="syz.2.699" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 105.490500][ T36] audit: type=1400 audit(1784202443.400:2002): avc: denied { execmem } for pid=2643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 105.509918][ T36] audit: type=1400 audit(1784202443.410:2003): avc: denied { read } for pid=2645 comm="syz.2.699" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.532460][ T36] audit: type=1400 audit(1784202443.410:2004): avc: denied { create } for pid=2646 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.552825][ T36] audit: type=1400 audit(1784202443.410:2005): avc: denied { create } for pid=2646 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.573218][ T36] audit: type=1400 audit(1784202443.410:2006): avc: denied { read } for pid=2646 comm="syz.0.698" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 105.594437][ T36] audit: type=1400 audit(1784202443.410:2007): avc: denied { read } for pid=2646 comm="syz.0.698" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 105.616962][ T36] audit: type=1400 audit(1784202443.410:2008): avc: denied { create } for pid=2646 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 106.775843][ T2655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 110.204441][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 110.204460][ T36] audit: type=1400 audit(1784202448.161:2058): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.303655][ T36] audit: type=1400 audit(1784202449.261:2059): avc: denied { execmem } for pid=2684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 111.323794][ T36] audit: type=1400 audit(1784202449.281:2060): avc: denied { create } for pid=2687 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 111.344552][ T36] audit: type=1400 audit(1784202449.281:2061): avc: denied { read } for pid=2686 comm="syz.0.711" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 111.367210][ T36] audit: type=1400 audit(1784202449.281:2062): avc: denied { create } for pid=2687 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 111.387661][ T36] audit: type=1400 audit(1784202449.281:2063): avc: denied { create } for pid=2685 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 111.407064][ T36] audit: type=1400 audit(1784202449.281:2064): avc: denied { create } for pid=2685 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 111.426487][ T36] audit: type=1400 audit(1784202449.281:2065): avc: denied { read write } for pid=1021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.450652][ T36] audit: type=1400 audit(1784202449.361:2066): avc: denied { read } for pid=2686 comm="syz.0.711" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 111.473233][ T36] audit: type=1400 audit(1784202449.381:2067): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.039359][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 114.864979][ T2714] bridge0: port 3(veth0_to_team) entered blocking state [ 114.876311][ T2714] bridge0: port 3(veth0_to_team) entered disabled state [ 114.883358][ T2714] veth0_to_team: entered allmulticast mode [ 114.889583][ T2714] veth0_to_team: entered promiscuous mode [ 115.401550][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 115.401570][ T36] audit: type=1400 audit(1784202453.362:2091): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.783875][ T36] audit: type=1400 audit(1784202454.742:2092): avc: denied { read write } for pid=2717 comm="syz.2.721" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.810375][ T36] audit: type=1400 audit(1784202454.742:2093): avc: denied { execmem } for pid=2715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 116.829858][ T36] audit: type=1400 audit(1784202454.742:2094): avc: denied { read write } for pid=2716 comm="syz.0.722" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 116.853255][ T36] audit: type=1400 audit(1784202454.742:2095): avc: denied { read } for pid=2716 comm="syz.0.722" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.875767][ T36] audit: type=1400 audit(1784202454.762:2096): avc: denied { read write } for pid=2719 comm="syz.4.723" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 116.899762][ T36] audit: type=1400 audit(1784202454.772:2097): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.923747][ T36] audit: type=1400 audit(1784202454.772:2098): avc: denied { checkpoint_restore } for pid=2719 comm="syz.4.723" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 116.945479][ T36] audit: type=1400 audit(1784202454.772:2099): avc: denied { checkpoint_restore } for pid=2719 comm="syz.4.723" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 116.967208][ T36] audit: type=1400 audit(1784202454.772:2100): avc: denied { read write } for pid=2719 comm="syz.4.723" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 119.081090][ T394] usb 5-1: USB disconnect, device number 10 [ 119.169705][ T722] bridge_slave_1: left allmulticast mode [ 119.175367][ T722] bridge_slave_1: left promiscuous mode [ 119.181035][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.188438][ T722] bridge_slave_0: left allmulticast mode [ 119.194271][ T722] bridge_slave_0: left promiscuous mode [ 119.199914][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.207433][ T722] bridge_slave_1: left allmulticast mode [ 119.213249][ T722] bridge_slave_1: left promiscuous mode [ 119.218867][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.226505][ T722] bridge_slave_0: left allmulticast mode [ 119.232243][ T722] bridge_slave_0: left promiscuous mode [ 119.237854][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.371825][ T722] veth1_macvtap: left promiscuous mode [ 119.377372][ T722] veth0_vlan: left promiscuous mode [ 119.382899][ T722] veth1_macvtap: left promiscuous mode [ 119.639617][ T722] ------------[ cut here ]------------ [ 119.645117][ T722] WARNING: CPU: 1 PID: 722 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 119.655168][ T722] Modules linked in: [ 119.659108][ T722] CPU: 1 UID: 0 PID: 722 Comm: kworker/u8:30 Not tainted syzkaller #0 ea5b7897df5a307b165a8956328ee25f321bdeb9 [ 119.670857][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 119.680948][ T722] Workqueue: netns cleanup_net [ 119.685746][ T722] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 119.691784][ T722] Code: e8 b1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 45 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 37 5b 7e fc 49 83 c7 08 eb c9 e8 2c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 119.711435][ T722] RSP: 0018:ffffc9000f127b90 EFLAGS: 00010293 [ 119.717524][ T722] RAX: ffffffff850916c4 RBX: ffff88810c292380 RCX: ffff888110d02600 [ 119.725530][ T722] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f08000 [ 119.733653][ T722] RBP: ffffc9000f127bb0 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 119.741744][ T722] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: dffffc0000000000 [ 119.749858][ T722] R13: dffffc0000000000 R14: ffff888103f08000 R15: 0000000000000000 [ 119.757858][ T722] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 119.766854][ T722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.773484][ T722] CR2: 000056420df5f390 CR3: 000000010c7ea000 CR4: 00000000003526b0 [ 119.781509][ T722] Call Trace: [ 119.784802][ T722] [ 119.787726][ T722] cleanup_net+0x6ba/0xc90 [ 119.792187][ T722] ? __cfi_cleanup_net+0x10/0x10 [ 119.797144][ T722] ? kick_pool+0xb9/0x540 [ 119.801508][ T722] process_scheduled_works+0x7f7/0x1060 [ 119.807073][ T722] worker_thread+0xc99/0x13f0 [ 119.811778][ T722] kthread+0x2c7/0x360 [ 119.815868][ T722] ? __cfi_worker_thread+0x10/0x10 [ 119.821015][ T722] ? __cfi_kthread+0x10/0x10 [ 119.825622][ T722] ret_from_fork+0x67/0xa0 [ 119.830112][ T722] ? __cfi_kthread+0x10/0x10 [ 119.834812][ T722] ret_from_fork_asm+0x1a/0x30 [ 119.839611][ T722] [ 119.842650][ T722] ---[ end trace 0000000000000000 ]--- [ 119.848501][ T722] ------------[ cut here ]------------ [ 119.853990][ T722] WARNING: CPU: 0 PID: 722 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 119.864130][ T722] Modules linked in: [ 119.868053][ T722] CPU: 0 UID: 0 PID: 722 Comm: kworker/u8:30 Tainted: G W syzkaller #0 ea5b7897df5a307b165a8956328ee25f321bdeb9 [ 119.881432][ T722] Tainted: [W]=WARN [ 119.885246][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 119.895443][ T722] Workqueue: netns cleanup_net [ 119.900270][ T722] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 119.906369][ T722] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 e2 5a 7e fc 49 83 c7 08 eb c5 e8 d7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 5a 7e fc 5b 41 5c 41 5e 41 [ 119.926028][ T722] RSP: 0018:ffffc9000f127b90 EFLAGS: 00010293 [ 119.932138][ T722] RAX: ffffffff85091719 RBX: ffff888103f08800 RCX: ffff888110d02600 [ 119.940259][ T722] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f08810 [ 119.948251][ T722] RBP: ffffc9000f127bb0 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 119.956266][ T722] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: dffffc0000000000 [ 119.964307][ T722] R13: dffffc0000000000 R14: ffff888103f08000 R15: 0000000000000010 [ 119.972341][ T722] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 119.981323][ T722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.987922][ T722] CR2: 00007ffd9033ee98 CR3: 000000010cb20000 CR4: 00000000003526b0 [ 119.995985][ T722] Call Trace: [ 119.999305][ T722] [ 120.002275][ T722] cleanup_net+0x6ba/0xc90 [ 120.006694][ T722] ? __cfi_cleanup_net+0x10/0x10 [ 120.011663][ T722] ? kick_pool+0xb9/0x540 [ 120.016014][ T722] process_scheduled_works+0x7f7/0x1060 [ 120.021592][ T722] worker_thread+0xc99/0x13f0 [ 120.026290][ T722] kthread+0x2c7/0x360 [ 120.030393][ T722] ? __cfi_worker_thread+0x10/0x10 [ 120.035535][ T722] ? __cfi_kthread+0x10/0x10 [ 120.040212][ T722] ret_from_fork+0x67/0xa0 [ 120.044662][ T722] ? __cfi_kthread+0x10/0x10 [ 120.049285][ T722] ret_from_fork_asm+0x1a/0x30 [ 120.054065][ T722] [ 120.057075][ T722] ---[ end trace 0000000000000000 ]--- [ 120.065315][ T722] ------------[ cut here ]------------ [ 120.070801][ T722] WARNING: CPU: 0 PID: 722 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 120.080305][ T722] Modules linked in: [ 120.084213][ T722] CPU: 0 UID: 0 PID: 722 Comm: kworker/u8:30 Tainted: G W syzkaller #0 ea5b7897df5a307b165a8956328ee25f321bdeb9 [ 120.097449][ T722] Tainted: [W]=WARN [ 120.101280][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 120.111367][ T722] Workqueue: netns cleanup_net [ 120.116158][ T722] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 120.121752][ T722] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 120.141413][ T722] RSP: 0018:ffffc9000f127b70 EFLAGS: 00010293 [ 120.147500][ T722] RAX: ffffffff84ee56ce RBX: ffff88810c292380 RCX: ffff888110d02600 [ 120.155490][ T722] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888110d02600 [ 120.163498][ T722] RBP: ffffc9000f127b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 120.171497][ T722] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 120.179505][ T722] R13: dffffc0000000000 R14: ffff88810c292f80 R15: dffffc0000000000 [ 120.187480][ T722] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 120.196423][ T722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.203053][ T722] CR2: 00007ffd9033ee98 CR3: 000000010cb20000 CR4: 00000000003526b0 [ 120.211056][ T722] Call Trace: [ 120.214345][ T722] [ 120.217269][ T722] xfrm_net_exit+0x31/0x80 [ 120.221709][ T722] cleanup_net+0x6ba/0xc90 [ 120.226148][ T722] ? __cfi_cleanup_net+0x10/0x10 [ 120.231147][ T722] ? kick_pool+0xb9/0x540 [ 120.235516][ T722] process_scheduled_works+0x7f7/0x1060 [ 120.241107][ T722] worker_thread+0xc99/0x13f0 [ 120.245809][ T722] kthread+0x2c7/0x360 [ 120.249914][ T722] ? __cfi_worker_thread+0x10/0x10 [ 120.255042][ T722] ? __cfi_kthread+0x10/0x10 [ 120.259685][ T722] ret_from_fork+0x67/0xa0 [ 120.264126][ T722] ? __cfi_kthread+0x10/0x10 [ 120.268762][ T722] ret_from_fork_asm+0x1a/0x30 [ 120.273556][ T722] [ 120.276568][ T722] ---[ end trace 0000000000000000 ]---