last executing test programs: 4m37.775628527s ago: executing program 3 (id=1854): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x1000000}, @clear_death={0x400c630f, 0x0, 0x200000000000000}], 0x0, 0x0, 0x0}) 4m37.750968097s ago: executing program 3 (id=1855): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) execve(0x0, &(0x7f0000000480)={[&(0x7f00000002c0)='incremental-fs\x00']}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000900)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000a00)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/246, 0xf6}, 0x10}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/50, 0x32}], 0x4, &(0x7f0000000840)=""/147, 0x93}, 0xe}], 0x2, 0x10100, &(0x7f0000000980)={r7, r8+10000000}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000101, 0x0, 0x63}]}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x101}) (async) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r10, &(0x7f0000000240)='keyring\x00', &(0x7f0000002380)={'syz', 0x2}, r10) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r11, 0x29, 0x24, 0x0, 0x0) (async) sendto$inet6(r11, &(0x7f0000000080)="5546d69a43c9c11c4709b6e29c1545ec8b2710b71be77a9c6b9f7a447cc070351f483ee6758e756ddee4500bef8426e88d1b10ec0936f6d9ca624394b9abae12db5275719b0b9e465d1285580bd7f71b991134a05b9b", 0x56, 0x10, 0x0, 0x0) 4m37.64160162s ago: executing program 3 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 4m37.523633923s ago: executing program 3 (id=1857): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0xb1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300050018000000fac8388827", 0x29, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000002e0001010000000000000000080037a70e7700000b000000976b640868603000"], 0x24}], 0x1}, 0xcc000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x13c, 0x0, &(0x7f0000000a00)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x110b}, @fda={0x66646185, 0x8, 0x1, 0x2a}, @fda={0x66646185, 0x6, 0x0, 0x2a}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}, @request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/58, 0x3a, 0x0, 0x24}, @fd={0x66642a85, 0x0, r7}, @fd}, &(0x7f0000000800)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/213, 0xd5, 0x0, 0x16}, @fda={0x66646185, 0x2, 0x0, 0x37}}, &(0x7f00000009c0)={0x0, 0x20, 0x48}}, 0x1000}, @release={0x40046306, 0x3}], 0xcc, 0x0, &(0x7f0000000600)="6f995324de7d3f3ba89dc77e6a044b550e285e32b181f91b4883fe5588b569c92f74deb26de66c5bd1a8d6a5a17f0425c08a2dc1a8dde117cf5424654eae7640b87fef7eac9b0d6862851b895332ab5540c5cf74b521dc4421960c311543c8e51ce863bc8ae0557ee2ab05782693777d02cf0215d0e0396b76832684c8a5a3d85b53106934e982a031cd801b179be6e4052b466f6d65d5551985058058930afe41ea4c3f783b648d79ff5aeb149e3c6a527b51a23c7429cccc1aa17723071c5d1a075d207a69c946e21964cd"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r6, r0, 0x0) accept$inet(r8, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f0000000740)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) 4m35.043559516s ago: executing program 3 (id=1870): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x6}) io_setup(0xe4, &(0x7f0000000000)=0x0) io_destroy(r1) 4m34.305600851s ago: executing program 3 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 9) 4m34.048445747s ago: executing program 32 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 9) 3m57.78794759s ago: executing program 4 (id=2069): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x1000000, 0x1, &(0x7f0000000140)=0x5ff, 0x4) 3m57.758887121s ago: executing program 4 (id=2071): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009000000000000004c780001a198", 0x24) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x2000000000000) flock(0xffffffffffffffff, 0x8) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000040)={0x2, 0x100, 0x1000, 0x0, 0x0, 0x389}) 3m54.659664687s ago: executing program 4 (id=2082): socket(0x1e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x40012021, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000775000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4075, 0xfeb, 0x0, 0x0}, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc0386723, &(0x7f00000000c0)) 3m54.591138178s ago: executing program 4 (id=2083): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000160000000a0009ed0700000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x40084) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x9141e, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x5, 0x0, 0x40, 0x0, 0x42}, {0x3, 0xa, 0x28, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x81, 0x1, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = getpid() r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x40284504, 0x0) r6 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r6, r3, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x9901) move_mount(r7, &(0x7f0000000480)='./file0/file0\x00', r7, &(0x7f00000003c0)='./file0/../file0\x00', 0x161) 3m54.49587187s ago: executing program 4 (id=2084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4f, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0xff5, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m54.479380701s ago: executing program 4 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0xc0fe, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008"], 0x40}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m54.409143182s ago: executing program 33 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0xc0fe, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008"], 0x40}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m26.254619661s ago: executing program 5 (id=2268): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) 3m26.154550753s ago: executing program 5 (id=2269): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0xf9}, {0xffff1000, 0x40000, 0x1f, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x31}, {0x8080000, 0xeeee1000, 0x8, 0x0, 0x6, 0xc4, 0x0, 0x1, 0x48, 0x3, 0xfd, 0x3}, {0xa000, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x10, 0x74, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x8, 0x5}, {0x0, 0xdddd0000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x3, 0x0, 0x0, 0x5}, {0xeeef0000, 0x5}, {0xdddd1000, 0x400}, 0x0, 0x0, 0x0, 0x410, 0x0, 0xec01, 0x0, [0x80000001, 0x0, 0x90b7]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084023000ff00000004"], 0x30}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) close_range(r1, 0xffffffffffffffff, 0x0) 3m26.067144055s ago: executing program 5 (id=2271): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3m25.976689127s ago: executing program 5 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m25.923521329s ago: executing program 2 (id=2273): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000000)={0x4000}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0xfd3, 0x9}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000140)={'dvmrp0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000180)={0x0, "b5c9bdc8ada1be118763296262ca1de5"}) syz_usb_connect(0x0, 0x84b, &(0x7f0000001d80)={{0x12, 0x1, 0x201, 0xae, 0x31, 0xee, 0x10, 0x99e, 0x52, 0xc66a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x839, 0x4, 0x7, 0x7f, 0x10, 0x7, "", [{{0x9, 0x4, 0x38, 0x3, 0x5, 0xf0, 0xb6, 0xc3, 0x2, [], [{{0x9, 0x5, 0x2, 0xc, 0x20, 0x2, 0x81, 0x1}}, {{0x9, 0x5, 0x1, 0xc, 0x60, 0x0, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7d2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1, 0x10, 0x9, [@generic={0x84, 0x11, "b07cb3b4ade51217247eb604629b79167aba4113424d5535191c0af7e1c78cdeda6e0042633420543fb162046d0d753bb6cfe8e29927bff4ac9e021d694fcc8d5d7776e56dd5be245010c69531af1438c6d83a0544e9c93c5496990f0d8e3cba8f7748ccf68cea5bf005a219d51daac2753076ecb2ad7bd39e3498f69444ddeb6320"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x9, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfff2}]}}, {{0x9, 0x5, 0x1, 0x7, 0x200, 0x2, 0x1, 0x4}}]}}, {{0x9, 0x4, 0xa5, 0xf6, 0x2, 0xff, 0x5d, 0x1, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x3a}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x0, "a4969c"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x6, 'Y'}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x2, 0x5, "a82cc27833"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x401, 0x3, 0x40, 0x3ff, 0x6, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0x3, "a2b485"}]}], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x81, 0x29, 0x6, [@generic={0xc6, 0x24, "f5c24849a8b37777499ce1996784383408cc0fb2c5f49108ec8ce6afc6dd51eaf819dafc6a7febef50d7f0326823b84adf2a07462814254314bb13146b8cc4963736e96d5a18534b39c77d43d7944e06a511cadf12a11d61badbb928419d2c573992f2da3224f20c9327e47edfa3d5ffa08aa4bae79114c6ef6fcf1f50516777fee0cf9404fe4fc4a8665e156e59bad34f32840cf55a212a64d83eabd79f54cd247b02df58315ad134ecc8060efc63331314a350fed79e70d0c6755bac3cbf824d0c4f18"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ef, 0x4, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}, @generic={0xe1, 0x1, "af9a5361444d55f3a54994c565b2f88004d4c112c7073c435d841893a4e37508c9cfc5c6ecf3afa78d3f8fb2ea09f9bba57fc81fbc28f50e133be5cd201c46bfe7b8453100c7190797346bcfdf029ef63fae5aab9ca56e29177712b86366112d2d6b0a3b4106ec9b3543306aca6a09916f12047de265818da357144b22124a30523f4de7e2901c1fe5f95d4bb42c767c52e3c2c90cba1a99805941c06141e498d5915d44f083dc5bafb9418704156aebbf08af57522de633fd714fba7436bfb767a95321a2c265f93126e3a8e20eefc10a44db1e5a90596d9ac7bcf0030991"}]}}]}}, {{0x9, 0x4, 0x73, 0xfe, 0xd, 0xe2, 0xe1, 0xcf, 0x2, [], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x80, 0x3, 0x40, [@generic={0x2c, 0x2, "43417e9411f560a4f215269af9cef4cb5643f52e47cb14db4798fa573e6e3abe0d796535f29d5ae47103"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x8, 0x9, 0x3, [@generic={0x2f, 0x30, "f31221dea232e486c47d58f81a19b952b9021f58d7944f1d2cd44a56f9e1460336e6061dcc6dce5f5a7337388d"}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0xc0, 0x0, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5a9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x4, 0x3, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x3ef, 0xe5, 0x4a, 0x2, [@generic={0xf9, 0x8, "7dd46af997d398e81673bf6264fa60f421f102843634e061f206dd86db138207cf9ae95e5c2ca5d8e0e652f840c397c35d46b4271eff9120e26770137eeb01ee57fa4f643b274a772ba8f261c1e9df803eadb1c6e61623020736cd05fc78a966bf5fdc143007529b8076b9f720468a3f53296c76ede8c1ebc3cd44c2c07010c5feab10ca2098514a8787e4318cb15ded8b8c722ae577c5ac7687c3ba77898365cf93b783a63ee8d2391cec369dc4f4be5b038f130fd7545daaa4235eb0972b3aafaba84dcb86fd8dae0bcaf6004cf403f391d682e21a0d5ab24b0b600d6489d81a58abc1ba021dc22fc3e3691587f211f70ce4348fae8d"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x1, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x3}, @generic={0x94, 0x35, "a045296bc6b42348d5afca1180b5aba18832bc2ff4f2c5d47d97ae77b9f5baae3e449382f35f537240edb80058193e4c2717fbd8b37ee67939e66d527fa8503d784d15f59202a45107e33b815f839e87a222744765766356475a039c0003d71f89b3fd041f16c8e07fff4b450417efaae449be3594f281c0ddbc9bbd8cba4bd5b083f1759e434671557a7bab175612ca5842"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0xe, 0x1, 0x5}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x5, 0x0, 0x5, [@generic={0x29, 0x23, "36c12ba1a4062d211e50aac2dcafb4659a784ac11d682723f2404dc3a0774e518ec8dd22f26182"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x2, 0x29, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x8, 0x4, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4c, 0x3}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x1, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}, @generic={0x15, 0xc, "7c4bbebb4141e82ac542c4a171ca60e2379c28"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x35, 0x1c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf3, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x5}]}}]}}, {{0x9, 0x4, 0x10, 0x0, 0xa, 0x8, 0x2, 0x50, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x61b}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8b5a5cb3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0xb, 0x7f}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x9, 0x4, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x2, 0x6, 0x4, 0x7ae8, 0xc}, @country_functional={0x12, 0x24, 0x7, 0x0, 0xfffd, [0x9, 0x8a, 0xa, 0xe7d, 0x721e, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x3, 0x5, 0x2}]}], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x5, 0x0, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x48, 0x4}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x6, 0x3, 0xfd, [@generic={0x2c, 0xa, "3189981da5f5fc4a85776fc15ac398cbe758455cbd26c155687153a002c5cf369498e007dadb0f2540c3"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x3, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xa, 0x5, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x3, 0x10, [@generic={0xc1, 0x23, "b209f75737c46aae128342b2d879e292a4901336bb4e455f490448ddbae4e215763023850331af2566efb9a58f2fabb9098a773cdd52dea1e2c2bcf6d8804e3dfae8410bae278e9a2a7b5f55ccb32b54672d59010882303eb6a54d94b2f8a3c267c875ade438cddfded4c9888d7c5a2b0e8bed43b0dc3b6707819388d18d4affb48bb928d8e4c6f6e3871e6adc0cf461d3c40a4347c34ac172b0c868e5c76717cc1b44b32fcd27ea00ebe74b4c15f8d97aa46f5c350c48f0d41121fdc92e00"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x6}, @generic={0x93, 0x23, "762a8e89e2dbf81f154c484ec598434a7606a6102b9ccbf6a1a72cc64f49ed4a595fad9544b0b1a844a9f4c02a5362dc54c4452c68e4c0152feba63128964bed51ce62b3ff2c3ca4640cd2d9b423f4dcb95538e83c51b464fab2724906258ab3d44da86e9c05976ee8ab5ab9aeb2c85ad9f6937c63236eca42deb5f20f3dfd3d3dd005ac75cea3ffdc1d95113502a5c2ed"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x7, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xa, 0x5, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x3, 0x80, [@generic={0x38, 0x9, "32512e192bf801f8cfeeb0c85d1507b558489028cdfc9d38d62f45b5e55d71f73c4b1e02cd6f89915a2389b9ffca6a3a72aff7c3c13a"}]}}]}}]}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002600)={0xa, 0x6, 0x110, 0x6, 0x8, 0x40, 0x8, 0x5}, 0xc, &(0x7f0000002640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x6, 0x3}]}, 0x8, [{0x8, &(0x7f0000002680)=@string={0x8, 0x3, "f6b8edf33773"}}, {0x42, &(0x7f00000026c0)=@string={0x42, 0x3, "19197f94d2933132975a823ee8b646c847418ac8ac44e19fd98beab651e3bcd67d418f091d8a75e16e12d6c606439966e910934c0253653579637a8f5ea4bdc2"}}, {0xcb, &(0x7f0000002740)=@string={0xcb, 0x3, "04a7463801e825003bbc4fad1699a856c3d61fecce364f4a8eb3c2f7e7ef4e413f4db992beef5ea52d402d6246a60e1bfe44861c926add904a1d4a5ddf28ce20baef9cb0a9621dae31c334982a32a981c60457d6e227a0f7e67155656ddce39d8eb4f2a50118faa0660e3252426215549a81cdb65ceabafdba2b5e913d5ad4e79c08fb058193f34f78d6490a1708144c9831048dfbc0dfca9fbf051397fe144dfee3d14c494ce6de110935d3792cebf75c0ba344446d0fca617c05faa48fdb938f9fadad1d8bd66fe9"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x41d}}, {0x89, &(0x7f00000028c0)=@string={0x89, 0x3, "a97b466ec66d1051b4788eafde920b38f4bfba92446e173ce72b74376079db9142d486162bbaebfebfef281642e9389a513f2126066468e25c38483ee6633e0bc2fb23e53da832e16c3121d0dc1138cbe9a4da76de99a84e0ac3a59adf91debd4fb82b18bbbdab2a134eb34e4c338b9273fdbf384d98922967f7594f72cb72f2961e64458e771f"}}, {0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x40c}}]}) 3m25.806663961s ago: executing program 5 (id=2274): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 5) 3m25.659609054s ago: executing program 5 (id=2276): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x20}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m25.578595856s ago: executing program 34 (id=2276): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x20}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m25.291072332s ago: executing program 2 (id=2279): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 3m25.149491415s ago: executing program 2 (id=2281): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@ra={0x94, 0x4}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a380, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xc) 3m24.835881262s ago: executing program 2 (id=2283): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m24.761683934s ago: executing program 2 (id=2284): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0)) 3m24.151808977s ago: executing program 2 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3m24.085810058s ago: executing program 35 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3m21.907972046s ago: executing program 1 (id=2295): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x1000000, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 3m21.906067766s ago: executing program 1 (id=2296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84844}, 0x2000c880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3m20.925298178s ago: executing program 1 (id=2302): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setregid(0x0, r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/24, 0x18) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000380)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x4e16, 0x12) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000000)=""/49, 0x31) unlinkat(r6, &(0x7f00000000c0)='./file0\x00', 0x200) getdents64(r4, 0x0, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r9, 0x7, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x40080) write$selinux_access(r0, 0x0, 0x0) 3m20.739793771s ago: executing program 1 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x27c90, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m20.648394733s ago: executing program 1 (id=2307): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x110, 0x3}, 0x18) r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x14, 0x21, 0x1, 0x0, 0x0, "", [@generic="07b9f9cd"]}, 0x14}], 0x1}, 0x48040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0x8, 0x7, {0x77359400}, {r6, r7/1000+10000}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4}, 0x38, 0x1, 0x0, 0x0, "00cf0dc4f8eac3a8ffaaabda333eaf38148b00c149ea2c36a53824eda092d90143d64046185017232025ff54d012d2045bf8a2c588b575609ac9d5711d43b9b8"}}, 0x80}, 0x1, 0x0, 0x0, 0xc0c4}, 0x9854) 3m20.523793196s ago: executing program 1 (id=2310): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x7, 0x2, 0xff, {0x4}}}]}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x76, 0x2, 0x3}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x6, "e5bc653d24cf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xd, 0x2, "ef76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.475812697s ago: executing program 36 (id=2310): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x7, 0x2, 0xff, {0x4}}}]}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x76, 0x2, 0x3}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x6, "e5bc653d24cf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xd, 0x2, "ef76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.867696463s ago: executing program 8 (id=4016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, 0x0, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)={@val={0x70, 0x88ee}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="3910693a7ee0", @dev={0xac, 0x14, 0x14, 0x42}, @link_local, @local}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$xdp(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r7], 0x30}], 0x1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r8, 0x1) ppoll(&(0x7f00000001c0)=[{r8, 0xc2}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 21.232400726s ago: executing program 8 (id=4020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f22040f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a2f", 0x2d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e", @ANYRES32=0x0], 0xf0}}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd0100000000"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) 21.143338428s ago: executing program 8 (id=4023): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0xcbd, 0x2, 0x3, 0x8}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x98, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd333}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2ea20054}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 21.089889749s ago: executing program 8 (id=4026): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00050300000f01fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00\r'], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) 21.011457881s ago: executing program 8 (id=4029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)={0x87}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000100)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x7, 0x20, 0x67, 0x4000, 0x7, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@generic={0x82, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x10, 0x7}}}}}}, 0x32) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x9}) 21.011309081s ago: executing program 8 (id=4030): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x100000000, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.1469203s ago: executing program 0 (id=4063): futex_waitv(&(0x7f0000000040), 0xaaaab7b, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x20002, 0x130) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80106725) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b840, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r3, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)=']!+)](\r') 9.14269373s ago: executing program 7 (id=4064): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x1, 0x0, 0x0, "f01881a1debdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 9.099828771s ago: executing program 6 (id=4065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2900}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 7.524223565s ago: executing program 0 (id=4066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) openat$incfs(0xffffffffffffffff, 0x0, 0x40400, 0x0) (async, rerun: 64) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2141}, {r0, 0x100}], 0x2, 0x1ff) 7.519806356s ago: executing program 7 (id=4067): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r0, 0x241, 0x5, 0x0, &(0x7f00000002c0)) flistxattr(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x112) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406307802040000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a000b0000000904010000010230000904dda8011dc2cf46a4bff02591a906ec01010101023000097dc626d659f398759ede07f9393505010960002503050a2525040400000505000904020000010230"], 0x0) 7.513256526s ago: executing program 6 (id=4068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000015020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 5.763795644s ago: executing program 0 (id=4069): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x77, {0x77, 0xe, "9e79f3a2786021eb91514469830ae99412385aee524777cba8502d10929837359763f07121d09649d9ce0cdec291a22d1638b67999bad7ec2216d0011dc590dadebe963cf420da1459b9714a91584ec3145c83a660135293384287e216752acbe10c987efa580a79deaa2769c36ed782c292be85bb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0x14, 0xb7, "9f0980110f3a43b96cd6a5b38ae74ad8f95579098fd44e79eb484949d54fdfe596a5fb4e2f63d26df6dc5a9e9d3d48a23aaf23798327e35ef478f05deb3fde2c59e4ecc0b611c2ec0fcdfa4d1fc617278b73a68dc6e2bfa3b2110fe4c99e9eae12b4916c9390cde06b4db9c1053e15aae557e2eda2181579f34f9ef4382852ea9dab9f6cb2a45431c4176bd6e6841a023e8d49d6927f046361412f804a58e28147c31351a88cd1147943f7788e4419e07eaa14c94698fd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x81, 0x2, "c717"}, &(0x7f0000000340)={0x20, 0x82, 0x2, 'jW'}, &(0x7f0000000380)={0x20, 0x83, 0x1, 'h'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "738b"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "dc9b58"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0x15, 0x6, "88ec7220b51f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) 5.763399104s ago: executing program 7 (id=4070): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "bd3477bcd0fc636b", "0aad493bc51309768e6917ea79c5de0422179793d17743f2dede9600", "fdc4e7fa", 'T8\x00'}, 0x38) socket$netlink(0x10, 0x3, 0x14) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x4, 0x5, 0x3, 0x8, 0x6, 0x0, 0x2}, &(0x7f0000000080)={0xe, 0x3, 0x0, 0x5, 0x1, 0x2, 0x9, 0x5}, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x20901, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xed) 5.763307854s ago: executing program 6 (id=4071): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="534287ac770767f7429748b7bad1a664a6cc00", 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) 3.951964073s ago: executing program 0 (id=4072): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffde, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r2, &(0x7f0000000700)="b068aaecceb2e09fe89ecdc28df660f8a14343ef3f0d0a162489b51488f7a0ddfa4ee93820643716f43de437bc7104ae235f620a1a2b7c6221960e26af2b4b21ab840f27be28ffa01901f197600d8004c3212da8c2be7f2f748adf44664e3cc4e291067a86cf5d74e91631da4d3b0f5db69cc8eeb683858c203b35b7ebf3a523e5bc6d46be4c7fc4536148a3371ea2f9e47abf14aa4a0465f9f62d82d8184f4f6e53a73503883d68edd18fcd1d55aabefc97abebd657d4d5f40947c56c77134d61d07bf8e5602ab705ba81a260a1a5506c320aedca5b82ea7f78e0480716c21c6383be", 0xe3) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2507e433}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 3.951367943s ago: executing program 7 (id=4073): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 3.935729243s ago: executing program 6 (id=4074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1c0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x7, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd25, 0x70bf27}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x0, "ba1d3a445f0f7597dbee8ada000041963809620c47d73f2c3936e6a838e2bd5f"}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x21c, r5, 0x20, 0x70bd2d, 0x9, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "9807d92301a44b04f972cfcd54b3f2167b9a4b0943b0ba92673135718026f214"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x387d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4050040, &(0x7f0000000500)={0x11, 0xb, r4, 0x1, 0xd8, 0x6, @random="6c233d7df967"}, 0x14) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, r8}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x20, 0x7800, 0x7fffffff, 0xf9ac, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x68, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@generic={0x89, 0x8, "ae6d7a67db9d"}, @noop, @timestamp={0x44, 0x10, 0x9, 0x0, 0x0, [0xffffff80, 0x7, 0x1]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}]}, 0x9c}}, 0x20000080) 2.017954795s ago: executing program 0 (id=4075): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 2.017306745s ago: executing program 7 (id=4076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) unshare(0x42000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f00000000c0)=0xfffffffd, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffffffffffff7c2e}, {0xc, 0x90, 0x509e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x15c}, {0xc, 0x90, 0x9}}]}, 0x94}}, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3, 0xae78, 0x6}, 0x10) listen(r7, 0x0) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000140)={'vxcan1\x00', {0x2, 0x4e24, @multicast2}}) accept4$nfc_llcp(r7, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0xffffffff, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000811}, 0x24001080) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000040)={@hyper}) 2.015401765s ago: executing program 6 (id=4077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000901010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.9187ms ago: executing program 0 (id=4078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 743.54µs ago: executing program 7 (id=4079): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x77, {0x77, 0xe, "9e79f3a2786021eb91514469830ae99412385aee524777cba8502d10929837359763f07121d09649d9ce0cdec291a22d1638b67999bad7ec2216d0011dc590dadebe963cf420da1459b9714a91584ec3145c83a660135293384287e216752acbe10c987efa580a79deaa2769c36ed782c292be85bb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0x14, 0xb7, "9f0980110f3a43b96cd6a5b38ae74ad8f95579098fd44e79eb484949d54fdfe596a5fb4e2f63d26df6dc5a9e9d3d48a23aaf23798327e35ef478f05deb3fde2c59e4ecc0b611c2ec0fcdfa4d1fc617278b73a68dc6e2bfa3b2110fe4c99e9eae12b4916c9390cde06b4db9c1053e15aae557e2eda2181579f34f9ef4382852ea9dab9f6cb2a45431c4176bd6e6841a023e8d49d6927f046361412f804a58e28147c31351a88cd1147943f7788e4419e07eaa14c94698fd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x81, 0x2, "c717"}, &(0x7f0000000340)={0x20, 0x82, 0x2, 'jW'}, &(0x7f0000000380)={0x20, 0x83, 0x1, 'h'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "738b"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "dc9b58"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0x15, 0x6, "88ec7220b51f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) 0s ago: executing program 6 (id=4080): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x1, 0x7, 0x4, 0x5, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r3, 0x82}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) kernel console output (not intermixed with test programs): ƒ»ì«Ÿë¾ŸáŒ…ﺗ䴔î¾ä³‘䱉ऑ팵ⱹଡ଼䒣浄ì¨ç±¡ï¨…辤é›é¾ê¶­è¬æ¿– [ 396.945722][ T630] usb 1-1: Manufacturer: ᤙ鑿é’㈱媗㺂뛨졆䅇좊䒬鿡诙뛪î‘횼䅽à¦è¨î…µá‰®ì›–䌆暙ჩ䲓匂㕥æ¹è½ºê‘žìн [ 396.959590][ T630] usb 1-1: SerialNumber: ࡃ [ 397.006511][ T5364] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0041/input/input116 [ 397.033323][ T5364] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0041/input/input117 [ 397.068623][ T5364] kye 0003:0458:5011.0041: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 397.084137][ T31] usb 7-1: device descriptor read/64, error -71 [ 397.171293][ T630] usb-storage 1-1:7.16: USB Mass Storage device detected [ 397.182347][ T45] usb 8-1: USB disconnect, device number 44 [ 397.284897][ T630] usb 1-1: USB disconnect, device number 41 [ 397.310764][ T8738] fido_id[8738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 397.336271][ T31] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 397.482010][ T31] usb 7-1: device descriptor read/64, error -71 [ 397.722430][ T31] usb 7-1: device descriptor read/64, error -71 [ 397.840265][ T31] usb usb7-port1: attempt power cycle [ 398.009313][ T630] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 398.158561][ T630] usb 8-1: Using ep0 maxpacket: 32 [ 398.158596][ T5364] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 398.172923][ T630] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.183202][ T630] usb 8-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 398.194277][ T31] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 398.201898][ T630] usb 8-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 398.215676][ T630] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.225684][ T630] usb 8-1: config 1 interface 2 has no altsetting 0 [ 398.235472][ T630] usb 8-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 398.244685][ T630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.252814][ T630] usb 8-1: Product: syz [ 398.257099][ T630] usb 8-1: Manufacturer: syz [ 398.261962][ T630] usb 8-1: SerialNumber: syz [ 398.267528][ T31] usb 7-1: device descriptor read/8, error -71 [ 398.317725][ T5364] usb 1-1: Using ep0 maxpacket: 32 [ 398.325717][ T5364] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.334989][ T5364] usb 1-1: config 0 has no interface number 0 [ 398.341824][ T5364] usb 1-1: config 0 interface 184 has no altsetting 0 [ 398.352757][ T5364] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.361974][ T5364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.370042][ T5364] usb 1-1: Product: syz [ 398.374241][ T5364] usb 1-1: Manufacturer: syz [ 398.378908][ T5364] usb 1-1: SerialNumber: syz [ 398.384491][ T5364] usb 1-1: config 0 descriptor?? [ 398.394297][ T5364] smsc75xx v1.0.0 [ 398.419715][ T31] usb 7-1: device descriptor read/8, error -71 [ 398.558685][ T630] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 398.565742][ T630] usb 8-1: unit 4 not found! [ 398.574457][ T630] usb 8-1: unit 144 not found! [ 398.587809][ T630] usb 8-1: USB disconnect, device number 45 [ 398.647439][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 398.667491][ T31] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 398.708202][ T31] usb 7-1: device descriptor read/8, error -71 [ 398.838085][ T31] usb 7-1: device descriptor read/8, error -71 [ 398.945062][ T31] usb usb7-port1: unable to enumerate USB device [ 399.000218][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 399.011176][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 399.200202][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 399.226923][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 399.247920][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 399.259118][ T5364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 399.269498][ T5364] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 399.280519][ T5364] usb 1-1: USB disconnect, device number 42 [ 399.315827][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3026'. [ 399.629936][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 399.629977][ T36] audit: type=1400 audit(1866815664.529:36951): avc: denied { read write } for pid=8780 comm="syz.7.3027" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.712185][ T8783] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.716775][ T8219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.718999][ T8783] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 399.730514][ T36] audit: type=1400 audit(1866815664.540:36952): avc: denied { map } for pid=8780 comm="syz.7.3027" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.737653][ T8783] audit: backlog limit exceeded [ 399.764812][ T8783] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.770377][ T8219] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 399.775040][ T8783] audit: audit_lost=62 audit_rate_limit=0 audit_backlog_limit=64 [ 399.779085][ T8219] audit: backlog limit exceeded [ 399.929490][ T31] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 400.098554][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 400.111131][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.135396][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.155371][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 400.178235][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 400.188232][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.197222][ T31] usb 7-1: config 0 descriptor?? [ 400.621050][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0042/input/input118 [ 400.637178][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0042/input/input119 [ 400.650943][ T31] kye 0003:0458:5011.0042: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 400.725429][ T408] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 400.810477][ T62] usb 7-1: USB disconnect, device number 46 [ 400.877942][ T8819] fido_id[8819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 400.898357][ T408] usb 8-1: unable to get BOS descriptor or descriptor too short [ 400.913407][ T408] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 400.922803][ T408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.931143][ T408] usb 8-1: Product: syz [ 400.936227][ T408] usb 8-1: Manufacturer: syz [ 400.940924][ T408] usb 8-1: SerialNumber: syz [ 400.947867][ T8821] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3040'. [ 401.831749][ T8846] FAULT_INJECTION: forcing a failure. [ 401.831749][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 401.844469][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.0.3045 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 401.844510][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.844526][ T8846] Call Trace: [ 401.844535][ T8846] [ 401.844547][ T8846] __dump_stack+0x21/0x30 [ 401.844590][ T8846] dump_stack_lvl+0x140/0x1c0 [ 401.844615][ T8846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 401.844671][ T8846] dump_stack+0x19/0x20 [ 401.844701][ T8846] should_fail_ex+0x3c2/0x510 [ 401.844734][ T8846] should_failslab+0xac/0x100 [ 401.844759][ T8846] __kmalloc_cache_noprof+0x41/0x470 [ 401.844798][ T8846] ? __kasan_check_write+0x18/0x20 [ 401.844822][ T8846] ? tipc_dest_push+0x17a/0x390 [ 401.844851][ T8846] ? _raw_spin_lock_bh+0x96/0x130 [ 401.844880][ T8846] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 401.844900][ T8846] tipc_dest_push+0x17a/0x390 [ 401.844921][ T8846] tipc_nametbl_lookup_mcast_sockets+0x4bd/0x9f0 [ 401.844969][ T8846] tipc_sk_mcast_rcv+0x5af/0xf30 [ 401.844995][ T8846] ? __build_skb_around+0x2a4/0x590 [ 401.845032][ T8846] ? __cfi_tipc_sk_mcast_rcv+0x10/0x10 [ 401.845055][ T8846] tipc_mcast_xmit+0x11d4/0x1810 [ 401.845105][ T8846] ? __kasan_check_write+0x18/0x20 [ 401.845128][ T8846] ? __cfi_tipc_mcast_xmit+0x10/0x10 [ 401.845167][ T8846] ? __asan_memcpy+0x5a/0x80 [ 401.845191][ T8846] ? tipc_msg_build+0x4ad/0xf20 [ 401.845217][ T8846] ? tipc_group_bc_cong+0x169/0x220 [ 401.845262][ T8846] tipc_send_group_bcast+0x7a7/0xab0 [ 401.845299][ T8846] ? tipc_wait_for_connect+0x630/0x630 [ 401.845332][ T8846] ? common_lsm_audit+0x14c8/0x18b0 [ 401.845359][ T8846] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 401.845410][ T8846] ? avc_xperms_populate+0x2a8/0x620 [ 401.845440][ T8846] ? __cfi_woken_wake_function+0x10/0x10 [ 401.845472][ T8846] ? avc_denied+0x113/0x180 [ 401.845500][ T8846] __tipc_sendmsg+0x33a/0x28a0 [ 401.845533][ T8846] ? __cfi_slow_avc_audit+0x10/0x10 [ 401.845575][ T8846] ? tipc_sk_respond+0x430/0x430 [ 401.845607][ T8846] ? avc_has_perm_noaudit+0x21f/0x360 [ 401.845642][ T8846] ? avc_has_perm+0x1ec/0x240 [ 401.845661][ T8846] ? avc_has_perm+0x211/0x240 [ 401.845681][ T8846] ? __cfi_avc_has_perm+0x10/0x10 [ 401.845722][ T8846] ? __kasan_check_write+0x18/0x20 [ 401.845745][ T8846] ? _raw_spin_lock_bh+0x96/0x130 [ 401.845770][ T8846] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 401.845800][ T8846] ? selinux_socket_sendmsg+0x281/0x380 [ 401.845823][ T8846] ? lock_sock_nested+0x216/0x2a0 [ 401.845862][ T8846] ? __cfi_lock_sock_nested+0x10/0x10 [ 401.845890][ T8846] ? kernel_text_address+0xa9/0xe0 [ 401.845923][ T8846] ? unwind_get_return_address+0x51/0x90 [ 401.845954][ T8846] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 401.845978][ T8846] tipc_sendmsg+0x59/0x90 [ 401.846023][ T8846] ____sys_sendmsg+0x99e/0xa00 [ 401.846047][ T8846] ? __import_iovec+0x3fa/0x7d0 [ 401.846085][ T8846] ? __sys_sendmsg_sock+0x50/0x50 [ 401.846103][ T8846] ? import_iovec+0x80/0xb0 [ 401.846128][ T8846] ___sys_sendmsg+0x2a6/0x370 [ 401.846167][ T8846] ? __sys_sendmsg+0x2a0/0x2a0 [ 401.846189][ T8846] ? proc_fail_nth_write+0x184/0x220 [ 401.846229][ T8846] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 401.846277][ T8846] ? __fget_files+0x2bc/0x330 [ 401.846308][ T8846] __x64_sys_sendmsg+0x206/0x2e0 [ 401.846331][ T8846] ? fput+0x1a4/0x230 [ 401.846364][ T8846] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 401.846387][ T8846] ? ksys_write+0x1f3/0x260 [ 401.846414][ T8846] ? __kasan_check_read+0x15/0x20 [ 401.846440][ T8846] x64_sys_call+0x2a4c/0x2ee0 [ 401.846463][ T8846] do_syscall_64+0x57/0xf0 [ 401.846488][ T8846] ? clear_bhb_loop+0x50/0xa0 [ 401.846520][ T8846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 401.846549][ T8846] RIP: 0033:0x7fcb60f9de59 [ 401.846574][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.846594][ T8846] RSP: 002b:00007fcb61e3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.846623][ T8846] RAX: ffffffffffffffda RBX: 00007fcb61226090 RCX: 00007fcb60f9de59 [ 401.846642][ T8846] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 401.846654][ T8846] RBP: 00007fcb61e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 401.846666][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.846679][ T8846] R13: 00007fcb61226128 R14: 00007fcb61226090 R15: 00007ffcbacb1698 [ 401.846717][ T8846] [ 402.732033][ T8859] dummy0: entered allmulticast mode [ 402.905461][ T62] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 402.927653][ T8863] kvm_intel: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xde9d [ 402.939273][ T8863] kvm: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x289d [ 402.948166][ T8863] kvm: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xaa78 [ 402.959616][ T8863] kvm: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x3ec1 [ 402.971194][ T8863] kvm: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x589c [ 402.980610][ T8863] kvm: kvm [8862]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xd977 [ 403.054041][ T62] usb 7-1: Using ep0 maxpacket: 32 [ 403.065644][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.078569][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.088405][ T62] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 403.101415][ T62] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 403.119247][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.129664][ T62] usb 7-1: config 0 descriptor?? [ 403.183493][ T8866] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3053'. [ 403.334552][ T8874] netlink: 328 bytes leftover after parsing attributes in process `syz.8.3057'. [ 403.385992][ T408] usb 8-1: USB disconnect, device number 46 [ 403.484257][ T8878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8878 comm=syz.7.3059 [ 403.522623][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 403.586274][ T62] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0043/input/input120 [ 403.629027][ T62] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0043/input/input121 [ 403.685449][ T62] kye 0003:0458:5011.0043: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 403.752210][ T62] usb 7-1: USB disconnect, device number 47 [ 403.850176][ T408] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 403.909576][ T8883] fido_id[8883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 404.022803][ T408] usb 8-1: unable to get BOS descriptor or descriptor too short [ 404.031938][ T408] usb 8-1: not running at top speed; connect to a high speed hub [ 404.041679][ T408] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 404.049839][ T408] usb 8-1: config 0 has no interface number 0 [ 404.055968][ T408] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 404.068249][ T408] usb 8-1: config 0 interface 88 has no altsetting 0 [ 404.080864][ T408] usb 8-1: language id specifier not provided by device, defaulting to English [ 404.096225][ T408] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 404.105459][ T408] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 404.113681][ T408] usb 8-1: Product: syz [ 404.117981][ T408] usb 8-1: SerialNumber: syz [ 404.123938][ T408] usb 8-1: config 0 descriptor?? [ 404.130922][ T8878] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 404.366471][ T408] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.88/input/input122 [ 404.391674][ T408] usb 8-1: USB disconnect, device number 47 [ 404.648653][ T36] kauditd_printk_skb: 1155 callbacks suppressed [ 404.648721][ T36] audit: type=1400 audit(1866815669.584:38101): avc: denied { create } for pid=8902 comm="syz.8.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.706820][ T36] audit: type=1400 audit(1866815669.644:38102): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.776335][ T36] audit: type=1400 audit(1866815669.715:38103): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.835609][ T8765] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 404.844089][ T36] audit: type=1400 audit(1866815669.775:38104): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.869515][ T36] audit: type=1400 audit(1866815669.775:38105): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.895267][ T36] audit: type=1400 audit(1866815669.775:38106): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.945874][ T36] audit: type=1400 audit(1866815669.845:38107): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.996974][ T36] audit: type=1400 audit(1866815669.845:38108): avc: denied { read write open } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.031072][ T36] audit: type=1400 audit(1866815669.845:38109): avc: denied { ioctl } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.059425][ T36] audit: type=1400 audit(1866815669.865:38110): avc: denied { ioctl } for pid=8895 comm="syz.0.3067" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 405.059508][ T8765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 405.110616][ T8765] usb 1-1: not running at top speed; connect to a high speed hub [ 405.122495][ T8765] usb 1-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.144865][ T8765] usb 1-1: config 1 interface 0 has no altsetting 0 [ 405.160107][ T8765] usb 1-1: string descriptor 0 read error: -22 [ 405.166583][ T8765] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 405.182328][ T8765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.380349][ T8917] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3075'. [ 405.418330][ T31] usb 1-1: USB disconnect, device number 43 [ 405.711448][ T8765] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 405.883760][ T8765] usb 8-1: unable to get BOS descriptor or descriptor too short [ 405.893071][ T8765] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.903286][ T8765] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 405.912328][ T8765] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 405.923255][ T8765] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 405.936452][ T8765] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 405.947290][ T8765] usb 8-1: config 1 interface 1 has no altsetting 0 [ 405.958640][ T8765] usb 8-1: string descriptor 0 read error: -22 [ 405.964943][ T8765] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 405.974036][ T8765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.020028][ T408] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 406.169296][ T408] usb 7-1: Using ep0 maxpacket: 32 [ 406.177284][ T408] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 406.186987][ T408] usb 7-1: config 2 has no interface number 0 [ 406.193904][ T408] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 406.204699][ T408] usb 7-1: config 2 interface 88 has no altsetting 0 [ 406.215331][ T408] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 406.224537][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 406.232591][ T408] usb 7-1: Product: syz [ 406.236857][ T408] usb 7-1: Manufacturer: syz [ 406.241510][ T408] usb 7-1: SerialNumber: syz [ 406.248689][ T8932] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 406.460679][ T8932] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 406.873273][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.882170][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.895511][ T408] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 406.923005][ T408] asix 7-1:2.88: probe with driver asix failed with error -71 [ 406.934289][ T408] usb 7-1: USB disconnect, device number 48 [ 407.021958][ T8942] overlayfs: failed to resolve './cgroup': -2 [ 407.128816][ T8950] overlay: Unknown parameter 'euid>00000000000000000000' [ 407.364385][ T8960] netlink: 'syz.0.3093': attribute type 16 has an invalid length. [ 407.372579][ T8960] netlink: 'syz.0.3093': attribute type 2 has an invalid length. [ 407.380579][ T8960] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.3093'. [ 407.509965][ T8967] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3095'. [ 407.588926][ T8765] usb 8-1: USB disconnect, device number 48 [ 407.792422][ T31] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 407.794402][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 407.961717][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 407.983424][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 408.021486][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.031026][ T31] usb 7-1: config 0 descriptor?? [ 408.276899][ T8965] Source file dentry negative [ 408.288743][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 408.305767][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 408.327538][ T31] usb 7-1: USB disconnect, device number 49 [ 408.459707][ T8765] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 408.509611][ T311] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 408.609146][ T8765] usb 8-1: Using ep0 maxpacket: 32 [ 408.617268][ T8765] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 408.627085][ T8765] usb 8-1: config 0 has no interface number 0 [ 408.637942][ T8765] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 408.648470][ T8765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.657416][ T311] usb 1-1: device descriptor read/64, error -71 [ 408.663788][ T8765] usb 8-1: Product: syz [ 408.668072][ T8765] usb 8-1: Manufacturer: syz [ 408.674122][ T8765] usb 8-1: SerialNumber: syz [ 408.689083][ T8765] usb 8-1: config 0 descriptor?? [ 408.696991][ T8765] smsc95xx v2.0.0 [ 408.907914][ T311] usb 1-1: device descriptor read/64, error -71 [ 408.991685][ T9022] tipc: Enabling of bearer rejected, failed to enable media [ 409.108562][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 409.119488][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.156944][ T311] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 409.316329][ T311] usb 1-1: device descriptor read/64, error -71 [ 409.524380][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 409.535299][ T8765] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 409.555390][ T311] usb 1-1: device descriptor read/64, error -71 [ 409.665465][ T36] kauditd_printk_skb: 601 callbacks suppressed [ 409.665479][ T311] usb usb1-port1: attempt power cycle [ 409.665485][ T36] audit: type=1400 audit(1866815674.626:38712): avc: denied { ioctl } for pid=9001 comm="syz.0.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.702092][ T36] audit: type=1400 audit(1866815674.626:38713): avc: denied { ioctl } for pid=9001 comm="syz.0.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.727133][ T36] audit: type=1400 audit(1866815674.626:38714): avc: denied { ioctl } for pid=9001 comm="syz.0.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.756265][ T36] audit: type=1400 audit(1866815674.716:38715): avc: denied { ioctl } for pid=9001 comm="syz.0.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.781394][ T36] audit: type=1400 audit(1866815674.716:38716): avc: denied { ioctl } for pid=9001 comm="syz.0.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.810553][ T36] audit: type=1400 audit(1866815674.766:38717): avc: denied { create } for pid=9026 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.817051][ T9027] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3118'. [ 409.864349][ T36] audit: type=1400 audit(1866815674.776:38718): avc: denied { write } for pid=9026 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.913167][ T36] audit: type=1400 audit(1866815674.776:38719): avc: denied { nlmsg_write } for pid=9026 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.935827][ T36] audit: type=1400 audit(1866815674.806:38720): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.961286][ T36] audit: type=1400 audit(1866815674.806:38721): avc: denied { read write open } for pid=6695 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.043495][ T311] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 410.066073][ T311] usb 1-1: device descriptor read/8, error -71 [ 410.195619][ T311] usb 1-1: device descriptor read/8, error -71 [ 410.262693][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 410.412062][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 410.420302][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.430486][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.442717][ T311] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 410.443894][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.459584][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.467907][ T9] usb 7-1: Product: syz [ 410.472118][ T9] usb 7-1: Manufacturer: syz [ 410.476744][ T9] usb 7-1: SerialNumber: syz [ 410.482682][ T311] usb 1-1: device descriptor read/8, error -71 [ 410.614610][ T311] usb 1-1: device descriptor read/8, error -71 [ 410.698091][ T9] usb 7-1: 0:2 : does not exist [ 410.726377][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 410.741605][ T311] usb usb1-port1: unable to enumerate USB device [ 410.754346][ T9] usb 7-1: USB disconnect, device number 50 [ 410.829333][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 411.183962][ T9] usb 8-1: USB disconnect, device number 49 [ 411.249916][ T9052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.676863][ T9065] netlink: 'syz.0.3133': attribute type 12 has an invalid length. [ 411.801198][ T9077] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 411.811512][ T9077] rust_binder: Write failure EINVAL in pid:454 [ 412.546483][ T9117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=9117 comm=syz.0.3154 [ 412.570788][ T9117] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3154'. [ 412.693431][ T408] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 412.836815][ T9124] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4378 sclass=netlink_xfrm_socket pid=9124 comm=syz.0.3158 [ 412.852837][ T408] usb 7-1: Using ep0 maxpacket: 16 [ 412.864660][ T408] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.885306][ T408] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 412.915103][ T408] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 412.931124][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.948021][ T408] usb 7-1: Product: syz [ 412.957750][ T408] usb 7-1: Manufacturer: syz [ 412.965748][ T408] usb 7-1: SerialNumber: syz [ 413.082121][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 413.192557][ T408] usb 7-1: USB disconnect, device number 51 [ 413.261344][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 413.269939][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 413.279513][ T9] usb 1-1: config index 0 descriptor too short (expected 2048, got 18) [ 413.287852][ T9] usb 1-1: config 80 has an invalid descriptor of length 0, skipping remainder of the config [ 413.298073][ T9] usb 1-1: config 80 has 0 interfaces, different from the descriptor's value: 2 [ 413.310625][ T9] usb 1-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=c6.6a [ 413.319790][ T11] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 413.327449][ T9] usb 1-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 413.335797][ T9] usb 1-1: Product: syz [ 413.340062][ T9] usb 1-1: Manufacturer: syz [ 413.344881][ T9] usb 1-1: SerialNumber: syz [ 413.490490][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 413.498265][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.509281][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.519076][ T11] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.528178][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.537387][ T11] usb 8-1: config 0 descriptor?? [ 413.546297][ T11] hub 8-1:0.0: USB hub found [ 413.640648][ T9] usb 1-1: USB disconnect, device number 48 [ 413.750194][ T11] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 413.955144][ T11] usbhid 8-1:0.0: can't add hid device: -71 [ 413.968861][ T11] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 413.999900][ T11] usb 8-1: USB disconnect, device number 50 [ 414.019137][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3166'. [ 414.030667][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3166'. [ 414.275349][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3169'. [ 414.527337][ T11] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 414.617991][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3175'. [ 414.656270][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 414.664509][ T36] kauditd_printk_skb: 560 callbacks suppressed [ 414.664525][ T36] audit: type=1400 audit(1866815679.634:39280): avc: denied { ioctl } for pid=9165 comm="syz.6.3173" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.686244][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 414.698397][ T36] audit: type=1400 audit(1866815679.634:39281): avc: denied { ioctl } for pid=9165 comm="syz.6.3173" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.726086][ T36] audit: type=1400 audit(1866815679.644:39282): avc: denied { ioctl } for pid=9165 comm="syz.6.3173" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.726469][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.751188][ T36] audit: type=1400 audit(1866815679.695:39283): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.787050][ T36] audit: type=1400 audit(1866815679.695:39284): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.805199][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.812134][ T36] audit: type=1400 audit(1866815679.695:39285): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.840738][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 414.860524][ T11] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 414.871349][ T36] audit: type=1400 audit(1866815679.695:39286): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.876175][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.909287][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.921830][ T11] usb 1-1: config 0 descriptor?? [ 414.925953][ T36] audit: type=1400 audit(1866815679.695:39287): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.931461][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 414.975343][ T36] audit: type=1400 audit(1866815679.745:39288): avc: denied { ioctl } for pid=9159 comm="syz.0.3170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 415.005991][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3176'. [ 415.011875][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.030864][ T9] usb 7-1: config 0 descriptor?? [ 415.034974][ T36] audit: type=1400 audit(1866815679.755:39289): avc: denied { ioctl } for pid=9165 comm="syz.6.3173" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 415.257945][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 415.264166][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 415.277798][ T9] usb 7-1: USB disconnect, device number 52 [ 415.412024][ T11] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0044/input/input124 [ 415.425083][ T11] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0044/input/input125 [ 415.440948][ T11] kye 0003:0458:5011.0044: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 415.623841][ T9] usb 1-1: USB disconnect, device number 49 [ 415.681108][ T9180] fido_id[9180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 415.752340][ T11] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 415.934714][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.948050][ T11] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 415.958501][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.968356][ T11] usb 7-1: config 0 descriptor?? [ 416.302639][ T9198] netlink: 'syz.7.3186': attribute type 28 has an invalid length. [ 416.415299][ T312] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 416.569500][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 416.576932][ T312] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 416.585075][ T312] usb 1-1: config 2 has no interface number 0 [ 416.591285][ T312] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 416.601325][ T312] usb 1-1: config 2 interface 88 has no altsetting 0 [ 416.611626][ T312] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 416.620737][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 416.628735][ T312] usb 1-1: Product: syz [ 416.632980][ T312] usb 1-1: Manufacturer: syz [ 416.637613][ T312] usb 1-1: SerialNumber: syz [ 416.645217][ T9195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.758821][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 416.799590][ T11] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 416.807325][ T11] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input126 [ 416.860047][ T9195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.908275][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 416.924814][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 416.933871][ T9] usb 8-1: config 0 has no interface number 0 [ 416.948302][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 416.959322][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 416.978033][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.986172][ T9] usb 8-1: Product: syz [ 416.998232][ T9] usb 8-1: Manufacturer: syz [ 417.002912][ T9] usb 8-1: SerialNumber: syz [ 417.009766][ T9] usb 8-1: config 0 descriptor?? [ 417.026963][ T9] smsc75xx v1.0.0 [ 417.210610][ T9214] bridge0: port 3(erspan0) entered blocking state [ 417.217266][ T9214] bridge0: port 3(erspan0) entered disabled state [ 417.223789][ T9214] erspan0: entered allmulticast mode [ 417.230131][ T9214] erspan0: entered promiscuous mode [ 417.235750][ T9214] bridge0: port 3(erspan0) entered blocking state [ 417.242268][ T9214] bridge0: port 3(erspan0) entered forwarding state [ 417.258398][ T9214] erspan0: left allmulticast mode [ 417.263593][ T9214] erspan0: left promiscuous mode [ 417.269949][ T9214] bridge0: port 3(erspan0) entered disabled state [ 417.277099][ T312] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 417.291147][ T312] asix 1-1:2.88: probe with driver asix failed with error -71 [ 417.307859][ T312] usb 1-1: USB disconnect, device number 50 [ 417.349710][ T9214] overlayfs: missing 'lowerdir' [ 417.854611][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 417.877158][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 417.892931][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 417.905306][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 417.915606][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 417.927034][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 417.937448][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 417.954787][ T9] usb 8-1: USB disconnect, device number 51 [ 418.263621][ T312] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 418.396513][ T8765] usb 7-1: USB disconnect, device number 53 [ 418.423215][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 418.433947][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.453087][ T312] usb 1-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.474847][ T312] usb 1-1: config 1 interface 0 has no altsetting 0 [ 418.489687][ T312] usb 1-1: string descriptor 0 read error: -22 [ 418.496132][ T9241] block device autoloading is deprecated and will be removed. [ 418.496899][ T312] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 418.541152][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.564715][ T312] usblp0: Disabling reads from problematic bidirectional printer [ 418.779374][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.788032][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.815300][ T620] Bluetooth: hci0: Frame reassembly failed (-84) [ 419.288880][ T9258] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294963200 [ 419.310051][ T9258] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 419.709440][ T36] kauditd_printk_skb: 1487 callbacks suppressed [ 419.709460][ T36] audit: type=1400 audit(1866815684.702:40777): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.779048][ T36] audit: type=1400 audit(1866815684.772:40778): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.848253][ T311] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 419.867825][ T36] audit: type=1400 audit(1866815684.852:40779): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.893158][ T36] audit: type=1400 audit(1866815684.852:40780): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.918229][ T36] audit: type=1400 audit(1866815684.852:40781): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.948925][ T36] audit: type=1400 audit(1866815684.943:40782): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.027675][ T311] usb 8-1: Using ep0 maxpacket: 32 [ 420.033674][ T36] audit: type=1400 audit(1866815685.023:40783): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.061102][ T36] audit: type=1400 audit(1866815685.023:40784): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.087059][ T36] audit: type=1400 audit(1866815685.053:40785): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.112198][ T311] usb 8-1: config 2 has an invalid interface number: 218 but max is 0 [ 420.121593][ T311] usb 8-1: config 2 has no interface number 0 [ 420.128682][ T311] usb 8-1: config 2 interface 218 has no altsetting 0 [ 420.135600][ T36] audit: type=1400 audit(1866815685.053:40786): avc: denied { ioctl } for pid=9262 comm="syz.7.3212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.164721][ T311] usb 8-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.96 [ 420.174387][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.183566][ T311] usb 8-1: Product: syz [ 420.188479][ T311] usb 8-1: Manufacturer: syz [ 420.193119][ T311] usb 8-1: SerialNumber: syz [ 420.411383][ T311] ums-freecom 8-1:2.218: USB Mass Storage device detected [ 420.466821][ T311] usb 8-1: USB disconnect, device number 52 [ 420.496168][ T11] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 420.544135][ T1013] udevd[1013]: symlink '../../loop1' '/dev/disk/by-diskseq/57.tmp-b7:1' failed: Read-only file system [ 420.675606][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 420.683512][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.694503][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.704327][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 420.717193][ T11] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 420.726282][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.735377][ T11] usb 7-1: config 0 descriptor?? [ 420.815075][ T5191] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 420.815083][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 420.829472][ T312] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 420.847166][ T312] usb 1-1: USB disconnect, device number 51 [ 420.854042][ T312] usblp0: removed [ 421.161645][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3221'. [ 421.175238][ T9286] syzkaller1: entered promiscuous mode [ 421.180755][ T9286] syzkaller1: entered allmulticast mode [ 421.194669][ T9286] 8021q: VLANs not supported on ip_vti0 [ 421.212122][ T11] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0045/input/input127 [ 421.227994][ T11] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0045/input/input128 [ 421.251953][ T11] kye 0003:0458:5011.0045: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 421.370169][ T11] usb 7-1: USB disconnect, device number 54 [ 421.393209][ T311] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 421.497607][ T9290] fido_id[9290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 421.552659][ T311] usb 8-1: Using ep0 maxpacket: 16 [ 421.566254][ T311] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.597235][ T311] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.609183][ T311] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 421.622907][ T311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.631235][ T311] usb 8-1: SerialNumber: syz [ 421.644556][ T311] usb 8-1: 0:2 : does not exist [ 421.871686][ T312] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 422.011388][ T312] usb 1-1: device descriptor read/64, error -71 [ 422.063795][ T9281] batadv_slave_1: entered promiscuous mode [ 422.250437][ T312] usb 1-1: device descriptor read/64, error -71 [ 422.331356][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.344823][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.364336][ T311] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 422.384512][ T311] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 422.396767][ T311] usb 8-1: USB disconnect, device number 53 [ 422.445434][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.489723][ T312] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 422.629243][ T312] usb 1-1: device descriptor read/64, error -71 [ 422.858580][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 422.878565][ T312] usb 1-1: device descriptor read/64, error -71 [ 422.988195][ T312] usb usb1-port1: attempt power cycle [ 423.008039][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 423.015687][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.027450][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.037272][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.050103][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 423.059180][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.068223][ T9] usb 7-1: config 0 descriptor?? [ 423.187483][ T311] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 423.337231][ T312] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 423.351460][ T311] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 423.360682][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.369325][ T311] usb 8-1: Product: syz [ 423.374042][ T311] usb 8-1: Manufacturer: syz [ 423.379204][ T311] usb 8-1: SerialNumber: syz [ 423.384668][ T312] usb 1-1: device descriptor read/8, error -71 [ 423.499069][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0046/input/input129 [ 423.516965][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0046/input/input130 [ 423.533945][ T312] usb 1-1: device descriptor read/8, error -71 [ 423.538572][ T9] kye 0003:0458:5011.0046: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 423.692173][ T8765] usb 7-1: USB disconnect, device number 55 [ 423.787167][ T312] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 423.820468][ T312] usb 1-1: device descriptor read/8, error -71 [ 423.949695][ T312] usb 1-1: device descriptor read/8, error -71 [ 424.057323][ T312] usb usb1-port1: unable to enumerate USB device [ 424.229693][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.247565][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.279407][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.292073][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.338145][ T311] rtl8150 8-1:1.0: couldn't reset the device [ 424.344366][ T311] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 424.368731][ T311] usb 8-1: USB disconnect, device number 54 [ 424.530507][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3245'. [ 424.541702][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3245'. [ 424.707746][ T9351] batadv_slave_1: entered promiscuous mode [ 424.716008][ T36] kauditd_printk_skb: 432 callbacks suppressed [ 424.716027][ T36] audit: type=1400 audit(1866815689.711:41219): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.746541][ T36] audit: type=1400 audit(1866815689.711:41220): avc: denied { read write open } for pid=8219 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.771841][ T36] audit: type=1400 audit(1866815689.721:41221): avc: denied { ioctl } for pid=8219 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.798127][ T36] audit: type=1400 audit(1866815689.781:41222): avc: denied { read write } for pid=9353 comm="syz.0.3250" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 424.822270][ T36] audit: type=1400 audit(1866815689.781:41223): avc: denied { read write open } for pid=9353 comm="syz.0.3250" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 424.847649][ T36] audit: type=1400 audit(1866815689.781:41224): avc: denied { mounton } for pid=9353 comm="syz.0.3250" path="/85/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 424.871196][ T36] audit: type=1400 audit(1866815689.791:41225): avc: denied { mount } for pid=9353 comm="syz.0.3250" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 424.894199][ T36] audit: type=1400 audit(1866815689.851:41226): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.919210][ T36] audit: type=1400 audit(1866815689.851:41227): avc: denied { read write open } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.945283][ T36] audit: type=1400 audit(1866815689.851:41228): avc: denied { ioctl } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.736823][ T9382] netlink: 'syz.7.3259': attribute type 12 has an invalid length. [ 425.774291][ T9382] tmpfs: Invalid gid '0x00000000ffffffff' [ 426.337182][ T11] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 426.366295][ T9410] cgroup2: Unknown parameter 'fowner<18446744073709551615' [ 426.400671][ T9414] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3272'. [ 426.446457][ T9416] fuse: Unknown parameter '0x0000000000000003' [ 426.447765][ T9417] fuse: Unknown parameter '0x0000000000000003' [ 426.461666][ T9417] 9pnet_fd: Insufficient options for proto=fd [ 426.470215][ T9418] 9pnet_fd: Insufficient options for proto=fd [ 426.497153][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 426.510460][ T11] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.527508][ T11] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.540848][ T11] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 426.547338][ T312] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 426.553875][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.566193][ T11] usb 8-1: SerialNumber: syz [ 426.582819][ T11] usb 8-1: 0:2 : does not exist [ 426.697203][ T312] usb 7-1: device descriptor read/64, error -71 [ 426.947162][ T312] usb 7-1: device descriptor read/64, error -71 [ 427.187196][ T312] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 427.203255][ T11] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 427.225822][ T11] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 427.237234][ T11] usb 8-1: USB disconnect, device number 55 [ 427.278809][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 427.327178][ T312] usb 7-1: device descriptor read/64, error -71 [ 427.567166][ T312] usb 7-1: device descriptor read/64, error -71 [ 427.677784][ T312] usb usb7-port1: attempt power cycle [ 427.718683][ T9439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345311083 (4690622166 ns) > initial count (2418620940 ns). Using initial count to start timer. [ 428.017210][ T312] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 428.039918][ T312] usb 7-1: device descriptor read/8, error -71 [ 428.067206][ T311] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 428.167214][ T8765] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 428.178514][ T312] usb 7-1: device descriptor read/8, error -71 [ 428.217170][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 428.224861][ T311] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 428.234108][ T311] usb 1-1: config 0 has no interface number 0 [ 428.241311][ T311] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 428.251431][ T311] usb 1-1: config 0 interface 196 has no altsetting 0 [ 428.262016][ T311] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 428.271172][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.279219][ T311] usb 1-1: Product: syz [ 428.283388][ T311] usb 1-1: Manufacturer: syz [ 428.288154][ T311] usb 1-1: SerialNumber: syz [ 428.295076][ T311] usb 1-1: config 0 descriptor?? [ 428.301965][ T9446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 428.317192][ T8765] usb 8-1: Using ep0 maxpacket: 32 [ 428.324925][ T8765] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 428.333205][ T8765] usb 8-1: config 0 has no interface number 0 [ 428.343393][ T8765] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 428.352551][ T8765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.360827][ T8765] usb 8-1: Product: syz [ 428.365037][ T8765] usb 8-1: Manufacturer: syz [ 428.369706][ T8765] usb 8-1: SerialNumber: syz [ 428.376404][ T8765] usb 8-1: config 0 descriptor?? [ 428.387718][ T8765] smsc95xx v2.0.0 [ 428.417178][ T312] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 428.439853][ T312] usb 7-1: device descriptor read/8, error -71 [ 428.569516][ T312] usb 7-1: device descriptor read/8, error -71 [ 428.672873][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3285'. [ 428.682013][ T312] usb usb7-port1: unable to enumerate USB device [ 428.914140][ T311] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 428.924087][ T311] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 429.199786][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 429.216600][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.635176][ T8765] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 429.646274][ T8765] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 429.658001][ T8765] usb 8-1: USB disconnect, device number 56 [ 429.795222][ T36] kauditd_printk_skb: 753 callbacks suppressed [ 429.795242][ T36] audit: type=1400 audit(1866815694.791:41982): avc: denied { create } for pid=9477 comm="syz.8.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.822294][ T36] audit: type=1400 audit(1866815694.811:41983): avc: denied { mounton } for pid=9477 comm="syz.8.3288" path="/354" dev="tmpfs" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.846121][ T36] audit: type=1400 audit(1866815694.811:41984): avc: denied { mount } for pid=9477 comm="syz.8.3288" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 430.150274][ T36] audit: type=1400 audit(1866815695.151:41985): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.200376][ T36] audit: type=1400 audit(1866815695.151:41986): avc: denied { read write open } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.251141][ T36] audit: type=1400 audit(1866815695.151:41987): avc: denied { ioctl } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.283707][ T36] audit: type=1400 audit(1866815695.201:41988): avc: denied { execmem } for pid=9483 comm="syz.7.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 430.304103][ T36] audit: type=1400 audit(1866815695.221:41989): avc: denied { unmount } for pid=6695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 430.325309][ T36] audit: type=1400 audit(1866815695.251:41990): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.350662][ T36] audit: type=1400 audit(1866815695.251:41991): avc: denied { read write open } for pid=6695 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.858712][ T8765] usb 1-1: USB disconnect, device number 56 [ 430.925464][ T8765] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 431.143185][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 431.379536][ T9537] FAULT_INJECTION: forcing a failure. [ 431.379536][ T9537] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 431.393078][ T9537] CPU: 0 UID: 0 PID: 9537 Comm: syz.0.3308 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 431.393115][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.393130][ T9537] Call Trace: [ 431.393137][ T9537] [ 431.393147][ T9537] __dump_stack+0x21/0x30 [ 431.393183][ T9537] dump_stack_lvl+0x140/0x1c0 [ 431.393214][ T9537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 431.393247][ T9537] dump_stack+0x19/0x20 [ 431.393277][ T9537] should_fail_ex+0x3c2/0x510 [ 431.393301][ T9537] should_fail_alloc_page+0xec/0x110 [ 431.393327][ T9537] __alloc_pages_noprof+0x1c0/0x7e0 [ 431.393360][ T9537] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 431.393394][ T9537] __folio_alloc_noprof+0x14/0x80 [ 431.393425][ T9537] folio_prealloc+0x46/0x220 [ 431.393453][ T9537] do_pte_missing+0x16af/0x4440 [ 431.393483][ T9537] ? pte_marker_clear+0x1b0/0x1b0 [ 431.393511][ T9537] ? is_bpf_text_address+0x17b/0x1a0 [ 431.393547][ T9537] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 431.393583][ T9537] handle_mm_fault+0x1189/0x1ba0 [ 431.393615][ T9537] ? __cfi_handle_mm_fault+0x10/0x10 [ 431.393640][ T9537] ? __kasan_check_write+0x18/0x20 [ 431.393667][ T9537] ? lock_mm_and_find_vma+0xb8/0x390 [ 431.393695][ T9537] do_user_addr_fault+0x4ee/0x1230 [ 431.393733][ T9537] exc_page_fault+0x58/0xc0 [ 431.393763][ T9537] asm_exc_page_fault+0x2b/0x30 [ 431.393789][ T9537] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 431.393823][ T9537] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 431.393842][ T9537] RSP: 0018:ffffc9000e197620 EFLAGS: 00050206 [ 431.393874][ T9537] RAX: ffffffff82aec101 RBX: 0000000000001000 RCX: 0000000000000140 [ 431.393890][ T9537] RDX: 0000000000000000 RSI: ffff88813bbf0ec0 RDI: 0000200000001000 [ 431.393905][ T9537] RBP: ffffc9000e197650 R08: ffff88813bbf0fff R09: 1ffff1102777e1ff [ 431.393921][ T9537] R10: dffffc0000000000 R11: ffffed102777e200 R12: 0000200000001140 [ 431.393938][ T9537] R13: 00007ffffffff000 R14: 0000200000000140 R15: ffff88813bbf0000 [ 431.393955][ T9537] ? _copy_to_user+0x31/0xa0 [ 431.393988][ T9537] ? _copy_to_user+0x7d/0xa0 [ 431.394017][ T9537] kvm_arch_vcpu_ioctl+0x199f/0x3120 [ 431.394040][ T9537] ? avc_has_perm+0x155/0x240 [ 431.394067][ T9537] ? __cfi_avc_has_perm+0x10/0x10 [ 431.394091][ T9537] ? avc_perm_nonode+0x118/0x1d0 [ 431.394116][ T9537] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 431.394139][ T9537] ? avc_has_perm_noaudit+0x360/0x360 [ 431.394165][ T9537] ? selinux_file_open+0x46c/0x630 [ 431.394187][ T9537] ? __cfi_selinux_file_open+0x10/0x10 [ 431.394214][ T9537] ? is_bpf_text_address+0x17b/0x1a0 [ 431.394247][ T9537] ? kernel_text_address+0xa9/0xe0 [ 431.394278][ T9537] ? __kernel_text_address+0x11/0x40 [ 431.394309][ T9537] ? __asan_set_shadow_00+0x12/0x20 [ 431.394339][ T9537] ? do_vfs_ioctl+0x182d/0x2010 [ 431.394366][ T9537] ? arch_stack_walk+0x10a/0x170 [ 431.394389][ T9537] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 431.394419][ T9537] ? _parse_integer_limit+0x195/0x1e0 [ 431.394444][ T9537] ? _parse_integer+0x2e/0x40 [ 431.394466][ T9537] ? kstrtoull+0x13b/0x1e0 [ 431.394487][ T9537] ? kstrtouint+0x78/0xf0 [ 431.394509][ T9537] ? ioctl_has_perm+0x1bc/0x500 [ 431.394532][ T9537] ? __asan_memcpy+0x5a/0x80 [ 431.394554][ T9537] ? ioctl_has_perm+0x408/0x500 [ 431.394574][ T9537] ? has_cap_mac_admin+0xd0/0xd0 [ 431.394596][ T9537] ? __kasan_check_write+0x18/0x20 [ 431.394617][ T9537] ? mutex_lock_killable+0x97/0x1d0 [ 431.394647][ T9537] ? __cfi_mutex_lock_killable+0x10/0x10 [ 431.394676][ T9537] ? proc_fail_nth_write+0x184/0x220 [ 431.394708][ T9537] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 431.394741][ T9537] kvm_vcpu_ioctl+0x7da/0x1000 [ 431.394764][ T9537] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 431.394787][ T9537] ? __cfi_vfs_write+0x10/0x10 [ 431.394810][ T9537] ? __kasan_check_write+0x18/0x20 [ 431.394831][ T9537] ? mutex_unlock+0x90/0x240 [ 431.394865][ T9537] ? __cfi_mutex_unlock+0x10/0x10 [ 431.394898][ T9537] ? bpf_lsm_file_ioctl+0xd/0x20 [ 431.394927][ T9537] ? security_file_ioctl+0x3e/0x110 [ 431.394960][ T9537] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 431.394980][ T9537] __se_sys_ioctl+0x132/0x1b0 [ 431.395008][ T9537] __x64_sys_ioctl+0x7f/0xa0 [ 431.395034][ T9537] x64_sys_call+0x1878/0x2ee0 [ 431.395055][ T9537] do_syscall_64+0x57/0xf0 [ 431.395078][ T9537] ? clear_bhb_loop+0x50/0xa0 [ 431.395107][ T9537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.395133][ T9537] RIP: 0033:0x7fcb60f9de59 [ 431.395153][ T9537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.395171][ T9537] RSP: 002b:00007fcb61e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.395194][ T9537] RAX: ffffffffffffffda RBX: 00007fcb61225fa0 RCX: 00007fcb60f9de59 [ 431.395210][ T9537] RDX: 0000200000000140 RSI: 000000009000aea4 RDI: 0000000000000005 [ 431.395225][ T9537] RBP: 00007fcb61e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 431.395239][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.395253][ T9537] R13: 00007fcb61226038 R14: 00007fcb61225fa0 R15: 00007ffcbacb1698 [ 431.395272][ T9537] [ 431.457289][ T8765] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 432.057127][ T8765] usb 7-1: Using ep0 maxpacket: 16 [ 432.065220][ T8765] usb 7-1: config 0 interface 0 has no altsetting 0 [ 432.077125][ T8765] usb 7-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 432.090012][ T8765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.100107][ T8765] usb 7-1: config 0 descriptor?? [ 432.257153][ T11] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 432.319142][ T8765] usbhid 7-1:0.0: can't add hid device: -71 [ 432.329792][ T8765] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 432.340017][ T8765] usb 7-1: USB disconnect, device number 60 [ 432.360903][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 432.397142][ T11] usb 8-1: device descriptor read/64, error -71 [ 432.540253][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 432.548685][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 432.559069][ T9] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 432.568381][ T9] usb 1-1: config 220 has no interface number 1 [ 432.574734][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 432.581592][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 432.591596][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 432.600833][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.608930][ T9] usb 1-1: Product: syz [ 432.613183][ T9] usb 1-1: Manufacturer: syz [ 432.617864][ T9] usb 1-1: SerialNumber: syz [ 432.647186][ T11] usb 8-1: device descriptor read/64, error -71 [ 432.838231][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 432.848580][ T9] usb 1-1: No valid video chain found. [ 432.856075][ T9] usb 1-1: USB disconnect, device number 57 [ 432.867975][ T529] udevd[529]: setting owner of /dev/bus/usb/001/057 to uid=0, gid=0 failed: No such file or directory [ 432.887187][ T11] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 433.037197][ T11] usb 8-1: device descriptor read/64, error -71 [ 433.267159][ T8765] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 433.277756][ T11] usb 8-1: device descriptor read/64, error -71 [ 433.396217][ T11] usb usb8-port1: attempt power cycle [ 433.423175][ T9565] overlayfs: failed to clone upperpath [ 433.437135][ T8765] usb 7-1: Using ep0 maxpacket: 16 [ 433.455392][ T8765] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.472453][ T8765] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.485419][ T8765] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.502581][ T8765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.521688][ T8765] usb 7-1: Product: syz [ 433.535161][ T8765] usb 7-1: Manufacturer: syz [ 433.543300][ T8765] usb 7-1: SerialNumber: syz [ 433.737169][ T11] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 433.761704][ T11] usb 8-1: device descriptor read/8, error -71 [ 433.766806][ T8765] usb 7-1: 0:2 : does not exist [ 433.773375][ T312] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 433.791112][ T8765] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 433.803815][ T8765] usb 7-1: USB disconnect, device number 61 [ 433.851950][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 433.900611][ T11] usb 8-1: device descriptor read/8, error -71 [ 433.947153][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 433.955628][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.965143][ T312] usb 1-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.978427][ T312] usb 1-1: config 1 interface 0 has no altsetting 0 [ 433.990498][ T312] usb 1-1: string descriptor 0 read error: -22 [ 433.996763][ T312] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 434.005942][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.019166][ T312] usblp0: Disabling reads from problematic bidirectional printer [ 434.147192][ T11] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 434.170045][ T11] usb 8-1: device descriptor read/8, error -71 [ 434.224563][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.233182][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.246292][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 434.303737][ T11] usb 8-1: device descriptor read/8, error -71 [ 434.417237][ T11] usb usb8-port1: unable to enumerate USB device [ 434.627174][ T8765] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 434.767165][ T8765] usb 7-1: device descriptor read/64, error -71 [ 434.877789][ T36] kauditd_printk_skb: 654 callbacks suppressed [ 434.877826][ T36] audit: type=1400 audit(1866815699.881:42644): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.909079][ T36] audit: type=1400 audit(1866815699.881:42645): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.934068][ T36] audit: type=1400 audit(1866815699.881:42646): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.959101][ T36] audit: type=1400 audit(1866815699.881:42647): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.984109][ T36] audit: type=1400 audit(1866815699.881:42648): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.009197][ T36] audit: type=1400 audit(1866815699.881:42649): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.037116][ T36] audit: type=1400 audit(1866815699.891:42650): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.037140][ T8765] usb 7-1: device descriptor read/64, error -71 [ 435.097158][ T36] audit: type=1400 audit(1866815699.971:42651): avc: denied { ioctl } for pid=9575 comm="syz.6.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.152571][ T36] audit: type=1400 audit(1866815700.071:42652): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.181988][ T36] audit: type=1400 audit(1866815700.071:42653): avc: denied { read write open } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.326923][ T9587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5653 sclass=netlink_route_socket pid=9587 comm=syz.7.3329 [ 435.357154][ T8765] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 435.507190][ T8765] usb 7-1: device descriptor read/64, error -71 [ 435.747278][ T8765] usb 7-1: device descriptor read/64, error -71 [ 435.857946][ T8765] usb usb7-port1: attempt power cycle [ 435.863677][ T9604] input: syz0 as /devices/virtual/input/input131 [ 435.955154][ T9606] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3335'. [ 436.174900][ T9613] FAULT_INJECTION: forcing a failure. [ 436.174900][ T9613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.188265][ T9613] CPU: 1 UID: 0 PID: 9613 Comm: syz.7.3338 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 436.188299][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.188313][ T9613] Call Trace: [ 436.188321][ T9613] [ 436.188333][ T9613] __dump_stack+0x21/0x30 [ 436.188369][ T9613] dump_stack_lvl+0x140/0x1c0 [ 436.188399][ T9613] ? __cfi_dump_stack_lvl+0x10/0x10 [ 436.188430][ T9613] ? avc_perm_nonode+0x118/0x1d0 [ 436.188456][ T9613] ? avc_has_perm_noaudit+0x360/0x360 [ 436.188479][ T9613] dump_stack+0x19/0x20 [ 436.188517][ T9613] should_fail_ex+0x3c2/0x510 [ 436.188542][ T9613] should_fail_alloc_page+0xec/0x110 [ 436.188571][ T9613] __alloc_pages_noprof+0x1c0/0x7e0 [ 436.188603][ T9613] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 436.188636][ T9613] ? is_bpf_text_address+0x17b/0x1a0 [ 436.188668][ T9613] ? iovec_from_user+0x94/0x310 [ 436.188698][ T9613] ___kmalloc_large_node+0x81/0x220 [ 436.188721][ T9613] ? iovec_from_user+0x94/0x310 [ 436.188769][ T9613] __kmalloc_large_node_noprof+0x1e/0xd0 [ 436.188793][ T9613] ? iovec_from_user+0x94/0x310 [ 436.188836][ T9613] __kmalloc_noprof+0x326/0x510 [ 436.188859][ T9613] ? _parse_integer_limit+0x195/0x1e0 [ 436.188882][ T9613] iovec_from_user+0x94/0x310 [ 436.188911][ T9613] __import_iovec+0x154/0x7d0 [ 436.188943][ T9613] import_iovec+0x80/0xb0 [ 436.188974][ T9613] ___sys_sendmsg+0x256/0x370 [ 436.188996][ T9613] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.189016][ T9613] ? proc_fail_nth_write+0x184/0x220 [ 436.189048][ T9613] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 436.189083][ T9613] ? __fget_files+0x2bc/0x330 [ 436.189130][ T9613] __x64_sys_sendmsg+0x206/0x2e0 [ 436.189151][ T9613] ? fput+0x1a4/0x230 [ 436.189179][ T9613] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 436.189201][ T9613] ? ksys_write+0x1f3/0x260 [ 436.189226][ T9613] ? __kasan_check_read+0x15/0x20 [ 436.189258][ T9613] x64_sys_call+0x2a4c/0x2ee0 [ 436.189280][ T9613] do_syscall_64+0x57/0xf0 [ 436.189304][ T9613] ? clear_bhb_loop+0x50/0xa0 [ 436.189332][ T9613] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 436.189359][ T9613] RIP: 0033:0x7f939fd9de59 [ 436.189380][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.189400][ T9613] RSP: 002b:00007f939e7e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.189425][ T9613] RAX: ffffffffffffffda RBX: 00007f93a0025fa0 RCX: 00007f939fd9de59 [ 436.189442][ T9613] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 436.189456][ T9613] RBP: 00007f939e7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 436.189471][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.189484][ T9613] R13: 00007f93a0026038 R14: 00007f93a0025fa0 R15: 00007fff56c436a8 [ 436.189504][ T9613] [ 436.257253][ T5191] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 436.259217][ T8765] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 436.264204][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 436.378231][ T8765] usb 7-1: device descriptor read/8, error -71 [ 436.531858][ T312] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 436.566215][ T312] usb 1-1: USB disconnect, device number 58 [ 436.627314][ T312] usblp0: removed [ 436.637584][ T355] udevd[355]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 436.662368][ T355] udevd[355]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 436.663401][ T8765] usb 7-1: device descriptor read/8, error -71 [ 436.957153][ T8765] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 436.990466][ T8765] usb 7-1: device descriptor read/8, error -71 [ 437.119196][ T8765] usb 7-1: device descriptor read/8, error -71 [ 437.237331][ T8765] usb usb7-port1: unable to enumerate USB device [ 437.337163][ T312] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 437.487270][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 437.539242][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.559370][ T312] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 437.567013][ T312] usb 1-1: can't read configurations, error -71 [ 437.950261][ T9685] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3358'. [ 437.984571][ T9684] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9684 comm=syz.6.3357 [ 438.120911][ T9693] netlink: 'syz.0.3361': attribute type 4 has an invalid length. [ 438.467210][ T8765] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 438.617185][ T8765] usb 8-1: Using ep0 maxpacket: 32 [ 438.625635][ T8765] usb 8-1: unable to get BOS descriptor or descriptor too short [ 438.635628][ T8765] usb 8-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.648701][ T8765] usb 8-1: config 1 interface 0 has no altsetting 0 [ 438.662469][ T8765] usb 8-1: string descriptor 0 read error: -22 [ 438.668787][ T8765] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 438.677977][ T8765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.699948][ T8765] usblp0: Disabling reads from problematic bidirectional printer [ 438.912392][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.926899][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.939317][ T9708] netlink: 'syz.6.3367': attribute type 4 has an invalid length. [ 438.965341][ T8765] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 438.981390][ T8765] usb 8-1: USB disconnect, device number 61 [ 439.003115][ T8765] usblp0: removed [ 439.887629][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 439.887651][ T36] audit: type=1400 audit(1866815704.881:43199): avc: denied { read } for pid=9736 comm="syz.7.3379" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.956842][ T36] audit: type=1400 audit(1866815704.891:43200): avc: denied { read open } for pid=9736 comm="syz.7.3379" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.990529][ T36] audit: type=1400 audit(1866815704.891:43201): avc: denied { ioctl } for pid=9736 comm="syz.7.3379" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 440.037123][ T36] audit: type=1400 audit(1866815704.931:43202): avc: denied { read } for pid=9736 comm="syz.7.3379" name="userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.060268][ T312] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 440.079240][ T36] audit: type=1400 audit(1866815704.931:43203): avc: denied { read open } for pid=9736 comm="syz.7.3379" path="/dev/userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.106481][ T36] audit: type=1400 audit(1866815704.931:43204): avc: denied { ioctl } for pid=9736 comm="syz.7.3379" path="/dev/userfaultfd" dev="devtmpfs" ino=22 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.171095][ T36] audit: type=1400 audit(1866815704.941:43205): avc: denied { create } for pid=9736 comm="syz.7.3379" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 440.212539][ T36] audit: type=1400 audit(1866815704.941:43206): avc: denied { ioctl } for pid=9736 comm="syz.7.3379" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=83424 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 440.253236][ T312] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 440.263019][ T312] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 440.283505][ T312] usb 7-1: config 220 has no interface number 2 [ 440.290034][ T36] audit: type=1400 audit(1866815704.941:43207): avc: denied { ioctl } for pid=9734 comm="syz.6.3378" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.327245][ T312] usb 7-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 440.340222][ T312] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 440.370224][ T36] audit: type=1400 audit(1866815704.941:43208): avc: denied { ioctl } for pid=9736 comm="syz.7.3379" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=83424 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 440.402720][ T312] usb 7-1: config 220 interface 0 has no altsetting 0 [ 440.415184][ T312] usb 7-1: config 220 interface 76 has no altsetting 0 [ 440.426384][ T312] usb 7-1: config 220 interface 1 has no altsetting 0 [ 440.443417][ T312] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 440.454796][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3386'. [ 440.463838][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.473164][ T312] usb 7-1: Product: syz [ 440.481012][ T312] usb 7-1: Manufacturer: syz [ 440.494168][ T312] usb 7-1: SerialNumber: syz [ 440.585764][ T9760] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3389'. [ 440.728132][ T312] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 440.734570][ T312] usb 7-1: No valid video chain found. [ 440.749166][ T62] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 440.756606][ T312] usb 7-1: USB disconnect, device number 66 [ 440.777135][ T11] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 440.919759][ T62] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 440.929938][ T62] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 440.940011][ T62] usb 1-1: config 1 interface 0 has no altsetting 0 [ 440.946650][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 440.955107][ T11] usb 8-1: unable to get BOS descriptor or descriptor too short [ 440.964544][ T62] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 440.973749][ T11] usb 8-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.986687][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.994734][ T62] usb 1-1: Product: syz [ 440.999048][ T11] usb 8-1: config 1 interface 0 has no altsetting 0 [ 441.005730][ T62] usb 1-1: Manufacturer: syz [ 441.010398][ T62] usb 1-1: SerialNumber: syz [ 441.021141][ T9756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 441.031152][ T11] usb 8-1: string descriptor 0 read error: -22 [ 441.037902][ T11] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 441.047439][ T9756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 441.051417][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.067889][ T11] usblp0: Disabling reads from problematic bidirectional printer [ 441.281227][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.307340][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.337559][ T11] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 441.351778][ T11] usb 8-1: USB disconnect, device number 62 [ 441.360779][ T11] usblp0: removed [ 441.607161][ T408] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 441.670651][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.680058][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.762302][ T408] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.772546][ T408] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.782649][ T408] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.793223][ T408] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 441.803810][ T408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.827439][ T408] hub 7-1:1.0: bad descriptor, ignoring hub [ 441.833521][ T408] hub 7-1:1.0: probe with driver hub failed with error -5 [ 441.844982][ T408] cdc_wdm 7-1:1.0: skipping garbage [ 441.851175][ T408] cdc_wdm 7-1:1.0: skipping garbage [ 441.856461][ T408] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 441.900278][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3398'. [ 441.952708][ T62] rtl8150 1-1:1.0: couldn't reset the device [ 441.977181][ T62] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 441.996068][ T62] usb 1-1: USB disconnect, device number 61 [ 442.147221][ T45] usb 7-1: USB disconnect, device number 67 [ 442.297148][ T312] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 442.331464][ T9805] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3402'. [ 442.447133][ T312] usb 8-1: Using ep0 maxpacket: 32 [ 442.463101][ T312] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 442.472874][ T312] usb 8-1: config 2 has no interface number 0 [ 442.480610][ T312] usb 8-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 442.492853][ T312] usb 8-1: config 2 interface 88 has no altsetting 0 [ 442.505846][ T312] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 442.516167][ T312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 442.524991][ T312] usb 8-1: Product: syz [ 442.530045][ T312] usb 8-1: Manufacturer: syz [ 442.534681][ T312] usb 8-1: SerialNumber: syz [ 442.544021][ T9796] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 442.587648][ T9819] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3409'. [ 442.758299][ T9796] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 443.182213][ T312] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 443.197193][ T312] asix 8-1:2.88: probe with driver asix failed with error -71 [ 443.204216][ T62] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 443.218611][ T312] usb 8-1: USB disconnect, device number 63 [ 443.397164][ T62] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 443.406157][ T62] usb 1-1: config 127 has no interface number 0 [ 443.417029][ T62] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 443.426907][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.435103][ T62] usb 1-1: Product: syz [ 443.439504][ T62] usb 1-1: Manufacturer: syz [ 443.444241][ T62] usb 1-1: SerialNumber: syz [ 444.634194][ T62] asix 1-1:127.57: probe with driver asix failed with error -22 [ 444.647380][ T62] usb 1-1: USB disconnect, device number 62 [ 444.904804][ T36] kauditd_printk_skb: 2490 callbacks suppressed [ 444.904825][ T36] audit: type=1400 audit(1866815709.901:45699): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.952275][ T36] audit: type=1400 audit(1866815709.941:45700): avc: denied { read write open } for pid=6695 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.977554][ T36] audit: type=1400 audit(1866815709.941:45701): avc: denied { ioctl } for pid=6695 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.007126][ T36] audit: type=1400 audit(1866815710.011:45702): avc: denied { create } for pid=9884 comm="syz.6.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 445.027996][ T36] audit: type=1400 audit(1866815710.011:45703): avc: denied { create } for pid=9884 comm="syz.6.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 445.049673][ T36] audit: type=1400 audit(1866815710.011:45704): avc: denied { read write } for pid=9884 comm="syz.6.3426" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.074106][ T36] audit: type=1400 audit(1866815710.011:45705): avc: denied { read write open } for pid=9884 comm="syz.6.3426" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.099395][ T36] audit: type=1400 audit(1866815710.011:45706): avc: denied { ioctl } for pid=9884 comm="syz.6.3426" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.128186][ T36] audit: type=1400 audit(1866815710.011:45707): avc: denied { read write } for pid=9884 comm="syz.6.3426" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.152918][ T36] audit: type=1400 audit(1866815710.011:45708): avc: denied { read write open } for pid=9884 comm="syz.6.3426" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.257133][ T62] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 445.406837][ T9906] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3430'. [ 445.422169][ T62] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 445.436517][ T62] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 445.448334][ T62] usb 7-1: config 220 has no interface number 2 [ 445.455335][ T62] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 445.487116][ T62] usb 7-1: config 220 interface 0 has no altsetting 0 [ 445.494053][ T62] usb 7-1: config 220 interface 76 has no altsetting 0 [ 445.526628][ T62] usb 7-1: config 220 interface 1 has no altsetting 0 [ 445.545836][ T62] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 445.561566][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.571408][ T62] usb 7-1: Product: syz [ 445.576607][ T62] usb 7-1: Manufacturer: syz [ 445.583013][ T62] usb 7-1: SerialNumber: syz [ 445.737130][ T45] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 445.795951][ T62] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 445.802480][ T62] usb 7-1: No valid video chain found. [ 445.809298][ T62] usb 7-1: selecting invalid altsetting 0 [ 445.821098][ T62] usb 7-1: USB disconnect, device number 68 [ 445.899384][ T45] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 445.907702][ T45] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 445.917995][ T45] usb 8-1: config 220 has no interface number 2 [ 445.924280][ T45] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 445.937681][ T45] usb 8-1: config 220 interface 0 has no altsetting 0 [ 445.944500][ T45] usb 8-1: config 220 interface 76 has no altsetting 0 [ 445.951455][ T45] usb 8-1: config 220 interface 1 has no altsetting 0 [ 445.961869][ T45] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 445.971014][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.979201][ T45] usb 8-1: Product: syz [ 445.983401][ T45] usb 8-1: Manufacturer: syz [ 445.988187][ T45] usb 8-1: SerialNumber: syz [ 446.205794][ T45] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 446.212309][ T45] usb 8-1: No valid video chain found. [ 446.217936][ T45] usb 8-1: selecting invalid altsetting 0 [ 446.229323][ T45] usb 8-1: USB disconnect, device number 64 [ 446.523991][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3440'. [ 446.588938][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3442'. [ 446.620407][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3442'. [ 446.828663][ T9952] Source file dentry negative [ 447.966389][ T9988] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 448.687131][ T45] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 448.837228][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 448.845411][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.855651][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.870189][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 448.879764][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.887816][ T45] usb 7-1: SerialNumber: syz [ 448.896821][ T45] usb 7-1: 0:2 : does not exist [ 449.304226][T10008] batadv_slave_1: entered promiscuous mode [ 449.328696][ T45] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 449.358893][ T45] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 449.387217][ T45] usb 7-1: USB disconnect, device number 69 [ 449.440550][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 449.553806][T10056] fuseblk: Unknown parameter 'AllNw_o^her' [ 449.917110][ T36] kauditd_printk_skb: 1143 callbacks suppressed [ 449.917128][ T36] audit: type=1400 audit(1866815714.891:46852): avc: denied { read } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.018701][ T36] audit: type=1400 audit(1866815714.951:46853): avc: denied { create } for pid=10044 comm="syz.8.3477" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.067066][ T36] audit: type=1400 audit(1866815714.951:46854): avc: denied { map } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.107123][ T36] audit: type=1400 audit(1866815714.951:46855): avc: denied { read write } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.169697][ T36] audit: type=1400 audit(1866815714.951:46856): avc: denied { map } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.245526][ T36] audit: type=1400 audit(1866815714.951:46857): avc: denied { read write } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.290869][ T36] audit: type=1400 audit(1866815714.951:46858): avc: denied { map } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.325531][ T36] audit: type=1400 audit(1866815714.951:46859): avc: denied { read } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.357120][ T36] audit: type=1400 audit(1866815714.951:46860): avc: denied { create } for pid=10044 comm="syz.8.3477" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.384857][ T36] audit: type=1400 audit(1866815714.951:46861): avc: denied { map } for pid=10044 comm="syz.8.3477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.397464][T10082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=10082 comm=syz.7.3488 [ 450.667148][ T45] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 450.817329][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 450.824920][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.835138][ T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.847423][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 450.856634][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.864694][ T45] usb 1-1: Product: syz [ 450.868907][ T45] usb 1-1: Manufacturer: syz [ 450.873524][ T45] usb 1-1: SerialNumber: syz [ 450.878180][ T312] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 450.887983][ T45] usb 1-1: config 0 descriptor?? [ 451.040249][ T312] usb 7-1: unable to get BOS descriptor or descriptor too short [ 451.052814][ T312] usb 7-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 451.062056][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.070135][ T312] usb 7-1: Product: ⎄⇿穱㰰朄ບ䵑క筼嫮桙ꞕ婊僻놌溆ç¦ç“˜ê¨¾ã¥”ὑ洓싩뛆 [ 451.080601][ T312] usb 7-1: Manufacturer: ⩇불îŠî¸™æ–ˆí’¯î–㽅斂嗗ጩ迩 [ 451.088251][ T312] usb 7-1: SerialNumber: syz [ 451.162430][T10090] can: request_module (can-proto-0) failed. [ 451.309261][T10096] overlay: filesystem on ./file0 not supported as upperdir [ 451.345093][ T312] usb 7-1: USB disconnect, device number 70 [ 451.538857][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 451.594416][T10109] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 451.890369][T10125] tmpfs: Cannot disable swap on remount [ 451.947136][ T45] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 452.099670][ T45] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 452.107983][ T45] usb 8-1: config 0 has no interface number 0 [ 452.114090][ T45] usb 8-1: config 0 interface 41 has no altsetting 0 [ 452.124073][ T45] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 452.133195][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.141280][ T312] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 452.148924][ T45] usb 8-1: Product: syz [ 452.153102][ T45] usb 8-1: Manufacturer: syz [ 452.157802][ T45] usb 8-1: SerialNumber: syz [ 452.164547][ T45] usb 8-1: config 0 descriptor?? [ 452.307141][ T312] usb 7-1: Using ep0 maxpacket: 16 [ 452.314975][ T312] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 452.323257][ T312] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.333511][ T312] usb 7-1: config 0 has no interface number 0 [ 452.343212][ T312] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 452.352302][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.360352][ T312] usb 7-1: Product: syz [ 452.364551][ T312] usb 7-1: Manufacturer: syz [ 452.369192][ T312] usb 7-1: SerialNumber: syz [ 452.375951][ T312] usb 7-1: config 0 descriptor?? [ 452.387310][ T312] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 452.393714][ T312] usb 7-1: No valid video chain found. [ 453.398766][ T312] usb 1-1: USB disconnect, device number 63 [ 453.817156][ T312] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 453.967130][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 453.974722][ T312] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 453.982951][ T312] usb 1-1: config 0 has no interface number 0 [ 453.992334][ T312] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 454.001480][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.009537][ T312] usb 1-1: Product: syz [ 454.013712][ T312] usb 1-1: Manufacturer: syz [ 454.018364][ T312] usb 1-1: SerialNumber: syz [ 454.024654][ T312] usb 1-1: config 0 descriptor?? [ 454.037575][ T312] smsc95xx v2.0.0 [ 454.197337][ T45] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 454.208113][ T45] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 454.218959][ T45] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 454.233980][ T45] usb 8-1: USB disconnect, device number 65 [ 454.377039][T10156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.446679][T10145] netlink: 328 bytes leftover after parsing attributes in process `syz.0.3511'. [ 454.481964][ T45] usb 7-1: USB disconnect, device number 71 [ 454.739569][T10154] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3515'. [ 454.817156][ T408] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 454.871230][ T312] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 454.882300][ T312] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 454.977903][ T36] kauditd_printk_skb: 467 callbacks suppressed [ 454.977923][ T36] audit: type=1400 audit(1866815719.981:47325): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.984512][ T408] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.015209][ T36] audit: type=1400 audit(1866815719.981:47326): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.023199][ T408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 455.050192][ T36] audit: type=1400 audit(1866815719.981:47327): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.057487][ T408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 455.086971][ T36] audit: type=1400 audit(1866815719.981:47328): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.095105][ T408] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.122266][ T36] audit: type=1400 audit(1866815719.981:47329): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.133941][ T408] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.156990][ T311] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 455.166301][ T408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.177222][ T312] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 455.194477][ T312] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 455.207177][ T312] usb 1-1: USB disconnect, device number 64 [ 455.213364][ T36] audit: type=1400 audit(1866815720.031:47330): avc: denied { ioctl } for pid=10159 comm="syz.7.3519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.243773][ T36] audit: type=1400 audit(1866815720.031:47331): avc: denied { ioctl } for pid=10170 comm="syz.6.3522" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.246901][ T408] usb 8-1: config 0 descriptor?? [ 455.301783][ T36] audit: type=1400 audit(1866815720.101:47332): avc: denied { ioctl } for pid=10170 comm="syz.6.3522" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.326621][T10160] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 455.340713][ T36] audit: type=1400 audit(1866815720.191:47333): avc: denied { ioctl } for pid=10170 comm="syz.6.3522" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.366121][ T311] usb 7-1: Using ep0 maxpacket: 32 [ 455.376509][ T36] audit: type=1400 audit(1866815720.201:47334): avc: denied { ioctl } for pid=10170 comm="syz.6.3522" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.390776][ T311] usb 7-1: unable to get BOS descriptor or descriptor too short [ 455.421299][ T311] usb 7-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.447951][ T311] usb 7-1: config 1 interface 0 has no altsetting 0 [ 455.464033][ T311] usb 7-1: string descriptor 0 read error: -22 [ 455.470754][ T311] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 455.481098][ T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.495435][ T311] usblp0: Disabling reads from problematic bidirectional printer [ 455.714133][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.723824][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.740652][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 455.758987][ T311] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 455.778371][ T311] usb 7-1: USB disconnect, device number 72 [ 455.794888][T10160] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3519'. [ 455.809025][ T311] usblp0: removed [ 455.857717][ T408] plantronics 0003:047F:FFFF.0047: unknown main item tag 0xd [ 455.879033][ T408] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 455.895696][ T408] plantronics 0003:047F:FFFF.0047: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 456.062850][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.071416][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.138499][ T408] usb 8-1: USB disconnect, device number 66 [ 456.637146][ T408] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 456.797109][ T408] usb 7-1: Using ep0 maxpacket: 8 [ 456.810828][ T408] usb 7-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 456.824291][ T408] usb 7-1: config 0 interface 0 has no altsetting 0 [ 456.832361][ T408] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 456.847907][ T408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.858106][ T408] usb 7-1: config 0 descriptor?? [ 457.073516][ T408] usbhid 7-1:0.0: can't add hid device: -71 [ 457.084605][ T408] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 457.108555][ T408] usb 7-1: USB disconnect, device number 73 [ 457.477135][ T62] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 457.612712][T10222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 457.627168][ T62] usb 8-1: Using ep0 maxpacket: 32 [ 457.656771][ T62] usb 8-1: unable to get BOS descriptor or descriptor too short [ 457.671526][ T62] usb 8-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.684690][ T62] usb 8-1: config 1 interface 0 has no altsetting 0 [ 457.697843][ T62] usb 8-1: string descriptor 0 read error: -22 [ 457.704140][ T62] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 457.714137][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.728293][ T62] usblp0: Disabling reads from problematic bidirectional printer [ 457.887127][ T311] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 457.933855][ T602] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.039930][ T311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.051005][ T311] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 458.060121][ T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.070250][ T311] usb 7-1: config 0 descriptor?? [ 458.297493][ T311] usbhid 7-1:0.0: can't add hid device: -71 [ 458.309443][ T311] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 458.338595][ T311] usb 7-1: USB disconnect, device number 74 [ 458.658801][T10259] fuse: Bad value for 'rootmode' [ 458.807140][ T311] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 458.948182][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3558'. [ 458.960119][ T311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.971740][ T311] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 458.980906][ T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.993660][ T311] usb 7-1: config 0 descriptor?? [ 459.005194][T10264] team_slave_1: entered promiscuous mode [ 459.027105][T10264] team_slave_1: entered allmulticast mode [ 459.408305][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.443886][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.444305][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.488757][T10238] deleting an unspecified loop device is not supported. [ 459.518484][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.564848][ T311] usbhid 7-1:0.0: can't add hid device: -71 [ 459.579299][ T311] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 459.601120][ T311] usb 7-1: USB disconnect, device number 75 [ 459.807136][ T312] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 459.977113][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 459.987312][ T36] kauditd_printk_skb: 1272 callbacks suppressed [ 459.987331][ T36] audit: type=1400 audit(1866815724.991:48607): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.024312][ T36] audit: type=1400 audit(1866815725.021:48608): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.024391][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.028156][ T5191] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.060056][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 460.068960][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.084011][ T36] audit: type=1400 audit(1866815725.021:48609): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.118848][ T36] audit: type=1400 audit(1866815725.061:48610): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.146094][ T312] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 460.151494][ T62] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 460.156541][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.195433][ T36] audit: type=1400 audit(1866815725.091:48611): avc: denied { create } for pid=10312 comm="syz.8.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.222533][ T62] usb 8-1: USB disconnect, device number 67 [ 460.228194][ T312] usb 1-1: SerialNumber: syz [ 460.236896][ T62] usblp0: removed [ 460.248533][ T8765] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 460.257200][ T312] usb 1-1: 0:2 : does not exist [ 460.280346][ T36] audit: type=1400 audit(1866815725.121:48612): avc: denied { ioctl } for pid=10308 comm="syz.6.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.326533][ T36] audit: type=1400 audit(1866815725.151:48613): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.356801][ T36] audit: type=1400 audit(1866815725.151:48614): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.429893][ T8765] usb 7-1: config 1 has an invalid interface number: 221 but max is 2 [ 460.438627][ T8765] usb 7-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 460.451216][ T36] audit: type=1400 audit(1866815725.151:48615): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.476378][ T8765] usb 7-1: config 1 has no interface number 2 [ 460.486497][ T8765] usb 7-1: config 1 interface 221 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.509210][T10324] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 460.520319][ T8765] usb 7-1: config 1 interface 221 has no altsetting 0 [ 460.527289][ T36] audit: type=1400 audit(1866815725.161:48616): avc: denied { ioctl } for pid=10292 comm="syz.0.3565" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.556672][ T312] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 460.566501][ T8765] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 460.579465][ T8765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.588564][ T312] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 460.606300][ T8765] usb 7-1: Product: syz [ 460.611427][ T8765] usb 7-1: Manufacturer: syz [ 460.617225][ T312] usb 1-1: USB disconnect, device number 65 [ 460.625236][ T8765] usb 7-1: SerialNumber: syz [ 460.726957][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 460.860567][ T8765] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 460.918242][ T8765] usb 7-1: USB disconnect, device number 76 [ 461.025366][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 461.211826][T10343] netlink: 'syz.0.3581': attribute type 32 has an invalid length. [ 462.211194][T10369] netlink: 'syz.7.3589': attribute type 15 has an invalid length. [ 462.219181][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3589'. [ 462.528660][ T45] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 462.687135][ T45] usb 8-1: device descriptor read/64, error -71 [ 462.697146][ T8765] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 462.860947][ T8765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 462.873215][ T8765] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 462.887638][ T8765] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 462.896851][ T8765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.917370][ T8765] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 462.926125][ T8765] usb 1-1: no configuration chosen from 1 choice [ 462.932635][ T45] usb 8-1: device descriptor read/64, error -71 [ 463.177131][ T45] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 463.337145][ T45] usb 8-1: device descriptor read/64, error -71 [ 463.577128][ T45] usb 8-1: device descriptor read/64, error -71 [ 463.687698][ T45] usb usb8-port1: attempt power cycle [ 464.027136][ T45] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 464.059819][ T45] usb 8-1: device descriptor read/8, error -71 [ 464.190039][ T45] usb 8-1: device descriptor read/8, error -71 [ 464.447147][ T45] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 464.469575][ T45] usb 8-1: device descriptor read/8, error -71 [ 464.618950][ T45] usb 8-1: device descriptor read/8, error -71 [ 464.727230][ T45] usb usb8-port1: unable to enumerate USB device [ 465.008961][ T36] kauditd_printk_skb: 333 callbacks suppressed [ 465.009007][ T36] audit: type=1400 audit(1866815730.011:48950): avc: denied { unmount } for pid=6753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 465.074677][ T36] audit: type=1400 audit(1866815730.071:48951): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.141469][ T36] audit: type=1400 audit(1866815730.071:48952): avc: denied { read write open } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.179328][T10427] netlink: 'syz.8.3611': attribute type 4 has an invalid length. [ 465.202382][ T36] audit: type=1400 audit(1866815730.071:48953): avc: denied { ioctl } for pid=6753 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.240827][ T36] audit: type=1400 audit(1866815730.141:48954): avc: denied { read write } for pid=10424 comm="syz.7.3610" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.265592][ T36] audit: type=1400 audit(1866815730.141:48955): avc: denied { read write open } for pid=10424 comm="syz.7.3610" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.290381][ T36] audit: type=1400 audit(1866815730.141:48956): avc: denied { ioctl } for pid=10424 comm="syz.7.3610" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.316102][ T36] audit: type=1400 audit(1866815730.141:48957): avc: denied { ioctl } for pid=10424 comm="syz.7.3610" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.341376][ T36] audit: type=1400 audit(1866815730.171:48958): avc: denied { ioctl } for pid=10424 comm="syz.7.3610" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.366715][ T36] audit: type=1400 audit(1866815730.171:48959): avc: denied { ioctl } for pid=10424 comm="syz.7.3610" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.397129][ T45] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 465.446572][ T408] usb 1-1: USB disconnect, device number 66 [ 465.537119][ T45] usb 8-1: device descriptor read/64, error -71 [ 465.610081][T10435] netlink: 'syz.0.3615': attribute type 13 has an invalid length. [ 465.727128][ T62] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 465.787404][ T45] usb 8-1: device descriptor read/64, error -71 [ 465.880073][ T62] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 465.888849][ T62] usb 7-1: config 0 has no interface number 0 [ 465.895018][ T62] usb 7-1: config 0 interface 41 has no altsetting 0 [ 465.908108][ T62] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 465.918195][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.926264][ T62] usb 7-1: Product: syz [ 465.931166][ T62] usb 7-1: Manufacturer: syz [ 465.937858][ T62] usb 7-1: SerialNumber: syz [ 465.944719][ T62] usb 7-1: config 0 descriptor?? [ 466.047191][ T45] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 466.187148][ T45] usb 8-1: device descriptor read/64, error -71 [ 466.427161][ T45] usb 8-1: device descriptor read/64, error -71 [ 466.537856][ T45] usb usb8-port1: attempt power cycle [ 466.670985][T10466] kvm_intel: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xde9d [ 466.682967][T10466] kvm: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x289d [ 466.691926][T10466] kvm: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xaa78 [ 466.703406][T10466] kvm: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x3ec1 [ 466.714849][T10466] kvm: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x589c [ 466.723740][T10466] kvm: kvm [10464]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xd977 [ 466.887146][ T45] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 466.911125][ T45] usb 8-1: device descriptor read/8, error -71 [ 467.049775][ T45] usb 8-1: device descriptor read/8, error -71 [ 467.117148][ T11] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 467.270337][ T11] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.281799][ T11] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 467.296067][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.303803][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 467.307223][ T45] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 467.317219][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.331625][ T11] usb 1-1: config 0 descriptor?? [ 467.340301][ T45] usb 8-1: device descriptor read/8, error -71 [ 467.375499][ T62] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 467.398124][ T62] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 467.419004][ T62] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 467.437587][ T62] usb 7-1: USB disconnect, device number 77 [ 467.490369][ T45] usb 8-1: device descriptor read/8, error -71 [ 467.607192][ T45] usb usb8-port1: unable to enumerate USB device [ 467.751165][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.768344][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.782253][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.791270][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.798551][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.805778][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.813041][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.820304][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.827540][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.834920][ T11] logitech 0003:046D:C293.0048: unknown main item tag 0x0 [ 467.850455][ T11] logitech 0003:046D:C293.0048: hidraw0: USB HID vff.fc Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 467.875801][ T11] logitech 0003:046D:C293.0048: no inputs found [ 468.017313][ T11] usb 1-1: USB disconnect, device number 67 [ 468.341935][T10494] syzkaller1: entered promiscuous mode [ 468.348808][T10494] syzkaller1: entered allmulticast mode [ 468.507159][ T11] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 468.680159][ T11] usb 8-1: config 1 has an invalid interface number: 221 but max is 2 [ 468.689317][ T11] usb 8-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 468.699740][ T11] usb 8-1: config 1 has no interface number 2 [ 468.705860][ T11] usb 8-1: config 1 interface 221 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.719449][ T11] usb 8-1: config 1 interface 221 has no altsetting 0 [ 468.742354][ T11] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 468.752048][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.760112][ T11] usb 8-1: Product: syz [ 468.764371][ T11] usb 8-1: Manufacturer: syz [ 468.769065][ T11] usb 8-1: SerialNumber: syz [ 468.797149][ T45] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 468.937115][ T45] usb 7-1: device descriptor read/64, error -71 [ 468.987717][ T11] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 469.018939][ T11] usb 8-1: USB disconnect, device number 76 [ 469.036196][ T529] udevd[529]: setting mode of /dev/bus/usb/008/076 to 020664 failed: No such file or directory [ 469.048712][ T529] udevd[529]: setting owner of /dev/bus/usb/008/076 to uid=0, gid=0 failed: No such file or directory [ 469.117801][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 469.207134][ T45] usb 7-1: device descriptor read/64, error -71 [ 469.308492][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3646'. [ 469.447115][ T45] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 469.588750][ T45] usb 7-1: device descriptor read/64, error -71 [ 469.827122][ T45] usb 7-1: device descriptor read/64, error -71 [ 469.937115][ T11] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 469.948924][ T45] usb usb7-port1: attempt power cycle [ 470.017998][ T36] kauditd_printk_skb: 3265 callbacks suppressed [ 470.018017][ T36] audit: type=1400 audit(1866815735.021:52223): avc: denied { write } for pid=10529 comm="syz.8.3647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.050164][ T36] audit: type=1400 audit(1866815735.031:52224): avc: denied { ioctl } for pid=10503 comm="syz.6.3637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.076113][ T36] audit: type=1400 audit(1866815735.031:52225): avc: denied { ioctl } for pid=10503 comm="syz.6.3637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.103376][ T36] audit: type=1400 audit(1866815735.031:52226): avc: denied { ioctl } for pid=10540 comm="syz.7.3650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.129490][ T36] audit: type=1400 audit(1866815735.031:52227): avc: denied { write } for pid=10529 comm="syz.8.3647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.154148][ T11] usb 8-1: Using ep0 maxpacket: 8 [ 470.161176][ T36] audit: type=1400 audit(1866815735.031:52228): avc: denied { write } for pid=10529 comm="syz.8.3647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.175696][T10530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 470.192677][T10542] audit: audit_backlog=65 > audit_backlog_limit=64 [ 470.199301][T10542] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 470.204079][ T36] audit: type=1400 audit(1866815735.031:52229): avc: denied { write } for pid=10529 comm="syz.8.3647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.236715][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 470.246196][ T11] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 470.254531][ T11] usb 8-1: config 179 has no interface number 0 [ 470.267517][ T11] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 470.279478][ T11] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 470.292961][ T11] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.305787][ T11] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 470.307407][ T45] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 470.320473][ T11] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.338847][ T11] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 470.348788][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.362284][T10542] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 470.363900][ T45] usb 7-1: device descriptor read/8, error -71 [ 470.513509][ T45] usb 7-1: device descriptor read/8, error -71 [ 470.585639][ T311] usb 8-1: USB disconnect, device number 77 [ 470.585793][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 470.600033][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 471.354512][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 471.677395][T10612] FAULT_INJECTION: forcing a failure. [ 471.677395][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 471.690318][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.6.3680 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 471.690361][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.690375][T10612] Call Trace: [ 471.690383][T10612] [ 471.690393][T10612] __dump_stack+0x21/0x30 [ 471.690433][T10612] dump_stack_lvl+0x140/0x1c0 [ 471.690463][T10612] ? __cfi_dump_stack_lvl+0x10/0x10 [ 471.690498][T10612] dump_stack+0x19/0x20 [ 471.690527][T10612] should_fail_ex+0x3c2/0x510 [ 471.690554][T10612] should_failslab+0xac/0x100 [ 471.690584][T10612] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 471.690610][T10612] ? xas_split_alloc+0x15a/0x510 [ 471.690640][T10612] xas_split_alloc+0x15a/0x510 [ 471.690668][T10612] split_huge_page_to_list_to_order+0x9a1/0x1480 [ 471.690695][T10612] ? __cfi_split_huge_page_to_list_to_order+0x10/0x10 [ 471.690721][T10612] ? __kasan_check_write+0x18/0x20 [ 471.690743][T10612] ? up_read+0x26/0x1c0 [ 471.690876][T10612] shmem_writepage+0x4b0/0x12d0 [ 471.690906][T10612] ? __cfi_shmem_writepage+0x10/0x10 [ 471.690933][T10612] ? __cfi_try_to_unmap_one+0x10/0x10 [ 471.690959][T10612] ? __cfi_folio_not_mapped+0x10/0x10 [ 471.690985][T10612] ? __cfi_folio_clear_dirty_for_io+0x10/0x10 [ 471.691067][T10612] shrink_folio_list+0x2a5e/0x4d50 [ 471.691125][T10612] ? reclaim_clean_pages_from_list+0x750/0x750 [ 471.691153][T10612] ? sched_clock_cpu+0x75/0x400 [ 471.691199][T10612] ? cgroup_rstat_updated+0x144/0x800 [ 471.691268][T10612] ? is_bpf_text_address+0x17b/0x1a0 [ 471.691303][T10612] ? __cfi___kasan_check_read+0x10/0x10 [ 471.691325][T10612] ? zone_page_state_add+0x43/0x90 [ 471.691358][T10612] ? __mod_zone_page_state+0x93/0xc0 [ 471.691385][T10612] __reclaim_pages+0x38f/0x710 [ 471.691413][T10612] ? __cfi___reclaim_pages+0x10/0x10 [ 471.691446][T10612] ? __cfi_folio_isolate_lru+0x10/0x10 [ 471.691474][T10612] ? __kasan_check_read+0x15/0x20 [ 471.691497][T10612] madvise_cold_or_pageout_pte_range+0x1261/0x1980 [ 471.691522][T10612] ? call_rcu_nocb+0x694/0xc60 [ 471.691555][T10612] ? swake_up_one_online_ipi+0x30/0x30 [ 471.691586][T10612] ? __cfi_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 471.691614][T10612] walk_pgd_range+0xcf6/0x1c20 [ 471.691649][T10612] ? __kasan_check_write+0x18/0x20 [ 471.691672][T10612] ? walk_page_range_novma+0x2a0/0x2a0 [ 471.691704][T10612] ? find_vma+0xd3/0x120 [ 471.691726][T10612] ? __cfi_find_vma+0x10/0x10 [ 471.691747][T10612] ? avc_has_perm_noaudit+0x289/0x360 [ 471.691776][T10612] walk_page_range_mm+0x5fa/0x830 [ 471.691809][T10612] ? __cfi_walk_page_range_mm+0x10/0x10 [ 471.691843][T10612] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 471.691871][T10612] ? selinux_file_open+0x46c/0x630 [ 471.691894][T10612] walk_page_range+0x76/0x90 [ 471.691924][T10612] madvise_vma_behavior+0x21b7/0x2df0 [ 471.691960][T10612] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 471.691995][T10612] ? is_bpf_text_address+0x17b/0x1a0 [ 471.692027][T10612] ? kernel_text_address+0xa9/0xe0 [ 471.692057][T10612] ? __kernel_text_address+0x11/0x40 [ 471.692087][T10612] ? unwind_get_return_address+0x51/0x90 [ 471.692117][T10612] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 471.692145][T10612] ? arch_stack_walk+0x10a/0x170 [ 471.692169][T10612] ? _parse_integer_limit+0x195/0x1e0 [ 471.692199][T10612] ? mas_prev+0x5f/0xa0 [ 471.692228][T10612] ? find_vma_prev+0x12a/0x1b0 [ 471.692250][T10612] ? __cfi_find_vma_prev+0x10/0x10 [ 471.692273][T10612] ? __kasan_check_write+0x18/0x20 [ 471.692295][T10612] ? rwsem_read_trylock+0x275/0x5a0 [ 471.692327][T10612] ? downgrade_write+0x470/0x470 [ 471.692366][T10612] ? bpf_lsm_file_permission+0xd/0x20 [ 471.692397][T10612] madvise_walk_vmas+0x3ee/0x700 [ 471.692428][T10612] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 471.692462][T10612] ? down_read+0x7f/0xe0 [ 471.692492][T10612] ? madvise_set_anon_name+0x650/0x650 [ 471.692525][T10612] ? __asan_memset+0x39/0x50 [ 471.692546][T10612] ? blk_start_plug+0x71/0x1c0 [ 471.692608][T10612] do_madvise+0x5e8/0xbb0 [ 471.692640][T10612] ? __cfi_do_madvise+0x10/0x10 [ 471.692674][T10612] ? ksys_write+0x1f3/0x260 [ 471.692697][T10612] ? __cfi_ksys_write+0x10/0x10 [ 471.692721][T10612] __x64_sys_madvise+0xad/0xc0 [ 471.692755][T10612] x64_sys_call+0x20c3/0x2ee0 [ 471.692776][T10612] do_syscall_64+0x57/0xf0 [ 471.692798][T10612] ? clear_bhb_loop+0x50/0xa0 [ 471.692825][T10612] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 471.692854][T10612] RIP: 0033:0x7fed6c19de59 [ 471.692875][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.692894][T10612] RSP: 002b:00007fed6abe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 471.692918][T10612] RAX: ffffffffffffffda RBX: 00007fed6c425fa0 RCX: 00007fed6c19de59 [ 471.692934][T10612] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 471.692950][T10612] RBP: 00007fed6abe3090 R08: 0000000000000000 R09: 0000000000000000 [ 471.692964][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.692978][T10612] R13: 00007fed6c426038 R14: 00007fed6c425fa0 R15: 00007ffc012d2dd8 [ 471.692997][T10612] [ 475.029526][ T36] kauditd_printk_skb: 1455 callbacks suppressed [ 475.029553][ T36] audit: type=1400 audit(1866815740.031:53586): avc: denied { execmem } for pid=10730 comm="syz.8.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 475.055424][ T36] audit: type=1400 audit(1866815740.031:53587): avc: denied { create } for pid=10730 comm="syz.8.3729" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 475.218165][ T36] audit: type=1400 audit(1866815740.221:53588): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 475.259423][ T36] audit: type=1400 audit(1866815740.261:53589): avc: denied { bpf } for pid=10734 comm="syz.6.3731" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 475.289113][ T36] audit: type=1400 audit(1866815740.291:53590): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 475.324879][ T36] audit: type=1400 audit(1866815740.321:53591): avc: denied { create } for pid=10737 comm="syz.6.3732" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 475.545590][ T36] audit: type=1400 audit(1866815740.541:53592): avc: denied { read write } for pid=10737 comm="syz.6.3732" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 475.612822][ T36] audit: type=1400 audit(1866815740.611:53593): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 475.656620][ T36] audit: type=1400 audit(1866815740.651:53594): avc: denied { read } for pid=10739 comm="syz.0.3733" dev="nsfs" ino=4026532340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 475.685085][ T36] audit: type=1400 audit(1866815740.651:53595): avc: denied { create } for pid=10739 comm="syz.0.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 475.730782][T10744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10744 comm=syz.0.3735 [ 475.774809][T10748] netlink: 'syz.0.3737': attribute type 63 has an invalid length. [ 475.782716][T10748] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3737'. [ 475.791698][T10748] gretap0: entered allmulticast mode [ 475.797295][T10748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 476.654698][T10783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.662005][T10783] IPv6: NLM_F_CREATE should be set when creating new route [ 476.669347][T10783] IPv6: NLM_F_CREATE should be set when creating new route [ 478.667469][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3777'. [ 478.763138][ T626] Bluetooth: hci0: Frame reassembly failed (-84) [ 478.791999][T10851] netlink: 'syz.7.3781': attribute type 1 has an invalid length. [ 480.148490][ T36] kauditd_printk_skb: 168 callbacks suppressed [ 480.148511][ T36] audit: type=1400 audit(1866815745.151:53764): avc: denied { execmem } for pid=10883 comm="syz.8.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 480.174253][ T36] audit: type=1400 audit(1866815745.151:53765): avc: denied { create } for pid=10883 comm="syz.8.3795" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 480.224420][T10886] netlink: 'syz.8.3796': attribute type 4 has an invalid length. [ 480.257963][ T36] audit: type=1400 audit(1866815745.261:53766): avc: denied { create } for pid=10888 comm="syz.8.3797" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 480.288758][ T36] audit: type=1400 audit(1866815745.291:53767): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.324900][ T36] audit: type=1400 audit(1866815745.321:53768): avc: denied { read write } for pid=10890 comm="syz.7.3798" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 480.418916][ T36] audit: type=1400 audit(1866815745.421:53769): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.452080][ T36] audit: type=1400 audit(1866815745.451:53770): avc: denied { read } for pid=10892 comm="syz.0.3799" dev="nsfs" ino=4026532340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 480.480595][ T36] audit: type=1400 audit(1866815745.481:53771): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.526831][ T36] audit: type=1400 audit(1866815745.521:53772): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.558942][ T36] audit: type=1400 audit(1866815745.561:53773): avc: denied { create } for pid=10896 comm="syz.0.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 480.807169][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 480.807190][ T5191] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 480.897681][T10910] syzkaller1: entered promiscuous mode [ 480.904587][T10910] syzkaller1: entered allmulticast mode [ 482.486538][T10981] netlink: 'syz.6.3837': attribute type 16 has an invalid length. [ 482.494530][T10981] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3837'. [ 483.513780][ T626] Bluetooth: hci0: Frame reassembly failed (-84) [ 484.859796][T11090] syzkaller1: entered promiscuous mode [ 484.865326][T11090] syzkaller1: entered allmulticast mode [ 485.245773][ T36] kauditd_printk_skb: 224 callbacks suppressed [ 485.245792][ T36] audit: type=1400 audit(1866815750.241:53998): avc: denied { create } for pid=11105 comm="syz.8.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 485.303166][ T36] audit: type=1400 audit(1866815750.301:53999): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.337616][ T36] audit: type=1400 audit(1866815750.341:54000): avc: denied { read } for pid=11109 comm="syz.6.3894" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 485.359216][ T36] audit: type=1400 audit(1866815750.341:54001): avc: denied { read } for pid=11109 comm="syz.6.3894" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 485.382059][ T36] audit: type=1400 audit(1866815750.341:54002): avc: denied { read write } for pid=11109 comm="syz.6.3894" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 485.406125][ T36] audit: type=1400 audit(1866815750.391:54003): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.455023][ T36] audit: type=1400 audit(1866815750.451:54004): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.487227][ T36] audit: type=1400 audit(1866815750.491:54005): avc: denied { read } for pid=11113 comm="syz.6.3896" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 485.516176][ T36] audit: type=1400 audit(1866815750.511:54006): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.541265][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 485.547257][ T5191] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 485.583869][ T36] audit: type=1400 audit(1866815750.581:54007): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 486.153054][T11155] netlink: 'syz.7.3910': attribute type 4 has an invalid length. [ 488.746203][T11263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11263 comm=syz.6.3959 [ 488.796273][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 488.845344][T11266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3961'. [ 488.855345][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.865273][T11266] bridge_slave_0 (unregistering): left allmulticast mode [ 488.872680][T11266] bridge_slave_0 (unregistering): left promiscuous mode [ 488.881529][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.034623][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3966'. [ 489.791942][T11325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11325 comm=syz.7.3985 [ 489.889260][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3987'. [ 490.138459][T11342] FAULT_INJECTION: forcing a failure. [ 490.138459][T11342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.151609][T11342] CPU: 0 UID: 0 PID: 11342 Comm: syz.7.3992 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 490.151650][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.151665][T11342] Call Trace: [ 490.151671][T11342] [ 490.151679][T11342] __dump_stack+0x21/0x30 [ 490.151707][T11342] dump_stack_lvl+0x140/0x1c0 [ 490.151730][T11342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 490.151753][T11342] ? check_stack_object+0x138/0x150 [ 490.151771][T11342] dump_stack+0x19/0x20 [ 490.151793][T11342] should_fail_ex+0x3c2/0x510 [ 490.151811][T11342] should_fail+0xf/0x20 [ 490.151827][T11342] should_fail_usercopy+0x1e/0x30 [ 490.151847][T11342] _copy_to_user+0x24/0xa0 [ 490.151869][T11342] simple_read_from_buffer+0xed/0x160 [ 490.151891][T11342] proc_fail_nth_read+0x1aa/0x220 [ 490.151915][T11342] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 490.151937][T11342] ? bpf_lsm_file_permission+0xd/0x20 [ 490.151958][T11342] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 490.151979][T11342] vfs_read+0x28b/0xc70 [ 490.151996][T11342] ? __cfi_vfs_read+0x10/0x10 [ 490.152010][T11342] ? __kasan_check_write+0x18/0x20 [ 490.152026][T11342] ? mutex_lock+0x97/0x1d0 [ 490.152052][T11342] ? __cfi_mutex_lock+0x10/0x10 [ 490.152074][T11342] ksys_read+0x145/0x260 [ 490.152090][T11342] ? __cfi_ksys_read+0x10/0x10 [ 490.152105][T11342] ? fdget+0x188/0x1e0 [ 490.152125][T11342] ? __kasan_check_read+0x15/0x20 [ 490.152140][T11342] __x64_sys_read+0x7f/0x90 [ 490.152156][T11342] x64_sys_call+0x2638/0x2ee0 [ 490.152171][T11342] do_syscall_64+0x57/0xf0 [ 490.152187][T11342] ? clear_bhb_loop+0x50/0xa0 [ 490.152207][T11342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 490.152230][T11342] RIP: 0033:0x7f939fd5e68e [ 490.152244][T11342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.152258][T11342] RSP: 002b:00007f939e7e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.152276][T11342] RAX: ffffffffffffffda RBX: 00007f939e7e36c0 RCX: 00007f939fd5e68e [ 490.152289][T11342] RDX: 000000000000000f RSI: 00007f939e7e30a0 RDI: 0000000000000003 [ 490.152299][T11342] RBP: 00007f939e7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 490.152310][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.152320][T11342] R13: 00007f93a0026038 R14: 00007f93a0025fa0 R15: 00007fff56c436a8 [ 490.152335][T11342] [ 490.381542][T11345] netlink: 'syz.0.3993': attribute type 16 has an invalid length. [ 490.403007][T11345] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3993'. [ 490.437092][ T36] kauditd_printk_skb: 264 callbacks suppressed [ 490.437114][ T36] audit: type=1400 audit(1866815755.431:54272): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 490.471306][ T36] audit: type=1400 audit(1866815755.471:54273): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 490.525951][ T36] audit: type=1400 audit(1866815755.511:54274): avc: denied { append } for pid=11348 comm="syz.7.3994" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 490.549901][ T36] audit: type=1400 audit(1866815755.521:54275): avc: denied { write } for pid=11348 comm="syz.7.3994" name="anycast6" dev="proc" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 490.580452][ T36] audit: type=1400 audit(1866815755.521:54276): avc: denied { mounton } for pid=11348 comm="syz.7.3994" path="/353/file1/file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 490.603875][ T36] audit: type=1400 audit(1866815755.521:54277): avc: denied { mounton } for pid=11348 comm="syz.7.3994" path="/353/bus" dev="tmpfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 490.627248][ T36] audit: type=1400 audit(1866815755.521:54278): avc: denied { mounton } for pid=11348 comm="syz.7.3994" path="/353/file1/file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 490.650655][ T36] audit: type=1400 audit(1866815755.521:54279): avc: denied { mounton } for pid=11348 comm="syz.7.3994" path="/353/bus" dev="tmpfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 490.673519][ T36] audit: type=1400 audit(1866815755.661:54280): avc: denied { create } for pid=11349 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 490.678479][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'. [ 490.700668][ T36] audit: type=1400 audit(1866815755.701:54281): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 491.190626][T11392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1553 sclass=netlink_route_socket pid=11392 comm=syz.6.4013 [ 491.366849][T11396] FAULT_INJECTION: forcing a failure. [ 491.366849][T11396] name failslab, interval 1, probability 0, space 0, times 0 [ 491.379582][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.6.4015 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 491.379618][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.379634][T11396] Call Trace: [ 491.379644][T11396] [ 491.379653][T11396] __dump_stack+0x21/0x30 [ 491.379689][T11396] dump_stack_lvl+0x140/0x1c0 [ 491.379719][T11396] ? __cfi_dump_stack_lvl+0x10/0x10 [ 491.379753][T11396] dump_stack+0x19/0x20 [ 491.379774][T11396] should_fail_ex+0x3c2/0x510 [ 491.379793][T11396] should_failslab+0xac/0x100 [ 491.379814][T11396] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 491.379831][T11396] ? xas_split_alloc+0x15a/0x510 [ 491.379851][T11396] xas_split_alloc+0x15a/0x510 [ 491.379876][T11396] split_huge_page_to_list_to_order+0x9a1/0x1480 [ 491.379896][T11396] ? __cfi_split_huge_page_to_list_to_order+0x10/0x10 [ 491.379914][T11396] ? __kasan_check_write+0x18/0x20 [ 491.379929][T11396] ? up_read+0x26/0x1c0 [ 491.379954][T11396] shmem_writepage+0x4b0/0x12d0 [ 491.379975][T11396] ? __cfi_shmem_writepage+0x10/0x10 [ 491.379994][T11396] ? __cfi_try_to_unmap_one+0x10/0x10 [ 491.380013][T11396] ? __cfi_folio_not_mapped+0x10/0x10 [ 491.380031][T11396] ? __cfi_folio_clear_dirty_for_io+0x10/0x10 [ 491.380059][T11396] shrink_folio_list+0x2a5e/0x4d50 [ 491.380090][T11396] ? reclaim_clean_pages_from_list+0x750/0x750 [ 491.380112][T11396] ? sched_clock_cpu+0x75/0x400 [ 491.380145][T11396] ? cgroup_rstat_updated+0x144/0x800 [ 491.380165][T11396] ? is_bpf_text_address+0x17b/0x1a0 [ 491.380190][T11396] ? __cfi___kasan_check_read+0x10/0x10 [ 491.380206][T11396] ? zone_page_state_add+0x43/0x90 [ 491.380224][T11396] ? __mod_zone_page_state+0x93/0xc0 [ 491.380243][T11396] __reclaim_pages+0x38f/0x710 [ 491.380263][T11396] ? __cfi___reclaim_pages+0x10/0x10 [ 491.380287][T11396] ? __cfi_folio_isolate_lru+0x10/0x10 [ 491.380307][T11396] ? __kasan_check_read+0x15/0x20 [ 491.380324][T11396] madvise_cold_or_pageout_pte_range+0x1261/0x1980 [ 491.380344][T11396] ? call_rcu_nocb+0x694/0xc60 [ 491.380369][T11396] ? swake_up_one_online_ipi+0x30/0x30 [ 491.380392][T11396] ? __cfi_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 491.380412][T11396] walk_pgd_range+0xcf6/0x1c20 [ 491.380438][T11396] ? __kasan_check_write+0x18/0x20 [ 491.380454][T11396] ? walk_page_range_novma+0x2a0/0x2a0 [ 491.380478][T11396] ? find_vma+0xd3/0x120 [ 491.380493][T11396] ? __cfi_find_vma+0x10/0x10 [ 491.380508][T11396] ? avc_has_perm_noaudit+0x289/0x360 [ 491.380527][T11396] walk_page_range_mm+0x5fa/0x830 [ 491.380556][T11396] ? __cfi_walk_page_range_mm+0x10/0x10 [ 491.380581][T11396] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 491.380601][T11396] ? selinux_file_open+0x46c/0x630 [ 491.380617][T11396] walk_page_range+0x76/0x90 [ 491.380639][T11396] madvise_vma_behavior+0x21b7/0x2df0 [ 491.380665][T11396] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 491.380689][T11396] ? is_bpf_text_address+0x17b/0x1a0 [ 491.380713][T11396] ? kernel_text_address+0xa9/0xe0 [ 491.380734][T11396] ? __kernel_text_address+0x11/0x40 [ 491.380755][T11396] ? unwind_get_return_address+0x51/0x90 [ 491.380775][T11396] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 491.380794][T11396] ? arch_stack_walk+0x10a/0x170 [ 491.380810][T11396] ? _parse_integer_limit+0x195/0x1e0 [ 491.380830][T11396] ? mas_prev+0x5f/0xa0 [ 491.380851][T11396] ? find_vma_prev+0x12a/0x1b0 [ 491.380867][T11396] ? __cfi_find_vma_prev+0x10/0x10 [ 491.380883][T11396] ? __kasan_check_write+0x18/0x20 [ 491.380897][T11396] ? rwsem_read_trylock+0x275/0x5a0 [ 491.380920][T11396] ? downgrade_write+0x470/0x470 [ 491.380943][T11396] ? bpf_lsm_file_permission+0xd/0x20 [ 491.380963][T11396] madvise_walk_vmas+0x3ee/0x700 [ 491.380987][T11396] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 491.381011][T11396] ? down_read+0x7f/0xe0 [ 491.381032][T11396] ? madvise_set_anon_name+0x650/0x650 [ 491.381055][T11396] ? __asan_memset+0x39/0x50 [ 491.381070][T11396] ? blk_start_plug+0x71/0x1c0 [ 491.381094][T11396] do_madvise+0x5e8/0xbb0 [ 491.381118][T11396] ? __cfi_do_madvise+0x10/0x10 [ 491.381142][T11396] ? ksys_write+0x1f3/0x260 [ 491.381159][T11396] ? __cfi_ksys_write+0x10/0x10 [ 491.381177][T11396] __x64_sys_madvise+0xad/0xc0 [ 491.381202][T11396] x64_sys_call+0x20c3/0x2ee0 [ 491.381217][T11396] do_syscall_64+0x57/0xf0 [ 491.381233][T11396] ? clear_bhb_loop+0x50/0xa0 [ 491.381254][T11396] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 491.381273][T11396] RIP: 0033:0x7fed6c19de59 [ 491.381288][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.381302][T11396] RSP: 002b:00007fed6abe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 491.381320][T11396] RAX: ffffffffffffffda RBX: 00007fed6c425fa0 RCX: 00007fed6c19de59 [ 491.381332][T11396] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 491.381344][T11396] RBP: 00007fed6abe3090 R08: 0000000000000000 R09: 0000000000000000 [ 491.381355][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.381366][T11396] R13: 00007fed6c426038 R14: 00007fed6c425fa0 R15: 00007ffc012d2dd8 [ 491.381380][T11396] [ 491.946209][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4020'. [ 492.201189][ T11] usb 9-1: USB disconnect, device number 3 [ 496.315960][ T36] kauditd_printk_skb: 152 callbacks suppressed [ 496.315980][ T36] audit: type=1400 audit(1866815761.311:54434): avc: denied { execmem } for pid=11473 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 496.352297][ T36] audit: type=1400 audit(1866815761.351:54435): avc: denied { read } for pid=11475 comm="syz.6.4047" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 496.378769][ T36] audit: type=1400 audit(1866815761.361:54436): avc: denied { read } for pid=11476 comm="syz.7.4046" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 496.400332][ T36] audit: type=1400 audit(1866815761.361:54437): avc: denied { read } for pid=11475 comm="syz.6.4047" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 496.428059][ T36] audit: type=1400 audit(1866815761.371:54438): avc: denied { name_bind } for pid=11475 comm="syz.6.4047" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 496.450799][ T36] audit: type=1400 audit(1866815761.371:54439): avc: denied { read write } for pid=11475 comm="syz.6.4047" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 496.475413][ T36] audit: type=1400 audit(1866815761.371:54440): avc: denied { read } for pid=11474 comm="syz.0.4045" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 496.499729][ T36] audit: type=1400 audit(1866815761.371:54441): avc: denied { create } for pid=11474 comm="syz.0.4045" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 496.521605][ T36] audit: type=1400 audit(1866815761.381:54442): avc: denied { create } for pid=11474 comm="syz.0.4045" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 496.543325][ T36] audit: type=1400 audit(1866815761.381:54443): avc: denied { read } for pid=11476 comm="syz.7.4046" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 497.394864][T11487] syzkaller1: entered promiscuous mode [ 497.400507][T11487] syzkaller1: entered allmulticast mode [ 501.549167][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 501.549187][ T36] audit: type=1400 audit(1866815766.551:54492): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 501.591731][ T36] audit: type=1400 audit(1866815766.591:54493): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 501.849217][ T36] audit: type=1400 audit(1866815766.851:54494): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 502.451845][ T36] audit: type=1400 audit(1866815767.441:54495): avc: denied { execmem } for pid=11512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 502.497140][ T36] audit: type=1400 audit(1866815767.471:54496): avc: denied { create } for pid=11513 comm="syz.6.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 502.519983][ T36] audit: type=1400 audit(1866815767.471:54497): avc: denied { create } for pid=11513 comm="syz.6.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 502.540772][ T36] audit: type=1400 audit(1866815767.481:54498): avc: denied { nlmsg_read } for pid=11515 comm="syz.0.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=0 [ 502.561579][ T36] audit: type=1400 audit(1866815767.481:54499): avc: denied { create } for pid=11514 comm="syz.7.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 502.581342][ T36] audit: type=1400 audit(1866815767.481:54500): avc: denied { read } for pid=11514 comm="syz.7.4061" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 502.604275][ T36] audit: type=1400 audit(1866815767.481:54501): avc: denied { read } for pid=11514 comm="syz.7.4061" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 507.342986][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 507.343008][ T36] audit: type=1400 audit(1866815772.331:54592): avc: denied { execmem } for pid=11538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 507.377903][ T36] audit: type=1400 audit(1866815772.361:54593): avc: denied { mmap_zero } for pid=11539 comm="syz.7.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=0 [ 507.404858][ T36] audit: type=1400 audit(1866815772.371:54594): avc: denied { create } for pid=11539 comm="syz.7.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 507.426656][ T36] audit: type=1400 audit(1866815772.371:54595): avc: denied { write } for pid=11539 comm="syz.7.4070" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 507.450464][ T36] audit: type=1400 audit(1866815772.371:54596): avc: denied { read } for pid=11540 comm="syz.6.4071" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 507.472654][ T36] audit: type=1400 audit(1866815772.381:54597): avc: denied { read } for pid=11540 comm="syz.6.4071" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 507.494073][ T36] audit: type=1400 audit(1866815772.381:54598): avc: denied { read write } for pid=11541 comm="syz.0.4069" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 507.517781][ T36] audit: type=1400 audit(1866815772.401:54599): avc: denied { read write } for pid=6753 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 507.542021][ T36] audit: type=1400 audit(1866815772.431:54600): avc: denied { read write } for pid=6695 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 507.936870][ T36] audit: type=1400 audit(1866815772.931:54601): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 511.179514][T11557] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.138234][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 513.138253][ T36] audit: type=1400 audit(1866815778.141:54628): avc: denied { execmem } for pid=11559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 513.210900][ T36] audit: type=1400 audit(1866815778.171:54629): avc: denied { read } for pid=11560 comm="syz.0.4078" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 513.248875][ T36] audit: type=1400 audit(1866815778.171:54630): avc: denied { read write } for pid=11561 comm="syz.7.4079" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 513.274542][ T36] audit: type=1400 audit(1866815778.171:54631): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2526]" dev="pipefs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 513.317090][ T36] audit: type=1400 audit(1866815778.171:54632): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2526]" dev="pipefs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 513.343003][ T36] audit: type=1400 audit(1866815778.181:54633): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2526]" dev="pipefs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 513.366395][ T36] audit: type=1400 audit(1866815778.181:54634): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2526]" dev="pipefs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 513.389644][ T36] audit: type=1400 audit(1866815778.181:54635): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2526]" dev="pipefs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 513.412955][ T36] audit: type=1400 audit(1866815778.191:54636): avc: denied { read write } for pid=8219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 513.450127][ T36] audit: type=1400 audit(1866815778.201:54637): avc: denied { read write } for pid=11562 comm="syz.6.4080" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 513.750481][ T578] bridge_slave_1: left allmulticast mode [ 513.756217][ T578] bridge_slave_1: left promiscuous mode [ 513.762313][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.770360][ T578] bridge_slave_1: left allmulticast mode [ 513.776015][ T578] bridge_slave_1: left promiscuous mode [ 513.781937][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.789730][ T578] bridge_slave_0: left allmulticast mode [ 513.795432][ T578] bridge_slave_0: left promiscuous mode [ 513.801205][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.931338][ T578] veth1_macvtap: left promiscuous mode [ 513.937199][ T578] veth1_macvtap: left promiscuous mode [ 513.942713][ T578] veth0_vlan: left promiscuous mode