last executing test programs: 17.41509436s ago: executing program 2 (id=154): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000008b804020240000102030109021b0001010480070904000f0107"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 16.886321884s ago: executing program 2 (id=155): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x3, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @mcast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x9, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in=@multicast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @mcast2, 0x3ff}}]}, 0xa0}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 16.870290514s ago: executing program 2 (id=156): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x8a9, 0x100) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000440)={0xe}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) getdents64(0xffffffffffffff9c, &(0x7f00000000c0)=""/177, 0xb1) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000180)={0x9, 0x0, 0xe87e, 0xc000000, 0x11cc00000000}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x80) write(r7, &(0x7f0000001000)="496cfe80", 0x4) read$ptp(r5, &(0x7f00000026c0)=""/231, 0xe7) 16.727591228s ago: executing program 2 (id=157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x5) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) 16.726727748s ago: executing program 2 (id=158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r6, 0x0, 0x0) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e708, 0x1, 0x1000002, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x869e, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) getpeername(r2, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000500)=ANY=[], 0x170) sendto$inet6(r7, 0x0, 0xfffffffffffffdb8, 0xb97, 0x0, 0xfffffd76) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r9 = gettid() rt_tgsigqueueinfo(r9, r9, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_clone3(&(0x7f0000000040)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) 15.847617399s ago: executing program 2 (id=164): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 9.538856014s ago: executing program 3 (id=203): unshare(0x22020600) r0 = syz_io_uring_setup(0x48cc, &(0x7f0000000140)={0x0, 0xd350, 0x3201, 0x3, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x8e, &(0x7f0000000240)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x62, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x259, 0xff, 0xe, "dd"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x4, 0xb}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2d, 0x2, 0x3, {0x7, 0x25, 0x1, 0xc, 0xa1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x6, 0x2, {0x7, 0x25, 0x1, 0x8, 0x5, 0xe}}}}}}}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket(0x1, 0x80802, 0x0) r10 = epoll_create1(0x80000) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1f4, r9, &(0x7f00000000c0)={0x10000001}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setregset(0x4205, r11, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r11, 0x1, &(0x7f00000001c0)={0x0}) setuid(0xee01) 9.530103395s ago: executing program 3 (id=204): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="3800000024000701feffffff00000000017c0000040042801c000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8000) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000009e0035c56be151ee7333641c5092cc72e1903f8c00401041eca912c16d4a04aa4c672479496b1912360881b1ac3f2eed7d919a241a0e8ab520db8fb6c9a772972254b977c9233c15d492e96cb0d655a59f24e04ed87d22893588cf49a1c50d773787e9d96b2579d8"], 0xa) dup(r0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000140)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.395618938s ago: executing program 3 (id=226): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020732b1b0040000102030109028800030109403f0904000000010100000a2401d2000a00020102"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xc3, 0xd7, 0x9a, 0x8, 0x9fb, 0x6026, 0xaedc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0xb0, 0x1, "", [{{0x9, 0x4, 0x3, 0x4, 0x0, 0x99, 0xd8, 0x22, 0x3}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) unshare(0x22060600) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffdffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130702000000fcdbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000004e2106020a0020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000fc32000000fc020000000000000000000000000001000000000000000002000000000000000c0000000000000008000000000000000000000000000000000000000000000000000000000000004307000000000000a802000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000000e40000000000000060001200726663343130362867636d28616573292900000000000000000000000000000000000000000000003a000000000000000000000000000000000000000000000000a0"], 0x16c}}, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000200)={@rand_addr=0x64010101, @empty}) 6.907455359s ago: executing program 3 (id=232): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130702000000fcdbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000004e2106020a0020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000fc32000000fc020000000000000000000000000001000000000000000002000000000000000c0000000000000008000000000000000000000000000000000000000000000000000000000000004307000000000000a802000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000000e40000000000000060001200726663343130362867636d28616573292900000000000000000000000000000000000000000000003a000000000000000000000000000000000000000000000000a0"], 0x16c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000004c0)='./file1\x00', 0x5) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ff, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x32, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x5, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xd6c, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4b2b, 0x8000, 0x0, 0x105, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz1\x00', {0x7ff, 0x9, 0x4, 0x7f}, 0x7, [0x9, 0xfffffffd, 0x8000, 0x0, 0x4, 0x10001, 0xfffffa4a, 0x7, 0x6, 0x0, 0x0, 0x1, 0x6, 0x4, 0x7, 0x8, 0xfffffffb, 0x4, 0x80000001, 0x2, 0x7ff, 0xffffff75, 0x12c4, 0x5, 0x2, 0x1, 0x362e, 0xa, 0x0, 0x800, 0x9, 0x5, 0xe, 0xb184, 0x3, 0x5, 0x8d5, 0x5, 0x7, 0x3, 0x0, 0x7, 0x5, 0x7, 0x8, 0xdd0, 0xfffffffe, 0x7ff, 0x6, 0x1, 0x800, 0xd86, 0x10001, 0x1, 0x7, 0x46a, 0x1000, 0xfffffffd, 0x9901e20, 0x80007, 0x19aa, 0x6, 0x3, 0x9], [0x7fffffff, 0x4, 0x6a9b, 0x8, 0x6, 0x7, 0x8, 0x7, 0x101, 0x711, 0x545e, 0x0, 0x713, 0xb, 0x1000, 0x14000, 0x5, 0x9, 0x1, 0x3500, 0x5, 0x2, 0x88c2, 0x370, 0x7, 0x10, 0x100, 0x6, 0x10, 0xcd6c, 0x1000, 0x1, 0x4, 0x1, 0x7, 0xfffffffa, 0x100, 0x5, 0xe3d6, 0x0, 0x9d, 0x3, 0x5, 0x2, 0x769, 0x1ff, 0x337, 0xfc1, 0x8b6, 0x9, 0x0, 0x2, 0x40000000, 0x6, 0x80000000, 0x3ff, 0x5, 0x9, 0x3, 0x70, 0x6db, 0x1, 0x800, 0xe9], [0x7fffffff, 0x200, 0xffff, 0x7, 0xd, 0x8, 0x1, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x0, 0x6de46348, 0x2, 0x200, 0x52a4, 0x8, 0x101, 0x2, 0x3, 0x2, 0x237e, 0x0, 0x10, 0x1, 0x7, 0x9, 0x7, 0x2, 0x80000000, 0x9, 0x35c2d1ae, 0x13f8, 0x3, 0x60, 0x401, 0x4, 0x3, 0xb, 0x3ff, 0x56d, 0x7, 0x3, 0x80000000, 0x7, 0xab3, 0x0, 0xfff, 0x8, 0x6, 0xbf, 0xe8c9, 0x48cb, 0x40, 0xd, 0x2, 0x4, 0x1, 0x7, 0x1, 0x3, 0x10], [0x1, 0x6, 0x7, 0x10000, 0x81, 0x0, 0x3, 0x1, 0x0, 0x5, 0x6, 0x1, 0x2, 0x7, 0x84, 0x3, 0x7, 0x5, 0x6, 0xfffffffd, 0xf3a, 0x4, 0x80, 0xffff, 0x30, 0x3, 0x1, 0x66, 0x1, 0x3, 0x797e, 0x0, 0xfffff26a, 0x1, 0x2, 0x3, 0xfff, 0xae8, 0x6, 0x5, 0x6fdb, 0xfffffff7, 0xe582, 0xa7, 0xda, 0x8, 0xffffffff, 0x9, 0x9, 0x2, 0xbf, 0x5, 0xffffff7f, 0x74, 0x5559c1bc, 0x420, 0x8, 0x8, 0x80000001, 0x6, 0xe, 0x9, 0x5, 0xfffffd3d]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) 6.443090861s ago: executing program 3 (id=235): mprotect(0x0, 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x3, 0x7, 0xfffffdb4, 0x7, 0x5, "f82f392741370852e3a2ef4313cdbde6007697"}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000540)=[@register_looper={0x40046307}], 0x2, 0x0, &(0x7f0000000580)="7f7a"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x6, 0x4, 0x7, 0x5}, {0x5, 0x2, 0x4, 0x9}, {0x5, 0x49, 0xff, 0x4}, {0x80, 0x3, 0x2}, {0x3b4, 0xff, 0x5, 0x3}]}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020630730204000010000000080000001010500080904000000010100000a240107000a000201020910010000010200000904e50001010200000b2402010e22c701019b5b072401224704000905010920000903070725010405010009040200000102000009040201010102000009058209400007070607250104010600"], 0x0) 6.398751492s ago: executing program 3 (id=236): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x4004000}, 0x0) 6.333027534s ago: executing program 32 (id=236): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x4004000}, 0x0) 4.650548095s ago: executing program 1 (id=246): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) 3.971021422s ago: executing program 0 (id=247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000240)={@val={0x70, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xffffdd86}}}}}}}, 0x3e) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) socket$inet6(0xa, 0x5, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080), 0x8) sendmmsg$inet(r0, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0xfffffffffffffee8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1600000000e1ff2965c389f17353b300090000000000000014000000000000000000000002000000bb000000000000004000000000000000000000000700000086240044b3665eb1d73e2fc7da5d41447b0abeb1e81b9b57d8d6e35e01a98ef805b2d96558662d585b9e56e7cd", @ANYRES64=0x0, @ANYRES8=r1], 0x70}}], 0x1, 0x4000025) 3.952702693s ago: executing program 1 (id=248): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff6f) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, r7}, {0x4, 0xa, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x20000000000}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@local, 0x0, 0xa1de71e952f3e4dd}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10000, 0x1, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) dup(r3) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r8 = syz_usb_connect$hid(0x2, 0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="1201180100000008da092b0200000000000109022400010000800809040020030300000009210800080122280009058103f703002bfe"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="60212800000028011552cb74d97bd8812ac04b61a7494c309a07673cd023b5294cfe50bdda5df164482f00000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) close(0x3) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b80500000009f202026636f30f10ea000032f54e9d0101eaf7e31bf7f30f0905000000b90000c0fe0fae41dcb50400000000b9800000c0650f01c4663dc7b2083a00000f300f0826f30fc7b2050000000f9a4ff8980f320f3566b85700", 0x5d}], 0x1, 0x17, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r9 = getpgid(r0) (async, rerun: 32) r10 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x7, 0x1, 0x0, 0x7, 0xf9, 0x0, 0xfa, 0xff, 0x6, 0x2, 0xffff, 0x7, 0x34, 0x4, 0x7fffffff, [0xa, 0x7c]}}) (async) socket(0xb, 0x1, 0x7) (async) r11 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r11, 0x21, 0x0, 0x4) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 3.099454273s ago: executing program 0 (id=249): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffc, 0x200) mmap(&(0x7f0000a2f000/0x3000)=nil, 0x3000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40242, 0x31) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[], 0xd) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x8, {0x25, 0x2, 0x6, 0x7, 0x100}}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047440, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000068f5c5e8b7afacdaf6420199bba24fb0a7416748426295f518f5d317192cc872fbe39e79171e24eed663af691c0082f26e6e0b271e81a866c63f7b072fceaac64ec262faa12db87d885738ee9f482e425797dc78992a8e0ffaa7faad4b05bd2f267e2a5635ee324fb24863457ce3bcf584010c7cb28ce58a26a3adac63", @ANYRES16=r6, @ANYBLOB="150b00000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0x1a, r7, 0xfffffffffffffffe, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000191000/0x2000)=nil, 0x2000, 0x2000007) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x80001) 3.099004344s ago: executing program 1 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) chdir(0x0) (async) r3 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) truncate(&(0x7f0000000300)='./bus\x00', 0x7) (async, rerun: 32) finit_module(r3, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60000600) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000480)='./file0\x00', 0x98) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (rerun: 64) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1000) (async, rerun: 64) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (rerun: 64) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000240)={@val={0x70, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xffffdd86}}}}}}}, 0x3e) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0xf8, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r2, 0x20, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2.192993076s ago: executing program 0 (id=251): clock_adjtime(0x41, &(0x7f00000000c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2007, 0x2285) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d03072000001ea89de2b7fb0000e60080b8785d9600010000000002000001000000ff0001000000000200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x3, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf28a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff2ad5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x35}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffc01}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) landlock_restrict_self(r4, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc09b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xf746, 0x6, 0x1, {0x22, 0xb46}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x1, 0x39}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x4f0, 0x0, 0x0, 0x7, 0xff, 0x8}, 0x45, &(0x7f0000000300)={0x5, 0xf, 0x45, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x2, 0xf, 0x3, [0x10100c0, 0x0]}, @generic={0x25, 0x10, 0xa, "8d7a4a6bd7e98ca45facb1552f3af4923c9a66550e3742ee6860f59841f99b25e575"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x6, 0x101}]}, 0x7, [{0xe8, &(0x7f0000000380)=@string={0xe8, 0x3, "2afb577799bad897a54d9172ecb69791808221f860daf848fb20890d434401db21d94a21c04e68e7c8d763b7c4a776107297dcd63315cdfa0b5dbc44a0d4863869c968acd90cb45bdf99edb57cfac452afe9e10668bb7dd71451d8b11cfd82c551608f2358edc2210c99ea69d92cdd429e00baec74805f51f9e949980b42bb55b13ce704f30f83b4c494c12996fed8bb538f2ed181600743ea841b7c951c2939b4c40fba5a0a68ce0505ce8afe49800d35c95b81b318b643436484a589682859fa1f0b4540c31389f70fe41ff72b90bb44fe3f4a3e63e749feab887aa528a7af34313dd0f39d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41a}}, {0xaa, &(0x7f0000000540)=ANY=[@ANYBLOB="aa03d312fd578eeac8acd04d837ad09a806813502660c7f1d5ae61ecad14215aeafa1ec228a52dce64a80a9125e7b86b494b04b43f1f43b73adf0db63645ca8ce94868708c401a02a6629e2378f1846099d1b8249f94e7ad3556ab3195d4aa5aa5f8403c2a79b79db1c605f05a2edd7558247001b224bbb03b83cbc070db3f20a97d050c3b2bda6419b1c07d4dd920d7f6ad31e6b074652dd6d14eaee736465b5aa0e3a4090620"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3009}}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000004840)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x501080, 0x0) (async) fcntl$setlease(r2, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.192778006s ago: executing program 1 (id=252): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000340)=ANY=[], 0x200002e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0xfffffffffffeffff}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0xfffffffffffeffff}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x9, 0x5}, 0x20) 1.177168221s ago: executing program 0 (id=253): r0 = socket(0x400000000010, 0x3, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) socket(0x400000000010, 0x3, 0x0) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) (async) 1.176549721s ago: executing program 1 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000046280f1c460000ae", 0x48}], 0x1, 0x74, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) unshare(0x28000600) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x44000160) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) vmsplice(r4, &(0x7f00000012c0)=[{&(0x7f00000002c0)="8f", 0x1}], 0x1, 0x5) r5 = openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x8043, 0x6) getsockopt$sock_buf(r5, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.6359ms ago: executing program 0 (id=255): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)) 6.00387ms ago: executing program 1 (id=256): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) socket(0x2c, 0x3, 0xbe76) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xf, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x26, {0x26, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 5.29169ms ago: executing program 33 (id=164): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) (async) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e001030005240600000524"], 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) (async) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 28.972887][ T36] audit: type=1400 audit(1786265358.760:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.973944][ T286] cgroup: Unknown subsys name 'net' [ 28.996209][ T36] audit: type=1400 audit(1786265358.760:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.023888][ T36] audit: type=1400 audit(1786265358.790:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.024073][ T286] cgroup: Unknown subsys name 'devices' [ 29.145055][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.150813][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.243196][ T36] audit: type=1400 audit(1786265359.030:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.266392][ T36] audit: type=1400 audit(1786265359.030:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.277409][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.291483][ T36] audit: type=1400 audit(1786265359.030:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.323193][ T36] audit: type=1400 audit(1786265359.090:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.333691][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.348601][ T36] audit: type=1400 audit(1786265359.090:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.383191][ T36] audit: type=1400 audit(1786265359.120:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.409038][ T36] audit: type=1400 audit(1786265359.120:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.155073][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.162164][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.169475][ T293] bridge_slave_0: entered allmulticast mode [ 30.175886][ T293] bridge_slave_0: entered promiscuous mode [ 30.189565][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.196649][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.203762][ T293] bridge_slave_1: entered allmulticast mode [ 30.210116][ T293] bridge_slave_1: entered promiscuous mode [ 30.223477][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.230623][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.237756][ T294] bridge_slave_0: entered allmulticast mode [ 30.243988][ T294] bridge_slave_0: entered promiscuous mode [ 30.250559][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.257683][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.264782][ T294] bridge_slave_1: entered allmulticast mode [ 30.271146][ T294] bridge_slave_1: entered promiscuous mode [ 30.397170][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.404718][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.411872][ T297] bridge_slave_0: entered allmulticast mode [ 30.418228][ T297] bridge_slave_0: entered promiscuous mode [ 30.427654][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.434864][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.441931][ T297] bridge_slave_1: entered allmulticast mode [ 30.448387][ T297] bridge_slave_1: entered promiscuous mode [ 30.462808][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.469882][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.477144][ T295] bridge_slave_0: entered allmulticast mode [ 30.483409][ T295] bridge_slave_0: entered promiscuous mode [ 30.489834][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.496997][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.504078][ T295] bridge_slave_1: entered allmulticast mode [ 30.510392][ T295] bridge_slave_1: entered promiscuous mode [ 30.556533][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.563837][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.571200][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.578248][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.610532][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.617743][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.625090][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.632149][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.696188][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.703394][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.710758][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.718452][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.731683][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738799][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.746155][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.753206][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.769399][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.776860][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.784594][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.791864][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.800109][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.807616][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.814793][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.821918][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.839728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.846831][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.857891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.864958][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.881504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.901986][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909076][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.943419][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.950491][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.964075][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.971156][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.986254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.993337][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.001233][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.008400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.036569][ T293] veth0_vlan: entered promiscuous mode [ 31.047596][ T294] veth0_vlan: entered promiscuous mode [ 31.069126][ T294] veth1_macvtap: entered promiscuous mode [ 31.087111][ T297] veth0_vlan: entered promiscuous mode [ 31.093040][ T293] veth1_macvtap: entered promiscuous mode [ 31.115564][ T295] veth0_vlan: entered promiscuous mode [ 31.128553][ T297] veth1_macvtap: entered promiscuous mode [ 31.155391][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.172625][ T295] veth1_macvtap: entered promiscuous mode [ 31.242549][ T313] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 31.261196][ T313] SELinux: failed to load policy [ 31.318903][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.512909][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.513441][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.613394][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.662893][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 31.669351][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.672864][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 31.679835][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.687184][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.692366][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.704801][ T310] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 31.714554][ T45] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 31.721961][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.730823][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.740493][ T310] usb 4-1: config 0 descriptor?? [ 31.747425][ T45] usb 3-1: Product: syz [ 31.756146][ T45] usb 3-1: Manufacturer: syz [ 31.761113][ T45] usb 3-1: SerialNumber: syz [ 31.773425][ T311] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 31.787459][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 31.796702][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.853315][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 31.859790][ T66] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 31.870341][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.880347][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 31.889537][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.897602][ T66] usb 1-1: SerialNumber: syz [ 31.906070][ T66] usb 1-1: 0:2 : does not exist [ 31.970994][ T316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.979771][ T316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.007992][ T311] usb 2-1: USB disconnect, device number 2 [ 32.158356][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.169624][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.178960][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.186862][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.194515][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.201667][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.209052][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.216233][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.223743][ T310] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 32.232224][ T310] monterey 0003:0566:3004.0001: hidraw0: USB HID v0.02 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 32.598345][ T338] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 32.872854][ T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.893971][ T329] usb 4-1: USB disconnect, device number 2 [ 32.941407][ T344] loop5: detected capacity change from 0 to 7 [ 32.948106][ T344] Buffer I/O error on dev loop5, logical block 0, async page read [ 32.956461][ T344] Buffer I/O error on dev loop5, logical block 0, async page read [ 32.964828][ T344] loop5: unable to read partition table [ 32.970648][ T344] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 32.973143][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 32.992456][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.000591][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.008799][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.017464][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.025533][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 33.025801][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.033178][ T334] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 33.040739][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.049596][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.066280][ T331] Buffer I/O error on dev loop5, logical block 0, async page read [ 33.085708][ T334] usb 2-1: Product: syz [ 33.090008][ T334] usb 2-1: Manufacturer: syz [ 33.094952][ T334] usb 2-1: SerialNumber: syz [ 33.095161][ T110] loop5: unable to read partition table [ 33.136256][ T347] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 33.305439][ T334] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 33.312337][ T334] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.323333][ T334] usb 2-1: USB disconnect, device number 3 [ 33.642836][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.793969][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.805240][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.815032][ T310] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 33.824260][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.831748][ T360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 33.839322][ T310] usb 4-1: config 0 descriptor?? [ 34.056401][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 34.062432][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.071540][ T310] usb 4-1: USB disconnect, device number 3 [ 34.216443][ T66] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 34.228442][ T66] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 34.241458][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 34.241476][ T36] audit: type=1400 audit(1786265364.020:157): avc: denied { write } for pid=378 comm="syz.0.18" name="sockstat6" dev="proc" ino=4026532359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.243738][ T66] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 34.285639][ T66] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 34.297242][ T66] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 34.307762][ T66] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 34.318047][ T66] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 34.328684][ T66] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 34.338723][ T66] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 34.348506][ T66] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 34.358742][ T66] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 34.368495][ T66] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 34.378463][ T66] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 34.389895][ T66] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 34.401020][ T66] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 34.412926][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.413005][ T66] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 34.432453][ T66] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 34.442807][ T66] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 34.453559][ T66] usb 1-1: USB disconnect, device number 2 [ 34.460291][ T45] usb 3-1: unit 4 not found! [ 34.472499][ T45] usb 3-1: USB disconnect, device number 2 [ 34.491449][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 34.564196][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.575397][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.587460][ T310] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 34.600645][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.609932][ T310] usb 4-1: config 0 descriptor?? [ 34.762799][ T66] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 34.772953][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.832836][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.912847][ T66] usb 1-1: Invalid ep0 maxpacket: 32 [ 34.922827][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 34.929469][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.938100][ T45] usb 3-1: config 0 has no interface number 0 [ 34.944501][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 34.956271][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 34.969116][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.977811][ T45] usb 3-1: config 0 has no interface number 0 [ 34.984299][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 34.990497][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 35.002713][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 35.015036][ T329] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.026940][ T45] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 35.036200][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.044992][ T45] usb 3-1: Product: syz [ 35.049606][ T45] usb 3-1: Manufacturer: syz [ 35.054313][ T66] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 35.061987][ T45] usb 3-1: SerialNumber: syz [ 35.066899][ T329] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 35.076213][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.085151][ T329] usb 2-1: Product: syz [ 35.089582][ T45] usb 3-1: config 0 descriptor?? [ 35.094609][ T329] usb 2-1: Manufacturer: syz [ 35.099244][ T329] usb 2-1: SerialNumber: syz [ 35.227948][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 35.232841][ T66] usb 1-1: Invalid ep0 maxpacket: 32 [ 35.234123][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.239865][ T66] usb usb1-port1: attempt power cycle [ 35.249445][ T310] usb 4-1: USB disconnect, device number 4 [ 35.314754][ T329] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 35.323973][ T329] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 35.332112][ T329] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 35.338845][ T36] audit: type=1400 audit(1786265365.110:158): avc: denied { read } for pid=335 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.358313][ T329] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.371439][ T329] usb 2-1: USB disconnect, device number 4 [ 35.392134][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 35.592824][ T66] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 35.613192][ T66] usb 1-1: Invalid ep0 maxpacket: 32 [ 35.743297][ T66] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 35.762418][ T36] audit: type=1400 audit(1786265365.540:159): avc: denied { create } for pid=387 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 35.782311][ T36] audit: type=1400 audit(1786265365.540:160): avc: denied { block_suspend } for pid=387 comm="syz.3.21" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.804116][ T66] usb 1-1: Invalid ep0 maxpacket: 32 [ 35.810070][ T66] usb usb1-port1: unable to enumerate USB device [ 35.836082][ T36] audit: type=1400 audit(1786265365.620:161): avc: denied { map } for pid=389 comm="syz.1.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.860436][ T36] audit: type=1400 audit(1786265365.620:162): avc: denied { write } for pid=389 comm="syz.1.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.885858][ T36] audit: type=1400 audit(1786265365.620:163): avc: denied { ioctl } for pid=389 comm="syz.1.22" path="socket:[3560]" dev="sockfs" ino=3560 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.911763][ T36] audit: type=1400 audit(1786265365.680:164): avc: denied { create } for pid=394 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.931942][ T36] audit: type=1400 audit(1786265365.680:165): avc: denied { ioctl } for pid=394 comm="syz.1.24" path="socket:[3575]" dev="sockfs" ino=3575 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.960401][ T36] audit: type=1400 audit(1786265365.700:166): avc: denied { create } for pid=387 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.202828][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.356869][ T9] usb 3-1: USB disconnect, device number 3 [ 36.362925][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 36.372024][ T310] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 36.382407][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.390571][ T310] usb 2-1: Product: syz [ 36.394936][ T310] usb 2-1: Manufacturer: syz [ 36.399619][ T310] usb 2-1: SerialNumber: syz [ 36.505162][ T405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.821004][ T397] size and base must be multiples of 4 kiB [ 36.833703][ T397] CPU: 0 UID: 0 PID: 397 Comm: syz.1.25 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 36.833742][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.833754][ T397] Call Trace: [ 36.833760][ T397] [ 36.833771][ T397] __dump_stack+0x21/0x30 [ 36.833809][ T397] dump_stack_lvl+0x140/0x1c0 [ 36.833840][ T397] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.833869][ T397] dump_stack+0x19/0x20 [ 36.833894][ T397] mtrr_del+0xcd/0xf0 [ 36.833921][ T397] mtrr_ioctl+0xbf8/0x1170 [ 36.833945][ T397] ? do_futex+0x37d/0x510 [ 36.833974][ T397] ? __cfi_mtrr_ioctl+0x10/0x10 [ 36.833999][ T397] ? __cfi_mtrr_ioctl+0x10/0x10 [ 36.834020][ T397] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 36.834045][ T397] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 36.834065][ T397] __se_sys_ioctl+0x135/0x1b0 [ 36.834088][ T397] __x64_sys_ioctl+0x7f/0xa0 [ 36.834114][ T397] x64_sys_call+0x1878/0x2ee0 [ 36.834132][ T397] do_syscall_64+0x57/0xf0 [ 36.834152][ T397] ? clear_bhb_loop+0x50/0xa0 [ 36.834180][ T397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.834205][ T397] RIP: 0033:0x7fc317b9e0d9 [ 36.834223][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.834239][ T397] RSP: 002b:00007fc3165e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.834266][ T397] RAX: ffffffffffffffda RBX: 00007fc317e25fa0 RCX: 00007fc317b9e0d9 [ 36.834282][ T397] RDX: 0000200000000900 RSI: 0000000040104d04 RDI: 0000000000000005 [ 36.834296][ T397] RBP: 00007fc317c35024 R08: 0000000000000000 R09: 0000000000000000 [ 36.834309][ T397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.834325][ T397] R13: 00007fc317e26038 R14: 00007fc317e25fa0 R15: 00007ffe2e4a0718 [ 36.834342][ T397] [ 36.892819][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.255374][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 37.269654][ T66] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 37.279061][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.292782][ T66] usb 4-1: Product: syz [ 37.297003][ T66] usb 4-1: Manufacturer: syz [ 37.310473][ T66] usb 4-1: SerialNumber: syz [ 37.533660][ T66] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.544830][ T66] usb 4-1: unit 3 not found! [ 37.566153][ T66] usb 4-1: USB disconnect, device number 5 [ 37.792821][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.838819][ T310] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 37.848792][ T310] usb 2-1: USB disconnect, device number 5 [ 37.942829][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 37.949720][ T9] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 37.957980][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.968128][ T9] usb 3-1: config 0 has no interface number 0 [ 37.975784][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 37.984967][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.993088][ T9] usb 3-1: Product: syz [ 37.997810][ T9] usb 3-1: Manufacturer: syz [ 38.002414][ T9] usb 3-1: SerialNumber: syz [ 38.007836][ T9] usb 3-1: config 0 descriptor?? [ 38.013833][ T9] rndis_host 3-1:0.180: skipping garbage [ 38.019793][ T9] usb 3-1: bad CDC descriptors [ 38.432838][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.582822][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 38.590756][ T45] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 38.600062][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.608710][ T45] usb 4-1: Product: syz [ 38.617046][ T45] usb 4-1: Manufacturer: syz [ 38.618379][ T436] Unsupported ieee802154 address type: 0 [ 38.621867][ T45] usb 4-1: SerialNumber: syz [ 38.668843][ T442] Zero length message leads to an empty skb [ 38.682825][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.834266][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.843938][ T9] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 38.854293][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 38.865386][ T9] usb 2-1: too many endpoints for config 1 interface 2 altsetting 145: 211, using maximum allowed: 30 [ 38.876402][ T9] usb 2-1: config 1 interface 2 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 38.889938][ T9] usb 2-1: config 1 interface 2 has no altsetting 1 [ 38.899925][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 38.909058][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.917177][ T9] usb 2-1: Product: syz [ 38.921389][ T9] usb 2-1: SerialNumber: syz [ 38.942835][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.072846][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.312803][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.444754][ T45] usb 4-1: MIDIStreaming interface descriptor not found [ 39.455093][ T9] usb 2-1: BAAD HEADSET c_chmask mismatch [ 39.466489][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.478525][ T9] usb 2-1: USB disconnect, device number 6 [ 39.490803][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 39.562842][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.635167][ T329] rust_binder: 432: undelivered transaction 4, process died [ 39.652816][ T329] rust_binder: 432: undelivered TRANSACTION_COMPLETE [ 39.654852][ T9] usb 4-1: USB disconnect, device number 6 [ 39.674629][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 39.674647][ T36] audit: type=1400 audit(1786265369.460:201): avc: denied { write } for pid=452 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.692797][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.701311][ T36] audit: type=1400 audit(1786265369.460:202): avc: denied { ioctl } for pid=452 comm="syz.1.42" path="socket:[4638]" dev="sockfs" ino=4638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.731562][ T36] audit: type=1400 audit(1786265369.460:203): avc: denied { bind } for pid=452 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.750685][ T36] audit: type=1400 audit(1786265369.460:204): avc: denied { connect } for pid=452 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.770063][ T36] audit: type=1400 audit(1786265369.460:205): avc: denied { read } for pid=452 comm="syz.1.42" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.792703][ T36] audit: type=1400 audit(1786265369.460:206): avc: denied { open } for pid=452 comm="syz.1.42" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.815625][ T36] audit: type=1400 audit(1786265369.460:207): avc: denied { ioctl } for pid=452 comm="syz.1.42" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.942821][ T310] usb 1-1: device descriptor read/64, error -71 [ 40.052916][ T310] usb usb1-port1: attempt power cycle [ 40.311263][ T465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 40.333573][ T36] audit: type=1400 audit(1786265370.120:208): avc: denied { mount } for pid=466 comm="syz.3.47" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.350261][ T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.365807][ T36] audit: type=1400 audit(1786265370.160:209): avc: denied { search } for pid=466 comm="syz.3.47" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.378140][ T467] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.388026][ T36] audit: type=1400 audit(1786265370.160:210): avc: denied { read } for pid=466 comm="syz.3.47" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.421518][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.443862][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.522804][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 40.530691][ T329] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 40.540007][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.548155][ T329] usb 2-1: Product: syz [ 40.552381][ T329] usb 2-1: Manufacturer: syz [ 40.552769][ T9] usb 3-1: USB disconnect, device number 4 [ 40.557056][ T329] usb 2-1: SerialNumber: syz [ 40.583891][ T310] usb 1-1: device descriptor read/8, error -71 [ 40.612756][ T472] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 40.832850][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.853870][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.003126][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.032828][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.112911][ T310] usb usb1-port1: unable to enumerate USB device [ 41.202864][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.210688][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 41.217468][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 41.225694][ T9] usb 3-1: config 0 has no interface number 0 [ 41.231986][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 41.242681][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 41.255214][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 41.264717][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.273130][ T9] usb 3-1: Product: syz [ 41.277464][ T9] usb 3-1: Manufacturer: syz [ 41.282277][ T9] usb 3-1: SerialNumber: syz [ 41.288286][ T9] usb 3-1: config 0 descriptor?? [ 41.293748][ T475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.301482][ T475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.362774][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 41.369315][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.378015][ T10] usb 4-1: config 9 has an invalid interface number: 5 but max is 1 [ 41.386186][ T10] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 41.396655][ T10] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 41.405723][ T10] usb 4-1: config 9 has no interface number 0 [ 41.411898][ T10] usb 4-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 41.424094][ T10] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.434055][ T10] usb 4-1: config 9 interface 5 has no altsetting 0 [ 41.442195][ T10] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 41.451319][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.459349][ T10] usb 4-1: Product: syz [ 41.463739][ T10] usb 4-1: Manufacturer: syz [ 41.468532][ T10] usb 4-1: SerialNumber: syz [ 41.509712][ T475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.517771][ T475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.678377][ T10] usb 4-1: USB disconnect, device number 7 [ 41.728507][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 41.987432][ T329] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 41.997724][ T329] usb 2-1: USB disconnect, device number 7 [ 42.112803][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.189410][ T491] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 42.198785][ T491] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 42.209267][ T493] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 42.267262][ T506] overlay: filesystem on ./file0 not supported as upperdir [ 42.285608][ T311] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 42.296237][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.299558][ T508] netlink: 9 bytes leftover after parsing attributes in process `syz.3.59'. [ 42.305501][ T311] usb 1-1: config 0 descriptor?? [ 42.318238][ T508] gretap0: entered promiscuous mode [ 42.635240][ T526] netlink: 'syz.1.63': attribute type 28 has an invalid length. [ 42.721895][ T311] usb 1-1: Cannot read MAC address [ 42.727470][ T311] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 42.740978][ T311] usb 1-1: USB disconnect, device number 11 [ 43.178625][ T475] mmap: syz.2.49 (475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.214402][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 43.225083][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 43.236765][ T9] asix 3-1:0.34: probe with driver asix failed with error -71 [ 43.247024][ T9] usb 3-1: USB disconnect, device number 5 [ 43.502861][ T329] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.546101][ T562] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 43.554031][ T562] netlink: 'syz.3.73': attribute type 32 has an invalid length. [ 43.565604][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.612824][ T334] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.654011][ T329] usb 1-1: config 0 has no interfaces? [ 43.661332][ T329] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 43.670463][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.679164][ T329] usb 1-1: SerialNumber: syz [ 43.685130][ T329] usb 1-1: config 0 descriptor?? [ 43.739282][ T566] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 43.763629][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 43.771385][ T334] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 43.780597][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.788641][ T334] usb 2-1: Product: syz [ 43.792907][ T334] usb 2-1: Manufacturer: syz [ 43.797642][ T334] usb 2-1: SerialNumber: syz [ 43.891014][ T45] usb 1-1: USB disconnect, device number 12 [ 43.982850][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.132780][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 44.139119][ T311] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 44.149385][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.159977][ T311] usb 3-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 44.169111][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.177186][ T311] usb 3-1: Product: syz [ 44.181449][ T311] usb 3-1: Manufacturer: syz [ 44.186096][ T311] usb 3-1: SerialNumber: syz [ 44.393105][ T311] usb 3-1: 0:1 : does not exist [ 44.404996][ T311] usb 3-1: unit 4 not found! [ 44.409661][ T311] usb 3-1: unit 8 not found! [ 44.421008][ T311] usb 3-1: unit 0 not found! [ 44.445326][ T311] usb 3-1: USB disconnect, device number 6 [ 44.457237][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.672810][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 44.822799][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 44.829221][ T45] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 44.837486][ T45] usb 1-1: config 0 has no interface number 0 [ 44.843755][ T45] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 44.855531][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 44.864637][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.872637][ T45] usb 1-1: Product: syz [ 44.876844][ T45] usb 1-1: Manufacturer: syz [ 44.881554][ T45] usb 1-1: SerialNumber: syz [ 44.886930][ T45] usb 1-1: config 0 descriptor?? [ 44.892197][ T571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 44.918527][ T573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=573 comm=syz.2.76 [ 44.931499][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 44.931516][ T36] audit: type=1400 audit(1786265374.710:236): avc: denied { setattr } for pid=572 comm="syz.2.76" name="/" dev="incremental-fs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.999300][ T36] audit: type=1400 audit(1786265374.780:237): avc: denied { mount } for pid=574 comm="syz.2.77" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.058110][ T575] kvm: kvm [574]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 45.067249][ T575] kvm: kvm [574]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 45.096422][ T575] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 45.101180][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.105020][ T575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=999003245 (15984051920 ns) > initial count (4653899648 ns). Using initial count to start timer. [ 45.114020][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.139672][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.148677][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.156939][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.165485][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.174292][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.183975][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.193012][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.201518][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.212322][ T570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.222065][ T334] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 45.231918][ T45] asix 1-1:0.188: probe with driver asix failed with error -71 [ 45.242930][ T36] audit: type=1400 audit(1786265375.030:238): avc: denied { read } for pid=579 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.247800][ T334] usb 2-1: USB disconnect, device number 8 [ 45.275277][ T45] usb 1-1: USB disconnect, device number 13 [ 45.281478][ T36] audit: type=1400 audit(1786265375.050:239): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.345806][ T36] audit: type=1400 audit(1786265375.130:240): avc: denied { write } for pid=591 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.552856][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.570279][ T595] fuse: root generation should be zero [ 45.588695][ T36] audit: type=1400 audit(1786265375.370:241): avc: denied { setopt } for pid=599 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.608320][ T564] Bluetooth: hci0: command 0x1003 tx timeout [ 45.609229][ T36] audit: type=1400 audit(1786265375.370:242): avc: denied { read } for pid=599 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.622862][ T563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.658690][ T36] audit: type=1400 audit(1786265375.430:243): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.712841][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 45.720800][ T311] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 45.729753][ T311] usb 3-1: config 179 has no interface number 0 [ 45.737394][ T311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 45.748930][ T311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 45.760630][ T311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 45.773124][ T311] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 45.795187][ T311] usb 3-1: config 179 interface 65 has no altsetting 0 [ 45.802122][ T311] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 45.811343][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.837320][ T36] audit: type=1400 audit(1786265375.620:244): avc: denied { name_bind } for pid=616 comm="syz.3.90" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.862131][ T311] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 45.902065][ T36] audit: type=1400 audit(1786265375.670:245): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=518 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.933408][ T95] input input5: unable to receive magic message: -110 [ 45.953008][ T623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 45.979815][ T95] input input5: unable to receive magic message: -32 [ 46.040015][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.212838][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.333094][ T334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.344889][ T45] usb 2-1: device descriptor read/64, error -71 [ 46.482841][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 46.489604][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.500969][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.511097][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.526157][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.538895][ T334] usb 4-1: config 0 descriptor?? [ 46.548884][ T334] hub 4-1:0.0: USB hub found [ 46.582789][ T45] usb 2-1: device descriptor read/64, error -71 [ 46.635649][ T636] coredump: 64(syz.0.95): Core dump to core aborted: cannot preserve file permissions [ 46.745133][ T334] hub 4-1:0.0: 29 ports detected [ 46.746377][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.750939][ T334] hub 4-1:0.0: insufficient power available to use all downstream ports [ 46.759113][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.842823][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.980729][ T334] usb 4-1: USB disconnect, device number 8 [ 46.986678][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.232822][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.342968][ T45] usb usb2-port1: attempt power cycle [ 47.682828][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.703974][ T45] usb 2-1: device descriptor read/8, error -71 [ 47.722852][ T334] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.833965][ T45] usb 2-1: device descriptor read/8, error -71 [ 47.872808][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 47.880456][ T334] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 47.889643][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.897778][ T334] usb 4-1: Product: syz [ 47.902038][ T334] usb 4-1: Manufacturer: syz [ 47.906671][ T334] usb 4-1: SerialNumber: syz [ 48.072798][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.082799][ T564] Bluetooth: hci0: command 0x1003 tx timeout [ 48.083033][ T563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.093882][ T45] usb 2-1: device descriptor read/8, error -71 [ 48.097097][ T311] usb 3-1: USB disconnect, device number 7 [ 48.101291][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 48.116252][ T311] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 48.223752][ T45] usb 2-1: device descriptor read/8, error -71 [ 48.332912][ T45] usb usb2-port1: unable to enumerate USB device [ 48.665610][ T659] netlink: 188 bytes leftover after parsing attributes in process `syz.2.101'. [ 48.952794][ T311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 49.103995][ T311] usb 3-1: config 11 has an invalid interface number: 153 but max is 0 [ 49.112489][ T311] usb 3-1: config 11 has no interface number 0 [ 49.120449][ T311] usb 3-1: config 11 interface 153 has no altsetting 0 [ 49.129307][ T311] usb 3-1: New USB device found, idVendor=19d2, idProduct=f3ab, bcdDevice=b5.bd [ 49.138685][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.146934][ T311] usb 3-1: Product: syz [ 49.151120][ T311] usb 3-1: Manufacturer: syz [ 49.155997][ T311] usb 3-1: SerialNumber: syz [ 49.328534][ T334] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 49.341939][ T334] usb 4-1: USB disconnect, device number 9 [ 49.363816][ T311] usb 3-1: bad CDC descriptors [ 49.370971][ T311] usb 3-1: USB disconnect, device number 8 [ 49.452806][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.582826][ T45] usb 2-1: device descriptor read/64, error -71 [ 49.830667][ T45] usb 2-1: device descriptor read/64, error -71 [ 49.893550][ T697] tmpfs: Unknown parameter 'noinode32' [ 49.899565][ T698] netlink: 64 bytes leftover after parsing attributes in process `syz.2.110'. [ 49.923464][ T697] tipc: Started in network mode [ 49.928743][ T697] tipc: Node identity ac14140f, cluster identity 4711 [ 49.953293][ T697] tipc: Enabled bearer , priority 10 [ 50.012101][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 50.012119][ T36] audit: type=1400 audit(1786265379.790:253): avc: denied { write } for pid=701 comm="syz.2.111" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.072793][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.108044][ T705] can0: slcan on ttyS3. [ 50.122766][ T36] audit: type=1400 audit(1786265379.900:254): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.162819][ T36] audit: type=1400 audit(1786265379.900:255): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.202792][ T36] audit: type=1400 audit(1786265379.900:256): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.232954][ T45] usb 2-1: device descriptor read/64, error -71 [ 50.242770][ T36] audit: type=1400 audit(1786265379.900:257): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.282899][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.300925][ T36] audit: type=1400 audit(1786265379.900:258): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.324536][ T36] audit: type=1400 audit(1786265379.940:259): avc: denied { read } for pid=708 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.348517][ T36] audit: type=1400 audit(1786265379.940:260): avc: denied { open } for pid=708 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.374395][ T36] audit: type=1400 audit(1786265379.940:261): avc: denied { getattr } for pid=708 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.400574][ T36] audit: type=1400 audit(1786265379.990:262): avc: denied { write } for pid=707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.412783][ T311] usb 4-1: device descriptor read/64, error -71 [ 50.552786][ T45] usb 2-1: device descriptor read/64, error -71 [ 50.662823][ T311] usb 4-1: device descriptor read/64, error -71 [ 50.666111][ T45] usb usb2-port1: attempt power cycle [ 50.883988][ T701] can0 (unregistered): slcan off ttyS3. [ 50.912868][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.014160][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.059896][ T45] usb 2-1: device descriptor read/8, error -71 [ 51.072791][ T311] usb 4-1: device descriptor read/64, error -71 [ 51.085049][ T334] tipc: Node number set to 2886997007 [ 51.233625][ T45] usb 2-1: device descriptor read/8, error -71 [ 51.292772][ T329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.312795][ T311] usb 4-1: device descriptor read/64, error -71 [ 51.432790][ T311] usb usb4-port1: attempt power cycle [ 51.452789][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 51.463831][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.481652][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.491566][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 51.511081][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.531855][ T329] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.541452][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.549992][ T45] usb 2-1: device descriptor read/8, error -71 [ 51.563010][ T329] usb 3-1: config 0 descriptor?? [ 51.693576][ T45] usb 2-1: device descriptor read/8, error -71 [ 51.772788][ T311] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.793844][ T311] usb 4-1: device descriptor read/8, error -71 [ 51.812901][ T45] usb usb2-port1: unable to enumerate USB device [ 51.924695][ T311] usb 4-1: device descriptor read/8, error -71 [ 51.975702][ T329] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 51.988392][ T329] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 52.163326][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.182642][ T310] usb 3-1: USB disconnect, device number 9 [ 52.207269][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.343957][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.452906][ T311] usb usb4-port1: unable to enumerate USB device [ 52.562806][ T356] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 52.715279][ T356] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 52.726780][ T356] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.737692][ T356] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 52.752226][ T356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.761579][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.770183][ T356] usb 2-1: SerialNumber: syz [ 52.770815][ T834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.123'. [ 52.982536][ T356] cdc_acm 2-1:1.0: skipping garbage [ 52.991213][ T356] usb 2-1: USB disconnect, device number 17 [ 53.031541][ T334] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.040037][ T334] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.222848][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.372841][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 53.379195][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.389469][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.399974][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.409327][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.417339][ T45] usb 3-1: Product: syz [ 53.421578][ T45] usb 3-1: Manufacturer: syz [ 53.426579][ T45] usb 3-1: SerialNumber: syz [ 53.633396][ T854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.642325][ T854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.661209][ T45] usb 3-1: 0:2 : does not exist [ 53.668999][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 53.685355][ T45] usb 3-1: USB disconnect, device number 10 [ 53.698660][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.772802][ T329] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.902799][ T329] usb 2-1: device descriptor read/64, error -71 [ 54.012848][ T311] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 54.142877][ T329] usb 2-1: device descriptor read/64, error -71 [ 54.164021][ T311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 54.179591][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 54.190747][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 54.204155][ T311] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 54.213420][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.222118][ T311] usb 4-1: config 0 descriptor?? [ 54.227651][ T871] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 54.382836][ T329] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 54.422883][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.512816][ T329] usb 2-1: device descriptor read/64, error -71 [ 54.574042][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.584221][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.594604][ T45] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 54.603710][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.611714][ T45] usb 3-1: Product: syz [ 54.615937][ T45] usb 3-1: Manufacturer: syz [ 54.620554][ T45] usb 3-1: SerialNumber: syz [ 54.639002][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x2 [ 54.646782][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.654351][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.662129][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.670901][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.678697][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.686322][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.694165][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.701662][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.709182][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.716718][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.724231][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.731802][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.739609][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.747318][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.754880][ T329] usb 2-1: device descriptor read/64, error -71 [ 54.755150][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.773586][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.781134][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.788710][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.796237][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.803748][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.811236][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.818738][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.826242][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.833746][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.838244][ T45] usb 3-1: 0:1 : does not exist [ 54.841730][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.848943][ T45] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 54.854295][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.861725][ T45] usb 3-1: unit 80 not found! [ 54.869026][ T311] holtek_mouse 0003:04D9:A070.0004: unknown main item tag 0x0 [ 54.873941][ T329] usb usb2-port1: attempt power cycle [ 54.882400][ T311] holtek_mouse 0003:04D9:A070.0004: hidraw0: USB HID v0.01 Device [HID 04d9:a070] on usb-dummy_hcd.3-1/input0 [ 54.901864][ T45] usb 3-1: USB disconnect, device number 11 [ 54.905209][ T311] usb 4-1: USB disconnect, device number 14 [ 54.915035][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.222851][ T329] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 55.244040][ T329] usb 2-1: device descriptor read/8, error -71 [ 55.372261][ T881] netlink: 128 bytes leftover after parsing attributes in process `syz.3.140'. [ 55.383993][ T329] usb 2-1: device descriptor read/8, error -71 [ 55.420195][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 55.420214][ T36] audit: type=1400 audit(1786265385.200:281): avc: denied { connect } for pid=879 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.622863][ T329] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 55.643870][ T329] usb 2-1: device descriptor read/8, error -71 [ 55.732816][ T311] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.773995][ T329] usb 2-1: device descriptor read/8, error -71 [ 55.882812][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 55.882929][ T329] usb usb2-port1: unable to enumerate USB device [ 55.889228][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.904841][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.915026][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.924223][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.932590][ T311] usb 3-1: Product: syz [ 55.936956][ T311] usb 3-1: Manufacturer: syz [ 55.941695][ T311] usb 3-1: SerialNumber: syz [ 56.058782][ T36] audit: type=1400 audit(1786265385.840:282): avc: denied { read } for pid=890 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.150002][ T311] usb 3-1: 0:2 : does not exist [ 56.157841][ T311] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 56.172677][ T311] usb 3-1: USB disconnect, device number 12 [ 56.542831][ T329] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 56.619580][ T36] audit: type=1400 audit(1786265386.400:283): avc: denied { read } for pid=901 comm="syz.1.149" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 56.644030][ T36] audit: type=1400 audit(1786265386.400:284): avc: denied { open } for pid=901 comm="syz.1.149" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 56.672098][ T36] audit: type=1400 audit(1786265386.440:285): avc: denied { setopt } for pid=904 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.722793][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 56.730496][ T329] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 56.739981][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.748426][ T329] usb 4-1: Product: syz [ 56.752624][ T329] usb 4-1: Manufacturer: syz [ 56.759866][ T329] usb 4-1: SerialNumber: syz [ 57.324909][ T36] audit: type=1400 audit(1786265387.110:286): avc: denied { setopt } for pid=919 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.576016][ T932] netlink: 393 bytes leftover after parsing attributes in process `syz.1.159'. [ 57.805745][ T36] audit: type=1404 audit(1786265387.590:287): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 57.837642][ T36] audit: type=1400 audit(1786265387.610:288): avc: denied { create } for pid=934 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 57.859385][ T36] audit: type=1400 audit(1786265387.610:289): avc: denied { create } for pid=934 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 57.880886][ T36] audit: type=1400 audit(1786265387.610:290): avc: denied { setopt } for pid=934 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 57.921809][ T941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 57.931736][ T941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 57.975297][ T329] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 57.993464][ T329] usb 4-1: USB disconnect, device number 15 [ 60.424396][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 60.424416][ T36] audit: type=1326 audit(1786265390.210:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.1.182" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc317b9e0d9 code=0x0 [ 60.972634][ T36] audit: type=1400 audit(1786265390.750:364): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.047417][ T36] audit: type=1400 audit(1786265390.830:365): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.079634][ T36] audit: type=1400 audit(1786265390.860:366): avc: denied { read write } for pid=998 comm="syz.0.184" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.108254][ T36] audit: type=1400 audit(1786265390.860:367): avc: denied { read write } for pid=998 comm="syz.0.184" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.131944][ T36] audit: type=1400 audit(1786265390.860:368): avc: denied { read write } for pid=998 comm="syz.0.184" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.155519][ T36] audit: type=1400 audit(1786265390.860:369): avc: denied { create } for pid=998 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 61.175160][ T36] audit: type=1400 audit(1786265390.860:370): avc: denied { read } for pid=998 comm="syz.0.184" name="userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.201237][ T36] audit: type=1400 audit(1786265390.860:371): avc: denied { read write } for pid=998 comm="syz.0.184" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.607167][ T36] audit: type=1400 audit(1786265391.390:372): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.609782][ T36] kauditd_printk_skb: 153 callbacks suppressed [ 65.609800][ T36] audit: type=1400 audit(1786265395.390:526): avc: denied { write } for pid=1081 comm="syz.0.213" name="ptype" dev="proc" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 65.647201][ T36] audit: type=1400 audit(1786265395.430:527): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.674331][ T36] audit: type=1400 audit(1786265395.430:528): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.713973][ T36] audit: type=1400 audit(1786265395.450:529): avc: denied { name_bind } for pid=1086 comm="syz.0.214" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 65.742038][ T36] audit: type=1400 audit(1786265395.450:530): avc: denied { name_bind } for pid=1086 comm="syz.0.214" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 65.764146][ T36] audit: type=1400 audit(1786265395.450:531): avc: denied { name_bind } for pid=1086 comm="syz.0.214" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 65.786417][ T36] audit: type=1400 audit(1786265395.450:532): avc: denied { name_bind } for pid=1086 comm="syz.0.214" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 65.815425][ T36] audit: type=1400 audit(1786265395.460:533): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.840245][ T36] audit: type=1400 audit(1786265395.480:534): avc: denied { read } for pid=1091 comm="syz.0.216" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 65.863827][ T36] audit: type=1400 audit(1786265395.500:535): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.604819][ T1114] capability: warning: `syz.1.222' uses deprecated v2 capabilities in a way that may be insecure [ 66.727380][ T563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.926881][ T772] bridge_slave_1: left allmulticast mode [ 67.943077][ T772] bridge_slave_1: left promiscuous mode [ 67.949073][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.963358][ T772] bridge_slave_0: left allmulticast mode [ 67.969069][ T772] bridge_slave_0: left promiscuous mode [ 67.992837][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.107683][ T772] veth1_macvtap: left promiscuous mode [ 68.113416][ T772] veth0_vlan: left promiscuous mode [ 71.045302][ T36] kauditd_printk_skb: 175 callbacks suppressed [ 71.045322][ T36] audit: type=1400 audit(1786265400.830:711): avc: denied { read write } for pid=1193 comm="syz.0.249" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 71.086156][ T36] audit: type=1400 audit(1786265400.860:712): avc: denied { execmem } for pid=1192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 71.118432][ T36] audit: type=1400 audit(1786265400.860:713): avc: denied { create } for pid=1195 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 71.145492][ T36] audit: type=1400 audit(1786265400.860:714): avc: denied { create } for pid=1195 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 71.166325][ T36] audit: type=1400 audit(1786265400.870:715): avc: denied { create } for pid=1195 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 71.188292][ T36] audit: type=1400 audit(1786265400.870:716): avc: denied { sys_module } for pid=1195 comm="syz.1.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 71.209488][ T36] audit: type=1400 audit(1786265400.870:717): avc: denied { sys_module } for pid=1195 comm="syz.1.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 71.236839][ T36] audit: type=1400 audit(1786265400.870:718): avc: denied { sys_module } for pid=1195 comm="syz.1.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 71.259950][ T36] audit: type=1400 audit(1786265400.870:719): avc: denied { sys_module } for pid=1195 comm="syz.1.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 71.281616][ T36] audit: type=1400 audit(1786265400.870:720): avc: denied { sys_module } for pid=1195 comm="syz.1.250" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 74.257951][ T772] bridge_slave_1: left allmulticast mode [ 74.264091][ T772] bridge_slave_1: left promiscuous mode [ 74.270334][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.279879][ T772] bridge_slave_0: left allmulticast mode [ 74.286241][ T772] bridge_slave_0: left promiscuous mode [ 74.292971][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.442309][ T772] tipc: Disabling bearer [ 74.448458][ T772] tipc: Left network mode [ 74.465252][ T772] veth1_macvtap: left promiscuous mode [ 74.470826][ T772] veth0_vlan: left promiscuous mode [ 74.723726][ T772] ------------[ cut here ]------------ [ 74.729472][ T772] WARNING: CPU: 1 PID: 772 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 74.740229][ T772] Modules linked in: [ 74.744489][ T772] CPU: 1 UID: 0 PID: 772 Comm: kworker/u8:15 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 74.756304][ T772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.766677][ T772] Workqueue: netns cleanup_net [ 74.771467][ T772] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 74.777502][ T772] Code: e8 b1 5e d6 fc 4b 83 3c 3e 00 75 19 e8 35 9a 7d fc 49 81 ff f8 07 00 00 74 1b e8 27 9a 7d fc 49 83 c7 08 eb c9 e8 1c 9a 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 74.797244][ T772] RSP: 0018:ffffc9000e8b7b90 EFLAGS: 00010293 [ 74.803432][ T772] RAX: ffffffff8509d7a4 RBX: ffff888128192380 RCX: ffff8881320f2600 [ 74.811433][ T772] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881047b80b8 [ 74.819434][ T772] RBP: ffffc9000e8b7bb0 R08: ffffffff87d42827 R09: 1ffffffff0fa8504 [ 74.827453][ T772] R10: dffffc0000000000 R11: fffffbfff0fa8505 R12: dffffc0000000000 [ 74.835457][ T772] R13: dffffc0000000000 R14: ffff8881047b8000 R15: 00000000000000b8 [ 74.843480][ T772] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.852418][ T772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.859027][ T772] CR2: 000056241341f1f0 CR3: 000000010cfce000 CR4: 00000000003526b0 [ 74.867054][ T772] Call Trace: [ 74.870434][ T772] [ 74.873407][ T772] cleanup_net+0x6ba/0xc90 [ 74.877876][ T772] ? __cfi_cleanup_net+0x10/0x10 [ 74.882867][ T772] ? kick_pool+0xb9/0x540 [ 74.887215][ T772] process_scheduled_works+0x7f7/0x1060 [ 74.892804][ T772] worker_thread+0xc99/0x13f0 [ 74.897591][ T772] kthread+0x2c7/0x360 [ 74.901696][ T772] ? __cfi_worker_thread+0x10/0x10 [ 74.906832][ T772] ? __cfi_kthread+0x10/0x10 [ 74.911463][ T772] ret_from_fork+0x67/0xa0 [ 74.915994][ T772] ? __cfi_kthread+0x10/0x10 [ 74.920600][ T772] ret_from_fork_asm+0x1a/0x30 [ 74.925402][ T772] [ 74.928435][ T772] ---[ end trace 0000000000000000 ]--- [ 74.934433][ T772] ------------[ cut here ]------------ [ 74.940721][ T772] WARNING: CPU: 0 PID: 772 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 74.951828][ T772] Modules linked in: [ 74.955967][ T772] CPU: 0 UID: 0 PID: 772 Comm: kworker/u8:15 Tainted: G W syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 74.969738][ T772] Tainted: [W]=WARN [ 74.974420][ T772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.984637][ T772] Workqueue: netns cleanup_net [ 74.989464][ T772] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 74.995596][ T772] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 e0 99 7d fc 49 81 ff f8 07 00 00 74 1b e8 d2 99 7d fc 49 83 c7 08 eb c5 e8 c7 99 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 b7 99 7d fc 5b 41 5c 41 5e 41 [ 75.016073][ T772] RSP: 0018:ffffc9000e8b7b90 EFLAGS: 00010293 [ 75.022145][ T772] RAX: ffffffff8509d7f9 RBX: ffff8881047b8800 RCX: ffff8881320f2600 [ 75.031454][ T772] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881047b8808 [ 75.039745][ T772] RBP: ffffc9000e8b7bb0 R08: ffffffff87d42827 R09: 1ffffffff0fa8504 [ 75.048206][ T772] R10: dffffc0000000000 R11: fffffbfff0fa8505 R12: dffffc0000000000 [ 75.056407][ T772] R13: dffffc0000000000 R14: ffff8881047b8000 R15: 0000000000000008 [ 75.064410][ T772] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 75.073399][ T772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.080339][ T772] CR2: 000056241342eaf8 CR3: 000000010c7cc000 CR4: 00000000003526b0 [ 75.088575][ T772] Call Trace: [ 75.091874][ T772] [ 75.094857][ T772] cleanup_net+0x6ba/0xc90 [ 75.099837][ T772] ? __cfi_cleanup_net+0x10/0x10 [ 75.104867][ T772] ? kick_pool+0xb9/0x540 [ 75.109236][ T772] process_scheduled_works+0x7f7/0x1060 [ 75.115137][ T772] worker_thread+0xc99/0x13f0 [ 75.120031][ T772] kthread+0x2c7/0x360 [ 75.124182][ T772] ? __cfi_worker_thread+0x10/0x10 [ 75.129330][ T772] ? __cfi_kthread+0x10/0x10 [ 75.133994][ T772] ret_from_fork+0x67/0xa0 [ 75.138470][ T772] ? __cfi_kthread+0x10/0x10 [ 75.143106][ T772] ret_from_fork_asm+0x1a/0x30 [ 75.147931][ T772] [ 75.150961][ T772] ---[ end trace 0000000000000000 ]--- [ 75.158596][ T772] ------------[ cut here ]------------ [ 75.164100][ T772] WARNING: CPU: 0 PID: 772 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 75.174857][ T772] Modules linked in: [ 75.179135][ T772] CPU: 0 UID: 0 PID: 772 Comm: kworker/u8:15 Tainted: G W syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 75.192790][ T772] Tainted: [W]=WARN [ 75.196607][ T772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.207977][ T772] Workqueue: netns cleanup_net [ 75.212824][ T772] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 75.218540][ T772] Code: 3c 20 00 74 08 48 89 df e8 ef 1c f1 fc 48 8b 3b e8 17 0f dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 85 b7 00 cc e8 62 58 98 fc <0f> 0b e9 b0 fd ff ff e8 56 58 98 fc 0f 0b e9 18 fe ff ff e8 4a 58 [ 75.239012][ T772] RSP: 0018:ffffc9000e8b7b70 EFLAGS: 00010293 [ 75.245143][ T772] RAX: ffffffff84ef195e RBX: ffff888128192380 RCX: ffff8881320f2600 [ 75.253714][ T772] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881320f2600 [ 75.262785][ T772] RBP: ffffc9000e8b7b98 R08: ffffffff87d42827 R09: 1ffffffff0fa8504 [ 75.271900][ T772] R10: dffffc0000000000 R11: fffffbfff0fa8505 R12: 1ffffffff0fa8258 [ 75.279943][ T772] R13: dffffc0000000000 R14: ffff888128192f80 R15: dffffc0000000000 [ 75.288083][ T772] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 75.297056][ T772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.303882][ T772] CR2: 000056241342eaf8 CR3: 000000010c7cc000 CR4: 00000000003526b0 [ 75.312154][ T772] Call Trace: [ 75.315705][ T772] [ 75.318666][ T772] xfrm_net_exit+0x31/0x80 [ 75.323280][ T772] cleanup_net+0x6ba/0xc90 [ 75.327751][ T772] ? __cfi_cleanup_net+0x10/0x10 [ 75.333010][ T772] ? kick_pool+0xb9/0x540 [ 75.337371][ T772] process_scheduled_works+0x7f7/0x1060 [ 75.343522][ T772] worker_thread+0xc99/0x13f0 [ 75.348501][ T772] kthread+0x2c7/0x360 [ 75.352579][ T772] ? __cfi_worker_thread+0x10/0x10 [ 75.357844][ T772] ? __cfi_kthread+0x10/0x10 [ 75.362608][ T772] ret_from_fork+0x67/0xa0 [ 75.367133][ T772] ? __cfi_kthread+0x10/0x10 [ 75.371747][ T772] ret_from_fork_asm+0x1a/0x30 [ 75.376569][ T772] [ 75.379675][ T772] ---[ end trace 0000000000000000 ]--- [ 75.405077][ T772] bridge_slave_1: left allmulticast mode [ 75.410783][ T772] bridge_slave_1: left promiscuous mode [ 75.416564][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.424224][ T772] bridge_slave_0: left allmulticast mode [ 75.430052][ T772] bridge_slave_0: left promiscuous mode [ 75.435855][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.444275][ T772] bridge_slave_1: left allmulticast mode [ 75.450014][ T772] bridge_slave_1: left promiscuous mode [ 75.455784][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.463209][ T772] bridge_slave_0: left allmulticast mode [ 75.468935][ T772] bridge_slave_0: left promiscuous mode [ 75.474760][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.646049][ T772] veth1_macvtap: left promiscuous mode [ 75.651795][ T772] veth0_vlan: left promiscuous mode [ 75.657540][ T772] veth1_macvtap: left promiscuous mode [ 75.663191][ T772] veth0_vlan: left promiscuous mode [ 79.802742][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 79.802760][ T36] audit: type=1400 audit(1786265409.590:800): avc: denied { read } for pid=1245 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 79.831771][ T36] audit: type=1400 audit(1786265409.590:801): avc: denied { read } for pid=1245 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 79.892791][ T36] audit: type=1400 audit(1786265409.670:802): avc: denied { use } for pid=1246 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 [ 79.914966][ T36] audit: type=1400 audit(1786265409.670:803): avc: denied { use } for pid=1246 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 [ 79.937177][ T36] audit: type=1400 audit(1786265409.680:804): avc: denied { use } for pid=1246 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 [ 79.959343][ T36] audit: type=1400 audit(1786265409.680:805): avc: denied { read } for pid=1247 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 79.983598][ T36] audit: type=1400 audit(1786265409.680:806): avc: denied { read } for pid=1247 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 80.053832][ T36] audit: type=1400 audit(1786265409.850:807): avc: denied { use } for pid=1249 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 The system is g[ 80.076123][ T36] audit: type=1400 audit(1786265409.850:808): avc: denied { use } for pid=1249 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 Sent SIGTERM to all processes acpid: exiting [ 80.121613][ T36] audit: type=1400 audit(1786265409.850:809): avc: denied { use } for pid=1249 comm="sh" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=0 Sent SIGKILL to all processes Requesting system poweroff [ 82.157270][ T1256] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 82.164508][ T1256] ACPI: PM: Preparing to enter system sleep state S5 [ 82.171793][ T1256] kvm: exiting hardware virtualization [ 82.177321][ T1256] reboot: Power down serialport: VM disconnected.