last executing test programs: 1m1.291649249s ago: executing program 0 (id=14): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000002c40)="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", 0x5ae, 0x6d91fb6100d850e9, 0x0, 0x0) 1m1.2250965s ago: executing program 0 (id=15): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m1.169160481s ago: executing program 0 (id=16): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000380), 0x0) 1m1.098180892s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x103) 1m1.076274403s ago: executing program 0 (id=21): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents(r1, &(0x7f0000001000)=""/4096, 0x1000) 1m0.975883384s ago: executing program 0 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0xf) 1m0.956552145s ago: executing program 32 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0xf) 53.411184884s ago: executing program 2 (id=187): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 53.396731544s ago: executing program 2 (id=188): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 53.341726985s ago: executing program 2 (id=189): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) kcmp(0xffffffffffffffff, r1, 0x1, r0, r0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 53.341558575s ago: executing program 2 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 53.322809245s ago: executing program 2 (id=191): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000002100)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000021c0)=r1) 53.213733807s ago: executing program 2 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) 53.176947187s ago: executing program 33 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) 39.856067761s ago: executing program 3 (id=416): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) write(r0, &(0x7f0000000040)="27df3bc20cdb7e73ab5bf753632d760bbd2bbcbe3de31e5b20023de09fff6e81e911dd07e2c8eef2", 0x28) 39.855279771s ago: executing program 3 (id=418): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="5b3d93a9b9", 0x5}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) 39.833389052s ago: executing program 3 (id=419): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 39.570218865s ago: executing program 3 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 39.548526896s ago: executing program 3 (id=424): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000000)='./file0\x00', 0x6a) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) 39.445615287s ago: executing program 3 (id=425): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x4, 0x0, 0x7, 0x7, 0x0, 0x2}, {0x8000000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0xfc}, {0x4, 0xd000, 0x4, 0x0, 0x0, 0x40, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x0, 0x0, 0xff, 0x4, 0xe, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x48}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x3, 0x1, 0x200000000000000]}) 39.445422577s ago: executing program 34 (id=425): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x4, 0x0, 0x7, 0x7, 0x0, 0x2}, {0x8000000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0xfc}, {0x4, 0xd000, 0x4, 0x0, 0x0, 0x40, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x0, 0x0, 0xff, 0x4, 0xe, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x48}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x3, 0x1, 0x200000000000000]}) 25.010410377s ago: executing program 1 (id=676): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)=' ', 0x5dc, 0x20000840, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 24.975553037s ago: executing program 1 (id=678): socket$inet6(0xa, 0x3, 0xfa) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 23.745289555s ago: executing program 1 (id=726): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 23.726547896s ago: executing program 1 (id=727): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 23.702922286s ago: executing program 1 (id=730): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') preadv(r2, &(0x7f0000000dc0)=[{&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/86, 0x56}], 0x2, 0x3, 0x3) 23.544248138s ago: executing program 1 (id=734): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 23.523853838s ago: executing program 35 (id=734): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 5.863901545s ago: executing program 7 (id=986): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 5.667204528s ago: executing program 7 (id=987): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0x284, 0x0, 0xb0}, {0x389, 0x0, 0x392f}, {0xc0000104, 0x0, 0xffffffffffffffff}]}) 5.569612019s ago: executing program 7 (id=989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4e11958f2678343843bdefbf4eab39736938500d8a6f7c3faccc4e2994750d4f30f6f1366b8af008ec00fc79b0e000000", 0x31}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.391515362s ago: executing program 7 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.357776842s ago: executing program 7 (id=993): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r0, &(0x7f0000000980)="a9", 0x1) 5.249559424s ago: executing program 7 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000000)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "001a43fe00"}, 0x38) 5.232351734s ago: executing program 36 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000000)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "001a43fe00"}, 0x38) 2.267808697s ago: executing program 8 (id=1051): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 2.173576978s ago: executing program 8 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f00000004c0), 0x7fff) 2.153802639s ago: executing program 8 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="8fa9d89a0c24f2420f23bcb9ce0000000f3264f3f236450f2286b8010000000701c1b9800000c00f3235008000000f30b9590a00000f328fa83887f600f30f1ec466baf80cb8389cac81ef66bafc0ced", 0x50}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.08436035s ago: executing program 8 (id=1063): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 1.863689993s ago: executing program 6 (id=1066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a17"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x8, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x7, 0xfffffffffffffffe], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.734409325s ago: executing program 6 (id=1067): openat$ashmem(0xffffffffffffff9c, 0x0, 0x280, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x33, 0x80, 0x3, "3d42e5d3", "4aab69b6"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x4, 0x6b, 0x88, 0x5, 0x810}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.170785133s ago: executing program 4 (id=1070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) lseek(r2, 0x10001, 0x0) 1.152479134s ago: executing program 4 (id=1072): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.053625065s ago: executing program 4 (id=1082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x2c000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1047711330ff2bb17b5508000000000000009bc400", '\\]?\x00'}, 0x38) 896.383397ms ago: executing program 8 (id=1076): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000200)=""/37, 0x25}], 0x1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 896.185267ms ago: executing program 5 (id=1077): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0600000001"], 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 893.316307ms ago: executing program 4 (id=1078): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x7b) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 864.387787ms ago: executing program 5 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1e0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa8) mount(0x0, 0x0, 0x0, 0x800, 0x0) getdents(r0, &(0x7f00000001c0)=""/68, 0x44) 844.590178ms ago: executing program 4 (id=1080): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000040)=0x6, 0x0, 0x4) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/78, 0x4e}], 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 840.793358ms ago: executing program 5 (id=1081): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x10042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x14080) 361.383145ms ago: executing program 6 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 360.840775ms ago: executing program 5 (id=1091): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x7}], 0x1, 0x0, 0x14, 0x0, 0x0, 0x2}) 302.181886ms ago: executing program 6 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 235.181707ms ago: executing program 5 (id=1085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x100ed94, 0x3401, 0x0, 0x60b}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 235.019247ms ago: executing program 6 (id=1086): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x10000000}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 217.894177ms ago: executing program 6 (id=1087): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 587.35µs ago: executing program 4 (id=1088): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 446.43µs ago: executing program 5 (id=1089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="8fa9d89a0c24f2420f23bcb9ce0000000f3264f3f236450f2286b8010000000701c1b9800000c00f3235008000000f30b9590a00000f328fa83887f600f30f1ec466baf80cb8389cac81ef66bafc0ced", 0x50}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 8 (id=1097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x5}) userfaultfd(0x80001) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4106, 0x100a, 0x99) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.732978][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 18.732997][ T36] audit: type=1400 audit(1752513129.970:59): avc: denied { transition } for pid=246 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.737296][ T36] audit: type=1400 audit(1752513129.970:60): avc: denied { noatsecure } for pid=246 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.740163][ T36] audit: type=1400 audit(1752513129.970:61): avc: denied { write } for pid=246 comm="sh" path="pipe:[1694]" dev="pipefs" ino=1694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.743332][ T36] audit: type=1400 audit(1752513129.970:62): avc: denied { rlimitinh } for pid=246 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.746041][ T36] audit: type=1400 audit(1752513129.970:63): avc: denied { siginh } for pid=246 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.198' (ED25519) to the list of known hosts. [ 26.955125][ T36] audit: type=1400 audit(1752513138.190:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.956648][ T282] cgroup: Unknown subsys name 'net' [ 26.977827][ T36] audit: type=1400 audit(1752513138.190:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.005219][ T36] audit: type=1400 audit(1752513138.230:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.005398][ T282] cgroup: Unknown subsys name 'devices' [ 27.210747][ T282] cgroup: Unknown subsys name 'hugetlb' [ 27.216416][ T282] cgroup: Unknown subsys name 'rlimit' [ 27.371894][ T36] audit: type=1400 audit(1752513138.610:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.395100][ T36] audit: type=1400 audit(1752513138.610:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.404834][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.420106][ T36] audit: type=1400 audit(1752513138.610:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.451587][ T36] audit: type=1400 audit(1752513138.670:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.459941][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.477093][ T36] audit: type=1400 audit(1752513138.670:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.511350][ T36] audit: type=1400 audit(1752513138.700:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.536912][ T36] audit: type=1400 audit(1752513138.700:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.380062][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387138][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.394313][ T290] bridge_slave_0: entered allmulticast mode [ 28.400864][ T290] bridge_slave_0: entered promiscuous mode [ 28.416717][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.423816][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.431054][ T290] bridge_slave_1: entered allmulticast mode [ 28.437331][ T290] bridge_slave_1: entered promiscuous mode [ 28.466253][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.473352][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.480580][ T292] bridge_slave_0: entered allmulticast mode [ 28.486925][ T292] bridge_slave_0: entered promiscuous mode [ 28.493407][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.500499][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.507628][ T292] bridge_slave_1: entered allmulticast mode [ 28.514030][ T292] bridge_slave_1: entered promiscuous mode [ 28.548193][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.555360][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.562657][ T291] bridge_slave_0: entered allmulticast mode [ 28.569070][ T291] bridge_slave_0: entered promiscuous mode [ 28.578287][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.585331][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.592611][ T289] bridge_slave_0: entered allmulticast mode [ 28.599055][ T289] bridge_slave_0: entered promiscuous mode [ 28.605317][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.612430][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.619571][ T291] bridge_slave_1: entered allmulticast mode [ 28.625858][ T291] bridge_slave_1: entered promiscuous mode [ 28.635674][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.642757][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.649878][ T289] bridge_slave_1: entered allmulticast mode [ 28.656163][ T289] bridge_slave_1: entered promiscuous mode [ 28.809592][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.816682][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.824049][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.831115][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.861715][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.868817][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.876119][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.883183][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.910362][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.917442][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.924782][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.931836][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.941371][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.948445][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.955737][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.962797][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.009868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.017608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.025124][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.032473][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.039833][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.047157][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.060979][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.068043][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.094014][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.101121][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.109118][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.116179][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.123893][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.130969][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.140849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147912][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.167063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.174150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.206086][ T291] veth0_vlan: entered promiscuous mode [ 29.222408][ T292] veth0_vlan: entered promiscuous mode [ 29.244531][ T289] veth0_vlan: entered promiscuous mode [ 29.255730][ T290] veth0_vlan: entered promiscuous mode [ 29.265115][ T291] veth1_macvtap: entered promiscuous mode [ 29.284966][ T292] veth1_macvtap: entered promiscuous mode [ 29.294545][ T290] veth1_macvtap: entered promiscuous mode [ 29.301862][ T289] veth1_macvtap: entered promiscuous mode [ 29.350532][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.688142][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.850515][ T65] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 29.866408][ T65] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 29.886820][ T65] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.908272][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.916328][ T65] usb 2-1: Product: syz [ 29.948279][ T65] usb 2-1: Manufacturer: syz [ 29.952942][ T65] usb 2-1: SerialNumber: syz [ 29.959550][ T65] usb 2-1: config 0 descriptor?? [ 29.964808][ T317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.974168][ T317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.184679][ T317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.192374][ T317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.487611][ T46] bridge_slave_1: left allmulticast mode [ 30.495553][ T46] bridge_slave_1: left promiscuous mode [ 30.503663][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.519131][ T46] bridge_slave_0: left allmulticast mode [ 30.524902][ T46] bridge_slave_0: left promiscuous mode [ 30.530776][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.603230][ T65] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 30.613446][ T369] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 30.624302][ T369] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 30.653902][ T46] veth1_macvtap: left promiscuous mode [ 30.666094][ T46] veth0_vlan: left promiscuous mode [ 30.823232][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.830686][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.837841][ T372] bridge_slave_0: entered allmulticast mode [ 30.848979][ T372] bridge_slave_0: entered promiscuous mode [ 30.862940][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.881402][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.889312][ T372] bridge_slave_1: entered allmulticast mode [ 30.895749][ T372] bridge_slave_1: entered promiscuous mode [ 30.976360][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.983495][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.990849][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.997914][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.043074][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.050595][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.070149][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.077235][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.085698][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.090596][ T392] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.092816][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.139247][ T372] veth0_vlan: entered promiscuous mode [ 31.152282][ T372] veth1_macvtap: entered promiscuous mode [ 31.214090][ T65] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 31.225577][ T65] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 62:e6:fe:95:b8:0e [ 31.240425][ T65] usb 2-1: USB disconnect, device number 2 [ 31.246826][ T65] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 31.276837][ T399] rust_binder: 399: no such ref 1 [ 31.282066][ T399] rust_binder: 399: no such ref 2 [ 31.385087][ T401] rust_binder: 400 RLIMIT_NICE not set [ 32.123634][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 32.123655][ T36] audit: type=1400 audit(1752513143.360:167): avc: denied { read } for pid=429 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.288141][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.449243][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.460278][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.470267][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.483248][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.492376][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.501124][ T45] usb 5-1: config 0 descriptor?? [ 32.548337][ T393] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.698164][ T393] usb 3-1: Using ep0 maxpacket: 16 [ 32.706185][ T393] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.717491][ T393] usb 3-1: config 1 has no interface number 1 [ 32.727818][ T393] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 32.747907][ T393] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.766152][ T393] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.778969][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.780839][ T451] rust_binder: 451: no such ref 1 [ 32.787828][ T393] usb 3-1: Product: syz [ 32.794493][ T451] rust_binder: 451: no such ref 2 [ 32.797309][ T393] usb 3-1: Manufacturer: syz [ 32.806577][ T393] usb 3-1: SerialNumber: syz [ 32.897029][ T453] rust_binder: 452 RLIMIT_NICE not set [ 32.923022][ T45] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 32.947202][ T45] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 33.016115][ T393] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.027566][ T393] usb 3-1: USB disconnect, device number 2 [ 33.028136][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.189244][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.200201][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.209995][ T307] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.219086][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.227704][ T307] usb 4-1: config 0 descriptor?? [ 33.539875][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (swapper/1) [ 33.637117][ T307] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.644666][ T307] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.652151][ T307] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.659734][ T307] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.667218][ T307] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.676164][ T307] playstation 0003:054C:0DF2.0002: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 33.754356][ T45] usb 5-1: USB disconnect, device number 2 [ 33.960468][ T36] audit: type=1400 audit(1752513145.200:168): avc: denied { ioctl } for pid=472 comm="syz.1.63" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3676 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.236985][ T307] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 34.246435][ T307] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 34.256085][ T307] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 34.265384][ T307] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 34.273688][ T307] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 34.286307][ T307] usb 4-1: USB disconnect, device number 2 [ 34.421145][ T36] audit: type=1400 audit(1752513145.660:169): avc: denied { execute } for pid=485 comm="syz.2.70" path="/28/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.566324][ T494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.578251][ T36] audit: type=1400 audit(1752513145.800:170): avc: denied { create } for pid=493 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.611653][ T36] audit: type=1400 audit(1752513145.840:171): avc: denied { ioctl } for pid=493 comm="syz.4.74" path="socket:[4865]" dev="sockfs" ino=4865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.642771][ T36] audit: type=1400 audit(1752513145.840:172): avc: denied { bind } for pid=493 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.662028][ T36] audit: type=1400 audit(1752513145.870:173): avc: denied { read write } for pid=501 comm="syz.2.78" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.686550][ T36] audit: type=1400 audit(1752513145.870:174): avc: denied { open } for pid=501 comm="syz.2.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.711541][ T36] audit: type=1400 audit(1752513145.870:175): avc: denied { ioctl } for pid=501 comm="syz.2.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.736887][ T36] audit: type=1400 audit(1752513145.870:176): avc: denied { create } for pid=501 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.819386][ T512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 34.828427][ T512] sit0: entered promiscuous mode [ 34.833460][ T512] sit0: entered allmulticast mode [ 34.885169][ T520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 35.121974][ T535] 9pnet: p9_errstr2errno: server reported unknown error syz0 [ 35.314621][ T554] input: syz0 as /devices/virtual/input/input5 [ 35.430360][ T566] pim6reg1: entered promiscuous mode [ 35.436249][ T566] pim6reg1: entered allmulticast mode [ 35.718556][ T603] pim6reg1: entered promiscuous mode [ 35.724055][ T603] pim6reg1: entered allmulticast mode [ 35.895958][ T623] input: syz0 as /devices/virtual/input/input6 [ 36.268151][ T650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 36.277328][ T650] sit0: entered promiscuous mode [ 36.284321][ T650] sit0: entered allmulticast mode [ 36.958133][ T445] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.108106][ T445] usb 4-1: Using ep0 maxpacket: 32 [ 37.114484][ T445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.125529][ T445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.135333][ T445] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 37.144514][ T445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.153154][ T445] usb 4-1: config 0 descriptor?? [ 37.268048][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 37.276895][ T36] audit: type=1400 audit(1752513148.500:204): avc: denied { getopt } for pid=700 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.564662][ T445] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 37.721622][ T36] audit: type=1400 audit(1752513148.960:205): avc: denied { ioctl } for pid=731 comm="syz.1.179" path="socket:[6476]" dev="sockfs" ino=6476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.818646][ T306] usb 4-1: USB disconnect, device number 3 [ 37.861395][ T36] audit: type=1400 audit(1752513149.100:206): avc: denied { map } for pid=736 comm="syz.1.181" path="socket:[6488]" dev="sockfs" ino=6488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.044999][ T36] audit: type=1400 audit(1752513149.280:207): avc: denied { write } for pid=747 comm="syz.2.185" name="unix" dev="proc" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.082542][ T36] audit: type=1400 audit(1752513149.320:208): avc: denied { transfer } for pid=749 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 38.257541][ T46] bridge_slave_1: left allmulticast mode [ 38.263304][ T46] bridge_slave_1: left promiscuous mode [ 38.269585][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.277333][ T46] bridge_slave_0: left allmulticast mode [ 38.283315][ T46] bridge_slave_0: left promiscuous mode [ 38.289812][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.351356][ T36] audit: type=1400 audit(1752513149.590:209): avc: denied { setopt } for pid=764 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.370898][ T36] audit: type=1400 audit(1752513149.590:210): avc: denied { write } for pid=764 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.390615][ T36] audit: type=1400 audit(1752513149.640:211): avc: denied { read } for pid=764 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.429262][ T36] audit: type=1400 audit(1752513149.660:212): avc: denied { write } for pid=767 comm="syz.3.197" name="/" dev="incremental-fs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.459953][ T46] veth1_macvtap: left promiscuous mode [ 38.465528][ T46] veth0_vlan: left promiscuous mode [ 38.473174][ T36] audit: type=1400 audit(1752513149.660:213): avc: denied { add_name } for pid=767 comm="syz.3.197" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.588129][ T445] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.610626][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.617745][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.624900][ T771] bridge_slave_0: entered allmulticast mode [ 38.631264][ T771] bridge_slave_0: entered promiscuous mode [ 38.637739][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.645022][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.652160][ T771] bridge_slave_1: entered allmulticast mode [ 38.658785][ T771] bridge_slave_1: entered promiscuous mode [ 38.728183][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.735259][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.742586][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749646][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.758089][ T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.779029][ T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.789227][ T445] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.798323][ T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.806424][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.807288][ T445] usb 2-1: config 0 descriptor?? [ 38.820986][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.833391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.840507][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.860251][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.867341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.893825][ T771] veth0_vlan: entered promiscuous mode [ 38.906396][ T771] veth1_macvtap: entered promiscuous mode [ 38.977225][ T788] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 38.987713][ T788] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 39.430522][ T445] usb 2-1: string descriptor 0 read error: -22 [ 39.831323][ T445] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 39.841952][ T445] usb 2-1: USB disconnect, device number 3 [ 39.888450][ T804] kvm: apic: phys broadcast and lowest prio [ 40.013027][ T810] random: crng reseeded on system resumption [ 40.378152][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.539423][ T306] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 40.556291][ T306] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 40.578861][ T306] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 40.588797][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.596884][ T306] usb 4-1: Product: syz [ 40.603249][ T306] usb 4-1: Manufacturer: syz [ 40.607931][ T306] usb 4-1: SerialNumber: syz [ 40.617101][ T306] usb 4-1: config 0 descriptor?? [ 40.623867][ T819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.631390][ T819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.750721][ T838] input: syz1 as /devices/virtual/input/input7 [ 40.808101][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.841259][ T819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.849010][ T819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.958149][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 40.964337][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.974512][ T307] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.986809][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.995921][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.004179][ T307] usb 2-1: Product: syz [ 41.008398][ T307] usb 2-1: Manufacturer: syz [ 41.013036][ T307] usb 2-1: SerialNumber: syz [ 41.019954][ T307] usb 2-1: selecting invalid altsetting 1 [ 41.078105][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.084261][ T798] Bluetooth: hci0: command 0x1003 tx timeout [ 41.258042][ T306] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 41.622869][ T307] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 41.638011][ T307] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 41.664000][ T307] usb 2-1: selecting invalid altsetting 1 [ 41.669958][ T307] cdc_ncm 2-1:1.0: bind() failure [ 41.677277][ T307] usb 2-1: USB disconnect, device number 4 [ 41.861332][ T306] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 41.872393][ T306] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 3a:9d:42:6c:bb:e7 [ 41.887384][ T306] usb 4-1: USB disconnect, device number 4 [ 41.901203][ T306] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 41.939928][ T860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.077631][ T878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.590684][ T917] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 42.881404][ T932] pim6reg1: entered promiscuous mode [ 42.890374][ T932] pim6reg1: entered allmulticast mode [ 42.947925][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 42.947945][ T36] audit: type=1400 audit(1752513154.180:249): avc: denied { ioctl } for pid=938 comm="syz.3.254" path="socket:[6087]" dev="sockfs" ino=6087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.980851][ T36] audit: type=1326 audit(1752513154.220:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.3.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dde78e929 code=0x0 [ 43.058138][ T445] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.098130][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.117212][ T36] audit: type=1400 audit(1752513154.350:251): avc: denied { map } for pid=949 comm="syz.1.259" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.145880][ T36] audit: type=1400 audit(1752513154.350:252): avc: denied { execute } for pid=949 comm="syz.1.259" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.169830][ T36] audit: type=1400 audit(1752513154.380:253): avc: denied { bind } for pid=951 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.190248][ T36] audit: type=1400 audit(1752513154.380:254): avc: denied { listen } for pid=951 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.209641][ T445] usb 6-1: Using ep0 maxpacket: 32 [ 43.211217][ T36] audit: type=1400 audit(1752513154.460:255): avc: denied { wake_alarm } for pid=955 comm="syz.1.262" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.219208][ T445] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.246086][ T445] usb 6-1: config 0 has no interfaces? [ 43.251798][ T445] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 43.260945][ T445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.269260][ T957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.281985][ T65] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 43.296018][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.304388][ T445] usb 6-1: config 0 descriptor?? [ 43.314733][ T65] usb 5-1: config 0 descriptor?? [ 43.385824][ T961] netlink: 1603 bytes leftover after parsing attributes in process `syz.1.264'. [ 43.526044][ T307] usb 6-1: USB disconnect, device number 2 [ 43.664325][ T972] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 44.065195][ T984] netlink: 'syz.5.275': attribute type 4 has an invalid length. [ 44.072999][ T984] netlink: 'syz.5.275': attribute type 27 has an invalid length. [ 44.080997][ T984] netlink: 3609 bytes leftover after parsing attributes in process `syz.5.275'. [ 44.099951][ T307] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.259248][ T307] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 44.268414][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.277180][ T307] usb 4-1: config 0 descriptor?? [ 44.358218][ T459] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.508145][ T459] usb 6-1: Using ep0 maxpacket: 16 [ 44.514505][ T459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.527768][ T65] usb 5-1: Cannot set autoneg [ 44.528101][ T459] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 44.536228][ T65] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 44.551120][ T459] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 44.566125][ T459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.574645][ T65] usb 5-1: USB disconnect, device number 3 [ 44.586147][ T459] usb 6-1: config 0 descriptor?? [ 45.001919][ T459] HID 045e:07da: Invalid code 65791 type 1 [ 45.012046][ T459] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input8 [ 45.028452][ T459] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 45.486973][ T307] usb 4-1: Cannot set autoneg [ 45.491838][ T307] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 45.504329][ T307] usb 4-1: USB disconnect, device number 5 [ 45.578292][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 45.624939][ T36] audit: type=1400 audit(1752513156.860:256): avc: denied { create } for pid=1008 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.646630][ T36] audit: type=1400 audit(1752513156.860:257): avc: denied { write } for pid=1008 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.666945][ T36] audit: type=1400 audit(1752513156.860:258): avc: denied { nlmsg_write } for pid=1008 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.818605][ T65] usb 6-1: USB disconnect, device number 3 [ 45.878118][ T445] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.028214][ T445] usb 2-1: Using ep0 maxpacket: 16 [ 46.039311][ T445] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.055714][ T445] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.068001][ T445] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.077345][ T445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.085422][ T445] usb 2-1: Product: syz [ 46.089764][ T445] usb 2-1: Manufacturer: syz [ 46.094394][ T445] usb 2-1: SerialNumber: syz [ 46.306470][ T445] usb 2-1: 0:2 : does not exist [ 46.315417][ T445] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 46.333006][ T445] usb 2-1: USB disconnect, device number 5 [ 46.385861][ T1045] netlink: 'syz.5.302': attribute type 11 has an invalid length. [ 46.408115][ T307] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.552817][ T1051] netlink: 164 bytes leftover after parsing attributes in process `syz.5.305'. [ 46.568133][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 46.579029][ T307] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.587338][ T307] usb 4-1: config 0 has no interface number 0 [ 46.593725][ T307] usb 4-1: config 0 interface 184 has no altsetting 0 [ 46.602205][ T307] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 46.618134][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.626191][ T307] usb 4-1: Product: syz [ 46.630869][ T307] usb 4-1: Manufacturer: syz [ 46.635706][ T307] usb 4-1: SerialNumber: syz [ 46.641333][ T307] usb 4-1: config 0 descriptor?? [ 46.649260][ T307] smsc75xx v1.0.0 [ 46.728482][ T1061] raw_sendmsg: syz.5.310 forgot to set AF_INET. Fix it! [ 46.923079][ T1083] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 46.993370][ T1095] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 47.652138][ T307] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 47.855757][ T307] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 47.868794][ T307] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 47.878810][ T307] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 47.901880][ T307] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 47.918182][ T307] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 47.940826][ T307] usb 4-1: USB disconnect, device number 6 [ 47.941250][ T1133] SELinux: failed to load policy [ 47.952132][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 47.952149][ T36] audit: type=1400 audit(1752513159.180:271): avc: denied { load_policy } for pid=1131 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.109657][ T36] audit: type=1400 audit(1752513159.350:272): avc: denied { write } for pid=1147 comm="syz.4.346" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.923316][ T1185] input: syz1 as /devices/virtual/input/input9 [ 48.998099][ T445] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.150473][ T445] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 49.160402][ T445] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 49.181070][ T445] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 49.190457][ T445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.198733][ T445] usb 6-1: Product: syz [ 49.203082][ T445] usb 6-1: Manufacturer: syz [ 49.207756][ T445] usb 6-1: SerialNumber: syz [ 49.213815][ T445] usb 6-1: config 0 descriptor?? [ 49.221344][ T1176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 49.228836][ T1176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 49.333864][ T36] audit: type=1400 audit(1752513160.570:273): avc: denied { getopt } for pid=1198 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.354674][ T1199] 9p: Unknown uid 00000000004294967295 [ 49.440382][ T1176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 49.449845][ T1176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 49.805113][ T36] audit: type=1400 audit(1752513161.040:274): avc: denied { map } for pid=1239 comm="syz.3.386" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 49.844775][ T36] audit: type=1400 audit(1752513161.080:275): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 49.878436][ T36] audit: type=1400 audit(1752513161.080:276): avc: denied { search } for pid=1243 comm="syz.3.389" name="/" dev="configfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.905865][ T36] audit: type=1400 audit(1752513161.080:277): avc: denied { read } for pid=1243 comm="syz.3.389" name="/" dev="configfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.934439][ T36] audit: type=1400 audit(1752513161.080:278): avc: denied { open } for pid=1243 comm="syz.3.389" path="/" dev="configfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.960419][ T36] audit: type=1400 audit(1752513161.080:279): avc: denied { setattr } for pid=1243 comm="syz.3.389" path="/" dev="configfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.172964][ T36] audit: type=1400 audit(1752513161.410:280): avc: denied { accept } for pid=1261 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.448135][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 50.458110][ T393] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.481464][ T445] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 50.492742][ T445] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 50.506811][ T445] usb 6-1: USB disconnect, device number 4 [ 50.513601][ T445] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 50.608167][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 50.613670][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 50.622133][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.634625][ T65] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.643053][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.653233][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.663722][ T65] usb 4-1: config 0 has no interface number 0 [ 50.669941][ T393] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.679298][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.688530][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 50.707908][ T393] usb 2-1: config 0 descriptor?? [ 50.712941][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.722022][ T393] hub 2-1:0.0: USB hub found [ 50.731265][ T65] usb 4-1: Product: syz [ 50.735502][ T65] usb 4-1: Manufacturer: syz [ 50.748081][ T65] usb 4-1: SerialNumber: syz [ 50.758733][ T65] usb 4-1: config 0 descriptor?? [ 50.927632][ T393] hub 2-1:0.0: 7 ports detected [ 50.932805][ T393] hub 2-1:0.0: insufficient power available to use all downstream ports [ 50.966144][ T65] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 50.973245][ T65] usb 4-1: No valid video chain found. [ 50.982276][ T65] usb 4-1: USB disconnect, device number 7 [ 51.070071][ T1318] netlink: 'syz.5.410': attribute type 4 has an invalid length. [ 51.096171][ T1318] netlink: 'syz.5.410': attribute type 4 has an invalid length. [ 51.131371][ T393] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 51.150109][ T393] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 51.177427][ T393] usbhid 2-1:0.0: can't add hid device: -71 [ 51.190300][ T393] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.218670][ T393] usb 2-1: USB disconnect, device number 6 [ 52.011934][ T305] bridge_slave_1: left allmulticast mode [ 52.018591][ T305] bridge_slave_1: left promiscuous mode [ 52.024620][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.032750][ T305] bridge_slave_0: left allmulticast mode [ 52.038695][ T305] bridge_slave_0: left promiscuous mode [ 52.044488][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.153236][ T305] veth1_macvtap: left promiscuous mode [ 52.158907][ T305] veth0_vlan: left promiscuous mode [ 52.261053][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.268147][ T1352] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.275331][ T1352] bridge_slave_0: entered allmulticast mode [ 52.282059][ T1352] bridge_slave_0: entered promiscuous mode [ 52.288740][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.296128][ T1352] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.303353][ T1352] bridge_slave_1: entered allmulticast mode [ 52.309851][ T1352] bridge_slave_1: entered promiscuous mode [ 52.374185][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.381276][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.388591][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.395634][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.421055][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.430065][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.440487][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.447576][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.458063][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.465164][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.493315][ T1352] veth0_vlan: entered promiscuous mode [ 52.515299][ T1370] rust_binder: Error while translating object. [ 52.515353][ T1370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 52.521898][ T1370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:254 [ 52.521963][ T1352] veth1_macvtap: entered promiscuous mode [ 52.972448][ T1400] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 53.072592][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 53.072610][ T36] audit: type=1400 audit(1752513164.310:287): avc: denied { create } for pid=1401 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.125332][ T36] audit: type=1326 audit(1752513164.360:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.4.448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f296838e929 code=0x0 [ 53.533385][ T36] audit: type=1400 audit(1752513164.770:289): avc: denied { listen } for pid=1419 comm="syz.6.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.553697][ T36] audit: type=1400 audit(1752513164.790:290): avc: denied { accept } for pid=1419 comm="syz.6.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.678194][ T393] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 53.821704][ T36] audit: type=1400 audit(1752513165.060:291): avc: denied { map } for pid=1440 comm="syz.6.463" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.855097][ T393] usb 6-1: Using ep0 maxpacket: 16 [ 53.862199][ T36] audit: type=1400 audit(1752513165.060:292): avc: denied { write } for pid=1440 comm="syz.6.463" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.888646][ T393] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.898873][ T393] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.915094][ T36] audit: type=1400 audit(1752513165.150:293): avc: denied { read } for pid=1447 comm="syz.1.466" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.915812][ T393] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.937798][ T36] audit: type=1400 audit(1752513165.150:294): avc: denied { open } for pid=1447 comm="syz.1.466" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.955711][ T393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.009863][ T393] usb 6-1: Product: syz [ 54.014074][ T393] usb 6-1: Manufacturer: syz [ 54.018930][ T393] usb 6-1: SerialNumber: syz [ 54.256264][ T393] usb 6-1: 0:2 : does not exist [ 54.268588][ T393] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 54.296294][ T393] usb 6-1: USB disconnect, device number 5 [ 54.921684][ T36] audit: type=1400 audit(1752513166.160:295): avc: denied { connect } for pid=1506 comm="syz.5.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.952797][ T36] audit: type=1400 audit(1752513166.190:296): avc: denied { mounton } for pid=1509 comm="syz.6.491" path="/proc/30/task" dev="proc" ino=11510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.331844][ T1545] fuse: root generation should be zero [ 55.348113][ T306] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.508107][ T306] usb 7-1: Using ep0 maxpacket: 32 [ 55.514767][ T306] usb 7-1: config 0 has an invalid interface number: 213 but max is 0 [ 55.522992][ T306] usb 7-1: config 0 has no interface number 0 [ 55.529190][ T306] usb 7-1: config 0 interface 213 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.540307][ T306] usb 7-1: config 0 interface 213 has no altsetting 0 [ 55.557267][ T306] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=1d.85 [ 55.566919][ T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.575206][ T306] usb 7-1: Product: syz [ 55.579781][ T306] usb 7-1: Manufacturer: syz [ 55.584416][ T306] usb 7-1: SerialNumber: syz [ 55.590285][ T306] usb 7-1: config 0 descriptor?? [ 55.894572][ T306] usb 7-1: USB disconnect, device number 2 [ 56.174284][ T12] bridge_slave_1: left allmulticast mode [ 56.180148][ T12] bridge_slave_1: left promiscuous mode [ 56.185920][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.193734][ T12] bridge_slave_0: left allmulticast mode [ 56.201256][ T12] bridge_slave_0: left promiscuous mode [ 56.207181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.404149][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.414873][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.422385][ T1578] bridge_slave_0: entered allmulticast mode [ 56.429639][ T1578] bridge_slave_0: entered promiscuous mode [ 56.440901][ T12] veth1_macvtap: left promiscuous mode [ 56.446592][ T12] veth0_vlan: left promiscuous mode [ 56.578646][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.589504][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.597035][ T1578] bridge_slave_1: entered allmulticast mode [ 56.606689][ T1578] bridge_slave_1: entered promiscuous mode [ 56.748100][ T306] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 56.774084][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.781270][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.791563][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.798688][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.844064][ T1578] veth0_vlan: entered promiscuous mode [ 56.864542][ T1578] veth1_macvtap: entered promiscuous mode [ 56.898377][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 56.920206][ T306] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.938592][ T306] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.947510][ T306] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.968437][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.978441][ T306] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.992719][ T306] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.006261][ T306] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.017194][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.034634][ T306] usb 6-1: config 0 descriptor?? [ 57.244999][ T306] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.269191][ T306] usb 6-1: USB disconnect, device number 6 [ 57.276279][ T306] usblp0: removed [ 57.688115][ T306] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 57.838268][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 57.855356][ T306] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.878296][ T306] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.897116][ T306] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.909620][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.919495][ T306] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.929572][ T306] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.942834][ T306] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.952097][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.968483][ T306] usb 6-1: config 0 descriptor?? [ 58.199008][ T306] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.365618][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 58.365637][ T36] audit: type=1400 audit(1752513169.600:299): avc: denied { accept } for pid=1665 comm="syz.6.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.405421][ T36] audit: type=1400 audit(1752513169.640:300): avc: denied { read write } for pid=1593 comm="syz.5.523" name="lp0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 58.430091][ T36] audit: type=1400 audit(1752513169.640:301): avc: denied { open } for pid=1593 comm="syz.5.523" path="/dev/usb/lp0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 58.430752][ T306] usb 6-1: USB disconnect, device number 7 [ 58.461041][ T36] audit: type=1400 audit(1752513169.670:302): avc: denied { ioctl } for pid=1593 comm="syz.5.523" path="/dev/usb/lp0" dev="devtmpfs" ino=514 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 58.489087][ T306] usblp0: removed [ 59.751501][ T36] audit: type=1400 audit(1752513170.990:303): avc: denied { mount } for pid=1730 comm="syz.5.578" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.278114][ T65] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.352810][ T1764] netlink: 'syz.4.593': attribute type 4 has an invalid length. [ 60.438360][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 60.448962][ T65] usb 6-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 60.460765][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.472840][ T36] audit: type=1326 audit(1752513171.710:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.1.604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f309038e929 code=0x0 [ 60.495886][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.505347][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.513407][ T65] usb 6-1: Product: syz [ 60.517586][ T65] usb 6-1: Manufacturer: syz [ 60.522241][ T65] usb 6-1: SerialNumber: syz [ 60.731296][ T65] usb 6-1: 0:2 : does not exist [ 60.740811][ T65] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 60.752509][ T65] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 60.762541][ T65] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 60.774033][ T65] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 60.785000][ T65] usb 6-1: USB disconnect, device number 8 [ 60.796571][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.348737][ T36] audit: type=1400 audit(1752513172.590:305): avc: denied { execute } for pid=1790 comm="syz.4.601" name="file0" dev="ramfs" ino=16576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 61.348772][ T1791] process 'syz.4.601' launched './file0' with NULL argv: empty string added [ 61.418109][ T36] audit: type=1400 audit(1752513172.640:306): avc: denied { execute_no_trans } for pid=1790 comm="syz.4.601" path="/file0" dev="ramfs" ino=16576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 61.838093][ T306] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.010793][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 62.020979][ T306] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 62.034821][ T306] usb 2-1: config 0 has no interface number 0 [ 62.047743][ T306] usb 2-1: config 0 interface 213 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.081864][ T306] usb 2-1: config 0 interface 213 has no altsetting 0 [ 62.105242][ T306] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=1d.85 [ 62.124518][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.143015][ T306] usb 2-1: Product: syz [ 62.154553][ T306] usb 2-1: Manufacturer: syz [ 62.164602][ T306] usb 2-1: SerialNumber: syz [ 62.178445][ T306] usb 2-1: config 0 descriptor?? [ 62.587566][ T306] usb 2-1: USB disconnect, device number 7 [ 64.173821][ T1892] syzkaller0: entered allmulticast mode [ 64.179758][ T1892] syzkaller0: entered promiscuous mode [ 64.186690][ T1892] syzkaller0 (unregistering): left promiscuous mode [ 64.193534][ T1892] syzkaller0 (unregistering): left allmulticast mode [ 64.877157][ T307] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.048110][ T307] usb 7-1: Using ep0 maxpacket: 16 [ 65.054433][ T307] usb 7-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 65.064814][ T307] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.077490][ T307] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.086639][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.094704][ T307] usb 7-1: Product: syz [ 65.098950][ T307] usb 7-1: Manufacturer: syz [ 65.103562][ T307] usb 7-1: SerialNumber: syz [ 65.142230][ T36] audit: type=1400 audit(1752513176.380:307): avc: denied { mount } for pid=1936 comm="syz.5.661" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 65.312450][ T307] usb 7-1: 0:2 : does not exist [ 65.321035][ T307] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 65.342371][ T307] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 65.354287][ T307] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 65.370890][ T307] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 65.386971][ T307] usb 7-1: USB disconnect, device number 3 [ 65.396913][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.373307][ T36] audit: type=1400 audit(1752513177.610:308): avc: denied { ioctl } for pid=1963 comm="syz.4.673" path="socket:[22096]" dev="sockfs" ino=22096 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.529726][ T1976] syzkaller0: entered allmulticast mode [ 66.540584][ T1976] syzkaller0: entered promiscuous mode [ 66.555716][ T1976] syzkaller0 (unregistering): left promiscuous mode [ 66.568150][ T1976] syzkaller0 (unregistering): left allmulticast mode [ 66.788122][ T445] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 66.940855][ T1999] syzkaller0: entered allmulticast mode [ 66.946994][ T1999] syzkaller0: entered promiscuous mode [ 66.950675][ T445] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.965215][ T445] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.965966][ T1999] syzkaller0 (unregistering): left promiscuous mode [ 66.981695][ T1999] syzkaller0 (unregistering): left allmulticast mode [ 66.989014][ T445] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.998140][ T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.006324][ T445] usb 2-1: SerialNumber: syz [ 67.214448][ T445] usb 2-1: 0:2 : does not exist [ 67.247351][ T445] usb 2-1: USB disconnect, device number 8 [ 67.287104][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.811919][ T36] audit: type=1400 audit(1752513179.040:309): avc: denied { unmount } for pid=1578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.835666][ T36] audit: type=1400 audit(1752513179.070:310): avc: denied { ioctl } for pid=2089 comm="syz.4.729" path="/" dev="configfs" ino=2441 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.921733][ T305] bridge_slave_1: left allmulticast mode [ 67.927498][ T305] bridge_slave_1: left promiscuous mode [ 67.933437][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.947377][ T305] bridge_slave_0: left allmulticast mode [ 67.953251][ T305] bridge_slave_0: left promiscuous mode [ 67.959208][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.080508][ T305] veth1_macvtap: left promiscuous mode [ 68.091697][ T305] veth0_vlan: left promiscuous mode [ 68.157933][ T2113] kvm: apic: phys broadcast and lowest prio [ 68.247326][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.254450][ T2111] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.263955][ T2111] bridge_slave_0: entered allmulticast mode [ 68.270461][ T2111] bridge_slave_0: entered promiscuous mode [ 68.277068][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.284160][ T2111] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.291256][ T2111] bridge_slave_1: entered allmulticast mode [ 68.297695][ T2111] bridge_slave_1: entered promiscuous mode [ 68.383351][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.390467][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.397759][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.404827][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.433004][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.441356][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.451417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.458496][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.467780][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.474988][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.511030][ T2111] veth0_vlan: entered promiscuous mode [ 68.532778][ T2111] veth1_macvtap: entered promiscuous mode [ 68.565587][ T36] audit: type=1400 audit(1752513179.800:311): avc: denied { mount } for pid=2111 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.572110][ T2139] random: crng reseeded on system resumption [ 68.682797][ T2145] kvm: apic: phys broadcast and lowest prio [ 68.811839][ T36] audit: type=1400 audit(1752513180.050:312): avc: denied { write } for pid=31 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24001 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.907902][ T2166] input: syz1 as /devices/virtual/input/input10 [ 69.708123][ T2197] input: syz1 as /devices/virtual/input/input11 [ 69.744520][ T2200] random: crng reseeded on system resumption [ 69.973556][ T2219] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 70.178790][ T2231] pim6reg1: entered promiscuous mode [ 70.194384][ T2231] pim6reg1: entered allmulticast mode [ 70.238137][ T445] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.400840][ T445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.412019][ T445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.421987][ T445] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.434089][ T445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.445243][ T445] usb 7-1: config 0 descriptor?? [ 71.054250][ T445] usb 7-1: string descriptor 0 read error: -22 [ 71.237988][ T2243] input: syz1 as /devices/virtual/input/input12 [ 71.270362][ T2247] netlink: 1599 bytes leftover after parsing attributes in process `syz.4.799'. [ 71.287140][ T2247] t: renamed from tunl0 (while UP) [ 71.324430][ T2251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.377036][ T2257] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 71.390927][ T2256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.460655][ T445] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 71.476560][ T445] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 71.492405][ T445] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 71.509853][ T445] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 71.521174][ T445] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 71.534180][ T445] usb 7-1: USB disconnect, device number 4 [ 71.960192][ T2279] netlink: 'syz.7.810': attribute type 4 has an invalid length. [ 71.967890][ T2279] netlink: 'syz.7.810': attribute type 27 has an invalid length. [ 71.976026][ T2279] netlink: 3609 bytes leftover after parsing attributes in process `syz.7.810'. [ 72.192630][ T2300] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 72.458156][ T307] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.609231][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.620331][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.630124][ T307] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.639256][ T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.648328][ T307] usb 6-1: config 0 descriptor?? [ 73.256841][ T307] usb 6-1: string descriptor 0 read error: -22 [ 73.328135][ T445] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.478120][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.478144][ T798] Bluetooth: hci0: command 0x1003 tx timeout [ 73.484397][ T445] usb 8-1: Using ep0 maxpacket: 32 [ 73.498116][ T445] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.508318][ T445] usb 8-1: config 0 has no interfaces? [ 73.513815][ T445] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 73.522897][ T445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.532051][ T445] usb 8-1: config 0 descriptor?? [ 73.658455][ T307] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 73.667942][ T307] usb 6-1: USB disconnect, device number 9 [ 73.743070][ T445] usb 8-1: USB disconnect, device number 2 [ 74.278695][ T445] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.418091][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 74.439513][ T445] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.465257][ T445] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.484585][ T445] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.494100][ T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.502339][ T445] usb 5-1: SerialNumber: syz [ 74.589485][ T31] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 74.598637][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.607683][ T31] usb 6-1: config 0 descriptor?? [ 74.717079][ T445] usb 5-1: 0:2 : does not exist [ 74.722095][ T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.733269][ T445] usb 5-1: USB disconnect, device number 4 [ 74.878219][ T65] usb 8-1: Using ep0 maxpacket: 16 [ 74.888828][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.899882][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.912732][ T65] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.922098][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.936551][ T65] usb 8-1: config 0 descriptor?? [ 75.253710][ T2366] netlink: 'syz.4.853': attribute type 11 has an invalid length. [ 75.278290][ T2368] netlink: 164 bytes leftover after parsing attributes in process `syz.4.854'. [ 75.346151][ T65] HID 045e:07da: Invalid code 65791 type 1 [ 75.356929][ T65] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0008/input/input13 [ 75.371516][ T65] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 75.446181][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.817414][ T31] usb 6-1: Cannot set autoneg [ 75.822230][ T31] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 75.834671][ T31] usb 6-1: USB disconnect, device number 10 [ 76.169016][ T65] usb 8-1: USB disconnect, device number 3 [ 76.704928][ T2397] netlink: 164 bytes leftover after parsing attributes in process `syz.7.864'. [ 77.118130][ T307] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.268103][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 77.274422][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.285519][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.298368][ T307] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.307417][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.316597][ T307] usb 5-1: config 0 descriptor?? [ 77.478103][ T798] Bluetooth: hci0: command 0x1003 tx timeout [ 77.478100][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.729383][ T307] HID 045e:07da: Invalid code 65791 type 1 [ 77.738347][ T307] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input14 [ 77.754696][ T307] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 78.156094][ T36] audit: type=1326 audit(1752513189.390:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.5.882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9ebb8e929 code=0x0 [ 78.338114][ T65] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.508086][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 78.518807][ T65] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.527007][ T65] usb 7-1: config 0 has no interface number 0 [ 78.548107][ T65] usb 7-1: config 0 interface 184 has no altsetting 0 [ 78.550512][ T307] usb 5-1: USB disconnect, device number 5 [ 78.563131][ T65] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.572817][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.581014][ T65] usb 7-1: Product: syz [ 78.585375][ T65] usb 7-1: Manufacturer: syz [ 78.590032][ T65] usb 7-1: SerialNumber: syz [ 78.596773][ T65] usb 7-1: config 0 descriptor?? [ 78.605520][ T65] smsc75xx v1.0.0 [ 79.616161][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 79.826916][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 79.842143][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 79.859447][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 79.878188][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.887671][ T65] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 79.908167][ T65] usb 7-1: USB disconnect, device number 5 [ 80.177077][ T2489] input: syz1 as /devices/virtual/input/input15 [ 81.138152][ T65] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.222963][ T2535] 9p: Unknown uid 00000000004294967295 [ 81.288107][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 81.294715][ T65] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.306907][ T65] usb 8-1: config 0 has no interface number 0 [ 81.313243][ T65] usb 8-1: config 0 interface 184 has no altsetting 0 [ 81.329309][ T65] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.343462][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.351554][ T65] usb 8-1: Product: syz [ 81.355736][ T65] usb 8-1: Manufacturer: syz [ 81.361481][ T65] usb 8-1: SerialNumber: syz [ 81.367149][ T65] usb 8-1: config 0 descriptor?? [ 81.376590][ T65] smsc75xx v1.0.0 [ 81.748091][ T306] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.898083][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 81.904449][ T306] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 81.913009][ T306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.923393][ T306] usb 5-1: config 0 has no interface number 0 [ 81.931203][ T306] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 81.940580][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.948773][ T306] usb 5-1: Product: syz [ 81.953096][ T306] usb 5-1: Manufacturer: syz [ 81.957757][ T306] usb 5-1: SerialNumber: syz [ 81.964676][ T306] usb 5-1: config 0 descriptor?? [ 82.173970][ T306] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 82.181760][ T306] usb 5-1: No valid video chain found. [ 82.195721][ T306] usb 5-1: USB disconnect, device number 6 [ 82.589684][ T65] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 82.659422][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.666981][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.674235][ T2576] bridge_slave_0: entered allmulticast mode [ 82.681084][ T2576] bridge_slave_0: entered promiscuous mode [ 82.687752][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.694869][ T2576] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.702146][ T2576] bridge_slave_1: entered allmulticast mode [ 82.708742][ T2576] bridge_slave_1: entered promiscuous mode [ 82.736997][ T36] audit: type=1400 audit(1752513193.970:314): avc: denied { mounton } for pid=2582 comm="syz.4.944" path="/file0" dev="ramfs" ino=26521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 82.738104][ T2583] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 82.801099][ T65] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.812363][ T65] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 82.831149][ T65] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 82.842663][ T65] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 82.860945][ T65] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.870567][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.877667][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.878350][ T65] usb 8-1: USB disconnect, device number 4 [ 82.885041][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.897866][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.927026][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.934364][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.944427][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.951503][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.960693][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.967767][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.994949][ T2576] veth0_vlan: entered promiscuous mode [ 83.006359][ T2576] veth1_macvtap: entered promiscuous mode [ 83.148135][ T445] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.309395][ T445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 83.319541][ T445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 83.335436][ T445] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 83.344810][ T445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.357108][ T445] usb 5-1: Product: syz [ 83.366771][ T445] usb 5-1: Manufacturer: syz [ 83.371533][ T445] usb 5-1: SerialNumber: syz [ 83.377180][ T445] usb 5-1: config 0 descriptor?? [ 83.382652][ T2588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.399755][ T2588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.612496][ T2588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.620041][ T2588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.678243][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 83.828201][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 83.834907][ T65] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 83.843450][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.853670][ T65] usb 7-1: config 0 has no interface number 0 [ 83.861123][ T65] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 83.870296][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.878766][ T65] usb 7-1: Product: syz [ 83.888096][ T65] usb 7-1: Manufacturer: syz [ 83.892799][ T65] usb 7-1: SerialNumber: syz [ 83.899041][ T65] usb 7-1: config 0 descriptor?? [ 84.415784][ T2618] netlink: 'syz.7.959': attribute type 4 has an invalid length. [ 84.435791][ T2618] netlink: 'syz.7.959': attribute type 4 has an invalid length. [ 84.579101][ T65] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 84.585592][ T65] usb 7-1: No valid video chain found. [ 84.594814][ T65] usb 7-1: USB disconnect, device number 6 [ 84.793180][ T445] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 84.803951][ T445] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 84.817362][ T445] usb 5-1: USB disconnect, device number 7 [ 84.824051][ T445] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 85.450032][ T2681] rust_binder: Error while translating object. [ 85.450081][ T2681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 85.456567][ T2681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:146 [ 85.678138][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.853249][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 85.863347][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 85.876404][ T31] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 85.885823][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.894238][ T31] usb 7-1: Product: syz [ 85.898700][ T31] usb 7-1: Manufacturer: syz [ 85.903727][ T31] usb 7-1: SerialNumber: syz [ 85.910599][ T31] usb 7-1: config 0 descriptor?? [ 85.915979][ T2678] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 85.923280][ T2678] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 86.030476][ T2719] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 86.136669][ T2678] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 86.144177][ T2678] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 86.210954][ T207] bridge_slave_1: left allmulticast mode [ 86.216765][ T207] bridge_slave_1: left promiscuous mode [ 86.223024][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.231198][ T207] bridge_slave_0: left allmulticast mode [ 86.236954][ T207] bridge_slave_0: left promiscuous mode [ 86.243025][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.297797][ T36] audit: type=1326 audit(1752513197.530:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2727 comm="syz.5.1004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9897f8e929 code=0x0 [ 86.406724][ T207] veth1_macvtap: left promiscuous mode [ 86.412356][ T207] veth0_vlan: left promiscuous mode [ 86.509141][ T2731] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.516224][ T2731] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.532114][ T2731] bridge_slave_0: entered allmulticast mode [ 86.543757][ T2731] bridge_slave_0: entered promiscuous mode [ 86.552233][ T2731] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.559329][ T2731] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.566416][ T2731] bridge_slave_1: entered allmulticast mode [ 86.572830][ T2731] bridge_slave_1: entered promiscuous mode [ 86.640306][ T2731] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.647397][ T2731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.654833][ T2731] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.661937][ T2731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.692263][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.700207][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.710521][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.717585][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.727684][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.734880][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.768449][ T2731] veth0_vlan: entered promiscuous mode [ 86.782000][ T2731] veth1_macvtap: entered promiscuous mode [ 86.819408][ T2744] netlink: 'syz.8.996': attribute type 4 has an invalid length. [ 86.830980][ T2744] netlink: 'syz.8.996': attribute type 4 has an invalid length. [ 87.156159][ T31] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 87.168280][ T31] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 87.197427][ T31] usb 7-1: USB disconnect, device number 7 [ 87.204071][ T31] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 87.559470][ T2807] rust_binder: Error while translating object. [ 87.559511][ T2807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 87.569330][ T2807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:604 [ 87.593360][ T2809] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 87.628139][ T36] audit: type=1326 audit(1752513198.860:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2810 comm="syz.4.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f296838e929 code=0x0 [ 87.724520][ T36] audit: type=1326 audit(1752513198.960:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2819 comm="syz.8.1023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab6d98e929 code=0x0 [ 87.958368][ T393] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.108084][ T393] usb 6-1: Using ep0 maxpacket: 32 [ 88.114402][ T393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.125850][ T393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.136247][ T393] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.145406][ T393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.154292][ T393] usb 6-1: config 0 descriptor?? [ 88.161225][ T393] hub 6-1:0.0: USB hub found [ 88.361845][ T393] hub 6-1:0.0: 7 ports detected [ 88.366981][ T393] hub 6-1:0.0: insufficient power available to use all downstream ports [ 88.568264][ T393] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 88.581294][ T393] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 88.590536][ T393] usbhid 6-1:0.0: can't add hid device: -71 [ 88.603323][ T393] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 88.641564][ T393] usb 6-1: USB disconnect, device number 11 [ 88.823281][ T36] audit: type=1326 audit(1752513200.060:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2865 comm="syz.6.1041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f115178e929 code=0x0 [ 89.254683][ T2893] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 89.678151][ T393] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.828100][ T393] usb 9-1: Using ep0 maxpacket: 16 [ 89.834438][ T393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.844654][ T393] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.855163][ T393] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.864305][ T393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.872437][ T393] usb 9-1: Product: syz [ 89.876634][ T393] usb 9-1: Manufacturer: syz [ 89.881338][ T393] usb 9-1: SerialNumber: syz [ 90.018117][ T306] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 90.091788][ T393] usb 9-1: 0:2 : does not exist [ 90.111737][ T393] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 90.124481][ T393] usb 9-1: USB disconnect, device number 2 [ 90.135755][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.168078][ T306] usb 7-1: Using ep0 maxpacket: 32 [ 90.178976][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.190172][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.200207][ T306] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.209538][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.219035][ T306] usb 7-1: config 0 descriptor?? [ 90.228638][ T306] hub 7-1:0.0: USB hub found [ 90.426488][ T306] hub 7-1:0.0: 7 ports detected [ 90.437419][ T306] hub 7-1:0.0: insufficient power available to use all downstream ports [ 90.627424][ T306] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 90.635758][ T306] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 90.646074][ T306] usbhid 7-1:0.0: can't add hid device: -71 [ 90.653484][ T306] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 90.688488][ T306] usb 7-1: USB disconnect, device number 8 [ 91.549635][ T2976] ------------[ cut here ]------------ [ 91.555150][ T2976] WARNING: CPU: 1 PID: 2976 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 91.565080][ T2976] Modules linked in: [ 91.569054][ T2976] CPU: 1 UID: 0 PID: 2976 Comm: syz.8.1097 Not tainted 6.12.30-syzkaller-g9f514cf3d96b #0 b44325a89f2717037c59ecba3358fb1dc4dbc936 [ 91.582581][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.592712][ T2976] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 91.598714][ T2976] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 91.618508][ T2976] RSP: 0018:ffffc9000119fc88 EFLAGS: 00010202 [ 91.624735][ T2976] RAX: 1ffffd1ffff8593a RBX: ffffc9000126a8e8 RCX: ffffffff816d8c29 [ 91.632761][ T2976] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc2c9d0 [ 91.640913][ T2976] RBP: ffffc9000119fcf0 R08: ffffe8ffffc2c9d7 R09: 1ffffd1ffff8593a [ 91.649164][ T2976] R10: dffffc0000000000 R11: fffff91ffff8593b R12: dffffc0000000000 [ 91.657170][ T2976] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc2c9d0 [ 91.665208][ T2976] FS: 00005555561d4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 91.674257][ T2976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.680904][ T2976] CR2: 0000001b2cf11ff8 CR3: 0000000121b26000 CR4: 00000000003526b0 [ 91.689103][ T2976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.697121][ T2976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.705169][ T2976] Call Trace: [ 91.708502][ T2976] [ 91.711461][ T2976] kvm_put_kvm+0x1100/0x12b0 [ 91.716085][ T2976] ? __cfi_kvm_vm_release+0x10/0x10 [ 91.721360][ T2976] kvm_vm_release+0x47/0x70 [ 91.725898][ T2976] __fput+0x1fb/0xa00 [ 91.729931][ T2976] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 91.735566][ T2976] ____fput+0x20/0x30 [ 91.739632][ T2976] task_work_run+0x1e3/0x250 [ 91.744256][ T2976] ? __cfi_task_work_run+0x10/0x10 [ 91.749425][ T2976] ? __kasan_check_write+0x18/0x20 [ 91.754583][ T2976] resume_user_mode_work+0x36/0x50 [ 91.759854][ T2976] syscall_exit_to_user_mode+0x64/0xb0 [ 91.765353][ T2976] do_syscall_64+0x64/0xf0 [ 91.768102][ T393] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.769828][ T2976] ? clear_bhb_loop+0x50/0xa0 [ 91.782133][ T2976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.788080][ T2976] RIP: 0033:0x7fab6d98e929 [ 91.792530][ T2976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.812335][ T2976] RSP: 002b:00007ffc567968b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 91.820836][ T2976] RAX: 0000000000000000 RBX: 000000000001656a RCX: 00007fab6d98e929 [ 91.829198][ T2976] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 91.837191][ T2976] RBP: 00007fab6dbb7ba0 R08: 0000000000000001 R09: 0000000656796baf [ 91.845205][ T2976] R10: 00007fab6d800000 R11: 0000000000000246 R12: 00007fab6dbb5fac [ 91.853225][ T2976] R13: 00007fab6dbb5fa0 R14: ffffffffffffffff R15: 00007ffc567969d0 [ 91.861247][ T2976] [ 91.864285][ T2976] ---[ end trace 0000000000000000 ]--- [ 91.918089][ T393] usb 5-1: Using ep0 maxpacket: 16 [ 91.924302][ T393] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.934603][ T393] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.944984][ T393] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.954212][ T393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.962431][ T393] usb 5-1: Product: syz [ 91.966604][ T393] usb 5-1: Manufacturer: syz [ 91.971223][ T393] usb 5-1: SerialNumber: syz [ 92.179860][ T393] usb 5-1: 0:2 : does not exist [ 92.186743][ T393] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 92.199284][ T393] usb 5-1: USB disconnect, device number 8 [ 92.212002][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.369409][ T36] audit: type=1400 audit(1752513205.610:319): avc: denied { read } for pid=2981 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 94.829766][ T36] audit: type=1400 audit(1752513206.070:320): avc: denied { read write } for pid=3002 comm="ip" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 94.853314][ T36] audit: type=1400 audit(1752513206.070:321): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 94.929894][ T36] audit: type=1400 audit(1752513206.170:322): avc: denied { read write } for pid=3007 comm="iptables" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK[ 94.953703][ T36] audit: type=1400 audit(1752513206.170:323): avc: denied { search } for pid=3007 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.977691][ T36] audit: type=1400 audit(1752513206.170:324): avc: denied { write } for pid=3007 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.000607][ T36] audit: type=1400 audit(1752513206.170:325): avc: denied { add_name } for pid=3007 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 95.022478][ T36] audit: type=1400 audit(1752513206.170:326): avc: denied { create } for pid=3007 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 message bus: [ 95.045100][ T36] audit: type=1400 audit(1752513206.170:327): avc: denied { read open } for pid=3007 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=5122 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.071094][ T36] audit: type=1400 audit(1752513206.170:328): avc: denied { lock } for pid=3007 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=5122 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.1.198 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 96.668920][ T207] bridge_slave_1: left allmulticast mode [ 96.674616][ T207] bridge_slave_1: left promiscuous mode [ 96.698155][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.705869][ T207] bridge_slave_0: left allmulticast mode [ 96.713903][ T207] bridge_slave_0: left promiscuous mode [ 96.719600][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.861194][ T207] veth1_macvtap: left promiscuous mode [ 96.866714][ T207] veth0_vlan: left promiscuous mode [ 97.149829][ T207] bridge_slave_1: left allmulticast mode [ 97.155583][ T207] bridge_slave_1: left promiscuous mode [ 97.161284][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.168867][ T207] bridge_slave_0: left allmulticast mode [ 97.174517][ T207] bridge_slave_0: left promiscuous mode [ 97.180163][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.187810][ T207] bridge_slave_1: left allmulticast mode [ 97.193503][ T207] bridge_slave_1: left promiscuous mode [ 97.199123][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.206545][ T207] bridge_slave_0: left allmulticast mode [ 97.212260][ T207] bridge_slave_0: left promiscuous mode [ 97.217852][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.401726][ T207] veth1_macvtap: left promiscuous mode [ 97.407255][ T207] veth0_vlan: left promiscuous mode [ 97.412810][ T207] veth1_macvtap: left promiscuous mode [ 97.418355][ T207] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 98.552710][ T3028] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 98.559736][ T3028] ACPI: PM: Preparing to enter system sleep state S5 [ 98.566732][ T3028] kvm: exiting hardware virtualization [ 98.572251][ T3028] reboot: Power down serialport: VM disconnected.