last executing test programs: 3.634647811s ago: executing program 0 (id=284): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0xb522f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) finit_module(r1, 0x0, 0x0) futex(&(0x7f0000000040)=0x7, 0x3, 0x4, 0x0, 0x0, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = eventfd2(0x3, 0x1) write$eventfd(r2, &(0x7f0000000000)=0x8, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex(0x0, 0x3, 0x20, 0x0, &(0x7f0000048000), 0x2) unlinkat(0xffffffffffffffff, 0x0, 0x134) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000002c0)={'lo\x00', @random="01320136b1ff"}) 3.599657322s ago: executing program 0 (id=285): r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) munlockall() r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x44c, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setreuid(0x0, 0xee00) r5 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}]}}) rt_sigtimedwait(&(0x7f0000000440)={[0x10]}, 0x0, 0x0, 0xff17) tkill(r0, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x48}}, 0x20004050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x32cc0000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000140)={0x2c, 0x9, r9, 0x22}, 0x10) remap_file_pages(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x10000) socket$can_raw(0x1d, 0x3, 0x1) 3.588423823s ago: executing program 0 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000040)=0x43, 0xfffffffffffffce6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="36f3456c6666460f0058cb66400f383fabcc0f0000660fdf74d28eb90b0300000f3266400f38805272470f06d221c4c36d42137eb975080000b83af353acbaff5043400f30", 0x45}], 0x1, 0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet6(r4, 0x0, 0x0, 0x10040, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.499615054s ago: executing program 0 (id=287): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='minix\x00', 0x800000, 0x0) (async) r4 = syz_open_procfs(r2, &(0x7f0000000400)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) setuid(0xee01) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f00000001c0)={'sit0\x00', 0x0}) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffc00}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040910) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) sendto$inet6(r7, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) (async) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x10000, 0x4) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 3.499362725s ago: executing program 0 (id=288): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebc", 0x2b}], 0x1}, 0xc0d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x204000, 0x145) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/134) 3.499057945s ago: executing program 0 (id=289): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x51, 0xf9, 0x1, 0x7f}, {0xd000, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x5, 0x40}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x5, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x4, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7e, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x25000, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x51, 0xf9, 0x1, 0x7f}, {0xd000, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x5, 0x40}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x5, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x4, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7e, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x25000, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000080)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) exit(0x3) (async) exit(0x3) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000200)) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) 3.024413385s ago: executing program 3 (id=294): r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) syslog(0x2, &(0x7f00000000c0)=""/102, 0x66) 2.865068228s ago: executing program 3 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044010) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff2000090402010101022000090582"], 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) (async) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000101e0000002000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010003"], 0x27c}}, 0x0) 2.350914829s ago: executing program 3 (id=300): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000)=0xa5, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) r3 = getpid() socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) pread64(r4, &(0x7f0000002480)=""/122, 0x7a, 0x100) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x18, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x18, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x10000000) (async) setns(r6, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904500b05a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x40}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r9, 0x1, 0x70bd27, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f3d512cbcba349c436522d276af95701752f8715a504e69ae99efaac"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40880) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f00001b8000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f00001b8000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) (async) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2c0, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2b8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd3}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f3}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "658b7e62c247739c59d48d1a41338222e03c2187a01a3e1b7b891e6e5e8b056dc45036dd659b82571452de571369facc0cfa19315999bcdfb1730fb1c923d0335b60268c9e7ca05bbb0ea2f390395af92b0d76868a7bfc5ef37ef47d322f4ad7e41b5ddffb71f5800ec51c9a258e31803d43166a5daf2e0b1d8a7f5a84b902e7402c61fd50ebc0f082decccb0526b15cdab977263902f0f38dc033f073e22d79b229a683a758400df6df1a4e6146e23bd90bcd280658406cc8cc170d4ae4cec66d6aea"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "d4aba63fef8c61b6df777b618c39e47b65280dc23db7e914ae03b064c0d397a9526ba5"}}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "cc0e3768b55a6cc612d5fdc34b3b3e1156dd9b4ac672"}}, @TIPC_NLA_NODE_ID={0x95, 0x3, "5751355484a8462f907c4db55c942260f5355001904a686aac1021c15f9fa4b844943b015b8c175a1f0950002610af631d3edcc8946cbe5a587c0602cce1752e8c21e6a117a79dc3bd2580841cbc032786539be3f94c5b4635e6d2a35fe9ed81d70d69c3a891643f4b95dc596b88835f1cc8ef57451a431b32de9db9e72031f39d4add431ab497ac7d063aebc398e6935c"}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) connect$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d30303030303130303030303031353636353337323331362c003a5230dcadb7c84dab0fafa4968ea6fcbcf11349b234cb486dd7bc4b11e7285b09fb980a4eb06d64724686fde8434db8956d645a5577aeeb1bca52eca4c747183c4b98f82f8e2faebf38e07c57e9725f3ca2d32f4014138e0abd27c153c7f69fad397f091d239544d371cb8f75b8a192abc1601cf4ab8531e37246ac364648a2b618bf07347c74016348fde60da775069d7dd43eacdb4786cf9a9f402410dcd707ad151402cc3c4ecdb0f12e"]) 1.84166087s ago: executing program 1 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.695681183s ago: executing program 3 (id=306): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003) syz_open_dev$hidraw(&(0x7f00000000c0), 0xfffffffffffffffd, 0xc0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000200)=0xe8) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace(0x8, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}], [{@uid_lt={'uid<', r3}}, {@context={'context', 0x3d, 'staff_u'}}]}) 1.695294783s ago: executing program 1 (id=307): socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5517}) 1.202071904s ago: executing program 3 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x8c9, 0x0, 0x6}, {0x3bc, 0x0, 0x8}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)=@arm64={0x2, 0xd5, 0x4, '\x00', 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 939.15056ms ago: executing program 2 (id=311): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x110) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e22, @multicast1}}) 873.306241ms ago: executing program 1 (id=312): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e21, 0x6580, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000}, 0x1, {[0x3, 0x3, 0x5, 0xfffffbff, 0x8001, 0x1, 0xfff, 0x7]}}, 0x5c) (async) close_range(r0, r0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, &(0x7f00000000c0)=[{0xa, 0x1ff, 0xa}, {0x6, 0x101, 0x97}, {0x21, 0x1ff, 0x9}, {0x1c, 0x101, 0x5}, {0xfffffffa, 0xfe, 0x8}, {0x1b, 0x1ff, 0x7ff}, {0x19, 0xfe, 0xffffffff}, {0x6, 0x1ff, 0x5}, {0x1a, 0x1ff, 0x3}]}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x0, 0x2}, 0xc) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x0, 0x5, 0x6, 0x6b}, {0x8, 0x8, 0x3, 0x4dbdf2f0}, {0xc, 0x25, 0x7, 0x60b}, {0x7, 0x1, 0x4, 0x9}, {0xfffb, 0x6, 0xe, 0x4}, {0x6, 0xc5, 0xfb, 0x5e9a}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000280)=0x1) (async) r3 = gettid() (async) r4 = socket$netlink(0x10, 0x3, 0x15) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2f}}, 0xc) wait4(r3, &(0x7f0000000300), 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000340)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000380)={'\x00', 0x2, 0x0, 0x3}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) ioctl$FITHAW(r1, 0xc0045878) (async, rerun: 64) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000500)={0xb6, 0x0, 0xffffffffffff1603}) (rerun: 64) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f0000000580)={0x8050000, 0xa000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0xc75, 0xc, {{0x2b, 0x4, 0x3, 0x8, 0xac, 0x66, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, {[@generic={0x44, 0x9, "ed6b21ff752390"}, @lsrr={0x83, 0x13, 0xd8, [@broadcast, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0xc8, [@rand_addr=0x64010102, @loopback, @private=0xa010101, @private=0xa010101, @local, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xac, 0x0, 0x4, [0x9]}, @cipso={0x86, 0x2c, 0x3, [{0x5, 0x12, "7a4443fb26612aaf9b85be70664112fb"}, {0x2, 0x2}, {0x0, 0x12, "95d5c3f14fe1fe64d2e6c61c8e923c9e"}]}, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x9, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x5, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb312}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0x2, 0x10, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x3, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x3, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x80, 0x40, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000980)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f00000009c0)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x20, 0x8010, 0x0, 0x7, {{0x37, 0x4, 0x1, 0x1, 0xdc, 0x66, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010100, {[@end, @timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x7, [{@multicast2, 0xb9f0}]}, @timestamp_addr={0x44, 0x14, 0x92, 0x1, 0x1, [{@empty, 0x28b}, {@local, 0xfffffff9}]}, @timestamp_prespec={0x44, 0x54, 0x54, 0x3, 0x3, [{@private=0xa010100, 0x6}, {@empty, 0x8}, {@private=0xa010101, 0x7}, {@empty}, {@private=0xa010102, 0x5}, {@broadcast, 0xb}, {@loopback, 0x6b04}, {@loopback, 0x5}, {@local, 0x8}, {@rand_addr=0x64010102, 0x31}]}, @cipso={0x86, 0x39, 0x2, [{0x6, 0xb, "5824d0e28beda121ae"}, {0x6, 0xc, "6529dae2a750bb7b1a75"}, {0x6, 0x9, "244f0061411f84"}, {0x6, 0x9, "c6135c1f429d68"}, {0x6, 0xa, "6b5a5ed8b6ec7951"}]}, @timestamp_addr={0x44, 0xc, 0xa4, 0x1, 0x0, [{@broadcast, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x64}]}]}}}}}) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000b40)={0x0, @dev, @private}, &(0x7f0000000b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002080)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002040)={&(0x7f00000014c0)={0xb54, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xf9, 0x27, 0xffffffff}, {0x800, 0x5, 0xf9, 0x6}, {0xfff9, 0x2, 0x2, 0x3}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x180000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xba}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x46}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xb54}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 840.029472ms ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x7) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x1) 802.002873ms ago: executing program 2 (id=314): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x102}, {&(0x7f0000000380)="8423237772b2ea628519eece2fdfb6d02610fc99780000000000000000fc58b44fcfe8e8bfc313efc1b512433b85c2c886571e9f30a2099ea681971d7278cabbeca1a6c2ac20bffd4f66215fb2d7429e507ad39a144e43f1bb8c867a3e747872dab257bcac1cef1b63f2c6a8589c8433c645ab3c41f7200143adab0cb2bc99637fae235dd1124e176fca26a8077bd9144fe0fd3a91d44cce5b60b9e8cd47f8dd55b3641a21b90666715a024c5036280dba6ecec036cda3a87de7dff558df3b5aa549d7bbc5", 0xc5}, {&(0x7f0000000840)="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", 0x17b}, {&(0x7f0000000e40)="3056b9b7421a16ab0fafdeb26cf3e87bbc4bf310e05e8dd23e7879c0cfe6e0abc0e41b806917369f0407be834534837506bd18e354624950752397b897a00a9af488194b3ca880908c617a63f9ecdc69c1c2507b5944c7d05d883cc3f437380344992916aad37b1ef6b5ea84e3bc7253cb8758f726eae30972e80ca557c997c3a3525c0c7342a8519e157c2424969a0a3d25978edee9914edd89ea6a1afe9e543169860fd9c8655df7d0988806dc0d685baaefbc4d8529c6ba008289e5aca221a55a375d8612d1e315fb05f681ede1c8110c5b8d79943084b45d25f10802b6b508e817a8c73db23cb2b169e88e8e499b27478873994b9999790afb00bca05391f4d6305b118594a4f6c858a6103061f15d19ac9a2361ccc195ac16c505b621a45336b39f5975371af99330241fd93555e22e30dfd02e0e7be4a6eaad7a89e89332516d218f4894fb48b6620aa28d6f16cd82a06a0f6d29518b84af3cd9ce62bff2ad2c77f362d9d814bc8553cf01c517fe5327af450714e4de3a6626fa01a27ec65f62279d8fca6d433eadc85c6c4599716eea727e2f25c85b9fca0c89f851be1ad805a8dd54057aa52e51dc919e88b45bf38127099b0265ed7c990f7c2032cdc0a80e244da40766d5e0229d611979c277fad4989abe437b068a0f4e6105042651c145bb9270b1bea37fa45914d32d71eca93ee4d780747dda9176795f642f8633fa9f6e07cf2b4a6956d63b2a1dd21ca5fc52b3940b4082bfe49cf38acab915599ec8aaaca7820fc4144128bb7fa61e7cd81c1195d22f0b1cb7fe5396cd3b163610c73b21bb73e8a21836d1f8e47e9241923ab5581e4d1b992a1a7e759eed9f6c863ae3842518380069371c2fc2491f0ae5bd0dd6803417508d7c3c407010", 0x27f}], 0x4, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000010101020000000000000000020000060800fa3f0000085e536219d2da13fc0ab805fdf666853a5cf34531cc0c13da320c78f9cf9bf91c52b691e7bc6ef68e3a1f7e82f2a28496bf1e4c5ae3088d4a901cd6b2d77d85017487661f0911fb2d702f07ec5a8b8a08a7b80efc3eac3bb8989cdcecd4cc556501302d738de5dcef68a7e0d728b7263fea63521b85db4d31a3a4041e58c291ac2f3708555cea70d6e1f864376c8bc11eb6ad13ec95b97dbb33207b004a55a5487b1c7b29cf8496c089386859188eaa2311dac9d70fef6b09ee3d5f361d041b93261f9996ff61adfc2d9cacc7751c6f1099d21f2f14e9ec1b3e47d04f703d8dceb98a9dc9cb8ca1c0851b85bd36e8078121c83f2f0e7059cbd588c83506faa3da166a979f2cf5a4d833fdbaeef6a40104d21147597262554847a80d9a429c6e107652ec42e3558b43132d8b538ea8cae309751797a3a19eb9943208bee575"], 0x1c}}, 0x0) 801.823673ms ago: executing program 2 (id=315): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000000c0)='syz', 0x381000, &(0x7f00000001c0)={@align=0x5, {0x38a6, 0x1000, 0x10001, 0x7}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x5}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r2, 0x401) r3 = syz_ublk_setup_io_uring(0x2829, &(0x7f0000000140)={0x0, 0xcae, 0x1, 0x103, 0x38f, 0x0, r1}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @broadcast}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x4, 0x5, 0x2, 0x400, 0x2, 0x500000, r4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x15db, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x3, 0x24f, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) keyctl$read(0xb, r0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r5, &(0x7f0000001f80)=""/4096, 0x1000) getdents64(r5, 0x0, 0x0) socketpair(0x10, 0x800, 0x1, &(0x7f0000000000)) 800.624933ms ago: executing program 2 (id=316): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffdd310f4f, 0x50, 0x285, 0xf78, 0x8, 0x0, 0x0, 0x8, 0x9}}, 0xfffffffffffffe81) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) r4 = dup(r1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7, 0x0, r5}, 0x10) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0x9, 0x0, 0x100000, r5}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x40) 798.426643ms ago: executing program 1 (id=317): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0xb, 0x35, 0xc, 0x19, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1, 0x40, 0x7841, 0xd, 0x588}}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000380)="a68cde0d56b170df7710b54f17d9a39c4f98f354719087be2d90b8c4e5882162f9b6e7b6cc9b5d720354bc69700a5b09f166e5e3239bba8c695e694cafeb1c8d7a9096dbdd24a68f274dd8591d2ef6573943ee70971ce6023e6553", 0x5b}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcae}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f0000000540)="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", 0x15b}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x58}, 0x44) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) (async) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@clear_death, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) r9 = fcntl$dupfd(r8, 0x406, r8) write$cgroup_pid(r9, &(0x7f0000000240), 0xb375) (async) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000000), 0x4) read$FUSE(r9, &(0x7f0000004340)={0x2020}, 0x2020) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 683.599045ms ago: executing program 1 (id=318): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="22f6d91d415301e9f89080e8eedb3a", 0xf}], 0x1, 0x0, 0x3d0}, 0x4000c010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c00030100008000000000000c0002"], 0xc0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', 0x0}) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)={0x3c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x0, 0x6, 0x81, 0xfff, [0x8000000000000001, 0xffffffffffffffff, 0x0]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}]}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r6, &(0x7f00000009c0)='1', 0x47f, 0x8800000}]) 683.325755ms ago: executing program 32 (id=318): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="22f6d91d415301e9f89080e8eedb3a", 0xf}], 0x1, 0x0, 0x3d0}, 0x4000c010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c00030100008000000000000c0002"], 0xc0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', 0x0}) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)={0x3c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x0, 0x6, 0x81, 0xfff, [0x8000000000000001, 0xffffffffffffffff, 0x0]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}]}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r6, &(0x7f00000009c0)='1', 0x47f, 0x8800000}]) 276.506914ms ago: executing program 2 (id=320): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000009a0c00000100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x38}}, 0x4) 247.755994ms ago: executing program 3 (id=321): getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r3, &(0x7f0000000bc0)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/112, 0x70}, {&(0x7f00000007c0)=""/16, 0x10}], 0x5, &(0x7f0000000b00)=""/147, 0x93}, 0x140) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x3af, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x201, 0x28f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8804, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000087d1e2e2c000000000001090224000100001000090400080103000000092103000c01222800090581030000010000"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000040)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2008280000002831f70b"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) syz_usb_connect$uac2(0x2, 0x82, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x10}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000000)=0x8000000000000000, 0x8) 242.077735ms ago: executing program 4 (id=319): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2, 0x0, 0x42}) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0xff06, 0x0) 0s ago: executing program 2 (id=322): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 19.534977][ T36] audit: type=1400 audit(1782812740.509:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.536115][ T286] cgroup: Unknown subsys name 'net' [ 19.557623][ T36] audit: type=1400 audit(1782812740.509:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.584934][ T36] audit: type=1400 audit(1782812740.549:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.585077][ T286] cgroup: Unknown subsys name 'devices' [ 19.719952][ T286] cgroup: Unknown subsys name 'hugetlb' [ 19.725550][ T286] cgroup: Unknown subsys name 'rlimit' [ 19.818910][ T36] audit: type=1400 audit(1782812740.799:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.842099][ T36] audit: type=1400 audit(1782812740.799:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.858135][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.866846][ T36] audit: type=1400 audit(1782812740.799:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.898685][ T36] audit: type=1400 audit(1782812740.859:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.899895][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.924120][ T36] audit: type=1400 audit(1782812740.859:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.958362][ T36] audit: type=1400 audit(1782812740.879:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.983929][ T36] audit: type=1400 audit(1782812740.879:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.782400][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.789468][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.796512][ T294] bridge_slave_0: entered allmulticast mode [ 20.802853][ T294] bridge_slave_0: entered promiscuous mode [ 20.809416][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.816446][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.823594][ T294] bridge_slave_1: entered allmulticast mode [ 20.829750][ T294] bridge_slave_1: entered promiscuous mode [ 20.883047][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.890135][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.897234][ T293] bridge_slave_0: entered allmulticast mode [ 20.903531][ T293] bridge_slave_0: entered promiscuous mode [ 20.913124][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.920205][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.927310][ T293] bridge_slave_1: entered allmulticast mode [ 20.933629][ T293] bridge_slave_1: entered promiscuous mode [ 20.979840][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.986909][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.994064][ T295] bridge_slave_0: entered allmulticast mode [ 21.000418][ T295] bridge_slave_0: entered promiscuous mode [ 21.021224][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.028297][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.035360][ T295] bridge_slave_1: entered allmulticast mode [ 21.041769][ T295] bridge_slave_1: entered promiscuous mode [ 21.067752][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.074930][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.082022][ T296] bridge_slave_0: entered allmulticast mode [ 21.088270][ T296] bridge_slave_0: entered promiscuous mode [ 21.098325][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.105406][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.112486][ T296] bridge_slave_1: entered allmulticast mode [ 21.118646][ T296] bridge_slave_1: entered promiscuous mode [ 21.179166][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.186212][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.193511][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.200534][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.256351][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.263426][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.270713][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.277731][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.307111][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.314188][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.321490][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.328524][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.338464][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.345506][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.352795][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.359839][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.392765][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.400322][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.407482][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.414964][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.423265][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.430501][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.437806][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.445126][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.465357][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.472451][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.480185][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.487204][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.494981][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.502029][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.510101][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.517116][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.524617][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.531649][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.540924][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.547958][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.573764][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.580818][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.588750][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.595809][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.625466][ T293] veth0_vlan: entered promiscuous mode [ 21.647518][ T296] veth0_vlan: entered promiscuous mode [ 21.656213][ T293] veth1_macvtap: entered promiscuous mode [ 21.671497][ T295] veth0_vlan: entered promiscuous mode [ 21.689457][ T294] veth0_vlan: entered promiscuous mode [ 21.698006][ T296] veth1_macvtap: entered promiscuous mode [ 21.714390][ T295] veth1_macvtap: entered promiscuous mode [ 21.731533][ T294] veth1_macvtap: entered promiscuous mode [ 21.747255][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.819014][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.903980][ T322] overlayfs: conflicting lowerdir path [ 21.913410][ T334] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6'. [ 22.006651][ T348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10'. [ 22.042460][ T353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.218354][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.268324][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 22.298276][ T311] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 22.388293][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 22.393749][ T312] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 22.402643][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 22.410253][ T312] usb 4-1: can't read configurations, error -61 [ 22.419050][ T9] usb 2-1: no configurations [ 22.423715][ T9] usb 2-1: can't read configurations, error -22 [ 22.430063][ T311] usb 3-1: device descriptor read/64, error -71 [ 22.538287][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 22.558269][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 22.668227][ T311] usb 3-1: device descriptor read/64, error -71 [ 22.698257][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 22.703777][ T312] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 22.708609][ T9] usb 2-1: no configurations [ 22.712805][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 22.716249][ T9] usb 2-1: can't read configurations, error -22 [ 22.724042][ T312] usb 4-1: can't read configurations, error -61 [ 22.730241][ T9] usb usb2-port1: attempt power cycle [ 22.736942][ T312] usb usb4-port1: attempt power cycle [ 22.908230][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 22.984452][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 22.993264][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 23.038299][ T311] usb 3-1: device descriptor read/64, error -71 [ 23.078322][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 23.098400][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 23.106569][ T9] usb 2-1: no configurations [ 23.111416][ T9] usb 2-1: can't read configurations, error -22 [ 23.128602][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 23.134136][ T312] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 23.146603][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 23.154232][ T312] usb 4-1: can't read configurations, error -61 [ 23.238296][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 23.258867][ T9] usb 2-1: no configurations [ 23.263469][ T9] usb 2-1: can't read configurations, error -22 [ 23.269935][ T9] usb usb2-port1: unable to enumerate USB device [ 23.278249][ T311] usb 3-1: device descriptor read/64, error -71 [ 23.298535][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 23.318568][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 23.324127][ T312] usb 4-1: too many configurations: 146, using maximum allowed: 8 [ 23.333288][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 23.340906][ T312] usb 4-1: can't read configurations, error -61 [ 23.347253][ T312] usb usb4-port1: unable to enumerate USB device [ 23.388298][ T311] usb usb3-port1: attempt power cycle [ 23.428233][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.578244][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 23.584402][ T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.594523][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.604815][ T50] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 23.614133][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.622337][ T50] usb 1-1: Product: syz [ 23.626501][ T50] usb 1-1: Manufacturer: syz [ 23.631106][ T50] usb 1-1: SerialNumber: syz [ 23.728268][ T311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 23.749233][ T311] usb 3-1: device descriptor read/8, error -71 [ 23.837670][ T377] sit0: entered promiscuous mode [ 23.843935][ T377] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 23.852234][ T377] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20'. [ 23.864274][ T50] usb 1-1: 0:2 : does not exist [ 23.872414][ T50] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 23.883717][ T50] usb 1-1: USB disconnect, device number 2 [ 23.890716][ T311] usb 3-1: device descriptor read/8, error -71 [ 23.894872][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.128244][ T311] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 24.149272][ T311] usb 3-1: device descriptor read/8, error -71 [ 24.279263][ T311] usb 3-1: device descriptor read/8, error -71 [ 24.388301][ T311] usb usb3-port1: unable to enumerate USB device [ 24.638257][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.788227][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 24.794709][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.804403][ T311] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 24.813497][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.821543][ T311] usb 1-1: Product: syz [ 24.825721][ T311] usb 1-1: Manufacturer: syz [ 24.830594][ T311] usb 1-1: SerialNumber: syz [ 24.998019][ T383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 25.021135][ T384] kvm: kvm [381]: vcpu0, guest rIP: 0x9140 Unhandled WRMSR(0x11e) = 0xbe702111 [ 25.036988][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 25.037005][ T36] audit: type=1400 audit(1782812746.009:159): avc: denied { name_bind } for pid=378 comm="syz.0.21" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 25.080588][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.092704][ T311] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 25.095235][ T36] audit: type=1400 audit(1782812746.009:160): avc: denied { node_bind } for pid=378 comm="syz.0.21" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.132726][ T311] usb 1-1: USB disconnect, device number 3 [ 25.154366][ T388] capability: warning: `syz.3.24' uses deprecated v2 capabilities in a way that may be insecure [ 25.180986][ T393] netlink: 'syz.2.25': attribute type 27 has an invalid length. [ 25.195481][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.202639][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.215053][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.299198][ T36] audit: type=1400 audit(1782812746.279:161): avc: denied { compute_member } for pid=396 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 25.319344][ T389] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 25.326901][ T36] audit: type=1400 audit(1782812746.279:162): avc: denied { ioctl } for pid=396 comm="syz.2.27" path="socket:[3864]" dev="sockfs" ino=3864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.342899][ T400] ======================================================= [ 25.342899][ T400] WARNING: The mand mount option has been deprecated and [ 25.342899][ T400] and is ignored by this kernel. Remove the mand [ 25.342899][ T400] option from the mount to silence this warning. [ 25.342899][ T400] ======================================================= [ 25.353411][ T36] audit: type=1400 audit(1782812746.299:163): avc: denied { append } for pid=396 comm="syz.2.27" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 25.387813][ T400] overlayfs: failed to resolve './file0': -2 [ 25.410276][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 25.424195][ T36] audit: type=1400 audit(1782812746.399:164): avc: denied { mounton } for pid=399 comm="syz.2.28" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.424235][ T400] binder: Unknown parameter 'dont_appraise' [ 25.489418][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.499306][ T389] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.512230][ T389] usb 2-1: New USB device found, idVendor=0eef, idProduct=7349, bcdDevice= 0.00 [ 25.521282][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.529930][ T389] usb 2-1: config 0 descriptor?? [ 25.568243][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 25.574433][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 25.584848][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.595800][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.605552][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 25.618545][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 25.625149][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 25.634638][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.702497][ T36] audit: type=1400 audit(1782812746.679:165): avc: denied { read write } for pid=412 comm="syz.0.32" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.725402][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 25.733878][ T36] audit: type=1400 audit(1782812746.679:166): avc: denied { open } for pid=412 comm="syz.0.32" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.741734][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 25.764127][ T36] audit: type=1400 audit(1782812746.679:167): avc: denied { map } for pid=412 comm="syz.0.32" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.845097][ T36] audit: type=1400 audit(1782812746.819:168): avc: denied { create } for pid=416 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.878243][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 25.886483][ T66] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 25.897517][ T66] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 25.918203][ T66] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 25.931600][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.941696][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 25.958229][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.967571][ T66] usb 3-1: config 0 descriptor?? [ 25.992371][ T389] hid-generic 0003:0EEF:7349.0001: unknown main item tag 0x7 [ 26.006433][ T389] hid-generic 0003:0EEF:7349.0001: unknown main item tag 0x0 [ 26.019574][ T389] hid-generic 0003:0EEF:7349.0001: unknown main item tag 0x1 [ 26.040046][ T389] hid-generic 0003:0EEF:7349.0001: unknown main item tag 0xd [ 26.048656][ T389] hid-generic 0003:0EEF:7349.0001: hidraw0: USB HID v0.77 Device [HID 0eef:7349] on usb-dummy_hcd.1-1/input0 [ 26.067268][ T9] usbhid 4-1:7.0: can't add hid device: -71 [ 26.074839][ T9] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 26.108480][ T9] usb 4-1: USB disconnect, device number 6 [ 26.205550][ T389] usb 2-1: USB disconnect, device number 6 [ 26.377250][ T66] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x2 [ 26.402021][ T66] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x7 [ 26.533783][ T440] rust_binder: 439:440 transaction to 0 failed: BR_DEAD_REPLY [ 26.729078][ T442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'. [ 26.755965][ T444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 26.788235][ T389] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.948256][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 26.954628][ T389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.963166][ T389] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 26.971216][ T389] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 26.980533][ T389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.990659][ T389] usb 1-1: config 1 has no interface number 1 [ 26.996751][ T389] usb 1-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 27.009735][ T389] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 27.020844][ T389] usb 1-1: config 1 interface 4 has no altsetting 0 [ 27.028684][ T389] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.037705][ T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.045748][ T389] usb 1-1: Product: syz [ 27.049916][ T389] usb 1-1: Manufacturer: syz [ 27.054485][ T389] usb 1-1: SerialNumber: syz [ 27.078214][ T312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 27.208219][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 27.229236][ T312] usb 2-1: config 1 has an invalid interface number: 225 but max is 2 [ 27.237501][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.247720][ T312] usb 2-1: config 1 has no interface number 2 [ 27.253856][ T312] usb 2-1: config 1 interface 1 has no altsetting 0 [ 27.262806][ T312] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 27.272004][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.280172][ T312] usb 2-1: Product: syz [ 27.284427][ T389] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 27.290459][ T312] usb 2-1: Manufacturer: syz [ 27.295503][ T312] usb 2-1: SerialNumber: syz [ 27.302643][ T389] usb 1-1: USB disconnect, device number 4 [ 27.313466][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.358237][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 27.364556][ T66] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 27.373646][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 27.383048][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.391764][ T66] usb 4-1: config 0 descriptor?? [ 27.511230][ T312] usb 2-1: selecting invalid altsetting 0 [ 27.519560][ T312] usb 2-1: USB disconnect, device number 7 [ 27.533385][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.599021][ T452] netlink: 'syz.3.44': attribute type 46 has an invalid length. [ 28.059301][ T463] netlink: 'syz.1.48': attribute type 13 has an invalid length. [ 28.355948][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 28.500841][ T311] usb 3-1: USB disconnect, device number 6 [ 28.512630][ T482] netlink: 'syz.2.54': attribute type 27 has an invalid length. [ 28.535534][ T482] veth0_vlan: left promiscuous mode [ 28.541176][ T482] veth0_vlan: entered promiscuous mode [ 28.547398][ T482] veth1_macvtap: left promiscuous mode [ 28.553840][ T482] veth1_macvtap: entered promiscuous mode [ 28.561092][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.568117][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.576093][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.583137][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.590565][ T360] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 28.608315][ T66] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 28.749549][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.757914][ T360] usb 2-1: config 24 has an invalid interface number: 30 but max is 0 [ 28.766141][ T360] usb 2-1: config 24 has no interface number 0 [ 28.772411][ T360] usb 2-1: config 24 interface 30 altsetting 5 endpoint 0xE has invalid maxpacket 40, setting to 8 [ 28.783472][ T360] usb 2-1: config 24 interface 30 altsetting 5 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 28.795472][ T360] usb 2-1: config 24 interface 30 altsetting 5 endpoint 0x81 is Bulk; changing to Interrupt [ 28.805629][ T360] usb 2-1: config 24 interface 30 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.818790][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.828899][ T360] usb 2-1: config 24 interface 30 has no altsetting 0 [ 28.835687][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.844716][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.854534][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 28.862161][ T66] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 28.871263][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.880811][ T360] usb 2-1: string descriptor 0 read error: -22 [ 28.887542][ T66] hub 1-1:1.0: bad descriptor, ignoring hub [ 28.893569][ T360] usb 2-1: New USB device found, idVendor=12d1, idProduct=bf90, bcdDevice=14.03 [ 28.902668][ T66] hub 1-1:1.0: probe with driver hub failed with error -5 [ 28.909834][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.918389][ T66] cdc_wdm 1-1:1.0: skipping garbage [ 28.923603][ T66] cdc_wdm 1-1:1.0: skipping garbage [ 28.928999][ T66] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 28.938305][ T475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.028223][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 29.034451][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.045521][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.055356][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.068338][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.077384][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.088461][ T311] usb 3-1: config 0 descriptor?? [ 29.150533][ T360] usb 2-1: USB disconnect, device number 8 [ 29.198634][ T389] usb 1-1: USB disconnect, device number 5 [ 29.495657][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.502981][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.510253][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.517474][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.524706][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.531939][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.539219][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.546433][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.553747][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.561074][ T311] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.568390][ T311] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 29.576997][ T311] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 29.585104][ T311] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 29.594841][ T311] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 29.607169][ T311] microsoft 0003:045E:07DA.0003: no inputs found [ 29.613865][ T311] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 29.780720][ T389] usb 3-1: USB disconnect, device number 7 [ 29.848843][ T66] usb 4-1: USB disconnect, device number 7 [ 29.888327][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.898240][ T360] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 30.038256][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 30.044550][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.055537][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 30.060775][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.070648][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.083899][ T311] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 30.093302][ T360] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.101844][ T360] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.103710][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 30.103727][ T36] audit: type=1400 audit(1782812751.079:198): avc: denied { map } for pid=526 comm="syz.3.65" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 30.111376][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.148705][ T389] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.150408][ T360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.165768][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.176799][ T360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.186818][ T311] usb 1-1: config 0 descriptor?? [ 30.191880][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.205103][ T360] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.214571][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.226938][ T360] usb 2-1: config 0 descriptor?? [ 30.419554][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 30.426618][ T36] audit: type=1400 audit(1782812751.399:199): avc: denied { mounton } for pid=532 comm="syz.0.66" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.438377][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.449077][ T533] incfs: Error accessing: ./file0. [ 30.463209][ T533] incfs: mount failed -20 [ 30.463470][ T360] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.471007][ T36] audit: type=1400 audit(1782812751.439:200): avc: denied { write } for pid=532 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.483426][ T311] usb 1-1: USB disconnect, device number 6 [ 30.673068][ T36] audit: type=1400 audit(1782812751.649:201): avc: denied { read write } for pid=495 comm="syz.1.58" name="lp0" dev="devtmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.675446][ T312] usb 2-1: USB disconnect, device number 9 [ 30.699628][ T36] audit: type=1400 audit(1782812751.649:202): avc: denied { open } for pid=495 comm="syz.1.58" path="/dev/usb/lp0" dev="devtmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.727226][ T36] audit: type=1400 audit(1782812751.649:203): avc: denied { ioctl } for pid=495 comm="syz.1.58" path="/dev/usb/lp0" dev="devtmpfs" ino=471 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.748010][ T312] usblp0: removed [ 31.208224][ T389] usb 3-1: device descriptor read/64, error -71 [ 31.292401][ T36] audit: type=1400 audit(1782812752.269:204): avc: denied { name_bind } for pid=615 comm="syz.3.74" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 31.340505][ T621] input: syz0 as /devices/virtual/input/input4 [ 31.343281][ T36] audit: type=1400 audit(1782812752.319:205): avc: denied { write } for pid=618 comm="syz.3.75" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.371153][ T36] audit: type=1400 audit(1782812752.349:206): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.393690][ T36] audit: type=1400 audit(1782812752.349:207): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.449603][ T389] usb 3-1: device descriptor read/64, error -71 [ 31.698345][ T389] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 31.748238][ T50] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.758235][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 31.828270][ T389] usb 3-1: device descriptor read/64, error -71 [ 31.898256][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 31.904488][ T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.914673][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.924848][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.932625][ T50] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.941793][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.949984][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 31.957789][ T50] usb 1-1: Product: syz [ 31.961991][ T50] usb 1-1: Manufacturer: syz [ 31.966698][ T50] usb 1-1: SerialNumber: syz [ 31.971950][ T31] usb 4-1: config 129 has an invalid interface number: 80 but max is 0 [ 31.986313][ T31] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 31.994600][ T31] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 31.999866][ T643] netlink: 72 bytes leftover after parsing attributes in process `syz.1.83'. [ 32.003775][ T31] usb 4-1: config 129 has no interface number 0 [ 32.018857][ T31] usb 4-1: config 129 has no interface number 1 [ 32.025101][ T31] usb 4-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 32.038510][ T31] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 32.049414][ T31] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 32.062745][ T31] usb 4-1: config 129 interface 80 has no altsetting 0 [ 32.069619][ T31] usb 4-1: config 129 interface 5 has no altsetting 0 [ 32.078279][ T31] usb 4-1: string descriptor 0 read error: -22 [ 32.084499][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 32.093555][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.101649][ T389] usb 3-1: device descriptor read/64, error -71 [ 32.187198][ T50] usb 1-1: 0:2 : does not exist [ 32.193894][ T50] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 32.204698][ T31] usb 4-1: MIDIStreaming interface descriptor not found [ 32.211868][ T50] usb 1-1: USB disconnect, device number 7 [ 32.218068][ T389] usb usb3-port1: attempt power cycle [ 32.313254][ T360] usb 4-1: USB disconnect, device number 8 [ 32.438251][ T312] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 32.558231][ T389] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 32.579308][ T389] usb 3-1: device descriptor read/8, error -71 [ 32.589225][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 32.600335][ T312] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 32.609420][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.618035][ T312] usb 2-1: Product: syz [ 32.622235][ T312] usb 2-1: Manufacturer: syz [ 32.626822][ T312] usb 2-1: SerialNumber: syz [ 32.631977][ T312] usb 2-1: config 0 descriptor?? [ 32.709274][ T389] usb 3-1: device descriptor read/8, error -71 [ 32.809500][ T649] process 'syz.0.85' launched './file0' with NULL argv: empty string added [ 32.818671][ T649] Invalid argument reading file caps for ./file0 [ 32.839118][ T360] usb 2-1: USB disconnect, device number 10 [ 32.842132][ T653] tmpfs: Unknown parameter 'noinode32' [ 32.873448][ T655] Zero length message leads to an empty skb [ 32.893622][ T660] FAULT_INJECTION: forcing a failure. [ 32.893622][ T660] name failslab, interval 1, probability 0, space 0, times 1 [ 32.900567][ T661] syzkaller1: entered promiscuous mode [ 32.906411][ T660] CPU: 0 UID: 0 PID: 660 Comm: syz.3.91 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 32.906437][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.906455][ T660] Call Trace: [ 32.906466][ T660] [ 32.906473][ T660] __dump_stack+0x21/0x30 [ 32.906507][ T660] dump_stack_lvl+0x140/0x1c0 [ 32.906529][ T660] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.906551][ T660] ? is_bpf_text_address+0x17b/0x1a0 [ 32.906575][ T660] dump_stack+0x19/0x20 [ 32.906597][ T660] should_fail_ex+0x3c2/0x510 [ 32.906615][ T660] should_failslab+0xac/0x100 [ 32.906640][ T660] __kmalloc_cache_noprof+0x41/0x470 [ 32.906661][ T660] ? _parse_integer_limit+0x195/0x1e0 [ 32.906679][ T660] ? alloc_pipe_info+0xfb/0x5f0 [ 32.906694][ T660] alloc_pipe_info+0xfb/0x5f0 [ 32.906710][ T660] splice_direct_to_actor+0x989/0xbf0 [ 32.906736][ T660] ? kstrtouint+0x78/0xf0 [ 32.906753][ T660] ? __x64_sys_openat+0x13a/0x170 [ 32.906775][ T660] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 32.906792][ T660] ? selinux_file_permission+0x318/0xb60 [ 32.906816][ T660] ? avc_policy_seqno+0xd/0x30 [ 32.906833][ T660] ? __cfi_direct_splice_actor+0x10/0x10 [ 32.906854][ T660] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 32.906875][ T660] do_splice_direct+0x196/0x290 [ 32.906895][ T660] ? __cfi_do_splice_direct+0x10/0x10 [ 32.906914][ T660] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 32.906935][ T660] ? security_file_permission+0x38/0xf0 [ 32.906958][ T660] ? rw_verify_area+0xac/0x230 [ 32.906975][ T660] do_sendfile+0x511/0xed0 [ 32.906997][ T660] ? vfs_writev+0xe90/0xe90 [ 32.907015][ T660] ? __kasan_check_write+0x18/0x20 [ 32.907031][ T660] ? ksys_write+0x1f3/0x260 [ 32.907047][ T660] __x64_sys_sendfile64+0x19d/0x200 [ 32.907067][ T660] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 32.907086][ T660] ? __kasan_check_read+0x15/0x20 [ 32.907103][ T660] x64_sys_call+0xa26/0x2ee0 [ 32.907118][ T660] do_syscall_64+0x57/0xf0 [ 32.907133][ T660] ? clear_bhb_loop+0x50/0xa0 [ 32.907153][ T660] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.907172][ T660] RIP: 0033:0x7f1c2a59ce59 [ 32.907190][ T660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.907204][ T660] RSP: 002b:00007f1c28ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 32.907229][ T660] RAX: ffffffffffffffda RBX: 00007f1c2a815fa0 RCX: 00007f1c2a59ce59 [ 32.907240][ T660] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 32.907249][ T660] RBP: 00007f1c28ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 32.907259][ T660] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 32.907270][ T660] R13: 00007f1c2a816038 R14: 00007f1c2a815fa0 R15: 00007ffd965c0148 [ 32.907285][ T660] [ 33.191028][ T389] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.191151][ T661] syzkaller1: entered allmulticast mode [ 33.219190][ T389] usb 3-1: device descriptor read/8, error -71 [ 33.349237][ T389] usb 3-1: device descriptor read/8, error -71 [ 33.458538][ T389] usb usb3-port1: unable to enumerate USB device [ 33.532801][ T674] kvm_intel: kvm [673]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0x1d9) = 0x2 [ 33.589782][ T676] cgroup: Unknown subsys name 'measure' [ 33.688229][ T312] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 33.763849][ T683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.839501][ T312] usb 4-1: config 209 has an invalid interface number: 8 but max is 2 [ 33.847767][ T312] usb 4-1: config 209 has an invalid interface number: 166 but max is 2 [ 33.856343][ T312] usb 4-1: config 209 has an invalid interface number: 4 but max is 2 [ 33.864732][ T312] usb 4-1: config 209 has an invalid descriptor of length 0, skipping remainder of the config [ 33.875032][ T50] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 33.882624][ T312] usb 4-1: config 209 has no interface number 0 [ 33.888885][ T312] usb 4-1: config 209 has no interface number 1 [ 33.895128][ T312] usb 4-1: config 209 has no interface number 2 [ 33.901553][ T312] usb 4-1: config 209 interface 8 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 33.911588][ T312] usb 4-1: config 209 interface 8 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 33.922394][ T312] usb 4-1: config 209 interface 8 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 33.933353][ T312] usb 4-1: config 209 interface 8 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 33.944457][ T312] usb 4-1: config 209 interface 8 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 33.955336][ T312] usb 4-1: config 209 interface 8 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 33.966075][ T312] usb 4-1: config 209 interface 8 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 33.976814][ T312] usb 4-1: config 209 interface 166 altsetting 127 endpoint 0xA has invalid maxpacket 576, setting to 64 [ 33.988346][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0x83, skipping [ 33.999491][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 34.010537][ T312] usb 4-1: config 209 interface 166 altsetting 127 endpoint 0x6 has an invalid bInterval 144, changing to 4 [ 34.022345][ T312] usb 4-1: config 209 interface 166 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 34.033849][ T312] usb 4-1: config 209 interface 166 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 34.045210][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 34.056337][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 34.067495][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 34.078557][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 34.083688][ T312] usb 4-1: config 209 interface 166 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 34.094778][ T312] usb 4-1: config 209 interface 166 altsetting 127 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 34.107371][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 34.118422][ T312] usb 4-1: config 209 interface 4 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 34.129689][ T312] usb 4-1: config 209 interface 4 altsetting 255 has an endpoint descriptor with address 0x15, changing to 0x5 [ 34.141530][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.152410][ T312] usb 4-1: config 209 interface 4 altsetting 255 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 34.163725][ T389] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 34.171296][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.181276][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 34.192196][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.205044][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 34.216078][ T50] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.225156][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 34.236033][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.244029][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 34.255277][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 34.266539][ T50] usb 2-1: config 0 descriptor?? [ 34.271792][ T312] usb 4-1: config 209 interface 4 altsetting 255 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 34.284495][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x8F, skipping [ 34.295543][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 34.306461][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 34.317352][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 34.328237][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 34.339177][ T312] usb 4-1: config 209 interface 4 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 34.350131][ T312] usb 4-1: config 209 interface 4 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 34.363514][ T312] usb 4-1: config 209 interface 8 has no altsetting 0 [ 34.370317][ T389] usb 3-1: Using ep0 maxpacket: 32 [ 34.375471][ T312] usb 4-1: config 209 interface 166 has no altsetting 0 [ 34.382446][ T312] usb 4-1: config 209 interface 4 has no altsetting 0 [ 34.389962][ T389] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.398150][ T389] usb 3-1: config 0 has no interface number 0 [ 34.404356][ T389] usb 3-1: config 0 interface 184 has no altsetting 0 [ 34.411360][ T312] usb 4-1: New USB device found, idVendor=05c6, idProduct=9069, bcdDevice=fe.ae [ 34.420675][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.428730][ T312] usb 4-1: Product: 逊ï£ç¦™Õ¹ã£«èššè·¾ã·¥ãŸŽç­ˆë½…敨짌嘳♈ä¤å¢°ïŒŠå´°íš¥æ‰—属꫶ﾙèµá©‘೹嗯墶ᚽ渊槩苞᷂é¼î® ì–‰ï¾·é…ᅕ엔왥ë·á™­éˆ¶â‹»å¦§à±©æ…¸î‘¥ã»¬ï¦¡à¬¿èŽ· [ 34.447754][ T312] usb 4-1: Manufacturer: é¤ìƒ£ï£¾ç¬¸Þƒì“閙ቂ媿ค穟긄豆餉ટ쓓綳툇춦쑴覲┸㡧⭹Ṩ᷵番∎Ƃ誛궣ѳﻲ꛾詬澫ꮔï½é·­á¾‰ëšªé‡íŠê´íœ»ã‰ŠêŠáµî¼¸å’˜î¨€íŽ€å¥”꼼汞ᤎꠉ๖⯡溻氘既ꡄ埄㦛ì¯Þ®â·­è¶¾æ®î†®â®Ÿ*淓衘ḱ㷨⽱ä†å€ ã–ªê¡»ê¶ƒë·¡æ”±ã¦³ëƒêŽ±á±¤ [ 34.475947][ T312] usb 4-1: SerialNumber: á€í‘î£ë¨™áƒ¼â§…ェ賷츗쩢뚛⻸晃雿咰ᓿ簎瑡î·è ­ç¥½é ”á†ã¬…ྌ떭凾â问긱å£á µæµ‘궧鑧ヽî‚玚鈳湑삟⥊ᰩ﷈⸌찭톘䠛病☾â¼è¹…䯑湹秊꧕뉊è¸æ¬ŽáŸ„䢩è«ì’€å¨ï¼¿æ—¼î¹â§ï¶«à·æ‡»î©ºä€‚手廷郖௨নඳ뻲ㆮ쭵⋊ꛬɇ䘆雌ïŸê¯¼áŠ¬ÚŒâ¼ã­Œã¦¼ì¦œè¯£å®»êž¾ë’±é¬Û®à±ƒê½ˆã¥ç½­ë´Î‰Å‰ä´°Ë™æ™‚纤ã‰íš» [ 34.485679][ T681] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 34.513094][ T389] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.526605][ T681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.530351][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.545639][ T389] usb 3-1: Product: syz [ 34.549897][ T389] usb 3-1: Manufacturer: syz [ 34.554507][ T389] usb 3-1: SerialNumber: syz [ 34.559781][ T389] usb 3-1: config 0 descriptor?? [ 34.565525][ T389] smsc75xx v1.0.0 [ 34.946373][ T50] usbhid 2-1:0.0: can't add hid device: -71 [ 34.952400][ T50] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.961160][ T50] usb 2-1: USB disconnect, device number 11 [ 35.259609][ T312] usb 4-1: USB disconnect, device number 9 [ 35.265199][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 35.265215][ T36] audit: type=1400 audit(1782812756.239:219): avc: denied { create } for pid=685 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 35.291626][ T36] audit: type=1400 audit(1782812756.249:220): avc: denied { write } for pid=685 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 35.455007][ T36] audit: type=1400 audit(1782812756.429:221): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.474939][ T36] audit: type=1400 audit(1782812756.449:222): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.494909][ T36] audit: type=1400 audit(1782812756.459:223): avc: denied { write } for pid=688 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 35.568696][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.579705][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.589273][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 35.600317][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 35.609990][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 35.620350][ T389] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 35.629915][ T389] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 35.688246][ T312] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 35.728228][ T50] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 35.818227][ T312] usb 4-1: device descriptor read/64, error -71 [ 35.858230][ T50] usb 2-1: device descriptor read/64, error -71 [ 35.957478][ T36] audit: type=1400 audit(1782812756.929:224): avc: denied { ioctl } for pid=692 comm="syz.0.102" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.957913][ T693] loop1: detected capacity change from 0 to 7 [ 35.988717][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.997886][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.005969][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.015131][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.023110][ T693] loop1: unable to read partition table [ 36.024286][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.030114][ T693] loop_reread_partitions: partition scan of loop1 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 36.039464][ T36] audit: type=1400 audit(1782812757.019:225): avc: denied { ioctl } for pid=692 comm="syz.0.102" path="socket:[6573]" dev="sockfs" ino=6573 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.051446][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.079746][ T312] usb 4-1: device descriptor read/64, error -71 [ 36.084618][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.088123][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.107843][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.115981][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.125188][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.133308][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.142457][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.148220][ T50] usb 2-1: device descriptor read/64, error -71 [ 36.150758][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.165608][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 36.328274][ T389] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.336028][ T312] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 36.388229][ T50] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 36.468320][ T312] usb 4-1: device descriptor read/64, error -71 [ 36.488211][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 36.494562][ T389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.502283][ T389] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 36.511017][ T389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 36.518642][ T50] usb 2-1: device descriptor read/64, error -71 [ 36.524902][ T389] usb 1-1: can't read configurations, error -61 [ 36.658941][ T389] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.718258][ T312] usb 4-1: device descriptor read/64, error -71 [ 36.758224][ T50] usb 2-1: device descriptor read/64, error -71 [ 36.768672][ T360] usb 3-1: USB disconnect, device number 12 [ 36.808246][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 36.814665][ T389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.822784][ T389] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 36.830724][ T312] usb usb4-port1: attempt power cycle [ 36.836897][ T389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 36.844515][ T389] usb 1-1: can't read configurations, error -61 [ 36.850917][ T389] usb usb1-port1: attempt power cycle [ 36.868347][ T50] usb usb2-port1: attempt power cycle [ 36.899447][ T36] audit: type=1400 audit(1782812757.879:226): avc: denied { bind } for pid=695 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.918650][ T36] audit: type=1400 audit(1782812757.879:227): avc: denied { listen } for pid=695 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.938077][ T36] audit: type=1400 audit(1782812757.879:228): avc: denied { connect } for pid=695 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.958850][ T699] capability: warning: `syz.2.103' uses 32-bit capabilities (legacy support in use) [ 37.168255][ T312] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 37.188301][ T389] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.196791][ T312] usb 4-1: device descriptor read/8, error -71 [ 37.208269][ T50] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 37.216071][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 37.222449][ T389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.230167][ T389] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 37.238728][ T50] usb 2-1: device descriptor read/8, error -71 [ 37.245086][ T389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 37.252670][ T389] usb 1-1: can't read configurations, error -61 [ 37.329319][ T312] usb 4-1: device descriptor read/8, error -71 [ 37.369206][ T50] usb 2-1: device descriptor read/8, error -71 [ 37.388256][ T389] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.408557][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 37.414883][ T389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.422710][ T389] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 37.431617][ T389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 37.439288][ T389] usb 1-1: can't read configurations, error -61 [ 37.445724][ T389] usb usb1-port1: unable to enumerate USB device [ 37.568237][ T312] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 37.589232][ T312] usb 4-1: device descriptor read/8, error -71 [ 37.608227][ T50] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 37.629216][ T50] usb 2-1: device descriptor read/8, error -71 [ 37.719676][ T312] usb 4-1: device descriptor read/8, error -71 [ 37.759234][ T50] usb 2-1: device descriptor read/8, error -71 [ 37.829025][ T312] usb usb4-port1: unable to enumerate USB device [ 37.868314][ T50] usb usb2-port1: unable to enumerate USB device [ 38.258239][ T50] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 38.325024][ T723] FAULT_INJECTION: forcing a failure. [ 38.325024][ T723] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.338484][ T723] CPU: 0 UID: 0 PID: 723 Comm: syz.3.110 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 38.338514][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.338526][ T723] Call Trace: [ 38.338530][ T723] [ 38.338536][ T723] __dump_stack+0x21/0x30 [ 38.338563][ T723] dump_stack_lvl+0x140/0x1c0 [ 38.338584][ T723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.338600][ T723] ? kasan_save_track+0x4f/0x80 [ 38.338611][ T723] ? __kmalloc_noprof+0x261/0x510 [ 38.338621][ T723] ? splice_direct_to_actor+0x40e/0xbf0 [ 38.338633][ T723] ? do_splice_direct+0x196/0x290 [ 38.338645][ T723] ? do_sendfile+0x511/0xed0 [ 38.338657][ T723] ? x64_sys_call+0xa26/0x2ee0 [ 38.338666][ T723] dump_stack+0x19/0x20 [ 38.338678][ T723] should_fail_ex+0x3c2/0x510 [ 38.338689][ T723] should_fail_alloc_page+0xec/0x110 [ 38.338702][ T723] __alloc_pages_noprof+0x1c0/0x7e0 [ 38.338715][ T723] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.338730][ T723] alloc_pages_bulk_noprof+0x3b8/0x880 [ 38.338743][ T723] ? copy_splice_read+0x18f/0xca0 [ 38.338755][ T723] copy_splice_read+0x1c7/0xca0 [ 38.338767][ T723] ? __cfi_copy_splice_read+0x10/0x10 [ 38.338782][ T723] ? __kmalloc_noprof+0x261/0x510 [ 38.338792][ T723] ? __mutex_init+0xa6/0x1a0 [ 38.338813][ T723] ? alloc_pipe_info+0x35e/0x5f0 [ 38.338823][ T723] ? __cfi_copy_splice_read+0x10/0x10 [ 38.338834][ T723] splice_direct_to_actor+0x40e/0xbf0 [ 38.338847][ T723] ? __cfi_direct_splice_actor+0x10/0x10 [ 38.338859][ T723] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 38.338872][ T723] do_splice_direct+0x196/0x290 [ 38.338884][ T723] ? __cfi_do_splice_direct+0x10/0x10 [ 38.338895][ T723] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 38.338908][ T723] ? security_file_permission+0x38/0xf0 [ 38.338923][ T723] ? rw_verify_area+0xac/0x230 [ 38.338932][ T723] do_sendfile+0x511/0xed0 [ 38.338945][ T723] ? vfs_writev+0xe90/0xe90 [ 38.338956][ T723] ? __kasan_check_write+0x18/0x20 [ 38.338965][ T723] ? ksys_write+0x1f3/0x260 [ 38.338975][ T723] __x64_sys_sendfile64+0x19d/0x200 [ 38.338986][ T723] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 38.338998][ T723] ? __kasan_check_read+0x15/0x20 [ 38.339007][ T723] x64_sys_call+0xa26/0x2ee0 [ 38.339016][ T723] do_syscall_64+0x57/0xf0 [ 38.339026][ T723] ? clear_bhb_loop+0x50/0xa0 [ 38.339039][ T723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.339050][ T723] RIP: 0033:0x7f1c2a59ce59 [ 38.339060][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.339068][ T723] RSP: 002b:00007f1c28ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 38.339079][ T723] RAX: ffffffffffffffda RBX: 00007f1c2a815fa0 RCX: 00007f1c2a59ce59 [ 38.339087][ T723] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 38.339093][ T723] RBP: 00007f1c28ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.339099][ T723] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 38.339105][ T723] R13: 00007f1c2a816038 R14: 00007f1c2a815fa0 R15: 00007ffd965c0148 [ 38.339113][ T723] [ 38.418360][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 38.664127][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.670799][ T50] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 38.679863][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.688764][ T50] usb 3-1: config 0 descriptor?? [ 38.705523][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.711360][ T725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=725 comm=syz.1.111 [ 38.714706][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 38.735367][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.744521][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 38.752405][ T110] loop1: unable to read partition table [ 38.761464][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 38.772459][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 38.783127][ T727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 38.823496][ T110] loop1: unable to read partition table [ 38.895374][ T716] overlayfs: conflicting options: userxattr,redirect_dir=on [ 38.940689][ T716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.949305][ T716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.953583][ T110] loop1: unable to read partition table [ 39.199485][ T50] usb 3-1: string descriptor 0 read error: -71 [ 39.207314][ T50] usbhid 3-1:0.0: can't add hid device: -71 [ 39.213394][ T50] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.222610][ T50] usb 3-1: USB disconnect, device number 13 [ 39.378225][ T312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 39.528247][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 39.534526][ T312] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 39.542853][ T312] usb 1-1: config 0 has no interface number 0 [ 39.549108][ T312] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.562112][ T312] usb 1-1: config 0 interface 196 has no altsetting 0 [ 39.570217][ T312] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 39.579299][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.587285][ T312] usb 1-1: Product: syz [ 39.591465][ T312] usb 1-1: Manufacturer: syz [ 39.596049][ T312] usb 1-1: SerialNumber: syz [ 39.601229][ T312] usb 1-1: config 0 descriptor?? [ 39.809711][ T312] ipheth 1-1:0.196: Unable to find endpoints [ 39.968205][ T50] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 39.968409][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.985213][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.128243][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 40.134395][ T50] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 40.144634][ T50] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.154166][ T50] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 40.163244][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.171251][ T50] usb 3-1: SerialNumber: syz [ 40.178127][ T50] usb 3-1: 0:2 : does not exist [ 40.218218][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 40.368219][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 40.374449][ T311] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 40.387234][ T311] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 40.394669][ T50] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 40.400666][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.412603][ T311] usb 4-1: Product: syz [ 40.414072][ T50] usb 3-1: 5:0: failed to get current value for ch 2 (-22) [ 40.416963][ T311] usb 4-1: Manufacturer: syz [ 40.428725][ T311] usb 4-1: SerialNumber: syz [ 40.428962][ T50] usb 3-1: 5:0: failed to get current value for ch 3 (-22) [ 40.445610][ T50] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 40.455759][ T50] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 40.465665][ T50] usb 3-1: USB disconnect, device number 14 [ 40.641679][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.648658][ T311] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.659905][ T311] usb 4-1: USB disconnect, device number 14 [ 40.758235][ T50] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 40.898248][ T50] usb 3-1: device descriptor read/64, error -71 [ 41.138446][ T50] usb 3-1: device descriptor read/64, error -71 [ 41.378229][ T50] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 41.388222][ T312] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 41.508238][ T50] usb 3-1: device descriptor read/64, error -71 [ 41.538402][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 41.544834][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.553234][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.563332][ T312] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.577475][ T312] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 41.586539][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.594530][ T312] usb 4-1: Product: syz [ 41.598696][ T312] usb 4-1: Manufacturer: syz [ 41.603268][ T312] usb 4-1: SerialNumber: syz [ 41.748216][ T50] usb 3-1: device descriptor read/64, error -71 [ 41.811669][ T312] usb 4-1: MIDIStreaming interface descriptor not found [ 41.820784][ T312] usb 4-1: USB disconnect, device number 15 [ 41.830458][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.858298][ T50] usb usb3-port1: attempt power cycle [ 42.062883][ T31] usb 1-1: USB disconnect, device number 12 [ 42.198276][ T50] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 42.205923][ T315] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 42.218248][ T792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 42.239173][ T50] usb 3-1: device descriptor read/8, error -71 [ 42.320416][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 42.320434][ T36] audit: type=1400 audit(1782812763.299:247): avc: denied { create } for pid=796 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.368297][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 42.374434][ T50] usb 3-1: device descriptor read/8, error -71 [ 42.380813][ T315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.392266][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 42.401497][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.409512][ T315] usb 2-1: Product: syz [ 42.413672][ T315] usb 2-1: Manufacturer: syz [ 42.418642][ T315] usb 2-1: SerialNumber: syz [ 42.424165][ T315] usb 2-1: config 0 descriptor?? [ 42.568260][ T311] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 42.588265][ T360] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 42.628250][ T50] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 42.636169][ T484] usb 2-1: USB disconnect, device number 16 [ 42.649329][ T50] usb 3-1: device descriptor read/8, error -71 [ 42.718238][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 42.724432][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.735362][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.745140][ T360] usb 1-1: Using ep0 maxpacket: 32 [ 42.750383][ T311] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 42.759550][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.768415][ T311] usb 4-1: config 0 descriptor?? [ 42.773547][ T360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.783945][ T360] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 42.793069][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.799228][ T50] usb 3-1: device descriptor read/8, error -71 [ 42.801504][ T360] usb 1-1: Product: syz [ 42.811547][ T360] usb 1-1: Manufacturer: syz [ 42.816120][ T360] usb 1-1: SerialNumber: syz [ 42.908323][ T50] usb usb3-port1: unable to enumerate USB device [ 43.023181][ T360] usb 1-1: unit 4 not found! [ 43.027827][ T360] usb 1-1: unit 0 not found! [ 43.183099][ T311] apple 0003:05AC:024B.0004: unknown global tag 0xe [ 43.190010][ T311] apple 0003:05AC:024B.0004: item 0 1 1 14 parsing failed [ 43.197504][ T311] apple 0003:05AC:024B.0004: parse failed [ 43.203299][ T311] apple 0003:05AC:024B.0004: probe with driver apple failed with error -22 [ 43.228540][ T36] audit: type=1400 audit(1782812764.209:248): avc: denied { setopt } for pid=805 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.247792][ T36] audit: type=1400 audit(1782812764.209:249): avc: denied { ioctl } for pid=805 comm="syz.1.137" path="socket:[7033]" dev="sockfs" ino=7033 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.272808][ T36] audit: type=1400 audit(1782812764.209:250): avc: denied { getopt } for pid=805 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.292895][ T36] audit: type=1400 audit(1782812764.209:251): avc: denied { read } for pid=805 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.384621][ T484] usb 4-1: USB disconnect, device number 16 [ 43.434041][ T360] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.444398][ T360] usb 1-1: unit 4 not found! [ 43.449139][ T360] usb 1-1: unit 0 not found! [ 43.455320][ T360] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 43.455884][ T36] audit: type=1400 audit(1782812764.429:252): avc: denied { ioctl } for pid=813 comm="syz.2.140" path="socket:[7049]" dev="sockfs" ino=7049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.465148][ T360] usb 1-1: unit 4 not found! [ 43.493841][ T360] usb 1-1: unit 0 not found! [ 43.503045][ T360] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 43.515445][ T36] audit: type=1400 audit(1782812764.499:253): avc: denied { connect } for pid=816 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.517461][ T360] usb 1-1: USB disconnect, device number 13 [ 43.543792][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.548215][ T311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 43.699138][ T311] usb 2-1: device descriptor read/64, error -71 [ 43.938282][ T311] usb 2-1: device descriptor read/64, error -71 [ 43.956693][ T36] audit: type=1326 audit(1782812764.929:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=824 comm="syz.0.144" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf9ce59 code=0x0 [ 44.007412][ T826] netlink: 108 bytes leftover after parsing attributes in process `syz.0.144'. [ 44.148893][ T36] audit: type=1400 audit(1782812765.129:255): avc: denied { read } for pid=832 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.178246][ T311] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 44.258296][ T50] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 44.308246][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.366672][ T843] netlink: 104 bytes leftover after parsing attributes in process `syz.2.150'. [ 44.376135][ T843] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 44.409706][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.420690][ T50] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.429763][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.441118][ T50] usb 4-1: config 0 descriptor?? [ 44.448351][ T845] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.471940][ T36] audit: type=1400 audit(1782812765.449:256): avc: denied { create } for pid=846 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.568439][ T311] usb 2-1: device descriptor read/64, error -71 [ 44.622767][ T851] FAULT_INJECTION: forcing a failure. [ 44.622767][ T851] name failslab, interval 1, probability 0, space 0, times 0 [ 44.635477][ T851] CPU: 0 UID: 0 PID: 851 Comm: syz.2.153 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 44.635506][ T851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.635518][ T851] Call Trace: [ 44.635525][ T851] [ 44.635533][ T851] __dump_stack+0x21/0x30 [ 44.635558][ T851] dump_stack_lvl+0x140/0x1c0 [ 44.635571][ T851] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.635585][ T851] ? proc_fail_nth_write+0x184/0x220 [ 44.635606][ T851] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.635631][ T851] dump_stack+0x19/0x20 [ 44.635652][ T851] should_fail_ex+0x3c2/0x510 [ 44.635670][ T851] should_failslab+0xac/0x100 [ 44.635683][ T851] kmem_cache_alloc_noprof+0x42/0x410 [ 44.635693][ T851] ? __cfi_vfs_write+0x10/0x10 [ 44.635703][ T851] ? getname_flags+0xcc/0x6b0 [ 44.635714][ T851] getname_flags+0xcc/0x6b0 [ 44.635725][ T851] getname+0x1b/0x30 [ 44.635740][ T851] do_sys_openat2+0xda/0x1d0 [ 44.635763][ T851] ? do_sys_open+0x100/0x100 [ 44.635787][ T851] __x64_sys_creat+0x92/0xc0 [ 44.635815][ T851] x64_sys_call+0x2710/0x2ee0 [ 44.635824][ T851] do_syscall_64+0x57/0xf0 [ 44.635835][ T851] ? clear_bhb_loop+0x50/0xa0 [ 44.635848][ T851] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.635859][ T851] RIP: 0033:0x7f8d9e19ce59 [ 44.635870][ T851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.635885][ T851] RSP: 002b:00007f8d9efe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 44.635905][ T851] RAX: ffffffffffffffda RBX: 00007f8d9e416090 RCX: 00007f8d9e19ce59 [ 44.635919][ T851] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 44.635931][ T851] RBP: 00007f8d9efe5090 R08: 0000000000000000 R09: 0000000000000000 [ 44.635943][ T851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.635952][ T851] R13: 00007f8d9e416128 R14: 00007f8d9e416090 R15: 00007ffcee9a4908 [ 44.635961][ T851] [ 44.660132][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 44.678317][ T311] usb usb2-port1: attempt power cycle [ 44.680182][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.824561][ T856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=856 comm=syz.0.155 [ 44.826927][ T50] usb 4-1: USB disconnect, device number 17 [ 44.837214][ T856] netlink: 4640 bytes leftover after parsing attributes in process `syz.0.155'. [ 45.028230][ T311] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 45.056813][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.154918][ T875] bridge0: port 3(vlan1) entered blocking state [ 45.161250][ T875] bridge0: port 3(vlan1) entered disabled state [ 45.167547][ T875] vlan1: entered allmulticast mode [ 45.172716][ T875] veth0_vlan: entered allmulticast mode [ 45.178766][ T875] vlan1: entered promiscuous mode [ 45.183933][ T875] bridge0: port 3(vlan1) entered blocking state [ 45.188241][ T50] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 45.190233][ T875] bridge0: port 3(vlan1) entered forwarding state [ 45.205322][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.338597][ T50] usb 4-1: no configurations [ 45.343253][ T50] usb 4-1: can't read configurations, error -22 [ 45.415767][ T878] incfs_lookup_dentry err:-13 [ 45.458352][ T311] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 45.478707][ T50] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 45.479898][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.619264][ T311] usb 2-1: device descriptor read/8, error -71 [ 45.628606][ T50] usb 4-1: no configurations [ 45.633213][ T50] usb 4-1: can't read configurations, error -22 [ 45.639635][ T50] usb usb4-port1: attempt power cycle [ 45.688290][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 45.728320][ T311] usb usb2-port1: unable to enumerate USB device [ 45.838221][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 45.845522][ T312] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 45.854633][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.862660][ T312] usb 3-1: Product: syz [ 45.866807][ T312] usb 3-1: Manufacturer: syz [ 45.871492][ T312] usb 3-1: SerialNumber: syz [ 45.978233][ T50] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 45.998873][ T50] usb 4-1: no configurations [ 46.003501][ T50] usb 4-1: can't read configurations, error -22 [ 46.018226][ T311] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 46.094872][ T312] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.101818][ T312] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 46.111471][ T312] usb 3-1: USB disconnect, device number 19 [ 46.138243][ T50] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 46.149755][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.166129][ T50] usb 4-1: no configurations [ 46.170775][ T50] usb 4-1: can't read configurations, error -22 [ 46.177105][ T50] usb usb4-port1: unable to enumerate USB device [ 46.180211][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.191499][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 46.199862][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.209948][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.220648][ T311] usb 1-1: string descriptor 0 read error: -22 [ 46.226816][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.235847][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.245409][ T311] usb 1-1: 0:2 : does not exist [ 46.628537][ T902] fuse: Bad value for 'group_id' [ 46.633529][ T902] fuse: Bad value for 'group_id' [ 46.656090][ T905] fuse: Bad value for 'fd' [ 46.674051][ T907] overlayfs: conflicting options: userxattr,metacopy=on [ 46.718292][ T66] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 46.739749][ T311] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 46.751371][ T311] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 46.761132][ T311] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 46.771122][ T311] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 46.785252][ T311] usb 1-1: USB disconnect, device number 14 [ 46.868225][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 46.875756][ T66] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 46.884990][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.893016][ T66] usb 2-1: Product: syz [ 46.897185][ T66] usb 2-1: Manufacturer: syz [ 46.901796][ T66] usb 2-1: SerialNumber: syz [ 47.042467][ T919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.051432][ T919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.110677][ T66] usb 2-1: MIDIStreaming interface descriptor not found [ 47.119646][ T66] usb 2-1: USB disconnect, device number 21 [ 47.130325][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.428220][ T50] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 47.588239][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 47.594549][ T50] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 47.602902][ T50] usb 4-1: config 3 has no interface number 0 [ 47.608222][ T66] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.609166][ T50] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 47.626625][ T50] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.637846][ T50] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 47.640567][ T929] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 47.647999][ T50] usb 4-1: config 3 interface 160 has no altsetting 0 [ 47.664006][ T50] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 47.673157][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.681157][ T50] usb 4-1: Product: syz [ 47.685294][ T50] usb 4-1: Manufacturer: syz [ 47.689913][ T50] usb 4-1: SerialNumber: syz [ 47.695296][ T918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.716902][ T934] overlayfs: option "workdir=./cgroup" is useless in a non-upper mount, ignore [ 47.725936][ T934] overlayfs: missing 'lowerdir' [ 47.768217][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 47.774693][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.783229][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.793640][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.799878][ T937] netlink: 108 bytes leftover after parsing attributes in process `syz.1.183'. [ 47.803870][ T66] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 47.820532][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.828664][ T66] usb 1-1: Product: syz [ 47.832865][ T66] usb 1-1: Manufacturer: syz [ 47.837437][ T66] usb 1-1: SerialNumber: syz [ 47.891225][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 47.891236][ T36] audit: type=1400 audit(1782812768.869:271): avc: denied { shutdown } for pid=939 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.928943][ T50] usb 4-1: USB disconnect, device number 22 [ 47.959294][ T943] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.022120][ T36] audit: type=1400 audit(1782812768.999:272): avc: denied { getopt } for pid=946 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.022305][ T947] bpf: Bad value for 'gid' [ 48.047629][ T66] usb 1-1: 0:1 : does not exist [ 48.052747][ T66] usb 1-1: unit 5 not found! [ 48.058225][ T66] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 48.067077][ T66] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 48.078250][ T66] usb 1-1: USB disconnect, device number 15 [ 48.086435][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.130071][ T36] audit: type=1400 audit(1782812769.109:273): avc: denied { setopt } for pid=950 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.408251][ T484] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 48.558360][ T484] usb 2-1: Using ep0 maxpacket: 16 [ 48.569572][ T484] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.579786][ T36] audit: type=1400 audit(1782812769.549:274): avc: denied { load_policy } for pid=961 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.589633][ T963] SELinux: failed to load policy [ 48.599908][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.608576][ T964] can: request_module (can-proto-0) failed. [ 48.615602][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.631238][ T484] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 48.644086][ T484] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 48.653205][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.663527][ T484] usb 2-1: config 0 descriptor?? [ 48.668230][ T50] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 48.751630][ T36] audit: type=1400 audit(1782812769.729:275): avc: denied { checkpoint_restore } for pid=976 comm="syz.0.195" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.818641][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 48.824911][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.835861][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.848225][ T50] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.857408][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.866858][ T50] usb 4-1: config 0 descriptor?? [ 48.872696][ T50] hub 4-1:0.0: USB hub found [ 49.073218][ T50] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 49.075273][ T484] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 49.088682][ T484] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 49.094440][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 49.096032][ T484] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 49.107655][ T984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.109058][ T484] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 49.117635][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 49.124340][ T484] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 49.132730][ T984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.139891][ T484] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 49.198310][ T484] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-38 [ 49.206247][ T484] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-38 [ 49.214971][ T484] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-38 [ 49.223966][ T484] nintendo 0003:057E:2019.0005: probe - fail = -38 [ 49.230549][ T484] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -38 [ 49.271916][ T958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.281325][ T958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.294379][ T484] usb 2-1: USB disconnect, device number 22 [ 49.308198][ T36] audit: type=1400 audit(1782812770.279:276): avc: denied { map } for pid=996 comm="syz.0.199" path="socket:[8070]" dev="sockfs" ino=8070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.337411][ T50] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 49.354718][ T50] usb 4-1: device reset changed ep0 maxpacket size! [ 49.366148][ T50] usb 4-1: USB disconnect, device number 23 [ 49.463722][ T1017] netlink: 220 bytes leftover after parsing attributes in process `syz.1.206'. [ 49.464167][ T36] audit: type=1400 audit(1782812770.439:277): avc: denied { nlmsg_read } for pid=1016 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.481543][ T1017] netlink: 'syz.1.206': attribute type 46 has an invalid length. [ 49.522061][ T1021] Invalid logical block size (3075) [ 49.609251][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 49.640425][ T36] audit: type=1326 audit(1782812770.619:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1026 comm="syz.1.210" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef2879ce59 code=0x0 [ 49.668223][ T50] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 49.670755][ T1030] cgroup: Need name or subsystem set [ 49.702944][ T36] audit: type=1400 audit(1782812770.679:280): avc: denied { read write } for pid=1032 comm="syz.1.211" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.733175][ T36] audit: type=1400 audit(1782812770.679:279): avc: denied { read write } for pid=1032 comm="syz.1.211" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.838264][ T50] usb 4-1: Using ep0 maxpacket: 16 [ 49.840531][ T1060] netlink: 'syz.1.218': attribute type 15 has an invalid length. [ 49.849504][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.851902][ T1060] netlink: 'syz.1.218': attribute type 15 has an invalid length. [ 49.873644][ T50] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.886420][ T50] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 49.886846][ T1067] syz.2.220 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.916741][ T50] usb 4-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 49.928189][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.939321][ T50] usb 4-1: Product: syz [ 49.943559][ T50] usb 4-1: Manufacturer: syz [ 49.948450][ T50] usb 4-1: SerialNumber: syz [ 50.128207][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 50.160244][ T50] usb 4-1: unit 2 not found! [ 50.168748][ T50] usb 4-1: USB disconnect, device number 24 [ 50.278202][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 50.284571][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.292992][ T31] usb 1-1: config 0 has no interface number 0 [ 50.299387][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 50.307659][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.317173][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.325315][ T31] usb 1-1: Product: syz [ 50.329651][ T31] usb 1-1: Manufacturer: syz [ 50.334240][ T31] usb 1-1: SerialNumber: syz [ 50.339657][ T31] usb 1-1: config 0 descriptor?? [ 50.345237][ T31] smsc75xx v1.0.0 [ 50.746359][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 50.757221][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 50.766902][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 50.777131][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 50.908235][ T484] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 51.059344][ T484] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 51.070662][ T484] usb 4-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 51.081867][ T484] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 51.095136][ T484] usb 4-1: config 0 interface 0 has no altsetting 0 [ 51.101899][ T484] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 51.111069][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.122608][ T484] usb 4-1: config 0 descriptor?? [ 51.129951][ T484] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 51.153937][ T1092] overlayfs: missing 'lowerdir' [ 51.163471][ T1091] overlayfs: failed to clone lowerpath [ 51.206690][ T1102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 51.249076][ T1110] fuse: Bad value for 'fd' [ 51.310036][ T1114] 9pnet_fd: Insufficient options for proto=fd [ 51.337302][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.346285][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.889273][ T1138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1138 comm=syz.2.244 [ 52.251357][ T1147] fuse: Unknown parameter 'dd' [ 52.386394][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.396494][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.505951][ T1162] fuse: Bad value for 'fd' [ 52.614923][ T50] usb 1-1: USB disconnect, device number 16 [ 52.682880][ T1177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 52.898236][ T36] kauditd_printk_skb: 6626 callbacks suppressed [ 52.898254][ T36] audit: type=1326 audit(1782812773.869:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 52.929968][ T36] audit: type=1326 audit(1782812773.879:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 52.955539][ T36] audit: type=1326 audit(1782812773.879:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 52.981046][ T36] audit: type=1326 audit(1782812773.879:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.006989][ T36] audit: type=1326 audit(1782812773.879:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.033147][ T1185] overlayfs: failed to resolve './bus': -2 [ 53.039061][ T36] audit: type=1326 audit(1782812773.879:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.064601][ T50] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 53.064825][ T36] audit: type=1326 audit(1782812773.879:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.098068][ T36] audit: type=1326 audit(1782812773.879:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.131105][ T36] audit: type=1326 audit(1782812773.879:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.156520][ T36] audit: type=1326 audit(1782812773.879:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1148 comm="syz.3.248" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2a59ce59 code=0x7fc00000 [ 53.218220][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 53.228950][ T50] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 53.248200][ T50] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.257194][ T50] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.271767][ T50] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 53.280907][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.289099][ T50] usb 1-1: Product: syz [ 53.293268][ T50] usb 1-1: Manufacturer: syz [ 53.297993][ T50] usb 1-1: SerialNumber: syz [ 53.398279][ T312] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 53.461859][ T1201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.470496][ T1201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.512952][ T50] usb 1-1: unit 4 not found! [ 53.517682][ T50] usb 1-1: unit 144 not found! [ 53.525107][ T50] usb 1-1: USB disconnect, device number 17 [ 53.549378][ T312] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 53.557735][ T312] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 53.566637][ T312] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 53.576969][ T312] usb 2-1: config 220 has no interface number 2 [ 53.583271][ T312] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 53.596418][ T312] usb 2-1: config 220 interface 0 has no altsetting 0 [ 53.603299][ T312] usb 2-1: config 220 interface 76 has no altsetting 0 [ 53.610186][ T312] usb 2-1: config 220 interface 1 has no altsetting 0 [ 53.618535][ T312] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 53.627575][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.635599][ T312] usb 2-1: Product: syz [ 53.639783][ T312] usb 2-1: Manufacturer: syz [ 53.644359][ T312] usb 2-1: SerialNumber: syz [ 53.852707][ T312] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 53.859201][ T312] usb 2-1: No valid video chain found. [ 53.864723][ T312] usb 2-1: selecting invalid altsetting 0 [ 53.873021][ T312] usb 2-1: USB disconnect, device number 23 [ 54.258231][ T50] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 54.418236][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 54.428296][ T50] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.436879][ T50] usb 1-1: config 0 has no interface number 0 [ 54.447435][ T50] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.467765][ T50] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.477895][ T50] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 54.487132][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.496000][ T50] usb 1-1: config 0 descriptor?? [ 54.546437][ T1226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 54.948222][ T311] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 55.078237][ T311] usb 2-1: device descriptor read/64, error -71 [ 55.210099][ T50] uclogic 0003:28BD:0071.0006: failed retrieving string descriptor #100: -71 [ 55.219311][ T50] uclogic 0003:28BD:0071.0006: failed retrieving pen parameters: -71 [ 55.227418][ T50] uclogic 0003:28BD:0071.0006: pen probing failed: -71 [ 55.232156][ T1246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 55.234973][ T50] uclogic 0003:28BD:0071.0006: failed probing parameters: -71 [ 55.244556][ T1246] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.251157][ T50] uclogic 0003:28BD:0071.0006: probe with driver uclogic failed with error -71 [ 55.272621][ T50] usb 1-1: USB disconnect, device number 18 [ 55.328270][ T311] usb 2-1: device descriptor read/64, error -71 [ 55.568224][ T311] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 55.698287][ T311] usb 2-1: device descriptor read/64, error -71 [ 55.794835][ T1253] fuse: Bad value for 'fd' [ 55.866235][ T1262] ±ÿ: renamed from lo (while UP) [ 55.940057][ T311] usb 2-1: device descriptor read/64, error -71 [ 56.048356][ T311] usb usb2-port1: attempt power cycle [ 56.388236][ T311] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 56.396008][ T484] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 56.419235][ T311] usb 2-1: device descriptor read/8, error -71 [ 56.446145][ T1286] netlink: 72 bytes leftover after parsing attributes in process `syz.3.293'. [ 56.548279][ T484] usb 1-1: Using ep0 maxpacket: 8 [ 56.554323][ T311] usb 2-1: device descriptor read/8, error -71 [ 56.560739][ T484] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 56.568858][ T484] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 56.577554][ T484] usb 1-1: config 3 has no interface number 0 [ 56.581229][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.584693][ T484] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.592726][ T1291] netlink: 96 bytes leftover after parsing attributes in process `syz.3.295'. [ 56.605020][ T484] usb 1-1: config 3 interface 45 has no altsetting 0 [ 56.614053][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.623030][ T484] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 56.637352][ T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.645364][ T484] usb 1-1: Product: syz [ 56.649539][ T484] usb 1-1: Manufacturer: syz [ 56.654202][ T484] usb 1-1: SerialNumber: syz [ 56.798256][ T311] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 56.819213][ T311] usb 2-1: device descriptor read/8, error -71 [ 56.905882][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 56.949147][ T311] usb 2-1: device descriptor read/8, error -71 [ 57.058373][ T311] usb usb2-port1: unable to enumerate USB device [ 57.140733][ T1310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.149333][ T1310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.435409][ T1314] 9pnet_fd: Insufficient options for proto=fd [ 57.591853][ T1320] incfs: Options parsing error. -22 [ 57.597135][ T1320] incfs: mount failed -22 [ 57.752571][ T1326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.761203][ T1326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.769784][ T1326] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.889781][ T1329] netlink: 'syz.1.307': attribute type 28 has an invalid length. [ 58.617596][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 58.617611][ T36] audit: type=1400 audit(1782812779.591:6987): avc: denied { create } for pid=1341 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 58.657443][ T36] audit: type=1400 audit(1782812779.631:6988): avc: denied { accept } for pid=1346 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.689156][ T36] audit: type=1400 audit(1782812779.651:6989): avc: denied { sqpoll } for pid=1350 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.751321][ T309] bridge_slave_1: left allmulticast mode [ 58.757083][ T309] bridge_slave_1: left promiscuous mode [ 58.762861][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.770879][ T309] bridge_slave_0: left allmulticast mode [ 58.776649][ T309] bridge_slave_0: left promiscuous mode [ 58.782786][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.862766][ T36] audit: type=1400 audit(1782812779.841:6990): avc: denied { mounton } for pid=1355 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.899866][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.906956][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.914068][ T1355] bridge_slave_0: entered allmulticast mode [ 58.920516][ T1355] bridge_slave_0: entered promiscuous mode [ 58.927531][ T309] veth1_macvtap: left promiscuous mode [ 58.933123][ T309] veth0_vlan: left promiscuous mode [ 58.980788][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.989085][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.993082][ T484] usb 1-1: USB disconnect, device number 19 [ 59.003531][ T1355] bridge_slave_1: entered allmulticast mode [ 59.005081][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.010264][ T1355] bridge_slave_1: entered promiscuous mode [ 59.069235][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.076302][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.083623][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.090759][ T1355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.110759][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.118118][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.128129][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.135208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.144466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.151533][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.173572][ T1355] veth0_vlan: entered promiscuous mode [ 59.184748][ T1355] veth1_macvtap: entered promiscuous mode [ 59.201628][ T36] audit: type=1400 audit(1782812780.181:6991): avc: denied { mounton } for pid=1355 comm="syz-executor" path="/root/syzkaller.OtvT7F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.254412][ T1366] GUP no longer grows the stack in syz.2.322 (1366): 200000005000-200000008000 (200000004000) [ 59.265018][ T1366] CPU: 0 UID: 0 PID: 1366 Comm: syz.2.322 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 59.265066][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.265078][ T1366] Call Trace: [ 59.265084][ T1366] [ 59.265092][ T1366] __dump_stack+0x21/0x30 [ 59.265135][ T1366] dump_stack_lvl+0x140/0x1c0 [ 59.265161][ T1366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.265180][ T1366] ? find_vma+0xd3/0x120 [ 59.265198][ T1366] dump_stack+0x19/0x20 [ 59.265219][ T1366] fixup_user_fault+0x616/0x6a0 [ 59.265241][ T1366] fault_in_user_writeable+0x75/0xe0 [ 59.265264][ T1366] futex_lock_pi+0x2ed/0xa70 [ 59.265287][ T1366] ? futex_unqueue+0x136/0x160 [ 59.265308][ T1366] ? __cfi_futex_lock_pi+0x10/0x10 [ 59.265332][ T1366] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.265357][ T1366] ? futex_setup_timer+0xb4/0xd0 [ 59.265377][ T1366] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.265404][ T1366] do_futex+0x270/0x510 [ 59.265424][ T1366] ? __cfi_do_futex+0x10/0x10 [ 59.265444][ T1366] ? __vm_munmap+0x30d/0x3d0 [ 59.265465][ T1366] __se_sys_futex+0x13c/0x320 [ 59.265486][ T1366] ? __x64_sys_futex+0x110/0x110 [ 59.265505][ T1366] ? __kasan_check_write+0x18/0x20 [ 59.265523][ T1366] __x64_sys_futex+0xe9/0x110 [ 59.265544][ T1366] x64_sys_call+0x227f/0x2ee0 [ 59.265560][ T1366] do_syscall_64+0x57/0xf0 [ 59.265578][ T1366] ? clear_bhb_loop+0x50/0xa0 [ 59.265600][ T1366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.265619][ T1366] RIP: 0033:0x7f8d9e19ce59 [ 59.265636][ T1366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.265652][ T1366] RSP: 002b:00007f8d9f006028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.265674][ T1366] RAX: ffffffffffffffda RBX: 00007f8d9e415fa0 RCX: 00007f8d9e19ce59 [ 59.265688][ T1366] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 59.265701][ T1366] RBP: 00007f8d9e232e6f R08: 0000000000000000 R09: 0000000000000005 [ 59.265712][ T1366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.265723][ T1366] R13: 00007f8d9e416038 R14: 00007f8d9e415fa0 R15: 00007ffcee9a4908 [ 59.265737][ T1366] [ 59.490118][ T309] ------------[ cut here ]------------ [ 59.495635][ T309] WARNING: CPU: 1 PID: 309 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 59.505810][ T309] Modules linked in: [ 59.509763][ T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 59.521421][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.531602][ T309] Workqueue: netns cleanup_net [ 59.536391][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 59.542427][ T309] Code: e8 e1 09 d7 fc 4b 83 3c 3e 00 75 19 e8 75 56 7e fc 49 81 ff f8 07 00 00 74 1b e8 67 56 7e fc 49 83 c7 08 eb c9 e8 5c 56 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 59.562085][ T309] RSP: 0018:ffffc9000b71fb90 EFLAGS: 00010293 [ 59.568178][ T309] RAX: ffffffff85091974 RBX: ffff888122b5c700 RCX: ffff888130f53900 [ 59.576148][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b3c000 [ 59.584153][ T309] RBP: ffffc9000b71fbb0 R08: ffffffff87d41927 R09: 1ffffffff0fa8324 [ 59.591745][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.592169][ T309] R10: dffffc0000000000 R11: fffffbfff0fa8325 R12: dffffc0000000000 [ 59.600590][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.608443][ T309] R13: dffffc0000000000 R14: ffff888104b3c000 R15: 0000000000000000 [ 59.619444][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.624130][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.632562][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.641329][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.655633][ T309] CR2: 0000555564b5b918 CR3: 000000012b572000 CR4: 00000000003526b0 [ 59.663628][ T309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000006b [ 59.671626][ T309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 59.679646][ T309] Call Trace: [ 59.682925][ T309] [ 59.685854][ T309] cleanup_net+0x6bd/0xc90 [ 59.690312][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 59.695258][ T309] ? _raw_spin_unlock_irq+0x4e/0x70 [ 59.700688][ T309] process_scheduled_works+0x7f7/0x1060 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 59.706249][ T309] worker_thread+0xc99/0x13f0 [ 59.711062][ T309] kthread+0x2c7/0x360 [ 59.715138][ T309] ? __cfi_worker_thread+0x10/0x10 [ 59.720282][ T309] ? __cfi_kthread+0x10/0x10 [ 59.724870][ T309] ret_from_fork+0x67/0xa0 [ 59.729311][ T309] ? __cfi_kthread+0x10/0x10 [ 59.732694][ T36] audit: type=1400 audit(1782812780.661:6992): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2721]" dev="pipefs" ino=2721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 59.733894][ T309] ret_from_fork_asm+0x1a/0x30 [ 59.761978][ T309] [ 59.765006][ T309] ---[ end trace 0000000000000000 ]--- [ 59.770590][ T389] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.778993][ T309] ------------[ cut here ]------------ [ 59.784637][ T309] WARNING: CPU: 1 PID: 309 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 59.794768][ T309] Modules linked in: [ 59.798706][ T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 59.811934][ T309] Tainted: [W]=WARN [ 59.815741][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.825844][ T309] Workqueue: netns cleanup_net [ 59.830661][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 59.836746][ T309] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 20 56 7e fc 49 81 ff f8 07 00 00 74 1b e8 12 56 7e fc 49 83 c7 08 eb c5 e8 07 56 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 f7 55 7e fc 5b 41 5c 41 5e 41 [ 59.856456][ T309] RSP: 0018:ffffc9000b71fb90 EFLAGS: 00010293 [ 59.862599][ T309] RAX: ffffffff850919c9 RBX: ffff888104b3c800 RCX: ffff888130f53900 [ 59.870601][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b3c808 [ 59.878648][ T309] RBP: ffffc9000b71fbb0 R08: ffffffff87d41927 R09: 1ffffffff0fa8324 [ 59.878946][ T66] usb 4-1: USB disconnect, device number 25 [ 59.886618][ T309] R10: dffffc0000000000 R11: fffffbfff0fa8325 R12: dffffc0000000000 [ 59.900494][ T309] R13: dffffc0000000000 R14: ffff888104b3c000 R15: 0000000000000008 [ 59.908596][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.917536][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.924171][ T309] CR2: 0000555564b5b918 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 59.932187][ T309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000006b [ 59.940203][ T309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 59.948224][ T309] Call Trace: [ 59.951494][ T309] [ 59.954412][ T309] cleanup_net+0x6bd/0xc90 [ 59.958838][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 59.963771][ T309] ? _raw_spin_unlock_irq+0x4e/0x70 [ 59.968987][ T309] process_scheduled_works+0x7f7/0x1060 [ 59.974528][ T309] worker_thread+0xc99/0x13f0 [ 59.979210][ T309] kthread+0x2c7/0x360 [ 59.983271][ T309] ? __cfi_worker_thread+0x10/0x10 [ 59.988394][ T309] ? __cfi_kthread+0x10/0x10 [ 59.992980][ T309] ret_from_fork+0x67/0xa0 [ 59.997378][ T309] ? __cfi_kthread+0x10/0x10 [ 60.001971][ T309] ret_from_fork_asm+0x1a/0x30 [ 60.006730][ T309] [ 60.009747][ T309] ---[ end trace 0000000000000000 ]--- [ 60.028440][ T309] ------------[ cut here ]------------ [ 60.033926][ T309] WARNING: CPU: 1 PID: 309 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 60.043441][ T309] Modules linked in: [ 60.047349][ T309] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 60.060499][ T309] Tainted: [W]=WARN [ 60.064292][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 60.074394][ T309] Workqueue: netns cleanup_net [ 60.079225][ T309] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 60.084786][ T309] Code: 3c 20 00 74 08 48 89 df e8 cf c9 f1 fc 48 8b 3b e8 e7 ba dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 16 99 fc <0f> 0b e9 b0 fd ff ff e8 46 16 99 fc 0f 0b e9 18 fe ff ff e8 3a 16 [ 60.104479][ T309] RSP: 0018:ffffc9000b71fb70 EFLAGS: 00010293 [ 60.110588][ T309] RAX: ffffffff84ee597e RBX: ffff888122b5c700 RCX: ffff888130f53900 [ 60.118607][ T309] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888130f53900 [ 60.126591][ T309] RBP: ffffc9000b71fb98 R08: ffffffff87d41927 R09: 1ffffffff0fa8324 [ 60.134613][ T309] R10: dffffc0000000000 R11: fffffbfff0fa8325 R12: 1ffffffff0fa8078 [ 60.142630][ T309] R13: dffffc0000000000 R14: ffff888122b5d300 R15: dffffc0000000000 [ 60.150630][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.159597][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.166179][ T309] CR2: 0000555564b5b918 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 60.174222][ T309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000006b [ 60.182244][ T309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 60.190261][ T309] Call Trace: [ 60.193562][ T309] [ 60.196496][ T309] xfrm_net_exit+0x31/0x80 [ 60.200965][ T309] cleanup_net+0x6bd/0xc90 [ 60.205384][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 60.210358][ T309] ? _raw_spin_unlock_irq+0x4e/0x70 [ 60.215565][ T309] process_scheduled_works+0x7f7/0x1060 [ 60.221119][ T309] worker_thread+0xc99/0x13f0 [ 60.225792][ T309] kthread+0x2c7/0x360 [ 60.229877][ T309] ? __cfi_worker_thread+0x10/0x10 [ 60.234983][ T309] ? __cfi_kthread+0x10/0x10 [ 60.239607][ T309] ret_from_fork+0x67/0xa0 [ 60.244035][ T309] ? __cfi_kthread+0x10/0x10 [ 60.248641][ T309] ret_from_fork_asm+0x1a/0x30 [ 60.253400][ T309] [ 60.256397][ T309] ---[ end trace 0000000000000000 ]--- [ 60.321216][ T389] usb 5-1: device descriptor read/all, error -71 [ 60.419249][ T592] vlan1: left allmulticast mode [ 60.424152][ T592] veth0_vlan: left allmulticast mode [ 60.435380][ T592] vlan1: left promiscuous mode [ 60.440581][ T592] bridge0: port 3(vlan1) entered disabled state [ 60.448279][ T592] bridge_slave_1: left allmulticast mode [ 60.453926][ T592] bridge_slave_1: left promiscuous mode [ 60.459848][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.467476][ T592] bridge_slave_0: left allmulticast mode [ 60.473696][ T592] bridge_slave_0: left promiscuous mode [ 60.479634][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.487524][ T592] bridge_slave_1: left allmulticast mode [ 60.493422][ T592] bridge_slave_1: left promiscuous mode [ 60.499302][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.506915][ T592] bridge_slave_0: left allmulticast mode [ 60.512822][ T592] bridge_slave_0: left promiscuous mode [ 60.519174][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.691208][ T592] veth1_macvtap: left promiscuous mode [ 60.696721][ T592] veth0_vlan: left promiscuous mode [ 60.702315][ T592] veth1_macvtap: left promiscuous mode [ 60.707817][ T592] veth0_vlan: left promiscuous mode [ 61.110213][ T592] bridge_slave_1: left allmulticast mode [ 61.115869][ T592] bridge_slave_1: left promiscuous mode [ 61.121530][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.129062][ T592] bridge_slave_0: left allmulticast mode [ 61.134700][ T592] bridge_slave_0: left promiscuous mode [ 61.140353][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.147988][ T592] bridge_slave_1: left allmulticast mode [ 61.153834][ T592] bridge_slave_1: left promiscuous mode [ 61.159535][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.166963][ T592] bridge_slave_0: left allmulticast mode [ 61.172692][ T592] bridge_slave_0: left promiscuous mode [ 61.178442][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.351235][ T592] veth1_macvtap: left promiscuous mode [ 61.356762][ T592] veth0_vlan: left promiscuous mode [ 61.362304][ T592] veth1_macvtap: left promiscuous mode [ 61.367772][ T592] veth0_vlan: left promiscuous mode