last executing test programs: 3m6.454367248s ago: executing program 3 (id=238): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 3m6.143558023s ago: executing program 3 (id=241): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) pivot_root(&(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xd05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040012}, 0x800) socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x10001, 0x0) sendmmsg(r2, &(0x7f0000003400)=[{{0x0, 0xfffffffffffffebe, 0x0}}], 0x1, 0x20000811) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) write(r1, &(0x7f0000000000)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setresuid(0x0, 0xee00, 0x0) capset(0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000000c0)=0x81, 0x4) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) r5 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x8d91e000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x400040) 3m5.78236208s ago: executing program 3 (id=247): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000400)=0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4080) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000700)={&(0x7f0000000100)=0x10000, 0x7, &(0x7f0000000540), &(0x7f00000006c0)}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x28}}, 0x44080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m4.663874882s ago: executing program 3 (id=256): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020901010000000000000000010000010400020004000200399f670112b52b92e16c1d417fd39d7393ad5f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m3.63635437s ago: executing program 3 (id=271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) pread64(r4, 0x0, 0x0, 0x5) 3m3.258289228s ago: executing program 3 (id=276): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="01031c000300140006006bd1b386001406"], 0x5a) lstat(0x0, 0x0) pipe2(0x0, 0x80880) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}}) r7 = gettid() ptrace(0x10, r7) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) setreuid(r9, 0x0) fcntl$getownex(r0, 0x10, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x4000015) connect$can_bcm(r2, &(0x7f00000005c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2m48.226228452s ago: executing program 32 (id=276): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="01031c000300140006006bd1b386001406"], 0x5a) lstat(0x0, 0x0) pipe2(0x0, 0x80880) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}}) r7 = gettid() ptrace(0x10, r7) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) setreuid(r9, 0x0) fcntl$getownex(r0, 0x10, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x4000015) connect$can_bcm(r2, &(0x7f00000005c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2m27.234515465s ago: executing program 0 (id=759): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000004c0)={0x6080, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 2m27.174179098s ago: executing program 0 (id=760): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x101, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1d0, 0x9, 0x80000004, 0x6, 0x1000, 0xa0, 0x29, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x8, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = socket$inet(0x2, 0x3, 0x12) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) recvmmsg(r4, 0x0, 0x0, 0x102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m26.113669188s ago: executing program 0 (id=768): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 2m25.713786166s ago: executing program 0 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m25.484606797s ago: executing program 0 (id=775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) pread64(r4, 0x0, 0x0, 0x5) 2m25.235942079s ago: executing program 0 (id=776): r0 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='9', 0x1) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000003380)=""/8192, 0x30000, 0x800, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x4, 0x8, 0x4, 0xfff, 0x2, 0x3, 0x7fffffff, 0x17e, 0x40, 0x2e, 0x10000, 0x6, 0x38, 0x3, 0xdab, 0x5, 0x6}, [{0x1, 0x2, 0x0, 0x8, 0x3, 0xd5, 0x9, 0xffffffff}, {0x2, 0x4, 0x9, 0x9, 0x3, 0x9, 0x400, 0x9}, {0x60000000, 0x8000, 0x7, 0x6, 0x3, 0x62b, 0x7, 0xffffffffffffffff}], "d95b5b4b5b9fe16297ffeb9a0c552fb51b046697fb9013818d6485dbc80d74287caffff1abdc9e8b27249b47b5b09b1f4155149f6a9e8bc5b62c7e865c18704d55d41ab87c949ee2e5fd9b7d29a8fcf785ba76c7fff330f26576aa5374c71a0f4be6fa61cdd2ca3ed7447806786d4b04875970f7a35e1e038397d954c54a8e73f71438fc0e2fa42445319ef54e5a91a591213cb5e952361cf385dd44a0"}, 0x185) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x13, r5, 0xb522f000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x3, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) 2m10.242684121s ago: executing program 33 (id=776): r0 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='9', 0x1) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000003380)=""/8192, 0x30000, 0x800, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x4, 0x8, 0x4, 0xfff, 0x2, 0x3, 0x7fffffff, 0x17e, 0x40, 0x2e, 0x10000, 0x6, 0x38, 0x3, 0xdab, 0x5, 0x6}, [{0x1, 0x2, 0x0, 0x8, 0x3, 0xd5, 0x9, 0xffffffff}, {0x2, 0x4, 0x9, 0x9, 0x3, 0x9, 0x400, 0x9}, {0x60000000, 0x8000, 0x7, 0x6, 0x3, 0x62b, 0x7, 0xffffffffffffffff}], "d95b5b4b5b9fe16297ffeb9a0c552fb51b046697fb9013818d6485dbc80d74287caffff1abdc9e8b27249b47b5b09b1f4155149f6a9e8bc5b62c7e865c18704d55d41ab87c949ee2e5fd9b7d29a8fcf785ba76c7fff330f26576aa5374c71a0f4be6fa61cdd2ca3ed7447806786d4b04875970f7a35e1e038397d954c54a8e73f71438fc0e2fa42445319ef54e5a91a591213cb5e952361cf385dd44a0"}, 0x185) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x13, r5, 0xb522f000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x3, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) 8.919357483s ago: executing program 5 (id=3348): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x62, 0x64, 0x63, 0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000780)={0x0, "0011223344556604080000bbccddeeff00112233445566774a0aaabbccddeeff00112233445566778899eabbccddeeff001122334455667788bcaabbccddeeff", 0x48}, 0x48, r1) add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000600)="12", 0x1, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x66, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x80000040}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x51, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x39, 0x30, 0x60, 0x30, 0x30, 0x30, 0x64, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x31, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x30, 0x54, 0x30, 0x30, 0x30, 0x31, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x37, 0x33, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x34, 0x31, 0x31]}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 8.909523223s ago: executing program 5 (id=3349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 8.787157259s ago: executing program 5 (id=3351): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0x5}]}) 8.642732986s ago: executing program 5 (id=3355): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 8.642599676s ago: executing program 5 (id=3356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004000)={0x1, 0x0, 0xfec00000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@wr_drn={0x68, 0x20, {0x5, 0xfffffffffffffffc}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.56296299s ago: executing program 5 (id=3359): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9c", 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 8.513340462s ago: executing program 34 (id=3359): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9c", 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 5.413518347s ago: executing program 6 (id=3390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x40000}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="b1", 0x1}], 0x1}, 0x4000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x1, &(0x7f0000001980)=""/60, 0x3c}, &(0x7f0000001a00)=0x40) 5.372824489s ago: executing program 6 (id=3391): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf2c, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffff805}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0x40840c0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 4.361246726s ago: executing program 6 (id=3408): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000400)=0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4080) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000700)={&(0x7f0000000100)=0x10000, 0x7, &(0x7f0000000540), &(0x7f00000006c0)}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x28}}, 0x44080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.447783489s ago: executing program 6 (id=3417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000014c0)=[@in_dx={0x69, 0x20, {0x3691, 0x2}}, @enable_nested={0x12c, 0x18}], 0x38}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0xa37, 0x8800000003, 0x1001, 0x9, 0x4, 0x7, 0x11, 0x800, 0x7, 0x8000002, 0x0, 0x7, 0xa, 0x3, 0x1], 0x0, 0x1d4541}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.357619723s ago: executing program 6 (id=3418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$pptp(0x18, 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.507408743s ago: executing program 6 (id=3430): r0 = syz_usb_connect(0x0, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a1a40001000000010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) write$binfmt_script(r1, 0x0, 0x0) syz_usb_disconnect(r0) 1.411306844s ago: executing program 1 (id=3433): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r2, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 1.410448315s ago: executing program 2 (id=3434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1.381014716s ago: executing program 2 (id=3435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) close(r0) 1.317463899s ago: executing program 1 (id=3436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xba3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="0f30c402fd3eecae660f38800a66724c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0x5, 0x7000000, 0x2d6c00000000000, 0x160a, 0x4, 0xb3, 0x4, 0x80000000000b1d, 0x6, 0x1000000003, 0x41, 0x3, 0x5, 0xe5, 0x100000000006], 0x3000, 0x3867c4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.279171881s ago: executing program 2 (id=3437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) ftruncate(r1, 0x2007ffb) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'vlan1\x00', @random='\x00\a\x00'}) 1.256113432s ago: executing program 2 (id=3438): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) 1.238000863s ago: executing program 1 (id=3440): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a34d942225517620514bf62a6f357d0272270a1da1b7240030feaab952ac3003cad04be68807e50e997fc26e40a1f55ceb93", 0x52}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3384870", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f654a2cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3", 0x52}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="91ca950729ebf29f5a41cc90a5065840ec8f54b43d8bd82722416e3c2450aaee884dd371267a17136253266e9eeda602b8d4e12bdd7853c5983ebf0afa9afaabe79bcb856fcb7810c986a4ec20123e11a6413c63e25f760ede6679e6826bad40819ae5a58da35ae22367454a28a8d820c29870", 0x73}, {&(0x7f0000000840)="ab65faa98379b3ed763097c555c7d8a8eef38de8f453a57cf07384460b8062f874f81ed4234c94554df2f82d2c99e848be9abd5a338b35aa8bc73eef282c18baa83cb943722f22cbbc6be82cd9cd11c287392bc2ad3719", 0x57}, {&(0x7f0000000a40)="f1224bee5303d70f916d929c27b8f99efa1a1d37a7e826e39670ea91a7eb14ae8eb94ca33ea995dae5f216341221a36e03ca9da27cfe011bba58924d69fba229da90a40651d9bb2d7d7837770bae752783f4b2c8b4cb8a777fb7ecf766ab91c5fdb501913393972e8915e32d45453b3a8b9ee1bf1c19518ed1a661e437fe485a7d0ea46175294d69e3c6c8e49e01dc390460ce402b21208711acfc5a20eb90f9e39637e1a3d4ce30279cf3dcfeae6e17176337e7dd9b1fccc91dabbf1fcba54b4a5db2558c1386c79129cc", 0xcb}], 0x3}}], 0x6, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca", 0x4, 0x340080d1, 0x0, 0x0) 1.223982373s ago: executing program 2 (id=3441): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000140)={0x0, 0x7217, 0x4000, 0x3, 0x21f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecc5, 0x20000, 0x2, 0x28e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf9a, 0x1248, 0x0, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x8000, 0x2, 0xf6, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x245, 0x100, 0x3, 0x18f}}], 0x4, 0x0, &(0x7f0000005280)) syz_io_uring_setup(0xeb7, &(0x7f0000000000)={0x0, 0xc10e, 0x1000, 0x3, 0x8d, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r3], 0x0) 1.177242805s ago: executing program 1 (id=3442): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000400)=0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4080) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000700)={&(0x7f0000000100)=0x10000, 0x7, &(0x7f0000000540), &(0x7f00000006c0)}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x28}}, 0x44080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 968.045905ms ago: executing program 4 (id=3443): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 945.920126ms ago: executing program 4 (id=3444): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r2, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f3"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 202.759211ms ago: executing program 4 (id=3445): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 95.603316ms ago: executing program 4 (id=3446): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x202a) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x7, 0x2, 0x7, 0x8, 0x0, 0xc, {0x43, 0x3, 0x6, 0x3fb, 0xffc, 0xe000000000000000, 0x1, 0x10, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0xffffffff80200168, 0x40, 0x1, 0xffffffef, 0x0, 0x0, 0x0, 0x80, 0x7bffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x82042, 0xc0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x542e, 0x0) 94.456066ms ago: executing program 1 (id=3447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.40228ms ago: executing program 1 (id=3448): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1f7) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101", 0x36) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='dummy_udc.0', 0xb) 5.26282ms ago: executing program 2 (id=3449): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x3, 0xc7, &(0x7f0000000340)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b71100100000000182405"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 5.02193ms ago: executing program 4 (id=3450): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x62, 0x64, 0x63, 0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000780)={0x0, "0011223344556604080000bbccddeeff00112233445566774a0aaabbccddeeff00112233445566778899eabbccddeeff001122334455667788bcaabbccddeeff", 0x48}, 0x48, r1) add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000600)="12", 0x1, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x66, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x80000040}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x51, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x39, 0x30, 0x60, 0x30, 0x30, 0x30, 0x64, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x31, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x30, 0x54, 0x30, 0x30, 0x30, 0x31, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x37, 0x33, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x34, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 0s ago: executing program 4 (id=3451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x2, 0x2, 0xfd, 0x7f, 0x2e, 0x0, 0x6, 0x3, 0x7, [0x0, 0x6, 0x3, 0x6, 0x81, 0xefb, 0x4]}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 20.855852][ T36] audit: type=1400 audit(1789543262.699:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 27.999942][ T36] audit: type=1400 audit(1789543269.859:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.001115][ T286] cgroup: Unknown subsys name 'net' [ 28.027310][ T36] audit: type=1400 audit(1789543269.859:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.057052][ T36] audit: type=1400 audit(1789543269.889:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.057235][ T286] cgroup: Unknown subsys name 'devices' [ 28.187734][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.194110][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.307210][ T36] audit: type=1400 audit(1789543270.169:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.332194][ T36] audit: type=1400 audit(1789543270.169:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.341785][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.360760][ T36] audit: type=1400 audit(1789543270.169:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.400960][ T36] audit: type=1400 audit(1789543270.239:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.429269][ T36] audit: type=1400 audit(1789543270.239:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.473259][ T36] audit: type=1400 audit(1789543270.329:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.503191][ T36] audit: type=1400 audit(1789543270.329:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.503938][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.285007][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.305542][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.313091][ T293] bridge_slave_0: entered allmulticast mode [ 29.320230][ T293] bridge_slave_0: entered promiscuous mode [ 29.335327][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343218][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.350490][ T293] bridge_slave_1: entered allmulticast mode [ 29.357149][ T293] bridge_slave_1: entered promiscuous mode [ 29.493743][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.501431][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.509115][ T298] bridge_slave_0: entered allmulticast mode [ 29.516257][ T298] bridge_slave_0: entered promiscuous mode [ 29.529242][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.538566][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.548536][ T298] bridge_slave_1: entered allmulticast mode [ 29.555461][ T298] bridge_slave_1: entered promiscuous mode [ 29.584373][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.593367][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.602260][ T297] bridge_slave_0: entered allmulticast mode [ 29.609506][ T297] bridge_slave_0: entered promiscuous mode [ 29.621760][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.637405][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.651635][ T297] bridge_slave_1: entered allmulticast mode [ 29.662419][ T297] bridge_slave_1: entered promiscuous mode [ 29.684755][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.695011][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.707332][ T299] bridge_slave_0: entered allmulticast mode [ 29.715377][ T299] bridge_slave_0: entered promiscuous mode [ 29.736805][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.748350][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.756545][ T299] bridge_slave_1: entered allmulticast mode [ 29.764696][ T299] bridge_slave_1: entered promiscuous mode [ 29.801065][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.813069][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.821361][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.829831][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.950530][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.962280][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.974315][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.984739][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.003435][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.015159][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.025733][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.037771][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.061292][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.070896][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.080034][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.090276][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.098337][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.106660][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.130288][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.138630][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.148247][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.156551][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.189880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.197691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.208211][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.215655][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.248303][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.256267][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.263983][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.272251][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.291566][ T293] veth0_vlan: entered promiscuous mode [ 30.317617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.326242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.336543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.343845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.359795][ T293] veth1_macvtap: entered promiscuous mode [ 30.384532][ T298] veth0_vlan: entered promiscuous mode [ 30.411117][ T297] veth0_vlan: entered promiscuous mode [ 30.443883][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.444276][ T298] veth1_macvtap: entered promiscuous mode [ 30.471037][ T297] veth1_macvtap: entered promiscuous mode [ 30.479018][ T299] veth0_vlan: entered promiscuous mode [ 30.501426][ T299] veth1_macvtap: entered promiscuous mode [ 30.662268][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.970870][ T354] mmap: syz.0.15 (354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.255666][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.425526][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 31.437893][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.458038][ T45] usb 1-1: config 0 has no interfaces? [ 31.471917][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 31.503731][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.535605][ T45] usb 1-1: Product: syz [ 31.540090][ T45] usb 1-1: Manufacturer: syz [ 31.544988][ T45] usb 1-1: SerialNumber: syz [ 31.561667][ T45] usb 1-1: config 0 descriptor?? [ 31.857312][ T45] usb 1-1: USB disconnect, device number 2 [ 33.028295][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 33.028312][ T36] audit: type=1400 audit(1789543274.889:125): avc: denied { create } for pid=407 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.077744][ T36] audit: type=1400 audit(1789543274.889:126): avc: denied { ioctl } for pid=407 comm="syz.3.34" path="socket:[4988]" dev="sockfs" ino=4988 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.104954][ T36] audit: type=1400 audit(1789543274.889:127): avc: denied { write } for pid=407 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.127389][ T36] audit: type=1400 audit(1789543274.889:128): avc: denied { read } for pid=407 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.149406][ T36] audit: type=1400 audit(1789543274.929:129): avc: denied { bind } for pid=409 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.170278][ T36] audit: type=1400 audit(1789543274.929:130): avc: denied { name_bind } for pid=409 comm="syz.3.35" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.192771][ T36] audit: type=1400 audit(1789543274.929:131): avc: denied { node_bind } for pid=409 comm="syz.3.35" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.224212][ T36] audit: type=1400 audit(1789543274.959:132): avc: denied { create } for pid=411 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.244207][ T36] audit: type=1400 audit(1789543274.959:133): avc: denied { setopt } for pid=411 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.264505][ T36] audit: type=1400 audit(1789543275.009:134): avc: denied { map } for pid=411 comm="syz.0.36" path="socket:[5009]" dev="sockfs" ino=5009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.263090][ T460] tipc: Started in network mode [ 35.268100][ T460] tipc: Node identity 2000004, cluster identity 4711 [ 35.275069][ T460] tipc: Node number set to 33554436 [ 35.822252][ T483] No source specified [ 35.828030][ T483] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 38.155008][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 38.155025][ T36] audit: type=1400 audit(1789543280.009:159): avc: denied { write } for pid=558 comm="syz.1.82" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.128418][ T36] audit: type=1400 audit(1789543280.989:160): avc: denied { mount } for pid=597 comm="syz.1.96" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.173929][ T36] audit: type=1400 audit(1789543281.019:161): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.196500][ T36] audit: type=1400 audit(1789543281.019:162): avc: denied { read } for pid=599 comm="syz.2.97" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.224737][ T36] audit: type=1400 audit(1789543281.019:163): avc: denied { open } for pid=599 comm="syz.2.97" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.252167][ T36] audit: type=1400 audit(1789543281.079:164): avc: denied { mount } for pid=601 comm="syz.1.98" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.274589][ T36] audit: type=1400 audit(1789543281.079:165): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.296496][ T36] audit: type=1400 audit(1789543281.139:166): avc: denied { map } for pid=603 comm="syz.1.99" path="/28/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.365684][ T609] Zero length message leads to an empty skb [ 39.592077][ T36] audit: type=1400 audit(1789543281.449:167): avc: denied { write } for pid=619 comm="syz.3.107" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.852789][ T36] audit: type=1400 audit(1789543281.709:168): avc: denied { write } for pid=627 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 40.410002][ T655] tipc: Started in network mode [ 40.415514][ T655] tipc: Node identity 4, cluster identity 4711 [ 40.422849][ T655] tipc: Node number set to 4 [ 42.673937][ T735] futex_wake_op: syz.3.146 tries to shift op by 144; fix this program [ 43.188680][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 43.188701][ T36] audit: type=1400 audit(1789543285.049:176): avc: denied { mount } for pid=755 comm="syz.0.154" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.318036][ T36] audit: type=1400 audit(1789543285.179:177): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.757871][ T766] netlink: 148 bytes leftover after parsing attributes in process `syz.1.159'. [ 43.807823][ T36] audit: type=1400 audit(1789543285.669:178): avc: denied { read } for pid=769 comm="syz.3.161" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.831471][ T36] audit: type=1400 audit(1789543285.669:179): avc: denied { open } for pid=769 comm="syz.3.161" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.918921][ T36] audit: type=1400 audit(1789543285.669:180): avc: denied { ioctl } for pid=769 comm="syz.3.161" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.960378][ T36] audit: type=1400 audit(1789543285.749:181): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.986123][ T36] audit: type=1400 audit(1789543285.809:182): avc: denied { read write } for pid=779 comm="syz.1.164" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.027121][ T36] audit: type=1400 audit(1789543285.809:183): avc: denied { open } for pid=779 comm="syz.1.164" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.055660][ T36] audit: type=1400 audit(1789543285.819:184): avc: denied { write } for pid=779 comm="syz.1.164" name="rt6_stats" dev="proc" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.137174][ T36] audit: type=1400 audit(1789543285.999:185): avc: denied { ioctl } for pid=784 comm="syz.2.166" path="socket:[18332]" dev="sockfs" ino=18332 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.291595][ T45] rust_binder: get_current_thread was called from the wrong process. [ 44.454152][ T45] rust_binder: 792: undelivered transaction 4, process died [ 44.472547][ T310] rust_binder: 792: undelivered TRANSACTION_COMPLETE [ 44.819078][ T834] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 44.829654][ T834] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 44.844965][ T834] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 44.854553][ T834] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 45.175507][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.214028][ T851] futex_wake_op: syz.3.190 tries to shift op by 144; fix this program [ 45.335526][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 45.348774][ T45] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 45.357749][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.374328][ T45] usb 1-1: config 0 has no interface number 0 [ 45.387701][ T45] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.410924][ T45] usb 1-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.426971][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 45.437960][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.447626][ T45] usb 1-1: Product: syz [ 45.461098][ T45] usb 1-1: Manufacturer: syz [ 45.469674][ T45] usb 1-1: SerialNumber: syz [ 45.481217][ T45] usb 1-1: config 0 descriptor?? [ 45.491129][ T45] asix 1-1:0.251: probe with driver asix failed with error -22 [ 46.555918][ T922] bridge0: port 3(veth0_vlan) entered blocking state [ 46.563446][ T922] bridge0: port 3(veth0_vlan) entered disabled state [ 46.570730][ T922] veth0_vlan: entered allmulticast mode [ 46.577309][ T922] bridge0: port 3(veth0_vlan) entered blocking state [ 46.584304][ T922] bridge0: port 3(veth0_vlan) entered forwarding state [ 46.594613][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 46.604627][ T922] bridge0: port 3(veth0_vlan) entered disabled state [ 46.614686][ T922] veth0_vlan (unregistering): left allmulticast mode [ 46.621817][ T922] bridge0: port 3(veth0_vlan) entered disabled state [ 46.785592][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 46.935747][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 46.943730][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.956109][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.966773][ T45] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 46.976303][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.984912][ T45] usb 2-1: Product: syz [ 46.989568][ T45] usb 2-1: Manufacturer: syz [ 46.998813][ T45] usb 2-1: SerialNumber: syz [ 47.216365][ T45] usb 2-1: unit 6 not found! [ 47.230518][ T45] usb 2-1: unit 0: unexpected type 0x0e [ 47.249076][ T45] usb 2-1: USB disconnect, device number 2 [ 47.292624][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.310059][ T45] usb 1-1: USB disconnect, device number 3 [ 48.553900][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 48.553918][ T36] audit: type=1400 audit(1789543290.409:201): avc: denied { create } for pid=967 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.581479][ T36] audit: type=1400 audit(1789543290.409:202): avc: denied { connect } for pid=967 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.602145][ T36] audit: type=1400 audit(1789543290.409:203): avc: denied { setopt } for pid=967 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.624209][ T36] audit: type=1400 audit(1789543290.489:204): avc: denied { read write } for pid=967 comm="syz.2.226" dev="sockfs" ino=27530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.664710][ T36] audit: type=1400 audit(1789543290.519:205): avc: denied { name_bind 0x1000000 } for pid=967 comm="syz.2.226" path="socket:[27530]" dev="sockfs" ino=27530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.389412][ T36] audit: type=1400 audit(1789543291.249:206): avc: denied { read write } for pid=970 comm="syz.3.229" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.502359][ T36] audit: type=1400 audit(1789543291.249:207): avc: denied { open } for pid=970 comm="syz.3.229" path="/53/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.532697][ T36] audit: type=1400 audit(1789543291.249:208): avc: denied { ioctl } for pid=970 comm="syz.3.229" path="/53/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.629202][ T978] futex_wake_op: syz.1.232 tries to shift op by 144; fix this program [ 49.806648][ T36] audit: type=1400 audit(1789543291.659:209): avc: denied { read write } for pid=988 comm="syz.0.235" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.867416][ T36] audit: type=1400 audit(1789543291.659:210): avc: denied { open } for pid=988 comm="syz.0.235" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.162797][ T1005] ./dev/sda1: Can't lookup blockdev [ 50.471866][ T1010] FAULT_INJECTION: forcing a failure. [ 50.471866][ T1010] name failslab, interval 1, probability 0, space 0, times 1 [ 50.506632][ T1010] CPU: 1 UID: 0 PID: 1010 Comm: syz.3.241 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 50.506668][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.506689][ T1010] Call Trace: [ 50.506696][ T1010] [ 50.506703][ T1010] __dump_stack+0x21/0x30 [ 50.506745][ T1010] dump_stack_lvl+0x140/0x1c0 [ 50.506770][ T1010] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.506808][ T1010] dump_stack+0x19/0x20 [ 50.506833][ T1010] should_fail_ex+0x3c2/0x510 [ 50.506856][ T1010] should_failslab+0xac/0x100 [ 50.506876][ T1010] kmem_cache_alloc_noprof+0x42/0x410 [ 50.506898][ T1010] ? security_inode_alloc+0x51/0x230 [ 50.506923][ T1010] ? __cfi_make_kgid+0x10/0x10 [ 50.506947][ T1010] security_inode_alloc+0x51/0x230 [ 50.506969][ T1010] inode_init_always_gfp+0x756/0x9e0 [ 50.506991][ T1010] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 50.507014][ T1010] alloc_inode+0xc5/0x270 [ 50.507034][ T1010] ? __cfi__raw_spin_lock+0x10/0x10 [ 50.507062][ T1010] new_inode+0x25/0x1e0 [ 50.507084][ T1010] shmem_get_inode+0x352/0xc10 [ 50.507107][ T1010] shmem_mknod+0x63/0x200 [ 50.507131][ T1010] shmem_mkdir+0x3b/0x80 [ 50.507154][ T1010] vfs_mkdir+0x58e/0x810 [ 50.507179][ T1010] do_mkdirat+0x240/0x530 [ 50.507202][ T1010] ? __cfi_do_mkdirat+0x10/0x10 [ 50.507226][ T1010] ? __kasan_check_write+0x18/0x20 [ 50.507243][ T1010] ? getname_flags+0x203/0x6b0 [ 50.507262][ T1010] ? __kasan_check_write+0x18/0x20 [ 50.507280][ T1010] __x64_sys_mkdirat+0x8b/0xa0 [ 50.507303][ T1010] x64_sys_call+0x2ba8/0x2ee0 [ 50.507321][ T1010] do_syscall_64+0x57/0xf0 [ 50.507338][ T1010] ? clear_bhb_loop+0x50/0xa0 [ 50.507358][ T1010] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.507378][ T1010] RIP: 0033:0x7f3e3839e159 [ 50.507403][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.507417][ T1010] RSP: 002b:00007f3e3926c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 50.507447][ T1010] RAX: ffffffffffffffda RBX: 00007f3e38625fa0 RCX: 00007f3e3839e159 [ 50.507462][ T1010] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 50.507476][ T1010] RBP: 00007f3e3843506b R08: 0000000000000000 R09: 0000000000000000 [ 50.507489][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.507501][ T1010] R13: 00007f3e38626038 R14: 00007f3e38625fa0 R15: 00007ffc28b09c68 [ 50.507518][ T1010] [ 52.958490][ T1087] FAULT_INJECTION: forcing a failure. [ 52.958490][ T1087] name failslab, interval 1, probability 0, space 0, times 0 [ 52.971969][ T1087] CPU: 0 UID: 0 PID: 1087 Comm: syz.3.271 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 52.972002][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.972015][ T1087] Call Trace: [ 52.972023][ T1087] [ 52.972031][ T1087] __dump_stack+0x21/0x30 [ 52.972065][ T1087] dump_stack_lvl+0x140/0x1c0 [ 52.972088][ T1087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.972110][ T1087] ? ref_tracker_alloc+0x356/0x5b0 [ 52.972133][ T1087] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 52.972153][ T1087] ? dst_alloc+0x163/0x240 [ 52.972176][ T1087] ? ip_route_output_key_hash_rcu+0x151f/0x2070 [ 52.972203][ T1087] dump_stack+0x19/0x20 [ 52.972225][ T1087] should_fail_ex+0x3c2/0x510 [ 52.972246][ T1087] should_failslab+0xac/0x100 [ 52.972268][ T1087] kmem_cache_alloc_noprof+0x42/0x410 [ 52.972287][ T1087] ? __inet_hash_connect+0x7b9/0x17f0 [ 52.972305][ T1087] ? inet_sk_get_local_port_range+0xa2/0x1d0 [ 52.972325][ T1087] __inet_hash_connect+0x7b9/0x17f0 [ 52.972343][ T1087] ? __cfi___inet_check_established+0x10/0x10 [ 52.972364][ T1087] ? __cfi___inet_hash_connect+0x10/0x10 [ 52.972381][ T1087] ? secure_ipv4_port_ephemeral+0xd1/0x170 [ 52.972401][ T1087] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 52.972422][ T1087] inet_hash_connect+0xbe/0x160 [ 52.972440][ T1087] tcp_v4_connect+0xbda/0x1950 [ 52.972460][ T1087] ? __cfi_tcp_v4_connect+0x10/0x10 [ 52.972478][ T1087] ? __kasan_check_write+0x18/0x20 [ 52.972496][ T1087] ? _raw_spin_lock_bh+0x96/0x130 [ 52.972516][ T1087] __inet_stream_connect+0x272/0xf10 [ 52.972534][ T1087] ? _raw_spin_unlock_bh+0x54/0x60 [ 52.972551][ T1087] ? lock_sock_nested+0x216/0x2a0 [ 52.972569][ T1087] ? __cfi___inet_stream_connect+0x10/0x10 [ 52.972587][ T1087] ? hook_socket_connect+0x50/0x50 [ 52.972612][ T1087] ? __check_object_size+0xdc/0x870 [ 52.972647][ T1087] inet_stream_connect+0x66/0xa0 [ 52.972666][ T1087] __sys_connect+0x334/0x460 [ 52.972686][ T1087] ? __cfi___sys_connect+0x10/0x10 [ 52.972708][ T1087] ? __kasan_check_write+0x18/0x20 [ 52.972725][ T1087] ? fpregs_restore_userregs+0x11c/0x260 [ 52.972748][ T1087] __x64_sys_connect+0x7e/0x90 [ 52.972768][ T1087] x64_sys_call+0x1c2f/0x2ee0 [ 52.972786][ T1087] do_syscall_64+0x57/0xf0 [ 52.972802][ T1087] ? clear_bhb_loop+0x50/0xa0 [ 52.972823][ T1087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.972844][ T1087] RIP: 0033:0x7f3e3839e159 [ 52.972861][ T1087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.972876][ T1087] RSP: 002b:00007f3e3926c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 52.972897][ T1087] RAX: ffffffffffffffda RBX: 00007f3e38625fa0 RCX: 00007f3e3839e159 [ 52.972912][ T1087] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 52.972925][ T1087] RBP: 00007f3e3843506b R08: 0000000000000000 R09: 0000000000000000 [ 52.972937][ T1087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.972949][ T1087] R13: 00007f3e38626038 R14: 00007f3e38625fa0 R15: 00007ffc28b09c68 [ 52.972966][ T1087] [ 53.749030][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 53.749045][ T36] audit: type=1400 audit(1789543295.609:228): avc: denied { write } for pid=1107 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.795809][ T36] audit: type=1400 audit(1789543295.639:229): avc: denied { nlmsg_write } for pid=1107 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.806735][ T545] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 53.972408][ T36] audit: type=1400 audit(1789543295.829:230): avc: denied { read } for pid=1113 comm="syz.2.284" name="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.016772][ T545] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.043910][ T36] audit: type=1400 audit(1789543295.829:231): avc: denied { open } for pid=1113 comm="syz.2.284" path="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.052428][ T545] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.114071][ T36] audit: type=1400 audit(1789543295.969:232): avc: denied { connect } for pid=1117 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.125596][ T545] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 54.175619][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.208314][ T36] audit: type=1400 audit(1789543296.069:233): avc: denied { read } for pid=1117 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.258570][ T36] audit: type=1400 audit(1789543296.069:234): avc: denied { bind } for pid=1117 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.305152][ T36] audit: type=1400 audit(1789543296.069:235): avc: denied { getopt } for pid=1117 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.391226][ T36] audit: type=1400 audit(1789543296.249:236): avc: denied { setopt } for pid=1121 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.420969][ T36] audit: type=1400 audit(1789543296.249:237): avc: denied { bind } for pid=1121 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.982841][ T1124] tipc: Enabling of bearer rejected, failed to enable media [ 55.022277][ T1129] ./dev/sda1: Can't lookup blockdev [ 55.515897][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 55.533075][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 55.551290][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 56.385558][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 56.536934][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.546284][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 56.555287][ T9] usb 1-1: config index 0 descriptor too short (expected 13031, got 139) [ 56.564861][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.575577][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.584642][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 56.598217][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice=20.40 [ 56.607776][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.616172][ T9] usb 1-1: Product: syz [ 56.620996][ T9] usb 1-1: Manufacturer: syz [ 56.626093][ T9] usb 1-1: SerialNumber: syz [ 56.837377][ T9] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 56.845659][ T9] usb 1-1: 1:1 : sample bitwidth 190 in over sample bytes 3 [ 56.853826][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 56.864859][ T9] usb 1-1: unit 2 not found! [ 56.869638][ T9] usb 1-1: unit 0 not found! [ 56.887516][ T9] usb 1-1: USB disconnect, device number 4 [ 57.019566][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.377184][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 57.388989][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 57.401381][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 57.413657][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 57.435197][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 57.465589][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 57.485583][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 57.501515][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 57.513697][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 57.526342][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 57.538069][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 57.549530][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 57.561113][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 57.573210][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 57.584906][ T545] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 57.598341][ T545] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 56:2f:a0:2d:21:1e [ 57.608458][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.616288][ T545] usb 2-1: USB disconnect, device number 3 [ 57.638720][ T545] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 57.787015][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 57.794054][ T9] usb 1-1: config 170 has an invalid interface number: 245 but max is 0 [ 57.806408][ T9] usb 1-1: config 170 has an invalid descriptor of length 0, skipping remainder of the config [ 57.831734][ T9] usb 1-1: config 170 has no interface number 0 [ 57.839719][ T9] usb 1-1: config 170 interface 245 has no altsetting 0 [ 57.851217][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=1173, bcdDevice=39.c4 [ 57.874915][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.895132][ T9] usb 1-1: Product: syz [ 57.900724][ T9] usb 1-1: Manufacturer: syz [ 57.915306][ T9] usb 1-1: SerialNumber: syz [ 58.137072][ T9] usb 1-1: bad CDC descriptors [ 58.144073][ T9] usb 1-1: USB disconnect, device number 5 [ 58.315282][ T545] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 58.466728][ T545] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.476012][ T545] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.487354][ T545] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.499463][ T545] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 58.516985][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.529154][ T545] usb 2-1: Product: syz [ 58.541330][ T545] usb 2-1: Manufacturer: syz [ 58.548056][ T545] usb 2-1: SerialNumber: syz [ 58.557752][ T545] usb 2-1: selecting invalid altsetting 1 [ 58.565694][ T545] usb 2-1: unit 6 not found! [ 58.577653][ T545] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.601315][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.575466][ T1490] futex_wake_op: syz.2.311 tries to shift op by 144; fix this program [ 59.920846][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 59.920861][ T36] audit: type=1400 audit(1789543557.779:268): avc: denied { read } for pid=1469 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.966117][ T1508] loop7: detected capacity change from 0 to 7 [ 60.000706][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.013887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.024106][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.037011][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.046270][ T1508] loop7: unable to read partition table [ 60.056265][ T1508] loop_reread_partitions: partition scan of loop7 (úù) failed (rc=-5) [ 60.084549][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.095368][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.106090][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.116987][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.135153][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.147855][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.165040][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.177825][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.187230][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.200622][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.272120][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.282680][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.298151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.308531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.319199][ T110] loop7: unable to read partition table [ 61.334299][ T45] usb 2-1: USB disconnect, device number 4 [ 61.367639][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.379753][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.578984][ T545] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 61.774879][ T545] usb 1-1: Using ep0 maxpacket: 8 [ 61.796103][ T545] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 61.837902][ T545] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 61.853814][ T545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.884070][ T545] usb 1-1: Product: syz [ 61.898239][ T545] usb 1-1: Manufacturer: syz [ 61.920921][ T545] usb 1-1: SerialNumber: syz [ 62.152995][ T545] usb 1-1: USB disconnect, device number 6 [ 62.181577][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.294869][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 62.454881][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 62.461894][ T10] usb 2-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 62.473419][ T10] usb 2-1: config 100 has 0 interfaces, different from the descriptor's value: 3 [ 62.486303][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=0065, bcdDevice=d4.64 [ 62.497563][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.506370][ T10] usb 2-1: Product: syz [ 62.511057][ T10] usb 2-1: Manufacturer: syz [ 62.516599][ T10] usb 2-1: SerialNumber: syz [ 62.776927][ T10] usb 2-1: USB disconnect, device number 5 [ 63.062241][ T1583] futex_wake_op: syz.0.350 tries to shift op by 144; fix this program [ 63.554714][ T545] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.716570][ T545] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.727682][ T545] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.737098][ T545] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.752620][ T545] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.762586][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.771586][ T545] usb 2-1: Product: syz [ 63.776344][ T545] usb 2-1: Manufacturer: syz [ 63.781461][ T545] usb 2-1: SerialNumber: syz [ 63.792093][ T545] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 63.800590][ T545] cdc_ncm 2-1:1.0: bind() failure [ 64.007744][ T545] usb 2-1: USB disconnect, device number 6 [ 64.229487][ T1604] futex_wake_op: syz.2.359 tries to shift op by 144; fix this program [ 64.404851][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 65.086008][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.094539][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 65.097295][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.129311][ T310] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.141566][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.156405][ T310] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 65.167977][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.178272][ T310] usb 1-1: Product: syz [ 65.183954][ T310] usb 1-1: Manufacturer: syz [ 65.190736][ T310] usb 1-1: SerialNumber: syz [ 65.265224][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 65.284855][ T10] usb 2-1: config 6 has an invalid interface number: 6 but max is 0 [ 65.293379][ T10] usb 2-1: config 6 has no interface number 0 [ 65.300777][ T10] usb 2-1: config 6 interface 6 altsetting 4 endpoint 0xB has invalid maxpacket 65, setting to 64 [ 65.315012][ T10] usb 2-1: config 6 interface 6 has no altsetting 0 [ 65.336150][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 65.348003][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.359454][ T10] usb 2-1: Product: syz [ 65.366448][ T10] usb 2-1: Manufacturer: syz [ 65.372257][ T10] usb 2-1: SerialNumber: syz [ 65.384387][ T1616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 65.403090][ T310] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 65.415170][ T310] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 65.427476][ T310] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 65.444784][ T310] usb 1-1: unit 2 not found! [ 65.452305][ T310] usb 1-1: unit 0 not found! [ 65.465466][ T310] usb 1-1: USB disconnect, device number 7 [ 65.601174][ T10] usb 2-1: Found UVC 0.00 device syz (174f:8a12) [ 65.610777][ T10] usb 2-1: No valid video chain found. [ 65.624653][ T10] usb 2-1: USB disconnect, device number 7 [ 66.186602][ T1628] futex_wake_op: syz.1.369 tries to shift op by 144; fix this program [ 66.615587][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.636043][ T1650] futex_wake_op: syz.2.379 tries to shift op by 144; fix this program [ 66.804278][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 66.814647][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.839829][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 66.854856][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.869428][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 66.880093][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.889386][ T10] usb 1-1: Product: syz [ 66.895798][ T10] usb 1-1: Manufacturer: syz [ 66.916156][ T10] usb 1-1: SerialNumber: syz [ 67.134959][ T10] usb 1-1: unit 4 not found! [ 67.144038][ T10] usb 1-1: USB disconnect, device number 8 [ 67.165489][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.440788][ T1670] futex_wake_op: syz.1.388 tries to shift op by 144; fix this program [ 68.048061][ T1692] futex_wake_op: syz.2.397 tries to shift op by 144; fix this program [ 68.493047][ T36] audit: type=1400 audit(1789543822.353:269): avc: denied { mounton } for pid=1704 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.599613][ T331] bridge_slave_1: left allmulticast mode [ 68.622556][ T331] bridge_slave_1: left promiscuous mode [ 68.631679][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.637735][ T1714] futex_wake_op: syz.1.406 tries to shift op by 144; fix this program [ 68.652702][ T331] bridge_slave_0: left allmulticast mode [ 68.674063][ T331] bridge_slave_0: left promiscuous mode [ 68.680553][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.759686][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.768217][ T1704] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.779373][ T1704] bridge_slave_0: entered allmulticast mode [ 68.796792][ T1704] bridge_slave_0: entered promiscuous mode [ 68.814381][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.829020][ T1704] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.840758][ T1704] bridge_slave_1: entered allmulticast mode [ 68.860669][ T1704] bridge_slave_1: entered promiscuous mode [ 68.880615][ T331] tipc: Left network mode [ 68.900228][ T331] veth1_macvtap: left promiscuous mode [ 69.050517][ T1736] futex_wake_op: syz.1.415 tries to shift op by 144; fix this program [ 69.108065][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.115695][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.123328][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.131999][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.161884][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.172537][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.198575][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.209945][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.224843][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.234233][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.275193][ T1704] veth0_vlan: entered promiscuous mode [ 69.290300][ T1704] veth1_macvtap: entered promiscuous mode [ 69.313457][ T36] audit: type=1400 audit(1789543823.173:270): avc: denied { mounton } for pid=1704 comm="syz-executor" path="/root/syzkaller.8flZXg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.393278][ T36] audit: type=1400 audit(1789543823.253:271): avc: denied { append } for pid=1747 comm="syz.4.419" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.059482][ T1799] futex_wake_op: syz.1.442 tries to shift op by 144; fix this program [ 70.329178][ T1817] futex_wake_op: syz.4.451 tries to shift op by 144; fix this program [ 71.277925][ T1853] futex_wake_op: syz.1.466 tries to shift op by 144; fix this program [ 71.689664][ T1863] : renamed from bridge0 (while UP) [ 71.698891][ T36] audit: type=1400 audit(1789543825.553:272): avc: denied { ioctl } for pid=1861 comm="syz.0.469" path="socket:[46889]" dev="sockfs" ino=46889 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.774410][ T1870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 71.837780][ T1878] futex_wake_op: syz.2.479 tries to shift op by 144; fix this program [ 72.688921][ T1907] futex_wake_op: syz.0.490 tries to shift op by 144; fix this program [ 72.747585][ T36] audit: type=1400 audit(1789543826.614:273): avc: denied { write } for pid=1911 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.760654][ T1914] syz.1.494 uses obsolete (PF_INET,SOCK_PACKET) [ 72.924671][ T1932] futex_wake_op: syz.2.501 tries to shift op by 144; fix this program [ 74.150795][ T1965] futex_wake_op: syz.2.514 tries to shift op by 144; fix this program [ 74.153429][ T36] audit: type=1400 audit(1789543828.014:274): avc: denied { ioctl } for pid=1968 comm="syz.1.515" path="socket:[56829]" dev="sockfs" ino=56829 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.209400][ T36] audit: type=1400 audit(1789543828.074:275): avc: denied { read } for pid=1970 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.485913][ T1994] futex_wake_op: syz.2.526 tries to shift op by 144; fix this program [ 75.207703][ T36] audit: type=1400 audit(1789543829.074:276): avc: denied { getopt } for pid=2004 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.462933][ T2023] futex_wake_op: syz.2.536 tries to shift op by 144; fix this program [ 75.554051][ T36] audit: type=1400 audit(1789543829.424:277): avc: denied { write } for pid=2031 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.811834][ T2063] futex_wake_op: syz.0.550 tries to shift op by 144; fix this program [ 76.601543][ T36] audit: type=1400 audit(1789543830.464:278): avc: denied { write } for pid=2090 comm="syz.0.565" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.654106][ T36] audit: type=1400 audit(1789543830.514:279): avc: denied { setopt } for pid=2092 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.017547][ T36] audit: type=1400 audit(1789543830.884:280): avc: denied { create } for pid=2106 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.103257][ T2110] futex_wake_op: syz.1.573 tries to shift op by 144; fix this program [ 78.719821][ T2156] futex_wake_op: syz.0.590 tries to shift op by 144; fix this program [ 78.787588][ T2158] ./dev/sda1: Can't lookup blockdev [ 79.728402][ T36] audit: type=1400 audit(1789543833.594:281): avc: denied { connect } for pid=2180 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.064394][ T36] audit: type=1400 audit(1789543835.915:282): avc: denied { search } for pid=2233 comm="syz.0.624" name="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.087713][ T36] audit: type=1400 audit(1789543835.915:283): avc: denied { write } for pid=2233 comm="syz.0.624" name="functions" dev="configfs" ino=27319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.111949][ T36] audit: type=1400 audit(1789543835.915:284): avc: denied { add_name } for pid=2233 comm="syz.0.624" name="tcm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.519202][ T36] audit: type=1400 audit(1789543836.385:285): avc: denied { cmd } for pid=2269 comm="iou-wrk-2270" path="socket:[58770]" dev="sockfs" ino=58770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.733109][ T2276] futex_wake_op: syz.0.639 tries to shift op by 144; fix this program [ 84.011834][ T2338] futex_wake_op: syz.2.663 tries to shift op by 144; fix this program [ 84.181338][ T36] audit: type=1400 audit(1789543838.045:286): avc: denied { append } for pid=2344 comm="syz.4.667" name="idVendor" dev="configfs" ino=59259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 84.182749][ T2345] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 84.217713][ T2345] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 84.237750][ T2345] udc dummy_udc.0: failed to start g1: -22 [ 84.246284][ T2345] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 84.259916][ T2345] UDC core: g1: couldn't find an available UDC or it's busy [ 84.472164][ T545] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.632368][ T545] usb 2-1: Using ep0 maxpacket: 16 [ 84.641446][ T545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.653431][ T545] usb 2-1: config 0 has no interfaces? [ 84.663459][ T545] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 84.674800][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.685235][ T545] usb 2-1: Product: syz [ 84.690450][ T545] usb 2-1: Manufacturer: syz [ 84.696661][ T545] usb 2-1: SerialNumber: syz [ 84.702004][ T545] usb 2-1: config 0 descriptor?? [ 84.803710][ T2366] netlink: 148 bytes leftover after parsing attributes in process `syz.2.675'. [ 84.973506][ T545] usb 2-1: USB disconnect, device number 8 [ 85.425072][ T2400] futex_wake_op: syz.2.683 tries to shift op by 144; fix this program [ 87.965962][ T310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 88.131915][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 88.149065][ T310] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 88.169168][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.186264][ T310] usb 2-1: config 0 has no interface number 0 [ 88.196014][ T310] usb 2-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.211999][ T310] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.229452][ T310] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 88.241797][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.254159][ T310] usb 2-1: Product: syz [ 88.258893][ T310] usb 2-1: Manufacturer: syz [ 88.270984][ T310] usb 2-1: SerialNumber: syz [ 88.282504][ T310] usb 2-1: config 0 descriptor?? [ 88.293241][ T310] asix 2-1:0.251: probe with driver asix failed with error -22 [ 90.308796][ T2616] futex_wake_op: syz.2.767 tries to shift op by 144; fix this program [ 90.819601][ T9] usb 2-1: USB disconnect, device number 9 [ 90.982663][ T36] audit: type=1400 audit(1789543844.856:287): avc: denied { read } for pid=2632 comm="syz.4.774" name="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.043766][ T36] audit: type=1400 audit(1789543844.856:288): avc: denied { open } for pid=2632 comm="syz.4.774" path="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.106302][ T2636] FAULT_INJECTION: forcing a failure. [ 91.106302][ T2636] name failslab, interval 1, probability 0, space 0, times 0 [ 91.125837][ T2636] CPU: 0 UID: 0 PID: 2636 Comm: syz.0.775 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 91.125870][ T2636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.125890][ T2636] Call Trace: [ 91.125900][ T2636] [ 91.125908][ T2636] __dump_stack+0x21/0x30 [ 91.125958][ T2636] dump_stack_lvl+0x140/0x1c0 [ 91.125984][ T2636] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.126012][ T2636] dump_stack+0x19/0x20 [ 91.126035][ T2636] should_fail_ex+0x3c2/0x510 [ 91.126058][ T2636] should_failslab+0xac/0x100 [ 91.126081][ T2636] kmem_cache_alloc_noprof+0x42/0x410 [ 91.126102][ T2636] ? inet_bind2_bucket_create+0x41/0x610 [ 91.126121][ T2636] ? _raw_spin_lock+0x92/0x120 [ 91.126148][ T2636] inet_bind2_bucket_create+0x41/0x610 [ 91.126166][ T2636] ? inet_sk_get_local_port_range+0xa2/0x1d0 [ 91.126187][ T2636] __inet_hash_connect+0xecb/0x17f0 [ 91.126209][ T2636] ? __cfi___inet_hash_connect+0x10/0x10 [ 91.126229][ T2636] ? secure_ipv4_port_ephemeral+0xd1/0x170 [ 91.126249][ T2636] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 91.126271][ T2636] inet_hash_connect+0xbe/0x160 [ 91.126290][ T2636] tcp_v4_connect+0xbda/0x1950 [ 91.126311][ T2636] ? __cfi_tcp_v4_connect+0x10/0x10 [ 91.126330][ T2636] ? __kasan_check_write+0x18/0x20 [ 91.126348][ T2636] ? _raw_spin_lock_bh+0x96/0x130 [ 91.126365][ T2636] __inet_stream_connect+0x272/0xf10 [ 91.126382][ T2636] ? _raw_spin_unlock_bh+0x54/0x60 [ 91.126399][ T2636] ? lock_sock_nested+0x216/0x2a0 [ 91.126417][ T2636] ? __cfi___inet_stream_connect+0x10/0x10 [ 91.126436][ T2636] ? hook_socket_connect+0x50/0x50 [ 91.126462][ T2636] ? __check_object_size+0xdc/0x870 [ 91.126483][ T2636] inet_stream_connect+0x66/0xa0 [ 91.126501][ T2636] __sys_connect+0x334/0x460 [ 91.126523][ T2636] ? __cfi___sys_connect+0x10/0x10 [ 91.126547][ T2636] ? __kasan_check_write+0x18/0x20 [ 91.126565][ T2636] ? fpregs_restore_userregs+0x11c/0x260 [ 91.126589][ T2636] __x64_sys_connect+0x7e/0x90 [ 91.126610][ T2636] x64_sys_call+0x1c2f/0x2ee0 [ 91.126628][ T2636] do_syscall_64+0x57/0xf0 [ 91.126644][ T2636] ? clear_bhb_loop+0x50/0xa0 [ 91.126666][ T2636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.126688][ T2636] RIP: 0033:0x7fae0db9e159 [ 91.126713][ T2636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.126730][ T2636] RSP: 002b:00007fae0c5e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 91.126758][ T2636] RAX: ffffffffffffffda RBX: 00007fae0de25fa0 RCX: 00007fae0db9e159 [ 91.126773][ T2636] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 91.126787][ T2636] RBP: 00007fae0dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 91.126799][ T2636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.126811][ T2636] R13: 00007fae0de26038 R14: 00007fae0de25fa0 R15: 00007fff35f5d038 [ 91.126828][ T2636] [ 92.381697][ T2660] futex_wake_op: syz.1.784 tries to shift op by 144; fix this program [ 93.815092][ T2708] futex_wake_op: syz.2.802 tries to shift op by 144; fix this program [ 94.671861][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.852200][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.868620][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.910949][ T310] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 94.940928][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.793653][ T2754] futex_wake_op: syz.1.819 tries to shift op by 144; fix this program [ 96.281515][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 96.294897][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 96.310371][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 98.129833][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 98.161136][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 98.173421][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 98.186857][ T2789] futex_wake_op: syz.2.833 tries to shift op by 144; fix this program [ 98.191033][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 98.221207][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 98.248802][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 98.272958][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.301007][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.325219][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.351225][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 98.383940][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.425150][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.456268][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 98.488920][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 98.506913][ T310] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 98.524907][ T310] ax88179_178a 5-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 76:b2:a5:ba:6f:32 [ 98.568033][ T310] usb 5-1: USB disconnect, device number 2 [ 98.580516][ T310] ax88179_178a 5-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 99.691056][ T2852] futex_wake_op: syz.2.847 tries to shift op by 144; fix this program [ 99.810606][ T45] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.993750][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.004234][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 100.013553][ T45] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 100.024500][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.043102][ T45] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 100.053049][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.061758][ T45] usb 5-1: Product: syz [ 100.066573][ T45] usb 5-1: Manufacturer: syz [ 100.071821][ T45] usb 5-1: SerialNumber: syz [ 100.285524][ T45] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 100.294408][ T45] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 100.304984][ T45] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 100.314885][ T45] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 100.323831][ T45] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 100.338574][ T45] usb 5-1: USB disconnect, device number 3 [ 100.356108][ T1538] udevd[1538]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.023598][ T2888] futex_wake_op: syz.4.860 tries to shift op by 144; fix this program [ 102.072462][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.251654][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.254207][ T2915] futex_wake_op: syz.1.872 tries to shift op by 144; fix this program [ 102.271001][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.290282][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.310450][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.332177][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 102.343214][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.370291][ T10] usb 5-1: Product: syz [ 102.376957][ T10] usb 5-1: Manufacturer: syz [ 102.390282][ T10] usb 5-1: SerialNumber: syz [ 102.604075][ T10] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 102.613287][ T10] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 102.621609][ T10] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 102.633925][ T10] usb 5-1: unit 2 not found! [ 102.639051][ T10] usb 5-1: unit 0 not found! [ 102.654088][ T10] usb 5-1: USB disconnect, device number 4 [ 102.675194][ T1566] udevd[1566]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.614201][ T2941] futex_wake_op: syz.2.882 tries to shift op by 144; fix this program [ 104.384552][ T2969] FAULT_INJECTION: forcing a failure. [ 104.384552][ T2969] name failslab, interval 1, probability 0, space 0, times 0 [ 104.401136][ T2969] CPU: 1 UID: 0 PID: 2969 Comm: syz.1.894 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 104.401173][ T2969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.401186][ T2969] Call Trace: [ 104.401192][ T2969] [ 104.401201][ T2969] __dump_stack+0x21/0x30 [ 104.401237][ T2969] dump_stack_lvl+0x140/0x1c0 [ 104.401262][ T2969] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.401287][ T2969] dump_stack+0x19/0x20 [ 104.401310][ T2969] should_fail_ex+0x3c2/0x510 [ 104.401333][ T2969] should_failslab+0xac/0x100 [ 104.401355][ T2969] kmem_cache_alloc_node_noprof+0x45/0x420 [ 104.401376][ T2969] ? dup_task_struct+0xc1/0xd80 [ 104.401399][ T2969] ? __cfi___futex_queue+0x10/0x10 [ 104.401423][ T2969] dup_task_struct+0xc1/0xd80 [ 104.401445][ T2969] ? __kasan_check_write+0x18/0x20 [ 104.401463][ T2969] ? _raw_spin_lock_irq+0x93/0x120 [ 104.401481][ T2969] ? copy_process+0x3350/0x3350 [ 104.401503][ T2969] ? __kasan_check_write+0x18/0x20 [ 104.401522][ T2969] copy_process+0x57c/0x3350 [ 104.401544][ T2969] ? __cfi_futex_wake_mark+0x10/0x10 [ 104.401562][ T2969] ? futex_wake+0x627/0x950 [ 104.401579][ T2969] ? __cfi_copy_process+0x10/0x10 [ 104.401604][ T2969] kernel_clone+0x233/0x810 [ 104.401628][ T2969] ? avc_has_perm+0x155/0x240 [ 104.401652][ T2969] ? __cfi_kernel_clone+0x10/0x10 [ 104.401674][ T2969] ? do_futex+0x32a/0x510 [ 104.401698][ T2969] __x64_sys_clone+0x1b7/0x230 [ 104.401722][ T2969] ? __cfi___x64_sys_clone+0x10/0x10 [ 104.401756][ T2969] ? __kasan_check_write+0x18/0x20 [ 104.401775][ T2969] ? fpregs_restore_userregs+0x11c/0x260 [ 104.401800][ T2969] ? switch_fpu_return+0x12/0x20 [ 104.401823][ T2969] x64_sys_call+0x2b3c/0x2ee0 [ 104.401841][ T2969] do_syscall_64+0x57/0xf0 [ 104.401858][ T2969] ? clear_bhb_loop+0x50/0xa0 [ 104.401881][ T2969] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.401901][ T2969] RIP: 0033:0x7f3e21d9e159 [ 104.401918][ T2969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.401933][ T2969] RSP: 002b:00007f3e22bc6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 104.401954][ T2969] RAX: ffffffffffffffda RBX: 00007f3e22025fa0 RCX: 00007f3e21d9e159 [ 104.401969][ T2969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800000 [ 104.401981][ T2969] RBP: 00007f3e21e3506b R08: 0000000000000000 R09: 0000000000000000 [ 104.401993][ T2969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.402005][ T2969] R13: 00007f3e22026038 R14: 00007f3e22025fa0 R15: 00007fffbbf3b108 [ 104.402021][ T2969] [ 106.200390][ T36] audit: type=1400 audit(1789544116.068:289): avc: denied { read } for pid=3022 comm="syz.4.916" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.249985][ T36] audit: type=1400 audit(1789544116.068:290): avc: denied { open } for pid=3022 comm="syz.4.916" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.290772][ T3032] rust_binder: 3031:3032 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 106.311576][ T3032] rust_binder: Write failure EINVAL in pid:326 [ 106.480385][ T309] bridge_slave_1: left allmulticast mode [ 106.493008][ T309] bridge_slave_1: left promiscuous mode [ 106.498632][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.507049][ T309] bridge_slave_0: left allmulticast mode [ 106.513057][ T309] bridge_slave_0: left promiscuous mode [ 106.518880][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.609654][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.617237][ T3042] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.626800][ T3042] bridge_slave_0: entered allmulticast mode [ 106.634132][ T3042] bridge_slave_0: entered promiscuous mode [ 106.641142][ T309] tipc: Left network mode [ 106.641396][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.653093][ T3042] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.660275][ T3042] bridge_slave_1: entered allmulticast mode [ 106.667297][ T3042] bridge_slave_1: entered promiscuous mode [ 106.674406][ T309] veth1_macvtap: left promiscuous mode [ 106.680273][ T309] veth0_vlan: left promiscuous mode [ 106.799071][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.806174][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.813771][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.821136][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.848229][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.855879][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.865971][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.873429][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.883636][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.891184][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.916497][ T3042] veth0_vlan: entered promiscuous mode [ 106.933326][ T3042] veth1_macvtap: entered promiscuous mode [ 106.983424][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.919'. [ 108.873623][ T36] audit: type=1400 audit(1789544118.738:291): avc: denied { mounton } for pid=3115 comm="syz.5.951" path="/proc/10/task" dev="proc" ino=69665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.277248][ T3122] netlink: 148 bytes leftover after parsing attributes in process `syz.4.953'. [ 109.526970][ T3154] netlink: 148 bytes leftover after parsing attributes in process `syz.5.967'. [ 109.549165][ T3158] futex_wake_op: syz.2.970 tries to shift op by 144; fix this program [ 112.330305][ T3292] futex_wake_op: syz.1.1026 tries to shift op by 144; fix this program [ 113.306724][ T3324] futex_wake_op: syz.2.1039 tries to shift op by 144; fix this program [ 114.445858][ T3365] futex_wake_op: syz.2.1054 tries to shift op by 144; fix this program [ 115.911470][ T3435] futex_wake_op: syz.5.1082 tries to shift op by 144; fix this program [ 117.377885][ T3505] futex_wake_op: syz.2.1104 tries to shift op by 144; fix this program [ 119.066598][ T3560] futex_wake_op: syz.5.1127 tries to shift op by 144; fix this program [ 120.544518][ T3603] futex_wake_op: syz.4.1145 tries to shift op by 144; fix this program [ 121.779580][ T3635] futex_wake_op: syz.5.1158 tries to shift op by 144; fix this program [ 122.350566][ T3663] futex_wake_op: syz.4.1168 tries to shift op by 144; fix this program [ 124.047858][ T3705] futex_wake_op: syz.5.1184 tries to shift op by 144; fix this program [ 125.789443][ T3745] futex_wake_op: syz.1.1199 tries to shift op by 144; fix this program [ 127.057494][ T3792] futex_wake_op: syz.2.1215 tries to shift op by 144; fix this program [ 128.363668][ T3828] futex_wake_op: syz.4.1229 tries to shift op by 144; fix this program [ 128.769060][ T36] audit: type=1400 audit(1789544138.628:292): avc: denied { write } for pid=3838 comm="syz.5.1235" name="arp" dev="proc" ino=4026532434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 130.634438][ T3926] futex_wake_op: syz.5.1263 tries to shift op by 144; fix this program [ 131.081967][ T3950] futex_wake_op: syz.5.1273 tries to shift op by 144; fix this program [ 131.898927][ T3992] futex_wake_op: syz.2.1291 tries to shift op by 144; fix this program [ 132.243941][ T4018] futex_wake_op: syz.2.1302 tries to shift op by 144; fix this program [ 132.813117][ T36] audit: type=1400 audit(1789544142.678:293): avc: denied { getopt } for pid=4073 comm="syz.5.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.976820][ T36] audit: type=1326 audit(1789544142.838:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.1338" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 133.026516][ T36] audit: type=1326 audit(1789544142.888:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.5.1339" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 133.978372][ T4142] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 133.992908][ T4142] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 134.001570][ T4142] udc dummy_udc.0: failed to start g1: -22 [ 134.007836][ T4142] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 134.023613][ T4142] UDC core: g1: couldn't find an available UDC or it's busy [ 134.345431][ T36] audit: type=1400 audit(1789544144.208:296): avc: denied { mounton } for pid=4179 comm="syz.5.1372" path="/95/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.580381][ T4194] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 134.597782][ T4194] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 134.621372][ T4194] udc dummy_udc.0: failed to start g1: -22 [ 134.628941][ T4194] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 134.641270][ T4194] UDC core: g1: couldn't find an available UDC or it's busy [ 134.677201][ T36] audit: type=1400 audit(1789544144.538:297): avc: denied { sqpoll } for pid=4201 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.763351][ T36] audit: type=1400 audit(1789544144.628:298): avc: denied { read write } for pid=4208 comm="syz.5.1382" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.788762][ T4210] futex_wake_op: syz.2.1383 tries to shift op by 144; fix this program [ 134.789694][ T36] audit: type=1400 audit(1789544144.628:299): avc: denied { open } for pid=4208 comm="syz.5.1382" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.037514][ T4224] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 135.046995][ T4224] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 135.077541][ T4224] udc dummy_udc.0: failed to start g1: -22 [ 135.087560][ T4224] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 135.108216][ T4224] UDC core: g1: couldn't find an available UDC or it's busy [ 135.676962][ T4253] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 135.686041][ T4260] futex_wake_op: syz.2.1402 tries to shift op by 144; fix this program [ 135.694664][ T4253] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 135.710336][ T4253] udc dummy_udc.0: failed to start g1: -22 [ 135.724762][ T4253] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 135.747377][ T4253] UDC core: g1: couldn't find an available UDC or it's busy [ 136.122015][ T4281] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 136.136067][ T4281] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 136.151369][ T4281] udc dummy_udc.0: failed to start g1: -22 [ 136.157574][ T4281] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 136.173823][ T4281] UDC core: g1: couldn't find an available UDC or it's busy [ 136.397931][ T36] audit: type=1326 audit(1789544146.258:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.4.1418" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cd99e159 code=0x0 [ 137.011855][ T36] audit: type=1400 audit(1789544402.883:301): avc: denied { ioctl } for pid=4309 comm="syz.5.1422" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.121554][ T4314] futex_wake_op: syz.1.1424 tries to shift op by 144; fix this program [ 137.516753][ T4336] futex_wake_op: syz.4.1434 tries to shift op by 144; fix this program [ 137.676975][ T36] audit: type=1400 audit(1789544403.543:302): avc: denied { create } for pid=4349 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.700580][ T36] audit: type=1400 audit(1789544403.573:303): avc: denied { bind } for pid=4349 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.752831][ T4357] futex_wake_op: syz.4.1444 tries to shift op by 144; fix this program [ 137.975479][ T4377] futex_wake_op: syz.4.1454 tries to shift op by 144; fix this program [ 138.118805][ T36] audit: type=1400 audit(1789544403.983:304): avc: denied { bind } for pid=4393 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.178212][ T4401] futex_wake_op: syz.1.1465 tries to shift op by 144; fix this program [ 138.322443][ T36] audit: type=1400 audit(1789544404.193:305): avc: denied { connect } for pid=4413 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.390651][ T4422] futex_wake_op: syz.2.1475 tries to shift op by 144; fix this program [ 140.130565][ T4581] futex_wake_op: syz.1.1541 tries to shift op by 144; fix this program [ 140.409275][ T36] audit: type=1326 audit(1789544406.273:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.1549" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 140.477679][ T4610] futex_wake_op: syz.5.1553 tries to shift op by 144; fix this program [ 141.140777][ T526] tipc: Subscription rejected, illegal request [ 141.187289][ T36] audit: type=1400 audit(1789544663.054:307): avc: denied { accept } for pid=4632 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.229507][ T4637] futex_wake_op: syz.1.1562 tries to shift op by 144; fix this program [ 141.491717][ T331] tipc: Subscription rejected, illegal request [ 141.601995][ T36] audit: type=1326 audit(1789544663.474:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.5.1569" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 141.715083][ T4661] futex_wake_op: syz.4.1571 tries to shift op by 144; fix this program [ 141.967979][ T895] tipc: Subscription rejected, illegal request [ 142.649726][ T1426] tipc: Subscription rejected, illegal request [ 142.868243][ T4923] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1595'. [ 142.989122][ T4930] futex_wake_op: syz.2.1597 tries to shift op by 144; fix this program [ 143.641609][ T36] audit: type=1326 audit(1789544921.515:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.2.1603" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 144.156978][ T4969] rust_binder: Write failure EFAULT in pid:643 [ 144.574405][ T36] audit: type=1326 audit(1789545178.437:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.2.1617" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 144.795664][ T5009] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 144.807167][ T5009] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 144.819479][ T5009] udc dummy_udc.0: failed to start g1: -22 [ 144.825883][ T5009] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 144.848420][ T5009] UDC core: g1: couldn't find an available UDC or it's busy [ 145.120167][ T36] audit: type=1326 audit(1789545434.993:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.5.1633" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 146.117139][ T5292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1549 sclass=netlink_xfrm_socket pid=5292 comm=syz.5.1648 [ 146.162041][ T36] audit: type=1326 audit(1789545692.034:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.1651" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 146.745125][ T36] audit: type=1400 audit(1789545948.615:313): avc: denied { write } for pid=5333 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.515752][ T36] audit: type=1326 audit(1789545949.385:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.2.1698" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 149.185534][ T5655] futex_wake_op: syz.4.1723 tries to shift op by 144; fix this program [ 149.372629][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 149.478949][ T5677] futex_wake_op: syz.4.1734 tries to shift op by 144; fix this program [ 149.490448][ T36] audit: type=1400 audit(1789546207.348:315): avc: denied { connect } for pid=5678 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.723765][ T5707] futex_wake_op: syz.4.1748 tries to shift op by 144; fix this program [ 150.048853][ T5732] futex_wake_op: syz.2.1758 tries to shift op by 144; fix this program [ 150.231922][ T36] audit: type=1400 audit(1789546208.098:316): avc: denied { getopt } for pid=5745 comm="syz.1.1763" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.092612][ T36] audit: type=1326 audit(1789546208.958:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.1.1791" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 152.268948][ T36] audit: type=1400 audit(1789546466.141:318): avc: denied { read append } for pid=5996 comm="syz.1.1807" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.270076][ T5998] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 152.363711][ T36] audit: type=1400 audit(1789546466.141:319): avc: denied { open } for pid=5996 comm="syz.1.1807" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.431704][ T36] audit: type=1400 audit(1789546466.181:320): avc: denied { relabelto } for pid=5996 comm="syz.1.1807" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:locale_t:s0" [ 152.488484][ T36] audit: type=1400 audit(1789546466.181:321): avc: denied { associate } for pid=5996 comm="syz.1.1807" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:locale_t:s0" [ 152.740385][ T36] audit: type=1400 audit(1789546466.611:322): avc: denied { ioctl } for pid=6031 comm="syz.4.1822" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.121893][ T6043] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 153.149971][ T6043] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 153.168462][ T6043] udc dummy_udc.0: failed to start g1: -22 [ 153.189397][ T6043] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 153.221618][ T6043] UDC core: g1: couldn't find an available UDC or it's busy [ 153.570906][ T6072] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 153.578687][ T6072] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 153.587079][ T6072] udc dummy_udc.0: failed to start g1: -22 [ 153.602396][ T6072] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 153.621381][ T6072] UDC core: g1: couldn't find an available UDC or it's busy [ 153.678192][ T6076] futex_wake_op: syz.2.1840 tries to shift op by 144; fix this program [ 153.871716][ T6091] usb usb9: usbfs: process 6091 (syz.1.1847) did not claim interface 0 before use [ 154.078303][ T6105] futex_wake_op: syz.1.1852 tries to shift op by 144; fix this program [ 154.315796][ T36] audit: type=1400 audit(1789546468.181:323): avc: denied { append } for pid=6133 comm="syz.1.1866" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.469484][ T36] audit: type=1326 audit(1789546468.341:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.5.1876" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 154.523168][ T36] audit: type=1400 audit(1789546468.371:325): avc: denied { connect } for pid=6159 comm="syz.2.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.548684][ T6163] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 154.555966][ T6163] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 154.588395][ T6163] udc dummy_udc.0: failed to start g1: -22 [ 154.594677][ T6163] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 154.606411][ T6163] UDC core: g1: couldn't find an available UDC or it's busy [ 155.046017][ T6269] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1886'. [ 155.358498][ T314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.518274][ T314] usb 5-1: Using ep0 maxpacket: 16 [ 155.530698][ T314] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.558510][ T314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.571885][ T314] usb 5-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 155.594511][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.615991][ T314] usb 5-1: config 0 descriptor?? [ 155.958072][ T36] audit: type=1400 audit(1789546725.825:326): avc: denied { bind } for pid=6414 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.001555][ T6423] __vm_enough_memory: pid: 6423, comm: syz.5.1916, bytes: 17448308736 not enough memory for the allocation [ 156.013926][ T36] audit: type=1400 audit(1789546725.875:327): avc: denied { map } for pid=6420 comm="syz.5.1916" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.041841][ T314] input: HID 04b3:3105 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04B3:3105.0001/input/input5 [ 156.072085][ T314] lenovo 0003:04B3:3105.0001: input,hidraw0: USB HID v0.09 Joystick [HID 04b3:3105] on usb-dummy_hcd.4-1/input0 [ 156.241832][ T45] usb 5-1: USB disconnect, device number 9 [ 156.767573][ T6453] tipc: MTU too low for tipc bearer [ 157.351328][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 157.727514][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 157.727531][ T36] audit: type=1400 audit(1789546727.596:332): avc: denied { setopt } for pid=6480 comm="syz.5.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.300229][ T6523] fuse: Bad value for 'group_id' [ 158.315701][ T6523] fuse: Bad value for 'group_id' [ 158.427403][ T36] audit: type=1400 audit(1789546728.296:333): avc: denied { setopt } for pid=6528 comm="syz.1.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.718416][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1970'. [ 158.787999][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.837743][ T36] audit: type=1326 audit(1789546728.706:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.2.1974" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 158.977932][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 158.987795][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.996379][ T45] usb 2-1: config 1 has no interface number 0 [ 159.008824][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 159.031381][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 159.053532][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 [ 159.069607][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 159.083884][ T45] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 159.093858][ T45] usb 2-1: Product: syz [ 159.107120][ T45] usb 2-1: Manufacturer: syz [ 159.121413][ T45] usb 2-1: SerialNumber: syz [ 159.134989][ T6539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.144663][ T6539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.573918][ T6539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.607911][ T6539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.853993][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 159.868096][ T45] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 159.893832][ T45] usb 2-1: USB disconnect, device number 16 [ 160.007844][ T314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.111433][ T36] audit: type=1400 audit(1789546985.984:335): avc: denied { getopt } for pid=6590 comm="syz.5.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.133577][ T36] audit: type=1326 audit(1789546985.984:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.5.1987" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 160.187875][ T314] usb 5-1: Using ep0 maxpacket: 8 [ 160.194900][ T314] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 160.206101][ T314] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 160.222168][ T314] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 160.232416][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.241145][ T314] usb 5-1: Product: syz [ 160.245395][ T314] usb 5-1: Manufacturer: syz [ 160.250212][ T314] usb 5-1: SerialNumber: syz [ 160.414577][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1991'. [ 160.427954][ T6605] netlink: 'syz.1.1991': attribute type 6 has an invalid length. [ 160.441300][ T6605] netlink: 'syz.1.1991': attribute type 5 has an invalid length. [ 160.453387][ T6605] netlink: 'syz.1.1991': attribute type 4 has an invalid length. [ 160.468145][ T6574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.514697][ T314] usb 5-1: USB disconnect, device number 10 [ 160.522788][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.561547][ T36] audit: type=1400 audit(1789547242.434:337): avc: denied { setopt } for pid=6610 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.590990][ T6613] netlink: 'syz.1.1995': attribute type 3 has an invalid length. [ 161.151618][ T6631] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 161.174640][ T6631] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 161.196421][ T6631] udc dummy_udc.0: failed to start g1: -22 [ 161.206491][ T6631] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 161.219649][ T6631] UDC core: g1: couldn't find an available UDC or it's busy [ 161.285443][ T36] audit: type=1400 audit(1789547243.154:338): avc: denied { ioctl } for pid=6646 comm="syz.5.2010" path="socket:[102573]" dev="sockfs" ino=102573 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.347896][ T36] audit: type=1326 audit(1789547243.214:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.2.2013" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 161.447835][ T36] audit: type=1400 audit(1789547243.314:340): avc: denied { mount } for pid=6655 comm="syz.5.2015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 161.489243][ T36] audit: type=1400 audit(1789547243.344:341): avc: denied { search } for pid=6655 comm="syz.5.2015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.549495][ T6663] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 161.556851][ T6663] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 161.577826][ T6663] udc dummy_udc.0: failed to start g1: -22 [ 161.584059][ T6663] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 161.595884][ T6663] UDC core: g1: couldn't find an available UDC or it's busy [ 161.701135][ T6680] support for cryptoloop has been removed. Use dm-crypt instead. [ 161.775204][ T6684] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 161.785764][ T6684] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 161.795050][ T6684] udc dummy_udc.0: failed to start g1: -22 [ 161.801463][ T6684] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 161.819559][ T6684] UDC core: g1: couldn't find an available UDC or it's busy [ 162.127756][ T3209] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 162.310583][ T3209] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.330516][ T3209] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.349243][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.356485][ T3209] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 162.366182][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.380915][ T3209] usb 5-1: config 0 descriptor?? [ 162.792360][ T3209] hid (null): report_id 58880 is invalid [ 162.798228][ T3209] hid (null): global environment stack underflow [ 162.806748][ T3209] wacom 0003:056A:00D3.0002: report_id 58880 is invalid [ 162.815503][ T3209] wacom 0003:056A:00D3.0002: item 0 2 1 8 parsing failed [ 162.821571][ T6715] tipc: Enabling of bearer rejected, media not registered [ 162.823718][ T3209] wacom 0003:056A:00D3.0002: parse failed [ 162.840200][ T3209] wacom 0003:056A:00D3.0002: probe with driver wacom failed with error -22 [ 162.944699][ T6724] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 162.951775][ T6724] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 162.960137][ T6724] udc dummy_udc.0: failed to start g1: -22 [ 162.966707][ T6724] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 162.977706][ T6724] UDC core: g1: couldn't find an available UDC or it's busy [ 163.006512][ T3209] usb 5-1: USB disconnect, device number 11 [ 163.259591][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'. [ 164.277497][ T310] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 164.321660][ T6777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2067'. [ 164.331435][ T6777] tipc: Invalid UDP bearer configuration [ 164.331462][ T6777] tipc: Enabling of bearer rejected, failed to enable media [ 164.427497][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 164.436138][ T6782] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 164.446574][ T6782] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 164.455716][ T6782] udc dummy_udc.0: failed to start g1: -22 [ 164.462915][ T310] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 164.471210][ T310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.482317][ T6782] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.493012][ T310] usb 6-1: config 0 has no interface number 0 [ 164.500901][ T6782] UDC core: g1: couldn't find an available UDC or it's busy [ 164.510341][ T310] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 164.521610][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.530375][ T310] usb 6-1: Product: syz [ 164.535654][ T310] usb 6-1: Manufacturer: syz [ 164.540676][ T310] usb 6-1: SerialNumber: syz [ 164.550788][ T310] usb 6-1: config 0 descriptor?? [ 164.764956][ T310] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 164.782199][ T1538] udevd[1538]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.972479][ T310] usb 6-1: USB disconnect, device number 7 [ 165.126541][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 165.126560][ T36] audit: type=1326 audit(1789547502.996:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.2094" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 165.220291][ T36] audit: type=1400 audit(1789547503.096:349): avc: denied { bind } for pid=6835 comm="syz.4.2095" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.242853][ T36] audit: type=1400 audit(1789547503.096:350): avc: denied { node_bind } for pid=6835 comm="syz.4.2095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 165.403682][ T6855] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 165.411414][ T6855] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 165.420587][ T6855] udc dummy_udc.0: failed to start g1: -22 [ 165.427150][ T6855] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 165.438323][ T6855] UDC core: g1: couldn't find an available UDC or it's busy [ 165.700389][ T3209] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 165.727373][ T545] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.858870][ T3209] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.871299][ T3209] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 165.886629][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.888398][ T545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.894463][ T3209] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 165.915272][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.924204][ T545] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.931886][ T3209] usb 5-1: config 0 descriptor?? [ 165.936879][ T545] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.955999][ T545] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.966048][ T545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.975219][ T545] usb 6-1: Product: syz [ 165.979710][ T545] usb 6-1: Manufacturer: syz [ 165.984496][ T545] usb 6-1: SerialNumber: syz [ 165.992062][ T545] hub 6-1:1.0: bad descriptor, ignoring hub [ 165.998888][ T545] hub 6-1:1.0: probe with driver hub failed with error -5 [ 166.182407][ T6886] process 'syz.2.2118' launched '/dev/fd/3' with NULL argv: empty string added [ 166.195914][ T545] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.208260][ T36] audit: type=1400 audit(1789547760.087:351): avc: denied { execute_no_trans } for pid=6885 comm="syz.2.2118" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.346673][ T3209] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 166.355132][ T3209] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 166.362697][ T3209] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 166.370621][ T3209] holtek_kbd 0003:04D9:A055.0003: item fetching failed at offset 23/24 [ 166.380304][ T3209] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22 [ 166.393117][ T36] audit: type=1326 audit(1789547760.257:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.2.2132" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 166.421133][ T36] audit: type=1400 audit(1789547760.267:353): avc: denied { read write } for pid=6860 comm="syz.5.2106" name="lp0" dev="devtmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 166.446699][ T36] audit: type=1400 audit(1789547760.267:354): avc: denied { open } for pid=6860 comm="syz.5.2106" path="/dev/usb/lp0" dev="devtmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 166.517474][ T314] usb 6-1: USB disconnect, device number 8 [ 166.524064][ T314] usblp0: removed [ 166.583036][ T545] usb 5-1: USB disconnect, device number 12 [ 167.057494][ T36] audit: type=1400 audit(1789548016.918:355): avc: denied { bind } for pid=7161 comm="syz.5.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.109304][ T36] audit: type=1400 audit(1789548016.978:356): avc: denied { write } for pid=7163 comm="syz.4.2135" name="ipt_hashlimit" dev="proc" ino=4026532856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 167.135097][ T36] audit: type=1400 audit(1789548016.978:357): avc: denied { add_name } for pid=7163 comm="syz.4.2135" name="lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 167.187651][ T7173] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.388428][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 167.489384][ T7212] ======================================================= [ 167.489384][ T7212] WARNING: The mand mount option has been deprecated and [ 167.489384][ T7212] and is ignored by this kernel. Remove the mand [ 167.489384][ T7212] option from the mount to silence this warning. [ 167.489384][ T7212] ======================================================= [ 168.717211][ T314] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.877221][ T314] usb 6-1: Using ep0 maxpacket: 16 [ 168.884144][ T314] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.896902][ T314] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 168.910735][ T314] usb 6-1: config 0 interface 0 has no altsetting 0 [ 168.917883][ T314] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 168.928083][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.937992][ T314] usb 6-1: config 0 descriptor?? [ 168.997270][ T3209] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.158438][ T3209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.170151][ T3209] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.185890][ T3209] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 169.196010][ T3209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.204315][ T3209] usb 2-1: Product: syz [ 169.208961][ T3209] usb 2-1: Manufacturer: syz [ 169.214530][ T3209] usb 2-1: SerialNumber: syz [ 169.346501][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.357308][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.364386][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.372215][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.387404][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.395512][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.403244][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.417127][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.424612][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.440401][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.449110][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.456682][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.464976][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.487616][ T314] cypress 0003:04B4:BCA1.0004: unknown main item tag 0x0 [ 169.500436][ T314] cypress 0003:04B4:BCA1.0004: unbalanced collection at end of report description [ 169.520425][ T314] cypress 0003:04B4:BCA1.0004: parse failed [ 169.536885][ T314] cypress 0003:04B4:BCA1.0004: probe with driver cypress failed with error -22 [ 169.551027][ T314] usb 6-1: USB disconnect, device number 9 [ 169.645511][ T9] usb 2-1: USB disconnect, device number 17 [ 170.327132][ T545] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 170.370049][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 170.477121][ T545] usb 6-1: Using ep0 maxpacket: 16 [ 170.483801][ T545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.495001][ T545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.505145][ T545] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 170.514795][ T545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.524074][ T545] usb 6-1: config 0 descriptor?? [ 170.717816][ T310] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 170.888155][ T310] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.909750][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.916716][ T310] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 170.949201][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 170.956575][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 170.964428][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.986866][ T310] usb 5-1: config 0 descriptor?? [ 170.997023][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.014555][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.031702][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.047048][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.048680][ T7714] netlink: 'syz.2.2203': attribute type 3 has an invalid length. [ 171.064480][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.074586][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.092218][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.107034][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.124381][ T545] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 171.139580][ T545] wacom 0003:056A:0084.0005: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.5-1/input0 [ 171.222994][ T545] usb 6-1: USB disconnect, device number 10 [ 171.380010][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 171.380025][ T36] audit: type=1326 audit(1789548533.257:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.2.2217" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 171.409615][ T310] input: HID 046d:c082 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C082.0006/input/input9 [ 171.433827][ T310] logitech-hidpp-device 0003:046D:C082.0006: input,hidraw0: USB HID v0.05 Joystick [HID 046d:c082] on usb-dummy_hcd.4-1/input0 [ 171.605497][ T36] audit: type=1400 audit(1789548789.477:369): avc: denied { name_bind } for pid=7771 comm="syz.1.2222" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 171.662383][ T310] usb 5-1: USB disconnect, device number 14 [ 171.711154][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 171.926960][ T314] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 172.088332][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.118292][ T314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 172.127978][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.136004][ T314] usb 2-1: Product: syz [ 172.157129][ T314] usb 2-1: Manufacturer: syz [ 172.161774][ T314] usb 2-1: SerialNumber: syz [ 172.180189][ T314] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 172.186825][ T314] cdc_wdm 2-1:1.0: Unknown control protocol [ 172.206995][ T7949] tipc: Started in network mode [ 172.211909][ T7949] tipc: Node identity e0000002, cluster identity 4096 [ 172.226973][ T7949] tipc: Enabling of bearer rejected, failed to enable media [ 172.395209][ T36] audit: type=1400 audit(1789548790.267:370): avc: denied { read write } for pid=7807 comm="syz.1.2224" name="cdc-wdm0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 172.439129][ T314] usb 2-1: USB disconnect, device number 18 [ 172.466906][ T36] audit: type=1400 audit(1789548790.267:371): avc: denied { open } for pid=7807 comm="syz.1.2224" path="/dev/cdc-wdm0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 172.639473][ T8009] tipc: Started in network mode [ 172.644461][ T8009] tipc: Node identity , cluster identity 4711 [ 172.663072][ T8009] tipc: Failed to set node id, please configure manually [ 172.670595][ T8009] tipc: Enabling of bearer rejected, failed to enable media [ 172.712898][ T36] audit: type=1326 audit(1789548790.587:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.2.2244" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 172.917728][ T310] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.020330][ T36] audit: type=1400 audit(1789549046.891:373): avc: denied { mount } for pid=8069 comm="syz.1.2248" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.076847][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 173.094238][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.109032][ T310] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 173.129124][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.151378][ T310] usb 5-1: config 0 descriptor?? [ 173.570805][ T310] uclogic 0003:28BD:0042.0007: interface is invalid, ignoring [ 173.776504][ T310] usb 5-1: USB disconnect, device number 15 [ 174.179897][ T36] audit: type=1326 audit(1789549048.051:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8238 comm="syz.1.2269" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 174.216743][ T66] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.377839][ T66] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.416715][ T66] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.427115][ T66] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.446855][ T66] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.453653][ T66] usb 6-1: New USB device found, idVendor=056a, idProduct=0127, bcdDevice= 0.00 [ 174.463065][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.477427][ T66] usb 6-1: config 0 descriptor?? [ 174.888641][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.907578][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.936770][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.943937][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.956770][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.967761][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.976897][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 174.989043][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.002834][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.015871][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.035817][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.047744][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.065788][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.083049][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.103497][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.119148][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.134408][ T66] wacom 0003:056A:0127.0008: unknown main item tag 0x0 [ 175.150469][ T66] wacom 0003:056A:0127.0008: Unknown device_type for 'HID 056a:0127'. Ignoring. [ 175.185761][ T66] usb 6-1: USB disconnect, device number 11 [ 175.436685][ T36] audit: type=1326 audit(1789549305.289:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.2.2287" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 175.487410][ T8526] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 175.505256][ T8526] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 175.523432][ T8526] udc dummy_udc.0: failed to start g1: -22 [ 175.548460][ T8526] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 175.574200][ T8526] UDC core: g1: couldn't find an available UDC or it's busy [ 175.861160][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2291'. [ 176.760233][ T8561] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 176.767766][ T8561] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 176.776125][ T8561] udc dummy_udc.0: failed to start g1: -22 [ 176.786206][ T8561] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 176.799930][ T8561] UDC core: g1: couldn't find an available UDC or it's busy [ 177.374466][ T36] audit: type=1326 audit(1789549307.239:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.2.2306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 177.570190][ T36] audit: type=1326 audit(1789549563.443:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.1.2311" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 178.868058][ T36] audit: type=1400 audit(1789549820.737:378): avc: denied { ioctl } for pid=8865 comm="syz.5.2321" path="/308/file2" dev="tmpfs" ino=1629 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.914194][ T8872] capability: warning: `syz.5.2323' uses deprecated v2 capabilities in a way that may be insecure [ 178.930643][ T8874] capability: warning: `syz.1.2325' uses 32-bit capabilities (legacy support in use) [ 178.953392][ T36] audit: type=1326 audit(1789549820.817:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.5.2327" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 178.979202][ T36] audit: type=1326 audit(1789549820.827:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.1.2328" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 179.671214][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2330'. [ 179.818741][ T9213] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2333'. [ 179.827973][ T36] audit: type=1400 audit(1789550333.695:381): avc: denied { nlmsg_read } for pid=9209 comm="syz.2.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.433618][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2351'. [ 180.486288][ T310] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 180.505320][ T36] audit: type=1326 audit(1789550334.375:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.1.2356" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 180.609834][ T9369] tipc: Enabling not permitted [ 180.615804][ T9369] tipc: Enabling of bearer rejected, failed to enable media [ 180.635628][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 180.657646][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.669193][ T545] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 180.679470][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.691243][ T310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.704712][ T310] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.722355][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.736090][ T310] usb 6-1: config 0 descriptor?? [ 180.844629][ T545] usb 5-1: Using ep0 maxpacket: 32 [ 180.899040][ T545] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 180.916502][ T545] usb 5-1: config 0 has no interface number 0 [ 180.925662][ T545] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.936354][ T545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.944676][ T545] usb 5-1: Product: syz [ 180.950577][ T545] usb 5-1: Manufacturer: syz [ 180.961722][ T545] usb 5-1: SerialNumber: syz [ 180.972656][ T545] usb 5-1: config 0 descriptor?? [ 180.982356][ T545] smsc95xx v2.0.0 [ 181.169099][ T310] input: HID 047f:ffff as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:047F:FFFF.0009/input/input13 [ 181.205074][ T310] plantronics 0003:047F:FFFF.0009: input,hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 181.393456][ T310] usb 6-1: USB disconnect, device number 12 [ 181.531254][ T36] audit: type=1326 audit(1789550591.404:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.1.2373" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 181.600170][ T545] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 181.616383][ T545] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 181.627598][ T545] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 181.639940][ T545] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 181.652801][ T545] usb 5-1: USB disconnect, device number 16 [ 181.714365][ T36] audit: type=1326 audit(1789550591.584:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.2.2380" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 182.367360][ T36] audit: type=1400 audit(1789550848.231:385): avc: denied { shutdown } for pid=9882 comm="syz.5.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.452644][ T36] audit: type=1400 audit(1789550848.321:386): avc: denied { write } for pid=9890 comm="syz.5.2400" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.796075][ T310] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 182.947214][ T310] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.959015][ T310] usb 6-1: config 0 interface 0 has no altsetting 0 [ 182.966046][ T545] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 182.975230][ T310] usb 6-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 182.985049][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.996105][ T310] usb 6-1: config 0 descriptor?? [ 183.126037][ T545] usb 2-1: Using ep0 maxpacket: 16 [ 183.133204][ T545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.144480][ T545] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.156281][ T545] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.166956][ T545] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.181024][ T545] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.188264][ T545] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 183.198775][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.216215][ T545] usb 2-1: config 0 descriptor?? [ 183.223592][ T36] audit: type=1326 audit(1789550849.091:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.2.2412" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 183.423054][ T310] hid (null): invalid report_count 14146 [ 183.437337][ T310] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 183.445094][ T310] wacom 0003:056A:00D0.000A: unknown main item tag 0x5 [ 183.466314][ T310] wacom 0003:056A:00D0.000A: unknown main item tag 0xe [ 183.473633][ T310] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 183.483687][ T310] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 183.493003][ T310] wacom 0003:056A:00D0.000A: invalid report_count 14146 [ 183.502572][ T310] wacom 0003:056A:00D0.000A: item 0 4 1 9 parsing failed [ 183.511606][ T310] wacom 0003:056A:00D0.000A: parse failed [ 183.518034][ T310] wacom 0003:056A:00D0.000A: probe with driver wacom failed with error -22 [ 183.631162][ T66] usb 6-1: USB disconnect, device number 13 [ 183.693836][ T545] hid (null): unknown global tag 0xc [ 183.700796][ T545] logitech-djreceiver 0003:046D:C53A.000B: unknown global tag 0xc [ 183.717515][ T545] logitech-djreceiver 0003:046D:C53A.000B: item 0 1 1 12 parsing failed [ 183.732437][ T545] logitech-djreceiver 0003:046D:C53A.000B: logi_dj_probe: parse failed [ 183.744837][ T545] logitech-djreceiver 0003:046D:C53A.000B: probe with driver logitech-djreceiver failed with error -22 [ 183.912327][ T545] usb 2-1: USB disconnect, device number 19 [ 184.263778][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2416'. [ 184.539049][T10185] tipc: Started in network mode [ 184.548166][T10185] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 184.558854][T10185] tipc: Enabling of bearer rejected, failed to enable media [ 184.593118][ T36] audit: type=1400 audit(1789551106.460:388): avc: denied { write } for pid=10189 comm="syz.1.2429" name="file0" dev="tmpfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.638128][ T36] audit: type=1326 audit(1789551106.480:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.5.2428" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 184.957254][ T36] audit: type=1326 audit(1789551362.830:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.4.2437" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cd99e159 code=0x0 [ 185.891664][T10583] fuse: Bad value for 'user_id' [ 185.905832][T10583] fuse: Bad value for 'user_id' [ 185.924748][ T36] audit: type=1400 audit(1789551619.794:391): avc: denied { read write } for pid=10590 comm="syz.5.2456" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.927121][ T314] hid (null): unknown global tag 0xc [ 185.950064][ T36] audit: type=1400 audit(1789551619.794:392): avc: denied { open } for pid=10590 comm="syz.5.2456" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.978301][ T314] hid-generic FFFF:01FF:0000.000C: unknown global tag 0xc [ 185.988601][ T314] hid-generic FFFF:01FF:0000.000C: item 0 1 1 12 parsing failed [ 185.996973][ T314] hid-generic FFFF:01FF:0000.000C: probe with driver hid-generic failed with error -22 [ 186.135856][ T66] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 186.260427][ C1] blk_print_req_error: 35 callbacks suppressed [ 186.260447][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.266521][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.266955][ C1] buffer_io_error: 34 callbacks suppressed [ 186.266967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.276177][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 186.294398][T10629] overlayfs: lower data-only dirs require metacopy support. [ 186.299644][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.324900][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 186.332896][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.342249][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 186.350461][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.356984][ T36] audit: type=1400 audit(1789551620.224:393): avc: denied { name_bind } for pid=10632 comm="syz.2.2468" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 186.360024][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 186.390328][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.400535][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 186.408589][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.418217][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 186.426803][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.427853][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.436512][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.446441][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 186.463505][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.473240][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 186.485077][ T110] loop7: unable to read partition table [ 186.491322][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.505927][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.516187][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.529834][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.539270][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.549270][ T66] usb 2-1: config 0 descriptor?? [ 186.654114][T10644] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 186.662472][T10644] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 186.670850][T10644] udc dummy_udc.0: failed to start g1: -22 [ 186.676729][T10644] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 186.687296][T10644] UDC core: g1: couldn't find an available UDC or it's busy [ 186.705773][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.857094][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.866152][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.877317][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.886670][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.902056][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 186.912204][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 186.920511][ T31] usb 5-1: Product: syz [ 186.924783][ T31] usb 5-1: Manufacturer: syz [ 186.932201][ T31] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 186.959151][ T66] plantronics 0003:047F:FFFF.000D: unbalanced collection at end of report description [ 186.969385][ T66] plantronics 0003:047F:FFFF.000D: parse failed [ 186.976525][ T66] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 187.029165][ T36] audit: type=1400 audit(1789551620.904:394): avc: denied { accept } for pid=10647 comm="syz.2.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.165467][ T545] usb 2-1: USB disconnect, device number 20 [ 187.334586][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 187.344309][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 187.353943][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 187.363747][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 187.373178][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 187.383427][ T31] usb 5-1: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 187.393846][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 187.403825][ T31] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 187.413448][ T31] usb 5-1: No streaming interface found for terminal 2. [ 187.422070][ T31] usb 5-1: USB disconnect, device number 17 [ 187.695711][ T545] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 187.855598][ T545] usb 6-1: Using ep0 maxpacket: 32 [ 187.862280][ T545] usb 6-1: unable to get BOS descriptor or descriptor too short [ 187.871710][ T545] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 187.886102][ T545] usb 6-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 187.896873][ T545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.906394][ T545] usb 6-1: Product: syz [ 187.911226][ T545] usb 6-1: Manufacturer: syz [ 187.916569][ T545] usb 6-1: SerialNumber: syz [ 188.128633][ T545] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 188.139892][ T545] usb 6-1: 2:1 : sample bitwidth 22 in over sample bytes 1 [ 188.148741][ T545] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 188.155922][ T545] usb 6-1: 2:1 : invalid channels 0 [ 188.161891][T10674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2487'. [ 188.173434][T10674] tipc: Invalid UDP bearer configuration [ 188.173458][T10674] tipc: Enabling of bearer rejected, failed to enable media [ 188.191929][ T545] usb 6-1: USB disconnect, device number 14 [ 188.387744][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 188.615058][T10704] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.622577][T10704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.744885][T10725] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2509'. [ 188.893074][ T36] audit: type=1326 audit(1789551622.764:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.4.2515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cd99e159 code=0x0 [ 189.010651][ T36] audit: type=1326 audit(1789551622.884:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10753 comm="syz.1.2521" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 190.492787][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 190.566547][ T36] audit: type=1400 audit(1789552136.438:397): avc: denied { read } for pid=11049 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.610288][ T36] audit: type=1400 audit(1789552136.468:398): avc: denied { getopt } for pid=11055 comm="syz.2.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.636317][T11060] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2542'. [ 190.688929][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 190.736602][ T31] logitech-hidpp-device 0003:046D:C082.000E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 190.786258][T11077] fido_id[11077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.915314][ T314] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 190.940023][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 190.950998][T11092] netlink: 'syz.1.2560': attribute type 2 has an invalid length. [ 191.047244][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 191.085991][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.105295][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.135306][ T314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.165306][ T314] usb 6-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.00 [ 191.185272][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.195491][ T314] usb 6-1: config 0 descriptor?? [ 191.206340][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 191.219018][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.236248][ T31] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 191.252975][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.256260][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 191.260798][ T31] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 191.270432][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'. [ 191.280035][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.301971][ T31] usb 5-1: config 0 descriptor?? [ 191.325291][ T545] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 191.363944][ T36] audit: type=1326 audit(1789552137.228:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.2567" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 191.494392][ T545] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.507141][ T545] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.520543][ T545] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 191.535245][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.543325][ T545] usb 2-1: Product: syz [ 191.548013][ T545] usb 2-1: Manufacturer: syz [ 191.552987][ T545] usb 2-1: SerialNumber: syz [ 191.564103][ T545] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 191.577101][ T545] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 191.577101][ T545] Please send a copy of this message to and [ 191.618926][ T314] input: HID 045e:076c as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:076C.000F/input/input14 [ 191.644203][ T314] microsoft 0003:045E:076C.000F: input,hidraw0: USB HID v0.00 Joystick [HID 045e:076c] on usb-dummy_hcd.5-1/input0 [ 191.720953][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.733799][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.750399][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.768036][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.785405][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.803099][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.811775][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.831068][ T310] usb 6-1: USB disconnect, device number 15 [ 191.856339][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.865122][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.873154][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.881415][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.889633][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.897275][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.904914][ T31] saitek 0003:0738:1709.0010: unknown main item tag 0x0 [ 191.912960][ T31] saitek 0003:0738:1709.0010: unbalanced collection at end of report description [ 191.926582][ T31] saitek 0003:0738:1709.0010: parse failed [ 191.932678][ T31] saitek 0003:0738:1709.0010: probe with driver saitek failed with error -22 [ 191.948404][ T31] usb 5-1: USB disconnect, device number 18 [ 192.187007][ T545] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 192.200396][ T545] usb 2-1: USB disconnect, device number 21 [ 192.246982][ T36] audit: type=1400 audit(1789552394.125:400): avc: denied { read } for pid=11355 comm="syz.2.2569" path="socket:[115271]" dev="sockfs" ino=115271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.404684][T11371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'. [ 192.512648][T11392] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 192.522393][ T36] audit: type=1400 audit(1789552394.395:401): avc: denied { bind } for pid=11393 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.596860][ T36] audit: type=1400 audit(1789552394.475:402): avc: denied { write } for pid=11409 comm="syz.5.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.690576][T11422] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2602'. [ 192.700060][T11422] netlink: 'syz.1.2602': attribute type 3 has an invalid length. [ 192.736058][ T36] audit: type=1400 audit(1789552394.615:403): avc: denied { write } for pid=11428 comm="syz.1.2605" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 192.815172][ T314] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.967268][ T314] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.979204][ T314] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.993089][ T314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.000040][ T314] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 193.009204][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.019623][ T314] usb 5-1: config 0 descriptor?? [ 193.025254][ T36] audit: type=1400 audit(1789552394.895:404): avc: denied { mounton } for pid=11455 comm="syz.1.2618" path="/658/file0" dev="incremental-fs" ino=3451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.231310][T11482] 9pnet_fd: Insufficient options for proto=fd [ 193.454151][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.463101][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.474619][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.484424][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.494788][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.504653][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.513569][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.524503][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.535347][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.542556][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.550253][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.557364][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.564692][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.571966][ T314] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 193.579263][ T314] acrux 0003:1A34:0802.0011: unbalanced collection at end of report description [ 193.589518][ T314] acrux 0003:1A34:0802.0011: parse failed [ 193.596099][ T314] acrux 0003:1A34:0802.0011: probe with driver acrux failed with error -22 [ 193.641417][T11492] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 193.658688][ T545] usb 5-1: USB disconnect, device number 19 [ 194.455996][ T3209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.644966][ T3209] usb 5-1: Using ep0 maxpacket: 32 [ 194.680879][ T3209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.694244][ T3209] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 194.704271][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.719357][ T3209] usb 5-1: config 0 descriptor?? [ 194.904991][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 195.056128][ T31] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 195.065641][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.074278][ T31] usb 6-1: config 0 descriptor?? [ 195.124925][ T66] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 195.134060][ T3209] uclogic 0003:28BD:0074.0012: interface is invalid, ignoring [ 195.289476][ T66] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.304266][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.312812][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 195.322697][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.332319][ T66] usb 2-1: config 0 descriptor?? [ 195.334711][ T545] usb 5-1: USB disconnect, device number 20 [ 195.442669][T12007] netlink: 'syz.2.2665': attribute type 11 has an invalid length. [ 195.482464][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.491054][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.500599][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.508752][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.516665][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.524247][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.532717][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.540521][ T31] smartjoyplus 0003:0925:8888.0013: unknown main item tag 0x0 [ 195.549660][ T31] smartjoyplus 0003:0925:8888.0013: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.5-1/input0 [ 195.562452][ T31] smartjoyplus 0003:0925:8888.0013: no output reports found [ 195.688245][ T31] usb 6-1: USB disconnect, device number 16 [ 195.752886][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.759909][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.767012][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.774190][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.781383][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.788897][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.796200][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.803958][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.811046][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.817941][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.825190][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.832241][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.839161][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.846265][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.853234][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.860313][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.867600][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.875619][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.883203][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.891143][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.898788][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.906029][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.913098][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.920126][ T66] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 195.934988][ T66] wacom 0003:056A:5000.0014: hidraw0: USB HID v10.02 Device [HID 056a:5000] on usb-dummy_hcd.1-1/input0 [ 195.987155][ T66] usb 2-1: USB disconnect, device number 22 [ 196.098314][T12033] tipc: Started in network mode [ 196.103206][T12033] tipc: Node identity ac14142f, cluster identity 4711 [ 196.110367][T12033] tipc: New replicast peer: 100.1.1.0 [ 196.116354][T12033] tipc: Enabled bearer , priority 24 [ 196.205558][T12049] fuseblk: Invalid rootmode [ 196.255928][T12059] SELinux: policydb table sizes (8,2097159) do not match mine (8,7) [ 196.261971][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 196.261990][ T36] audit: type=1400 audit(1789552910.133:408): avc: denied { load_policy } for pid=12058 comm="syz.5.2690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 196.268539][T12059] SELinux: failed to load policy [ 196.583994][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2702'. [ 196.595395][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2702'. [ 196.604985][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 196.649554][ T36] audit: type=1326 audit(1789552910.523:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.1.2706" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 196.764702][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 196.771155][ T31] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 196.779783][ T31] usb 6-1: config 0 has no interface number 0 [ 196.786277][ T31] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 196.797973][ T31] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 196.829524][ T31] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 196.838970][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.854691][ T31] usb 6-1: Product: syz [ 196.862475][ T31] usb 6-1: Manufacturer: syz [ 196.867356][ T31] usb 6-1: SerialNumber: syz [ 196.873132][ T31] usb 6-1: config 0 descriptor?? [ 196.880430][ T36] audit: type=1400 audit(1789553166.747:410): avc: denied { mounton } for pid=12118 comm="syz.2.2712" path="/918/file0" dev="tmpfs" ino=4829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.905408][T12071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 196.913122][T12071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 196.995290][T12170] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 197.004727][T12170] netlink: 'syz.2.2715': attribute type 2 has an invalid length. [ 197.012705][T12170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2715'. [ 197.127220][T12071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 197.139030][T12071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 197.234778][ T3209] tipc: Node number set to 2886997039 [ 197.358021][ T31] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 197.376331][ T31] asix 6-1:0.34: probe with driver asix failed with error -71 [ 197.398331][ T31] usb 6-1: USB disconnect, device number 17 [ 197.734652][ T3209] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.754720][ T66] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 197.837032][ T36] audit: type=1400 audit(1789553167.717:411): avc: denied { ioctl } for pid=12373 comm="syz.2.2724" path="socket:[118802]" dev="sockfs" ino=118802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.887019][ T3209] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.904626][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 197.910627][ T3209] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.921847][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.924598][ T36] audit: type=1326 audit(1789553167.797:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.5.2727" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 197.933796][ T3209] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.972554][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.982644][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.996371][ T66] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.006049][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.013707][ T36] audit: type=1326 audit(1789553167.887:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.2.2730" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 198.014595][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.047247][ T3209] usb 5-1: New USB device found, idVendor=056a, idProduct=0127, bcdDevice= 0.00 [ 198.065084][ T66] usb 2-1: config 0 descriptor?? [ 198.070417][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.089634][ T3209] usb 5-1: config 0 descriptor?? [ 198.484994][ T66] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 198.495135][ T66] microsoft 0003:045E:07DA.0015: parse failed [ 198.502056][ T3209] hid (null): nested delimiters [ 198.508395][ T3209] wacom 0003:056A:0127.0016: nested delimiters [ 198.515099][ T66] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 198.525042][ T3209] wacom 0003:056A:0127.0016: item 0 4 2 10 parsing failed [ 198.538204][ T3209] wacom 0003:056A:0127.0016: parse failed [ 198.546267][ T3209] wacom 0003:056A:0127.0016: probe with driver wacom failed with error -22 [ 198.717050][ T3209] usb 2-1: USB disconnect, device number 23 [ 198.770843][ T66] usb 5-1: USB disconnect, device number 21 [ 199.045456][ T36] audit: type=1400 audit(1789553680.922:414): avc: denied { shutdown } for pid=12845 comm="syz.2.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.119108][ T36] audit: type=1326 audit(1789553680.992:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.5.2744" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 199.249636][T12860] raw_sendmsg: syz.1.2745 forgot to set AF_INET. Fix it! [ 199.398201][ T36] audit: type=1400 audit(1789553937.277:416): avc: denied { cmd } for pid=12904 comm="syz.1.2751" path="/695/file2" dev="tmpfs" ino=3647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 199.448416][T12923] veth1: entered allmulticast mode [ 199.465127][T12921] veth1: left allmulticast mode [ 199.494054][ T36] audit: type=1400 audit(1789553937.367:417): avc: denied { watch watch_reads } for pid=12941 comm="syz.4.2755" path="/507/file1" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.147344][ C1] blk_print_req_error: 40 callbacks suppressed [ 200.147362][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.154684][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.163253][ C1] buffer_io_error: 39 callbacks suppressed [ 200.163266][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.172626][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 200.178561][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.204036][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 200.212540][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.222222][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 200.230110][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.239530][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 200.247687][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.257014][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 200.265257][ C1] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.274924][ C1] Buffer I/O error on dev loop7, logical block 5, async page read [ 200.283142][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.292892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.314515][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.324164][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 200.332404][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.341553][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 200.349766][ T110] loop7: unable to read partition table [ 200.774497][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 200.946590][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.967593][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.986308][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 200.997031][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.005757][ T31] usb 2-1: Product: syz [ 201.010514][ T31] usb 2-1: Manufacturer: syz [ 201.018856][ T31] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 201.431772][ T31] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 201.454413][ T31] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 201.474425][ T31] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 201.489459][ T31] usb 2-1: USB disconnect, device number 24 [ 201.544674][ T66] kernel write not supported for file [eventfd] (pid: 66 comm: kworker/0:2) [ 201.563337][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2804'. [ 202.520255][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 202.520271][ T36] audit: type=1400 audit(1789554196.395:423): avc: denied { unmount } for pid=3042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 202.556023][T13337] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 202.563917][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2825'. [ 203.035832][ T36] audit: type=1400 audit(1789554196.915:424): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 203.062063][T13397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13397 comm=syz.5.2853 [ 203.202629][ T36] audit: type=1400 audit(1789554197.075:425): avc: denied { bpf } for pid=13418 comm="syz.1.2863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.667157][ T36] audit: type=1400 audit(1789554197.545:426): avc: denied { wake_alarm } for pid=13447 comm="syz.1.2875" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.824499][ T36] audit: type=1326 audit(1789554197.705:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13461 comm="syz.1.2882" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 204.204673][T13547] SELinux: ebitmap: truncated map [ 204.227217][T13547] SELinux: failed to load policy [ 204.239926][ T36] audit: type=1400 audit(1789554198.115:428): avc: denied { read append } for pid=13560 comm="syz.4.2884" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:locale_t:s0" [ 204.436819][ T36] audit: type=1400 audit(1789554198.315:429): avc: denied { setopt } for pid=13621 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.924751][T13751] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2909'. [ 204.934188][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2909'. [ 205.201422][ T36] audit: type=1400 audit(1789554199.075:430): avc: denied { mounton } for pid=13774 comm="syz.4.2919" path="/534/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 205.964070][ T310] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 206.103824][ T545] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 206.124923][ T310] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.135208][ T310] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.153082][ T310] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 206.162990][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.173411][ T310] usb 6-1: Product: syz [ 206.177988][ T310] usb 6-1: Manufacturer: syz [ 206.183058][ T310] usb 6-1: SerialNumber: syz [ 206.190478][ T310] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 206.199849][ T310] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 206.199849][ T310] Please send a copy of this message to and [ 206.273851][ T545] usb 5-1: Using ep0 maxpacket: 16 [ 206.280385][ T545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.292517][ T545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.304193][ T545] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.317990][ T545] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.333498][ T545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.343307][ T545] usb 5-1: config 0 descriptor?? [ 206.406137][T13839] netlink: 'syz.1.2948': attribute type 4 has an invalid length. [ 206.415110][T13839] netlink: 'syz.1.2948': attribute type 32 has an invalid length. [ 206.564375][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.573225][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.634921][ T36] audit: type=1326 audit(1789554200.516:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.2.2953" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 206.713764][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.816963][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.830681][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.843986][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.855602][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.873187][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.881070][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 206.886524][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.903830][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.911483][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.919085][ T31] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.932674][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.940216][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.947497][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 206.983753][ T31] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 206.995384][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 207.002661][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 207.010496][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.018828][ T310] scsi host1: usb-storage 6-1:1.0 [ 207.028602][ T31] usb 2-1: config 0 descriptor?? [ 207.035755][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 207.043535][ T545] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 207.054876][ T310] usb 6-1: USB disconnect, device number 18 [ 207.065554][ T545] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input18 [ 207.151242][ T545] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 207.200498][ T545] usb 5-1: USB disconnect, device number 22 [ 207.454359][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.462281][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.473708][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.481774][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.493716][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.501858][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.511644][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.523690][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.531403][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.543691][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.551398][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.559294][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.566857][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.594468][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.610013][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.646704][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.660741][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.668482][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.690252][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.698061][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.708479][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.717105][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.738783][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.751831][ T31] pantherlord 0003:0E8F:0003.0018: unknown main item tag 0x0 [ 207.761162][ T31] pantherlord 0003:0E8F:0003.0018: hidraw0: USB HID v0.06 Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0 [ 207.799152][ T31] pantherlord 0003:0E8F:0003.0018: no output reports found [ 207.830105][ T31] usb 2-1: USB disconnect, device number 25 [ 208.008323][ T36] audit: type=1400 audit(1789554457.884:432): avc: denied { read } for pid=14031 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.050802][ T36] audit: type=1400 audit(1789554457.904:433): avc: denied { name_bind } for pid=14034 comm="syz.4.2977" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 208.082910][ T36] audit: type=1400 audit(1789554457.954:434): avc: denied { read } for pid=14037 comm="syz.5.2978" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.188491][ T36] audit: type=1326 audit(1789554458.064:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14048 comm="syz.4.2983" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cd99e159 code=0x0 [ 208.343623][ T545] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 208.504609][ T545] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.515785][ T545] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.529490][ T545] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.539454][ T545] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 208.551873][ T545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.563782][ T545] usb 6-1: config 0 descriptor?? [ 208.603596][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 208.763596][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 208.770926][ T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 208.782686][ T31] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.796339][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.803261][ T31] usb 2-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 208.812631][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.822055][ T31] usb 2-1: config 0 descriptor?? [ 208.972867][ T545] playstation 0003:054C:09CC.0019: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 209.061200][ T36] audit: type=1400 audit(1789554714.936:436): avc: denied { execute } for pid=14316 comm="syz.4.2995" path=2F6D656D66643A0241BBCCEB1416E86D146F536157202864656C6574656429 dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.171799][ T545] playstation 0003:054C:09CC.0019: Invalid byte count transferred, expected 16 got 0 [ 209.181604][ T545] playstation 0003:054C:09CC.0019: Failed to retrieve DualShock4 pairing info: -22 [ 209.191858][ T545] playstation 0003:054C:09CC.0019: Failed to get MAC address from DualShock4 [ 209.201250][ T545] playstation 0003:054C:09CC.0019: Failed to create dualshock4. [ 209.211305][ T545] playstation 0003:054C:09CC.0019: probe with driver playstation failed with error -22 [ 209.245841][ T31] input: HID 1b96:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0006.001A/input/input19 [ 209.277995][ T31] ntrig 0003:1B96:0006.001A: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.1-1/input0 [ 209.376297][ T66] usb 6-1: USB disconnect, device number 19 [ 209.411860][ T36] audit: type=1326 audit(1789554715.286:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.3003" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 209.438347][ T31] ntrig 0003:1B96:0006.001A: Firmware version: 4.8.22.29.5 (e288 add3) [ 209.653232][ T66] usb 2-1: USB disconnect, device number 26 [ 210.014553][ T66] smpboot: CPU 1 is now offline [ 210.129984][T14600] erofs: dax options not supported [ 210.229301][T14606] SELinux: failed to load policy [ 210.353739][T14628] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.3027'. [ 210.363387][ T36] audit: type=1400 audit(1789554972.226:438): avc: denied { create } for pid=14627 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.420975][T14633] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3031'. [ 210.432120][T14635] ./dev/sda1: Can't lookup blockdev [ 210.493273][ T36] audit: type=1400 audit(1789554972.236:439): avc: denied { write } for pid=14627 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.594526][ T36] audit: type=1400 audit(1789554972.236:440): avc: denied { nlmsg_read } for pid=14627 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.637327][T14656] tipc: Enabling of bearer rejected, already enabled [ 210.704665][ T36] audit: type=1400 audit(1789554972.266:441): avc: denied { execute_no_trans } for pid=14626 comm="syz.1.3028" path="/757/file0" dev="tmpfs" ino=3979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.380731][ C0] blk_print_req_error: 40 callbacks suppressed [ 211.380743][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.396927][ C0] buffer_io_error: 39 callbacks suppressed [ 211.396941][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.417606][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.426871][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 211.435111][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.445397][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 211.453451][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.463467][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 211.471505][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.481260][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 211.489498][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.499027][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 211.506901][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.516546][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 211.526158][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.535421][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.543420][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.552908][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 211.561206][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.570447][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 211.579769][ T110] loop7: unable to read partition table [ 211.893346][ T3209] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 211.913418][T14899] overlayfs: disabling nfs_export due to verity=require [ 211.927490][T14899] overlayfs: missing 'lowerdir' [ 212.064917][ T3209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.083046][ T3209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.118679][ T3209] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.148029][ T3209] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 212.226779][ T3209] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 212.347180][ T3209] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 212.464316][ T3209] usb 2-1: config 1 interface 1 has no altsetting 0 [ 212.495311][ T3209] usb 2-1: string descriptor 0 read error: -22 [ 212.513131][ T3209] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 212.565399][ T3209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.969101][T15054] netlink: 'syz.4.3115': attribute type 2 has an invalid length. [ 213.409804][ T3209] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 213.434255][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 213.434267][ T36] audit: type=1326 audit(1789555743.317:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15154 comm="syz.2.3119" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 213.498916][ T3209] usb 2-1: USB disconnect, device number 27 [ 213.527963][ T1538] udevd[1538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.742052][ T36] audit: type=1400 audit(1789555999.608:450): avc: denied { listen } for pid=15233 comm="syz.5.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.352959][ T36] audit: type=1400 audit(1789556000.218:451): avc: denied { mounton } for pid=15377 comm="syz.2.3147" path="/1048/file0" dev="tmpfs" ino=5521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.448584][ T36] audit: type=1326 audit(1789556000.308:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.3151" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbef9e159 code=0x0 [ 214.533228][ T66] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 214.591633][ T36] audit: type=1326 audit(1789556000.458:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.3156" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 214.704315][ T66] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.715593][ T66] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.795432][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.858300][ T66] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 214.896025][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.936269][ T66] usb 2-1: config 0 descriptor?? [ 215.316314][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.368851][ T66] sony 0003:054C:0268.001B: item 0 4 0 8 parsing failed [ 215.381823][ T66] sony 0003:054C:0268.001B: parse failed [ 215.405664][ T66] sony 0003:054C:0268.001B: probe with driver sony failed with error -22 [ 215.504020][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.529132][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.550669][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 215.578434][ T3209] usb 2-1: USB disconnect, device number 28 [ 215.597402][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.627222][ T9] usb 5-1: config 0 descriptor?? [ 215.845340][ T36] audit: type=1400 audit(1789556513.723:454): avc: denied { listen } for pid=15648 comm="syz.2.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.053967][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 216.103142][ T36] audit: type=1400 audit(1789556513.973:455): avc: denied { accept } for pid=15666 comm="syz.1.3179" path="socket:[125686]" dev="sockfs" ino=125686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.213667][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 216.222830][ T10] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 216.238980][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.255560][ T10] usb 6-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.80 [ 216.275792][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.286055][ T3209] usb 5-1: USB disconnect, device number 23 [ 216.305500][T15702] 9pnet_fd: Insufficient options for proto=fd [ 216.422982][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 216.516640][ T10] usb 6-1: string descriptor 0 read error: -71 [ 216.524529][ T10] usb 6-1: Found UVC 1.00 device (0000:d970) [ 216.531821][ T10] usb 6-1: No valid video chain found. [ 216.540042][ T10] usb 6-1: USB disconnect, device number 20 [ 216.574684][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.584753][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.595708][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.605210][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.618892][ T9] usb 2-1: string descriptor 0 read error: -22 [ 216.631328][ T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 216.640751][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.259583][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 217.289721][ T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 217.336578][ T9] usb 2-1: USB disconnect, device number 29 [ 217.432676][ T36] audit: type=1326 audit(1789556515.303:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.2.3234" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72c59e159 code=0x0 [ 218.542851][ T3209] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.701803][ T3209] usb 5-1: Using ep0 maxpacket: 32 [ 218.720707][ T3209] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.754205][ T36] audit: type=1400 audit(1789556772.620:457): avc: denied { map } for pid=15991 comm="syz.5.3261" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:locale_t:s0" [ 218.801550][ T3209] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.821978][ T3209] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 218.842896][ T3209] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 218.889144][ T3209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.914730][ T3209] usb 5-1: config 1 interface 1 has no altsetting 0 [ 218.940873][ T3209] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 218.951676][ T3209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.968254][ T3209] usb 5-1: Product: syz [ 218.982872][ T3209] usb 5-1: Manufacturer: syz [ 218.987860][ T3209] usb 5-1: SerialNumber: syz [ 219.052716][ T314] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 219.203770][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.217801][ T3209] usb 5-1: selecting invalid altsetting 0 [ 219.223794][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.235175][ T314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 219.244882][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.253060][ T314] usb 2-1: Product: syz [ 219.257514][ T314] usb 2-1: Manufacturer: syz [ 219.262198][ T314] usb 2-1: SerialNumber: syz [ 219.272613][ T314] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 219.279001][ T314] cdc_wdm 2-1:1.0: Unknown control protocol [ 219.303024][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 219.420156][ T3209] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 219.452688][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 219.459237][ T9] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 219.468965][ T9] usb 6-1: config 0 has no interface number 0 [ 219.482687][ T9] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 219.497343][ T66] usb 2-1: USB disconnect, device number 30 [ 219.508869][ T9] usb 6-1: config 0 interface 196 has no altsetting 0 [ 219.518224][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 219.528787][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.538311][ T9] usb 6-1: Product: syz [ 219.543317][ T9] usb 6-1: Manufacturer: syz [ 219.548368][ T9] usb 6-1: SerialNumber: syz [ 219.556576][ T9] usb 6-1: config 0 descriptor?? [ 219.562567][T15998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 219.628478][ T3209] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 219.645990][ T3209] usb 5-1: USB disconnect, device number 24 [ 220.482685][ T9] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 220.501635][ T9] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 221.000636][ T9] usb 6-1: USB disconnect, device number 21 [ 221.022893][ T9] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 221.052742][ T3209] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.227517][ T3209] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.238740][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.245549][ T3209] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 221.258016][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.278672][ T3209] usb 5-1: config 0 descriptor?? [ 221.697215][ T3209] logitech-djreceiver 0003:046D:C532.001D: unknown main item tag 0x0 [ 221.716093][ T3209] logitech-djreceiver 0003:046D:C532.001D: unknown main item tag 0x0 [ 221.735029][ T3209] logitech-djreceiver 0003:046D:C532.001D: unknown main item tag 0x0 [ 221.752414][ T3209] logitech-djreceiver 0003:046D:C532.001D: unknown main item tag 0x0 [ 221.782288][ T36] audit: type=1326 audit(1789556775.651:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.3293" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e21d9e159 code=0x0 [ 221.915044][ T3209] usb 5-1: USB disconnect, device number 25 [ 222.236230][T16179] FAULT_INJECTION: forcing a failure. [ 222.236230][T16179] name failslab, interval 1, probability 0, space 0, times 0 [ 222.263652][T16179] CPU: 0 UID: 0 PID: 16179 Comm: syz.5.3298 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 222.263679][T16179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.263687][T16179] Call Trace: [ 222.263692][T16179] [ 222.263698][T16179] __dump_stack+0x21/0x30 [ 222.263720][T16179] dump_stack_lvl+0x140/0x1c0 [ 222.263734][T16179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.263748][T16179] dump_stack+0x19/0x20 [ 222.263766][T16179] should_fail_ex+0x3c2/0x510 [ 222.263780][T16179] should_failslab+0xac/0x100 [ 222.263794][T16179] __kmalloc_cache_noprof+0x41/0x470 [ 222.263804][T16179] ? tty_open+0x16b/0x10b0 [ 222.263817][T16179] tty_open+0x16b/0x10b0 [ 222.263829][T16179] ? kobject_get_unless_zero+0x163/0x1f0 [ 222.263839][T16179] ? __cfi_tty_open+0x10/0x10 [ 222.263852][T16179] ? selinux_file_open+0x46c/0x630 [ 222.263863][T16179] chrdev_open+0x4eb/0x610 [ 222.263874][T16179] ? __cfi_chrdev_open+0x10/0x10 [ 222.263885][T16179] ? bpf_lsm_file_open+0xd/0x20 [ 222.263899][T16179] ? __cfi_chrdev_open+0x10/0x10 [ 222.263910][T16179] do_dentry_open+0x97c/0x1510 [ 222.263925][T16179] vfs_open+0x86/0x240 [ 222.263937][T16179] ? __cfi_vfs_open+0x10/0x10 [ 222.263953][T16179] ? inode_owner_or_capable+0xf0/0x1b0 [ 222.263963][T16179] ? may_open+0x398/0x430 [ 222.263975][T16179] path_openat+0x2c49/0x35a0 [ 222.263988][T16179] ? schedule+0xc5/0x240 [ 222.264001][T16179] ? kasan_save_alloc_info+0x3a/0x50 [ 222.264011][T16179] ? getname+0x1b/0x30 [ 222.264021][T16179] ? x64_sys_call+0xe69/0x2ee0 [ 222.264030][T16179] ? do_syscall_64+0x57/0xf0 [ 222.264040][T16179] ? do_filp_open+0x440/0x440 [ 222.264053][T16179] do_filp_open+0x1f2/0x440 [ 222.264065][T16179] ? __cfi_do_filp_open+0x10/0x10 [ 222.264079][T16179] ? alloc_fd+0x4c1/0x570 [ 222.264090][T16179] do_sys_openat2+0x134/0x1d0 [ 222.264103][T16179] ? fput+0x1a4/0x230 [ 222.264114][T16179] ? do_sys_open+0x100/0x100 [ 222.264128][T16179] __x64_sys_openat+0x13a/0x170 [ 222.264141][T16179] x64_sys_call+0xe69/0x2ee0 [ 222.264159][T16179] do_syscall_64+0x57/0xf0 [ 222.264168][T16179] ? clear_bhb_loop+0x50/0xa0 [ 222.264182][T16179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 222.264195][T16179] RIP: 0033:0x7f0fbef9e159 [ 222.264211][T16179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.264220][T16179] RSP: 002b:00007f0fbfeb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.264233][T16179] RAX: ffffffffffffffda RBX: 00007f0fbf225fa0 RCX: 00007f0fbef9e159 [ 222.264241][T16179] RDX: 0000000000142042 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 222.264248][T16179] RBP: 00007f0fbf03506b R08: 0000000000000000 R09: 0000000000000000 [ 222.264256][T16179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.264270][T16179] R13: 00007f0fbf226038 R14: 00007f0fbf225fa0 R15: 00007ffd155f3f28 [ 222.264279][T16179] [ 223.132276][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.283625][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 223.330638][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.350582][ T9] usb 5-1: config 0 has no interface number 0 [ 223.384470][ T9] usb 5-1: too many endpoints for config 0 interface 1 altsetting 3: 254, using maximum allowed: 30 [ 223.452321][ T9] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 223.511007][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 223.540726][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 223.588516][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.624198][ T9] usb 5-1: config 0 descriptor?? [ 224.052170][ T66] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 224.182609][T16427] FAULT_INJECTION: forcing a failure. [ 224.182609][T16427] name failslab, interval 1, probability 0, space 0, times 0 [ 224.215319][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.1.3317 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 224.215342][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.215367][T16427] Call Trace: [ 224.215371][T16427] [ 224.215376][T16427] __dump_stack+0x21/0x30 [ 224.215398][T16427] dump_stack_lvl+0x140/0x1c0 [ 224.215414][T16427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.215428][T16427] ? xas_find_marked+0xc97/0xda0 [ 224.215440][T16427] ? xas_nomem+0x71/0x2c0 [ 224.215449][T16427] dump_stack+0x19/0x20 [ 224.215461][T16427] should_fail_ex+0x3c2/0x510 [ 224.215473][T16427] should_failslab+0xac/0x100 [ 224.215486][T16427] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 224.215498][T16427] ? kstrdup_const+0x45/0x60 [ 224.215507][T16427] kstrdup+0x4d/0x130 [ 224.215520][T16427] ? kstrdup_const+0x3a/0x60 [ 224.215528][T16427] kstrdup_const+0x45/0x60 [ 224.215536][T16427] alloc_vfsmnt+0xed/0x610 [ 224.215550][T16427] clone_mnt+0x6e/0xbe0 [ 224.215564][T16427] copy_tree+0xe2/0xcb0 [ 224.215573][T16427] ? __cfi_down_write+0x10/0x10 [ 224.215592][T16427] __do_loopback+0x1da/0x3c0 [ 224.215605][T16427] __se_sys_open_tree+0x35b/0x900 [ 224.215616][T16427] ? fput+0x1a4/0x230 [ 224.215629][T16427] ? xfd_validate_state+0x68/0x140 [ 224.215645][T16427] ? __x64_sys_open_tree+0xa0/0xa0 [ 224.215655][T16427] ? __kasan_check_write+0x18/0x20 [ 224.215665][T16427] ? fpregs_restore_userregs+0x11c/0x260 [ 224.215677][T16427] __x64_sys_open_tree+0x7f/0xa0 [ 224.215687][T16427] x64_sys_call+0x2d58/0x2ee0 [ 224.215697][T16427] do_syscall_64+0x57/0xf0 [ 224.215705][T16427] ? clear_bhb_loop+0x50/0xa0 [ 224.215717][T16427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.215728][T16427] RIP: 0033:0x7f3e21d9e159 [ 224.215738][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.215746][T16427] RSP: 002b:00007f3e22bc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 224.215758][T16427] RAX: ffffffffffffffda RBX: 00007f3e22025fa0 RCX: 00007f3e21d9e159 [ 224.215766][T16427] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 224.215773][T16427] RBP: 00007f3e21e3506b R08: 0000000000000000 R09: 0000000000000000 [ 224.215779][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.215785][T16427] R13: 00007f3e22026038 R14: 00007f3e22025fa0 R15: 00007fffbbf3b108 [ 224.215800][T16427] [ 224.488936][ T9] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.001E/input/input20 [ 224.505541][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.517014][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.527664][ T66] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 224.537119][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.546336][ T9] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.001E/input/input21 [ 224.559484][ T66] usb 6-1: config 0 descriptor?? [ 224.581297][ T9] uclogic 0003:28BD:0071.001E: input,hidraw0: USB HID v0.01 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 224.691353][ T314] usb 5-1: USB disconnect, device number 26 [ 224.722144][ T3209] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 224.872125][ T3209] usb 2-1: Using ep0 maxpacket: 16 [ 224.878949][ T3209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.891194][ T3209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 224.912261][ T3209] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 224.942221][ T3209] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 224.962145][ T3209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.982989][ T3209] usb 2-1: config 0 descriptor?? [ 225.202437][ T66] usb 6-1: string descriptor 0 read error: -71 [ 225.214001][ T66] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 225.233793][ T66] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 225.261437][ T66] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 225.283524][T16521] kvm: kvm [16520]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 225.292234][ T66] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 225.299743][ T66] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 225.319431][T16521] kvm: kvm [16520]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 225.348069][ T66] usb 6-1: USB disconnect, device number 22 [ 225.395028][ T3209] nintendo 0003:057E:2019.0020: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 225.752046][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 225.794506][ T3209] nintendo 0003:057E:2019.0020: Failed to get joycon info; ret=-71 [ 225.812023][ T3209] nintendo 0003:057E:2019.0020: Failed to retrieve controller info; ret=-71 [ 225.829329][T16597] FAULT_INJECTION: forcing a failure. [ 225.829329][T16597] name failslab, interval 1, probability 0, space 0, times 0 [ 225.852068][ T3209] nintendo 0003:057E:2019.0020: Failed to initialize controller; ret=-71 [ 225.872268][ T3209] nintendo 0003:057E:2019.0020: probe - fail = -71 [ 225.878861][ T3209] nintendo 0003:057E:2019.0020: probe with driver nintendo failed with error -71 [ 225.888408][T16597] CPU: 0 UID: 0 PID: 16597 Comm: syz.5.3326 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 225.888430][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.888438][T16597] Call Trace: [ 225.888441][T16597] [ 225.888446][T16597] __dump_stack+0x21/0x30 [ 225.888468][T16597] dump_stack_lvl+0x140/0x1c0 [ 225.888483][T16597] ? __cfi_dump_stack_lvl+0x10/0x10 [ 225.888498][T16597] dump_stack+0x19/0x20 [ 225.888511][T16597] should_fail_ex+0x3c2/0x510 [ 225.888523][T16597] should_failslab+0xac/0x100 [ 225.888535][T16597] __kmalloc_cache_noprof+0x41/0x470 [ 225.888546][T16597] ? refill_pi_state_cache+0xa9/0x210 [ 225.888562][T16597] refill_pi_state_cache+0xa9/0x210 [ 225.888575][T16597] futex_requeue+0x1f3/0x1490 [ 225.888590][T16597] ? __cfi_futex_wake_mark+0x10/0x10 [ 225.888598][T16597] ? __cfi_futex_requeue+0x10/0x10 [ 225.888612][T16597] ? __kasan_check_read+0x15/0x20 [ 225.888622][T16597] ? futex_wait+0x2b8/0x7c0 [ 225.888632][T16597] ? vfs_write+0xbcf/0xfd0 [ 225.888643][T16597] do_futex+0x354/0x510 [ 225.888656][T16597] ? __cfi_do_futex+0x10/0x10 [ 225.888669][T16597] ? mutex_unlock+0x90/0x240 [ 225.888681][T16597] __se_sys_futex+0x13c/0x320 [ 225.888693][T16597] ? fput+0x1a4/0x230 [ 225.888705][T16597] ? __x64_sys_futex+0x110/0x110 [ 225.888718][T16597] ? __kasan_check_write+0x18/0x20 [ 225.888728][T16597] __x64_sys_futex+0xe9/0x110 [ 225.888808][T16597] x64_sys_call+0x227f/0x2ee0 [ 225.888823][T16597] do_syscall_64+0x57/0xf0 [ 225.888834][T16597] ? clear_bhb_loop+0x50/0xa0 [ 225.888849][T16597] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 225.888861][T16597] RIP: 0033:0x7f0fbef9e159 [ 225.888962][T16597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.888972][T16597] RSP: 002b:00007f0fbfeb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.888985][T16597] RAX: ffffffffffffffda RBX: 00007f0fbf225fa0 RCX: 00007f0fbef9e159 [ 225.888993][T16597] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 225.889000][T16597] RBP: 00007f0fbf03506b R08: 0000200000048000 R09: 0000000000000000 [ 225.889008][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.889015][T16597] R13: 00007f0fbf226038 R14: 00007f0fbf225fa0 R15: 00007ffd155f3f28 [ 225.889024][T16597] [ 226.372837][ T3209] usb 2-1: USB disconnect, device number 31 [ 226.439634][T16636] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 226.462376][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.479966][ T36] audit: type=1400 audit(1700000259.714:459): avc: denied { relabelto } for pid=16635 comm="syz.5.3327" name="file0" dev="tmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 226.513277][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.556069][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.594157][ T36] audit: type=1400 audit(1700000259.714:460): avc: denied { associate } for pid=16635 comm="syz.5.3327" name="file0" dev="tmpfs" ino=2930 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 226.623640][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.649638][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.666707][ T10] usb 5-1: config 0 descriptor?? [ 226.693500][ T36] audit: type=1400 audit(1700000259.754:461): avc: denied { unlink } for pid=3042 comm="syz-executor" name="file0" dev="tmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 226.761677][ T36] audit: type=1400 audit(1700000259.924:462): avc: denied { ioctl } for pid=16534 comm="syz.4.3323" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.093869][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 227.103160][ T10] plantronics 0003:047F:FFFF.0021: report is too long [ 227.110237][ T10] plantronics 0003:047F:FFFF.0021: item 0 4 0 11 parsing failed [ 227.142938][ T10] plantronics 0003:047F:FFFF.0021: parse failed [ 227.156427][ T10] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22 [ 227.310836][ T10] usb 5-1: USB disconnect, device number 27 [ 227.538942][ T36] audit: type=1400 audit(1700000260.774:463): avc: denied { read } for pid=16679 comm="syz.5.3344" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.593163][ T36] audit: type=1400 audit(1700000260.804:464): avc: denied { open } for pid=16679 comm="syz.5.3344" path="/558/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.666869][ T36] audit: type=1400 audit(1700000260.804:465): avc: denied { write } for pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=128807 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.787779][T16692] kvm: apic: phys broadcast and lowest prio [ 227.817565][ T36] audit: type=1400 audit(1700000261.054:466): avc: denied { read write } for pid=16695 comm="syz.1.3352" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.898033][ T36] audit: type=1400 audit(1700000261.054:467): avc: denied { open } for pid=16695 comm="syz.1.3352" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.946675][ T36] audit: type=1326 audit(1700000261.184:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16706 comm="syz.4.3358" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cd99e159 code=0x0 [ 227.977582][ T1415] bridge_slave_1: left allmulticast mode [ 227.983683][ T1415] bridge_slave_1: left promiscuous mode [ 227.989302][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.027797][ T1415] bridge_slave_0: left allmulticast mode [ 228.037615][ T1415] bridge_slave_0: left promiscuous mode [ 228.057419][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.101979][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 228.116746][ T1415] veth1_macvtap: left promiscuous mode [ 228.141796][ T1415] veth0_vlan: left promiscuous mode [ 228.282812][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.297969][T16733] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.311738][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.331753][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.341956][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.354862][T16733] bridge_slave_0: entered allmulticast mode [ 228.361279][T16733] bridge_slave_0: entered promiscuous mode [ 228.375997][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.392538][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.410180][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.423184][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.430747][T16733] bridge_slave_1: entered allmulticast mode [ 228.448707][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.460104][T16733] bridge_slave_1: entered promiscuous mode [ 228.471831][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.498819][ T10] usb 2-1: Product: syz [ 228.523375][ T10] usb 2-1: Manufacturer: syz [ 228.541506][ T10] usb 2-1: SerialNumber: syz [ 228.564517][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 228.595574][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.602907][T16733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.610523][T16733] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.618039][T16733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.765937][T16733] veth0_vlan: entered promiscuous mode [ 228.796524][T16733] veth1_macvtap: entered promiscuous mode [ 228.874069][T16843] FAULT_INJECTION: forcing a failure. [ 228.874069][T16843] name fail_futex, interval 1, probability 0, space 0, times 1 [ 228.943447][T16843] CPU: 0 UID: 0 PID: 16843 Comm: syz.6.3361 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 228.943479][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.943489][T16843] Call Trace: [ 228.943493][T16843] [ 228.943498][T16843] __dump_stack+0x21/0x30 [ 228.943521][T16843] dump_stack_lvl+0x140/0x1c0 [ 228.943535][T16843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 228.943549][T16843] ? sock_write_iter+0x333/0x490 [ 228.943560][T16843] dump_stack+0x19/0x20 [ 228.943572][T16843] should_fail_ex+0x3c2/0x510 [ 228.943586][T16843] should_fail+0xf/0x20 [ 228.943597][T16843] get_futex_key+0x178/0x940 [ 228.943609][T16843] ? __cfi_get_futex_key+0x10/0x10 [ 228.943622][T16843] ? do_iter_readv_writev+0x67a/0x820 [ 228.943635][T16843] futex_wake+0x150/0x950 [ 228.943645][T16843] ? __cfi_futex_wake+0x10/0x10 [ 228.943654][T16843] ? vfs_writev+0xaea/0xe90 [ 228.943666][T16843] ? do_writev+0x2e0/0x2e0 [ 228.943678][T16843] ? vfs_write+0xbcf/0xfd0 [ 228.943688][T16843] do_futex+0x37d/0x510 [ 228.943700][T16843] ? __cfi_do_futex+0x10/0x10 [ 228.943712][T16843] __se_sys_futex+0x13c/0x320 [ 228.943724][T16843] ? fput+0x1a4/0x230 [ 228.943736][T16843] ? __x64_sys_futex+0x110/0x110 [ 228.943749][T16843] ? vfs_readv+0xa00/0xa00 [ 228.943761][T16843] __x64_sys_futex+0xe9/0x110 [ 228.943773][T16843] x64_sys_call+0x227f/0x2ee0 [ 228.943782][T16843] do_syscall_64+0x57/0xf0 [ 228.943791][T16843] ? clear_bhb_loop+0x50/0xa0 [ 228.943803][T16843] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 228.943814][T16843] RIP: 0033:0x7efe81d9e159 [ 228.943825][T16843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.943834][T16843] RSP: 002b:00007efe807e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.943847][T16843] RAX: ffffffffffffffda RBX: 00007efe82025fa8 RCX: 00007efe81d9e159 [ 228.943855][T16843] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efe82025fac [ 228.943862][T16843] RBP: 00007efe82025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 228.943869][T16843] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 228.943876][T16843] R13: 00007efe82026038 R14: 00007fff6131f860 R15: 00007fff6131f948 [ 228.943885][T16843] [ 229.190480][T16845] netlink: 'syz.4.3368': attribute type 9 has an invalid length. [ 229.213819][T16847] FAULT_INJECTION: forcing a failure. [ 229.213819][T16847] name failslab, interval 1, probability 0, space 0, times 0 [ 229.226957][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.4.3370 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 229.226983][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.226991][T16847] Call Trace: [ 229.226996][T16847] [ 229.227002][T16847] __dump_stack+0x21/0x30 [ 229.227025][T16847] dump_stack_lvl+0x140/0x1c0 [ 229.227040][T16847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.227055][T16847] dump_stack+0x19/0x20 [ 229.227068][T16847] should_fail_ex+0x3c2/0x510 [ 229.227081][T16847] should_failslab+0xac/0x100 [ 229.227093][T16847] __kmalloc_cache_noprof+0x41/0x470 [ 229.227104][T16847] ? ip_mc_add_src+0x4ea/0xc10 [ 229.227117][T16847] ip_mc_add_src+0x4ea/0xc10 [ 229.227128][T16847] ip_mc_source+0x1153/0x1710 [ 229.227140][T16847] ? __cfi_ip_mc_source+0x10/0x10 [ 229.227151][T16847] ? __ip_mc_join_group+0x333/0x410 [ 229.227163][T16847] do_ip_setsockopt+0x207a/0x2af0 [ 229.227179][T16847] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 229.227192][T16847] ? selinux_socket_setsockopt+0x324/0x3d0 [ 229.227206][T16847] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 229.227219][T16847] ? vfs_write+0xbcf/0xfd0 [ 229.227230][T16847] ip_setsockopt+0x63/0x100 [ 229.227243][T16847] udp_setsockopt+0xa3/0xc0 [ 229.227256][T16847] sock_common_setsockopt+0xb5/0xd0 [ 229.227266][T16847] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 229.227276][T16847] do_sock_setsockopt+0x27f/0x410 [ 229.227289][T16847] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 229.227301][T16847] ? __fget_files+0x2bc/0x330 [ 229.227313][T16847] __x64_sys_setsockopt+0x18c/0x220 [ 229.227326][T16847] x64_sys_call+0x2adc/0x2ee0 [ 229.227335][T16847] do_syscall_64+0x57/0xf0 [ 229.227344][T16847] ? clear_bhb_loop+0x50/0xa0 [ 229.227356][T16847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.227367][T16847] RIP: 0033:0x7f77cd99e159 [ 229.227377][T16847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.227387][T16847] RSP: 002b:00007f77ce916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.227400][T16847] RAX: ffffffffffffffda RBX: 00007f77cdc25fa0 RCX: 00007f77cd99e159 [ 229.227408][T16847] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 229.227414][T16847] RBP: 00007f77cda3506b R08: 000000000000000c R09: 0000000000000000 [ 229.227420][T16847] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 229.227426][T16847] R13: 00007f77cdc26038 R14: 00007f77cdc25fa0 R15: 00007ffea107a528 [ 229.227435][T16847] [ 229.761605][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 229.913021][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.933876][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.945735][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.956331][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 229.968193][ T10] cdc_mbim 2-1:1.0: bind() failure [ 229.974586][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 229.983610][ T10] cdc_ncm 2-1:1.1: bind() failure [ 229.996788][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 230.010920][ T10] usb 2-1: USB disconnect, device number 32 [ 230.022189][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.033243][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 230.042515][ T9] usb 5-1: string descriptor 0 read error: -22 [ 230.049003][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 230.060089][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.731602][ T3209] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 230.893033][ T3209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.931446][ T3209] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.975825][ T3209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.011606][ T3209] usb 2-1: config 0 descriptor?? [ 231.074831][ T9] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 231.095047][ T9] usb 5-1: USB disconnect, device number 28 [ 231.129352][ T66] rust_binder: 66:66 release transaction 13 in, still active [ 231.159877][ T66] rust_binder: 17398: undelivered TRANSACTION_COMPLETE [ 231.193847][ T66] rust_binder: 17398: undelivered TRANSACTION_ERROR: 29189 [ 231.215852][T17442] netlink: 'syz.6.3391': attribute type 12 has an invalid length. [ 231.410298][T17494] ./dev/sda1: Can't lookup blockdev [ 231.433541][T17206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.446276][T17206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.464789][ T3209] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 231.493542][ T3209] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input22 [ 231.597063][ T3209] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 231.641743][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 231.641756][ T36] audit: type=1400 audit(1700001288.873:472): avc: denied { setopt } for pid=17514 comm="syz.2.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 231.700080][T17518] FAULT_INJECTION: forcing a failure. [ 231.700080][T17518] name failslab, interval 1, probability 0, space 0, times 0 [ 231.734982][T17518] CPU: 0 UID: 0 PID: 17518 Comm: syz.4.3406 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 231.735009][T17518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.735017][T17518] Call Trace: [ 231.735021][T17518] [ 231.735026][T17518] __dump_stack+0x21/0x30 [ 231.735110][T17518] dump_stack_lvl+0x140/0x1c0 [ 231.735125][T17518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.735139][T17518] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 231.735244][T17518] dump_stack+0x19/0x20 [ 231.735265][T17518] should_fail_ex+0x3c2/0x510 [ 231.735316][T17518] should_failslab+0xac/0x100 [ 231.735391][T17518] kmem_cache_alloc_noprof+0x42/0x410 [ 231.735430][T17518] ? __kernfs_new_node+0xf1/0x740 [ 231.735494][T17518] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 231.735562][T17518] __kernfs_new_node+0xf1/0x740 [ 231.735574][T17518] ? __kasan_check_write+0x18/0x20 [ 231.735585][T17518] ? kernfs_new_node+0x280/0x280 [ 231.735597][T17518] ? down_write+0xee/0x2b0 [ 231.735667][T17518] ? __cfi_down_write+0x10/0x10 [ 231.735679][T17518] ? __kasan_check_write+0x18/0x20 [ 231.735689][T17518] ? up_write+0x66/0x280 [ 231.735761][T17518] ? kernfs_activate+0x1ee/0x200 [ 231.735775][T17518] kernfs_new_node+0x154/0x280 [ 231.735788][T17518] __kernfs_create_file+0x52/0x280 [ 231.735803][T17518] sysfs_add_file_mode_ns+0x1d2/0x280 [ 231.735814][T17518] internal_create_group+0x66c/0xe70 [ 231.735826][T17518] ? __kasan_check_write+0x18/0x20 [ 231.735837][T17518] ? sysfs_create_group+0x40/0x40 [ 231.735848][T17518] ? kernfs_activate+0x1ee/0x200 [ 231.735861][T17518] sysfs_create_groups+0x5c/0x130 [ 231.735872][T17518] device_add_attrs+0xdf/0x850 [ 231.735944][T17518] ? device_add_class_symlinks+0x260/0x260 [ 231.735959][T17518] ? __kasan_check_write+0x18/0x20 [ 231.735969][T17518] ? kobject_put+0x1cc/0x2a0 [ 231.736026][T17518] ? device_add_class_symlinks+0x22e/0x260 [ 231.736041][T17518] device_add+0x4db/0xbf0 [ 231.736063][T17518] netdev_register_kobject+0x196/0x330 [ 231.736133][T17518] register_netdevice+0x1042/0x1a80 [ 231.736184][T17518] ? __cfi_register_netdevice+0x10/0x10 [ 231.736195][T17518] ? radix_tree_lookup+0x283/0x2a0 [ 231.736206][T17518] ppp_dev_configure+0x80a/0xb40 [ 231.736413][T17518] ppp_ioctl+0x850/0x17e0 [ 231.736426][T17518] ? __cfi_ppp_ioctl+0x10/0x10 [ 231.736439][T17518] ? __fget_files+0x2bc/0x330 [ 231.736506][T17518] ? bpf_lsm_file_ioctl+0xd/0x20 [ 231.736519][T17518] ? security_file_ioctl+0x3e/0x110 [ 231.736555][T17518] ? __cfi_ppp_ioctl+0x10/0x10 [ 231.736568][T17518] __se_sys_ioctl+0x126/0x1b0 [ 231.736608][T17518] __x64_sys_ioctl+0x7f/0xa0 [ 231.736626][T17518] x64_sys_call+0x1878/0x2ee0 [ 231.736636][T17518] do_syscall_64+0x57/0xf0 [ 231.736671][T17518] ? clear_bhb_loop+0x50/0xa0 [ 231.736736][T17518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.736748][T17518] RIP: 0033:0x7f77cd99e159 [ 231.736760][T17518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.736771][T17518] RSP: 002b:00007f77ce916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.736785][T17518] RAX: ffffffffffffffda RBX: 00007f77cdc25fa0 RCX: 00007f77cd99e159 [ 231.736793][T17518] RDX: 000000110e22fff9 RSI: 00000000c004743e RDI: 0000000000000004 [ 231.736799][T17518] RBP: 00007f77cda3506b R08: 0000000000000000 R09: 0000000000000000 [ 231.736806][T17518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.736812][T17518] R13: 00007f77cdc26038 R14: 00007f77cdc25fa0 R15: 00007ffea107a528 [ 231.736820][T17518] [ 232.518890][ T36] audit: type=1400 audit(1700001289.753:473): avc: denied { read } for pid=17520 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 232.555861][ T3209] usb 2-1: USB disconnect, device number 33 [ 232.851318][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 232.965539][ T36] audit: type=1400 audit(1700001290.203:474): avc: denied { sys_module } for pid=17534 comm="syz.2.3412" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Stopping sshd: [ 233.031745][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.043472][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.088101][ T9] usb 5-1: string descriptor 0 read error: -22 [ 233.094822][ T9] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 stopped /usr/sbin/sshd (pid 202) OK [ 233.138004][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 233.366254][ T9] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 233.417937][ T9] usb 5-1: USB disconnect, device number 29 [ 233.437314][ T36] audit: type=1400 audit(1700001290.673:475): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 233.530843][ T36] audit: type=1400 audit(1700001290.733:476): avc: denied { read write } for pid=17566 comm="ip" path="/dev/console" dev="rootfs" ino=101 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: [ 233.639660][ T36] audit: type=1400 audit(1700001290.873:477): avc: denied { read write } for pid=17570 comm="iptables" path="/dev/console" dev="rootfs" ino=101 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping system message bus: [ 233.701414][ T36] audit: type=1400 audit(1700001290.913:478): avc: denied { search } for pid=17570 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.793805][ T36] audit: type=1400 audit(1700001290.913:479): avc: denied { write } for pid=17570 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 done [ 233.904198][ T36] audit: type=1400 audit(1700001290.913:480): avc: denied { add_name } for pid=17570 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.991187][ T36] audit: type=1400 audit(1700001290.913:481): avc: denied { create } for pid=17570 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.069839][T17604] FAULT_INJECTION: forcing a failure. [ 234.069839][T17604] name failslab, interval 1, probability 0, space 0, times 0 [ 234.107692][T17604] CPU: 0 UID: 0 PID: 17604 Comm: syz.4.3429 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 234.107714][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.107721][T17604] Call Trace: [ 234.107725][T17604] [ 234.107730][T17604] __dump_stack+0x21/0x30 [ 234.107752][T17604] dump_stack_lvl+0x140/0x1c0 [ 234.107767][T17604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 234.107781][T17604] ? stack_depot_save_flags+0x399/0x800 [ 234.107865][T17604] ? kasan_save_alloc_info+0x3a/0x50 [ 234.107882][T17604] dump_stack+0x19/0x20 [ 234.107896][T17604] should_fail_ex+0x3c2/0x510 [ 234.107909][T17604] should_failslab+0xac/0x100 [ 234.107922][T17604] kmem_cache_alloc_noprof+0x42/0x410 [ 234.107934][T17604] ? __kernfs_new_node+0xf1/0x740 [ 234.107953][T17604] __kernfs_new_node+0xf1/0x740 [ 234.107964][T17604] ? __kasan_check_write+0x18/0x20 [ 234.107974][T17604] ? kernfs_new_node+0x280/0x280 [ 234.107985][T17604] ? kernfs_xattr_get+0x85/0xa0 [ 234.107996][T17604] ? make_kgid+0x1d0/0x690 [ 234.108065][T17604] ? __cfi_make_kgid+0x10/0x10 [ 234.108081][T17604] kernfs_new_node+0x154/0x280 [ 234.108094][T17604] __kernfs_create_file+0x52/0x280 [ 234.108110][T17604] sysfs_add_file_mode_ns+0x1d2/0x280 [ 234.108120][T17604] internal_create_group+0x66c/0xe70 [ 234.108131][T17604] ? __kasan_check_write+0x18/0x20 [ 234.108142][T17604] ? sysfs_create_group+0x40/0x40 [ 234.108156][T17604] ? kernfs_activate+0x1ee/0x200 [ 234.108168][T17604] sysfs_create_groups+0x5c/0x130 [ 234.108179][T17604] device_add_attrs+0xdf/0x850 [ 234.108194][T17604] ? device_add_class_symlinks+0x260/0x260 [ 234.108207][T17604] ? __kasan_check_write+0x18/0x20 [ 234.108217][T17604] ? kobject_put+0x1cc/0x2a0 [ 234.108231][T17604] ? device_add_class_symlinks+0x22e/0x260 [ 234.108246][T17604] device_add+0x4db/0xbf0 [ 234.108260][T17604] netdev_register_kobject+0x196/0x330 [ 234.108275][T17604] register_netdevice+0x1042/0x1a80 [ 234.108285][T17604] ? kasan_save_alloc_info+0x3a/0x50 [ 234.108295][T17604] ? __cfi_register_netdevice+0x10/0x10 [ 234.108305][T17604] vti6_tnl_create2+0xbb/0x360 [ 234.108358][T17604] vti6_locate+0x617/0x720 [ 234.108368][T17604] ? selinux_capable+0x38/0x50 [ 234.108410][T17604] ? vti6_parm_from_user+0x270/0x270 [ 234.108421][T17604] ? __asan_memcpy+0x5a/0x80 [ 234.108432][T17604] vti6_siocdevprivate+0x680/0xac0 [ 234.108443][T17604] ? __cfi_vti6_siocdevprivate+0x10/0x10 [ 234.108455][T17604] ? full_name_hash+0xbe/0xf0 [ 234.108492][T17604] dev_ifsioc+0x951/0xc10 [ 234.108528][T17604] dev_ioctl+0xa62/0x1000 [ 234.108543][T17604] sock_ioctl+0x74e/0x7e0 [ 234.108604][T17604] ? __cfi_sock_ioctl+0x10/0x10 [ 234.108614][T17604] ? __fget_files+0x2bc/0x330 [ 234.108627][T17604] ? bpf_lsm_file_ioctl+0xd/0x20 [ 234.108642][T17604] ? security_file_ioctl+0x3e/0x110 [ 234.108653][T17604] ? __cfi_sock_ioctl+0x10/0x10 [ 234.108662][T17604] __se_sys_ioctl+0x126/0x1b0 [ 234.108678][T17604] __x64_sys_ioctl+0x7f/0xa0 [ 234.108694][T17604] x64_sys_call+0x1878/0x2ee0 [ 234.108704][T17604] do_syscall_64+0x57/0xf0 [ 234.108713][T17604] ? clear_bhb_loop+0x50/0xa0 [ 234.108726][T17604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.108738][T17604] RIP: 0033:0x7f77cd99e159 [ 234.108749][T17604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.108758][T17604] RSP: 002b:00007f77ce916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.108777][T17604] RAX: ffffffffffffffda RBX: 00007f77cdc25fa0 RCX: 00007f77cd99e159 [ 234.108785][T17604] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000004 [ 234.108793][T17604] RBP: 00007f77cda3506b R08: 0000000000000000 R09: 0000000000000000 [ 234.108799][T17604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.108806][T17604] R13: 00007f77cdc26038 R14: 00007f77cdc25fa0 R15: 00007ffea107a528 [ 234.108815][T17604] [ 235.111983][T17608] ./dev/sda1: Can't lookup blockdev Stopping klogd: OK Stopping acpid: [ 235.220714][T17619] netlink: 'syz.2.3435': attribute type 4 has an invalid length. [ 235.237152][T17619] netlink: 'syz.2.3435': attribute type 4 has an invalid length. [ 235.251196][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 235.402852][ T9] usb 7-1: config 0 has no interfaces? [ 235.408607][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 235.430599][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.455577][ T9] usb 7-1: config 0 descriptor?? [ 235.677097][T17603] FAULT_INJECTION: forcing a failure. [ 235.677097][T17603] name failslab, interval 1, probability 0, space 0, times 0 [ 235.690177][T17603] CPU: 0 UID: 0 PID: 17603 Comm: syz.6.3430 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 235.690201][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.690208][T17603] Call Trace: [ 235.690214][T17603] [ 235.690220][T17603] __dump_stack+0x21/0x30 [ 235.690241][T17603] dump_stack_lvl+0x140/0x1c0 [ 235.690255][T17603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 235.690268][T17603] ? __cfi_queue_work_on+0x10/0x10 [ 235.690356][T17603] ? _raw_spin_lock+0x92/0x120 [ 235.690373][T17603] ? __cfi__raw_spin_lock+0x10/0x10 [ 235.690396][T17603] dump_stack+0x19/0x20 [ 235.690414][T17603] should_fail_ex+0x3c2/0x510 [ 235.690437][T17603] ? raw_queue_event+0x94/0x3a0 [ 235.690493][T17603] should_failslab+0xac/0x100 [ 235.690508][T17603] __kmalloc_noprof+0x69/0x510 [ 235.690520][T17603] ? raw_queue_event+0x94/0x3a0 [ 235.690529][T17603] raw_queue_event+0x94/0x3a0 [ 235.690539][T17603] ? __cfi_dummy_pullup+0x10/0x10 [ 235.690591][T17603] gadget_disconnect+0x4a/0x90 [ 235.690601][T17603] usb_gadget_disconnect_locked+0x25d/0x400 [ 235.690671][T17603] gadget_unbind_driver+0xaf/0x3f0 [ 235.690683][T17603] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 235.690695][T17603] device_release_driver_internal+0x4ad/0x830 [ 235.690734][T17603] driver_detach+0x1f5/0x2d0 [ 235.690743][T17603] bus_remove_driver+0x254/0x2b0 [ 235.690757][T17603] driver_unregister+0x79/0xb0 [ 235.690767][T17603] usb_gadget_unregister_driver+0x52/0x80 [ 235.690779][T17603] raw_release+0xdb/0x280 [ 235.690788][T17603] ? __cfi_raw_release+0x10/0x10 [ 235.690797][T17603] __fput+0x208/0xa30 [ 235.690839][T17603] __fput_sync+0x4a/0x70 [ 235.690852][T17603] __se_sys_close+0x172/0x1f0 [ 235.690861][T17603] __x64_sys_close+0x3c/0x60 [ 235.690870][T17603] x64_sys_call+0x2560/0x2ee0 [ 235.690983][T17603] do_syscall_64+0x57/0xf0 [ 235.690993][T17603] ? clear_bhb_loop+0x50/0xa0 [ 235.691007][T17603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 235.691019][T17603] RIP: 0033:0x7efe81d5e98e [ 235.691031][T17603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.691040][T17603] RSP: 002b:00007efe807e2f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 235.691052][T17603] RAX: ffffffffffffffda RBX: 00007efe807e36c0 RCX: 00007efe81d5e98e [ 235.691060][T17603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 235.691066][T17603] RBP: 00007efe81e3506b R08: 0000000000000000 R09: 0000000000000000 [ 235.691073][T17603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.691080][T17603] R13: 00007efe82026038 R14: 00007efe82025fa0 R15: 00007fff6131f948 [ 235.691089][T17603] OK [ 236.377131][ T10] usb 7-1: USB disconnect, device number 2 Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 236.484702][T17603] raw-gadget.0 gadget.6: failed to queue disconnect event umount: can't remount debugfs read-only [ 236.570523][T17668] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 236.590894][T17668] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 236.617168][T17668] udc dummy_udc.0: failed to start g1: -22 [ 236.638069][T17668] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 umount: sysfs busy - remounted read-only umount[ 236.671026][T17668] UDC core: g1: couldn't find an available UDC or it's busy : devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 236.714256][ T36] kauditd_printk_skb: 13 callbacks suppressed Connection to 10.128.1.19 closed by remote host. [ 236.714279][ T36] audit: type=1400 audit(1700001293.944:495): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1945]" dev="pipefs" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 237.057357][ T1423] bridge_slave_1: left allmulticast mode [ 237.065128][ T1423] bridge_slave_1: left promiscuous mode [ 237.081026][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.101104][ T1423] bridge_slave_0: left allmulticast mode [ 237.107199][ T1423] bridge_slave_0: left promiscuous mode [ 237.121113][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.172422][ T1423] tipc: Disabling bearer [ 237.177808][ T1423] tipc: Left network mode [ 237.183081][ T1423] veth1_macvtap: left promiscuous mode [ 237.188602][ T1423] veth0_vlan: left promiscuous mode [ 237.281517][ T1423] bridge_slave_1: left allmulticast mode [ 237.287657][ T1423] bridge_slave_1: left promiscuous mode [ 237.293456][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.301094][ T1423] bridge_slave_0: left allmulticast mode [ 237.307543][ T1423] bridge_slave_0: left promiscuous mode [ 237.313807][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.362426][ T1423] tipc: Left network mode [ 237.367631][ T1423] veth1_macvtap: left promiscuous mode [ 237.373659][ T1423] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 239.062078][T17672] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 239.068808][T17672] ACPI: PM: Preparing to enter system sleep state S5 [ 239.076333][T17672] kvm: exiting hardware virtualization [ 239.082022][T17672] reboot: Power down serialport: VM disconnected.