last executing test programs: 4m14.620553864s ago: executing program 0 (id=288): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000040)={@align=0x83, {0x40, 0x0, 0x0, 0x6}}, 0x7, 0x0, 0x0}, {[0x6, 0x0, 0xfffffffb, 0xfff]}, 0x2, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m14.586339435s ago: executing program 0 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x80000003) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 4m14.557982515s ago: executing program 0 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m14.420971358s ago: executing program 0 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 4m14.386491249s ago: executing program 0 (id=293): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 4m14.260779702s ago: executing program 0 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.165200644s ago: executing program 32 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.904396879s ago: executing program 2 (id=839): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000540)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3m32.87354378s ago: executing program 2 (id=843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x0) 3m32.834263281s ago: executing program 2 (id=846): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1e99, 0x0, 0x7ffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0xa46, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/423]}) 3m32.706866813s ago: executing program 2 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 3m32.661864824s ago: executing program 2 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x80000003) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 3m32.523951507s ago: executing program 2 (id=852): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f00000001c0)) 3m32.477152238s ago: executing program 33 (id=852): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f00000001c0)) 2m58.433954713s ago: executing program 1 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xe, 0x5, 0x1}) 2m58.325170366s ago: executing program 1 (id=1483): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 2m58.252074287s ago: executing program 1 (id=1486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x40000080}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x1, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m58.220696348s ago: executing program 1 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2002000, 0x0) 2m58.206766458s ago: executing program 1 (id=1492): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 2m58.13465135s ago: executing program 1 (id=1494): socket$packet(0x11, 0x3, 0x300) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$netlink(0x10, 0x3, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2m58.071690301s ago: executing program 34 (id=1494): socket$packet(0x11, 0x3, 0x300) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$netlink(0x10, 0x3, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m36.221119696s ago: executing program 6 (id=2548): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x200001, 0x0, 0x0, 0x400}}) 1m36.105185599s ago: executing program 6 (id=2549): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r2, r0, 0x80000) write$P9_RLERRORu(r2, &(0x7f0000000140)={0xd, 0x7, 0x2, {{}, 0x160}}, 0xd) 1m36.03678718s ago: executing program 6 (id=2550): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x18bd, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x800003, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x7, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0x4, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x5, 0x401, 0x6, 0x4, 0xfb, 0x28, 0x8000, 0x5f31, 0xbcf5, 0x3, 0x2, 0x2, 0x6, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0x6, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x1, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x0, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x3112, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x3, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0xfff]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x7, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.941538552s ago: executing program 6 (id=2551): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m35.925948383s ago: executing program 6 (id=2552): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) socket(0x2, 0x5, 0x0) 1m35.635964869s ago: executing program 6 (id=2555): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 1m35.6037402s ago: executing program 35 (id=2555): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 1m14.740180313s ago: executing program 3 (id=2819): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) chown(0x0, 0x0, 0xee01) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 1m14.688554404s ago: executing program 3 (id=2820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x6, r3, 0x92}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m14.647131265s ago: executing program 3 (id=2821): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 1m14.620679325s ago: executing program 3 (id=2823): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20000, 0x0) 1m14.560559047s ago: executing program 3 (id=2824): r0 = eventfd2(0x7, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x540}, {r1, 0x4240}], 0x2, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0xa]}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1m14.299984042s ago: executing program 3 (id=2826): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m14.296550412s ago: executing program 36 (id=2826): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.791868218s ago: executing program 7 (id=3935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000080)=0x8}) 2.789046258s ago: executing program 7 (id=3936): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r0], 0x0) 2.348226077s ago: executing program 4 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000040)) 2.321206749s ago: executing program 4 (id=3943): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8) flock(r0, 0x1) 2.321123098s ago: executing program 4 (id=3944): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = dup2(r0, r0) fcntl$setlease(r1, 0x400, 0x1) 2.23585415s ago: executing program 4 (id=3947): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000000c0)='.\x02\x00', 0x2) 2.23578174s ago: executing program 7 (id=3948): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"a2e3ada14fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38dfcd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac4850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778ef85ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba551eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ccef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e4b15f929b47f741f0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bb9935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf9f394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa37ef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00", 0x1000}}, 0x1006) syz_usb_connect$uac3(0x2, 0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff0230000904020101010230000905"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.214569431s ago: executing program 4 (id=3950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000280)={[0x9, 0x5, 0x7f, 0x400, 0x0, 0x8328, 0xe, 0x80, 0x4, 0x8, 0x2, 0x1, 0x9, 0xd0c8, 0x7fff, 0x101, 0x5, 0x9, 0xb1, 0x9, 0x0, 0x0, 0x5, 0x1, 0xc, 0xfffffff9, 0x1, 0x4b46, 0x3, 0x8, 0xfff, 0x5, 0x0, 0x10, 0x7ff, 0x9, 0x4, 0x2, 0xc0, 0x5, 0x5, 0x82, 0x3, 0x400, 0xa, 0x2, 0x2, 0x5, 0x6, 0x2, 0x3f11, 0x5, 0x7fffffff, 0x1, 0x2a71883, 0x4, 0x0, 0x3c0, 0x2, 0x2, 0x4, 0xb768, 0xff, 0x3, 0xf, 0x3, 0x9, 0x8, 0x1, 0xfffffffe, 0xffff, 0x7fffffff, 0x7, 0x200, 0x5, 0xc0000000, 0xc6, 0xa5d, 0x80, 0x3, 0x6, 0x8001, 0x5, 0xc79, 0x80000000, 0x3, 0x8000, 0x1, 0x2, 0x3, 0xc, 0x2, 0x101, 0x0, 0x8, 0x10, 0x101, 0x7f, 0x8ec, 0x5, 0x800, 0x5, 0x0, 0x2, 0x4, 0x0, 0x7ff, 0x7, 0x7, 0x57, 0x81, 0x5, 0x1, 0xfffffff7, 0xfffffffd, 0x8c5, 0x8d, 0x6, 0x1, 0x0, 0x4000, 0x7, 0xc, 0x40, 0x7, 0x0, 0x1, 0x1ff, 0x6, 0xd, 0x1, 0x0, 0x1, 0x9, 0x80000, 0x62, 0x200, 0xa66, 0x2, 0xffffff7f, 0xffff, 0x100000, 0xb, 0x6, 0x3, 0x5, 0x5, 0x1, 0x3, 0xffffff81, 0x1f7ad3f3, 0x8, 0x1, 0x8, 0x2, 0xa556, 0x6, 0xfffffff8, 0x8b9, 0xe, 0x74, 0x1, 0x9, 0x0, 0x1, 0x9, 0x7, 0x6, 0x1, 0x6, 0x1000, 0xfffffff9, 0x9, 0x2, 0x7a, 0x6, 0x7, 0x5, 0xffffffff, 0x7, 0x5, 0x7fffffff, 0x1, 0x40, 0x8, 0x8, 0x2, 0x0, 0x8, 0x6, 0x1, 0x1, 0x40e, 0x8, 0x4, 0x2, 0x534f, 0x9, 0x80000001, 0x10000, 0x5, 0x3a, 0x3, 0x5, 0x0, 0xc, 0x3ff, 0x7, 0xffffffff, 0x3, 0x0, 0x6, 0x2, 0x4, 0x7, 0x0, 0x7, 0x7fffffff, 0x7fff, 0x3, 0x5, 0xfffffffd, 0x4, 0xfff, 0x1, 0x3, 0x3, 0x101, 0x662, 0x9, 0x8, 0xa, 0x5, 0x94f6, 0xffffffee, 0xe, 0x2, 0x0, 0x8, 0x9, 0x7, 0x6, 0xb, 0x1, 0x4, 0x2, 0xf5e, 0xe, 0x174000, 0xe90, 0x5eb, 0x1, 0x5, 0x4, 0x4d5, 0x456, 0x8815, 0x10, 0xffffffff, 0x6, 0x4, 0x5, 0x0, 0x0, 0x78a8, 0x6, 0x100, 0x8, 0x800, 0x5, 0x6, 0x4, 0x3, 0x5, 0x65b, 0x0, 0x8, 0x9, 0x9, 0x7, 0xfffffeff, 0x10001, 0x4, 0x130, 0x3, 0x679897, 0x7f, 0x9, 0x1b9, 0x80000000, 0x8, 0xf, 0x200, 0x9, 0x10001, 0x4, 0x7fff, 0x6, 0x4, 0xff, 0x800, 0x4, 0x25, 0x8, 0xffffff08, 0x7, 0x3, 0x4a07, 0x1ff, 0xc, 0x34, 0x1, 0x4, 0x5, 0xf, 0x401, 0xad, 0x2, 0x4, 0x6, 0xff27, 0x1, 0x3, 0x0, 0x5, 0x3, 0x6, 0x0, 0x7, 0xffffffff, 0x9, 0x9, 0x3ff, 0x10, 0xfffffff9, 0x7f, 0x7ff, 0x5, 0xffff, 0xfffffffa, 0x0, 0x9, 0x4, 0xb, 0x3bf, 0x1000, 0x401, 0xf1, 0x9, 0x9, 0x2, 0x9, 0x3aa, 0x400, 0x2352728b, 0x1, 0x0, 0x0, 0x7, 0x80, 0xfffffffa, 0x7, 0x7, 0x38b4, 0x0, 0xd, 0x0, 0xffffff12, 0x4, 0x7, 0xf, 0x8, 0x6, 0xe3, 0xd, 0xffff91cd, 0x8, 0x6, 0x7, 0x200, 0x9, 0x2, 0x9130, 0xffffffff, 0x7, 0x2, 0x7, 0x100, 0x1000, 0x7, 0xfffffffc, 0x4, 0x3, 0x8, 0x1, 0x8, 0x1ff, 0x2, 0xf, 0x9, 0x2, 0x2, 0x80, 0x3957, 0x6, 0xfff, 0x5, 0xde, 0x1, 0x5, 0xfffffffe, 0x5, 0x5, 0xff, 0x101, 0x4, 0x5, 0x5, 0x40, 0xfa9, 0x3ff, 0x7ff, 0x8, 0xc, 0x8, 0x6, 0x10, 0x4aea, 0xffffe1eb, 0xfffffff1, 0xc36, 0x3, 0xffff6436, 0x6, 0x98, 0x81, 0x0, 0x0, 0x4, 0x7, 0x8, 0x5, 0x100, 0x800, 0x5, 0xfffffffd, 0xfffffffc, 0x8001, 0x3, 0x7ff, 0x5, 0x4, 0x7, 0x7fd, 0xae, 0x8, 0x2, 0x616, 0x80000001, 0x4, 0x0, 0x80, 0x1, 0x3, 0xfffffff3, 0x9, 0x2, 0xe62a, 0x2, 0x48a, 0x6, 0x6, 0x0, 0x3, 0x7ff, 0x5, 0xb, 0xdd0, 0xfffffc16, 0x80000001, 0x8, 0x6, 0x7, 0x8, 0x5, 0x7, 0xe5fd, 0x7, 0x200, 0x200, 0xffffca9e, 0x8, 0x2, 0x5, 0x6, 0x3ff, 0x4, 0x27, 0x7ff, 0x7, 0x4, 0x101, 0x7f, 0x62ac, 0x0, 0x5, 0x5, 0x8, 0x0, 0x400, 0x2, 0x2, 0xd541, 0x9, 0x9942, 0x9, 0x2040000, 0x30, 0x80000001, 0x401, 0x4, 0x0, 0xae, 0x3ff, 0x8001, 0x6, 0xef, 0x4, 0x8000, 0xa4, 0x41, 0x1ff, 0x5, 0xd, 0x8, 0x5, 0x3, 0xb7, 0x101, 0x7, 0x0, 0x1000, 0x9, 0x8, 0x800, 0x7f, 0x1, 0xc, 0x1, 0x1, 0x1d82, 0x200, 0x5, 0x1b7, 0xdeb, 0x6, 0x3, 0x9, 0x3, 0x8, 0x80, 0x7f, 0x100, 0x2, 0x3, 0x3, 0x400, 0x7ff, 0xf, 0x8, 0x8, 0xfffffffb, 0x0, 0x5, 0x7fffffff, 0x9, 0x5, 0x9, 0x9, 0x0, 0x5, 0x6, 0x3, 0x0, 0x600, 0x8, 0x6, 0x3, 0xfff, 0x306, 0xb4, 0x10001, 0x1, 0x4, 0x80, 0xeda5, 0x5, 0xfffffffb, 0x101, 0xf, 0x3, 0x4, 0x90, 0x2, 0x8, 0x4, 0x7fff, 0x7f, 0x10001, 0x0, 0x7, 0x7ff, 0x4, 0x6a, 0x9, 0xfffff801, 0x2, 0x71, 0x14c, 0x2dc, 0x1, 0x4, 0x7, 0x65d, 0x1, 0x69d4, 0x9, 0xcc6f, 0xdb7, 0xff, 0x6000000, 0x8, 0x7, 0x2, 0x10001, 0x0, 0x7, 0x5, 0x7, 0x1, 0x2, 0xfffffffe, 0x37b, 0x0, 0x5, 0x7f, 0x80, 0x800, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8, 0xfffffffd, 0x1, 0x988, 0x2, 0x120000, 0x0, 0x6, 0x5, 0xfffffffb, 0x10001, 0xc6e6, 0x1ff, 0xf9e, 0x7f, 0x7, 0xa3d, 0x3, 0x7fffffff, 0x0, 0x6a5, 0x4, 0x1, 0x9, 0x37a5, 0x9, 0x40, 0x9d, 0x43, 0xfffff000, 0x1, 0x44f, 0x7fffffff, 0x4, 0x6, 0xea8, 0x81, 0xdf30, 0x1, 0xe, 0xb5, 0xff, 0x1, 0x36e1, 0x9, 0x81, 0x6, 0xf, 0x4, 0x5, 0x6, 0x1, 0x4, 0x5ef, 0x9, 0xc9, 0xd2, 0x9, 0xe9, 0xb, 0x2, 0x6, 0x400, 0xe6, 0x9, 0x6, 0x40, 0x8, 0x4, 0x6, 0x8, 0x1f, 0x7, 0x8001, 0xda, 0x6, 0x7, 0x9, 0xb2, 0x5, 0x1c99, 0x10f2, 0x8, 0x40, 0x3, 0x7, 0x1, 0x15, 0x45, 0x2, 0xfff, 0x7, 0x1000, 0xfffffffb, 0x7fffffff, 0x7, 0x9, 0x2, 0x7, 0x8, 0x80, 0x100, 0x3, 0x7, 0x8001, 0x7, 0x8, 0x4, 0x6, 0x0, 0x0, 0x9, 0x2, 0x0, 0x5, 0x9, 0x3, 0x6f5, 0x6, 0x6, 0xc, 0x0, 0x1, 0x30, 0x8, 0x6, 0x0, 0x1, 0xb3d4, 0x9, 0xfffff93a, 0x9, 0x6, 0xb0e3, 0x7, 0x9b8, 0x3, 0xc, 0x1, 0x2, 0x1, 0x0, 0x4, 0x66f, 0xc, 0x3, 0x3, 0x100, 0x10000, 0x3, 0x3, 0xf4, 0x5, 0x5, 0x5fbd, 0x4, 0x4, 0x2, 0x9, 0x9, 0x0, 0x86, 0x1, 0x64de, 0x400, 0x9, 0xffffffff, 0x7, 0x4, 0x1, 0x22, 0x80, 0x1, 0xffffffff, 0x7f, 0x5, 0x7, 0x4, 0x7f, 0x1, 0x8d59, 0xce, 0x9, 0x22, 0x1ff, 0x2, 0x3, 0x4, 0x80, 0xd300000, 0x6, 0x8001, 0xfffffff9, 0x8, 0x2, 0x8, 0x40, 0x5, 0xbc7, 0x5a5c, 0xff, 0x3, 0x40000000, 0x8, 0x1, 0x3ff, 0x6, 0x3, 0x6, 0x2, 0x7c8, 0x8, 0x800, 0xfffffff7, 0x7fffffff, 0x5a5, 0x40, 0x9, 0xfffeffff, 0x3, 0x3, 0x5, 0xaf, 0x2, 0x2, 0x1000, 0x2, 0x8, 0x2, 0x5, 0x7, 0x1, 0x9, 0x8, 0x9, 0x6cfa, 0x4, 0x9, 0x1, 0x8, 0xa0a, 0x7, 0xb6, 0x7, 0x3, 0x5, 0xfffffffa, 0x7, 0x3, 0x800, 0x80, 0xffffffff, 0x1ff, 0x0, 0x3, 0x9, 0x87, 0x9, 0x5, 0x9, 0x56, 0xe751, 0x6, 0x0, 0x9, 0xce04, 0x9, 0x5, 0x6, 0x1ff, 0x9, 0x400, 0xffff, 0x10, 0x5, 0x6, 0xbe80, 0x9, 0x8e38, 0xd, 0x5, 0xfffffff8, 0x9, 0x7, 0xf249, 0x1, 0x7, 0x3, 0xd, 0x10001, 0x7, 0x6, 0x8001, 0x92a, 0xad00, 0x80000000, 0x1000, 0x6, 0x0, 0x9, 0x4, 0x6, 0x10000, 0x8, 0x1ff, 0x7, 0x9, 0xd29, 0x6, 0xfff, 0xfb, 0x1dc, 0xfffffffd, 0xa, 0x62, 0x6, 0x1, 0x100, 0x4a5, 0x80000000, 0x6, 0x6ac, 0xf, 0x1, 0x6, 0x3, 0x1, 0x4, 0xfffffffb, 0x7, 0x80000000, 0x2, 0x6, 0x4, 0x80000001, 0xd, 0x7fffffff, 0x1000, 0x1, 0x80, 0x0, 0xe, 0x0, 0x8, 0x5, 0x4, 0x81, 0xd, 0x4, 0x4, 0x7, 0xf, 0x2, 0x1, 0x3, 0x3, 0x4000000, 0xfd3, 0x8, 0xcdf, 0x2, 0x3ff, 0x3, 0x5, 0x6, 0x6, 0x4c, 0xffffffff, 0x5, 0x800, 0x8000]}) 2.045631564s ago: executing program 8 (id=3955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x1, 0x9000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x81}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x9000, 0x1000}) 2.016362385s ago: executing program 8 (id=3956): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000240)=0xff, 0x4) bind$can_raw(r0, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) 1.935952837s ago: executing program 8 (id=3957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.832353239s ago: executing program 4 (id=3958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) 1.742518811s ago: executing program 37 (id=3958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) 1.712840912s ago: executing program 7 (id=3960): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x206) 1.708977442s ago: executing program 5 (id=3961): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) rmdir(&(0x7f0000000000)='./file0\x00') 1.677956332s ago: executing program 5 (id=3962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0x80000000, 0x6, 0x5, 0x4, 0xff}, {0x0, 0xcd, 0x0, 0x9, 0x9}]}) 1.583885735s ago: executing program 5 (id=3963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2000000000000006) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 1.202180403s ago: executing program 5 (id=3964): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r1, &(0x7f00000001c0)=0x13c, 0x12) 1.201120063s ago: executing program 8 (id=3965): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x50) 679.687865ms ago: executing program 7 (id=3966): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="cfc850de", 0x4, 0x3b00, 0x0, 0x0) 678.211645ms ago: executing program 5 (id=3973): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x3, 0x0, 0x80c9}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 653.702765ms ago: executing program 8 (id=3967): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$uac3(0x2, 0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff0230000904020101010230000905"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 42.656499ms ago: executing program 7 (id=3968): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 42.544069ms ago: executing program 5 (id=3969): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x501, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 0s ago: executing program 8 (id=3970): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000340)='\x8d%\xf8\x8f\xc1\n\x02\b\x00\x00\x1f\xd9#\xbc*L\x06\x1b\xfa\xa6\x06\x02\xd3\xd4FT9\xcb\xa7g\x0e\x9cx\xdfb\x1f)\x16D\b^\xe1]\x81\x80\x16\"mM3l\x89\xcb[\xea>O\x95\x18\x7f\'\xdb\xf5\xcf\xa3\x1f\xe4\x10\xedv/\xb2\x9dH_$\xa4\xbc@\x90\xc0\x86\xef\xce\xb3\x92\xed\xdf\xb4Q\xa4\xe4\xca\xe1\x03\xfc\x8e\xcc`^`$\xf3f\xae2\xf1\xae7N\xffG\vw\xcac5\x10\x1aw\x00\xc4\xed\x8f]%\x9eD\xd1{\xd4\xd6\x00A\xedx\xae\x00\xcej\xe8Q\xc3\xe9\xa6\xec\xbe\x00H8\xe3\xf6\xca\x04\xa1\b\x89\xdf\xdf\xabe\xca\'%#%\xc4:\xb9U\r\x84s\xb7\xb2\xa7\xe1,\xdaH\xe8') close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6-1: new high-speed USB device number 19 using dummy_hcd [ 176.204100][ T6312] bridge0: port 3(dummy0) entered blocking state [ 176.210561][ T6312] bridge0: port 3(dummy0) entered disabled state [ 176.217331][ T6312] dummy0: entered allmulticast mode [ 176.223068][ T6312] dummy0: entered promiscuous mode [ 176.228442][ T6312] bridge0: port 3(dummy0) entered blocking state [ 176.230696][ T5399] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 176.234816][ T6312] bridge0: port 3(dummy0) entered forwarding state [ 176.253928][ T5399] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 176.253934][ T6312] dummy0: left allmulticast mode [ 176.268048][ T6312] dummy0: left promiscuous mode [ 176.273000][ T6312] bridge0: port 3(dummy0) entered disabled state [ 176.295162][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 176.302030][ T311] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 176.311004][ T311] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 176.320124][ T311] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 176.330775][ T311] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 176.341796][ T311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.351319][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.360016][ T311] usb 6-1: Product: syz [ 176.364443][ T311] usb 6-1: Manufacturer: syz [ 176.369417][ T311] usb 6-1: SerialNumber: syz [ 176.582225][ T311] usb 6-1: 0:2 : does not exist [ 176.594328][ T311] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 176.607994][ T311] usb 6-1: USB disconnect, device number 19 [ 176.621894][ T730] udevd[730]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.257151][ T5399] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 177.270393][ T5399] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 177.280169][ T5399] usb 4-1: USB disconnect, device number 34 [ 177.435222][ T311] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 177.596432][ T311] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 177.604561][ T311] usb 6-1: config 0 has no interface number 0 [ 177.611535][ T311] usb 6-1: config 0 interface 41 has no altsetting 0 [ 177.619805][ T311] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 177.628980][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.638011][ T311] usb 6-1: Product: syz [ 177.642222][ T311] usb 6-1: Manufacturer: syz [ 177.646900][ T311] usb 6-1: SerialNumber: syz [ 177.654232][ T311] usb 6-1: config 0 descriptor?? [ 178.174972][ T6385] kvm: pic: non byte write [ 178.265040][ T311] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 178.281529][ T311] usb 6-1: USB disconnect, device number 20 [ 178.327323][ T6392] syzkaller1: entered promiscuous mode [ 178.332953][ T6392] syzkaller1: entered allmulticast mode [ 178.437457][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 178.437488][ T36] audit: type=1400 audit(1784673839.640:478): avc: denied { accept } for pid=6398 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.464209][ T36] audit: type=1400 audit(1784673839.660:479): avc: denied { read } for pid=6398 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.587456][ T6401] netlink: 'syz.4.2265': attribute type 27 has an invalid length. [ 178.644928][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.652312][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.021824][ T989] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.031213][ T1418] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 179.033787][ T36] audit: type=1400 audit(1784673840.230:480): avc: denied { create } for pid=6418 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.185199][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 179.337331][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.348462][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.358340][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.371720][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.381030][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.394612][ T31] usb 4-1: config 0 descriptor?? [ 179.600113][ T36] audit: type=1400 audit(1784673840.800:481): avc: denied { ioctl } for pid=6426 comm="syz.4.2274" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49548 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.835013][ T31] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 179.845319][ T31] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.105892][ T31] usb 4-1: USB disconnect, device number 35 [ 180.833770][ T36] audit: type=1400 audit(1784673842.030:482): avc: denied { watch watch_reads } for pid=6449 comm="syz.6.2282" path="/227" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.866307][ T36] audit: type=1400 audit(1784673842.070:483): avc: denied { read } for pid=6451 comm="syz.3.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.095221][ T1418] Bluetooth: hci0: command 0x1003 tx timeout [ 181.101452][ T1417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.762105][ T36] audit: type=1400 audit(1784673842.960:484): avc: denied { unlink } for pid=6460 comm="syz.3.2286" name="#6d" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 181.814914][ T36] audit: type=1400 audit(1784673843.000:485): avc: denied { remount } for pid=6460 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 182.155177][ T661] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 182.316346][ T661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.327380][ T661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.337229][ T661] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 182.346366][ T661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.355153][ T661] usb 7-1: config 0 descriptor?? [ 182.949882][ T36] audit: type=1400 audit(1784673844.150:486): avc: denied { setopt } for pid=6500 comm="syz.3.2302" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.573798][ T661] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0028/input/input35 [ 183.588699][ T661] uclogic 0003:256C:006D.0028: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 183.799376][ T36] audit: type=1400 audit(1784673845.000:487): avc: denied { cmd } for pid=6531 comm="syz.3.2314" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 183.805869][ T311] usb 7-1: USB disconnect, device number 12 [ 183.830043][ T36] audit: type=1400 audit(1784673845.030:488): avc: denied { map } for pid=6531 comm="syz.3.2314" path="/dev/ublkc3" dev="devtmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.874882][ T6536] syzkaller1: entered promiscuous mode [ 183.880493][ T6536] syzkaller1: entered allmulticast mode [ 184.471470][ T36] audit: type=1400 audit(1784673845.670:489): avc: denied { write } for pid=6561 comm="syz.6.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.965179][ T36] audit: type=1400 audit(1784673846.160:490): avc: denied { setattr } for pid=6579 comm="iou-wrk-6580" name="" dev="pipefs" ino=18619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 185.060874][ T36] audit: type=1400 audit(1784673846.260:491): avc: denied { read write } for pid=6593 comm="syz.5.2333" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.091163][ T36] audit: type=1400 audit(1784673846.260:492): avc: denied { open } for pid=6593 comm="syz.5.2333" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.115653][ T36] audit: type=1400 audit(1784673846.290:493): avc: denied { ioctl } for pid=6593 comm="syz.5.2333" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.201537][ T36] audit: type=1400 audit(1784673846.400:494): avc: denied { name_bind } for pid=6601 comm="syz.4.2336" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 185.405216][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 185.475244][ T46] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 185.556426][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.575139][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.584929][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.605168][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.614260][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.623238][ T31] usb 6-1: config 0 descriptor?? [ 185.635170][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 185.641462][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 185.652409][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.663586][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.673602][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 185.686874][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 185.696206][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.709006][ T46] usb 5-1: config 0 descriptor?? [ 185.931452][ T36] audit: type=1400 audit(1784673847.130:495): avc: denied { write } for pid=6625 comm="syz.6.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.050895][ T31] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 186.061410][ T31] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 186.120782][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002A/input/input36 [ 186.133976][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002A/input/input37 [ 186.158446][ T46] kye 0003:0458:5013.002A: input,hiddev97,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 186.248116][ T6637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.295161][ T311] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 186.326557][ T36] audit: type=1400 audit(1784673847.530:496): avc: denied { read } for pid=6604 comm="syz.4.2337" name="event4" dev="devtmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.367345][ T46] usb 5-1: USB disconnect, device number 40 [ 186.446350][ T311] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 186.455869][ T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.464677][ T311] usb 7-1: config 0 descriptor?? [ 187.135168][ T46] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 187.296293][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.307285][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.317461][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.330578][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.339828][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.348986][ T46] usb 5-1: config 0 descriptor?? [ 187.684065][ T311] usb 7-1: Cannot set autoneg [ 187.691780][ T311] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 187.704189][ T311] usb 7-1: USB disconnect, device number 13 [ 187.758583][ T46] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 187.767367][ T46] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 187.778423][ T46] plantronics 0003:047F:FFFF.002B: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.015884][ T438] usb 5-1: USB disconnect, device number 41 [ 188.165610][ T31] usb 6-1: USB disconnect, device number 21 [ 188.485187][ T438] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 188.651139][ T968] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.658279][ T438] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.676658][ T438] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.687056][ T438] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 188.696363][ T438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.705541][ T438] usb 7-1: config 0 descriptor?? [ 188.825204][ T46] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 188.975221][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 188.981519][ T46] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.990506][ T46] usb 5-1: config 0 has no interface number 0 [ 188.997963][ T46] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 189.007113][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.015162][ T46] usb 5-1: Product: syz [ 189.019411][ T46] usb 5-1: Manufacturer: syz [ 189.024041][ T46] usb 5-1: SerialNumber: syz [ 189.029579][ T46] usb 5-1: config 0 descriptor?? [ 189.035671][ T46] smsc95xx v2.0.0 [ 189.117957][ T438] hid-steam 0003:28DE:1142.002C: unknown main item tag 0x0 [ 189.125335][ T438] hid-steam 0003:28DE:1142.002C: unknown main item tag 0x0 [ 189.132626][ T438] hid-steam 0003:28DE:1142.002C: unknown main item tag 0x0 [ 189.140094][ T438] hid-steam 0003:28DE:1142.002C: unknown main item tag 0x0 [ 189.147642][ T438] hid-steam 0003:28DE:1142.002C: unknown main item tag 0x0 [ 189.155946][ T438] hid-steam 0003:28DE:1142.002C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 189.205177][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 189.326029][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 189.326048][ T36] audit: type=1400 audit(1784673850.530:507): avc: denied { write } for pid=6657 comm="syz.6.2354" name="hidraw0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.385835][ T36] audit: type=1326 audit(1784673850.590:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.6.2354" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15cbd9de99 code=0x0 [ 189.386327][ T311] usb 7-1: USB disconnect, device number 14 [ 189.412962][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.430842][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.442249][ T46] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 189.453203][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.466423][ T46] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 189.475599][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.484815][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.493951][ T31] usb 6-1: config 0 descriptor?? [ 189.907552][ T31] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 189.919769][ T31] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 190.165823][ T311] usb 6-1: USB disconnect, device number 22 [ 190.294967][ T46] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.305866][ T46] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 190.315074][ T46] usb 5-1: USB disconnect, device number 42 [ 190.695201][ T1417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.705182][ T1418] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 190.854279][ T36] audit: type=1400 audit(1784673852.050:509): avc: denied { mount } for pid=6684 comm="syz.4.2366" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 190.891112][ T36] audit: type=1400 audit(1784673852.090:510): avc: denied { search } for pid=6684 comm="syz.4.2366" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.915560][ T36] audit: type=1400 audit(1784673852.090:511): avc: denied { setattr } for pid=6684 comm="syz.4.2366" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.321929][ T36] audit: type=1400 audit(1784673852.520:512): avc: denied { block_suspend } for pid=6718 comm="syz.5.2379" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.506202][ T6731] netlink: 'syz.6.2383': attribute type 4 has an invalid length. [ 191.525205][ T6731] netlink: 'syz.6.2383': attribute type 4 has an invalid length. [ 191.645668][ T36] audit: type=1400 audit(1784673852.850:513): avc: denied { mount } for pid=6737 comm="syz.5.2386" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.671884][ T36] audit: type=1400 audit(1784673852.870:514): avc: denied { mounton } for pid=6737 comm="syz.5.2386" path="/349/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 191.694564][ T6738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.735332][ T36] audit: type=1400 audit(1784673852.930:515): avc: denied { unmount } for pid=2591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.019769][ T36] audit: type=1400 audit(1784673853.220:516): avc: denied { write } for pid=6772 comm="syz.5.2397" name="unix" dev="proc" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 192.186232][ T6787] syzkaller0: entered promiscuous mode [ 192.191895][ T6787] syzkaller0: entered allmulticast mode [ 192.985200][ T438] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 193.146213][ T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.175171][ T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.195578][ T438] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.215325][ T438] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.230090][ T438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.240244][ T438] usb 5-1: config 0 descriptor?? [ 193.363713][ T968] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.651810][ T438] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 193.663467][ T438] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 193.787386][ T6848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 193.885204][ T46] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 194.035156][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 194.041569][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.048483][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 194.057920][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.067381][ T46] usb 4-1: config 0 descriptor?? [ 194.168237][ T438] usb 5-1: USB disconnect, device number 43 [ 194.479496][ T46] lg-g15 0003:046D:C22D.002F: unknown main item tag 0x1 [ 194.488408][ T46] lg-g15 0003:046D:C22D.002F: unknown main item tag 0x6 [ 194.495488][ T46] lg-g15 0003:046D:C22D.002F: ignoring exceeding usage max [ 194.511548][ T46] lg-g15 0003:046D:C22D.002F: hidraw0: USB HID v0.08 Device [HID 046d:c22d] on usb-dummy_hcd.3-1/input0 [ 194.691284][ T311] usb 4-1: USB disconnect, device number 37 [ 194.915437][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 194.915457][ T36] audit: type=1400 audit(1784673856.110:526): avc: denied { create } for pid=6860 comm="syz.4.2425" name="#79" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 194.945201][ T36] audit: type=1400 audit(1784673856.110:527): avc: denied { link } for pid=6860 comm="syz.4.2425" name="#79" dev="tmpfs" ino=2754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 194.968052][ T36] audit: type=1400 audit(1784673856.110:528): avc: denied { rename } for pid=6860 comm="syz.4.2425" name="#7a" dev="tmpfs" ino=2754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.125084][ T36] audit: type=1400 audit(1784673856.320:529): avc: denied { mount } for pid=6865 comm="syz.4.2427" name="/" dev="incremental-fs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.168796][ T36] audit: type=1400 audit(1784673856.350:530): avc: denied { write } for pid=6865 comm="syz.4.2427" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.205155][ T36] audit: type=1400 audit(1784673856.350:531): avc: denied { open } for pid=6865 comm="syz.4.2427" path="/512/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.239795][ T36] audit: type=1400 audit(1784673856.350:532): avc: denied { ioctl } for pid=6865 comm="syz.4.2427" path="/512/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.265933][ T36] audit: type=1400 audit(1784673856.350:533): avc: denied { unmount } for pid=1125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.373392][ T46] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 195.415461][ T1417] Bluetooth: hci0: command 0x1003 tx timeout [ 195.421528][ T1418] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.448196][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 195.507287][ T36] audit: type=1400 audit(1784673856.710:534): avc: denied { bind } for pid=6881 comm="syz.3.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.567668][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.583787][ T36] audit: type=1400 audit(1784673856.730:535): avc: denied { write } for pid=6881 comm="syz.3.2434" path="socket:[52934]" dev="sockfs" ino=52934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.612278][ T46] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.632680][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.641044][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 195.659225][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.668829][ T46] usb 6-1: config 0 descriptor?? [ 195.680526][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.699709][ T31] usb 5-1: config 0 has no interface number 0 [ 195.705992][ T31] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.719088][ T31] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 195.728480][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.748783][ T31] usb 5-1: config 0 descriptor?? [ 195.763530][ T31] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 195.878804][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 195.902060][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 195.916129][ T46] usb 6-1: USB disconnect, device number 23 [ 195.941127][ T6900] syzkaller1: entered promiscuous mode [ 195.955180][ T6900] syzkaller1: entered allmulticast mode [ 195.973404][ T31] usb 5-1: USB disconnect, device number 44 [ 196.375191][ T46] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 196.546357][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.557572][ T46] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 196.580073][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.599006][ T46] usb 6-1: config 0 descriptor?? [ 196.988991][ T6955] kvm: Disabled LAPIC found during irq injection [ 197.208355][ T6968] syzkaller1: entered promiscuous mode [ 197.214100][ T6968] syzkaller1: entered allmulticast mode [ 197.415552][ T46] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 197.423186][ T46] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 197.753354][ T661] usb 6-1: USB disconnect, device number 24 [ 197.759368][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 198.585193][ T67] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 198.746414][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.768988][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.789028][ T67] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.807998][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.825929][ T67] usb 4-1: config 0 descriptor?? [ 200.040440][ T67] uclogic 0003:256C:006D.0030: v1 frame probing failed: -71 [ 200.047895][ T67] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 200.055537][ T67] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 200.065806][ T67] usb 4-1: USB disconnect, device number 38 [ 200.120449][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 200.120473][ T36] audit: type=1400 audit(1784673861.310:550): avc: denied { map } for pid=7060 comm="syz.6.2501" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.166770][ T36] audit: type=1400 audit(1784673861.370:551): avc: denied { mounton } for pid=7062 comm="syz.4.2502" path="/524/file0" dev="tmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 200.445175][ T661] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 200.605159][ T661] usb 6-1: Using ep0 maxpacket: 32 [ 200.611651][ T661] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.622906][ T661] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.633001][ T661] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 200.642273][ T661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.652757][ T661] usb 6-1: config 0 descriptor?? [ 200.733750][ T36] audit: type=1400 audit(1784673861.930:552): avc: denied { append } for pid=7080 comm="syz.3.2509" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.756629][ T36] audit: type=1400 audit(1784673861.930:553): avc: denied { execute } for pid=7080 comm="syz.3.2509" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.070185][ T661] savu 0003:1E7D:2D5A.0031: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 201.159521][ T36] audit: type=1400 audit(1784673862.360:554): avc: denied { bind } for pid=7091 comm="syz.6.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.351293][ T661] usb 6-1: USB disconnect, device number 25 [ 201.403151][ T36] audit: type=1400 audit(1784673862.600:555): avc: denied { bind } for pid=7110 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.444069][ T36] audit: type=1400 audit(1784673862.620:556): avc: denied { setopt } for pid=7110 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.775617][ T67] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 201.945165][ T67] usb 7-1: Using ep0 maxpacket: 16 [ 201.951913][ T67] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.965196][ T67] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 201.974493][ T67] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.982802][ T67] usb 7-1: Product: syz [ 201.987346][ T67] usb 7-1: Manufacturer: syz [ 201.992060][ T67] usb 7-1: SerialNumber: syz [ 202.002573][ T67] usb 7-1: config 0 descriptor?? [ 202.016523][ T67] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22 [ 202.190828][ T1637] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.198694][ T1417] Bluetooth: hci0: unexpected event 0x02 length: 0 < 1 [ 202.221529][ T67] usb 7-1: USB disconnect, device number 15 [ 202.515460][ T7142] kvm: user requested TSC rate below hardware speed [ 202.555217][ T661] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 202.566608][ T7142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 202.706409][ T661] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 202.714822][ T661] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 202.725230][ T661] usb 4-1: config 220 has no interface number 2 [ 202.739622][ T661] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 202.752929][ T661] usb 4-1: config 220 interface 0 has no altsetting 0 [ 202.761641][ T661] usb 4-1: config 220 interface 76 has no altsetting 0 [ 202.768772][ T661] usb 4-1: config 220 interface 1 has no altsetting 0 [ 202.777208][ T661] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 202.786471][ T661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.794526][ T661] usb 4-1: Product: syz [ 202.798868][ T661] usb 4-1: Manufacturer: syz [ 202.803528][ T661] usb 4-1: SerialNumber: syz [ 203.013777][ T661] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 203.021907][ T661] usb 4-1: No valid video chain found. [ 203.027520][ T661] usb 4-1: selecting invalid altsetting 0 [ 203.036826][ T661] usb 4-1: USB disconnect, device number 39 [ 203.549497][ T36] audit: type=1400 audit(1784673864.750:557): avc: denied { setopt } for pid=7153 comm="syz.3.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.572669][ T974] Bluetooth: hci1: Frame reassembly failed (-84) [ 203.580730][ T36] audit: type=1400 audit(1784673864.780:558): avc: denied { read } for pid=7153 comm="syz.3.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.215190][ T6669] Bluetooth: hci0: command 0x1003 tx timeout [ 204.221264][ T1418] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.522682][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2545'. [ 204.565604][ T36] audit: type=1400 audit(1784673865.770:559): avc: denied { connect } for pid=7174 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.717310][ T7182] x_tables: unsorted entry at hook 1 [ 204.895168][ T67] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 205.066206][ T67] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 205.089259][ T67] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 205.108500][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.128846][ T67] usb 6-1: config 0 descriptor?? [ 205.415787][ T36] audit: type=1400 audit(1784673866.610:560): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 205.503897][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.511165][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.518716][ T7203] bridge_slave_0: entered allmulticast mode [ 205.525581][ T7203] bridge_slave_0: entered promiscuous mode [ 205.532620][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.545159][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.552410][ T7203] bridge_slave_1: entered allmulticast mode [ 205.559052][ T7203] bridge_slave_1: entered promiscuous mode [ 205.575364][ T1417] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.577594][ T1418] Bluetooth: hci1: command 0x1003 tx timeout [ 205.672491][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.679608][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.686960][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.694028][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.726598][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.745563][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.769159][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.776308][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.789795][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.796895][ T1637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.872039][ T7203] veth0_vlan: entered promiscuous mode [ 205.902585][ T7203] veth1_macvtap: entered promiscuous mode [ 205.946851][ T36] audit: type=1400 audit(1784673867.150:561): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/root/syzkaller.hN2j4o/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 205.992129][ T36] audit: type=1400 audit(1784673867.170:562): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/root/syzkaller.hN2j4o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.059397][ T36] audit: type=1400 audit(1784673867.170:563): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/root/syzkaller.hN2j4o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 206.099594][ T36] audit: type=1400 audit(1784673867.180:564): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 206.122933][ T36] audit: type=1400 audit(1784673867.180:565): avc: denied { mounton } for pid=7203 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 206.204801][ T67] usbhid 6-1:0.0: can't add hid device: -71 [ 206.211152][ T67] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 206.220807][ T67] usb 6-1: USB disconnect, device number 26 [ 206.318059][ T7224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.444694][ T36] audit: type=1400 audit(1784673867.640:566): avc: denied { associate } for pid=7238 comm="syz.4.2567" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 206.497537][ T36] audit: type=1400 audit(1784673867.700:567): avc: denied { bind } for pid=7232 comm="syz.7.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.523687][ T7245] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.585976][ T36] audit: type=1400 audit(1784673867.790:568): avc: denied { map } for pid=7248 comm="syz.7.2572" path="socket:[56074]" dev="sockfs" ino=56074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.610178][ T36] audit: type=1400 audit(1784673867.790:569): avc: denied { read } for pid=7248 comm="syz.7.2572" path="socket:[56074]" dev="sockfs" ino=56074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.768774][ T7313] netlink: 'syz.7.2593': attribute type 32 has an invalid length. [ 207.800716][ T7315] netlink: 'syz.7.2594': attribute type 28 has an invalid length. [ 207.809021][ T7315] netlink: 'syz.7.2594': attribute type 32 has an invalid length. [ 208.083953][ T7329] syz.5.2600: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 208.099273][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.5.2600 Not tainted syzkaller #0 06b3c97831a10c77d09a2a0513f377ab490362d8 [ 208.099328][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.099354][ T7329] Call Trace: [ 208.099365][ T7329] [ 208.099383][ T7329] __dump_stack+0x21/0x30 [ 208.099441][ T7329] dump_stack_lvl+0x140/0x1c0 [ 208.099496][ T7329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 208.099551][ T7329] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 208.099598][ T7329] dump_stack+0x19/0x20 [ 208.099649][ T7329] warn_alloc+0x1e7/0x2c0 [ 208.099700][ T7329] ? stack_depot_save_flags+0x38/0x800 [ 208.099746][ T7329] ? __cfi_warn_alloc+0x10/0x10 [ 208.099797][ T7329] ? kasan_save_track+0x3e/0x80 [ 208.099841][ T7329] ? kasan_save_alloc_info+0x3a/0x50 [ 208.099896][ T7329] ? xsk_init_queue+0xb2/0x120 [ 208.099941][ T7329] ? xsk_setsockopt+0x4c5/0x760 [ 208.099985][ T7329] ? do_sock_setsockopt+0x27f/0x410 [ 208.100043][ T7329] ? __x64_sys_setsockopt+0x1b7/0x250 [ 208.100077][ T7329] ? x64_sys_call+0x2adc/0x2ee0 [ 208.100118][ T7329] ? do_syscall_64+0x57/0xf0 [ 208.100169][ T7329] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.100219][ T7329] __vmalloc_node_range_noprof+0x136/0x1300 [ 208.100286][ T7329] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 208.100344][ T7329] ? kasan_save_alloc_info+0x3a/0x50 [ 208.100401][ T7329] ? __kasan_kmalloc+0x96/0xb0 [ 208.100448][ T7329] ? __kmalloc_cache_noprof+0x23c/0x470 [ 208.100491][ T7329] vmalloc_user_noprof+0x77/0x90 [ 208.100547][ T7329] ? xskq_create+0xdb/0x290 [ 208.100595][ T7329] xskq_create+0xdb/0x290 [ 208.100640][ T7329] xsk_init_queue+0xb2/0x120 [ 208.100682][ T7329] xsk_setsockopt+0x4c5/0x760 [ 208.100727][ T7329] ? __cfi_xsk_setsockopt+0x10/0x10 [ 208.100773][ T7329] ? do_futex+0x32a/0x510 [ 208.100824][ T7329] ? file_init_path+0x434/0x590 [ 208.100873][ T7329] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 208.100916][ T7329] ? security_socket_setsockopt+0x3d/0x100 [ 208.100968][ T7329] ? __cfi_xsk_setsockopt+0x10/0x10 [ 208.101014][ T7329] do_sock_setsockopt+0x27f/0x410 [ 208.101072][ T7329] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 208.101130][ T7329] ? __fget_files+0x2bc/0x330 [ 208.101186][ T7329] __x64_sys_setsockopt+0x1b7/0x250 [ 208.101222][ T7329] x64_sys_call+0x2adc/0x2ee0 [ 208.101260][ T7329] do_syscall_64+0x57/0xf0 [ 208.101299][ T7329] ? clear_bhb_loop+0x50/0xa0 [ 208.101347][ T7329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.101395][ T7329] RIP: 0033:0x7ff25519de99 [ 208.101426][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.101459][ T7329] RSP: 002b:00007ff253bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.101501][ T7329] RAX: ffffffffffffffda RBX: 00007ff255425fa0 RCX: 00007ff25519de99 [ 208.101531][ T7329] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 208.101551][ T7329] RBP: 00007ff255233eaf R08: 0000000000000004 R09: 0000000000000000 [ 208.101578][ T7329] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 208.101604][ T7329] R13: 00007ff255426038 R14: 00007ff255425fa0 R15: 00007fffd7af2e98 [ 208.101639][ T7329] [ 208.101760][ T7329] Mem-Info: [ 208.431201][ T7329] active_anon:66687 inactive_anon:9 isolated_anon:0 [ 208.431201][ T7329] active_file:15146 inactive_file:12733 isolated_file:0 [ 208.431201][ T7329] unevictable:0 dirty:217 writeback:0 [ 208.431201][ T7329] slab_reclaimable:5930 slab_unreclaimable:74267 [ 208.431201][ T7329] mapped:24690 shmem:54937 pagetables:1447 [ 208.431201][ T7329] sec_pagetables:0 bounce:0 [ 208.431201][ T7329] kernel_misc_reclaimable:0 [ 208.431201][ T7329] free:1452386 free_pcp:1814 free_cma:0 [ 208.484856][ T7329] Node 0 active_anon:264748kB inactive_anon:36kB active_file:60584kB inactive_file:50932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98760kB dirty:868kB writeback:0kB shmem:219748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:7620kB pagetables:5888kB sec_pagetables:0kB all_unreclaimable? no [ 208.517782][ T7329] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963396kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:5164kB free_cma:0kB [ 208.551154][ T7329] lowmem_reserve[]: 0 3921 3921 [ 208.556987][ T7329] Normal free:2855392kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:262748kB inactive_anon:36kB active_file:60584kB inactive_file:50932kB unevictable:0kB writepending:868kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2404kB local_pcp:2372kB free_cma:0kB [ 208.588984][ T7329] lowmem_reserve[]: 0 0 0 [ 208.595146][ T7329] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 208.629188][ T7329] Normal: 127*4kB (UM) 27*8kB (UME) 17*16kB (UE) 35*32kB (UE) 61*64kB (UME) 191*128kB (UME) 114*256kB (UM) 58*512kB (UM) 46*1024kB (UME) 41*2048kB (UM) 643*4096kB (UME) = 2854148kB [ 208.655260][ T7329] 82572 total pagecache pages [ 208.660153][ T7329] 10 pages in swap cache [ 208.664439][ T7329] Free swap = 124596kB [ 208.668684][ T7329] Total swap = 124996kB [ 208.673237][ T7329] 2097051 pages RAM [ 208.677328][ T7329] 0 pages HighMem/MovableOnly [ 208.682198][ T7329] 352236 pages reserved [ 208.705167][ T7329] 0 pages cma reserved [ 208.712478][ T7329] Memory allocations: [ 208.728788][ T7329] 0 B 0 init/main.c:1477 func:do_initcalls [ 208.751488][ T7329] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 208.760069][ T7329] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 208.767843][ T7341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7341 comm=syz.3.2605 [ 208.780928][ T7329] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 208.789374][ T7329] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 208.797630][ T7329] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 208.817483][ T7329] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 208.825758][ T7329] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 208.833777][ T7329] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 208.855216][ T7329] 0 B 0 init/initramfs.c:101 func:find_link [ 209.095212][ T661] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 209.260767][ T661] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.269407][ T661] usb 5-1: not running at top speed; connect to a high speed hub [ 209.283802][ T661] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 209.294081][ T661] usb 5-1: config 0 has no interface number 0 [ 209.301118][ T661] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 10680, setting to 64 [ 209.312763][ T661] usb 5-1: config 0 interface 88 has no altsetting 0 [ 209.321758][ T661] usb 5-1: string descriptor 0 read error: -22 [ 209.328481][ T661] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 209.340346][ T661] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 209.349535][ T661] usb 5-1: config 0 descriptor?? [ 209.362699][ T7348] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.380614][ T661] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input40 [ 209.397435][ C1] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 209.573568][ T661] usb 5-1: USB disconnect, device number 45 [ 209.845817][ T7383] kvm: kvm [7380]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 209.865402][ T7383] kvm: kvm [7380]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 210.527749][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 210.527768][ T36] audit: type=1400 audit(1784673871.730:575): avc: denied { mounton } for pid=7393 comm="syz.7.2622" path="/23/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 210.807134][ T36] audit: type=1400 audit(1784673872.010:576): avc: denied { ioctl } for pid=7410 comm="syz.5.2629" path="socket:[57686]" dev="sockfs" ino=57686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.832063][ T36] audit: type=1400 audit(1784673872.010:577): avc: denied { getopt } for pid=7410 comm="syz.5.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.890130][ T36] audit: type=1400 audit(1784673872.090:578): avc: denied { wake_alarm } for pid=7418 comm="syz.7.2632" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.028937][ T36] audit: type=1400 audit(1784673872.230:579): avc: denied { create } for pid=7431 comm="syz.4.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.051325][ T36] audit: type=1400 audit(1784673872.250:580): avc: denied { bind } for pid=7431 comm="syz.4.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.074020][ T36] audit: type=1400 audit(1784673872.250:581): avc: denied { name_bind } for pid=7431 comm="syz.4.2637" src=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 211.102821][ T36] audit: type=1400 audit(1784673872.250:582): avc: denied { node_bind } for pid=7431 comm="syz.4.2637" src=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 211.125484][ T36] audit: type=1400 audit(1784673872.250:583): avc: denied { write } for pid=7431 comm="syz.4.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.155053][ T36] audit: type=1400 audit(1784673872.300:584): avc: denied { write } for pid=7434 comm="syz.7.2638" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.379890][ T7455] tipc: Started in network mode [ 211.395078][ T7455] tipc: Node identity 56ff09aee803, cluster identity 4711 [ 211.402826][ T7455] tipc: Enabled bearer , priority 0 [ 211.469914][ T7455] syzkaller0: entered promiscuous mode [ 211.475745][ T7455] syzkaller0: entered allmulticast mode [ 211.481642][ T7455] tipc: Resetting bearer [ 211.495593][ T7454] tipc: Resetting bearer [ 211.535130][ T7454] tipc: Disabling bearer [ 211.714224][ T7468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.718677][ T7468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.743705][ T7468] rust_binder: 7467:7468 transaction to 0 failed: ENOENT [ 212.065173][ T661] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 212.226290][ T661] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.255165][ T661] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.264227][ T661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.285982][ T661] usb 6-1: config 0 descriptor?? [ 212.449866][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 212.474432][ T7511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7511 comm=syz.3.2666 [ 212.501071][ T661] usbhid 6-1:0.0: can't add hid device: -71 [ 212.507566][ T661] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 212.517484][ T661] usb 6-1: USB disconnect, device number 27 [ 212.945151][ T351] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 213.096377][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.107765][ T351] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 213.118025][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.127314][ T351] usb 6-1: config 0 descriptor?? [ 213.945587][ T351] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 213.954584][ T351] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input41 [ 214.125175][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 214.270876][ T351] usb 6-1: USB disconnect, device number 28 [ 214.270946][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 214.285309][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 214.292492][ T31] usb 8-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 214.307151][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 214.316247][ T31] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 214.325835][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.334988][ T31] usb 8-1: config 0 descriptor?? [ 214.465188][ T46] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 214.626355][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.639298][ T46] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.657700][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.672888][ T46] usb 5-1: config 0 descriptor?? [ 214.756204][ T31] petalynx 0003:18B1:0037.0032: unknown main item tag 0x1 [ 214.763502][ T31] petalynx 0003:18B1:0037.0032: unknown main item tag 0x6 [ 214.770705][ T31] petalynx 0003:18B1:0037.0032: unknown main item tag 0x4 [ 214.779558][ T31] petalynx 0003:18B1:0037.0032: hidraw0: USB HID v10.08 Device [HID 18b1:0037] on usb-dummy_hcd.7-1/input0 [ 214.883027][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 214.892786][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.904452][ T46] usb 5-1: USB disconnect, device number 46 [ 214.966377][ T351] usb 8-1: USB disconnect, device number 2 [ 215.325167][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 215.498566][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.511566][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 215.521806][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.535131][ T46] usb 5-1: config 0 descriptor?? [ 215.913136][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2704'. [ 215.914587][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 215.914658][ T36] audit: type=1400 audit(1784673877.110:593): avc: denied { setopt } for pid=7609 comm="syz.5.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.958480][ T351] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 216.125126][ T351] usb 8-1: Using ep0 maxpacket: 16 [ 216.136503][ T351] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 216.149108][ T351] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 216.165145][ T351] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 216.185124][ T351] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 216.195667][ T351] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.204745][ T351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.225181][ T351] usb 8-1: Product: syz [ 216.229396][ T351] usb 8-1: Manufacturer: syz [ 216.234021][ T351] usb 8-1: SerialNumber: syz [ 216.355501][ T46] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 216.363308][ T46] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 216.448597][ T351] usb 8-1: 0:2 : does not exist [ 216.462119][ T351] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 216.483843][ T351] usb 8-1: USB disconnect, device number 3 [ 216.507663][ T729] udevd[729]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.561545][ T7621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.662065][ T46] usb 5-1: USB disconnect, device number 47 [ 216.662109][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 216.833219][ T7636] netlink: 'syz.3.2712': attribute type 4 has an invalid length. [ 216.842504][ T7636] netlink: 'syz.3.2712': attribute type 4 has an invalid length. [ 216.902656][ T7638] kvm: pic: non byte write [ 217.206390][ T36] audit: type=1400 audit(1784673878.410:594): avc: denied { getopt } for pid=7652 comm="syz.7.2720" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.227306][ T7651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.473071][ T36] audit: type=1400 audit(1784673878.670:595): avc: denied { write } for pid=7663 comm="syz.7.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.549315][ T36] audit: type=1400 audit(1784673878.750:596): avc: denied { sqpoll } for pid=7676 comm="syz.5.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 217.611968][ T36] audit: type=1400 audit(1784673878.810:597): avc: denied { bind } for pid=7682 comm="syz.7.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.667937][ T36] audit: type=1400 audit(1784673878.810:598): avc: denied { name_bind } for pid=7682 comm="syz.7.2732" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 217.705684][ T36] audit: type=1400 audit(1784673878.810:599): avc: denied { node_bind } for pid=7682 comm="syz.7.2732" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.730134][ T36] audit: type=1400 audit(1784673878.810:600): avc: denied { read } for pid=7682 comm="syz.7.2732" path="socket:[59663]" dev="sockfs" ino=59663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.327038][ T7712] syz.4.2745 uses obsolete (PF_INET,SOCK_PACKET) [ 219.202472][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2749'. [ 220.492036][ T36] audit: type=1400 audit(1784673881.690:601): avc: denied { shutdown } for pid=7770 comm="syz.7.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.165140][ T31] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 221.316296][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.341690][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.351962][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.368851][ T31] usb 5-1: Product: syz [ 221.378564][ T31] usb 5-1: Manufacturer: syz [ 221.387614][ T31] usb 5-1: SerialNumber: syz [ 221.555869][ T7818] overlayfs: failed to clone upperpath [ 221.600039][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 221.805145][ T36] audit: type=1400 audit(1784673883.000:602): avc: denied { read write } for pid=7803 comm="syz.4.2778" name="lp0" dev="devtmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 221.831552][ T36] audit: type=1400 audit(1784673883.000:603): avc: denied { open } for pid=7803 comm="syz.4.2778" path="/dev/usb/lp0" dev="devtmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 222.803628][ T36] audit: type=1400 audit(1784673884.000:604): avc: denied { setopt } for pid=7848 comm="syz.5.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.807396][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2797'. [ 222.823544][ T36] audit: type=1400 audit(1784673884.000:605): avc: denied { bind } for pid=7848 comm="syz.5.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.145180][ T67] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 223.165207][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 223.295174][ T67] usb 6-1: Using ep0 maxpacket: 8 [ 223.315148][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 223.322719][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 223.331236][ T9] usb 4-1: config 0 has no interface number 0 [ 223.337536][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 223.345978][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 223.355129][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.363194][ T9] usb 4-1: Product: syz [ 223.369461][ T9] usb 4-1: Manufacturer: syz [ 223.374212][ T9] usb 4-1: SerialNumber: syz [ 223.380405][ T9] usb 4-1: config 0 descriptor?? [ 223.387103][ T9] smsc75xx v1.0.0 [ 223.391106][ T67] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.399522][ T67] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 223.407179][ T67] usb 6-1: can't read configurations, error -71 [ 223.988674][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 223.999673][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 224.811602][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.822481][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 224.832224][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 224.841757][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 224.851116][ T9] usb 4-1: USB disconnect, device number 40 [ 225.377602][ T36] audit: type=1400 audit(1784673886.580:606): avc: denied { map } for pid=7875 comm="syz.3.2808" path="socket:[61525]" dev="sockfs" ino=61525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.419910][ T36] audit: type=1400 audit(1784673886.600:607): avc: denied { read } for pid=7875 comm="syz.3.2808" path="socket:[61525]" dev="sockfs" ino=61525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.042602][ T7901] syzkaller1: entered promiscuous mode [ 226.055120][ T7901] syzkaller1: entered allmulticast mode [ 226.260272][ T36] audit: type=1400 audit(1784673887.460:608): avc: denied { watch watch_reads } for pid=7909 comm="syz.7.2822" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 226.697386][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.704476][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.711593][ T7917] bridge_slave_0: entered allmulticast mode [ 226.717991][ T7917] bridge_slave_0: entered promiscuous mode [ 226.724672][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.732424][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.739826][ T7917] bridge_slave_1: entered allmulticast mode [ 226.746574][ T7917] bridge_slave_1: entered promiscuous mode [ 226.808795][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.815908][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.823227][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.830316][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.857715][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.865808][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.876074][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.883273][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.893136][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.900398][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.933800][ T7917] veth0_vlan: entered promiscuous mode [ 226.947251][ T7917] veth1_macvtap: entered promiscuous mode [ 228.176848][ T36] audit: type=1326 audit(1784673889.380:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.203788][ T36] audit: type=1326 audit(1784673889.380:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.230268][ T36] audit: type=1326 audit(1784673889.400:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.256332][ T36] audit: type=1326 audit(1784673889.400:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.283420][ T36] audit: type=1326 audit(1784673889.400:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.310932][ T36] audit: type=1326 audit(1784673889.410:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.336841][ T36] audit: type=1326 audit(1784673889.410:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.363429][ T36] audit: type=1326 audit(1784673889.410:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.405928][ T36] audit: type=1326 audit(1784673889.410:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.411546][ T10] usb 5-1: USB disconnect, device number 48 [ 228.433517][ T36] audit: type=1326 audit(1784673889.420:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.2836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde1999de99 code=0x7ffc0000 [ 228.465928][ T10] usblp0: removed [ 228.546932][ T7958] overlayfs: failed to clone upperpath [ 228.692992][ T7975] rust_binder: Error while translating object. [ 228.693045][ T7975] rust_binder: Failure in copy_transaction_data: EBADF [ 228.708416][ T7975] rust_binder: 7974:7975 transaction to 7974 failed: EBADF [ 229.700088][ T8003] netlink: 'syz.7.2856': attribute type 25 has an invalid length. [ 229.715250][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2856'. [ 229.865134][ T46] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 229.941264][ T8021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.942397][ T8021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.957461][ T8021] rust_binder: 8020:8021 transaction to 0 failed: ENOENT [ 230.026159][ T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.048127][ T46] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.061614][ T46] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.073308][ T46] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.085947][ T46] usb 9-1: New USB device found, idVendor=71fd, idProduct=cdd1, bcdDevice= 0.f0 [ 230.095160][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.103354][ T46] usb 9-1: Product: syz [ 230.107834][ T46] usb 9-1: Manufacturer: syz [ 230.112537][ T46] usb 9-1: SerialNumber: syz [ 230.329772][ T8002] Zero length message leads to an empty skb [ 230.351268][ T46] usb 9-1: Can't get UAC3 power state for id 11 [ 230.358922][ T46] usb 9-1: 5:0: failed to get current value for ch 0 (-71) [ 230.377716][ T46] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 230.399669][ T46] usb 9-1: USB disconnect, device number 2 [ 230.422464][ T728] udevd[728]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.434089][ T8075] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 232.658098][ T8123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.658586][ T8123] rust_binder: 8122:8123 transaction to 0 failed: ENOENT [ 232.979376][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2910'. [ 233.024233][ T8144] netlink: 'syz.5.2912': attribute type 4 has an invalid length. [ 233.548634][ T8161] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 233.626994][ T36] kauditd_printk_skb: 1177 callbacks suppressed [ 233.627014][ T36] audit: type=1400 audit(1784673894.830:1796): avc: denied { ioctl } for pid=8162 comm="syz.4.2919" path="socket:[63347]" dev="sockfs" ino=63347 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.733632][ T354] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.741310][ T36] audit: type=1400 audit(1784673894.940:1797): avc: denied { ioctl } for pid=8166 comm="syz.4.2921" path="socket:[62458]" dev="sockfs" ino=62458 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.263450][ T36] audit: type=1400 audit(1784673895.460:1798): avc: denied { getopt } for pid=8186 comm="syz.8.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.332357][ T36] audit: type=1400 audit(1784673895.530:1799): avc: denied { remount } for pid=8188 comm="syz.8.2930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 235.306937][ T8222] kvm: emulating exchange as write [ 235.345245][ T351] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 235.478234][ T36] audit: type=1400 audit(1784673896.680:1800): avc: denied { accept } for pid=8231 comm="syz.7.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.506473][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.525199][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.545271][ T351] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.554364][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.569471][ T351] usb 6-1: config 0 descriptor?? [ 235.600766][ T36] audit: type=1400 audit(1784673896.800:1801): avc: denied { create } for pid=8238 comm="syz.7.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 235.601865][ T8239] netlink: 'syz.7.2950': attribute type 27 has an invalid length. [ 235.649210][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.656557][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.735188][ T1418] Bluetooth: hci0: command 0x1003 tx timeout [ 235.735484][ T1417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.177916][ T351] usb 6-1: language id specifier not provided by device, defaulting to English [ 236.781250][ T351] uclogic 0003:256C:006D.0033: v1 frame probing failed: -71 [ 236.792477][ T351] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 236.795220][ T67] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 236.808639][ T351] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 236.837011][ T351] usb 6-1: USB disconnect, device number 31 [ 236.978752][ T67] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.989836][ T67] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.998948][ T67] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.007827][ T67] usb 9-1: config 0 descriptor?? [ 237.418618][ T8277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.431720][ T67] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 237.464349][ T67] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0034/input/input43 [ 237.544838][ T67] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 237.702176][ T8294] tipc: Failed to remove unknown binding: 66,0,0/0:502988432/502988434 [ 237.716947][ T8294] tipc: Failed to remove unknown binding: 66,0,0/0:502988432/502988433 [ 237.726239][ T8294] tipc: Failed to remove unknown binding: 66,0,0/0:502988432/502988434 [ 237.734951][ T8294] tipc: Failed to remove unknown binding: 66,0,0/0:502988432/502988433 [ 237.943084][ T36] audit: type=1400 audit(1784673899.140:1802): avc: denied { bind } for pid=8299 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.964799][ T8301] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 237.965038][ T8301] rust_binder: 8299:8301 netlink report failed: ESRCH [ 237.984993][ T8307] VFS: Mount too revealing [ 237.995139][ T36] audit: type=1400 audit(1784673899.170:1803): avc: denied { associate } for pid=8309 comm="syz.7.2974" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 238.215142][ T351] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 238.365129][ T351] usb 6-1: Using ep0 maxpacket: 32 [ 238.376136][ T351] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 238.384355][ T351] usb 6-1: config 0 has no interface number 0 [ 238.395313][ T351] usb 6-1: config 0 interface 184 has no altsetting 0 [ 238.416184][ T351] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 238.425352][ T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.433372][ T351] usb 6-1: Product: syz [ 238.457760][ T351] usb 6-1: Manufacturer: syz [ 238.462426][ T351] usb 6-1: SerialNumber: syz [ 238.476222][ T351] usb 6-1: config 0 descriptor?? [ 238.493175][ T351] smsc75xx v1.0.0 [ 239.089251][ T351] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 239.100419][ T351] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.215136][ T46] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 239.365137][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 239.372329][ T46] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.383627][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.390526][ T46] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 239.399977][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.409338][ T46] usb 5-1: config 0 descriptor?? [ 239.822889][ T46] hid-generic 0003:1E71:2009.0035: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 240.156776][ T36] audit: type=1400 audit(1784673901.360:1804): avc: denied { read write } for pid=8330 comm="syz.7.2982" name="file0" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.167832][ T46] kernel read not supported for file /newroot/164 (pid: 46 comm: kworker/1:1) [ 240.179874][ T36] audit: type=1400 audit(1784673901.360:1805): avc: denied { open } for pid=8330 comm="syz.7.2982" path="/164/file0" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.296334][ T46] usb 5-1: USB disconnect, device number 49 [ 240.323228][ T351] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 240.345730][ T351] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 240.369044][ T351] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 240.385311][ T351] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 240.405217][ T351] usb 6-1: USB disconnect, device number 32 [ 240.525782][ T8344] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 240.529601][ T8344] @0: renamed from bond_slave_1 [ 240.743869][ T8352] overlayfs: failed to clone upperpath [ 241.072108][ T36] audit: type=1400 audit(1784673902.270:1806): avc: denied { read } for pid=8366 comm="syz.5.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.283636][ T36] audit: type=1400 audit(1784673902.480:1807): avc: denied { read } for pid=8372 comm="syz.4.2999" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.306781][ T36] audit: type=1400 audit(1784673902.480:1808): avc: denied { open } for pid=8372 comm="syz.4.2999" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.796975][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3005'. [ 241.917293][ T8402] rust_binder: Error while translating object. [ 241.917397][ T8402] rust_binder: Failure in copy_transaction_data: EINVAL [ 241.923694][ T8402] rust_binder: 8401:8402 transaction to 8401 failed: EINVAL [ 241.957355][ T8404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.968598][ T8404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.979814][ T8404] rust_binder: 8403:8404 transaction to 0 failed: ENOENT [ 241.987963][ T8404] rust_binder: 8403:8404 transaction to 0 failed: EINVAL [ 242.241357][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 242.288151][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 242.308972][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 242.875130][ T5398] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 242.891773][ C1] hrtimer: interrupt took 21307 ns [ 243.035121][ T5398] usb 6-1: Using ep0 maxpacket: 16 [ 243.045916][ T5398] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 243.054405][ T5398] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 243.075110][ T5398] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 243.085541][ T5398] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 243.106168][ T5398] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.115326][ T5398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.123354][ T5398] usb 6-1: Product: syz [ 243.135120][ T5398] usb 6-1: Manufacturer: syz [ 243.139774][ T5398] usb 6-1: SerialNumber: syz [ 243.353052][ T5398] usb 6-1: 0:2 : does not exist [ 243.367122][ T5398] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 243.409346][ T5398] usb 6-1: USB disconnect, device number 33 [ 243.424279][ T729] udevd[729]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.537138][ T8454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.685311][ T8464] loop6: detected capacity change from 0 to 7 [ 243.704580][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.713836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.722131][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.726607][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.731446][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.748320][ T8464] loop6: unable to read partition table [ 243.754065][ T8464] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 243.754065][ T8464] .BL_se) failed (rc=-5) [ 243.770949][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.774997][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.780206][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.796852][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.806048][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.814283][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.823472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.831736][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.840926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.850139][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.859338][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.875158][ T36] audit: type=1400 audit(1784673905.070:1809): avc: denied { ioctl } for pid=8463 comm="syz.8.3029" path="socket:[64848]" dev="sockfs" ino=64848 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.029033][ T8470] kvm: pic: single mode not supported [ 244.029508][ T8470] kvm: pic: single mode not supported [ 244.035517][ T8470] kvm: pic: single mode not supported [ 244.041576][ T8470] kvm: pic: single mode not supported [ 244.047050][ T8470] kvm: pic: level sensitive irq not supported [ 244.052816][ T8470] kvm: pic: level sensitive irq not supported [ 244.062390][ T8470] kvm: pic: single mode not supported [ 244.069425][ T8470] kvm: pic: single mode not supported [ 244.081631][ T8470] kvm: pic: non byte write [ 244.091850][ T8470] kvm: pic: non byte write [ 244.097404][ T8470] kvm: pic: non byte write [ 244.102111][ T8470] kvm: pic: non byte write [ 244.189787][ T8475] syzkaller0: entered promiscuous mode [ 244.195365][ T8475] syzkaller0: entered allmulticast mode [ 244.522584][ T8492] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3040'. [ 244.535142][ T67] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 244.551989][ T8494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.553202][ T8494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.560459][ T8494] rust_binder: 8493:8494 transaction to 0 failed: ENOENT [ 244.717217][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 244.750985][ T67] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.769565][ T67] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.788648][ T67] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.805289][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.816113][ T67] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.826059][ T67] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.839370][ T67] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.848686][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.865156][ T67] usb 5-1: config 0 descriptor?? [ 245.090869][ T67] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.119434][ T67] usb 5-1: USB disconnect, device number 50 [ 245.130543][ T67] usblp0: removed [ 245.134310][ T36] audit: type=1326 audit(1784673906.330:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff25519de99 code=0x0 [ 245.186636][ T36] audit: type=1326 audit(1784673906.390:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.212392][ T36] audit: type=1326 audit(1784673906.390:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.238199][ T36] audit: type=1326 audit(1784673906.390:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.263988][ T36] audit: type=1326 audit(1784673906.390:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.290335][ T36] audit: type=1326 audit(1784673906.390:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.318130][ T36] audit: type=1326 audit(1784673906.390:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.344080][ T36] audit: type=1326 audit(1784673906.390:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.369909][ T36] audit: type=1326 audit(1784673906.390:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.396240][ T36] audit: type=1326 audit(1784673906.390:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.422057][ T36] audit: type=1326 audit(1784673906.390:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.3049" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25519de99 code=0x7ffc0000 [ 245.435634][ T8517] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3050'. [ 245.563505][ T8522] netlink: 'syz.8.3052': attribute type 11 has an invalid length. [ 245.628303][ T67] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 245.701950][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.716601][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.795117][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 245.801674][ T67] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.816520][ T67] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.830797][ T67] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.845797][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.861685][ T67] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.878873][ T67] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.901436][ T67] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.916773][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.932480][ T67] usb 5-1: config 0 descriptor?? [ 245.970939][ T8541] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 246.144204][ T67] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.344690][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.375289][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.487706][ C0] usblp0: nonzero read bulk status received: -71 [ 246.488074][ T67] usb 5-1: USB disconnect, device number 51 [ 246.494142][ T8552] usblp0: error -71 reading from printer [ 246.505784][ T8479] usblp0: error -19 reading from printer [ 246.704037][ T8478] usblp0: removed [ 247.015154][ T10] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 247.166455][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 247.174902][ T10] usb 6-1: config 179 has no interface number 0 [ 247.181261][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 247.192577][ T10] usb 6-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.204461][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.215818][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.225976][ T10] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.239345][ T10] usb 6-1: config 179 interface 65 has no altsetting 0 [ 247.248838][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 247.258066][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.274028][ T8560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.284706][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input44 [ 247.449413][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.458128][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.486409][ T5398] usb 6-1: USB disconnect, device number 34 [ 247.492389][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.503507][ T5398] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 247.605156][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 247.756432][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.767460][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.776598][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.785600][ T10] usb 5-1: config 0 descriptor?? [ 247.993838][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 248.001371][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 248.022026][ T10] usb 5-1: USB disconnect, device number 52 [ 248.145907][ T8589] input: syz1 as /devices/virtual/input/input45 [ 248.435135][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 248.596277][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.607706][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 248.617731][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.636474][ T31] usb 5-1: config 0 descriptor?? [ 248.989725][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.003883][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.396547][ T8611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8611 comm=syz.7.3083 [ 249.455521][ T31] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 249.463932][ T31] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 249.593972][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3090'. [ 249.767828][ T31] usb 5-1: USB disconnect, device number 53 [ 249.773866][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 249.843669][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.854278][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.375129][ T31] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 250.537527][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.553935][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.575126][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 250.587723][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.596989][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.605643][ T31] usb 6-1: Product: syz [ 250.615461][ T31] usb 6-1: Manufacturer: syz [ 250.620186][ T31] usb 6-1: SerialNumber: syz [ 250.630721][ T8645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.649732][ T31] cdc_mbim 6-1:1.0: skipping garbage [ 250.665136][ T31] cdc_mbim 6-1:1.0: skipping garbage [ 250.852177][ T969] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.862717][ T1418] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 251.448804][ T31] cdc_mbim 6-1:1.0: SET_NTB_FORMAT failed [ 251.475447][ T31] cdc_mbim 6-1:1.0: bind() failure [ 251.484731][ T31] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 251.492023][ T31] cdc_ncm 6-1:1.1: bind() failure [ 251.504053][ T31] usb 6-1: USB disconnect, device number 35 [ 252.333968][ T8707] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 252.333996][ T8707] rust_binder: Read failure Err(EFAULT) in pid:1685 [ 252.343549][ T8707] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 252.350473][ T8707] rust_binder: Read failure Err(EFAULT) in pid:1685 [ 252.507342][ T8709] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 252.852681][ T36] kauditd_printk_skb: 344 callbacks suppressed [ 252.852701][ T36] audit: type=1400 audit(1784673914.050:2165): avc: denied { connect } for pid=8715 comm="syz.7.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.859648][ T1417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.149327][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3131'. [ 254.326573][ T8752] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 254.579726][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3146'. [ 254.635260][ T36] audit: type=1400 audit(1784673915.830:2166): avc: denied { map } for pid=8776 comm="syz.8.3148" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 254.665371][ T67] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 254.683499][ T36] audit: type=1400 audit(1784673915.860:2167): avc: denied { execute_no_trans } for pid=8774 comm="syz.7.3147" path="/223/file0" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.858348][ T67] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.879574][ T67] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.905180][ T67] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.934108][ T67] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.954998][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.975897][ T67] usb 6-1: config 0 descriptor?? [ 255.393016][ T67] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 255.405335][ T67] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 255.543407][ T36] audit: type=1326 audit(1784673916.740:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.3153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f78e7997c17 code=0x0 [ 255.806798][ T8798] kvm: pic: level sensitive irq not supported [ 255.806873][ T8798] kvm: pic: non byte read [ 255.855339][ T8798] kvm: pic: level sensitive irq not supported [ 255.855432][ T8798] kvm: pic: non byte read [ 256.398714][ T8819] tipc: Started in network mode [ 256.415492][ T8819] tipc: Node identity ac14140f, cluster identity 4711 [ 256.440258][ T8819] tipc: New replicast peer: 255.255.255.255 [ 256.460108][ T8819] tipc: Enabled bearer , priority 10 [ 256.743105][ C0] plantronics 0003:047F:FFFF.0036: usb_submit_urb(ctrl) failed: -1 [ 257.261784][ T36] audit: type=1400 audit(1784673918.460:2169): avc: denied { watch } for pid=8842 comm="syz.8.3169" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 257.518120][ T36] audit: type=1400 audit(1784673918.720:2170): avc: denied { read write } for pid=8862 comm="syz.4.3177" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 257.545793][ T5398] usb 6-1: USB disconnect, device number 36 [ 257.575316][ T31] tipc: Node number set to 2886997007 [ 257.585112][ T36] audit: type=1400 audit(1784673918.720:2171): avc: denied { open } for pid=8862 comm="syz.4.3177" path="/665/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 258.013648][ T8891] kvm: pic: level sensitive irq not supported [ 258.013698][ T8891] kvm: pic: level sensitive irq not supported [ 258.020628][ T8891] kvm: pic: level sensitive irq not supported [ 258.247041][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3188'. [ 258.416142][ T8902] bridge0: port 3(erspan0) entered blocking state [ 258.422692][ T8902] bridge0: port 3(erspan0) entered disabled state [ 258.429477][ T8902] erspan0: entered allmulticast mode [ 258.435527][ T8902] erspan0: entered promiscuous mode [ 258.440917][ T8902] bridge0: port 3(erspan0) entered blocking state [ 258.447450][ T8902] bridge0: port 3(erspan0) entered forwarding state [ 258.736887][ T67] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 259.035099][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 259.042173][ T67] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.050679][ T67] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.059351][ T67] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.068421][ T67] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.078169][ T67] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.087914][ T67] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.101453][ T67] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.110566][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.119749][ T67] usb 6-1: config 0 descriptor?? [ 259.329594][ T67] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.342290][ T67] usb 6-1: USB disconnect, device number 37 [ 259.352823][ T67] usblp0: removed [ 259.885217][ T661] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 260.056379][ T661] usb 6-1: Using ep0 maxpacket: 32 [ 260.083989][ T661] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 260.108574][ T661] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 260.133820][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.141760][ T661] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 260.156831][ T661] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.160331][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.191693][ T661] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 260.217685][ T661] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 260.252824][ T661] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 260.262257][ T661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.289433][ T661] usb 6-1: config 0 descriptor?? [ 260.520346][ T661] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 260.906538][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.916360][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.043885][ C1] usblp0: nonzero read bulk status received: -71 [ 261.050430][ T8905] usblp0: error -71 reading from printer [ 261.052031][ T67] usb 6-1: USB disconnect, device number 38 [ 261.266462][ T8904] usblp0: removed [ 261.843556][ T8951] syzkaller0: entered promiscuous mode [ 261.852719][ T8951] syzkaller0: entered allmulticast mode [ 262.043599][ T8957] rust_binder: got new transaction with bad transaction stack [ 262.043650][ T8957] rust_binder: 8956:8957 transaction to 8956 failed: EINVAL [ 262.810810][ T36] audit: type=1400 audit(1784673924.010:2172): avc: denied { unmount } for pid=7917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.274177][ T8992] netlink: 'syz.5.3221': attribute type 4 has an invalid length. [ 263.315635][ T8992] netlink: 'syz.5.3221': attribute type 4 has an invalid length. [ 263.345707][ T8992] netlink: 'syz.5.3221': attribute type 4 has an invalid length. [ 263.420423][ T8999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.423869][ T8999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.448144][ T8999] rust_binder: 8998:8999 transaction to 0 failed: ENOENT [ 263.675887][ T36] audit: type=1326 audit(1784673924.880:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9004 comm="syz.5.3227" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff25519de99 code=0x0 [ 264.542155][ T9041] overlayfs: missing 'lowerdir' [ 264.589743][ T9040] kvm: pic: non byte write [ 264.784746][ T9051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.798919][ T36] audit: type=1400 audit(1784673927.000:2174): avc: denied { create } for pid=9071 comm="syz.8.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.854949][ T9076] netlink: 'syz.5.3249': attribute type 32 has an invalid length. [ 266.521803][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3256'. [ 266.531219][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3256'. [ 266.766330][ T9109] tipc: New replicast peer: 172.30.0.6 [ 266.771928][ T9109] tipc: Enabled bearer , priority 10 [ 266.836795][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3262'. [ 266.885220][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3263'. [ 266.890107][ T661] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 266.896371][ T9114] tipc: Disabling bearer [ 267.065130][ T661] usb 5-1: Using ep0 maxpacket: 16 [ 267.071432][ T661] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 267.086180][ T661] usb 5-1: config 0 has no interface number 0 [ 267.097870][ T661] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 267.116751][ T661] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 267.136570][ T661] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 267.145862][ T661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.153924][ T661] usb 5-1: Product: syz [ 267.158367][ T661] usb 5-1: Manufacturer: syz [ 267.163037][ T661] usb 5-1: SerialNumber: syz [ 267.172762][ T661] usb 5-1: config 0 descriptor?? [ 267.179768][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.189850][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.401672][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.409166][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.619050][ T661] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 268.136671][ T36] audit: type=1400 audit(1784673929.340:2175): avc: denied { getopt } for pid=9141 comm="syz.7.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.516618][ T36] audit: type=1400 audit(1784673929.720:2176): avc: denied { setopt } for pid=9162 comm="syz.5.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.557309][ T36] audit: type=1400 audit(1784673929.720:2177): avc: denied { ioctl } for pid=9162 comm="syz.5.3283" path="socket:[72138]" dev="sockfs" ino=72138 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 269.636496][ T661] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 269.649616][ T9204] overlayfs: failed to clone upperpath [ 269.655563][ T661] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 269.666828][ T661] asix 5-1:0.34: probe with driver asix failed with error -71 [ 269.688730][ T661] usb 5-1: USB disconnect, device number 54 [ 270.628422][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3305'. [ 270.638980][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3305'. [ 271.855841][ T9248] netlink: 'syz.4.3310': attribute type 32 has an invalid length. [ 271.908414][ T9246] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 271.935298][ T9246] kvm: pic: non byte read [ 271.940006][ T9246] kvm: pic: non byte read [ 271.948839][ T9246] kvm: pic: non byte read [ 271.958690][ T9246] kvm: pic: non byte read [ 271.963307][ T9246] kvm: pic: non byte read [ 271.975388][ T9246] kvm: pic: non byte read [ 271.980060][ T9246] kvm: pic: non byte read [ 271.984717][ T9246] kvm: pic: non byte read [ 272.020501][ T9246] kvm: pic: level sensitive irq not supported [ 272.020653][ T9246] kvm: pic: non byte read [ 272.055465][ T9246] kvm: pic: single mode not supported [ 272.055545][ T9246] kvm: pic: non byte read [ 272.083844][ T9246] kvm: pic: level sensitive irq not supported [ 272.084083][ T9246] kvm: pic: single mode not supported [ 272.105679][ T9246] kvm: pic: single mode not supported [ 272.117896][ T9246] kvm: pic: single mode not supported [ 272.131874][ T9246] kvm: pic: single mode not supported [ 272.137533][ T9246] kvm: pic: level sensitive irq not supported [ 272.170425][ T9246] kvm: pic: level sensitive irq not supported [ 272.185932][ T9246] kvm: pic: single mode not supported [ 272.192124][ T9246] kvm: pic: level sensitive irq not supported [ 272.209422][ T9246] kvm: pic: single mode not supported [ 272.215660][ T9246] kvm: pic: level sensitive irq not supported [ 272.267425][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3317'. [ 272.425179][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.458962][ T9271] netlink: 'syz.5.3320': attribute type 1 has an invalid length. [ 272.485094][ T9271] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3320'. [ 272.548855][ T36] audit: type=1400 audit(1784673933.750:2178): avc: denied { mounton } for pid=9277 comm="syz.5.3322" path="/proc/1400/cgroup" dev="proc" ino=72856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 272.612797][ T36] audit: type=1400 audit(1784673933.770:2179): avc: denied { remount } for pid=9277 comm="syz.5.3322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 272.928794][ T36] audit: type=1400 audit(1784673934.130:2180): avc: denied { create } for pid=9290 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.976608][ T9293] tipc: Failed to remove unknown binding: 66,0,0/2886997007:38304928/38304930 [ 273.003250][ T9293] tipc: Failed to remove unknown binding: 66,0,0/2886997007:38304928/38304929 [ 273.027701][ T9293] tipc: Failed to remove unknown binding: 66,0,0/2886997007:38304928/38304930 [ 273.049572][ T9293] tipc: Failed to remove unknown binding: 66,0,0/2886997007:38304928/38304929 [ 273.113973][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 273.336022][ T67] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 273.515101][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 273.531382][ T67] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.579530][ T67] usb 6-1: config 0 has no interface number 0 [ 273.604626][ T67] usb 6-1: config 0 interface 184 has no altsetting 0 [ 273.611689][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.626256][ T67] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.636430][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.648327][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.666166][ T67] usb 6-1: Product: syz [ 273.674832][ T67] usb 6-1: Manufacturer: syz [ 273.684925][ T67] usb 6-1: SerialNumber: syz [ 273.702818][ T67] usb 6-1: config 0 descriptor?? [ 273.722119][ T67] smsc75xx v1.0.0 [ 274.341168][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.349837][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.423115][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 274.434053][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.297308][ T36] audit: type=1326 audit(1784673936.500:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.4.3348" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78e799de99 code=0x0 [ 276.271237][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 276.289272][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 276.299728][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 276.309586][ T67] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 276.319113][ T67] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 276.329006][ T67] usb 6-1: USB disconnect, device number 39 [ 277.049884][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 277.640920][ T36] audit: type=1400 audit(1784673938.840:2182): avc: denied { read } for pid=9401 comm="syz.8.3368" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 277.664524][ T36] audit: type=1400 audit(1784673938.860:2183): avc: denied { open } for pid=9401 comm="syz.8.3368" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.485118][ T661] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 278.675113][ T661] usb 6-1: Using ep0 maxpacket: 16 [ 278.681562][ T661] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 278.693183][ T661] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 278.702402][ T661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.711640][ T661] usb 6-1: config 0 descriptor?? [ 278.988091][ T661] usbhid 6-1:0.0: can't add hid device: -71 [ 278.998295][ T661] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 279.014865][ T661] usb 6-1: USB disconnect, device number 40 [ 279.190705][ T9441] mmap: syz.8.3384 (9441): VmData 29073408 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 280.491313][ T36] audit: type=1404 audit(1784673941.640:2184): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 280.537690][ T36] audit: type=1400 audit(1784673941.650:2185): avc: denied { connect } for pid=9469 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 280.610913][ T36] audit: type=1400 audit(1784673941.650:2186): avc: denied { write } for pid=9469 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 280.673825][ T36] audit: type=1400 audit(1784673941.650:2187): avc: denied { write } for pid=9469 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 280.739699][ T36] audit: type=1400 audit(1784673941.660:2188): avc: denied { setopt } for pid=9469 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 280.770266][ T36] audit: type=1400 audit(1784673941.680:2189): avc: denied { read write } for pid=9463 comm="syz.5.3393" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 280.793503][ T36] audit: type=1400 audit(1784673941.720:2190): avc: denied { read write } for pid=7917 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.817685][ T36] audit: type=1400 audit(1784673941.730:2191): avc: denied { read write } for pid=9474 comm="syz.8.3397" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 280.841239][ T36] audit: type=1400 audit(1784673941.740:2192): avc: denied { read write } for pid=9474 comm="syz.8.3397" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 280.866460][ T36] audit: type=1400 audit(1784673941.770:2193): avc: denied { create } for pid=9474 comm="syz.8.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 283.427180][ T9563] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3429'. [ 285.120143][ T9670] ,$V: renamed from lo [ 285.548913][ T36] kauditd_printk_skb: 186 callbacks suppressed [ 285.548933][ T36] audit: type=1400 audit(1784673946.750:2380): avc: denied { create } for pid=9695 comm="syz.4.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 285.645533][ T36] audit: type=1400 audit(1784673946.850:2381): avc: denied { read write } for pid=2591 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.674219][ T36] audit: type=1400 audit(1784673946.870:2382): avc: denied { create } for pid=9701 comm="syz.5.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 285.699771][ T36] audit: type=1400 audit(1784673946.870:2383): avc: denied { read } for pid=9701 comm="syz.5.3489" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 285.723481][ T36] audit: type=1400 audit(1784673946.870:2384): avc: denied { create } for pid=9701 comm="syz.5.3489" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 285.745009][ T36] audit: type=1400 audit(1784673946.870:2385): avc: denied { append } for pid=9701 comm="syz.5.3489" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 285.768042][ T36] audit: type=1400 audit(1784673946.890:2386): avc: denied { read write } for pid=2591 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.815111][ T36] audit: type=1400 audit(1784673946.920:2387): avc: denied { read write } for pid=7917 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.840273][ T36] audit: type=1400 audit(1784673946.980:2388): avc: denied { mounton } for pid=9706 comm="syz.8.3491" path="/165/file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 285.864568][ T36] audit: type=1400 audit(1784673946.990:2389): avc: denied { read write } for pid=7917 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 287.781866][ T9829] ip6gretap0: entered promiscuous mode [ 287.787959][ T9829] ip6gretap0: entered allmulticast mode [ 288.016031][ T9853] netlink: 'syz.8.3559': attribute type 58 has an invalid length. [ 288.230559][ T9878] kernel profiling enabled (shift: 63) [ 288.236202][ T9878] profiling shift: 63 too large [ 288.287168][ T9885] netlink: 'syz.8.3574': attribute type 58 has an invalid length. [ 288.633396][ T9920] netlink: 'syz.5.3590': attribute type 11 has an invalid length. [ 289.744194][T10010] netlink: 'syz.8.3635': attribute type 49 has an invalid length. [ 290.555118][ T36] kauditd_printk_skb: 17462 callbacks suppressed [ 290.555138][ T36] audit: type=1400 audit(1784673951.750:19516): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.586685][ T36] audit: type=1400 audit(1784673951.780:19517): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.615294][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.621847][ T150] audit: audit_lost=113 audit_rate_limit=0 audit_backlog_limit=64 [ 290.638956][T10102] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.645553][ T150] audit: backlog limit exceeded [ 290.647210][ T7917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.650682][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.664688][ T2591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.666367][T10102] audit: audit_lost=114 audit_rate_limit=0 audit_backlog_limit=64 [ 291.257270][T10190] bridge0: port 4(veth1_macvtap) entered blocking state [ 291.264348][T10190] bridge0: port 4(veth1_macvtap) entered disabled state [ 291.271602][T10190] veth1_macvtap: entered allmulticast mode [ 291.278561][T10190] veth1_macvtap: left allmulticast mode [ 295.565268][ T36] kauditd_printk_skb: 35334 callbacks suppressed [ 295.565288][ T36] audit: type=1400 audit(1784673956.770:54845): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.584703][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.593482][ T36] audit: type=1400 audit(1784673956.770:54846): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.600188][ T150] audit: audit_lost=118 audit_rate_limit=0 audit_backlog_limit=64 [ 295.621110][ T36] audit: type=1400 audit(1784673956.770:54847): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.628992][ T150] audit: backlog limit exceeded [ 295.649633][ T36] audit: type=1400 audit(1784673956.770:54848): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.656509][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.675700][ T36] audit: type=1400 audit(1784673956.770:54849): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.683123][ T150] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 300.575133][ T36] kauditd_printk_skb: 36822 callbacks suppressed [ 300.575154][ T36] audit: type=1400 audit(1784673961.780:90750): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.595945][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.603460][ T36] audit: type=1400 audit(1784673961.780:90751): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.609329][ T150] audit: audit_lost=427 audit_rate_limit=0 audit_backlog_limit=64 [ 300.630857][ T36] audit: type=1400 audit(1784673961.780:90752): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.638296][ T150] audit: backlog limit exceeded [ 300.659837][ T36] audit: type=1400 audit(1784673961.780:90753): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.665950][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.685630][ T36] audit: type=1400 audit(1784673961.780:90754): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.691929][ T150] audit: audit_lost=428 audit_rate_limit=0 audit_backlog_limit=64 [ 301.027785][ T967] bridge_slave_1: left allmulticast mode [ 301.033687][ T967] bridge_slave_1: left promiscuous mode [ 301.039766][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.047867][ T967] bridge_slave_0: left allmulticast mode [ 301.053711][ T967] bridge_slave_0: left promiscuous mode [ 301.059753][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.178323][ T967] veth1_macvtap: left promiscuous mode [ 301.184051][ T967] veth0_vlan: left promiscuous mode [ 301.367985][ T967] ------------[ cut here ]------------ [ 301.373574][ T967] WARNING: CPU: 1 PID: 967 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 301.383934][ T967] Modules linked in: [ 301.387914][ T967] CPU: 1 UID: 0 PID: 967 Comm: kworker/u8:16 Not tainted syzkaller #0 06b3c97831a10c77d09a2a0513f377ab490362d8 [ 301.399704][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.409854][ T967] Workqueue: netns cleanup_net [ 301.414822][ T967] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 301.420911][ T967] Code: e8 a1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 35 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 27 5b 7e fc 49 83 c7 08 eb c9 e8 1c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 301.440713][ T967] RSP: 0018:ffffc9000120fb90 EFLAGS: 00010293 [ 301.446866][ T967] RAX: ffffffff850916d4 RBX: ffff88812fb558c0 RCX: ffff888116615f00 [ 301.454895][ T967] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888137dc45a0 [ 301.462940][ T967] RBP: ffffc9000120fbb0 R08: ffffffff87d41ce7 R09: 1ffffffff0fa839c [ 301.470993][ T967] R10: dffffc0000000000 R11: fffffbfff0fa839d R12: dffffc0000000000 [ 301.479032][ T967] R13: dffffc0000000000 R14: ffff888137dc4000 R15: 00000000000005a0 [ 301.487152][ T967] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 301.496212][ T967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.502856][ T967] CR2: 00007fff808e5ec0 CR3: 000000010cf82000 CR4: 00000000003526b0 [ 301.510899][ T967] Call Trace: [ 301.514226][ T967] [ 301.517234][ T967] cleanup_net+0x6ba/0xc90 [ 301.521785][ T967] ? __cfi_cleanup_net+0x10/0x10 [ 301.526805][ T967] ? kick_pool+0xb9/0x540 [ 301.531347][ T967] process_scheduled_works+0x7f7/0x1060 [ 301.537015][ T967] worker_thread+0xc99/0x13f0 [ 301.541752][ T967] kthread+0x2c7/0x360 [ 301.545964][ T967] ? __cfi_worker_thread+0x10/0x10 [ 301.551139][ T967] ? __cfi_kthread+0x10/0x10 [ 301.555800][ T967] ret_from_fork+0x67/0xa0 [ 301.560326][ T967] ? __cfi_kthread+0x10/0x10 [ 301.564970][ T967] ret_from_fork_asm+0x1a/0x30 [ 301.569928][ T967] [ 301.572997][ T967] ---[ end trace 0000000000000000 ]--- [ 301.580121][ T967] ------------[ cut here ]------------ [ 301.585684][ T967] WARNING: CPU: 1 PID: 967 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 301.595890][ T967] Modules linked in: [ 301.599856][ T967] CPU: 1 UID: 0 PID: 967 Comm: kworker/u8:16 Tainted: G W syzkaller #0 06b3c97831a10c77d09a2a0513f377ab490362d8 [ 301.613223][ T967] Tainted: [W]=WARN [ 301.617109][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.627226][ T967] Workqueue: netns cleanup_net [ 301.632099][ T967] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 301.638257][ T967] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 e0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 d2 5a 7e fc 49 83 c7 08 eb c5 e8 c7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 b7 5a 7e fc 5b 41 5c 41 5e 41 [ 301.657983][ T967] RSP: 0018:ffffc9000120fb90 EFLAGS: 00010293 [ 301.664113][ T967] RAX: ffffffff85091729 RBX: ffff888137dc4800 RCX: ffff888116615f00 [ 301.672175][ T967] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888137dc4808 [ 301.680680][ T967] RBP: ffffc9000120fbb0 R08: ffffffff87d41ce7 R09: 1ffffffff0fa839c [ 301.688846][ T967] R10: dffffc0000000000 R11: fffffbfff0fa839d R12: dffffc0000000000 [ 301.696999][ T967] R13: dffffc0000000000 R14: ffff888137dc4000 R15: 0000000000000008 [ 301.705102][ T967] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 301.714100][ T967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.720842][ T967] CR2: 00007f7c16b69ff8 CR3: 0000000121d5c000 CR4: 00000000003526b0 [ 301.728892][ T967] Call Trace: [ 301.732223][ T967] [ 301.735272][ T967] cleanup_net+0x6ba/0xc90 [ 301.739751][ T967] ? __cfi_cleanup_net+0x10/0x10 [ 301.744755][ T967] ? kick_pool+0xb9/0x540 [ 301.749169][ T967] process_scheduled_works+0x7f7/0x1060 [ 301.754786][ T967] worker_thread+0xc99/0x13f0 [ 301.759543][ T967] kthread+0x2c7/0x360 [ 301.763935][ T967] ? __cfi_worker_thread+0x10/0x10 [ 301.769122][ T967] ? __cfi_kthread+0x10/0x10 [ 301.773773][ T967] ret_from_fork+0x67/0xa0 [ 301.778290][ T967] ? __cfi_kthread+0x10/0x10 [ 301.782944][ T967] ret_from_fork_asm+0x1a/0x30 [ 301.787827][ T967] [ 301.790902][ T967] ---[ end trace 0000000000000000 ]--- [ 301.804616][ T967] ------------[ cut here ]------------ [ 301.810162][ T967] WARNING: CPU: 1 PID: 967 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 301.820367][ T967] Modules linked in: [ 301.824347][ T967] CPU: 1 UID: 0 PID: 967 Comm: kworker/u8:16 Tainted: G W syzkaller #0 06b3c97831a10c77d09a2a0513f377ab490362d8 [ 301.837723][ T967] Tainted: [W]=WARN [ 301.841576][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.851719][ T967] Workqueue: netns cleanup_net [ 301.856587][ T967] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 301.862205][ T967] Code: 3c 20 00 74 08 48 89 df e8 8f ce f1 fc 48 8b 3b e8 a7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 88 b7 00 cc e8 12 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 06 1b 99 fc 0f 0b e9 18 fe ff ff e8 fa 1a [ 301.882041][ T967] RSP: 0018:ffffc9000120fb70 EFLAGS: 00010293 [ 301.888222][ T967] RAX: ffffffff84ee56de RBX: ffff88812fb558c0 RCX: ffff888116615f00 [ 301.896273][ T967] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888116615f00 [ 301.904318][ T967] RBP: ffffc9000120fb98 R08: ffffffff87d41ce7 R09: 1ffffffff0fa839c [ 301.912377][ T967] R10: dffffc0000000000 R11: fffffbfff0fa839d R12: 1ffffffff0fa80f0 [ 301.920525][ T967] R13: dffffc0000000000 R14: ffff88812fb564c0 R15: dffffc0000000000 [ 301.928928][ T967] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 301.937932][ T967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.944575][ T967] CR2: 00007f7c16b69ff8 CR3: 0000000121d5c000 CR4: 00000000003526b0 [ 301.952657][ T967] Call Trace: [ 301.955994][ T967] [ 301.958990][ T967] xfrm_net_exit+0x31/0x80 [ 301.963562][ T967] cleanup_net+0x6ba/0xc90 [ 301.968328][ T967] ? __cfi_cleanup_net+0x10/0x10 [ 301.973330][ T967] ? kick_pool+0xb9/0x540 [ 301.977758][ T967] process_scheduled_works+0x7f7/0x1060 [ 301.983450][ T967] worker_thread+0xc99/0x13f0 [ 301.988215][ T967] kthread+0x2c7/0x360 [ 301.992346][ T967] ? __cfi_worker_thread+0x10/0x10 [ 301.997542][ T967] ? __cfi_kthread+0x10/0x10 [ 302.002233][ T967] ret_from_fork+0x67/0xa0 [ 302.006736][ T967] ? __cfi_kthread+0x10/0x10 [ 302.011392][ T967] ret_from_fork_asm+0x1a/0x30 [ 302.016229][ T967] [ 302.019290][ T967] ---[ end trace 0000000000000000 ]--- [ 303.129471][ T351] usb 9-1: USB disconnect, device number 3 [ 303.135471][ T967] bridge_slave_1: left allmulticast mode [ 303.141150][ T967] bridge_slave_1: left promiscuous mode [ 303.175174][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.199705][ T967] bridge_slave_0: left allmulticast mode [ 303.215024][ T967] bridge_slave_0: left promiscuous mode [ 303.220736][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.338527][ T967] veth1_macvtap: left promiscuous mode [ 303.344224][ T967] veth0_vlan: left promiscuous mode [ 305.585343][ T36] kauditd_printk_skb: 39809 callbacks suppressed [ 305.585395][ T36] audit: type=1400 audit(1784673966.790:128127): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.612933][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.612953][ T150] audit: audit_lost=1241 audit_rate_limit=0 audit_backlog_limit=64 [ 305.612969][ T150] audit: backlog limit exceeded [ 305.613177][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.620304][ T36] audit: type=1400 audit(1784673966.790:128128): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.627817][ T150] audit: audit_lost=1242 audit_rate_limit=0 audit_backlog_limit=64 [ 305.632694][ T36] audit: type=1400 audit(1784673966.790:128129): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.638969][ T150] audit: backlog limit exceeded [ 305.660453][ T36] audit: type=1400 audit(1784673966.790:128130): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.595075][ T36] kauditd_printk_skb: 50250 callbacks suppressed [ 310.595096][ T36] audit: type=1400 audit(1784673971.790:177559): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.622625][ T36] audit: type=1400 audit(1784673971.800:177560): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.623661][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.643778][ T36] audit: type=1400 audit(1784673971.800:177561): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.650319][ T150] audit: audit_lost=1517 audit_rate_limit=0 audit_backlog_limit=64 [ 310.671956][ T36] audit: type=1400 audit(1784673971.800:177562): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.679644][ T150] audit: backlog limit exceeded [ 310.700861][ T36] audit: type=1400 audit(1784673971.800:177563): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.706856][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.727238][ T36] audit: type=1400 audit(1784673971.800:177564): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0