last executing test programs: 2.515734092s ago: executing program 2 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="c25341eef2c975fca4dc76eaa6e2ecb1cdda8488305f135696b2bea16b4456ea14245588b7a75cf6457b4898bd15a329547fad43a42c4e29b937b3162786632aa76a378fc034de601f8260324f5c48312f18c62cdafe79d330c9f7f885f709f984607203ff4e40221101f243d85c797a781f0916d9907f2ce4bcff3bdb0e8d2276187b624f7a32eef42ddb3d0e4ddbd97dfe7e54b48fdfe5b1591c1a429c", 0x9e) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000600)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000080)="33849297d121f30c361e7414", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010103}}}], 0x20}, 0x4044040) close_range(r0, 0xffffffffffffffff, 0x0) 2.513673172s ago: executing program 2 (id=264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 2.513249332s ago: executing program 2 (id=265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa120022eb"], 0xcfa4) 2.480649973s ago: executing program 2 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)='0h', 0x2}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1}, 0x10022) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x5c4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x40000005, 0x700000000000000}) r6 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a05f491e3d212", @ANYRESDEC=r6, @ANYRESDEC], 0x0) 2.282346473s ago: executing program 1 (id=268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x8041) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) getgroups(0x0, 0x0) setgroups(0x0, &(0x7f0000005540)) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) 2.280808193s ago: executing program 1 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x10) shutdown(r1, 0x0) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x25b7edb3, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffffa, 0x1}, &(0x7f0000000ac0)={0xc, 0x9, 0x2dd6, 0x800, 0xc, 0x10001, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './upper', [{0x20, 'lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00'}], 0xa, "761b963075526fe327178007afb95bfd361b293d265e799d4dd393fd8be5923daa78b76eb35a1d9965bc555e0f904076d1e9e95c2eb0046c2e6cfedf6c2847edd3c5769b4c63e82c5e7f7991b224fa0039ebb8515799bc5fef0a8fd0d275865113a945a64d4d3dae6e3c107ae907496a57a5038ff683fcf6b4e24c3a90b1e8a03c1a8f6f6723290c93e2056a7332606ce48a3babb8fcdfa6ba115fcc7fd5c6439564edebe6f835b90cd941759ab84c50667f470eed99d6226605f7cbd5ca8753faca567fcf4245d825634a0bf03377c7b97b2c"}, 0x132) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x98, 0x2, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x100a}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000004900010000000000000000000a00806e1000d7800c00be8008000100", @ANYRES32=0x0, @ANYBLOB="a0c2fcb38022e77f9e9bd182754551c6ecc28f1fe9d5af6f95b40c5e51be920ddec56566d958e9a3d7f7c37ab93e77053aed3577ecbbbe78e9d6c43fa9052b7fa88632825f3c5ee36f684edf95c8cf47daa3130ee8506718efd6f4aa4c79a58df3e5af3162c139838c3ad13a"], 0x24}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') umount2(&(0x7f0000000600)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2.075057593s ago: executing program 1 (id=271): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x80002dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x0, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xa, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xd, 0x5, 0x9, 0x5, 0xffffffff, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0x9, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x8002, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x2, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x100009]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x80002dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x0, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0xa, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xd, 0x5, 0x9, 0x5, 0xffffffff, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0x9, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x8002, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x2, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x100009]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac14141d080002007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xfff, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x8000000000001, 0x7, 0x20000005, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x23], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) mincore(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) close_range(r3, r1, 0x3792e20533e8a3a4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @pic={0x4, 0x7, 0x5, 0x6, 0xbd, 0x2, 0x0, 0x3, 0xd, 0x6, 0x6, 0xb0, 0x40, 0x4, 0x2, 0x9}}) 1.802582225s ago: executing program 1 (id=273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000040)={&(0x7f0000000140)=""/16, 0x10}) pwrite64$ublk_ch(r2, &(0x7f0000000b40)=@buf_1k="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", 0x1000, 0x6e) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r5, @ANYBLOB="010326bd7000fbdbdf051c0000000c00018008000100", @ANYRESDEC, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @loopback, @mcast2, 0x7, 0x9, 0xfffb, 0x100, 0x5, 0x830081}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x10001) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'erspan0\x00', {}, 0xe}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x400001, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x8, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x4, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x80001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x5, 0x6, 0x4c2336d3, 0x4, 0x0, 0x8a, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0xfffffff8, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff7, 0x18e, 0x4, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4a, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0x7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x208, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x15d, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfff, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x0, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x400, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdaf, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000001c0)={0x2, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) 1.731975149s ago: executing program 1 (id=274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 1.667820522s ago: executing program 1 (id=275): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d105012000060102030109021200080000000009"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00004bd000/0x4000)=nil, 0x4000}, 0x5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) syz_usb_control_io$uac3(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000100)={0x20, 0x7, 0xf7, {0xf7, 0x6, "9a42083e0567b5cdf281095d1e65dc7c3474be7b1f58951f1f7e8f6010b6f14d80fb9c0b917fef7fd507d9baa91dcaf16a38cd3864a0cba2719931e54cc460161fa0cf4a72f78d5dd6ffe68da0154df725292a3d0d697ab66d6e8963d9d9fa4befa1c7fec374754d84962f61bc68e2db6a3ec3463f14f9b3e551a0d0a01f8914c541083ae4df5e1c1b43f5ee9b4543724b1e96f5557038d4594f9ba36c4bbc327fb6910b716afa4e4669b3cc061f6e8ac9298c37552a144c384938be8c81a2c4ce36c398fbc982e8f0718ae9fd0dfc4d29f2c4c48712c49c97307ccbc9801b8624da962308fb650cb6a2fa8025a063c89249d5ba64"}}, &(0x7f00000002c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "723fe1acfc4442cfc71c11b95d5cea85332cd59710d27b4bbef9074c51e6db36d2679e84836936fb99f86d47e7585d15e97f93280b3df4ce5908e90af5a72818d40435ff86f73974cff2aa61939a72bd2d137eb05037ec77bfc26591a5e6e20d891743460d7d6a08de667d9b2aa7aa1158d2878f848af7473c26aa359e472570f0e0fc24a27851eee615c7380d15045c78f5e54f577824233e50b3d44cb844cd9ca773f6dcf9cdfa369d775db0ab83ab54a1615cd90a4ba47879587587c254399f334b1a736de58dae1938c8e3354c49f86a94cd12c3f3e2bdb924f30d"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000400)={0x0, 0xb, 0x7, "5964278ed3e0e2"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "1ed663"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "de"}, 0xffffffffffffffff, &(0x7f0000000580)={0x20, 0x84, 0x3, "121568"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "83ac41"}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x2, "a895"}, 0x0, 0x0, 0x0, 0x0}) 1.049262611s ago: executing program 2 (id=281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@rnullb, &(0x7f0000000440)='./file0\x00', &(0x7f0000000380)='udf\x00', 0xada9b1b23ec2093d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xc) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r2, 0x20, 0x2, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x6d, 0xffffffffffffffff, 0x0, 0x9, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000180)={0x0, 0x0, 0x99, 0x79, ""/121}, &(0x7f0000000040)=0x99, 0x1) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00050002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000546000/0x3000)=nil, 0x3000}, 0x2}) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x2000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0xd, 0xfffffffd, 0x7f, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17bb, 0x36290f07da4d748c, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6270, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)) 1.036612482s ago: executing program 2 (id=282): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) faccessat(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r0, &(0x7f00000001c0)="eec1", 0x2) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 527.855996ms ago: executing program 0 (id=284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa600022eb"], 0xcfa4) 508.505406ms ago: executing program 0 (id=287): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x0, 0xffffffffffffff47}) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e24, 0x0, @local, 0x4}, 0x1c) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f3231323430333d303232313632365a303a3138303606035504030c3f43657274696669636174fd98036d9c5b036520766572696669636174696f6e20454344fa253856656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a9ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d2931", 0x1d8, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8c) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x130) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000140), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 492.274007ms ago: executing program 0 (id=288): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket(0x10, 0x803, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket(0x1, 0x2, 0x0) (async) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async) clock_adjtime(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async) 421.34363ms ago: executing program 0 (id=291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "c5d162cf45fec9d0", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) (async) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r1, &(0x7f00000009c0)=""/4071, 0xfe7, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 239.816139ms ago: executing program 0 (id=294): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c000180"], 0xd8}}, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0xffffffff, 0x1, 0x8, 0x3, 0x56, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) io_setup(0x801, &(0x7f0000000440)=0x0) (rerun: 32) io_getevents(r2, 0x3, 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) (async) close_range(r1, r1, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) lchown(&(0x7f0000000000)='./mnt\x00', 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x800) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) (async) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000004c0)={0x0, &(0x7f0000000040)}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) 237.244149ms ago: executing program 3 (id=295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa700022eb"], 0xcfa4) 213.95366ms ago: executing program 0 (id=296): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040381010140091e51daf110902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32, @ANYBLOB="14001a801000db800c00ac8008000100627066"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) sendto$inet6(r0, &(0x7f00000002c0)="65ed", 0x2, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001e0021003bbd7000000000000a000000050000000000000014000c"], 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 178.251592ms ago: executing program 3 (id=297): r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000140)={@void, @val={0x2, 0x3, 0x1b, 0x58, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "32c5ab", 0x44, 0x2f, 0xff, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1, 0x100}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) 87.746146ms ago: executing program 3 (id=298): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x20802) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, 0x0, 0x267) write$evdev(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x4, 0xffffffffffffff9c, &(0x7f0000001500)=""/136}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80880) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r5}}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf05a, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="000000000000002fb2798ebff4a5adcae900bc7521684bdb87f37b70b7d96cd51fb6d0be2ea61ba798ac9bcfb8c7bbf09fc38275bb912fbe42cdfca94ae2d7230637715edb7de550a4695ad4d480c0547561cb9fd32d3ce3b45acc8448222976dbd0365ebe187690139bd3944d616f8a8ba6085f9f", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,dfltuid=', @ANYRESHEX=r5, @ANYBLOB=',fscache,uname=,cache=loose,fsname=:&,context=root,\x00']) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000240)=0x10, 0x3) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, &(0x7f0000001000)) 87.432206ms ago: executing program 3 (id=299): r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_ublk_setup_io_uring(0x60, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x36e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000440)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0xc3d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f00000004c0)) (async) r7 = getpid() syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x39, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x14}}}, 0xfffffffffffffffe) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (rerun: 64) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000500)=0x6) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x5}, 0x1c) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d3, 0x0) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./backing_file\x00', 0x42, 0x1b6) (async, rerun: 32) mknod(&(0x7f0000000600)='./file0\x00', 0x8000, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ftruncate(r9, 0x2000000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080"], 0x30}}, 0x0) (async) fsopen(&(0x7f00000003c0)='xfs\x00', 0x0) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r9) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/71, 0x47, 0x1, &(0x7f0000000200)=""/104, 0x68}, &(0x7f0000000300)=0x40) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r1, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) (rerun: 32) 26.603019ms ago: executing program 3 (id=300): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f0000000100), &(0x7f0000000280)={0x0, 0xfb, 0x1015, 0x4, 0x5, "bbdb14d1d69d2fcbf56f2976219806db", "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"}, 0x1015, 0x2) write(r2, &(0x7f0000000040)='3', 0x1) eventfd2(0x0, 0x1) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r3, 0x0, 0x0) write$selinux_context(r3, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) accept$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000200)=0x60) r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000032c0)={{r4}, "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"}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000012c0)="18dc983e1d58eefbfeaedf45711aa8fa40b49c00c97b5bd02faf9ddce1b0d8470459b5b20e9587c74aed771f42a34b2011f0c445bfa675989bafd82fe8d137adce09edbbf476a57f37c40af39e40be27fa545f1bc30c778cff1b326b2efb724629be405479db67f5734b3a9debc3025b0935f9f71bb4209734a760c3a3c0310497345c2a3df3ff7663a5f5fead8b977f90d409471a3bc5d85164aa28ec896bbaf59511e63dfec38116c3f07ab390cb72e363e767a03e55a6a85bcadd896960440f4446c0fad8035816cd10e2a06ffbca8776ec097ac0422a086782f8ee26fec86cdf0f32ec382993e69c3c71164c096d30dfe243d0c3eb0772d246b34feab3f8f0348b74be4d9be8fdc2d77461eadafa64b77b75526b52ca290c744617a08dda9483c89467acda270cd52846d8fda2a6eb0572b38b2969a181254c4487c637c025d5995026252f2eac4f468aaad5c894eaf1faf567f1e368ab4ff3d84a93d856c9e7a033bd89a4277a592fdb5295e54c104ed02d7cf54fb881fd65fe74e03a8326cbc346c07a33b06834a21bcdfda5760895d1c4af01599fedaf5b50305006125f7c72f8b325324de7949e285b99ee44a4b5bc24d497add8e5c4c94f65fed47e5d402dd488de90e1793d84ef2e29b90f1a2650b44be4124393bf323370d0a2f52e1fc10a5c37ee9b2e8e8e25762ae9780cc823f9e283b12cbe388ddeaba7aa6c2429ebc1ad376cfb79533365494812792f1e970a90f161a54cf80758a19d7781fc69262d9ef7edcb475b36c8e9e474174a0aee6e94b4941db48fb51c4d71cc886150f31c780a7eb203b1491fb0027b7aac248db2409639693436253d40ad18e1708330174e56ece1178b9464f2f38e190a66e76aaf195ad3d71735118b2addeaa5c500dfc304bd99a5f91ca8a2bf004b74ea1182ed3513cf6041648bec05aa7380f550c53b55809064f8a3fa90ef770166bf9836052bb231681900cd23cde01702e50936ff3b8c21242061b412685addb357384988a876c589d90127b0602d504476518ea74b5b76e888bee0bf085033c93867dc45210f4000d9b77bafe2e5df0e1daf61f8a505c7f0afb2406e77198ecf0c918bff03dd15564330bdcfa98d21bd75de91e3944978725ddba8c89d68fff8e873a0eee121f632c95424eee8ade1f6593cdba7be477bb9f001cc6857defd674393c3df6411f1854a64980964fb6caf38994bffdb7f362b0bab86271ba87c98ecf88383a02115ed8cd1ac0580cd229cd3fa4f168a4066a9ff5e0e0f2ed1c8f018798c092da63ebef23da36ed97f26210e3b38a71d63bf1ea6cb0e61b59995657aebb8b71ebd2cdf57d0ee8e694541e806f255c0a9522c8b97f452620919f066d212862b4ff30e1e8a1ed5954cec81a8779df8c3bc59dff92cf5ce2555d736e6153b008f00ea482644d9ef30c51aafaf3c311b02776ef6d59f0212149d268a94cb4184f8a57eeb8cb9ff183f42f677cffde0196a90e55753db335fe689b9a7480e292a75f6d7dd38a5904c796a92961fb9f2cfd7dd7d5085c1efcb4fd861b9aa1a531e5f58ea06b347cfad7313c30327520540fa4c5f8a45b8b0ade01cde2a8a46422a3d6181cb2f33644c249f9da4e5be1a967a706b69712454bb917997182d8a418f03aba7f5f65f1cab7fdcb63218e334f29787dfaaef0812eea6ea542c4baec07bcee08698f643e40cbc79960a189592390fa400d4b774bcc3e11c824fa7d070a16e1a7d2944c1a9807d3ff4bfb666b1d68be8e999083a32c1959698616bbaf98b2ed68bb9205eb8e2d3d0c9572c37db775610914f40c93e6adea8c6806e48723646b4a9d610d56c26dff4b5286f9d0141bf85c7a20bed6e1180991faace074768c2e1556e305403e4bf14dafd1e999dd175d06cbf66f6854f54c99d5cce879638f0e71d7d2a3c3c9fad35b770d7597b4bc46420dbb665873d248da2930fb8de0544d762b5ce757680576e3e9ba069d726be87d9f3290adc2ce98c9f958d595f08789c679d33c54943a33e5b8d716965e84d4b2660e6f72c85025ed91e76aca61456a87964f553a01c52a2560365e5fac0574d17b1a4a1ca0b2765f52ff6111915d930baed608921c143af3e1f22a21f872baf802629a2cfb8af4e08e4d730f3ba033126a78b46dea09a15bcba6fa7f2a1a89296a960ec6d19976d662fd217ef9395133c71a611b7ccd323eaaf87619e32df99e1356e0427ce30f9e51bfb82242c91b393e62c2ac3045e6d1bc8216c000a251bc04f9b2623283a964bc013599a2cd2601892033fe6b6156e794d98ffa398af5fdef21c2d4e503dd4bf4b3b19dd73f1424fac94b57dc67f1b047190efd14995292eb59102d55d09111586aaca944c1c95641199ba5755977c23be4f802837e6f5edec5e2290981c05f805a8c588c5403851d9a7b5a59f98c56100717ceca161b533be1da501813830cde04aa80f3721d81946e509eeeeabc50adbed10a89386459a2b12b544b33bdbc76ba963312232d3a47786464e4e94658121c70c228a42e3dc16b09d34858aef4108683022c1822e2b8ced44f829922e777fc56451ff3796e8f4e663d498e85673917ff8030c4d5dc325f61784a50e24b99c82ad58af157a4c9c215eeb589af7ce86821bf72ee0b0d5e0ad5309f7f903ee77f7efd0f03d63af595c42a9c55fdbefe8950b36ea4d5935eec889532e45f2fd2fe93d5a9df9b9e55b9903c7fe609fc5d379d758942aeb985f0994e69471e30f3320479b091c8855ca081e09ab1f34d8f246e5b8191e047318289ac23eced475cf5f23114d296013083f2ff3ca2d3b5971b850813179c36b0134942559ef76cc6d4a21cecdbefbcc4251c135d77b4a5a97344d192030ede3cdf05bf9e8f2966939d50f4c7e6d59338b6fb2cb50ad6d84f8cd6e207832bc48d16a50ba8627e0f3a7ed62f0790f99e0cf2eb850208f875d6e90de7a2b2ff184497e08251847267596339f7f2ebcce83edc7c6cf33f3170891cc75675ce13b22d8e200ff866d57b13e2d74bca0c0765a36cd1b6ca0645f33c18fe78266047ad5566a130e7ce9498b7749333e16832e8ea4f2f05783272b0ef8b10e69ec508c9f12855d07266b7b67e73f79e27db0eb3b33862cbc202bbca3228dba746d6a351b590aefd51f1a998171f2e97e6878fdf7904576ebff128e20b1e83d970290790da8bdbdf672e532ace9618a9a175aa778fc0409f12f6a05fc7637de6eea62230d65fca817cd539f09a9185d84ff161dda41f081f415eeea9c11fe5ed48cb6bf33db40145264160e6ef574ba0f822d667a65766bd2f2b7f4c13d4ffc9a125128e0c5d91ca7fce599634b7f38720170ca1d96fec2bc60f30f921ffa65c2b20161450a33151464997538d09deeffaa3fbd52d27616858975af5f1a6e50363fceeb03487ac545fecfdcdef825e0e6b9fcec6ebcb93facf6d25cdb0b6f4c408b73475384bb779566a8e1c890a50abd7e669d28c17071b5a21e3a02ea0236a7c32e85cbe9868f23b6241a349b115dabb1d1198f779bb3b435fb0a81177c28d3ccc1aeebbf1998a431f20fbd09ee43da90bc75d5a7ab85bb5612ab0525c1ba1ec403f2078190ea9e621279391dbed3e88b72b7ee1684065437012c914f8fd176a304893502dcb2bfc3e963bafb350fabfeedcac8720b33de7f9f6f802646f6eb88459868aff99cc5c16883620c5f1dca590d1d6b31870ff42346403197989859a2ee53970df1f7abaef75d48672e46e3300b35ecb4bcff66c1d11e6e063ebe663266878ebc22309dac6a69564d7d5ec945d8afbb3100cbe6d4862d4b6ed7a00b16ab8035ecc4de57f41d47f20faaef7bfd59f7341b4a8bab897db07294060d669fba88760bc170f723facf78305ebed6683a88bb9804f330881558dbc38294c4af2ba66ff98ba9309d7e8681ca4bba3e56fb4f52deaf711ccc5c00086f18582f2b1d5b875a04b3ab27d27992449fa438ceaf3e268eae4d0bc91fb69cc6d8324052c08d10f80559256fd0839d83380e39eea0fb197b79c8b1d2510915a338cc123c78fb72853001a6c3b14c59e2b1e00d4630bd956cb8eacb2fc765fa99eacd072c7c1b8368da9fdc48c250ea4af41d986fbfc995878fe60c9999946e46c503d39af03e112cc90e637dd04013e2c14d409499e1ed0528f52354a02ca6a64917711b6eb975954ea8c7cc6ee978caa749a17ce0c81733af803f4b03af66ec746da17d5e9f0168315ff045feb681108306b7a55c0d5aed2246fa6dd359eae68095fda5543dd1365e49f20065f35000a4684dc09c9a622938389f02f95a91f1178b46b19d4ed40e5645d7c4ae2491ae79d6d795c9451df8cbb955c961d463947b466766547b27ac1dd20330e35451ae2483e4126c5005acabb98e207a519a19ac0bdafa9c8cba32141ef9a3e20f1303e6135cceb14da21d0beb58b86fb6721b9cd0a51038383f2557564ddea90182b96dd3587ae46a31076f2fd6dd74549f791b6bc19cf8f5cc723a4fa9f6fd548fa3567102c164b8b11d60a78d03ed51665ad8acd6862d0190e7a1edb78bd8023905c313717e39daebfca442cb0e0c9f81116300eb90cf77d6082b5b2f37a84c179533589dacb34a53bd679821c1636cbdbfcfea391e2deac97d1ebff265d629a767454adad654106fd201451d792db06228a1b07ef841d1872708902cbd4aec6a3ce093889fa8d26a1e9901ce557520b998bbe075911e4051de68c3dd4f99d905c25352aea2ef10142ca04e5b1988be18d342e83310b8dc499055db570da7fb1ce5d4ea62d54aef6a6aa330eb56a4ea7e2b5b163f792a39a8a6d1b6132a3201fb11c0d49f554e5ec6ed7362206d9445c75aebae251908f5623661959ea76012d8d887545a62971171453aeb21fb0012f7c87069ad7abcd63ee11f066b3f504733183ae6f20643c26d48d16c1c7ef0d39c23d2cb40ed9abc43c59b808a8d5ef6e9762ffc6fab5964ff65ef38f4c8cb1693dd9906f38eebc5771ccbcb16f201774f7e0d107ed2ff1aeff172411493917ccff07fb6654890c9a5be7ac8128c63a57b0a71422c5fc0580537a848db306cb1d9dfaa8210e63eaa3b9c7e8946cd0cf6313c9e7386d19f782d73246230b0a984c0855751f803e0c0467375924ec10dd9bfbc3c90a9cfab1b0582c8f5de516838ed34711a9c00241efdc0af7bf5997b3598f80133ab09bf47327460268074ff95967758273af3d0760be4c0779204c2e6f4ecded0c092690ea10ef0f0b618f8fb2b84e4624ff7ee52448564348f040a1316dddccc385fc85ef449cd77bfdaf6c263cfe8dff62b3f83e8c59f1f4bc67f738c0af72b452558cbc3b2f5725dffe1fe7005e2f09868a125d739b5982ef11c5bbae94e9bc757469de2d7c459cf034368d1282ae396abd48f0191df29cded96ca829304f0359e227bc6490145d61f2be4b7df0a5cd2fcd797613092d77f837c83470c37482ec4319267a234a04baa3ac9b60126d891b3bc68f64c3317c706da50eb05cf32284c13509248b9930b7b716f01616cbb88eaa032430e13f5b2293dd275cec7faba45d38f3c97c27ed06aba34ce54d876c4c94910269a373d761a4e0458e9c907ca2a03e5a2ac321b901ac3daba36d411e0796eb39ef7ea47fd5d1415e1006e473899e659bde7b5508a34ee893f72f31b4662997004c500e1a2f1dbf1d423a48734458a05705b27bf8ddf0b47ce78b81c444e1bbb0224489319be11b9d7f8593c53307a126b1125d6942e0413242a52fc16842e847f01de2f981f4b77810b") 0s ago: executing program 3 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = accept$packet(r4, 0x0, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendto$packet(r5, &(0x7f0000000240)="ac56808acb0ced536cc3100442cb208d581f4f220abde5446bc495d7ee48f6ee2964bea137f2bd99ce12e0cca58f36e61b1d518c23b0e23d720ee1c4c719d5fc13dd3c669263d29d88921745359f6ffeb776d38824e58df5e467e473ce3d4c127a0e337c529ccf8ae29cea7408b33ab44469f234a2c9d882ba0bbbe6801ef8d647bb4a2e2b5223a08dcc968b57b093deeb2a8156cb8e11fcb006aaf0e698d8c6af5fcd4500e83f11", 0xa8, 0x4000000, &(0x7f0000000300)={0x11, 0x16, r8, 0x1, 0x7, 0x6, @multicast}, 0x14) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1789613327.519:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.038609][ T36] audit: type=1400 audit(1789613327.519:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 21.112482][ T36] audit: type=1400 audit(1789613334.599:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.113943][ T287] cgroup: Unknown subsys name 'net' [ 21.135352][ T36] audit: type=1400 audit(1789613334.599:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.162738][ T36] audit: type=1400 audit(1789613334.629:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.162928][ T287] cgroup: Unknown subsys name 'devices' [ 21.262660][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.268266][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.370975][ T36] audit: type=1400 audit(1789613334.859:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.394180][ T36] audit: type=1400 audit(1789613334.859:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.418873][ T36] audit: type=1400 audit(1789613334.859:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.427468][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.450785][ T36] audit: type=1400 audit(1789613334.939:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.476219][ T36] audit: type=1400 audit(1789613334.939:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.514756][ T36] audit: type=1400 audit(1789613334.999:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.540340][ T36] audit: type=1400 audit(1789613334.999:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.540599][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.746127][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.753227][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.760375][ T294] bridge_slave_0: entered allmulticast mode [ 22.766586][ T294] bridge_slave_0: entered promiscuous mode [ 22.781481][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.788529][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.795621][ T294] bridge_slave_1: entered allmulticast mode [ 22.801781][ T294] bridge_slave_1: entered promiscuous mode [ 22.807792][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.814973][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.822224][ T297] bridge_slave_0: entered allmulticast mode [ 22.828340][ T297] bridge_slave_0: entered promiscuous mode [ 22.847109][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.854189][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.861271][ T297] bridge_slave_1: entered allmulticast mode [ 22.867402][ T297] bridge_slave_1: entered promiscuous mode [ 22.873484][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.880627][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.887713][ T295] bridge_slave_0: entered allmulticast mode [ 22.894077][ T295] bridge_slave_0: entered promiscuous mode [ 22.903243][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.910487][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.917563][ T295] bridge_slave_1: entered allmulticast mode [ 22.923841][ T295] bridge_slave_1: entered promiscuous mode [ 22.929893][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.937141][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.944252][ T296] bridge_slave_0: entered allmulticast mode [ 22.950492][ T296] bridge_slave_0: entered promiscuous mode [ 22.959470][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.966545][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.973624][ T296] bridge_slave_1: entered allmulticast mode [ 22.979772][ T296] bridge_slave_1: entered promiscuous mode [ 23.136485][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143559][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.150841][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.157855][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.178854][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.185922][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.193197][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.200214][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.212449][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.219499][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.226789][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.233826][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.246372][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.253432][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.260709][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.267725][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.307894][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.315321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.323411][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.330820][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.338088][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.345767][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.353025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.360303][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.371124][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.378171][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.391431][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.398499][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.406264][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.413309][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.434401][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.441462][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.460976][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.468031][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.475627][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.482667][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.508650][ T297] veth0_vlan: entered promiscuous mode [ 23.517779][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.524841][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.536413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.543541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.565740][ T297] veth1_macvtap: entered promiscuous mode [ 23.575479][ T296] veth0_vlan: entered promiscuous mode [ 23.606048][ T294] veth0_vlan: entered promiscuous mode [ 23.627278][ T296] veth1_macvtap: entered promiscuous mode [ 23.636972][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.658505][ T295] veth0_vlan: entered promiscuous mode [ 23.677255][ T294] veth1_macvtap: entered promiscuous mode [ 23.702869][ T295] veth1_macvtap: entered promiscuous mode [ 23.778656][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.799087][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 23.895416][ T341] FAULT_INJECTION: forcing a failure. [ 23.895416][ T341] name failslab, interval 1, probability 0, space 0, times 1 [ 23.908588][ T341] CPU: 0 UID: 0 PID: 341 Comm: syz.1.9 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 23.908623][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.908643][ T341] Call Trace: [ 23.908650][ T341] [ 23.908658][ T341] __dump_stack+0x21/0x30 [ 23.908700][ T341] dump_stack_lvl+0x140/0x1c0 [ 23.908725][ T341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.908752][ T341] dump_stack+0x19/0x20 [ 23.908772][ T341] should_fail_ex+0x3c2/0x510 [ 23.908794][ T341] ? x509_get_sig_params+0x250/0x6a0 [ 23.908812][ T341] should_failslab+0xac/0x100 [ 23.908835][ T341] __kmalloc_noprof+0x69/0x510 [ 23.908855][ T341] ? x509_get_sig_params+0x250/0x6a0 [ 23.908874][ T341] x509_get_sig_params+0x250/0x6a0 [ 23.908892][ T341] x509_cert_parse+0x53e/0xbd0 [ 23.908916][ T341] x509_key_preparse+0x6a/0x880 [ 23.908933][ T341] ? __cfi_down_read+0x10/0x10 [ 23.908955][ T341] asymmetric_key_preparse+0xb3/0x100 [ 23.908978][ T341] __key_create_or_update+0x433/0xa90 [ 23.908996][ T341] ? security_key_permission+0x3d/0x100 [ 23.909016][ T341] ? key_create_or_update+0x70/0x70 [ 23.909038][ T341] ? __kasan_kmalloc+0x96/0xb0 [ 23.909063][ T341] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 23.909091][ T341] key_create_or_update+0x47/0x70 [ 23.909113][ T341] __se_sys_add_key+0x355/0x4b0 [ 23.909135][ T341] ? __x64_sys_add_key+0xf0/0xf0 [ 23.909156][ T341] ? __kasan_check_write+0x18/0x20 [ 23.909175][ T341] ? fpregs_restore_userregs+0x11c/0x260 [ 23.909199][ T341] __x64_sys_add_key+0xc3/0xf0 [ 23.909220][ T341] x64_sys_call+0x195f/0x2ee0 [ 23.909238][ T341] do_syscall_64+0x57/0xf0 [ 23.909255][ T341] ? clear_bhb_loop+0x50/0xa0 [ 23.909278][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.909300][ T341] RIP: 0033:0x7f5dbdf9e159 [ 23.909323][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.909339][ T341] RSP: 002b:00007f5dbee9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 23.909369][ T341] RAX: ffffffffffffffda RBX: 00007f5dbe225fa0 RCX: 00007f5dbdf9e159 [ 23.909384][ T341] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 23.909398][ T341] RBP: 00007f5dbe03506b R08: ffffffffffffffff R09: 0000000000000000 [ 23.909411][ T341] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 23.909423][ T341] R13: 00007f5dbe226038 R14: 00007f5dbe225fa0 R15: 00007ffec6a15e38 [ 23.909447][ T341] [ 24.000355][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.175528][ T343] tipc: Started in network mode [ 24.184258][ T343] tipc: Node identity 0010000000000000002, cluster identity 1 [ 24.192218][ T343] Zero length message leads to an empty skb [ 24.310310][ T314] usb 3-1: Using ep0 maxpacket: 8 [ 24.316467][ T314] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 24.324956][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.335878][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.336537][ T348] ./dev/sda1: Can't lookup blockdev [ 24.348766][ T314] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 24.372927][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.382029][ T314] usb 3-1: config 0 descriptor?? [ 24.510306][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.591604][ T314] sony 0003:1345:3008.0001: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 24.612371][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.615126][ T314] sony 0003:1345:3008.0001: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 24.633238][ T314] sony 0003:1345:3008.0001: failed to claim input [ 24.660341][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 24.677367][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.691516][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.702329][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 24.717169][ T310] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 24.726734][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.743319][ T310] usb 1-1: config 0 descriptor?? [ 24.782756][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 24.794763][ T31] usb 3-1: USB disconnect, device number 2 [ 24.800287][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.808589][ T9] usb 2-1: Product: syz [ 24.820306][ T9] usb 2-1: Manufacturer: syz [ 24.824934][ T9] usb 2-1: SerialNumber: syz [ 25.033773][ T348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'. [ 25.150645][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.159651][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.168889][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.177739][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.389351][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 25.395445][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.404289][ T310] usb 1-1: USB disconnect, device number 2 [ 25.870731][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.031038][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 26.037236][ T65] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 26.045513][ T65] usb 3-1: config 0 has no interface number 0 [ 26.051639][ T65] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 26.062943][ T65] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 26.072013][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.080059][ T65] usb 3-1: Product: syz [ 26.084458][ T65] usb 3-1: Manufacturer: syz [ 26.089153][ T65] usb 3-1: SerialNumber: syz [ 26.100477][ T65] usb 3-1: config 0 descriptor?? [ 26.105756][ T369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.222147][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 26.222164][ T36] audit: type=1400 audit(1789613339.709:152): avc: denied { mounton } for pid=370 comm="syz.0.17" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.313707][ T367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.521665][ T65] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 26.531963][ T65] asix 3-1:0.188: probe with driver asix failed with error -61 [ 26.734182][ T65] usb 3-1: USB disconnect, device number 3 [ 26.786543][ T36] audit: type=1400 audit(1789613340.269:153): avc: denied { read } for pid=389 comm="syz.0.18" name="trace_pipe_raw" dev="tracefs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 26.814453][ T36] audit: type=1400 audit(1789613340.299:154): avc: denied { open } for pid=389 comm="syz.0.18" path="/5/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 26.839999][ T36] audit: type=1400 audit(1789613340.299:155): avc: denied { ioctl } for pid=389 comm="syz.0.18" path="/5/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=84 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 26.927596][ T36] audit: type=1400 audit(1789613340.409:156): avc: denied { mount } for pid=418 comm="syz.0.21" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.160298][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.232080][ T9] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 27.247350][ T9] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 27.257213][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.269409][ T9] usb 2-1: USB disconnect, device number 2 [ 27.281008][ T424] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 27.292416][ T36] audit: type=1400 audit(1789613340.779:157): avc: denied { relabelto } for pid=423 comm="syz.1.23" name="7" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 27.320605][ T36] audit: type=1400 audit(1789613340.779:158): avc: denied { associate } for pid=423 comm="syz.1.23" name="7" dev="tmpfs" ino=55 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbmon_device_t:s0" [ 27.321311][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.366413][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.389951][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.398922][ T310] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 27.408115][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.446735][ T36] audit: type=1400 audit(1789613340.929:159): avc: denied { getopt } for pid=425 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.467109][ T36] audit: type=1400 audit(1789613340.929:160): avc: denied { ioctl } for pid=425 comm="syz.2.24" path="socket:[5660]" dev="sockfs" ino=5660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.492645][ T36] audit: type=1400 audit(1789613340.929:161): avc: denied { setopt } for pid=425 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.624244][ T310] usb 1-1: cannot find UAC_HEADER [ 27.631822][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.633907][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.656834][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.810327][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 27.819498][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.842079][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 27.850634][ T419] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 27.851343][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.865576][ T310] usb 1-1: USB disconnect, device number 3 [ 27.869811][ T9] usb 2-1: Product: syz [ 27.880695][ T9] usb 2-1: Manufacturer: syz [ 27.887258][ T9] usb 2-1: SerialNumber: syz [ 27.967210][ T432] fuse: Bad value for 'fd' [ 27.972228][ T432] overlayfs: missing 'workdir' [ 28.095948][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 28.107345][ T9] usb 2-1: USB disconnect, device number 3 [ 28.250324][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.335585][ T443] futex_wake_op: syz.2.31 tries to shift op by 144; fix this program [ 28.400337][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 28.410022][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.424007][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.436904][ T65] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.446737][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.455578][ T65] usb 4-1: config 0 descriptor?? [ 28.465365][ T65] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 28.670365][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.830711][ T310] usb 3-1: too many configurations: 254, using maximum allowed: 8 [ 28.839291][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.849631][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.859336][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.869656][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.879264][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.890073][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.899791][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.910077][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.919771][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.930228][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.939939][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.950224][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.959834][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.970968][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 28.980970][ T310] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 28.991527][ T310] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 29.001178][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.010207][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=33 [ 29.018294][ T310] usb 3-1: SerialNumber: syz [ 29.050323][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.201720][ T45] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.212731][ T45] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.225628][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.232286][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 29.238739][ T456] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 29.246351][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.263834][ T45] usb 2-1: config 0 descriptor?? [ 29.582858][ T463] netlink: 96 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.592382][ T463] netlink: 96 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.603593][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.612135][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.670974][ T45] sony 0003:054C:0268.0002: item 0 4 0 8 parsing failed [ 29.678195][ T45] sony 0003:054C:0268.0002: parse failed [ 29.683870][ T45] sony 0003:054C:0268.0002: probe with driver sony failed with error -22 [ 29.710313][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.860328][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 29.866546][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10 [ 29.877863][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33865, setting to 1024 [ 29.884469][ T45] usb 2-1: USB disconnect, device number 4 [ 29.889181][ T65] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 29.904034][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.912532][ T65] usb 1-1: config 0 descriptor?? [ 29.917700][ T462] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 30.126740][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.135345][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.346044][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 30.352084][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.360943][ T65] usb 1-1: USB disconnect, device number 4 [ 30.454890][ T470] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 30.461970][ T470] incfs: mount failed -2 [ 30.560649][ T475] Invalid ELF header type: 2 != 1 [ 30.631858][ T484] FAULT_INJECTION: forcing a failure. [ 30.631858][ T484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.645117][ T484] CPU: 0 UID: 0 PID: 484 Comm: syz.1.45 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 30.645144][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.645155][ T484] Call Trace: [ 30.645161][ T484] [ 30.645167][ T484] __dump_stack+0x21/0x30 [ 30.645193][ T484] dump_stack_lvl+0x140/0x1c0 [ 30.645213][ T484] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.645235][ T484] dump_stack+0x19/0x20 [ 30.645256][ T484] should_fail_ex+0x3c2/0x510 [ 30.645277][ T484] should_fail+0xf/0x20 [ 30.645296][ T484] should_fail_usercopy+0x1e/0x30 [ 30.645317][ T484] _copy_from_user+0x20/0xa0 [ 30.645341][ T484] udmabuf_ioctl+0x144/0x310 [ 30.645360][ T484] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 30.645378][ T484] ? __fget_files+0x2bc/0x330 [ 30.645400][ T484] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.645422][ T484] ? security_file_ioctl+0x3e/0x110 [ 30.645440][ T484] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 30.645457][ T484] __se_sys_ioctl+0x123/0x1b0 [ 30.645479][ T484] __x64_sys_ioctl+0x7f/0xa0 [ 30.645499][ T484] x64_sys_call+0x1878/0x2ee0 [ 30.645513][ T484] do_syscall_64+0x57/0xf0 [ 30.645530][ T484] ? clear_bhb_loop+0x50/0xa0 [ 30.645551][ T484] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.645571][ T484] RIP: 0033:0x7f5dbdf9e159 [ 30.645587][ T484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.645601][ T484] RSP: 002b:00007f5dbee9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.645621][ T484] RAX: ffffffffffffffda RBX: 00007f5dbe225fa0 RCX: 00007f5dbdf9e159 [ 30.645635][ T484] RDX: 0000000000000000 RSI: 0000000040087543 RDI: 0000000000000003 [ 30.645647][ T484] RBP: 00007f5dbee9a090 R08: 0000000000000000 R09: 0000000000000000 [ 30.645659][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.645669][ T484] R13: 00007f5dbe226038 R14: 00007f5dbe225fa0 R15: 00007ffec6a15e38 [ 30.645691][ T484] [ 31.019273][ T65] usb 4-1: USB disconnect, device number 2 [ 31.130339][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.281511][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 31.290642][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.390316][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.436068][ T437] usb 3-1: USB disconnect, device number 4 [ 31.504830][ T10] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, c2:62:ee:af:b0:dc [ 31.517554][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 31.517570][ T36] audit: type=1400 audit(1789613344.999:204): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.550915][ T65] usb 4-1: device descriptor read/64, error -71 [ 31.570581][ T36] audit: type=1400 audit(1789613344.999:205): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.605541][ T36] audit: type=1400 audit(1789613344.999:206): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.638653][ T36] audit: type=1400 audit(1789613344.999:207): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.666328][ T36] audit: type=1400 audit(1789613344.999:208): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.700061][ T36] audit: type=1400 audit(1789613345.049:209): avc: denied { read } for pid=507 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.725973][ T517] FAULT_INJECTION: forcing a failure. [ 31.725973][ T517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.743203][ T517] CPU: 1 UID: 0 PID: 517 Comm: syz.1.54 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 31.743231][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.743242][ T517] Call Trace: [ 31.743247][ T517] [ 31.743255][ T517] __dump_stack+0x21/0x30 [ 31.743286][ T517] dump_stack_lvl+0x140/0x1c0 [ 31.743309][ T517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.743333][ T517] ? check_stack_object+0x138/0x150 [ 31.743469][ T517] dump_stack+0x19/0x20 [ 31.743494][ T517] should_fail_ex+0x3c2/0x510 [ 31.743512][ T517] should_fail+0xf/0x20 [ 31.743529][ T517] should_fail_usercopy+0x1e/0x30 [ 31.743548][ T517] _copy_to_user+0x24/0xa0 [ 31.743570][ T517] simple_read_from_buffer+0xed/0x160 [ 31.743592][ T517] proc_fail_nth_read+0x1aa/0x220 [ 31.743615][ T517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 31.743638][ T517] ? bpf_lsm_file_permission+0xd/0x20 [ 31.743658][ T517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 31.743679][ T517] vfs_read+0x288/0xc70 [ 31.743696][ T517] ? __cfi_vfs_read+0x10/0x10 [ 31.743711][ T517] ? __kasan_check_write+0x18/0x20 [ 31.743726][ T517] ? mutex_lock+0x97/0x1d0 [ 31.743745][ T517] ? __cfi_mutex_lock+0x10/0x10 [ 31.743765][ T517] ksys_read+0x145/0x260 [ 31.743783][ T517] ? __cfi_ksys_read+0x10/0x10 [ 31.743799][ T517] ? __kasan_check_write+0x18/0x20 [ 31.743823][ T517] ? fput+0x1a4/0x230 [ 31.743843][ T517] ? __kasan_check_read+0x15/0x20 [ 31.743857][ T517] __x64_sys_read+0x7f/0x90 [ 31.743874][ T517] x64_sys_call+0x2638/0x2ee0 [ 31.743890][ T517] do_syscall_64+0x57/0xf0 [ 31.743905][ T517] ? clear_bhb_loop+0x50/0xa0 [ 31.743925][ T517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.743941][ T517] RIP: 0033:0x7f5dbdf5e98e [ 31.743956][ T517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 31.743970][ T517] RSP: 002b:00007f5dbee99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 31.743989][ T517] RAX: ffffffffffffffda RBX: 00007f5dbee9a6c0 RCX: 00007f5dbdf5e98e [ 31.744001][ T517] RDX: 000000000000000f RSI: 00007f5dbee9a0a0 RDI: 0000000000000004 [ 31.744011][ T517] RBP: 00007f5dbee9a090 R08: 0000000000000000 R09: 0000000000000000 [ 31.744022][ T517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.744031][ T517] R13: 00007f5dbe226038 R14: 00007f5dbe225fa0 R15: 00007ffec6a15e38 [ 31.744045][ T517] [ 31.749848][ T36] audit: type=1400 audit(1789613345.049:210): avc: denied { open } for pid=507 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.810299][ T65] usb 4-1: device descriptor read/64, error -71 [ 31.826123][ T310] usb 1-1: USB disconnect, device number 5 [ 31.942756][ T528] ./dev/sda1: Can't lookup blockdev [ 31.949555][ T36] audit: type=1400 audit(1789613345.049:211): avc: denied { getattr } for pid=507 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.061064][ T310] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 32.080315][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.089941][ T36] audit: type=1400 audit(1789613345.059:212): avc: denied { mounton } for pid=501 comm="syz.2.53" path="/10/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 32.117655][ T36] audit: type=1400 audit(1789613345.059:213): avc: denied { append } for pid=501 comm="syz.2.53" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 32.270388][ T65] usb 4-1: device descriptor read/64, error -71 [ 32.280327][ T437] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.430316][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 32.436614][ T437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.447549][ T437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.457376][ T437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.470313][ T437] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.479393][ T437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.487452][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.495971][ T437] usb 2-1: config 0 descriptor?? [ 32.530320][ T65] usb 4-1: device descriptor read/64, error -71 [ 32.640444][ T65] usb usb4-port1: attempt power cycle [ 32.646659][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.657693][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.670595][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.677238][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 32.686414][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.695551][ T10] usb 3-1: config 0 descriptor?? [ 32.718379][ T551] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 32.776696][ T555] netlink: 72 bytes leftover after parsing attributes in process `syz.0.63'. [ 32.903485][ T437] usbhid 2-1:0.0: can't add hid device: -71 [ 32.909540][ T437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.918796][ T437] usb 2-1: USB disconnect, device number 5 [ 32.980342][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.001313][ T65] usb 4-1: device descriptor read/8, error -71 [ 33.119737][ T10] playstation 0003:054C:09CC.0003: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 33.161212][ T65] usb 4-1: device descriptor read/8, error -71 [ 33.318075][ T10] playstation 0003:054C:09CC.0003: Invalid byte count transferred, expected 16 got 0 [ 33.327633][ T10] playstation 0003:054C:09CC.0003: Failed to retrieve DualShock4 pairing info: -22 [ 33.337014][ T10] playstation 0003:054C:09CC.0003: Failed to get MAC address from DualShock4 [ 33.345895][ T10] playstation 0003:054C:09CC.0003: Failed to create dualshock4. [ 33.354684][ T10] playstation 0003:054C:09CC.0003: probe with driver playstation failed with error -22 [ 33.410338][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.441673][ T65] usb 4-1: device descriptor read/8, error -71 [ 33.512313][ T578] FAULT_INJECTION: forcing a failure. [ 33.512313][ T578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.527397][ T578] CPU: 1 UID: 0 PID: 578 Comm: syz.1.71 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 33.527422][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.527439][ T578] Call Trace: [ 33.527445][ T578] [ 33.527452][ T578] __dump_stack+0x21/0x30 [ 33.527479][ T578] dump_stack_lvl+0x140/0x1c0 [ 33.527502][ T578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.527525][ T578] ? check_stack_object+0x138/0x150 [ 33.527545][ T578] dump_stack+0x19/0x20 [ 33.527565][ T578] should_fail_ex+0x3c2/0x510 [ 33.527585][ T578] should_fail+0xf/0x20 [ 33.527602][ T578] should_fail_usercopy+0x1e/0x30 [ 33.527623][ T578] _copy_to_user+0x24/0xa0 [ 33.527646][ T578] simple_read_from_buffer+0xed/0x160 [ 33.527669][ T578] proc_fail_nth_read+0x1aa/0x220 [ 33.527693][ T578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.527716][ T578] ? bpf_lsm_file_permission+0xd/0x20 [ 33.527738][ T578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.527760][ T578] vfs_read+0x288/0xc70 [ 33.527779][ T578] ? __cfi_vfs_read+0x10/0x10 [ 33.527795][ T578] ? __kasan_check_write+0x18/0x20 [ 33.527813][ T578] ? mutex_lock+0x97/0x1d0 [ 33.527832][ T578] ? __cfi_mutex_lock+0x10/0x10 [ 33.527853][ T578] ksys_read+0x145/0x260 [ 33.527871][ T578] ? __cfi_ksys_read+0x10/0x10 [ 33.527889][ T578] ? __kasan_check_read+0x15/0x20 [ 33.527906][ T578] __x64_sys_read+0x7f/0x90 [ 33.527924][ T578] x64_sys_call+0x2638/0x2ee0 [ 33.527939][ T578] do_syscall_64+0x57/0xf0 [ 33.527955][ T578] ? clear_bhb_loop+0x50/0xa0 [ 33.527976][ T578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.527996][ T578] RIP: 0033:0x7f5dbdf5e98e [ 33.528011][ T578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.528025][ T578] RSP: 002b:00007f5dbee99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.528046][ T578] RAX: ffffffffffffffda RBX: 00007f5dbee9a6c0 RCX: 00007f5dbdf5e98e [ 33.528059][ T578] RDX: 000000000000000f RSI: 00007f5dbee9a0a0 RDI: 0000000000000006 [ 33.528071][ T578] RBP: 00007f5dbee9a090 R08: 0000000000000000 R09: 0000000000000000 [ 33.528082][ T578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.528093][ T578] R13: 00007f5dbe226038 R14: 00007f5dbe225fa0 R15: 00007ffec6a15e38 [ 33.528108][ T578] [ 33.661354][ T65] usb 4-1: device descriptor read/8, error -71 [ 33.880416][ T65] usb usb4-port1: unable to enumerate USB device [ 34.044546][ T310] usb 3-1: USB disconnect, device number 5 [ 34.108748][ T593] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 34.199751][ T600] process 'syz.1.80' launched '/dev/fd/4' with NULL argv: empty string added [ 34.314814][ T608] netlink: 51 bytes leftover after parsing attributes in process `syz.3.84'. [ 34.378361][ T612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 34.460548][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.630299][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 34.639465][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.650400][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.660128][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.672974][ T310] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.682039][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.690979][ T310] usb 3-1: config 0 descriptor?? [ 34.954626][ T643] kvm: MWAIT instruction emulated as NOP! [ 35.099838][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 35.105836][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.114612][ T310] usb 3-1: USB disconnect, device number 6 [ 35.230319][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.280315][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.382131][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 35.392476][ T10] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 35.401704][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 35.409954][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 35.419071][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.427159][ T10] usb 1-1: Product: syz [ 35.431629][ T10] usb 1-1: Manufacturer: syz [ 35.436410][ T10] usb 1-1: SerialNumber: syz [ 35.443681][ T661] ======================================================= [ 35.443681][ T661] WARNING: The mand mount option has been deprecated and [ 35.443681][ T661] and is ignored by this kernel. Remove the mand [ 35.443681][ T661] option from the mount to silence this warning. [ 35.443681][ T661] ======================================================= [ 35.450285][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 35.485290][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.497405][ T65] usb 2-1: config 0 has no interfaces? [ 35.504376][ T65] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 35.513458][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.521458][ T65] usb 2-1: Product: syz [ 35.525620][ T65] usb 2-1: Manufacturer: syz [ 35.530279][ T65] usb 2-1: SerialNumber: syz [ 35.535462][ T65] usb 2-1: config 0 descriptor?? [ 37.092254][ T696] tipc: Enabling of bearer rejected, failed to enable media [ 37.103416][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 37.103431][ T36] audit: type=1326 audit(1789613350.589:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4f2539e159 code=0x7ffc0000 [ 37.148652][ T36] audit: type=1326 audit(1789613350.589:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2539e159 code=0x7ffc0000 [ 37.177708][ T36] audit: type=1326 audit(1789613350.589:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2539e159 code=0x7ffc0000 [ 37.203042][ T36] audit: type=1326 audit(1789613350.589:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2539e159 code=0x7ffc0000 [ 37.237931][ T36] audit: type=1326 audit(1789613350.589:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f2539dec2 code=0x7ffc0000 [ 37.268001][ T36] audit: type=1326 audit(1789613350.589:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4f2539df57 code=0x7ffc0000 [ 37.294976][ T36] audit: type=1326 audit(1789613350.589:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4f2535ae51 code=0x7ffc0000 [ 37.322686][ T36] audit: type=1326 audit(1789613350.589:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4f2539ef49 code=0x7ffc0000 [ 37.347903][ T36] audit: type=1326 audit(1789613350.589:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4f2535aebb code=0x7ffc0000 [ 37.373088][ T36] audit: type=1326 audit(1789613350.589:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.2.107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2539e159 code=0x7ffc0000 [ 37.402602][ T696] tipc: Enabling of bearer rejected, failed to enable media [ 37.413483][ T696] tipc: Enabling of bearer rejected, failed to enable media [ 37.475503][ T696] mmap: syz.2.107 (696) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.530362][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.711403][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.730993][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.743382][ T65] usb 4-1: string descriptor 0 read error: -22 [ 37.749755][ T65] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 37.759439][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.961804][ T10] usb 1-1: USB disconnect, device number 6 [ 38.058312][ T437] usb 2-1: USB disconnect, device number 6 [ 38.109013][ T725] FAULT_INJECTION: forcing a failure. [ 38.109013][ T725] name failslab, interval 1, probability 0, space 0, times 0 [ 38.121766][ T725] CPU: 1 UID: 0 PID: 725 Comm: syz.2.114 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 38.121796][ T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.121808][ T725] Call Trace: [ 38.121814][ T725] [ 38.121822][ T725] __dump_stack+0x21/0x30 [ 38.121852][ T725] dump_stack_lvl+0x140/0x1c0 [ 38.121876][ T725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.121911][ T725] dump_stack+0x19/0x20 [ 38.121942][ T725] should_fail_ex+0x3c2/0x510 [ 38.121965][ T725] should_failslab+0xac/0x100 [ 38.121987][ T725] __kmalloc_cache_noprof+0x41/0x470 [ 38.122008][ T725] ? udmabuf_create+0xe2/0x1250 [ 38.122027][ T725] udmabuf_create+0xe2/0x1250 [ 38.122044][ T725] ? ioctl_has_perm+0x39a/0x500 [ 38.122065][ T725] ? has_cap_mac_admin+0xd0/0xd0 [ 38.122084][ T725] ? proc_fail_nth_write+0x184/0x220 [ 38.122110][ T725] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 38.122136][ T725] ? udmabuf_ioctl+0x310/0x310 [ 38.122153][ T725] ? __check_object_size+0xe6/0x870 [ 38.122172][ T725] ? selinux_file_ioctl+0x732/0x1480 [ 38.122192][ T725] ? __cfi___check_object_size+0x10/0x10 [ 38.122212][ T725] ? should_fail+0xf/0x20 [ 38.122231][ T725] ? __kasan_check_write+0x18/0x20 [ 38.122249][ T725] ? _copy_from_user+0x87/0xa0 [ 38.122274][ T725] ? memdup_user+0xb1/0x170 [ 38.122291][ T725] ? udmabuf_ioctl+0x22c/0x310 [ 38.122308][ T725] udmabuf_ioctl+0x29b/0x310 [ 38.122326][ T725] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 38.122345][ T725] ? __fget_files+0x2bc/0x330 [ 38.122367][ T725] ? bpf_lsm_file_ioctl+0xd/0x20 [ 38.122389][ T725] ? security_file_ioctl+0x3e/0x110 [ 38.122408][ T725] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 38.122425][ T725] __se_sys_ioctl+0x123/0x1b0 [ 38.122447][ T725] __x64_sys_ioctl+0x7f/0xa0 [ 38.122468][ T725] x64_sys_call+0x1878/0x2ee0 [ 38.122485][ T725] do_syscall_64+0x57/0xf0 [ 38.122502][ T725] ? clear_bhb_loop+0x50/0xa0 [ 38.122524][ T725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.122545][ T725] RIP: 0033:0x7f4f2539e159 [ 38.122561][ T725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.122577][ T725] RSP: 002b:00007f4f2623e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.122598][ T725] RAX: ffffffffffffffda RBX: 00007f4f25625fa0 RCX: 00007f4f2539e159 [ 38.122612][ T725] RDX: 0000200000000140 RSI: 0000000040087543 RDI: 0000000000000003 [ 38.122624][ T725] RBP: 00007f4f2623e090 R08: 0000000000000000 R09: 0000000000000000 [ 38.122636][ T725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.122647][ T725] R13: 00007f4f25626038 R14: 00007f4f25625fa0 R15: 00007ffe9b1d2a88 [ 38.122662][ T725] [ 38.175972][ T65] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 38.420532][ T65] usb 4-1: USB disconnect, device number 7 [ 38.738838][ T749] bridge0: port 3(veth0_vlan) entered blocking state [ 38.745622][ T749] bridge0: port 3(veth0_vlan) entered disabled state [ 38.752669][ T749] veth0_vlan: entered allmulticast mode [ 38.756243][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.759311][ T749] bridge0: port 3(veth0_vlan) entered blocking state [ 38.772501][ T749] bridge0: port 3(veth0_vlan) entered forwarding state [ 38.920495][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 38.926662][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.936837][ T310] usb 2-1: config 0 has no interfaces? [ 38.943771][ T310] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 38.952905][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.960961][ T310] usb 2-1: Product: syz [ 38.965161][ T310] usb 2-1: Manufacturer: syz [ 38.969735][ T310] usb 2-1: SerialNumber: syz [ 38.974915][ T310] usb 2-1: config 0 descriptor?? [ 39.115008][ T763] netlink: 'syz.0.130': attribute type 7 has an invalid length. [ 39.136088][ T763] netlink: 'syz.0.130': attribute type 5 has an invalid length. [ 39.143970][ T763] netlink: 17 bytes leftover after parsing attributes in process `syz.0.130'. [ 39.162604][ T65] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.320329][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 39.326585][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.337495][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 39.348281][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 39.361165][ T65] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 39.370201][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.379050][ T65] usb 4-1: config 0 descriptor?? [ 39.420313][ T453] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.571391][ T453] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 39.580547][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.789004][ T65] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 40.060309][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.189413][ T65] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-71 [ 40.197441][ T65] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-71 [ 40.206366][ T65] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-71 [ 40.215628][ T65] nintendo 0003:057E:2019.0004: probe - fail = -71 [ 40.222195][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 40.227399][ T65] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -71 [ 40.238074][ T65] usb 4-1: USB disconnect, device number 8 [ 40.244339][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.256940][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.269753][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.276385][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 40.285454][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.294243][ T9] usb 3-1: config 0 descriptor?? [ 40.704876][ T9] hid-generic 0003:0B05:18C6.0005: unknown main item tag 0x0 [ 40.716136][ T9] hid-generic 0003:0B05:18C6.0005: unknown main item tag 0x0 [ 40.723913][ T9] hid-generic 0003:0B05:18C6.0005: unknown main item tag 0x0 [ 40.731391][ T9] hid-generic 0003:0B05:18C6.0005: unknown main item tag 0x0 [ 40.738811][ T9] hid-generic 0003:0B05:18C6.0005: unknown main item tag 0x0 [ 40.751766][ T9] hid-generic 0003:0B05:18C6.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.2-1/input0 [ 40.960645][ T779] netlink: 'syz.2.133': attribute type 58 has an invalid length. [ 40.981358][ T779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.133'. [ 40.997181][ T779] incfs_lookup_dentry err:-13 [ 41.002513][ T779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=779 comm=syz.2.133 [ 41.016202][ T453] usbhid 1-1:1.0: can't add hid device: -71 [ 41.024000][ T453] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 41.032975][ T453] usb 1-1: USB disconnect, device number 7 [ 41.075469][ T798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=798 comm=syz.3.142 [ 41.202392][ T806] kvm: apic: phys broadcast and lowest prio [ 41.209364][ T806] netlink: 'syz.3.146': attribute type 11 has an invalid length. [ 41.219602][ T806] rust_binder: 805:806 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.227717][ T806] rust_binder: Write failure EINVAL in pid:111 [ 41.519176][ T453] usb 2-1: USB disconnect, device number 7 [ 41.541685][ T65] usb 3-1: USB disconnect, device number 7 [ 41.790320][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.890317][ T453] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.970846][ T823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.979401][ T823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.000700][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.009654][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.040303][ T453] usb 2-1: Using ep0 maxpacket: 16 [ 42.046679][ T453] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.056966][ T453] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.069968][ T453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.076689][ T453] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 42.085922][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.098521][ T453] usb 2-1: config 0 descriptor?? [ 42.309710][ T453] usbhid 2-1:0.0: can't add hid device: -71 [ 42.316473][ T453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.327937][ T453] usb 2-1: USB disconnect, device number 8 [ 42.457900][ T36] kauditd_printk_skb: 471 callbacks suppressed [ 42.457910][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.457916][ T36] audit: type=1400 audit(1789613355.939:736): avc: denied { load_policy } for pid=846 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.457947][ T847] SELinux: failed to load policy [ 42.492938][ T36] audit: type=1400 audit(1789613355.959:737): avc: denied { read } for pid=846 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.493907][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.527658][ T847] SELinux: failed to load policy [ 42.533023][ T847] SELinux: policydb magic number 0x6a does not match expected magic number 0xf97cff8c [ 42.542882][ T847] SELinux: failed to load policy [ 42.548016][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.557737][ T847] SELinux: failed to load policy [ 42.563456][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.573133][ T847] SELinux: failed to load policy [ 42.578160][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.587926][ T847] SELinux: failed to load policy [ 42.593010][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.603289][ T847] SELinux: failed to load policy [ 42.608304][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.617887][ T847] SELinux: failed to load policy [ 42.622964][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.632577][ T847] SELinux: failed to load policy [ 42.637605][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.647193][ T847] SELinux: failed to load policy [ 42.652349][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.662269][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.671974][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.681720][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.691530][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.701322][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.711044][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.721176][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.730993][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.740789][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.750513][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.760215][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.769967][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.779732][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.789495][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.799210][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.808912][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.818578][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.828368][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.848254][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.858129][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.861850][ T854] futex_wake_op: syz.1.161 tries to shift op by 144; fix this program [ 42.867811][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.885988][ T847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.916527][ T36] audit: type=1400 audit(1789613356.399:738): avc: denied { ioctl } for pid=855 comm="syz.2.162" path="socket:[12449]" dev="sockfs" ino=12449 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.942688][ T36] audit: type=1400 audit(1789613356.429:739): avc: denied { map } for pid=855 comm="syz.2.162" path="socket:[12451]" dev="sockfs" ino=12451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 43.110317][ T437] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.220323][ T453] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.260286][ T437] usb 1-1: Using ep0 maxpacket: 16 [ 43.265468][ T65] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 43.274013][ T437] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.284341][ T437] usb 1-1: config 0 has no interfaces? [ 43.291224][ T437] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 43.300294][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.308279][ T437] usb 1-1: Product: syz [ 43.312452][ T437] usb 1-1: Manufacturer: syz [ 43.317121][ T437] usb 1-1: SerialNumber: syz [ 43.322409][ T437] usb 1-1: config 0 descriptor?? [ 43.380285][ T453] usb 3-1: Using ep0 maxpacket: 16 [ 43.386594][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.397662][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.407450][ T453] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.420275][ T453] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.420303][ T65] usb 2-1: device descriptor read/64, error -71 [ 43.429311][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.430335][ T453] usb 3-1: config 0 descriptor?? [ 43.680433][ T65] usb 2-1: device descriptor read/64, error -71 [ 43.852157][ T453] usbhid 3-1:0.0: can't add hid device: -71 [ 43.858244][ T453] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.867221][ T453] usb 3-1: USB disconnect, device number 8 [ 43.920316][ T65] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 44.050324][ T65] usb 2-1: device descriptor read/64, error -71 [ 44.300323][ T65] usb 2-1: device descriptor read/64, error -71 [ 44.366839][ T36] audit: type=1400 audit(1789613357.849:740): avc: denied { create } for pid=874 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 44.410575][ T65] usb usb2-port1: attempt power cycle [ 44.435895][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.444182][ T9] usb 4-1: no configurations [ 44.449023][ T9] usb 4-1: can't read configurations, error -22 [ 44.770307][ T65] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 44.791352][ T65] usb 2-1: device descriptor read/8, error -71 [ 44.921395][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.160384][ T65] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 45.181262][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.312111][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.420421][ T65] usb usb2-port1: unable to enumerate USB device [ 45.463352][ T900] SELinux: unknown common  [ 45.484727][ T36] audit: type=1400 audit(1789613358.969:741): avc: denied { read write } for pid=903 comm="syz.2.175" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.489802][ T904] netlink: 340 bytes leftover after parsing attributes in process `syz.2.175'. [ 45.508698][ T36] audit: type=1400 audit(1789613358.969:742): avc: denied { open } for pid=903 comm="syz.2.175" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.541374][ T36] audit: type=1400 audit(1789613358.969:743): avc: denied { ioctl } for pid=903 comm="syz.2.175" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.854129][ T453] usb 1-1: USB disconnect, device number 8 [ 45.878586][ T36] audit: type=1400 audit(1789613359.359:744): avc: denied { name_bind } for pid=909 comm="syz.0.177" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.926047][ T36] audit: type=1400 audit(1789613359.409:745): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.018380][ T916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.280331][ T453] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 46.340351][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.431128][ T453] usb 1-1: not running at top speed; connect to a high speed hub [ 46.439568][ T453] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.450812][ T65] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 46.450860][ T453] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 46.469997][ T453] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 46.478513][ T453] usb 1-1: Product: syz [ 46.482783][ T453] usb 1-1: Manufacturer: syz [ 46.490307][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 46.493771][ T453] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 46.503441][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.514927][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 46.525557][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 46.535204][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.543412][ T9] usb 3-1: Product: syz [ 46.547675][ T9] usb 3-1: Manufacturer: syz [ 46.552497][ T9] usb 3-1: SerialNumber: syz [ 46.557987][ T9] usb 3-1: config 0 descriptor?? [ 46.611378][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.622566][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.632895][ T65] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 46.642033][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.657612][ T65] usb 2-1: config 0 descriptor?? [ 46.703837][ T453] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 46.714563][ T453] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 46.723586][ T453] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 46.733455][ T453] usb 1-1: USB disconnect, device number 9 [ 46.843714][ T968] netlink: 188 bytes leftover after parsing attributes in process `syz.3.196'. [ 46.864714][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.873323][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.090813][ T65] playstation 0003:054C:0DF2.0006: item fetching failed at offset 2/5 [ 47.099174][ T65] playstation 0003:054C:0DF2.0006: Parse failed [ 47.105655][ T65] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 47.284752][ T65] usb 2-1: USB disconnect, device number 13 [ 47.470313][ T453] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 47.621482][ T453] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.632533][ T453] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.642667][ T453] usb 1-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 47.651907][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.891769][ T976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 48.069751][ T453] hid-sensor-hub 0003:8086:0000.0007: hiddev96,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.0-1/input0 [ 48.315182][ T453] usb 1-1: USB disconnect, device number 10 [ 48.804694][ T983] sd 0:0:1:0: PR command failed: 1026 [ 48.811246][ T983] sd 0:0:1:0: Sense Key : 0x5 [current] [ 48.817852][ T983] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 48.857977][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 48.857993][ T36] audit: type=1400 audit(1789613362.339:753): avc: denied { mount } for pid=986 comm="syz.0.202" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 48.901953][ T36] audit: type=1400 audit(1789613362.389:754): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 48.934209][ T36] audit: type=1400 audit(1789613362.419:755): avc: denied { accept } for pid=988 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.010322][ T453] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 49.111667][ T310] usb 3-1: USB disconnect, device number 9 [ 49.118013][ T36] audit: type=1400 audit(1789613362.599:756): avc: denied { getopt } for pid=994 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.150294][ T453] usb 2-1: device descriptor read/64, error -71 [ 49.182705][ T997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 49.193149][ T36] audit: type=1400 audit(1789613362.679:757): avc: denied { write } for pid=999 comm="syz.0.208" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.216811][ T1000] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.216833][ T1000] rust_binder: Read failure Err(EFAULT) in pid:154 [ 49.226048][ T1000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.232685][ T36] audit: type=1400 audit(1789613362.699:758): avc: denied { set_context_mgr } for pid=999 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.269127][ T36] audit: type=1400 audit(1789613362.709:759): avc: denied { map } for pid=999 comm="syz.0.208" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.390296][ T453] usb 2-1: device descriptor read/64, error -71 [ 49.640285][ T453] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 49.780312][ T453] usb 2-1: device descriptor read/64, error -71 [ 49.849911][ T1020] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.849944][ T1020] rust_binder: Read failure Err(EFAULT) in pid:161 [ 49.890328][ T314] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 49.923596][ T36] audit: type=1400 audit(1789613363.409:760): avc: denied { ioctl } for pid=1023 comm="syz.0.219" path="socket:[13479]" dev="sockfs" ino=13479 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.981806][ T36] audit: type=1400 audit(1789613363.469:761): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.021571][ T36] audit: type=1400 audit(1789613363.509:762): avc: denied { write } for pid=1026 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.041095][ T453] usb 2-1: device descriptor read/64, error -71 [ 50.060350][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 50.070121][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.082804][ T314] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 50.093509][ T314] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 50.103650][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.111865][ T314] usb 3-1: Product: syz [ 50.116169][ T314] usb 3-1: Manufacturer: syz [ 50.121921][ T314] usb 3-1: SerialNumber: syz [ 50.130962][ T314] usb 3-1: config 0 descriptor?? [ 50.150397][ T453] usb usb2-port1: attempt power cycle [ 50.195436][ T1029] tmpfs: Unknown parameter 'nMnŻodes' [ 50.490288][ T453] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 50.531334][ T453] usb 2-1: device descriptor read/8, error -71 [ 50.661274][ T453] usb 2-1: device descriptor read/8, error -71 [ 50.900290][ T453] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 50.931299][ T453] usb 2-1: device descriptor read/8, error -71 [ 51.061274][ T453] usb 2-1: device descriptor read/8, error -71 [ 51.180412][ T453] usb usb2-port1: unable to enumerate USB device [ 51.280307][ T437] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.451291][ T437] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.462999][ T437] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.472151][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.480223][ T437] usb 1-1: Product: syz [ 51.484494][ T437] usb 1-1: Manufacturer: syz [ 51.489154][ T437] usb 1-1: SerialNumber: syz [ 51.809729][ T1049] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.809753][ T1049] rust_binder: Read failure Err(EFAULT) in pid:140 [ 52.333439][ T437] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 52.370487][ T437] cdc_ncm 1-1:1.0: bind() failure [ 52.376162][ T437] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 52.390285][ T437] cdc_ncm 1-1:1.1: bind() failure [ 52.396597][ T437] usb 1-1: USB disconnect, device number 11 [ 52.649052][ T437] usb 3-1: USB disconnect, device number 10 [ 52.982872][ T1073] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.982905][ T1073] rust_binder: Read failure Err(EFAULT) in pid:194 [ 53.000295][ T437] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.191449][ T437] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 53.201463][ T437] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 53.211269][ T437] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 53.222357][ T437] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 53.233639][ T437] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 53.242748][ T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.260749][ T1062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.280347][ T1062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.287566][ T1062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.296806][ T437] pl2303 3-1:1.0: pl2303 converter detected [ 53.306973][ T437] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 53.312786][ T453] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.321501][ T1025] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.480304][ T1025] usb 1-1: Using ep0 maxpacket: 16 [ 53.486650][ T453] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 53.495783][ T1025] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.506295][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.514573][ T1025] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 53.524860][ T314] usb 3-1: USB disconnect, device number 11 [ 53.533966][ T314] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 53.547480][ T453] usb 2-1: config 0 descriptor?? [ 53.554008][ T1025] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 53.563868][ T1025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.572067][ T314] pl2303 3-1:1.0: device disconnected [ 53.578432][ T453] usb 2-1: bad CDC descriptors [ 53.592389][ T1025] usb 1-1: Product: syz [ 53.596583][ T1025] usb 1-1: Manufacturer: syz [ 53.601977][ T1025] usb 1-1: SerialNumber: syz [ 53.610531][ T1025] usb 1-1: config 0 descriptor?? [ 53.819022][ T1081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 53.829872][ T1081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.849471][ T1081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.915770][ T437] usb 2-1: USB disconnect, device number 18 [ 54.109836][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 54.109852][ T36] audit: type=1400 audit(1789613367.589:772): avc: denied { write } for pid=1085 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.137016][ T1088] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.147132][ T1088] sel_write_load: 24 callbacks suppressed [ 54.147145][ T1088] SELinux: failed to load policy [ 54.158442][ T36] audit: type=1400 audit(1789613367.619:773): avc: denied { load_policy } for pid=1085 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.402494][ T36] audit: type=1400 audit(1789613367.889:774): avc: denied { block_suspend } for pid=1096 comm="syz.2.243" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.424417][ T1097] Restarting kernel threads ... done. [ 54.436121][ T36] audit: type=1400 audit(1789613367.909:775): avc: denied { ioctl } for pid=1096 comm="syz.2.243" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.483618][ T1099] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.483641][ T1099] rust_binder: Read failure Err(EFAULT) in pid:153 [ 54.490816][ T1101] netlink: 'syz.2.245': attribute type 20 has an invalid length. [ 54.565406][ T36] audit: type=1400 audit(1789613368.049:776): avc: denied { setopt } for pid=1106 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.823438][ T1126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1126 comm=syz.1.253 [ 54.849939][ T1126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 54.860408][ T1126] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 54.871149][ T36] audit: type=1400 audit(1789613368.349:777): avc: denied { relabelto } for pid=1125 comm="syz.1.253" name="60" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 54.917845][ T1130] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.917867][ T1130] rust_binder: Read failure Err(EFAULT) in pid:178 [ 54.933593][ T36] audit: type=1400 audit(1789613368.359:778): avc: denied { associate } for pid=1125 comm="syz.1.253" name="60" dev="tmpfs" ino=337 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 54.968042][ T36] audit: type=1400 audit(1789613368.389:779): avc: denied { write } for pid=294 comm="syz-executor" name="60" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 54.994852][ T36] audit: type=1400 audit(1789613368.389:780): avc: denied { remove_name } for pid=294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 55.023252][ T36] audit: type=1400 audit(1789613368.389:781): avc: denied { rmdir } for pid=294 comm="syz-executor" name="60" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 55.160369][ T1025] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 55.310328][ T1025] usb 2-1: Using ep0 maxpacket: 16 [ 55.316511][ T1025] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 55.324711][ T1025] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 55.334904][ T1025] usb 2-1: config 32 has no interface number 0 [ 55.341135][ T1025] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 55.350188][ T1025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.370318][ T437] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.521413][ T437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.532443][ T437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.542208][ T437] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.555030][ T437] usb 4-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 55.564107][ T437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.580481][ T437] usb 4-1: config 0 descriptor?? [ 55.592612][ T65] usb 2-1: USB disconnect, device number 19 [ 55.788664][ T437] usbhid 4-1:0.0: can't add hid device: -71 [ 55.794737][ T437] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 55.803753][ T437] usb 4-1: USB disconnect, device number 11 [ 55.873077][ T1156] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.873092][ T1156] rust_binder: Read failure Err(EFAULT) in pid:201 [ 56.075895][ T1025] usb 1-1: USB disconnect, device number 12 [ 56.240377][ T437] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 56.304050][ T1172] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.331285][ T1175] GUP no longer grows the stack in syz.1.271 (1175): 200000005000-200000008000 (200000004000) [ 56.341962][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: syz.1.271 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 56.341993][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.342004][ T1175] Call Trace: [ 56.342011][ T1175] [ 56.342018][ T1175] __dump_stack+0x21/0x30 [ 56.342048][ T1175] dump_stack_lvl+0x140/0x1c0 [ 56.342072][ T1175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.342090][ T1175] ? find_vma+0xd3/0x120 [ 56.342102][ T1175] dump_stack+0x19/0x20 [ 56.342113][ T1175] fixup_user_fault+0x616/0x6a0 [ 56.342126][ T1175] fault_in_user_writeable+0x75/0xe0 [ 56.342141][ T1175] futex_lock_pi+0x2ed/0xa70 [ 56.342159][ T1175] ? futex_unqueue+0x136/0x160 [ 56.342171][ T1175] ? __cfi_futex_lock_pi+0x10/0x10 [ 56.342185][ T1175] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.342195][ T1175] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.342205][ T1175] ? down_read+0x95/0xe0 [ 56.342218][ T1175] do_futex+0x270/0x510 [ 56.342230][ T1175] ? __mm_populate+0x3ea/0x440 [ 56.342242][ T1175] ? __cfi_do_futex+0x10/0x10 [ 56.342254][ T1175] ? vm_mmap_pgoff+0x152/0x4b0 [ 56.342264][ T1175] __se_sys_futex+0x13c/0x320 [ 56.342277][ T1175] ? __x64_sys_futex+0x110/0x110 [ 56.342290][ T1175] ? __kasan_check_write+0x18/0x20 [ 56.342300][ T1175] __x64_sys_futex+0xe9/0x110 [ 56.342313][ T1175] x64_sys_call+0x227f/0x2ee0 [ 56.342322][ T1175] do_syscall_64+0x57/0xf0 [ 56.342332][ T1175] ? clear_bhb_loop+0x50/0xa0 [ 56.342345][ T1175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.342356][ T1175] RIP: 0033:0x7f5dbdf9e159 [ 56.342367][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.342376][ T1175] RSP: 002b:00007f5dbee9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.342389][ T1175] RAX: ffffffffffffffda RBX: 00007f5dbe225fa0 RCX: 00007f5dbdf9e159 [ 56.342397][ T1175] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 56.342404][ T1175] RBP: 00007f5dbe03506b R08: 0000000000000000 R09: 0000000000000001 [ 56.342411][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.342418][ T1175] R13: 00007f5dbe226038 R14: 00007f5dbe225fa0 R15: 00007ffec6a15e38 [ 56.342427][ T1175] [ 56.560535][ T1025] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 56.581448][ T437] usb 3-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 56.591778][ T437] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 56.600872][ T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.609642][ T437] usb 3-1: config 0 descriptor?? [ 56.615510][ T437] usb 3-1: bad CDC descriptors [ 56.630308][ T314] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.692987][ T1187] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.693003][ T1187] rust_binder: Read failure Err(EFAULT) in pid:185 [ 56.720316][ T1025] usb 1-1: Using ep0 maxpacket: 8 [ 56.733468][ T1025] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.741841][ T1025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 56.752753][ T1025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.762411][ T1025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 56.773648][ T1025] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 56.783625][ T1025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 56.793324][ T1025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 51447, setting to 1024 [ 56.804438][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 56.809660][ T1025] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 56.822155][ T31] usb 3-1: USB disconnect, device number 12 [ 56.828980][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.838535][ T1025] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 56.848721][ T314] usb 4-1: config 5 has an invalid interface number: 191 but max is 0 [ 56.856920][ T1025] usb 1-1: New USB device strings: Mfr=29, Product=25, SerialNumber=3 [ 56.865121][ T314] usb 4-1: config 5 has no interface number 0 [ 56.871230][ T1025] usb 1-1: Product: syz [ 56.875389][ T1025] usb 1-1: Manufacturer: syz [ 56.879977][ T1025] usb 1-1: SerialNumber: syz [ 56.884642][ T314] usb 4-1: config 5 interface 191 has no altsetting 0 [ 56.892210][ T1025] usb 1-1: config 0 descriptor?? [ 56.897471][ T1163] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 56.897729][ T314] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=88.be [ 56.904898][ T1163] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 56.913765][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.928877][ T314] usb 4-1: Product: syz [ 56.934310][ T314] usb 4-1: Manufacturer: syz [ 56.939283][ T314] usb 4-1: SerialNumber: syz [ 56.980289][ T437] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.130329][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 57.135617][ T1163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.148247][ T437] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 57.151937][ T314] usb 4-1: bad CDC descriptors [ 57.160334][ T437] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 57.165682][ T314] usb 4-1: USB disconnect, device number 12 [ 57.190327][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.198353][ T437] usb 2-1: Product: syz [ 57.203205][ T437] usb 2-1: Manufacturer: syz [ 57.208361][ T437] usb 2-1: SerialNumber: syz [ 57.217899][ T437] usb 2-1: config 0 descriptor?? [ 57.278701][ T437] usb 1-1: USB disconnect, device number 13 [ 57.630322][ T314] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 57.784095][ T314] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 57.793307][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.801556][ T314] usb 3-1: Product: syz [ 57.805824][ T314] usb 3-1: Manufacturer: syz [ 57.810665][ T314] usb 3-1: SerialNumber: syz [ 57.828499][ T1212] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.828519][ T1212] rust_binder: Read failure Err(EFAULT) in pid:206 [ 57.974241][ T1231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.290'. [ 58.012273][ T1268] netlink: 68 bytes leftover after parsing attributes in process `syz.3.290'. [ 58.017008][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.039336][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.047714][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.056680][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.065615][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.077958][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.086854][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.110470][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.119818][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.130091][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.152419][ T314] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 58.153693][ T1281] netlink: 180 bytes leftover after parsing attributes in process `syz.0.294'. [ 58.160118][ T314] usb 3-1: USB disconnect, device number 13 [ 58.341093][ T1296] cgroup: fork rejected by pids controller in /syz3 [ 58.398574][ T1431] FAULT_INJECTION: forcing a failure. [ 58.398574][ T1431] name failslab, interval 1, probability 0, space 0, times 0 [ 58.411572][ T1431] CPU: 0 UID: 0 PID: 1431 Comm: syz.3.300 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 58.411593][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.411613][ T1431] Call Trace: [ 58.411617][ T1431] [ 58.411622][ T1431] __dump_stack+0x21/0x30 [ 58.411642][ T1431] dump_stack_lvl+0x140/0x1c0 [ 58.411657][ T1431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.411671][ T1431] ? kasan_save_track+0x4f/0x80 [ 58.411682][ T1431] ? kasan_save_track+0x3e/0x80 [ 58.411694][ T1431] ? kasan_save_alloc_info+0x3a/0x50 [ 58.411703][ T1431] ? xas_create+0xe23/0xf80 [ 58.411714][ T1431] ? do_eventfd+0x88/0x390 [ 58.411724][ T1431] dump_stack+0x19/0x20 [ 58.411737][ T1431] should_fail_ex+0x3c2/0x510 [ 58.411750][ T1431] should_failslab+0xac/0x100 [ 58.411764][ T1431] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 58.411775][ T1431] ? __d_alloc+0x42/0x8c0 [ 58.411785][ T1431] ? expand_files+0xda/0x6f0 [ 58.411797][ T1431] __d_alloc+0x42/0x8c0 [ 58.411807][ T1431] d_alloc_pseudo+0x23/0xc0 [ 58.411817][ T1431] alloc_file_pseudo+0xde/0x1f0 [ 58.411830][ T1431] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 58.411843][ T1431] ? _raw_spin_unlock+0x45/0x60 [ 58.411854][ T1431] anon_inode_getfile+0xaa/0x190 [ 58.411868][ T1431] do_eventfd+0x17e/0x390 [ 58.411878][ T1431] __x64_sys_eventfd2+0x5e/0x70 [ 58.411888][ T1431] x64_sys_call+0x29ec/0x2ee0 [ 58.411897][ T1431] do_syscall_64+0x57/0xf0 [ 58.411907][ T1431] ? clear_bhb_loop+0x50/0xa0 [ 58.411919][ T1431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.411931][ T1431] RIP: 0033:0x7fa73479e159 [ 58.411941][ T1431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.411950][ T1431] RSP: 002b:00007fa73558f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 58.411963][ T1431] RAX: ffffffffffffffda RBX: 00007fa734a25fa0 RCX: 00007fa73479e159 [ 58.411971][ T1431] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 58.411978][ T1431] RBP: 00007fa73483506b R08: 0000000000000000 R09: 0000000000000000 [ 58.411984][ T1431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.411991][ T1431] R13: 00007fa734a26038 R14: 00007fa734a25fa0 R15: 00007ffef36448d8 [ 58.412003][ T1431] [ 58.646378][ T437] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 58.697900][ T1433] kvm: emulating exchange as write [ 58.814449][ T1436] ------------[ cut here ]------------ [ 58.819984][ T1436] WARNING: CPU: 1 PID: 1436 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 58.829555][ T1436] Modules linked in: [ 58.833499][ T1436] CPU: 1 UID: 0 PID: 1436 Comm: syz.3.301 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 58.845008][ T1436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.855140][ T1436] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 58.861209][ T1436] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 98 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 58.880976][ T1436] RSP: 0018:ffffc900108cf640 EFLAGS: 00010246 [ 58.887067][ T1436] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 58.895086][ T1436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900108cf6f8 [ 58.903095][ T1436] RBP: ffffc900108cf780 R08: ffffc900108cf6f7 R09: 0000000000000000 [ 58.911098][ T1436] R10: ffffc900108cf6e0 R11: fffff52002119edf R12: ffffc900108cf680 [ 58.919081][ T1436] R13: dffffc0000000000 R14: 1ffff92002119ecc R15: 0000000000000000 [ 58.927093][ T1436] FS: 00007fa7331d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.936056][ T1436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.942668][ T1436] CR2: 00007fa7331d5ff8 CR3: 000000011907c000 CR4: 00000000003526b0 [ 58.950687][ T1436] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083 [ 58.958672][ T1436] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 58.966691][ T1436] Call Trace: [ 58.969122][ T437] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 58.969969][ T1436] [ 58.969979][ T1436] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.978557][ T437] usb 1-1: config 0 has no interfaces? [ 58.980679][ T1436] ? __kasan_slab_alloc+0x73/0x90 [ 58.987100][ T437] usb 1-1: config 0 has no interfaces? [ 58.991841][ T1436] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 58.991871][ T1436] ? hashtab_init+0xd6/0x1f0 [ 58.997711][ T437] usb 1-1: config 0 has no interfaces? [ 59.002344][ T1436] ___kmalloc_large_node+0x81/0x220 [ 59.012089][ T437] usb 1-1: config 0 has no interfaces? [ 59.012584][ T1436] ? hashtab_init+0xd6/0x1f0 [ 59.019096][ T437] usb 1-1: config 0 has no interfaces? [ 59.023160][ T1436] __kmalloc_large_node_noprof+0x1e/0xd0 [ 59.029420][ T437] usb 1-1: config 0 has no interfaces? [ 59.033191][ T1436] ? hashtab_init+0xd6/0x1f0 [ 59.039381][ T437] usb 1-1: config 0 has no interfaces? [ 59.044264][ T1436] __kmalloc_noprof+0x326/0x510 [ 59.044290][ T1436] ? __cfi_ebitmap_read+0x10/0x10 [ 59.055080][ T437] usb 1-1: config 0 has no interfaces? [ 59.059798][ T1436] hashtab_init+0xd6/0x1f0 [ 59.075265][ T437] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice=91.00 [ 59.079548][ T1436] ? policydb_read+0x865/0x2860 [ 59.079577][ T1436] symtab_init+0x44/0x70 [ 59.094090][ T437] usb 1-1: New USB device strings: Mfr=229, Product=29, SerialNumber=175 [ 59.097681][ T1436] policydb_read+0x8e1/0x2860 [ 59.110796][ T1436] ? __kasan_kmalloc+0x96/0xb0 [ 59.112646][ T437] usb 1-1: Product: syz [ 59.115578][ T1436] ? __cfi_policydb_read+0x10/0x10 [ 59.123509][ T437] usb 1-1: Manufacturer: syz [ 59.124836][ T1436] ? security_load_policy+0x130/0x12d0 [ 59.131647][ T437] usb 1-1: SerialNumber: syz [ 59.134846][ T1436] security_load_policy+0x16a/0x12d0 [ 59.144701][ T1436] ? avc_has_perm_noaudit+0x289/0x360 [ 59.150103][ T1436] ? _raw_spin_unlock+0x45/0x60 [ 59.154984][ T1436] ? __kasan_check_write+0x18/0x20 [ 59.160101][ T1436] ? mutex_lock+0x97/0x1d0 [ 59.164552][ T1436] ? __cfi_security_load_policy+0x10/0x10 [ 59.170299][ T1436] ? __kasan_check_write+0x18/0x20 [ 59.173010][ T437] usb 1-1: config 0 descriptor?? [ 59.175413][ T1436] sel_write_load+0x258/0x600 [ 59.185036][ T1436] ? __cfi_sel_write_load+0x10/0x10 [ 59.190291][ T1436] ? bpf_lsm_file_permission+0xd/0x20 [ 59.195689][ T1436] ? __cfi_sel_write_load+0x10/0x10 [ 59.201061][ T1436] vfs_write+0x3c1/0xfd0 [ 59.205322][ T1436] ? __cfi_vfs_write+0x10/0x10 [ 59.210295][ T1436] ? __kasan_check_write+0x18/0x20 [ 59.215420][ T1436] ? mutex_lock+0x97/0x1d0 [ 59.219854][ T1436] ? __cfi_mutex_lock+0x10/0x10 [ 59.224756][ T1436] ksys_write+0x145/0x260 [ 59.229115][ T1436] ? xfd_validate_state+0x68/0x140 [ 59.234276][ T1436] ? __cfi_ksys_write+0x10/0x10 [ 59.239138][ T1436] ? __kasan_check_write+0x18/0x20 [ 59.244288][ T1436] ? fpregs_restore_userregs+0x11c/0x260 [ 59.249941][ T1436] __x64_sys_write+0x7f/0x90 [ 59.254563][ T1436] x64_sys_call+0x271c/0x2ee0 [ 59.259248][ T1436] do_syscall_64+0x57/0xf0 [ 59.263689][ T1436] ? clear_bhb_loop+0x50/0xa0 [ 59.268380][ T1436] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.274331][ T1436] RIP: 0033:0x7fa73479e159 [ 59.278757][ T1436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.298459][ T1436] RSP: 002b:00007fa7331d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.306916][ T1436] RAX: ffffffffffffffda RBX: 00007fa734a26180 RCX: 00007fa73479e159 [ 59.314938][ T1436] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000006 [ 59.322927][ T1436] RBP: 00007fa73483506b R08: 0000000000000000 R09: 0000000000000000 [ 59.330931][ T1436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.338901][ T1436] R13: 00007fa734a26218 R14: 00007fa734a26180 R15: 00007ffef36448d8 [ 59.346929][ T1436] [ 59.349950][ T1436] ---[ end trace 0000000000000000 ]--- [ 59.355779][ T1436] SELinux: failed to load policy [ 59.573727][ T1439] netlink: 'syz.0.296': attribute type 12 has an invalid length. [ 59.631125][ T314] usb 1-1: USB disconnect, device number 14 [ 59.712980][ T437] usb 2-1: USB disconnect, device number 20