last executing test programs: 32.006274731s ago: executing program 3 (id=801): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000100000100dffddbdf25070000f61600000008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pread64(r1, 0x0, 0x0, 0x9) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, "0020742010080000060000000000fffb00"}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000200)=ANY=[]) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x1e0, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x1e0}}, 0x20000000) 31.999594411s ago: executing program 3 (id=802): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x6c, &(0x7f0000002600)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000200000000000020ce478081b7ef2ebceb8737baa16599c3ce3c603c77ba51255c51887fb0b1c86299cccf2e39fa297da1b4ea96a994fc945410a4105310299b57685b68"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001dc0)={0x2c, &(0x7f0000000a80)={0x0, 0x11, 0xb3, {0xb3, 0x2, "2a4da87b3dc94631501b9695957f195d50f44cc4f2b82644e61869f41efa7fb072877e1b9ff1f9de28fa10085d8566800916e0055392dc2a966f5f2d76f9c09354a811ab52cd4443847fb06ec58c23b11ece28482830b2e2708834318bee68ede0e8604f6ba2006550f962659e25e9ffcd6eaa735fffc8ca6bd6e24ae82072e2dbac153183154f3064bfa19b592941130bb47736f96ce76a6ec0aabcc7b08181a59ad83938377f5dd843fb2b83d669b64b"}}, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000001d00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x1, 0x4, "56a3092f", "636052e4"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x64, 0x3, 0x6, 0x0, 0x1, 0x4, 0x4}}}, &(0x7f0000002200)={0x84, &(0x7f0000001e00)={0x20, 0x18, 0xa, "5facc11cfbc9411a1489"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x1b}, &(0x7f0000001ec0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "20a8"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002040)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002080)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000020c0)={0x40, 0x19, 0x2, "79a4"}, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000002180)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0x3f}}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={{0x0, 0x2710}, {r3, r4/1000+60000}}) syz_usb_connect$uac2(0x0, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107600b080b010101ff200509040000000101200009240106000b1500070c24030501035d02008b000109040100000102200009040101010102200006240201003e102401050103030000000309010000cd09050109d3"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000025c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002500), 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x6, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0x1, 0x3d, {0x3d, 0x9, "8218eaf1a2b25df095d864f9aee44b6699d44ddbd3234599048eb231ca0e7c5896929138aba218b5853d71f7de39ffa98896b62a25ce446f7abd7d"}}, &(0x7f0000000080)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "9c28e6abc1421deab3a00217cbc4d8d056ce0376c1cf0beb0c7047bfc13af6b0a8b14bb9e07a64df71a51ae3b9b36b87f06ddd541545290e14aa52c069a09e8f6f9489d8ef380baa808b6ef9d4a9ec3ffb2b5d6b1f5b497dec0ae7fdae3d2737ca554d045d7925517cc15536957685654d9f7266e6050935556f8f923679dceeb3af6641a26f60f3ef25e6043da3dbd149acf7415ce6585d9546b127d88e3e21c77d5c61691569cc11b2de4081965517dda2aaae4ab903a1909edcb4e924596e9bc35b894e1ee0c7e85408290c0b64f58295d6a33f549a4b4715440e46e06af253ed6ac2607e3254cb6957636c9b"}}, &(0x7f0000000340)={0x0, 0x22, 0x1c, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x7, "1fc22fbc"}, @global=@item_4={0x3, 0x1, 0x8, "25feb638"}, @main=@item_4={0x3, 0x0, 0x8, "c83ca333"}, @global=@item_012={0x1, 0x1, 0x6, "19"}, @global=@item_4={0x3, 0x1, 0x3, "81083f89"}, @main=@item_012={0x1, 0x0, 0x1d, ','}, @global=@item_012={0x2, 0x1, 0x0, "b684"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x98, 0x1, {0x22, 0xad}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x12, 0x5d, "e686c871ac2f162d72469890546cf2fd92ef6606694eddc27b3f80fae3d29d003d5ed8d2a0ab97d04090d5432b0b495480ad852344b85350ae0c97048d603b599a6ab71335105d6035b21676595660940c5d7209013a4adf717a884047"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x20, 0x3, 0x1, 0xdc}}) recvmmsg(r2, &(0x7f00000038c0)=[{{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000003740)=[{&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/135, 0x87}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/222, 0xde}], 0x7, &(0x7f00000037c0)=""/254, 0xfe}, 0x2}], 0x1, 0x0, &(0x7f0000003900)={0x0, 0x3938700}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f0000000380)={0x0, 0xa, 0x29, {0x29, 0xe, "62dcd6291176b167ab2243e9ec5ed38c6e2b4fee4ea74328c31d71cdbded4126c7726c79b4dca2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 31.42800441s ago: executing program 3 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0x2, 0xa, 0x300) recvmmsg$unix(r2, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000300)={0x2, 0x0, @pic={0xe, 0xfd, 0x2, 0x6, 0x0, 0xc2, 0x5, 0x3a, 0x1, 0x6, 0x0, 0x7, 0x6, 0x7c, 0xf, 0x1}}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="1d6a086fa313ddffd87b021387630a6d5eb0992b1f4fc63277f3af7760cebf43e3125379dc97fab744176bada941797a01845f1bcb10773cb914a2ddd25fa4b763de3c358f34d5b0b78457010bc453c2bdecdd09210994c2778e5cb71378d5628e205adb7770467a278c6b058257f977de476020cee16ddc59cea44a3756cd6a0a47d7094b564069d370a3df6ee1a9f4488435ad20e2e8c8e92dc27935889f54c602b3e1f4a7b4bd6cb591a6ccc9152c466c7c66e37687923aebe512b4e76b51ac68f3c98b78eca37325978d627b"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 30.79682098s ago: executing program 3 (id=809): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) setfsuid(0xee01) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r2, &(0x7f0000000300)="e766c45c17bc012bb5839cedbe1b24522f", 0x11, 0x800, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r2, r3, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, 0x0) r4 = fsmount(r1, 0x0, 0x83) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) chmod(&(0x7f0000000000)='./file0\x00', 0x13e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xa) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xfe) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f00000003c0)="9c045def99a6827e2576c807861832c25a5b40daff8b50dfd40c30eec7d25cb80ee03e8b7e703226ab0036700486bad89f893082f73cf32957f5816a75c9a9fa08323fe954a98b69887621e155ed201af88edd4047caba1213e15e9cb0a27c4050388a6d5ed71e7ee54de9604a337cb5382fe2813296b29b55e757c58a31", 0x7e, 0x4, 0x0, 0x2}, &(0x7f0000000480)) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 30.78712355s ago: executing program 3 (id=810): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x0, 0x5, 0x1, 0x4, 0x81, 0x7}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8811) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setpriority(0x2565f307eda729c3, 0x0, 0x100000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000001, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000), 0x6e) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="0f01fc66b97f0900000f320f01cf0fbb06fa00660fd694f72166b9800000c00f326635000100000f300f0f6580a62e8012f6d852000f18c7", 0x38}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "0500", "313a19ff4c7d278bf34b54168b154d15", '\x00', "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) 30.655989265s ago: executing program 3 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000240)=""/248, 0xf8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,noxattr,posixacl,posixacl,uname=t']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,noxattr,posixacl,posixacl,uname=t']) 15.684417915s ago: executing program 32 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000240)=""/248, 0xf8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,noxattr,posixacl,posixacl,uname=t']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,noxattr,posixacl,posixacl,uname=t']) 5.804362239s ago: executing program 1 (id=990): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008bd280319000000000001090224000100000033090401810903000100092104000c012228000905810340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x9d, &(0x7f0000000180)=ANY=[@ANYBLOB="4001280000002831f70ba36b0300000000000000e43f080834df00"/46], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008bd280319000000000001090224000100000033090401810903000100092104000c012228000905810340"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000040)={0x9d, &(0x7f0000000180)=ANY=[@ANYBLOB="4001280000002831f70ba36b0300000000000000e43f080834df00"/46], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 4.749653984s ago: executing program 1 (id=996): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b98b0200000f320f01d10f78bc660100000066ba410066b8574766ef650f796600b94f024c790f32f30fc7354d00000091bad104ecc4e2b13bb4493700c0feb9090800000f32", 0xffffffffffffff7a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203fe031000000033bd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000002000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ftruncate(r0, 0x4) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 4.56376483s ago: executing program 0 (id=998): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x1a1081, 0x18) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000480)=@svm={0x4, 0x1, 0x1080, {0x58000}, {"e1a57467bdbbc89a6f5cac3d36e33b31cda477260d9b5adb89991e5414cac3c2fcb968bb50b0204ac3bdf37820426d8c38b0c4d3c5d71ad5dd5cdc574414bd1c4f60afd99d6f0846201fc05ea01dea43691fb41a0f04e5a18164a5c976c55988e37d5303651d826fc7cfa3fae96b2f95d7d541cd469c4a73785406ed31864f91f8afd1210a4472b91c0d8400540438d0d039872cd8a90208fd9585e454ec15f9af542f3f82ce5ada002a0c29e9fd22be02753f82e4caf7751939949163dee4972378dd69a407546decb2e1d89b648c10f87392325e7ce69afb976c250661db6e5ab9abd671c209c2dc1a68c841b8e568c195d9b5d663e8a1c72d6989f99d69bc0f1b13b9078d3b7253911915999214b83091d2fd712d29e5073f5afecd9d221b4af2a2dbbd1596e82391821381888e17d596b62b5a937fa2ef2814479ca632f593fe722835ac8bfea91234439969a9be803fa161ae186a680ffb3eeef54c5a477c59989e03985a576015515f0a37b248dbc26dc1aae853e96473b60730a9d5587b0bbfe153f90c41694f0688eabbf6c917eae7b0f89ee6975e00474bf47c8930f6fe3a17e02b0a0419f1dc9389d54eae9d556425319de2b0cb1f2b35aa87356dd545c4048dc18a860dc7801d3d4371e625fb6d06660fcef566b57c8e066bce72e80d0a63fb0a1038dc8ffea193cb7c4d8b6ab918a723bba20567d2d3926c17c1f099b3970e20318622ab39312845e8a72d9479b2daa70bc09f6734b836a9ff0bd090f41bc955d82caeb7a81c28ec23d55f9874aa042b213d11caa347efe11e441fb8d42fd3c3e0eaf57493229066e2a2b86ccaa0e4451cf3fdd4e0cf6073cc8b63f4a75e1d77b2dac5bb3874d2317d27ebf480a63a5d74e4f17e6a6629cdfaaf01437ebd72ca3316a757ecd74a9d360d0940de85b96ecfe99d45a64b9ca7d84629c7c4841f01e506b61e5ee868dfbff34faa19491cc6cc8b69bfba5358e25e322bf158c942b40daa806e1a14a1da1c0d4216120aa1d83403db14b5b1a48cd56a95f71c784ad8c9eb03eab5d1923e3b9eac6f39e30cfe130dce6173538da9c52ba1bba93be701fdbccc1190bbd1b52b1937301b986205964abfb63d9d100cdd0b1f0afd1db92e14f8728140cf1dc2baf87f63c35397afefd3c31bddaf7e035a7d8e0a6ee66d0dedfd587992e500d549dfdaf96dab92bb65a7185efe8dc0f923f1bdcc25d22d1fb7708416ea7a61752bfc1d35f1188c465cba191fba0612f54cc81a8ed03ebcd04598757392ebeeb8e5cf45b76ed950f16c233fbb9f887d7c93c90c7c681431446d78fcd2883fb446665885ca29729c8a6af402f40c5434c2263c4de8481de2771d2ca1ba1ec58a0b2b39f598b302b2959e721d37764bbe7632981801f86604ad199d52e29c9f6d9b55ec547da71516317027eb4b35aa4d1c6e319de7871a0e16022dfeaaf5fd28dc58638106e0dbd9c9b2c9dbf7473b420722015ffc34a959ec8ca31240d47ae182f303068c10632c88247aadef0f463beb35a30589c6be5da7e8cb63c2bc707bfa50e6e84822150928aff2642a4d255117963a788e907ccbc4418753529026d3a8a15085377eff7939e057d7b9cf21246180fc8c1150bb6e64730a71c23ce2f336caab608f38d469dd0e576219bb81cc0cfd05871ae7429c31db6297d3de30ee5f1f4b35d61c4c594d386a4ddca2e9b381d2ca4d2d2946e94f6430b03a69df85b2ea1230cd8f837a575b0eab0b20489384ba2c7c735625cce5ac45c9090ec1e9f4843bd8f787b2d5d397b7e3f92d394745e17fb31801c617fc3727454a339e890d0fbedcb731a3e0daa26becb9fd4de0860f8454dacf238fe6733238f60ce8155f1464187107d6818df068b8c7f17806b6ec89fb23045b3cf673276463c0a285768ae1133f6dd3bc71b5b72dd7154a1a4026f2a19283091607e47c04f5e61eda7d31cd6a9426f282610f013e90efa033b0b4c05b8354382e8d3152d81789ece3de59ff604f65e86b5e3837264e71bae54eb459b5ce75a6e157db67d0f5febb5616ebd7fef5c579fd01d9f4c095609e2a1151dd175ba84a6c11bebd813757035edf7def003e45b58c460a7d506a417bd4d17a04a0000c4b54c0f0d1823df60f00785400e4eb4ca6163909eb0169918c3d7cbe90b7400bb8f7424c948a6c38e280ad9e6749dc8b9e5081f1391c529e6860b0495ca625d4131afd0744260b7f88580bc0041d07dc82b92d58906aae42cb5f48f72d6611d70b849b2b424a55665f145ca34006a2391b8cad1d5f739a0d0dbef4a827c89a597beabf9eb36222d43e2673a4a7f8826d5dd3c8d0c0734c312925fc7e90ca9f3e7fdf0f052141120ad02226b4ba4d6ce681c05208de41e85ec4d719825f89260ec290532a9bfae2bfecb536349ca1d8e47fcf914a3f921e1a50d2ed5064658f72913e3f892c4651bb3347cb62d614955b21834c68967650597b64dfdc0a0151f9b41900517c3f8c4c34b19f7cdb94d9d47629621853eb3dbfc31bfd7ddc1bcb2de9d8f29ba0bfe09a80ec5dc7f466d48d64062fad99712c56ec645277eb94732375eeb5b1a1748532241a4bc27a2a35a84f6b760cb34f4753120d13383c77732da96765732299786f2bc0e384d024edc3acdf1b520e3b788eada5f5db575907695018c4d463a9a638971bcdb285def93e39568c2a8b6d5f70b5c436f7f882c8a5fd4347fb08b7803547883a619701d175c00dcf77bde8338b11870eafafde52c72377347a6d41028ae43b61fa959ef6f9ca34450b57720f2cda2ddb29d52e25e2fb87b40d4e35783cf5ce03bbbaf98b81f5f24d40c8bc35f2eee4fb8cbd5969cd8aafb49f41ad003c3c5abede3c5a66396412523877cbb147328265f832a90a80b6cd04cae948eaf816d907d47cd1e0452bebb1e65c351f7fc4913d3bdf4f0f1ef975c4ec2fd1c82fb4cbe142782ada28b0bbf832020bb50107f69550637a3681fc105b488ff04656538b62141c28c41a43e37051758c2b05ada77e733c1030a6baef2bafdd7b745b0e5b435d2534e4a6bad209fdf1b5480f9947642a59aab20d59375ed05196ece8c8c1843a14005e4a5e2b9cd765b7f94b948f8067c7a8d9dcf95b3912c1134e92a06e2a4fb551176e54d09593ed074f1048d8e488c330f772e489d2f86d7a474e534dd18322579c82b5c45775819a66a162f14d948559370b6104f86e82dbc706141598b6da2940ea8eddb793e1290cc41456dc1d68636829c9b83ced32598b9efc69b6029a0a8e894f4717445c07633bcb03296b390b4472836b75dd2cadf153c690f4134f75ab31a146de5a637f2a439494a7eb44c9238e42b00c74728f58eab3a67370e43d4facaa5f28ae33ccb0097250083e2fe855adf2367e11105526abf10b6f72da109e95acea9dc52009d160bf61d32ff198575a946f84ab7277e76d2ae40adf548f530179d043112098e9fef6dcf9c1b2872d08b2c49ebf71de27250b7813508bb56b86bb15ae484e3aa1fc37954981a8bdbb688718a5f83d943fe62b168b6967bd6e31c870b45d65cdeafc128944ca05eafd99c6fdbf602d01cfad2a9c52e49556cff719317cb557b566d98d23c447942df16362c35724d5e3b4f000755171bc5f5d335e0ec3945f418665ccd8928c30bfed891103556679d5435809cfbfe464c58d3964d0ab3d9a629fe037c21db16db94236e056e6200863bc679d5273e446aa0288a194e8834024d68b6c199fa51aeebd067aae2911f71ec5c6e379258510102d8199a31cda4730d4eb3c2e464ec2e92e970b71d6cc96e939862ba0a34b59ccc107158da186b72779ee63bf356e598b115011d418d30267ef3d8958f016e976a271eb2315144b9ce3d4cc8aec4f61bc5c2675e7c58bc3c295b0577bf26fb58d64753b901696ad86a4d92e9041e5141acbc868274106f452b5b3be97c459ca64355bc563d52518264d643dab031a8c6f33c95252433ec9a5480647b8727a99ac9c4534f757452c24f3fdc9e4fe14a1b4d141bc3107300ea68fdab39e5bb4e4cd41a34d6979d601e076a64a5663443d9cd1ee3d5c3f2e186269b4f5d078f8dbaea3d11398eac74a1528d1bd7970db47aed4cc40dd821addcbc3d3f4231b39b0a8780d4e91f286195b5991c90de55e905482b0ec0e81498838839b7c304296c36d1ad0dee9cc394cc12cce1ad38ce8147d5b04b82202141510122c95d63019aba938bbaf3a834ca0b271618e929720fe3f2494a7693426697247d5e03cfcc760ff51091012ace695942254122aabe4070de8f8e4bf3c880d95f3cebe386f9675671b4498ac38629ede50ac90b85976e0f86ce81f642246033f4b59dd51fb8fd0f7f5efde019b91786ba2809c91391b375415235dd9f094da6c0b1e14554e66d210e59ab2718f6dfdf9a3a263f768619fe16708a00dc9a6d8d18ea1429c3af99b0d93ea1fba1296e37f3cf7d7ba170d25cc1206946bbdbfaafe0528460feb2c3aa4e232da0471e15c64308fab86b04cf89d328911a3f86c5b5cb3636189f14a241d8de781984b1cac2818bb5d99e2b04f06a4fb27c40ad49d0829c9208eb8d2931705fc99a1a64238ec9b7e46347c4a0869afb36ad94b7a6a667954dbb317a7302cc1be38c3447b563e5d8403268abeb18e975c7ae7df43cfcf1b4ef5b67605b1c915fd868646f3b08684578df3a7c92186b72d19b07f3bc98e1bda0481ce43ed8369580b35786ee3e71418e3caa05d4b2d1e6bd6a38c5e540e1bf9fc8f00efa99cca50b474709d1b7e4539af553a62809dd84dc1f47783bfb3ad613a275133c5d43d2c6b7532e2cd2635cb4c45b7c769ced6e63d63f8db3c2c8683af4a34b1bac21246feebb1e9e39dfccf0d45248de00ce69f64e2358088ec3ee32d073b941a3a4180f38a7af94cd203feb9c5cd2fe6f50ccb43c1c6647f15dd0e8bd692be5ef3d8b793118b54e9c5dae7439169ff8167e346da1bbb840dfbc08fa2626e2df38176fd445c5f64d6c4f74261c111a8fbb3ddadccba0dcdb4dad9d9b545bc4e2ccc5f764646202b05fb9d3522829e8a820ccecd20899b5c03c2b31a2dbe0d53725a4167679cfd1fee3af0a96d9ba1cd82111710c2405be1e02bbcf454e091015c9c362e7e838a22f377632e24a77408fd9195af10f0fc7e330e4d03721eebafca9ce170f9fa561661105f3d19949e322b32bd5c908ebc36211880131c47d588bf5ebdb4e7d8f47046deac2214e9666c06cfe57020ee808c55efbc10245babf69dc6a69810f35033792b8fa1db9669da768142e18dbc3052cadb73459bf4bf683c7ae02b855658aae3bb0cb5c8a2e3b88a70f96c2350d03652efed21f62ebea4a4639abe4b4cfd18e83e8b6c1552af66ca260b88a13cc9bbc1892759cb530b36c5899a5e4618d7b9f5cd95377398f60b55d0c7863a501bbe342ec5bec3da5531a18809676ec6cbd4489f41f94eaa0815bc220dab40b3176885678fcc5c8443d1f943cf50d406bcb21f3db0c01bdf9e4290f3f9b0155dc659f10ec558e49bac25d1128f1b3656e4ac05b865dbf719e70c3581c9fa21793520a57dea64bee8d78bb5958ac89208fc9f1e353163ddbda420b5ddca94587437487f62d8a8b214d90f08d12099e4918c9b0b9b286b655ebe2c947614688d88760fe7268dcac92dca2eafb4adae56c09efd7900a6bf8b52bb283712601e8f7e3294d6693fbbfffd549d7a9db7f758d53ab4d44fbefb661abb9fb18b02fea081cc85052622b97350e7c9a10ca6fe121b36168dc488e11e9982f12b"}}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x2, 0x68, {0x68, 0x5, "6b008b7d79d1fb3319b55093a3769d9eb24ed4066788efbae054d0733e212ef409072bdfd0d297e9403879c215058e8e20f2d3aa51e03b608062e3291aeaccf7f6ddcdaf2c8809706d1c6dd0fd5290673ee01925fe649708fa8d4807e8f42c73c4541299fcc3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xb, 0xc7, "e3d434d8664224950063ef40b2d57afb60c8db1e2e97ac3c5c38ef79e9e8895572be94ecb940c0edef52deef6ea6833567f5abe76435c06929e533eaa086b36ff7f5d6b281fc8a707985f237ded694a124a4e43ac7f42785f8252e0090b452600110f3460da5806198a3a50ff5f21b1356f11f0129819d384a17424fc50bdcbf8f97ad4789abe093018ed7f528fd6bc7a1f8c8caad2ecf69e6d71496d0c8ac9352429467346dc51a711d10006cd0b2f898438bb76bc92b5edb88d81ebe594ace9e81e40bc89e4c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "2010"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "6348cc"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "af69"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "b244"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d0ba7"}}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x1a1081, 0x18) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) (async) syz_usb_control_io$uac2(r5, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000480)=@svm={0x4, 0x1, 0x1080, {0x58000}, {"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"}}) (async) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) (async) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x2, 0x68, {0x68, 0x5, "6b008b7d79d1fb3319b55093a3769d9eb24ed4066788efbae054d0733e212ef409072bdfd0d297e9403879c215058e8e20f2d3aa51e03b608062e3291aeaccf7f6ddcdaf2c8809706d1c6dd0fd5290673ee01925fe649708fa8d4807e8f42c73c4541299fcc3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xb, 0xc7, "e3d434d8664224950063ef40b2d57afb60c8db1e2e97ac3c5c38ef79e9e8895572be94ecb940c0edef52deef6ea6833567f5abe76435c06929e533eaa086b36ff7f5d6b281fc8a707985f237ded694a124a4e43ac7f42785f8252e0090b452600110f3460da5806198a3a50ff5f21b1356f11f0129819d384a17424fc50bdcbf8f97ad4789abe093018ed7f528fd6bc7a1f8c8caad2ecf69e6d71496d0c8ac9352429467346dc51a711d10006cd0b2f898438bb76bc92b5edb88d81ebe594ace9e81e40bc89e4c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "2010"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "6348cc"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "af69"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "b244"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d0ba7"}}) (async) 4.530593801s ago: executing program 1 (id=999): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x2, 0xa, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x23, 0x2a, {0x2a, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487a48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.94787336s ago: executing program 4 (id=1001): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2001, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7d, 0x204, 0x200, 0xceeb, 0x5}) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x6, 0xff, 0x6}, 0xc) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x675a0dcd) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "00000000000000000080000000ff1200"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0x69) (async) r3 = syz_open_pts(r0, 0x101000) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_io_uring_complete(0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x1, 0x5}) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xf173, 0xb, 0x95, 0x4f7e, 0x2}}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 3.881137653s ago: executing program 4 (id=1003): mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_destroy(r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000817b80000ff2469086b1000635b10c76e5771973e3f6ac48ac93f9c"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.935888453s ago: executing program 1 (id=1005): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x117, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x2, 0x1, 0xff, 0x20, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "06ab4592"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x55b, 0x6, 0xa0}, {0x6, 0x24, 0x1a, 0x4cd7, 0xc}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x98, 0x24, 0x13, 0xf0, "8aeaba6ed4e0073725828b40310b498776d7ddfb5696ff7a5aa9a823e566719e61f111d58958a08bf31ee7c9accea0b44cb1b3e57c72dcdc6e72a1ef02e20a71cf3939ee5bebe661b4cf98f4686375396f8382c8a83d8c6fa0a654235a7bb6289f10fa2907d2838cde4271a323745defc14758930790912cb1a130dbc1ea8876cb39bc30e106e14fc5a30242d265445cf8bbd731"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x4, 0xf7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xd3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x40, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x0, 0xf7, 0x40, 0x9}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x8, 0xf, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3f, 0x0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xda, 0xf0, 0x6}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xf491c1f55c684930, 0xa, 0x7, 0xf6, 0x1, 0xc}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x3c, &(0x7f0000000400)={0x5, 0xf, 0x3c, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8cdd8c395ee192a84ec51ddc20638ad9"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "94e9490f589e05b91c886695f7770960"}, @ssp_cap={0xc, 0x10, 0xa, 0x12, 0x0, 0x7fffffb, 0xf000, 0x75b7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40b}}]}) ptrace(0x10, 0x0) ptrace(0x4208, 0x0) syz_usb_connect(0x6, 0x187, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socket(0x10, 0x3, 0x0) 2.166659649s ago: executing program 4 (id=1011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6004}, @void, @eth={@multicast, @random="0500", @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @local, @broadcast}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x32) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000040c0)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000301053009080b000101072000090400000001012000092401ff3f04090007090401000001022000090401010101022000090501"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6004}, @void, @eth={@multicast, @random="0500", @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @local, @broadcast}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x32) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000040c0)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000301053009080b000101072000090400000001012000092401ff3f04090007090401000001022000090401010101022000090501"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async) 1.465060192s ago: executing program 0 (id=1015): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x99) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000002c0)='./file2\x00', 0x4000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') execve(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[0x0]}) 1.371658965s ago: executing program 0 (id=1016): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x888e}, @void, @eth={@random="73f87aa4d1f2", @random="000000000104", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x0, 0x6, "8ba6ed", 0x9, 0x33, 0x1, @mcast2, @empty, [@hopopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}}, 0x8a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) (async) inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x402, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x7, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x4, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x402, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x7, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x4, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$inet6(r5, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x100}, 0x1c) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x100}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x100}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x1a4, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x7a, 0x2, {{'cbc(aes)\x00'}, 0x190, "7e0bf8043bbb4a68e95ad209fd45c9110ebc34057d6c7f90a4f09b78a855fd664e1d875e99c16de906ea31b91386415cfaf3"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffa, 0x0, 0x0, 0x70bd28}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd26, 0x70bd28, 0x70bd27, 0x5}}]}, 0x1a4}}, 0x800) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abbd28b6203"], 0x0) 1.341292646s ago: executing program 4 (id=1018): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) stat(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r1, &(0x7f0000000380)={0x400, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_clone(0x2001000, &(0x7f0000000400)="1003ebc65c09018074b4e581399b8a73fd5d878699ec8eb41473880547cf4539b384150048c968a9e57581b88601ce9ae184b99652c29521d9de44f34498b7f7f8a31e2f6dcc466f63907c0681d4411779a9c74417de4c50da490a0d7cb3f1dbe81e3fd52c6c9ee1babdc79db6779181248fee2f8058ff53b3b53fedc0d1893bdedef452b002c1143ebb7d8fd13e390c1bd2969ccdcbcfde5eb3d896bab132fc3bb92d8f9067c2036f95b9db0dccf255ffd6fa9c29ea5f41dc641d678e77e157593b2b70b34e111e6b1a", 0xca, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="967b1f957f56052ad62b2e256e3d6ea5a4691a3c1ad816bcc210ad908ea37ba93d8e31d6ea4050d3b81d9dca8d03d32e7fb80af05c485c30aeb29b27825ba2df08f849ea490ee1118c5cea42a8b23213b196bd4ab8e301261fecb42e44350869760426eb5bd499bb80807f9ebc614fe4caf26dd4c125c1aef12ef303066bec88c0dc9590fe9a2b54548ac75f1f9620ec9d123e088d7a0b335ba40149469a81919207c12ef93ca3443204a0b8c646b45a130c218722dc7aa4da005a2090b500c8da2371f2c296ff0c5ddd98fc652f2c9d572f325bf98e889696b815f0cc33c017bfda0fb348347e283993836e") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file1/file0\x00', &(0x7f00000003c0), 0x800010, &(0x7f00000001c0)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@metacopy_on}], [{@subj_user={'subj_user', 0x3d, 'mask'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x3, 0x0, 0x40, 0x1008}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0415c20000000000010902240001000000ef09040000090300030009210b0010002229000905810308"], 0x0) 1.172522041s ago: executing program 2 (id=1019): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x4007) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xdd, 0x61, 0x7, 0x100000000, 0xc, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x180, 0x114) r2 = syz_open_procfs(r1, &(0x7f00000004c0)='net/ip_tables_targets\x00') exit(0xa) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1804010, &(0x7f0000000100)=ANY=[@ANYBLOB="687567653d6164766973652c71756f74612c736d61636b6673726f6f743d3840295e2c646f6e745f6d6561737572652c7375626a5f726f6c653d2c6673636f6e746578743d73797361646d5f772c6673757569643d32023938006665352d333563652d616665302d663700342d31326434333856302c00"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x0, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x1000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000500)=""/25) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x8000000, 0xdddd0000, 0x2, 0x1, 0x50}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001e00ffdb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r7) socket$tipc(0x1e, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000480)={&(0x7f00000002c0)=[{0x0, 0x0, 0x8, 0x6, 0xcf30, 0x3, 0x3, 0x80000001}, {0x2, 0x0, 0xfff, 0x8000000000000000, 0x8000, 0xbce, 0x7, 0x3}, {0x3, 0x0, 0x6, 0x4, 0x8, 0x1, 0x5, 0x76}, {0xa6194eb067afa3ad, 0x0, 0x80000001, 0x101, 0x200, 0xf, 0x8001, 0x3ff}, {0x1, 0x0, 0xfffffffffffffff7, 0xfd5, 0x7f, 0xffffffffffff6047, 0x100000000, 0x5}, {0x2, 0x0, 0x5, 0x1, 0xffff, 0x25, 0x2, 0x5}, {0x3, 0x0, 0x169, 0x1, 0x2235, 0x5}], 0x7, 0x38, 0x0, 0x6}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 1.023715866s ago: executing program 1 (id=1020): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x2c3, 0x6709d46d, 0x2, 0x0, 0x0, [{{}, 0x1}, {{r1}, 0xfffffffffffffff7}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r2}) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x1a4190adb1825a69}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000180)) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f00000001c0)) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000002c0)="e85e8066107000b075fa054732e488163afa7ac0ca7231e9ac9ff9b704e1d5205bb16847d0bb283217b51285e36344a38698d24e55e8e2e778cf9e56ddffa75bf55d5b198946b7b3247823908ee0972461efdb0401e8d6bbb84bb8d185753bbdb19da7fa243a24aa263855cc728b894feba311d4bed5d83138505825c0a4231c0eb0edc0832a0f7e7fd03b2c6b88be2e1ea313b1d49e851aba7e083076554f7804fc24a2672b9cce60feb962ad9d6b4e35184007afb2c8d004427261746db9bf178908a7f5fde00ab2f0f577b80bc4f77406630696203e88de76741598") ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000003c0)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000500)=0x0) statx(r4, &(0x7f0000000540)='./file0\x00', 0x100, 0x100, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80001, &(0x7f0000000680)={[{@noswap}, {@uid={'uid', 0x3d, r6}}, {@uid={'uid', 0x3d, r7}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x65, 0x36, 0x36, 0x65, 0x36, 0x35], 0x2d, [0x65, 0x36, 0x37, 0x36], 0x2d, [0x33, 0x33, 0x38, 0x66], 0x2d, [0x38, 0x37, 0x60, 0x39], 0x2d, [0x62, 0x39, 0x1, 0x64, 0x65, 0x39, 0xb, 0x37]}}}]}) r8 = accept$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000780)={0x0, "e2c75e24db80cb037c22e1411fd6878d"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001780)={0x4, 0x58ae90d0fba8380b, {0x60000000000, @struct={0x2a52, 0xaf975a}, 0x0, 0x7, 0xc15b, 0x81, 0x8bd, 0x6a5, 0x881, @struct={0x8, 0x2}, 0x8, 0xc5, [0x1, 0x9, 0x6, 0x5, 0x9, 0x401]}, {0x101, @usage=0x4, 0x0, 0x1, 0x36, 0x7f, 0x5, 0x6, 0x0, @usage=0x59, 0x2, 0x3, [0x8, 0x5475523, 0x8, 0xfff, 0xfffffffffffffff5, 0x3]}, {0x7fff, @usage=0x5, 0x0, 0x3, 0x1, 0x4, 0x9, 0x8, 0xa1, @struct={0x4, 0xea6fcd80}, 0x3, 0x9, [0x8000, 0x1ff, 0x10, 0x0, 0x10, 0xfffffffffffffffe]}, {0x9, 0x1, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001b80)={0x0, 0x1, {0x4, @struct={0xfffffffc, 0x8000}, 0x0, 0xa, 0x1, 0x400, 0x21c94737, 0x4, 0x80, @struct={0xd, 0x25}, 0x8, 0xf, [0x7, 0xffff, 0x8, 0x9d8, 0x7, 0x3fc]}, {0xd, @usage=0x7fffffffffffffff, r9, 0x5d, 0xb5f, 0xfffffffffffffffc, 0x8, 0xc3e0, 0x20, @struct={0x2, 0x6}, 0x4, 0xfff, [0xff, 0x200, 0xb604, 0x10, 0x9, 0x6]}, {0x5, @usage=0xd, r10, 0x8, 0x1, 0x6, 0x5, 0x8, 0x440, @struct={0x7f, 0x1}, 0x4, 0x7, [0x10, 0x82, 0xee02, 0x3, 0x3, 0x6]}, {0x8, 0x100, 0x7}}) r11 = openat$cgroup_ro(r4, &(0x7f0000001f80)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001fc0), 0x121180, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000002000)={0x5, 0xde, 0x8a2, 0x100, 0x1}) preadv(r5, &(0x7f0000002400)=[{&(0x7f0000002040)=""/24, 0x18}, {&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/180, 0xb4}, {&(0x7f0000002280)=""/219, 0xdb}, {&(0x7f0000002380)=""/101, 0x65}], 0x6, 0x1cff, 0x401) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) io_setup(0x8, &(0x7f0000002480)=0x0) r13 = syz_open_dev$usbmon(&(0x7f00000025c0), 0xffff, 0xc00) io_submit(r12, 0x4, &(0x7f0000002880)=[&(0x7f0000002580)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f00000024c0)="8f83a253e4b55b2177e3faa78319f37a4b78180a05b4afb3996cc192936ad820a9a9ac8990e91e2741ac6b0f153ad4514f4d084ef3f982d26620e05d27ae3c9dc9175f368b175a21fcbb1b387ab298d087a8cf5b6cc5e4805e34747607a48f3b96c0ade328445feef1f64e7652be0d5ce03d3c9b77ea2b727ec97ef109c071b14bc9b0d3df8b460c5704231721f45170b5d1de7c9ed6adffbe6b39fe6483fee95a7b3e196f22bcb16f50dc6c3fe23349223c218e02e7", 0xb6, 0xc, 0x0, 0x0, r0}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x800, r13, &(0x7f0000002600)="b51e418885f4988985813264bf9ab6dc9459b3d2c7807c20367ec3eb9c57c49cb4baabdf39610d67c7e5d9a43189f566f2d410d585f37a6fd2ef0df993241bb2c8e0a39c6c5e84090fe055f42f0ed97b4ca93a8baba50005e6dedebf07d7be7e71b2ce599ea52198df6020d9345ace071d1ad7bf2a95321afcba3994a266a03aa99df64381107579", 0x88, 0xfffffffffffffff9, 0x0, 0x1, r4}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x8, 0x2, r11, &(0x7f0000002700)="ccf836998966cb95068e7be977510e2229e115ae6e96dfee526c171afa52532f4cb5a82137aadd218ae0b2649e859cfb9324d8143e94fd8b", 0x38, 0x0, 0x0, 0x3}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000002780)="474fcb8b209584ce745726ab2807775435e0089b301842df8e0a68b27fef8e36abbfaf9afdb467abbdd2990a9356609a02aa986a11cb6e5c69bab477ebf7930bf1d0c0a2727a3dc90ae87d1701f0f01e97a89f140786104e6516a3642bd1bb75618013eb8c19a0e995c90121be14132ad839e3390f7ebbb6869852bd000b3aa563e51d3350be62ea496252974b49caa82f", 0x91, 0x7, 0x0, 0x1, r11}]) socketpair(0x11, 0x80000, 0x500b, &(0x7f00000028c0)) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000002900)={0x0, 0x0, @pic={0xff, 0x9, 0x5, 0x21, 0x5, 0x7, 0x4, 0x4, 0xd, 0x1, 0x4, 0xf8, 0xfd, 0x56, 0x9, 0x6}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 979.036017ms ago: executing program 1 (id=1021): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x26, 0x401, 0x6100083a, 0x8, 0x3, 0x2, 0x5d2186cc, 0x0, 0x0, 0x94, 0x10001}}, 0x50) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0xe0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000901000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f00003d0000/0x1000)=nil) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x7d, 0x80c, 0x3, 0x2f, 0x1, 0x9, 0x47, 0x3, 0xed, 0xfe, 0x49, 0xc, 0xffffffffffffffff}, {0x5296, 0x2, 0x1, 0xc1, 0x5, 0x0, 0x47, 0xf1, 0x7, 0x3, 0x8, 0x3, 0x40000000001}, {0x8001, 0x0, 0x1, 0x0, 0x5a, 0x9, 0x8, 0xf8, 0x5, 0x1, 0x3, 0x3, 0x10000000000004}], 0x7}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) unshare(0x62040200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x49, 0x0, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000004c0)={r4, &(0x7f0000000340)='[&\\\'{*\'&\x00', 0x880, &(0x7f0000000380)={@align=0x9, {0x0, 0x6, 0x359, 0x2}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x4}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0xffffff92}], 0x1}}], 0x1, 0x2400c042) syz_usb_connect(0x6, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 747.918905ms ago: executing program 4 (id=1022): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x9f264000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000003f80)="95530eed86407f2262fa0fce4d7cab7ab53c23412b12bbad20c802fec6d81edcfbec7a418c442d1b2fec9bd3c9a9f11c72bba89897d65046aeff6a12d7a267a22aebdd034a60bb681409dd5c30ab253cccaa85f674c4fdc9ec2d1534f64fb081dc6a63d4d5d683825714217e178cb8e778cdfe67dd6c4dfe67b899cd90a55edb5b", 0x81) r1 = socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f000065e000/0x2000)=nil, 0x2000, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000140)=@ethtool_eeprom={0xa, 0x3}}) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000007400)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}}], 0x2, 0x40000) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 247.981132ms ago: executing program 2 (id=1023): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x800, 0x1, 0x1da}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000006890086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 247.513432ms ago: executing program 2 (id=1024): unshare(0x6020400) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000400)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x40000040, &(0x7f0000003700)={0x77359400}) unshare(0x44040200) 224.400312ms ago: executing program 2 (id=1025): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3adabede48db501c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) 166.989984ms ago: executing program 2 (id=1026): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002980)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/238, 0xee}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/97, 0x61}], 0x1}}], 0x4, 0x400122a0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0xb, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x86, 0x0, 0xe, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 104.041276ms ago: executing program 4 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000140)=0x2) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000001c0)='./file0\x00') 88.272037ms ago: executing program 2 (id=1028): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) (async) r2 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000013c0), &(0x7f0000001400)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 85.689677ms ago: executing program 0 (id=1029): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003d2000/0x3000)=nil, 0x3000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) remap_file_pages(&(0x7f0000463000/0x4000)=nil, 0x4000, 0x8, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10004000) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00003d2000/0x3000)=nil, 0x3000) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) remap_file_pages(&(0x7f0000463000/0x4000)=nil, 0x4000, 0x8, 0x6, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10004000) (async) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) 67.205128ms ago: executing program 0 (id=1030): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r3, 0x40045431, 0xfffffffffffffffd) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000161, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) mremap(&(0x7f0000744000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000026d000/0x2000)=nil) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083040000002a90a0751bb3"], 0x0}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYBLOB="9fffe056dcf00fc48c0b20d20ced5f1ba41b338ec022d4d462cc50411ad1198ecfb46409e5a57001c37bd357c441240f61f9a9a88211666ea586c7fa9439745c7f8d15749e43ee7c3d8697b0021a320c8e3cefcc48", @ANYRESDEC=r0], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) kernel console output (not intermixed with test programs): 513][ T64] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 63.278645][ T366] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 63.291377][ T64] asix 1-1:0.34: probe with driver asix failed with error -71 [ 63.301875][ T64] usb 1-1: USB disconnect, device number 26 [ 63.328917][ T1084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.338386][ T1085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.339428][ T1084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.347130][ T1085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.411360][ T36] audit: type=1400 audit(1780512590.800:261): avc: denied { relabelfrom } for pid=1080 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.442402][ T36] audit: type=1400 audit(1780512590.800:262): avc: denied { relabelto } for pid=1080 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.451154][ T366] usb 2-1: Using ep0 maxpacket: 8 [ 63.483238][ T366] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 63.493252][ T366] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.506391][ T366] usb 2-1: config 1 interface 0 has no altsetting 0 [ 63.514724][ T366] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.524023][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.532266][ T366] usb 2-1: Product: 䲕늵얃᳛誱絇ᄆ뺜ȣ [ 63.538731][ T366] usb 2-1: Manufacturer: 烙鷀撩噴黵ꠤ날䘣投娐煥蹅鿩⊊嚐썮ᦋ䓾ᕀᩜ뫈瘶묨㛑鐷傢ኸ돤ꮭ罥㷃 [ 63.555593][ T366] usb 2-1: SerialNumber: Ꚅ [ 63.571614][ T1062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.623371][ T1102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.631995][ T1102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.640845][ T1102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.649439][ T1102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.670778][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.679407][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.780605][ T1062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.789179][ T1062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.799386][ T366] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 63.811416][ T366] usb 2-1: USB disconnect, device number 20 [ 63.851182][ T64] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 64.001108][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 64.007435][ T64] usb 1-1: config 0 has no interfaces? [ 64.013177][ T64] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.022362][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.041346][ T64] usb 1-1: config 0 descriptor?? [ 64.066590][ T36] audit: type=1400 audit(1780512591.450:263): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.086766][ T36] audit: type=1400 audit(1780512591.450:264): avc: denied { ioctl } for pid=1108 comm="syz.3.228" path="socket:[13962]" dev="sockfs" ino=13962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.106958][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.119941][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.201096][ T1114] netlink: 96 bytes leftover after parsing attributes in process `syz.2.230'. [ 64.210445][ T36] audit: type=1400 audit(1780512591.590:265): avc: denied { setopt } for pid=1113 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.253776][ T1093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.262448][ T1093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.270886][ T64] usb 1-1: USB disconnect, device number 27 [ 64.292223][ T36] audit: type=1400 audit(1780512591.680:266): avc: denied { watch watch_reads } for pid=1118 comm="syz.2.232" path="/72" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.349121][ T1126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.357680][ T1127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.357770][ T1126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.367499][ T1127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.581113][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 64.601120][ T1135] netlink: 'syz.2.237': attribute type 12 has an invalid length. [ 64.635583][ T1141] syzkaller1: entered promiscuous mode [ 64.641474][ T1141] syzkaller1: entered allmulticast mode [ 64.648855][ T36] audit: type=1400 audit(1780512592.030:267): avc: denied { bind } for pid=1142 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.713938][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.721123][ T31] usb 2-1: device descriptor read/64, error -71 [ 64.722574][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.840704][ T1148] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 64.841449][ T36] audit: type=1400 audit(1780512592.220:268): avc: denied { remount } for pid=1146 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.872327][ T1148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.880916][ T1148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.961124][ T31] usb 2-1: device descriptor read/64, error -71 [ 65.201124][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 65.241137][ T64] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 65.254356][ T36] audit: type=1400 audit(1780512592.640:269): avc: denied { append } for pid=1154 comm="syz.2.244" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.270530][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 65.297825][ T310] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.351146][ T31] usb 2-1: device descriptor read/64, error -71 [ 65.381150][ T64] usb 1-1: device descriptor read/64, error -71 [ 65.393500][ T1164] netlink: 'syz.2.246': attribute type 3 has an invalid length. [ 65.401241][ T1164] netlink: 944 bytes leftover after parsing attributes in process `syz.2.246'. [ 65.457715][ T375] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 65.459535][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.475010][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.591135][ T31] usb 2-1: device descriptor read/64, error -71 [ 65.641144][ T64] usb 1-1: device descriptor read/64, error -71 [ 65.701249][ T31] usb usb2-port1: attempt power cycle [ 65.881132][ T64] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 66.011471][ T64] usb 1-1: device descriptor read/64, error -71 [ 66.041138][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 66.062459][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.079018][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.087575][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.096109][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.104611][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.192123][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.261124][ T64] usb 1-1: device descriptor read/64, error -71 [ 66.371218][ T64] usb usb1-port1: attempt power cycle [ 66.441130][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.462088][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.592129][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.642804][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.651422][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.701199][ T31] usb usb2-port1: unable to enumerate USB device [ 66.711141][ T64] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 66.732158][ T64] usb 1-1: device descriptor read/8, error -71 [ 66.862106][ T64] usb 1-1: device descriptor read/8, error -71 [ 67.111131][ T64] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 67.132116][ T64] usb 1-1: device descriptor read/8, error -71 [ 67.172358][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.180863][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.262217][ T64] usb 1-1: device descriptor read/8, error -71 [ 67.364848][ T1181] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.372816][ T64] usb usb1-port1: unable to enumerate USB device [ 67.715128][ T1201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.723765][ T1201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.732457][ T1201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.741044][ T1201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.751121][ T491] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.902897][ T491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 67.912581][ T491] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.922704][ T491] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.931692][ T491] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 67.942607][ T491] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 67.955760][ T491] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 67.966752][ T491] usb 2-1: config 1 interface 1 has no altsetting 0 [ 67.967974][ T1203] netlink: 'syz.0.260': attribute type 5 has an invalid length. [ 67.975613][ T491] usb 2-1: string descriptor 0 read error: -22 [ 67.981146][ T1203] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.260'. [ 67.987371][ T491] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 68.005791][ T491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.022608][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 68.022645][ T36] audit: type=1400 audit(1780512595.410:275): avc: denied { ioctl } for pid=1204 comm="syz.0.261" path="socket:[14985]" dev="sockfs" ino=14985 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.053860][ T36] audit: type=1400 audit(1780512595.410:276): avc: denied { read } for pid=1204 comm="syz.0.261" path="socket:[14986]" dev="sockfs" ino=14986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.077174][ T36] audit: type=1400 audit(1780512595.410:277): avc: denied { setopt } for pid=1204 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.306810][ T1214] netlink: 76 bytes leftover after parsing attributes in process `syz.3.263'. [ 68.321543][ T36] audit: type=1400 audit(1780512595.710:278): avc: denied { map } for pid=1213 comm="syz.3.263" path="socket:[15483]" dev="sockfs" ino=15483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.344732][ T36] audit: type=1400 audit(1780512595.710:279): avc: denied { accept } for pid=1213 comm="syz.3.263" path="socket:[15483]" dev="sockfs" ino=15483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.359372][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.378118][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.385968][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 68.428165][ T491] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 68.435323][ T36] audit: type=1400 audit(1780512595.820:280): avc: denied { unlink } for pid=1220 comm="syz.1.266" name="#1" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.464246][ T491] usb 2-1: USB disconnect, device number 25 [ 68.521117][ T31] usb 1-1: device descriptor read/64, error -71 [ 68.771124][ T31] usb 1-1: device descriptor read/64, error -71 [ 68.771124][ T491] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 68.945202][ T491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.953254][ T491] usb 2-1: not running at top speed; connect to a high speed hub [ 68.961647][ T491] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.971734][ T491] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.982702][ T491] usb 2-1: string descriptor 0 read error: -22 [ 68.988901][ T491] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.997942][ T491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.009158][ T491] usb 2-1: 0:2 : does not exist [ 69.021116][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 69.033057][ T36] audit: type=1400 audit(1780512596.420:281): avc: denied { mounton } for pid=1231 comm="syz.3.270" path="/63/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 69.033068][ T1232] fuse: Unknown parameter '~d' [ 69.101978][ T1237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.110555][ T1237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.119213][ T1237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.127914][ T1237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.151145][ T31] usb 1-1: device descriptor read/64, error -71 [ 69.391119][ T31] usb 1-1: device descriptor read/64, error -71 [ 69.501228][ T31] usb usb1-port1: attempt power cycle [ 69.667807][ T36] audit: type=1400 audit(1780512597.050:282): avc: denied { write } for pid=1238 comm="syz.3.273" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.697934][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.706951][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.727148][ T36] audit: type=1400 audit(1780512597.110:283): avc: denied { set_context_mgr } for pid=1245 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.728183][ T1246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.755790][ T1246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.767308][ T1246] netlink: 'syz.3.275': attribute type 12 has an invalid length. [ 69.827171][ T1247] rust_binder: 1245:1247 transaction to 0 failed: ENOENT [ 69.828184][ T36] audit: type=1400 audit(1780512597.210:284): avc: denied { write } for pid=1245 comm="syz.3.275" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.841130][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 69.882122][ T31] usb 1-1: device descriptor read/8, error -71 [ 70.012439][ T31] usb 1-1: device descriptor read/8, error -71 [ 70.013932][ T491] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 70.029331][ T491] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 70.038716][ T491] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 70.049949][ T491] usb 2-1: USB disconnect, device number 26 [ 70.271162][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 70.281357][ T1256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.292823][ T1256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.300687][ T31] usb 1-1: device descriptor read/8, error -71 [ 70.432118][ T31] usb 1-1: device descriptor read/8, error -71 [ 70.542437][ T31] usb usb1-port1: unable to enumerate USB device [ 70.819335][ T1272] incfs_lookup_dentry err:-13 [ 70.824059][ T1272] incfs: Can't find or create .index dir in ./file0 [ 70.830694][ T1272] incfs: mount failed -13 [ 70.835909][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.844472][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.853011][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.861476][ T31] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 70.862274][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.012440][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.020477][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 71.028922][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 71.037064][ T31] usb 2-1: config 0 has no interface number 0 [ 71.043187][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 71.054253][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 71.063849][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 71.072911][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 71.080997][ T31] usb 2-1: Product: syz [ 71.085181][ T31] usb 2-1: SerialNumber: Љ [ 71.090232][ T31] usb 2-1: config 0 descriptor?? [ 71.095498][ T1269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.169739][ T1274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'. [ 71.179633][ T1274] : port 1(bridge_slave_0) entered disabled state [ 71.308910][ T31] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input15 [ 71.319874][ T31] usb 2-1: USB disconnect, device number 27 [ 71.462110][ T1283] syzkaller1: entered promiscuous mode [ 71.467706][ T1283] syzkaller1: entered allmulticast mode [ 71.842099][ T1298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.850600][ T1298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.897394][ T1311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.907620][ T1311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.018737][ T1319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.027316][ T1319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.035789][ T1319] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=1319 comm=syz.2.298 [ 72.131129][ T310] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 72.221128][ T491] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 72.281141][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 72.287362][ T310] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 72.299739][ T310] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 72.308822][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.316891][ T310] usb 1-1: Product: syz [ 72.321089][ T310] usb 1-1: Manufacturer: syz [ 72.325684][ T310] usb 1-1: SerialNumber: syz [ 72.372531][ T491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.381028][ T491] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 72.392870][ T491] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 72.405395][ T491] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 72.414496][ T491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.422514][ T491] usb 2-1: Product: syz [ 72.426690][ T491] usb 2-1: Manufacturer: syz [ 72.431310][ T491] usb 2-1: SerialNumber: syz [ 72.533422][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 72.543200][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 72.553155][ T310] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 72.563349][ T310] usb 1-1: USB disconnect, device number 36 [ 72.575703][ T1321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.584295][ T1321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.640684][ T491] usb 2-1: Can't get UAC3 power state for id 10 [ 72.647595][ T491] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 72.656031][ T491] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.666806][ T491] usb 2-1: USB disconnect, device number 28 [ 72.675430][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 72.778285][ T1323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.786872][ T1323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.042742][ T1325] bpf: Bad value for 'gid' [ 73.103251][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 73.103267][ T36] audit: type=1400 audit(1780512600.490:295): avc: denied { accept } for pid=1329 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.104147][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.138001][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.301128][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 73.327735][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.336365][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.401129][ T491] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 73.462222][ T31] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 73.470287][ T31] usb 1-1: config 1 has no interface number 0 [ 73.476406][ T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 73.486345][ T31] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 73.497747][ T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 73.507494][ T31] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 100, changing to 10 [ 73.519931][ T31] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 73.528982][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.536979][ T31] usb 1-1: Product: syz [ 73.541156][ T31] usb 1-1: Manufacturer: syz [ 73.545744][ T31] usb 1-1: SerialNumber: syz [ 73.551159][ T1328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.558477][ T1328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.566962][ T491] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.575006][ T491] usb 2-1: config 0 has no interface number 0 [ 73.581136][ T491] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.592298][ T491] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.602211][ T491] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.615165][ T491] usb 2-1: config 0 interface 1 has no altsetting 0 [ 73.621787][ T491] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 73.630807][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.639349][ T491] usb 2-1: config 0 descriptor?? [ 73.753447][ T36] audit: type=1400 audit(1780512601.140:296): avc: denied { call } for pid=1345 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.753634][ T1346] rust_binder: Error while translating object. [ 73.772440][ T1346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 73.772475][ T36] audit: type=1400 audit(1780512601.140:297): avc: denied { transfer } for pid=1345 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.778795][ T1346] rust_binder: 1345:1346 transaction to 1345 failed: EBADF [ 74.046797][ T491] usbhid 2-1:0.1: can't add hid device: -71 [ 74.060015][ T491] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 74.069145][ T491] usb 2-1: USB disconnect, device number 29 [ 74.451354][ T36] audit: type=1400 audit(1780512601.840:298): avc: denied { write } for pid=1356 comm="syz.3.313" name="mcfilter6" dev="proc" ino=4026532347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.500779][ T1366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.510156][ T1366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.670828][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.679437][ T1371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.680804][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.688831][ T1371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.075173][ T1375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.083741][ T1375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.253651][ T1382] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 75.381345][ T1398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1398 comm=syz.2.326 [ 75.393887][ T1398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1398 comm=syz.2.326 [ 75.430717][ T36] audit: type=1400 audit(1780512602.810:299): avc: denied { write } for pid=1400 comm="syz.1.327" path="socket:[16219]" dev="sockfs" ino=16219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.456250][ T36] audit: type=1400 audit(1780512602.810:300): avc: denied { accept } for pid=1400 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.473232][ T1404] tipc: Can't bind to reserved service type 1 [ 75.476307][ T36] audit: type=1400 audit(1780512602.810:301): avc: denied { read } for pid=1400 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.522961][ T36] audit: type=1400 audit(1780512602.910:302): avc: denied { read } for pid=1409 comm="syz.1.333" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.535844][ T1412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.546069][ T36] audit: type=1400 audit(1780512602.910:303): avc: denied { open } for pid=1409 comm="syz.1.333" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.555068][ T1412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.681877][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.690476][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.699647][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.708215][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.750843][ T1424] netlink: 'syz.1.337': attribute type 17 has an invalid length. [ 75.759769][ T36] audit: type=1400 audit(1780512603.150:304): avc: denied { create } for pid=1423 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.810970][ T1426] netlink: 264 bytes leftover after parsing attributes in process `syz.1.338'. [ 76.061141][ T310] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 76.069758][ T491] usb 1-1: USB disconnect, device number 37 [ 76.130308][ T1439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.139169][ T1439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.213439][ T310] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 76.225357][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.233701][ T310] usb 2-1: Product: syz [ 76.234198][ T1441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.345'. [ 76.238065][ T310] usb 2-1: Manufacturer: syz [ 76.251488][ T310] usb 2-1: SerialNumber: syz [ 76.256831][ T310] usb 2-1: config 0 descriptor?? [ 76.262877][ T310] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 76.376770][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 76.385663][ T1451] bridge_slave_1: left allmulticast mode [ 76.391547][ T1451] bridge_slave_1: left promiscuous mode [ 76.397282][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.404839][ T1451] bridge_slave_0: left allmulticast mode [ 76.410486][ T1451] bridge_slave_0: left promiscuous mode [ 76.416228][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.421118][ T491] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 76.466324][ T1429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.474978][ T1429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.483117][ T1429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.491509][ T1452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.491641][ T1429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.500140][ T1452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.516770][ T375] usb 2-1: USB disconnect, device number 30 [ 76.602082][ T491] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.608766][ T491] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 76.617823][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.626399][ T491] usb 1-1: config 0 descriptor?? [ 76.664854][ T1454] tc_dump_action: action bad kind [ 76.834072][ T1472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.838399][ T491] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 76.849061][ T1472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.850350][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.865358][ T491] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x2 [ 76.872237][ T491] pyra 0003:1E7D:2CF6.000D: nested delimiters [ 76.878318][ T491] pyra 0003:1E7D:2CF6.000D: item 0 4 2 10 parsing failed [ 76.885587][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.893855][ T491] pyra 0003:1E7D:2CF6.000D: parse failed [ 76.901533][ T1481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.904928][ T491] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -22 [ 76.920995][ T491] usb 1-1: USB disconnect, device number 38 [ 77.109236][ T1498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.118357][ T1498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.138589][ T1498] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 77.146328][ T1498] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.362'. [ 77.182533][ T1500] kvm: emulating exchange as write [ 77.261119][ T491] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 77.281120][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 77.421125][ T491] usb 1-1: Using ep0 maxpacket: 32 [ 77.427627][ T491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.439748][ T491] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 77.449273][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.452379][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.457515][ T491] usb 1-1: Product: syz [ 77.469333][ T491] usb 1-1: Manufacturer: syz [ 77.471782][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.474133][ T491] usb 1-1: SerialNumber: syz [ 77.487720][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.497919][ T491] usb 1-1: config 0 descriptor?? [ 77.500764][ T31] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 77.507426][ T491] usb 1-1: bad CDC descriptors [ 77.513835][ T31] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 77.519179][ T491] usb 1-1: unsupported MDLM descriptors [ 77.536730][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 77.548333][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 77.563039][ T31] usb 2-1: string descriptor 0 read error: -22 [ 77.569317][ T31] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 77.578386][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.609395][ T1515] netlink: 108 bytes leftover after parsing attributes in process `syz.3.368'. [ 77.618482][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 77.721455][ T310] usb 1-1: USB disconnect, device number 39 [ 77.962550][ T1547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.971141][ T1547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.252557][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 78.252575][ T36] audit: type=1400 audit(1780512605.640:408): avc: denied { create } for pid=1551 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.493487][ T1562] netlink: 5 bytes leftover after parsing attributes in process `syz.3.383'. [ 78.514772][ T1564] can0: slcan on ttynull. [ 78.522035][ T1564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.523819][ T36] audit: type=1400 audit(1780512605.900:409): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 78.533259][ T1564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.559819][ T36] audit: type=1400 audit(1780512605.910:410): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.581021][ T491] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 78.589385][ T36] audit: type=1400 audit(1780512605.910:411): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=3033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.612953][ T36] audit: type=1400 audit(1780512605.910:412): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.636160][ T36] audit: type=1400 audit(1780512605.910:413): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.665863][ T36] audit: type=1400 audit(1780512605.960:414): avc: denied { create } for pid=1563 comm="syz.3.384" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.700795][ T36] audit: type=1400 audit(1780512605.960:415): avc: denied { mounton } for pid=1563 comm="syz.3.384" path="/97/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.724105][ T36] audit: type=1400 audit(1780512605.970:416): avc: denied { read } for pid=1567 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.747026][ T491] usb 1-1: Using ep0 maxpacket: 16 [ 78.753221][ T36] audit: type=1400 audit(1780512605.970:417): avc: denied { open } for pid=1567 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.778771][ T491] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.794203][ T491] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 78.805871][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.821348][ T491] usb 1-1: config 0 descriptor?? [ 78.843488][ T310] usb 2-1: USB disconnect, device number 31 [ 78.944665][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.953392][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.028458][ T491] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x3 [ 79.036388][ T491] zeroplus 0003:0C12:0030.000E: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.0-1/input0 [ 79.047894][ T491] zeroplus 0003:0C12:0030.000E: no inputs found [ 79.234070][ T1559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.282278][ T491] usb 1-1: USB disconnect, device number 40 [ 79.376901][ T1598] FAULT_INJECTION: forcing a failure. [ 79.376901][ T1598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.390176][ T1598] CPU: 0 UID: 0 PID: 1598 Comm: syz.1.391 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 79.390214][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.390224][ T1598] Call Trace: [ 79.390228][ T1598] [ 79.390233][ T1598] __dump_stack+0x21/0x30 [ 79.390254][ T1598] dump_stack_lvl+0x140/0x1c0 [ 79.390267][ T1598] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.390281][ T1598] ? check_stack_object+0x106/0x150 [ 79.390293][ T1598] dump_stack+0x19/0x20 [ 79.390305][ T1598] should_fail_ex+0x3d7/0x530 [ 79.390317][ T1598] should_fail+0xf/0x20 [ 79.390325][ T1598] should_fail_usercopy+0x1e/0x30 [ 79.390335][ T1598] _copy_from_user+0x20/0xa0 [ 79.390347][ T1598] bm_entry_write+0x105/0x440 [ 79.390360][ T1598] ? __kasan_check_write+0x18/0x20 [ 79.390373][ T1598] ? __cfi_bm_entry_write+0x10/0x10 [ 79.390386][ T1598] ? bpf_lsm_file_permission+0xd/0x20 [ 79.390399][ T1598] ? __cfi_bm_entry_write+0x10/0x10 [ 79.390410][ T1598] vfs_write+0x3c5/0xf90 [ 79.390421][ T1598] ? __cfi_vfs_write+0x10/0x10 [ 79.390431][ T1598] ? __kasan_check_write+0x18/0x20 [ 79.390440][ T1598] ? mutex_lock+0x97/0x1d0 [ 79.390453][ T1598] ? __cfi_mutex_lock+0x10/0x10 [ 79.390465][ T1598] ? __fget_files+0x2c5/0x340 [ 79.390478][ T1598] ksys_write+0x145/0x260 [ 79.390487][ T1598] ? __cfi_ksys_write+0x10/0x10 [ 79.390497][ T1598] ? __kasan_check_read+0x15/0x20 [ 79.390507][ T1598] __x64_sys_write+0x7f/0x90 [ 79.390517][ T1598] x64_sys_call+0x271c/0x2ee0 [ 79.390527][ T1598] do_syscall_64+0x57/0xf0 [ 79.390537][ T1598] ? clear_bhb_loop+0x50/0xa0 [ 79.390549][ T1598] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.390561][ T1598] RIP: 0033:0x7f56ddf9ce59 [ 79.390571][ T1598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.390580][ T1598] RSP: 002b:00007f56dee34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.390592][ T1598] RAX: ffffffffffffffda RBX: 00007f56de215fa0 RCX: 00007f56ddf9ce59 [ 79.390600][ T1598] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 79.390607][ T1598] RBP: 00007f56dee34090 R08: 0000000000000000 R09: 0000000000000000 [ 79.390613][ T1598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.390619][ T1598] R13: 00007f56de216038 R14: 00007f56de215fa0 R15: 00007ffdf40819b8 [ 79.390631][ T1598] [ 79.655502][ T1604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.664237][ T1604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.740244][ T1615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 79.959748][ T1622] FAULT_INJECTION: forcing a failure. [ 79.959748][ T1622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.972921][ T1622] CPU: 1 UID: 0 PID: 1622 Comm: syz.0.401 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 79.972951][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.972961][ T1622] Call Trace: [ 79.972966][ T1622] [ 79.972974][ T1622] __dump_stack+0x21/0x30 [ 79.973002][ T1622] dump_stack_lvl+0x140/0x1c0 [ 79.973026][ T1622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.973051][ T1622] ? check_stack_object+0x12b/0x150 [ 79.973069][ T1622] dump_stack+0x19/0x20 [ 79.973087][ T1622] should_fail_ex+0x3d7/0x530 [ 79.973098][ T1622] should_fail+0xf/0x20 [ 79.973106][ T1622] should_fail_usercopy+0x1e/0x30 [ 79.973116][ T1622] _copy_to_user+0x24/0xa0 [ 79.973128][ T1622] simple_read_from_buffer+0xed/0x160 [ 79.973143][ T1622] proc_fail_nth_read+0x1aa/0x220 [ 79.973157][ T1622] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 79.973171][ T1622] ? bpf_lsm_file_permission+0xd/0x20 [ 79.973184][ T1622] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 79.973198][ T1622] vfs_read+0x286/0xcb0 [ 79.973208][ T1622] ? __cfi_vfs_read+0x10/0x10 [ 79.973217][ T1622] ? __kasan_check_write+0x18/0x20 [ 79.973228][ T1622] ? mutex_lock+0x97/0x1d0 [ 79.973240][ T1622] ? __cfi_mutex_lock+0x10/0x10 [ 79.973252][ T1622] ? __fget_files+0x2c5/0x340 [ 79.973265][ T1622] ksys_read+0x145/0x260 [ 79.973275][ T1622] ? __cfi_ksys_read+0x10/0x10 [ 79.973285][ T1622] ? __kasan_check_read+0x15/0x20 [ 79.973295][ T1622] __x64_sys_read+0x7f/0x90 [ 79.973305][ T1622] x64_sys_call+0x2638/0x2ee0 [ 79.973315][ T1622] do_syscall_64+0x57/0xf0 [ 79.973324][ T1622] ? clear_bhb_loop+0x50/0xa0 [ 79.973338][ T1622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.973350][ T1622] RIP: 0033:0x7fb66e55d68e [ 79.973360][ T1622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.973369][ T1622] RSP: 002b:00007fb66f38dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.973382][ T1622] RAX: ffffffffffffffda RBX: 00007fb66f38e6c0 RCX: 00007fb66e55d68e [ 79.973390][ T1622] RDX: 000000000000000f RSI: 00007fb66f38e0a0 RDI: 0000000000000004 [ 79.973397][ T1622] RBP: 00007fb66f38e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.973403][ T1622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.973409][ T1622] R13: 00007fb66e816038 R14: 00007fb66e815fa0 R15: 00007fffc82abee8 [ 79.973418][ T1622] [ 80.002087][ T491] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 80.239092][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.247730][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.361284][ T491] usb 2-1: device descriptor read/64, error -71 [ 80.413323][ T1655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.422029][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.424725][ T1655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.448143][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.448310][ T1655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.464371][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.465098][ T1655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.472930][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.482836][ T1655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.496680][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.496774][ T1655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.505385][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.601136][ T491] usb 2-1: device descriptor read/64, error -71 [ 80.641126][ T310] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 80.792451][ T310] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.803599][ T310] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.816554][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.823210][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 80.832277][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.840880][ T310] usb 1-1: config 0 descriptor?? [ 80.851131][ T491] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 80.981126][ T491] usb 2-1: device descriptor read/64, error -71 [ 81.221127][ T491] usb 2-1: device descriptor read/64, error -71 [ 81.246427][ T1671] batadv_slave_1: entered promiscuous mode [ 81.252911][ T1653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.261528][ T1653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.269735][ T1670] batadv_slave_1: left promiscuous mode [ 81.275944][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 81.281926][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.291688][ T310] usb 1-1: USB disconnect, device number 41 [ 81.305000][ T1674] fuse: Unknown parameter '0x00000000000000030177777777777777777777700000000000000000000004' [ 81.341271][ T491] usb usb2-port1: attempt power cycle [ 81.352256][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.360823][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.571525][ T1570] can0 (unregistered): slcan off ttynull. [ 81.586072][ T1689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.594639][ T1689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.681137][ T491] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 81.717840][ T491] usb 2-1: device descriptor read/8, error -71 [ 81.852053][ T491] usb 2-1: device descriptor read/8, error -71 [ 82.085457][ T1757] TCP: TCP_TX_DELAY enabled [ 82.091185][ T491] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 82.121256][ T491] usb 2-1: device descriptor read/8, error -71 [ 82.138124][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.146708][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.164591][ T1765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.173131][ T1765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.262106][ T491] usb 2-1: device descriptor read/8, error -71 [ 82.371190][ T491] usb usb2-port1: unable to enumerate USB device [ 82.694164][ T1769] syzkaller1: entered promiscuous mode [ 82.699730][ T1769] syzkaller1: entered allmulticast mode [ 82.772145][ T1779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.785946][ T1779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.944088][ T1798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.952864][ T1798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.061184][ T491] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 83.181143][ T310] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 83.222217][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.233354][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.243120][ T491] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 83.252194][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.260661][ T491] usb 1-1: config 0 descriptor?? [ 83.331108][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 83.339115][ T310] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.352691][ T310] usb 2-1: config 1 interface 0 has no altsetting 0 [ 83.360760][ T310] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 83.370039][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.381276][ T310] usb 2-1: Product: 䠊 [ 83.385459][ T310] usb 2-1: Manufacturer: 츬特並ࢎ잤䞖엇澡ꀼ䏽䴰ז䒜녽 [ 83.394718][ T310] usb 2-1: SerialNumber: Ⰹ [ 83.412647][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 83.412664][ T36] audit: type=1400 audit(1780515188.805:440): avc: denied { read append } for pid=1807 comm="syz.2.454" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.443250][ T36] audit: type=1400 audit(1780515188.805:441): avc: denied { open } for pid=1807 comm="syz.2.454" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.470710][ T36] audit: type=1400 audit(1780515188.855:442): avc: denied { ioctl } for pid=1807 comm="syz.2.454" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.592522][ T1815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.601672][ T1815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.611921][ T1815] usb usb9: usbfs: process 1815 (syz.3.456) did not claim interface 0 before use [ 83.870200][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.879412][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.889828][ T491] usbhid 1-1:0.0: can't add hid device: -71 [ 83.896328][ T491] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.905272][ T491] usb 1-1: USB disconnect, device number 42 [ 84.047346][ T1819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 84.059320][ T1819] pim6reg1: entered promiscuous mode [ 84.064706][ T1819] pim6reg1: entered allmulticast mode [ 84.300041][ T1826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.309472][ T1826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.945184][ T36] audit: type=1400 audit(1780515190.335:443): avc: denied { sqpoll } for pid=1837 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.033067][ T36] audit: type=1400 audit(1780515190.425:444): avc: denied { read } for pid=1842 comm="syz.3.466" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.040488][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.096615][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.288195][ T1864] tipc: Started in network mode [ 85.299927][ T1864] tipc: Node identity 764a28bb6f92, cluster identity 4711 [ 85.317097][ T1864] tipc: Enabled bearer , priority 0 [ 85.334679][ T1864] syzkaller0: MTU too low for tipc bearer [ 85.340476][ T1864] tipc: Disabling bearer [ 85.447361][ T36] audit: type=1326 audit(1780515190.835:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.0.475" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb66e59ce59 code=0x0 [ 85.483856][ T1883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.496050][ T1883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.498360][ T1885] overlayfs: failed to resolve './file0': -2 [ 85.504460][ T36] audit: type=1400 audit(1780515190.885:446): avc: denied { write } for pid=1884 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.551832][ T36] audit: type=1400 audit(1780515190.935:447): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.716370][ T1897] kernel profiling enabled (shift: 4) [ 85.763912][ T1900] netlink: 80 bytes leftover after parsing attributes in process `syz.0.483'. [ 85.773411][ T36] audit: type=1400 audit(1780515191.165:448): avc: denied { setopt } for pid=1899 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.807806][ T1902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.828751][ T36] audit: type=1400 audit(1780515191.215:449): avc: denied { setopt } for pid=1903 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.898040][ T310] usbhid 2-1:1.0: can't add hid device: -71 [ 85.906911][ T310] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 85.917441][ T310] usb 2-1: USB disconnect, device number 36 [ 85.923713][ T1906] kvm: pic: non byte write [ 85.928427][ T1906] kvm: pic: non byte write [ 85.933132][ T1906] kvm: pic: non byte write [ 85.937773][ T1906] kvm: pic: non byte write [ 85.942407][ T1906] kvm: pic: non byte write [ 85.946938][ T1906] kvm: pic: non byte write [ 85.951610][ T1906] kvm: pic: non byte write [ 85.956223][ T1906] kvm: pic: non byte write [ 85.960829][ T1906] kvm: pic: non byte write [ 85.965581][ T1906] kvm: pic: non byte write [ 86.074999][ T1915] kvm: kvm [1914]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 86.086218][ T1915] kvm: kvm [1914]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 86.108302][ T1927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.119022][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.119745][ T1927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.133282][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.331319][ T64] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 86.461121][ T64] usb 2-1: device descriptor read/64, error -71 [ 86.561151][ T310] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 86.652919][ T1933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.661413][ T1934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.661790][ T1933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.670802][ T1934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.701130][ T64] usb 2-1: device descriptor read/64, error -71 [ 86.711140][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 86.717384][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.728403][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.738304][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.751137][ T310] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.760165][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.769037][ T310] usb 1-1: config 0 descriptor?? [ 86.941136][ T64] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 86.977202][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 86.983196][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 86.992089][ T310] usb 1-1: USB disconnect, device number 43 [ 87.071147][ T64] usb 2-1: device descriptor read/64, error -71 [ 87.201207][ T1937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.209827][ T1937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.321115][ T64] usb 2-1: device descriptor read/64, error -71 [ 87.431197][ T64] usb usb2-port1: attempt power cycle [ 87.771118][ T64] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 87.792084][ T64] usb 2-1: device descriptor read/8, error -71 [ 87.871130][ T310] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 87.922117][ T64] usb 2-1: device descriptor read/8, error -71 [ 88.033111][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.041773][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.066004][ T310] usb 1-1: string descriptor 0 read error: -22 [ 88.072603][ T310] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 88.093622][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.161137][ T64] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 88.202058][ T64] usb 2-1: device descriptor read/8, error -71 [ 88.215850][ T1981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.231341][ T1981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.256769][ T1984] overlayfs: failed to resolve './file1': -2 [ 88.332052][ T64] usb 2-1: device descriptor read/8, error -71 [ 88.404077][ T310] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 88.416237][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.426288][ T310] usb 1-1: USB disconnect, device number 44 [ 88.435690][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.443665][ T64] usb usb2-port1: unable to enumerate USB device [ 88.449875][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 88.453654][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 88.453670][ T36] audit: type=1400 audit(1780515193.845:453): avc: denied { setattr } for pid=1990 comm="syz.3.514" name="" dev="pipefs" ino=21215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.501814][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.512345][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.514572][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.538828][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.620942][ T36] audit: type=1400 audit(1780515194.005:454): avc: denied { write } for pid=1998 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.641001][ T1999] input: syz1 as /devices/virtual/input/input17 [ 88.647566][ T36] audit: type=1400 audit(1780515194.025:455): avc: denied { getopt } for pid=1998 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.731119][ T310] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 88.818794][ T2008] syzkaller1: entered promiscuous mode [ 88.842375][ T2008] syzkaller1: entered allmulticast mode [ 88.871103][ T310] usb 1-1: device descriptor read/64, error -71 [ 88.888989][ T2013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.911281][ T2013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.922247][ T2015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.943698][ T2015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.095409][ T2017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.103987][ T2017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.115716][ T2017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.124163][ T310] usb 1-1: device descriptor read/64, error -71 [ 89.124696][ T2017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.371126][ T310] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 89.501128][ T45] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 89.508699][ T310] usb 1-1: device descriptor read/64, error -71 [ 89.635866][ T2027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.644530][ T2027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.672219][ T45] usb 2-1: config 3 has no interfaces? [ 89.677984][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 89.687342][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.761500][ T310] usb 1-1: device descriptor read/64, error -71 [ 89.871796][ T310] usb usb1-port1: attempt power cycle [ 90.211129][ T310] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 90.235607][ T310] usb 1-1: device descriptor read/8, error -71 [ 90.261120][ T2033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=2033 comm=syz.2.527 [ 90.287091][ T36] audit: type=1400 audit(1780515195.675:456): avc: denied { append } for pid=2035 comm="syz.2.528" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.292010][ T2036] fuse: Bad value for 'group_id' [ 90.314623][ T2036] fuse: Bad value for 'group_id' [ 90.372047][ T310] usb 1-1: device descriptor read/8, error -71 [ 90.601586][ T45] usb 2-1: USB disconnect, device number 41 [ 90.611517][ T310] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 90.612727][ T36] audit: type=1400 audit(1780515196.005:457): avc: denied { getopt } for pid=2040 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.639522][ T310] usb 1-1: device descriptor read/8, error -71 [ 90.772238][ T310] usb 1-1: device descriptor read/8, error -71 [ 90.881229][ T310] usb usb1-port1: unable to enumerate USB device [ 91.051178][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 91.140748][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.149306][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.159247][ T2058] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 91.211126][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 91.217397][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.228365][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 91.239301][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.248958][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 91.261856][ T45] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 91.270908][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.279521][ T45] usb 2-1: config 0 descriptor?? [ 91.427393][ T36] audit: type=1400 audit(1780515196.815:458): avc: denied { create } for pid=2059 comm="syz.0.538" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.448037][ T36] audit: type=1400 audit(1780515196.815:459): avc: denied { mounton } for pid=2059 comm="syz.0.538" path="/110/file0" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.471693][ T36] audit: type=1400 audit(1780515196.865:460): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.536270][ T36] audit: type=1326 audit(1780515196.925:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.0.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb66e59ce59 code=0x0 [ 91.588241][ T36] audit: type=1326 audit(1780515196.975:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.0.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e59ce59 code=0x7ffc0000 [ 91.696547][ T45] nintendo 0003:057E:2019.000F: unknown main item tag 0x0 [ 91.703818][ T45] nintendo 0003:057E:2019.000F: unknown main item tag 0x0 [ 91.711085][ T45] nintendo 0003:057E:2019.000F: unknown main item tag 0x0 [ 91.718575][ T45] nintendo 0003:057E:2019.000F: unknown main item tag 0x0 [ 91.726638][ T45] nintendo 0003:057E:2019.000F: unknown main item tag 0x0 [ 91.732476][ T2077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 91.734678][ T45] nintendo 0003:057E:2019.000F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 91.811408][ T45] nintendo 0003:057E:2019.000F: Failed to get joycon info; ret=-90 [ 91.819839][ T45] nintendo 0003:057E:2019.000F: Failed to retrieve controller info; ret=-90 [ 91.828941][ T45] nintendo 0003:057E:2019.000F: Failed to initialize controller; ret=-90 [ 91.841107][ T45] nintendo 0003:057E:2019.000F: probe - fail = -90 [ 91.844875][ T2087] binder: Unknown parameter 'defcontext01777777777777777777777' [ 91.848565][ T45] nintendo 0003:057E:2019.000F: probe with driver nintendo failed with error -90 [ 91.947504][ T45] usb 2-1: USB disconnect, device number 42 [ 91.969090][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.978234][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.987836][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.996421][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.006564][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.015064][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.455630][ T2106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.553'. [ 92.539296][ T2112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.551367][ T2112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.574631][ T2114] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 92.574689][ T2114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 92.582697][ T2114] rust_binder: 2113:2114 transaction to 2113 failed: ENOSPC [ 92.723741][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.741105][ T375] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 92.912122][ T375] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 92.920469][ T375] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 92.935703][ T375] usb 2-1: config 220 has no interface number 2 [ 92.942163][ T375] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 92.956043][ T375] usb 2-1: config 220 interface 0 has no altsetting 0 [ 92.963165][ T375] usb 2-1: config 220 interface 76 has no altsetting 0 [ 92.968300][ T2139] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 92.970657][ T375] usb 2-1: config 220 interface 1 has no altsetting 0 [ 92.986328][ T375] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.998170][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.007434][ T375] usb 2-1: Product: syz [ 93.011661][ T375] usb 2-1: Manufacturer: syz [ 93.016276][ T375] usb 2-1: SerialNumber: syz [ 93.104367][ T2153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.113594][ T2153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.226424][ T375] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 93.236083][ T375] usb 2-1: No valid video chain found. [ 93.242838][ T375] usb 2-1: selecting invalid altsetting 0 [ 93.259241][ T375] usb 2-1: USB disconnect, device number 43 [ 93.297001][ T2169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.306266][ T2169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.557612][ T36] kauditd_printk_skb: 741 callbacks suppressed [ 93.557624][ T36] audit: type=1326 audit(1780515198.945:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.569" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 93.657753][ T36] audit: type=1326 audit(1780515199.045:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.569" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 93.735927][ T36] audit: type=1326 audit(1780515199.125:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.1.577" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56ddf9ce59 code=0x0 [ 93.760637][ T36] audit: type=1326 audit(1780515199.145:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.569" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 93.849098][ T36] audit: type=1400 audit(1780515199.235:1208): avc: denied { remount } for pid=2184 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.873811][ T2193] loop9: detected capacity change from 0 to 1 [ 93.880322][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 93.887033][ T415] Bluetooth: hci1: Frame reassembly failed (-84) [ 93.925623][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.934823][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.951133][ T491] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 94.102120][ T491] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.112257][ T491] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.121152][ T491] usb 1-1: config 1 has no interface number 0 [ 94.127229][ T491] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.138187][ T491] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.148979][ T491] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 94.159399][ T491] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.168584][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.176626][ T491] usb 1-1: Product: syz [ 94.180783][ T491] usb 1-1: Manufacturer: syz [ 94.185397][ T491] usb 1-1: SerialNumber: syz [ 94.190968][ T2173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.400316][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.408896][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.567413][ T2211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.576473][ T2211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.585508][ T2210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.594212][ T2210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.616858][ T36] audit: type=1400 audit(1780515200.005:1209): avc: denied { getopt } for pid=2219 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.637240][ T2173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.750835][ T2230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.759457][ T2230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.791112][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.792596][ T2201] Bluetooth: hci0: command 0x1003 tx timeout [ 94.845306][ T491] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 94.851390][ T491] cdc_ncm 1-1:1.1: bind() failure [ 94.857445][ T491] usb 1-1: USB disconnect, device number 49 [ 95.446055][ T36] audit: type=1400 audit(1780515200.835:1210): avc: denied { mount } for pid=2245 comm="syz.2.599" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.447344][ T2251] 9pnet_fd: Insufficient options for proto=fd [ 95.572099][ T2257] usb usb9: usbfs: process 2257 (syz.1.604) did not claim interface 16 before use [ 95.641123][ T491] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 95.792214][ T491] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.803221][ T491] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 95.814128][ T491] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.826932][ T491] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.833570][ T491] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 95.842624][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.851109][ T491] usb 1-1: config 0 descriptor?? [ 95.856343][ T2248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.911104][ T953] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 95.911141][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 95.934256][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.942896][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.238123][ T2267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.246702][ T2267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.266006][ T491] samsung 0003:0419:0001.0010: unexpected long global item [ 96.273394][ T491] samsung 0003:0419:0001.0010: parse failed [ 96.279337][ T491] samsung 0003:0419:0001.0010: probe with driver samsung failed with error -22 [ 96.466805][ T31] usb 1-1: USB disconnect, device number 50 [ 96.784043][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.792573][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.801315][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.809877][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.818794][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.827373][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.851118][ T491] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 97.001120][ T491] usb 2-1: Using ep0 maxpacket: 32 [ 97.007521][ T491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.017089][ T491] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 97.026150][ T491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.034198][ T491] usb 2-1: Product: syz [ 97.038348][ T491] usb 2-1: Manufacturer: syz [ 97.042953][ T491] usb 2-1: SerialNumber: syz [ 97.076271][ T2296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.084867][ T2296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.231117][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 97.249659][ T491] usb 2-1: unit 4 not found! [ 97.254317][ T491] usb 2-1: unit 0 not found! [ 97.382472][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.390866][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.405433][ T31] usb 1-1: string descriptor 0 read error: -22 [ 97.411827][ T31] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 97.426428][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.434920][ T36] audit: type=1400 audit(1780515202.825:1211): avc: denied { bind } for pid=2301 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.619478][ T2312] rust_binder: Error while translating object. [ 97.619531][ T2312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.625824][ T2312] rust_binder: 2311:2312 transaction to 2311 failed: EINVAL [ 97.662426][ T2281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 97.680633][ T491] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.690269][ T2319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'. [ 97.776068][ T2330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.784653][ T2330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.793266][ T36] audit: type=1400 audit(1780515203.185:1212): avc: denied { nlmsg_read } for pid=2329 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.824281][ T36] audit: type=1400 audit(1780515203.215:1213): avc: denied { read } for pid=2334 comm="syz.3.633" laddr=172.20.20.170 lport=5 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.824421][ T2335] syzkaller1: entered promiscuous mode [ 97.853241][ T2335] syzkaller1: entered allmulticast mode [ 98.075191][ T2344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.083786][ T2344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.092398][ T2344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.100951][ T2344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.110028][ T2344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.118612][ T2344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.183967][ T31] usb 1-1: failed to read current rate; disabling the check [ 98.191591][ T491] usb 2-1: unit 4 not found! [ 98.198406][ T491] usb 2-1: unit 0 not found! [ 98.203491][ T2351] syzkaller1: entered promiscuous mode [ 98.204772][ T491] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 98.208979][ T2351] syzkaller1: entered allmulticast mode [ 98.226766][ T491] usb 2-1: unit 4 not found! [ 98.231598][ T491] usb 2-1: unit 0 not found! [ 98.239491][ T491] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 98.251459][ T491] usb 2-1: USB disconnect, device number 44 [ 98.259516][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 98.292932][ T2354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1801 sclass=netlink_route_socket pid=2354 comm=syz.1.639 [ 98.306648][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.313161][ T2354] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.319578][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.386175][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.394768][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.641115][ T491] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 98.757060][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 98.757076][ T36] audit: type=1400 audit(1780515204.145:1215): avc: denied { map } for pid=2355 comm="syz.3.640" path="socket:[23476]" dev="sockfs" ino=23476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.811762][ T491] usb 2-1: not running at top speed; connect to a high speed hub [ 98.821644][ T491] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 98.830797][ T491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.838884][ T491] usb 2-1: Product: syz [ 98.843235][ T491] usb 2-1: Manufacturer: syz [ 98.851370][ T491] usb 2-1: SerialNumber: syz [ 98.998916][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.007801][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.014543][ T2381] syzkaller1: entered promiscuous mode [ 99.016245][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.022026][ T2381] syzkaller1: entered allmulticast mode [ 99.029956][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.075818][ T491] usb 2-1: MIDIStreaming interface descriptor not found [ 99.089064][ T491] usb 2-1: USB disconnect, device number 45 [ 99.163416][ T36] audit: type=1326 audit(1780515204.555:1216): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.3.649" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00c0f9ce59 code=0x0 [ 99.217219][ T36] audit: type=1400 audit(1780515204.605:1217): avc: denied { shutdown } for pid=2387 comm="syz.3.649" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.641300][ T2394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 99.682673][ T2399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.692887][ T2399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.751186][ T36] audit: type=1400 audit(1780515205.135:1218): avc: granted { setsecparam } for pid=2405 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.808806][ T2413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 99.869462][ T2414] usb usb7: usbfs: process 2414 (syz.2.657) did not claim interface 0 before use [ 99.878899][ T2414] usb usb7: selecting invalid altsetting 7 [ 99.885677][ T2414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 99.918842][ T2418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.928574][ T2418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.032317][ T366] usb 1-1: USB disconnect, device number 51 [ 100.061578][ T36] audit: type=1400 audit(1780515205.455:1219): avc: denied { ioctl } for pid=2425 comm="syz.0.661" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.248296][ T2435] FAULT_INJECTION: forcing a failure. [ 100.248296][ T2435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.261431][ T2435] CPU: 1 UID: 0 PID: 2435 Comm: syz.3.663 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 100.261458][ T2435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.261468][ T2435] Call Trace: [ 100.261474][ T2435] [ 100.261480][ T2435] __dump_stack+0x21/0x30 [ 100.261507][ T2435] dump_stack_lvl+0x140/0x1c0 [ 100.261536][ T2435] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.261558][ T2435] dump_stack+0x19/0x20 [ 100.261578][ T2435] should_fail_ex+0x3d7/0x530 [ 100.261595][ T2435] should_fail+0xf/0x20 [ 100.261609][ T2435] should_fail_usercopy+0x1e/0x30 [ 100.261625][ T2435] _copy_from_iter+0x1a9/0x1510 [ 100.261643][ T2435] ? avc_has_perm+0x155/0x240 [ 100.261661][ T2435] ? __cfi_avc_has_perm+0x10/0x10 [ 100.261678][ T2435] ? kasan_save_alloc_info+0x40/0x50 [ 100.261701][ T2435] ? __cfi__copy_from_iter+0x10/0x10 [ 100.261720][ T2435] tun_get_user+0x235/0x36c0 [ 100.261744][ T2435] ? ptr_ring_consume+0x430/0x430 [ 100.261766][ T2435] ? is_bpf_text_address+0x17b/0x1a0 [ 100.261790][ T2435] ? kernel_text_address+0xa9/0xe0 [ 100.261811][ T2435] ? __kasan_check_write+0x18/0x20 [ 100.261827][ T2435] ? ref_tracker_alloc+0x30d/0x590 [ 100.261845][ T2435] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 100.261863][ T2435] ? _parse_integer+0x2e/0x40 [ 100.261885][ T2435] ? kstrtoull+0x13b/0x1e0 [ 100.261906][ T2435] tun_chr_write_iter+0x1fc/0x310 [ 100.261927][ T2435] do_iter_readv_writev+0x62c/0x820 [ 100.261945][ T2435] ? vfs_iter_read+0x5f0/0x5f0 [ 100.261963][ T2435] ? bpf_lsm_file_permission+0xd/0x20 [ 100.261984][ T2435] vfs_writev+0x4a8/0xe50 [ 100.262004][ T2435] ? do_writev+0x2e0/0x2e0 [ 100.262022][ T2435] ? vfs_write+0x9a4/0xf90 [ 100.262042][ T2435] do_writev+0x151/0x2e0 [ 100.262060][ T2435] ? vfs_readv+0xa10/0xa10 [ 100.262079][ T2435] ? __kasan_check_read+0x15/0x20 [ 100.262095][ T2435] __x64_sys_writev+0x81/0x90 [ 100.262112][ T2435] x64_sys_call+0x1fbb/0x2ee0 [ 100.262127][ T2435] do_syscall_64+0x57/0xf0 [ 100.262144][ T2435] ? clear_bhb_loop+0x50/0xa0 [ 100.262162][ T2435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.262180][ T2435] RIP: 0033:0x7f00c0f9ce59 [ 100.262194][ T2435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.262208][ T2435] RSP: 002b:00007f00bf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 100.262226][ T2435] RAX: ffffffffffffffda RBX: 00007f00c1215fa0 RCX: 00007f00c0f9ce59 [ 100.262239][ T2435] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000003 [ 100.262250][ T2435] RBP: 00007f00bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.262261][ T2435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.262272][ T2435] R13: 00007f00c1216038 R14: 00007f00c1215fa0 R15: 00007ffc04041e38 [ 100.262286][ T2435] [ 100.547565][ T953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.549328][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 100.607339][ T2445] fuse: Bad value for 'user_id' [ 100.612278][ T2445] fuse: Bad value for 'user_id' [ 100.619037][ T2445] fuse: Unknown parameter ' [ 100.619037][ T2445] ' [ 100.652837][ T2453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.661667][ T2453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.667030][ T2455] netlink: 'syz.2.670': attribute type 93 has an invalid length. [ 100.677295][ T2456] netlink: 'syz.2.670': attribute type 93 has an invalid length. [ 100.748543][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.757090][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.095826][ T2469] FAULT_INJECTION: forcing a failure. [ 101.095826][ T2469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.108914][ T2469] CPU: 1 UID: 0 PID: 2469 Comm: syz.1.675 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 101.108943][ T2469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.108954][ T2469] Call Trace: [ 101.108960][ T2469] [ 101.108971][ T2469] __dump_stack+0x21/0x30 [ 101.108990][ T2469] dump_stack_lvl+0x140/0x1c0 [ 101.109005][ T2469] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.109018][ T2469] ? do_syscall_64+0x57/0xf0 [ 101.109029][ T2469] dump_stack+0x19/0x20 [ 101.109042][ T2469] should_fail_ex+0x3d7/0x530 [ 101.109053][ T2469] should_fail+0xf/0x20 [ 101.109061][ T2469] should_fail_usercopy+0x1e/0x30 [ 101.109071][ T2469] _copy_from_iter+0x1a9/0x1510 [ 101.109083][ T2469] ? __cfi__copy_from_iter+0x10/0x10 [ 101.109094][ T2469] ? __check_object_size+0x527/0x830 [ 101.109105][ T2469] ? __cfi___check_object_size+0x10/0x10 [ 101.109115][ T2469] ? __kasan_check_write+0x18/0x20 [ 101.109126][ T2469] ? __build_skb_around+0x2a4/0x590 [ 101.109138][ T2469] skb_copy_datagram_from_iter+0x100/0x700 [ 101.109153][ T2469] ? __cfi_mutex_lock+0x10/0x10 [ 101.109166][ T2469] tun_get_user+0x16ef/0x36c0 [ 101.109182][ T2469] ? ptr_ring_consume+0x430/0x430 [ 101.109195][ T2469] ? is_bpf_text_address+0x17b/0x1a0 [ 101.109211][ T2469] ? kernel_text_address+0xa9/0xe0 [ 101.109225][ T2469] ? __kasan_check_write+0x18/0x20 [ 101.109234][ T2469] ? ref_tracker_alloc+0x30d/0x590 [ 101.109245][ T2469] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 101.109256][ T2469] ? _parse_integer+0x2e/0x40 [ 101.109269][ T2469] ? kstrtoull+0x13b/0x1e0 [ 101.109283][ T2469] tun_chr_write_iter+0x1fc/0x310 [ 101.109296][ T2469] do_iter_readv_writev+0x62c/0x820 [ 101.109308][ T2469] ? vfs_iter_read+0x5f0/0x5f0 [ 101.109319][ T2469] ? bpf_lsm_file_permission+0xd/0x20 [ 101.109332][ T2469] vfs_writev+0x4a8/0xe50 [ 101.109345][ T2469] ? do_writev+0x2e0/0x2e0 [ 101.109357][ T2469] ? vfs_write+0x9a4/0xf90 [ 101.109374][ T2469] do_writev+0x151/0x2e0 [ 101.109386][ T2469] ? vfs_readv+0xa10/0xa10 [ 101.109398][ T2469] ? __kasan_check_read+0x15/0x20 [ 101.109407][ T2469] __x64_sys_writev+0x81/0x90 [ 101.109418][ T2469] x64_sys_call+0x1fbb/0x2ee0 [ 101.109427][ T2469] do_syscall_64+0x57/0xf0 [ 101.109437][ T2469] ? clear_bhb_loop+0x50/0xa0 [ 101.109450][ T2469] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.109461][ T2469] RIP: 0033:0x7f56ddf9ce59 [ 101.109474][ T2469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.109482][ T2469] RSP: 002b:00007f56dee34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 101.109501][ T2469] RAX: ffffffffffffffda RBX: 00007f56de215fa0 RCX: 00007f56ddf9ce59 [ 101.109514][ T2469] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000003 [ 101.109525][ T2469] RBP: 00007f56dee34090 R08: 0000000000000000 R09: 0000000000000000 [ 101.109537][ T2469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.109545][ T2469] R13: 00007f56de216038 R14: 00007f56de215fa0 R15: 00007ffdf40819b8 [ 101.109553][ T2469] [ 101.408518][ T45] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 101.424545][ T36] audit: type=1400 audit(1780515206.815:1220): avc: denied { accept } for pid=2470 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.558669][ T2474] cgroup: fork rejected by pids controller in /syz3 [ 101.599728][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 101.610658][ T45] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.621634][ T45] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 101.634813][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.637734][ T36] audit: type=1400 audit(1780515207.025:1221): avc: denied { create } for pid=2612 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.641447][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 101.641471][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.680290][ T45] usb 1-1: config 0 descriptor?? [ 101.685694][ T2467] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.735585][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.763199][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.103961][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 102.113712][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.129168][ T45] usb 1-1: USB disconnect, device number 52 [ 102.316069][ T2633] input: syz1 as /devices/virtual/input/input18 [ 102.344703][ T2637] FAULT_INJECTION: forcing a failure. [ 102.344703][ T2637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.359148][ T2637] CPU: 1 UID: 0 PID: 2637 Comm: syz.3.685 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 102.359176][ T2637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.359187][ T2637] Call Trace: [ 102.359192][ T2637] [ 102.359199][ T2637] __dump_stack+0x21/0x30 [ 102.359226][ T2637] dump_stack_lvl+0x140/0x1c0 [ 102.359248][ T2637] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.359269][ T2637] ? do_syscall_64+0x57/0xf0 [ 102.359288][ T2637] dump_stack+0x19/0x20 [ 102.359308][ T2637] should_fail_ex+0x3d7/0x530 [ 102.359324][ T2637] should_fail+0xf/0x20 [ 102.359337][ T2637] should_fail_usercopy+0x1e/0x30 [ 102.359353][ T2637] _copy_from_iter+0x1a9/0x1510 [ 102.359373][ T2637] ? __cfi__copy_from_iter+0x10/0x10 [ 102.359390][ T2637] ? __check_object_size+0x527/0x830 [ 102.359407][ T2637] ? __cfi___check_object_size+0x10/0x10 [ 102.359424][ T2637] ? __kasan_check_write+0x18/0x20 [ 102.359440][ T2637] ? __build_skb_around+0x2a4/0x590 [ 102.359461][ T2637] skb_copy_datagram_from_iter+0x100/0x700 [ 102.359484][ T2637] ? __cfi_mutex_lock+0x10/0x10 [ 102.359504][ T2637] tun_get_user+0x16ef/0x36c0 [ 102.359528][ T2637] ? ptr_ring_consume+0x430/0x430 [ 102.359549][ T2637] ? is_bpf_text_address+0x17b/0x1a0 [ 102.359573][ T2637] ? kernel_text_address+0xa9/0xe0 [ 102.359595][ T2637] ? __kasan_check_write+0x18/0x20 [ 102.359610][ T2637] ? ref_tracker_alloc+0x30d/0x590 [ 102.359627][ T2637] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 102.359645][ T2637] ? _parse_integer+0x2e/0x40 [ 102.359667][ T2637] ? kstrtoull+0x13b/0x1e0 [ 102.359687][ T2637] tun_chr_write_iter+0x1fc/0x310 [ 102.359709][ T2637] do_iter_readv_writev+0x62c/0x820 [ 102.359727][ T2637] ? vfs_iter_read+0x5f0/0x5f0 [ 102.359744][ T2637] ? bpf_lsm_file_permission+0xd/0x20 [ 102.359764][ T2637] vfs_writev+0x4a8/0xe50 [ 102.359784][ T2637] ? do_writev+0x2e0/0x2e0 [ 102.359801][ T2637] ? vfs_write+0x9a4/0xf90 [ 102.359821][ T2637] do_writev+0x151/0x2e0 [ 102.359839][ T2637] ? vfs_readv+0xa10/0xa10 [ 102.359858][ T2637] ? __kasan_check_read+0x15/0x20 [ 102.359874][ T2637] __x64_sys_writev+0x81/0x90 [ 102.359890][ T2637] x64_sys_call+0x1fbb/0x2ee0 [ 102.359906][ T2637] do_syscall_64+0x57/0xf0 [ 102.359921][ T2637] ? clear_bhb_loop+0x50/0xa0 [ 102.359940][ T2637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.359964][ T2637] RIP: 0033:0x7f00c0f9ce59 [ 102.359978][ T2637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.359992][ T2637] RSP: 002b:00007f00bf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 102.360011][ T2637] RAX: ffffffffffffffda RBX: 00007f00c1215fa0 RCX: 00007f00c0f9ce59 [ 102.360023][ T2637] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000003 [ 102.360034][ T2637] RBP: 00007f00bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.360045][ T2637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.360055][ T2637] R13: 00007f00c1216038 R14: 00007f00c1215fa0 R15: 00007ffc04041e38 [ 102.360069][ T2637] [ 102.791137][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 102.892808][ T2650] netlink: 220 bytes leftover after parsing attributes in process `syz.3.689'. [ 102.952146][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.963267][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 102.979862][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.001096][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.003839][ T2657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.009108][ T45] usb 1-1: Product: syz [ 103.009126][ T45] usb 1-1: Manufacturer: syz [ 103.009140][ T45] usb 1-1: SerialNumber: syz [ 103.033963][ T2657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.047442][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 103.248778][ T2630] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.458192][ T45] cdc_mbim 1-1:1.0: bind() failure [ 103.464083][ T45] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 103.472393][ T45] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 103.482286][ T45] usb 1-1: USB disconnect, device number 53 [ 103.575300][ T2661] netlink: 'syz.3.693': attribute type 46 has an invalid length. [ 103.715703][ T2673] FAULT_INJECTION: forcing a failure. [ 103.715703][ T2673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.720429][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.728988][ T2673] CPU: 1 UID: 0 PID: 2673 Comm: syz.3.697 Not tainted syzkaller #0 0407fd87b9b5389fc2df16610a17caff68e0c4f0 [ 103.729015][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.729026][ T2673] Call Trace: [ 103.729032][ T2673] [ 103.729039][ T2673] __dump_stack+0x21/0x30 [ 103.729067][ T2673] dump_stack_lvl+0x140/0x1c0 [ 103.729091][ T2673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.729115][ T2673] ? check_stack_object+0x12b/0x150 [ 103.729139][ T2673] dump_stack+0x19/0x20 [ 103.729162][ T2673] should_fail_ex+0x3d7/0x530 [ 103.729180][ T2673] should_fail+0xf/0x20 [ 103.729195][ T2673] should_fail_usercopy+0x1e/0x30 [ 103.729213][ T2673] _copy_to_user+0x24/0xa0 [ 103.729234][ T2673] simple_read_from_buffer+0xed/0x160 [ 103.729265][ T2673] proc_fail_nth_read+0x1aa/0x220 [ 103.729289][ T2673] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.729315][ T2673] ? vfs_writev+0xacb/0xe50 [ 103.729336][ T2673] ? bpf_lsm_file_permission+0xd/0x20 [ 103.729359][ T2673] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.729382][ T2673] vfs_read+0x286/0xcb0 [ 103.729400][ T2673] ? __cfi_vfs_read+0x10/0x10 [ 103.729415][ T2673] ? __kasan_check_write+0x18/0x20 [ 103.729433][ T2673] ? mutex_lock+0x97/0x1d0 [ 103.729453][ T2673] ? __cfi_mutex_lock+0x10/0x10 [ 103.729474][ T2673] ? __fget_files+0x2c5/0x340 [ 103.729495][ T2673] ksys_read+0x145/0x260 [ 103.729513][ T2673] ? __cfi_ksys_read+0x10/0x10 [ 103.729529][ T2673] ? __kasan_check_read+0x15/0x20 [ 103.729547][ T2673] __x64_sys_read+0x7f/0x90 [ 103.729564][ T2673] x64_sys_call+0x2638/0x2ee0 [ 103.729581][ T2673] do_syscall_64+0x57/0xf0 [ 103.729599][ T2673] ? clear_bhb_loop+0x50/0xa0 [ 103.729619][ T2673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.729640][ T2673] RIP: 0033:0x7f00c0f5d68e [ 103.729655][ T2673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.729670][ T2673] RSP: 002b:00007f00bf9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.729690][ T2673] RAX: ffffffffffffffda RBX: 00007f00bf9f76c0 RCX: 00007f00c0f5d68e [ 103.729704][ T2673] RDX: 000000000000000f RSI: 00007f00bf9f70a0 RDI: 0000000000000004 [ 103.729716][ T2673] RBP: 00007f00bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.729727][ T2673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.729738][ T2673] R13: 00007f00c1216038 R14: 00007f00c1215fa0 R15: 00007ffc04041e38 [ 103.729753][ T2673] [ 103.979396][ T366] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 103.979571][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.998221][ T2677] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 104.006469][ T36] audit: type=1400 audit(1780515209.385:1222): avc: denied { mounton } for pid=2676 comm="syz.0.698" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 104.006511][ T2678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 104.045869][ T36] audit: type=1400 audit(1780515209.435:1223): avc: denied { read } for pid=2680 comm="syz.3.699" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.078382][ T36] audit: type=1400 audit(1780515209.435:1224): avc: denied { open } for pid=2680 comm="syz.3.699" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.102983][ T36] audit: type=1400 audit(1780515209.445:1225): avc: denied { ioctl } for pid=2680 comm="syz.3.699" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.141109][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 104.147305][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.158224][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.167994][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.180785][ T366] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.189827][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.198331][ T366] usb 2-1: config 0 descriptor?? [ 104.341112][ T45] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 104.471116][ T45] usb 1-1: device descriptor read/64, error -71 [ 104.540625][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.549155][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.557634][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.566130][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.606312][ T2659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.615709][ T2693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.624220][ T2659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.633847][ T2693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.641447][ T2694] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 104.650328][ T366] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 104.671143][ T2691] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 104.673437][ T366] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input19 [ 104.691818][ T366] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 104.721108][ T45] usb 1-1: device descriptor read/64, error -71 [ 104.858451][ T375] usb 2-1: USB disconnect, device number 46 [ 104.961112][ T45] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 105.091122][ T45] usb 1-1: device descriptor read/64, error -71 [ 105.341113][ T45] usb 1-1: device descriptor read/64, error -71 [ 105.433251][ T2701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2701 comm=syz.1.705 [ 105.461228][ T45] usb usb1-port1: attempt power cycle [ 105.801510][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 105.832166][ T45] usb 1-1: device descriptor read/8, error -71 [ 105.938568][ T36] audit: type=1400 audit(1780515211.325:1226): avc: denied { map } for pid=2703 comm="syz.3.706" path="pipe:[24349]" dev="pipefs" ino=24349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 105.965267][ T36] audit: type=1400 audit(1780515211.325:1227): avc: denied { execute } for pid=2703 comm="syz.3.706" path="pipe:[24349]" dev="pipefs" ino=24349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 105.994251][ T45] usb 1-1: device descriptor read/8, error -71 [ 106.172582][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.181264][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.191153][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.200321][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.209333][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.218645][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.227509][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.237498][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.247824][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.251103][ T45] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 106.256513][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.274198][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.283528][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.302259][ T45] usb 1-1: device descriptor read/8, error -71 [ 106.336997][ T36] audit: type=1400 audit(1780515211.725:1228): avc: denied { write } for pid=2719 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.462091][ T45] usb 1-1: device descriptor read/8, error -71 [ 106.511034][ T375] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 106.571217][ T45] usb usb1-port1: unable to enumerate USB device [ 106.721099][ T375] usb 2-1: Using ep0 maxpacket: 8 [ 106.733429][ T375] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 106.751119][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.763458][ T375] usb 2-1: Product: syz [ 106.770887][ T375] usb 2-1: Manufacturer: syz [ 106.778768][ T375] usb 2-1: SerialNumber: syz [ 107.176348][ T36] audit: type=1400 audit(1780515212.565:1229): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.204750][ T375] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 107.229398][ T375] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 107.243912][ T36] audit: type=1400 audit(1780515212.585:1230): avc: denied { shutdown } for pid=2729 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.259555][ T375] usb 2-1: USB disconnect, device number 47 [ 107.452972][ T2755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.471933][ T2755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.480696][ T2756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.501650][ T2756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.599933][ T36] audit: type=1400 audit(1780515212.985:1231): avc: denied { cmd } for pid=2758 comm="iou-wrk-2759" path="socket:[24531]" dev="sockfs" ino=24531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.634544][ T488] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 107.694794][ T2763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.703387][ T2763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.769395][ T2773] random: crng reseeded on system resumption [ 107.792441][ T488] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.817720][ T488] usb 1-1: string descriptor 0 read error: -22 [ 107.824049][ T488] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 107.841128][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.863630][ T488] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.030806][ T2786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.039371][ T2788] cgroup: Need name or subsystem set [ 108.066068][ T488] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 108.081132][ T375] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 108.081217][ T488] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 108.097818][ T2789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.099392][ T488] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.106869][ T2789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.128383][ T488] usb 1-1: USB disconnect, device number 58 [ 108.282385][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.285642][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.293411][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.303343][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.311667][ T375] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.326530][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.332467][ T375] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.341552][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.349575][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.362709][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.368018][ T375] usb 2-1: config 0 descriptor?? [ 108.376929][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.675851][ T2805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 108.685517][ T2805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 108.785150][ T375] usbhid 2-1:0.0: can't add hid device: -71 [ 108.791354][ T375] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.802132][ T375] usb 2-1: USB disconnect, device number 48 [ 108.928262][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.956446][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.011126][ T45] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 109.141132][ T375] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 109.162203][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.173755][ T45] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 109.182897][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.190875][ T45] usb 1-1: Product: syz [ 109.195094][ T45] usb 1-1: Manufacturer: syz [ 109.199681][ T45] usb 1-1: SerialNumber: syz [ 109.204796][ T45] usb 1-1: config 0 descriptor?? [ 109.292456][ T375] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.300776][ T375] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 20736, setting to 8 [ 109.313635][ T375] usb 2-1: string descriptor 0 read error: -22 [ 109.319839][ T375] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 109.328887][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.337672][ T2813] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.345482][ T375] usb 2-1: selecting invalid altsetting 1 [ 109.355295][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 109.371510][ T375] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 109.533719][ T2821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.542272][ T2821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.548689][ T488] usb 2-1: USB disconnect, device number 49 [ 110.321115][ T488] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 110.471132][ T488] usb 2-1: Using ep0 maxpacket: 8 [ 110.479454][ T488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.487737][ T488] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 110.495330][ T488] usb 2-1: can't read configurations, error -71 [ 111.041784][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 111.041801][ T36] audit: type=1326 audit(1780515216.435:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 111.073460][ T36] audit: type=1326 audit(1780515216.435:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 111.087021][ T2839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.098940][ T36] audit: type=1326 audit(1780515216.435:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 111.108228][ T2838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.132562][ T36] audit: type=1326 audit(1780515216.435:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 111.142158][ T2839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.166113][ T2838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.175574][ T2839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.181704][ T36] audit: type=1326 audit(1780515216.435:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 111.190596][ T2839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.215105][ T36] audit: type=1326 audit(1780515216.435:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa39c59e6c7 code=0x7ffc0000 [ 111.247808][ T36] audit: type=1326 audit(1780515216.435:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 111.273033][ T36] audit: type=1326 audit(1780515216.435:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 111.298246][ T36] audit: type=1326 audit(1780515216.435:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 111.323493][ T36] audit: type=1326 audit(1780515216.435:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.2.741" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 111.706888][ T488] usb 1-1: USB disconnect, device number 59 [ 111.761818][ T2848] SELinux: policydb magic number 0x224e000a does not match expected magic number 0xf97cff8c [ 111.772165][ T2848] SELinux: failed to load policy [ 111.991761][ T2857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.000323][ T2857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.017376][ T2862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.026072][ T2862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.081138][ T45] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 112.232368][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.240389][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 112.248850][ T45] usb 2-1: config 1 interface 0 altsetting 97 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 112.259851][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 112.267823][ T45] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 112.276894][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.284931][ T45] usb 2-1: Product: syz [ 112.289090][ T45] usb 2-1: Manufacturer: syz [ 112.293733][ T45] usb 2-1: SerialNumber: syz [ 112.299274][ T2854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.493489][ T2865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.502050][ T2865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.511677][ T45] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 97 proto 2 vid 0x04B8 pid 0x0202 [ 112.571677][ T2869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.751'. [ 112.594506][ T2872] netlink: 'syz.0.753': attribute type 12 has an invalid length. [ 112.634228][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.643000][ T2878] overlay: Unknown parameter 'uid<00000000000000000000' [ 112.643118][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.711737][ T375] usb 2-1: USB disconnect, device number 52 [ 112.718249][ T375] usblp0: removed [ 112.941119][ T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 113.091104][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 113.097434][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.110448][ T45] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 113.119634][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.129882][ T45] usb 1-1: config 0 descriptor?? [ 113.231132][ T2898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.239985][ T2900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1062 sclass=netlink_route_socket pid=2900 comm=syz.1.761 [ 113.249120][ T2898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.260748][ T2904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.273258][ T2904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.343955][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 113.349971][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.358703][ T45] usb 1-1: USB disconnect, device number 60 [ 113.381411][ T2907] exFAT-fs (rnullb0): invalid boot record signature [ 113.388033][ T2907] exFAT-fs (rnullb0): failed to read boot sector [ 113.394458][ T2907] exFAT-fs (rnullb0): failed to recognize exfat type [ 113.511118][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 113.662786][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 113.671970][ T31] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 113.680031][ T31] usb 2-1: Product: syz [ 113.684787][ T31] usb 2-1: config 0 descriptor?? [ 113.690691][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 113.698582][ T31] usb 2-1: Detected FT232H [ 113.896459][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 113.917700][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 113.934847][ T31] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 113.947673][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.962330][ T31] usb 2-1: USB disconnect, device number 53 [ 113.970823][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 113.987078][ T31] ftdi_sio 2-1:0.0: device disconnected [ 114.010870][ T2933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.019280][ T2921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.019926][ T2933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.027851][ T2921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.491030][ T31] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 114.581497][ T2944] veth0_virt_wifi: entered promiscuous mode [ 114.587520][ T2944] veth0_virt_wifi: entered allmulticast mode [ 114.624157][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.634257][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.652112][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.663292][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.680125][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 114.692058][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.700370][ T31] usb 1-1: Product: syz [ 114.707435][ T31] usb 1-1: Manufacturer: syz [ 114.712323][ T31] usb 1-1: SerialNumber: syz [ 114.920590][ T31] usb 1-1: 0:1 : does not exist [ 114.925557][ T31] usb 1-1: unit 0 not found! [ 114.931685][ T31] usb 1-1: USB disconnect, device number 61 [ 114.941535][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 115.373257][ T2959] fuse: Unknown parameter '0x0000000000000008' [ 115.426408][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.436996][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.558754][ T2967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.900847][ T31] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 115.928636][ T2974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.937817][ T2974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.967565][ T2977] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 115.975390][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 115.994445][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.002943][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.011910][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.020352][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.060808][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 116.067029][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.073672][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 116.082754][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.091509][ T31] usb 1-1: config 0 descriptor?? [ 116.346441][ T2965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.354957][ T2965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.371771][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 116.377753][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.386580][ T31] usb 1-1: USB disconnect, device number 62 [ 116.455429][ T2982] netlink: 'syz.2.789': attribute type 4 has an invalid length. [ 116.463116][ T2982] netlink: 17 bytes leftover after parsing attributes in process `syz.2.789'. [ 116.474087][ T2982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.482551][ T2982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.082768][ T3000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.091630][ T3000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.201350][ T31] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 117.330659][ T31] usb 1-1: device descriptor read/64, error -71 [ 117.570645][ T31] usb 1-1: device descriptor read/64, error -71 [ 117.731089][ T3012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.801'. [ 117.757715][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.766729][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.784600][ T3017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.793093][ T3018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.793727][ T3017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.801584][ T3018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.820627][ T31] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 117.950595][ T31] usb 1-1: device descriptor read/64, error -71 [ 118.190569][ T31] usb 1-1: device descriptor read/64, error -71 [ 118.290331][ T3021] syz.3.804 uses obsolete (PF_INET,SOCK_PACKET) [ 118.300649][ T31] usb usb1-port1: attempt power cycle [ 118.348197][ T3024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.356764][ T3024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.382201][ T3025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.390972][ T3025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.640514][ T31] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 118.661476][ T31] usb 1-1: device descriptor read/8, error -71 [ 118.703148][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 118.703166][ T36] audit: type=1400 audit(1780515480.086:1267): avc: denied { accept } for pid=3033 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.791475][ T31] usb 1-1: device descriptor read/8, error -71 [ 118.950489][ T310] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 118.995981][ T3040] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 119.030592][ T31] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 119.051456][ T31] usb 1-1: device descriptor read/8, error -71 [ 119.063974][ T36] audit: type=1400 audit(1780515480.446:1268): avc: denied { mounton } for pid=3042 comm="syz.3.811" path="/file0" dev="ramfs" ino=27503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 119.111767][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.120196][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 119.132566][ T310] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 119.141664][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.149641][ T310] usb 2-1: Product: syz [ 119.153808][ T310] usb 2-1: Manufacturer: syz [ 119.158406][ T310] usb 2-1: SerialNumber: syz [ 119.191397][ T31] usb 1-1: device descriptor read/8, error -71 [ 119.300500][ T31] usb usb1-port1: unable to enumerate USB device [ 119.568087][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.575561][ T310] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 119.589882][ T310] usb 2-1: USB disconnect, device number 54 [ 119.599739][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 120.108726][ T3048] netlink: 'syz.1.813': attribute type 27 has an invalid length. [ 120.319774][ T3067] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 120.327482][ T3067] netlink: 'syz.1.818': attribute type 5 has an invalid length. [ 120.335357][ T3067] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.818'. [ 120.610530][ T310] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 120.770256][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 120.776390][ T310] usb 2-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 120.786712][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.795683][ T375] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 120.804741][ T310] usb 2-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 120.813843][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.821980][ T310] usb 2-1: Product: syz [ 120.826140][ T310] usb 2-1: Manufacturer: syz [ 120.830743][ T310] usb 2-1: SerialNumber: syz [ 120.951666][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.960402][ T375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 120.967999][ T375] usb 1-1: can't read configurations, error -61 [ 121.100195][ T375] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 121.251538][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.260342][ T375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 121.267918][ T375] usb 1-1: can't read configurations, error -61 [ 121.274323][ T375] usb usb1-port1: attempt power cycle [ 121.412021][ T3081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.420595][ T3081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.564333][ T310] usb 2-1: USB disconnect, device number 55 [ 121.574663][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 121.620166][ T375] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 121.641777][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.650626][ T375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 121.658267][ T375] usb 1-1: can't read configurations, error -61 [ 121.790184][ T375] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 121.812659][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.821422][ T375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 121.828992][ T375] usb 1-1: can't read configurations, error -61 [ 121.835414][ T375] usb usb1-port1: unable to enumerate USB device [ 121.910118][ T310] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 122.060102][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 122.066394][ T310] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.074669][ T310] usb 2-1: config 0 has no interface number 0 [ 122.080812][ T310] usb 2-1: config 0 interface 184 has no altsetting 0 [ 122.089022][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.098371][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.106403][ T310] usb 2-1: Product: syz [ 122.110590][ T310] usb 2-1: Manufacturer: syz [ 122.115185][ T310] usb 2-1: SerialNumber: syz [ 122.120423][ T310] usb 2-1: config 0 descriptor?? [ 122.126092][ T310] smsc75xx v1.0.0 [ 122.527254][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 122.538133][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 122.547795][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 122.558033][ T310] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 123.570324][ T3097] pim6reg1: entered allmulticast mode [ 123.939858][ T45] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 124.089851][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 124.096086][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.104304][ T45] usb 1-1: config 0 has no interface number 0 [ 124.110423][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 124.118548][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.127628][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.135625][ T45] usb 1-1: Product: syz [ 124.139806][ T45] usb 1-1: Manufacturer: syz [ 124.144396][ T45] usb 1-1: SerialNumber: syz [ 124.149451][ T45] usb 1-1: config 0 descriptor?? [ 124.155373][ T45] smsc75xx v1.0.0 [ 124.361225][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.395213][ T36] audit: type=1400 audit(1780515485.777:1269): avc: denied { remount } for pid=3117 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.415041][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 124.424779][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 124.437317][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 124.446710][ T45] usb 1-1: USB disconnect, device number 71 [ 124.489488][ T3126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.498022][ T3126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.611677][ T64] usb 2-1: USB disconnect, device number 56 [ 124.629022][ T3131] netlink: 'syz.1.837': attribute type 58 has an invalid length. [ 124.912266][ T3141] syzkaller1: entered promiscuous mode [ 124.917823][ T3141] syzkaller1: entered allmulticast mode [ 124.983250][ T3148] overlayfs: missing 'workdir' [ 125.035086][ T3155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.043957][ T3155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.409710][ T45] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 125.510482][ T370] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 125.559679][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 125.569509][ T3160] incfs: iterate_incfs_dir / -22 [ 125.608698][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.616980][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 125.624607][ T45] usb 2-1: can't read configurations, error -71 [ 125.650334][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.658822][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.668094][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.670098][ T370] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 58688, setting to 1024 [ 125.676990][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.688921][ T370] usb 1-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice= 0.40 [ 125.704487][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.712514][ T370] usb 1-1: Product: 䡊獢ꖉ纘裯桋㒮 [ 125.718234][ T370] usb 1-1: Manufacturer: Й [ 125.722750][ T370] usb 1-1: SerialNumber: syz [ 125.929806][ T3163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.930463][ T370] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 125.938829][ T3163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.948380][ T370] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 125.972012][ T370] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 125.980232][ T3177] raw_sendmsg: syz.0.851 forgot to set AF_INET. Fix it! [ 125.986134][ T370] usb 1-1: USB disconnect, device number 72 [ 126.000033][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 126.008691][ T3177] SELinux: security_context_str_to_sid () failed with errno=-22 [ 126.020504][ T36] audit: type=1400 audit(1780515487.387:1270): avc: denied { mounton } for pid=3176 comm="syz.0.851" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.125814][ T3189] syzkaller0: entered promiscuous mode [ 126.131343][ T3189] syzkaller0: entered allmulticast mode [ 126.281426][ T3205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.289987][ T3205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.439598][ T370] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 126.590740][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 126.601599][ T370] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 126.614506][ T370] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 126.623665][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.632197][ T370] usb 1-1: config 0 descriptor?? [ 126.637426][ T3187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.679527][ T45] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 126.824642][ T3207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.833229][ T3207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.834910][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.847743][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 126.856837][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.865985][ T370] kye 0003:0458:0087.0012: unknown main item tag 0x2 [ 126.872919][ T45] usb 2-1: config 0 descriptor?? [ 126.877927][ T370] kye 0003:0458:0087.0012: bogus close delimiter [ 126.885500][ T370] kye 0003:0458:0087.0012: item 0 0 2 10 parsing failed [ 126.892862][ T370] kye 0003:0458:0087.0012: parse failed [ 126.898451][ T370] kye 0003:0458:0087.0012: probe with driver kye failed with error -22 [ 127.065691][ T370] usb 1-1: USB disconnect, device number 73 [ 127.286575][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.293518][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.300411][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.307272][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.314149][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.321039][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.327890][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.334766][ T45] apple 0003:05AC:027D.0013: unknown main item tag 0x0 [ 127.342213][ T45] apple 0003:05AC:027D.0013: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.1-1/input0 [ 127.446433][ T3213] overlayfs: missing 'lowerdir' [ 127.491853][ T488] usb 2-1: USB disconnect, device number 58 [ 127.495325][ T3219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.506321][ T3219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.692508][ T3233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.701542][ T3233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.929388][ T488] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 128.080414][ T488] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 128.088693][ T488] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 128.096789][ T488] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 128.105670][ T488] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 128.116468][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 128.127447][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 128.138434][ T488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 128.154515][ T488] usb 1-1: string descriptor 0 read error: -22 [ 128.160244][ T36] audit: type=1400 audit(1780515489.547:1271): avc: denied { mounton } for pid=3238 comm="syz.2.871" path="/proc/851/task" dev="proc" ino=28894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 128.160959][ T488] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 128.184131][ T3239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.192455][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.202506][ T3239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.209698][ T488] usb 1-1: config 0 descriptor?? [ 128.223976][ T3234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.231626][ T488] hub 1-1:0.0: bad descriptor, ignoring hub [ 128.237540][ T488] hub 1-1:0.0: probe with driver hub failed with error -5 [ 128.245341][ T488] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 128.269350][ T370] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 128.419385][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 128.425532][ T370] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 128.432505][ T488] usb 1-1: USB disconnect, device number 74 [ 128.433655][ T370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.451188][ T370] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 128.460272][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.468251][ T370] usb 2-1: Product: syz [ 128.472416][ T370] usb 2-1: Manufacturer: syz [ 128.477004][ T370] usb 2-1: SerialNumber: syz [ 128.482236][ T370] usb 2-1: config 0 descriptor?? [ 128.488009][ T370] asix 2-1:0.0: probe with driver asix failed with error -22 [ 128.690340][ T36] audit: type=1400 audit(1780515490.078:1272): avc: denied { getattr } for pid=3236 comm="syz.1.870" path="/" dev="nsfs" ino=4026532403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.712728][ T64] usb 2-1: USB disconnect, device number 59 [ 128.734899][ T3242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.743431][ T3242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.226950][ T453] tipc: Subscription rejected, illegal request [ 129.288941][ T36] audit: type=1400 audit(1780515490.668:1273): avc: denied { read } for pid=3266 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.479197][ T64] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 129.628734][ T3272] netlink: 'syz.0.883': attribute type 1 has an invalid length. [ 129.636543][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 129.643278][ T64] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 129.654161][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 129.667193][ T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 129.676289][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.685038][ T64] usb 2-1: config 0 descriptor?? [ 129.869145][ T370] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 130.020452][ T370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.028966][ T370] usb 1-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 130.039257][ T370] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 130.092912][ T64] apple 0003:05AC:027C.0014: ignoring exceeding usage max [ 130.101772][ T64] apple 0003:05AC:027C.0014: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 130.212658][ T36] audit: type=1400 audit(1780515491.598:1274): avc: denied { create } for pid=3276 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.239443][ T3279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.247957][ T3279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.257210][ T3279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.265683][ T3279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.275932][ T3279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.284547][ T3279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.296484][ T45] usb 2-1: USB disconnect, device number 60 [ 130.806406][ T3281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.815191][ T3281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.360397][ T36] audit: type=1326 audit(1780515492.748:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.386703][ T36] audit: type=1326 audit(1780515492.748:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.416225][ T36] audit: type=1326 audit(1780515492.748:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 131.443558][ T36] audit: type=1326 audit(1780515492.748:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa39c55d68e code=0x7ffc0000 [ 131.469200][ T36] audit: type=1326 audit(1780515492.748:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.494690][ T36] audit: type=1326 audit(1780515492.748:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.520022][ T36] audit: type=1326 audit(1780515492.748:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.545333][ T36] audit: type=1326 audit(1780515492.748:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.570561][ T36] audit: type=1326 audit(1780515492.748:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.2.894" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39c59ce59 code=0x7ffc0000 [ 131.728917][ T45] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 131.994572][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.003829][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 132.011616][ T45] usb 2-1: can't read configurations, error -71 [ 132.579859][ T3322] tipc: Enabling not permitted [ 132.585458][ T3322] tipc: Enabling of bearer rejected, failed to enable media [ 132.631489][ T370] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 132.640894][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.653224][ T370] usb 1-1: can't set config #1, error -71 [ 132.661397][ T370] usb 1-1: USB disconnect, device number 75 [ 132.779948][ T3336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.788517][ T3336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.948785][ T370] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 133.048752][ T45] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 133.099820][ T370] usb 1-1: config 1 interface 0 altsetting 34 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.110767][ T370] usb 1-1: config 1 interface 0 altsetting 34 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.123829][ T370] usb 1-1: config 1 interface 0 has no altsetting 0 [ 133.131898][ T370] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.40 [ 133.140982][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.148980][ T370] usb 1-1: Product: ф [ 133.153031][ T370] usb 1-1: Manufacturer: ⠁ [ 133.157597][ T370] usb 1-1: SerialNumber: 洉뚂䟶㪎꬇즹睒맜玱筞໔㜇먀츨䦧㍚᳋异톍律ꢯ룟ꇠ䭐휲쑉ꤏ´虯䎒⸿탨詂⊺譑쵏ᴰꕿꨤ嫲覼睈틑ꇑ㾆鲠᢯ﶸ욥淕顎겁บ䘧㶀䝥䗧흘䈋䅲庱鴀뽇쁉Ɀ蟨ĸ뙔┓㮴┄컆ꪳ䴱⎕㘭삟저ϝ꘢砵冣툞ᆯ࠴㺴祪洽ﰾ迧뀻⇣喝钵 [ 133.191087][ T3332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.198262][ T3332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.209779][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.220726][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.230467][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.243355][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.252405][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.261226][ T45] usb 2-1: config 0 descriptor?? [ 133.351872][ T3338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.360442][ T3338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.466459][ T3352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.475038][ T3352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.484629][ T3352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.493161][ T3352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.609283][ T3332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.617799][ T3332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.629325][ T370] usbhid 1-1:1.0: can't add hid device: -71 [ 133.635299][ T370] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 133.644254][ T370] usb 1-1: USB disconnect, device number 76 [ 133.683847][ T45] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 133.692055][ T45] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 133.700904][ T45] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 134.060500][ T3359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 134.083230][ T488] usb 4-1: USB disconnect, device number 19 [ 134.177867][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.184982][ T3366] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.192129][ T3366] bridge_slave_0: entered allmulticast mode [ 134.198310][ T3366] bridge_slave_0: entered promiscuous mode [ 134.204706][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.211761][ T3366] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.218889][ T3366] bridge_slave_1: entered allmulticast mode [ 134.225257][ T3366] bridge_slave_1: entered promiscuous mode [ 134.262663][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.269741][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.277005][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.284070][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.304040][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.311452][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.321576][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.328657][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.337585][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.344662][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.367878][ T3366] veth0_vlan: entered promiscuous mode [ 134.378014][ T3366] veth1_macvtap: entered promiscuous mode [ 134.388631][ T366] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 134.411781][ T3377] netlink: 26148 bytes leftover after parsing attributes in process `syz.4.912'. [ 134.421161][ T3377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 134.540254][ T366] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.548296][ T366] usb 1-1: not running at top speed; connect to a high speed hub [ 134.556912][ T366] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 134.569368][ T366] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 134.578387][ T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.586433][ T366] usb 1-1: Product: syz [ 134.590635][ T366] usb 1-1: Manufacturer: syz [ 134.595223][ T366] usb 1-1: SerialNumber: syz [ 134.668585][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.818858][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 134.825383][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.837277][ T64] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.846609][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.854769][ T64] usb 5-1: Product: syz [ 134.859245][ T64] usb 5-1: Manufacturer: syz [ 134.863945][ T64] usb 5-1: SerialNumber: syz [ 134.870108][ T64] usb 5-1: config 0 descriptor?? [ 134.876602][ T64] usb 5-1: bad CDC descriptors [ 134.881807][ T64] usb 5-1: unsupported MDLM descriptors [ 135.072053][ T3380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.081903][ T3380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.085235][ T3383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.118916][ T64] usb 2-1: reset high-speed USB device number 62 using dummy_hcd [ 135.127047][ T3383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.143402][ T45] usb 5-1: USB disconnect, device number 2 [ 135.743724][ T3387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.756389][ T3387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.816563][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 135.816580][ T36] audit: type=1400 audit(1780515497.198:1294): avc: denied { create } for pid=3392 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 135.910010][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.069191][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 136.075647][ T45] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.083912][ T45] usb 5-1: config 0 has no interface number 0 [ 136.090157][ T45] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.109516][ T45] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.118701][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.126698][ T45] usb 5-1: Product: syz [ 136.130957][ T45] usb 5-1: Manufacturer: syz [ 136.135556][ T45] usb 5-1: SerialNumber: syz [ 136.148602][ T45] usb 5-1: config 0 descriptor?? [ 136.154215][ T3385] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 136.302403][ T3397] netlink: 'syz.2.922': attribute type 29 has an invalid length. [ 136.312888][ T3397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.322752][ T3397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.338788][ T64] usb 2-1: device descriptor read/64, error -71 [ 136.363074][ T3385] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 136.448720][ T64] usb 2-1: device reset changed ep0 maxpacket size! [ 136.455809][ T488] usb 2-1: USB disconnect, device number 62 [ 136.598362][ T488] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 136.758294][ T488] usb 2-1: Using ep0 maxpacket: 32 [ 136.764682][ T488] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.775192][ T488] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.790195][ T488] usb 2-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 136.799609][ T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.807656][ T488] usb 2-1: Product: syz [ 136.812294][ T488] usb 2-1: Manufacturer: syz [ 136.816943][ T488] usb 2-1: SerialNumber: syz [ 136.933243][ T36] audit: type=1400 audit(1780515498.319:1295): avc: denied { bind } for pid=3399 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.061803][ T3407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.088430][ T3407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.218248][ T366] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.225226][ T366] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 137.240294][ T366] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 137.250370][ T366] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.265026][ T366] usb 1-1: USB disconnect, device number 77 [ 137.277581][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.330130][ T36] audit: type=1400 audit(1780515498.719:1296): avc: denied { mounton } for pid=3409 comm="syz.0.926" path="/194/file0" dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.405883][ T36] audit: type=1400 audit(1780515498.789:1297): avc: denied { lock } for pid=3409 comm="syz.0.926" path="socket:[30271]" dev="sockfs" ino=30271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.649542][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.658375][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.658667][ T3420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.675820][ T3420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.692040][ T488] usb 2-1: MIDIStreaming interface descriptor not found [ 137.710139][ T488] usb 2-1: USB disconnect, device number 63 [ 137.746813][ T3420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.763229][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.774580][ T3420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.783226][ T3385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.800246][ T3385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.808258][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.822166][ T45] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.837424][ T45] asix 5-1:0.188: probe with driver asix failed with error -71 [ 137.849953][ T45] usb 5-1: USB disconnect, device number 3 [ 138.137534][ T36] audit: type=1400 audit(1780515499.519:1298): avc: denied { validate_trans } for pid=3434 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 138.154036][ T488] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 138.318132][ T488] usb 2-1: Using ep0 maxpacket: 8 [ 138.324545][ T488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.336162][ T488] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 138.344547][ T488] usb 2-1: config 1 has no interface number 0 [ 138.350710][ T488] usb 2-1: config 1 interface 206 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 138.361675][ T488] usb 2-1: config 1 interface 206 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 138.373441][ T488] usb 2-1: config 1 interface 206 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 1024 [ 138.383911][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.384858][ T488] usb 2-1: config 1 interface 206 altsetting 15 bulk endpoint 0x81 has invalid maxpacket 1024 [ 138.394194][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.403721][ T488] usb 2-1: config 1 interface 206 altsetting 15 bulk endpoint 0xC has invalid maxpacket 8 [ 138.421198][ T488] usb 2-1: config 1 interface 206 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.434320][ T488] usb 2-1: config 1 interface 206 has no altsetting 0 [ 138.438107][ T45] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 138.442601][ T488] usb 2-1: New USB device found, idVendor=067b, idProduct=23f3, bcdDevice=ac.64 [ 138.457719][ T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.465743][ T488] usb 2-1: Product: syz [ 138.469912][ T488] usb 2-1: Manufacturer: syz [ 138.474482][ T488] usb 2-1: SerialNumber: syz [ 138.480103][ T3428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.487315][ T3428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.578071][ T310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.599081][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 28847, setting to 1024 [ 138.610153][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 138.620088][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.634453][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 138.643529][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.651614][ T45] usb 1-1: Product: syz [ 138.655781][ T45] usb 1-1: Manufacturer: syz [ 138.660528][ T45] usb 1-1: SerialNumber: syz [ 138.666177][ T3443] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 138.673895][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 138.679872][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 138.698225][ T488] pl2303 2-1:1.206: required interrupt-in endpoint missing [ 138.708305][ T488] usb 2-1: USB disconnect, device number 64 [ 138.738036][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 138.744123][ T310] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 138.755326][ T310] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.768130][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.774730][ T310] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 138.783774][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.792263][ T310] usb 5-1: config 0 descriptor?? [ 138.875612][ T45] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.908526][ T45] usb 1-1: USB disconnect, device number 78 [ 138.915059][ T45] usblp0: removed [ 138.971356][ T3449] rust_binder: Write failure EINVAL in pid:951 [ 138.987058][ T3449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.001881][ T3449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.212156][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x2 [ 139.219161][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.226722][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.234040][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.240946][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.247823][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.254738][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.261646][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.268534][ T310] wacom 0003:056A:032C.0016: unknown main item tag 0x0 [ 139.276028][ T310] wacom 0003:056A:032C.0016: hidraw0: USB HID v0.04 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 139.406811][ T3457] netlink: 44 bytes leftover after parsing attributes in process `syz.0.941'. [ 139.415782][ T3457] netlink: 43 bytes leftover after parsing attributes in process `syz.0.941'. [ 139.418897][ T491] usb 5-1: USB disconnect, device number 4 [ 139.424715][ T3457] netlink: 43 bytes leftover after parsing attributes in process `syz.0.941'. [ 139.457992][ T488] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 139.562155][ T3462] netlink: 'syz.0.942': attribute type 21 has an invalid length. [ 139.597683][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.606223][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.610857][ T488] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 139.614902][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.628212][ T488] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 139.643959][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.644477][ T488] usb 2-1: config 1 interface 0 has no altsetting 0 [ 139.663963][ T488] usb 2-1: string descriptor 0 read error: -22 [ 139.670589][ T488] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.682088][ T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.691177][ T3452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.698439][ T3452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.909946][ T491] usb 2-1: USB disconnect, device number 65 [ 139.997965][ T488] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 140.148070][ T488] usb 1-1: Using ep0 maxpacket: 16 [ 140.154185][ T488] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 140.163269][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.172032][ T488] usb 1-1: config 0 descriptor?? [ 140.178968][ T488] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 140.182207][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.195066][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.207871][ T310] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 140.359551][ T310] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 140.369787][ T310] usb 5-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 140.380830][ T310] usb 5-1: string descriptor 0 read error: -22 [ 140.387038][ T310] usb 5-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 140.388291][ T488] usb 1-1: Detected FT232A [ 140.397439][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.401950][ T488] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 140.431799][ T488] usb 1-1: USB disconnect, device number 79 [ 140.438472][ T488] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 140.448146][ T488] ftdi_sio 1-1:0.0: device disconnected [ 140.621414][ T488] usb 5-1: USB disconnect, device number 5 [ 141.197815][ T310] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 141.347732][ T45] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 141.357813][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 141.364219][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.372656][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 141.385042][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 141.394120][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.402128][ T310] usb 1-1: Product: syz [ 141.406291][ T310] usb 1-1: Manufacturer: syz [ 141.410900][ T310] usb 1-1: SerialNumber: syz [ 141.447720][ T488] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.497696][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 141.503801][ T45] usb 2-1: config 3 has an invalid interface number: 116 but max is 0 [ 141.512027][ T45] usb 2-1: config 3 has no interface number 0 [ 141.518140][ T45] usb 2-1: config 3 interface 116 has no altsetting 0 [ 141.526175][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=8a.e6 [ 141.535241][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.543244][ T45] usb 2-1: Product: syz [ 141.547402][ T45] usb 2-1: Manufacturer: syz [ 141.552012][ T45] usb 2-1: SerialNumber: syz [ 141.585253][ T36] audit: type=1400 audit(1780515502.969:1299): avc: denied { lock } for pid=3519 comm="syz.2.960" path="socket:[31762]" dev="sockfs" ino=31762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.615836][ T36] audit: type=1400 audit(1780515502.999:1300): avc: denied { accept } for pid=3521 comm="syz.2.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.618478][ T488] usb 5-1: Using ep0 maxpacket: 32 [ 141.652081][ T488] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.661573][ T3524] syz_tun: tun_net_xmit 62 [ 141.663034][ T488] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 141.675400][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.690055][ T488] usb 5-1: Product: syz [ 141.696928][ T488] usb 5-1: Manufacturer: syz [ 141.701620][ T488] usb 5-1: SerialNumber: syz [ 141.754681][ T3530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=3530 comm=syz.0.956 [ 141.769836][ T45] ax88179_178a 2-1:3.116: probe with driver ax88179_178a failed with error -22 [ 141.783567][ T45] usb 2-1: USB disconnect, device number 66 [ 141.797643][ T3532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.817862][ T3532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.826390][ T3533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.835009][ T3533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.901721][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.917685][ T310] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 141.926783][ T310] usb 1-1: USB disconnect, device number 80 [ 141.937008][ T488] usb 5-1: Fast Track Pro switching to config #2 [ 141.945766][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.952042][ T488] usb 5-1: USB disconnect, device number 6 [ 142.012999][ T3540] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 142.378120][ T488] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 142.507603][ T488] usb 1-1: device descriptor read/64, error -71 [ 142.707564][ T366] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.727572][ T64] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 142.747567][ T488] usb 1-1: device descriptor read/64, error -71 [ 142.786228][ T36] audit: type=1400 audit(1780515504.169:1301): avc: denied { write } for pid=3583 comm="syz.2.980" name="/" dev="incremental-fs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.809047][ T36] audit: type=1400 audit(1780515504.169:1302): avc: denied { remove_name } for pid=3583 comm="syz.2.980" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=1787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.853827][ T36] audit: type=1400 audit(1780515504.169:1303): avc: denied { unlink } for pid=3583 comm="syz.2.980" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=1787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.876901][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.909135][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 142.914359][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.921388][ T36] audit: type=1400 audit(1780515504.299:1304): avc: denied { mount } for pid=3588 comm="syz.2.982" name="/" dev="ramfs" ino=32788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 142.929826][ T366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.959627][ T36] audit: type=1400 audit(1780515504.349:1305): avc: denied { watch watch_reads } for pid=3588 comm="syz.2.982" path="/" dev="ramfs" ino=32788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 142.960243][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.983368][ T3589] netlink: 108 bytes leftover after parsing attributes in process `syz.2.982'. [ 142.992141][ T366] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 143.010162][ T488] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 143.017730][ T64] usb 2-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 143.028814][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.037004][ T64] usb 2-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 143.050558][ T64] usb 2-1: config 1 interface 2 has no altsetting 0 [ 143.057536][ T366] usb 5-1: config 0 descriptor?? [ 143.064609][ T64] usb 2-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 143.073763][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.081788][ T64] usb 2-1: Product: syz [ 143.086034][ T64] usb 2-1: Manufacturer: syz [ 143.089935][ T36] audit: type=1400 audit(1780515504.479:1306): avc: denied { getopt } for pid=3591 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.090662][ T64] usb 2-1: SerialNumber: syz [ 143.161585][ T3599] syzkaller1: entered promiscuous mode [ 143.167145][ T3599] syzkaller1: entered allmulticast mode [ 143.185126][ T3601] netlink: 188 bytes leftover after parsing attributes in process `syz.2.986'. [ 143.195719][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.197509][ T488] usb 1-1: device descriptor read/64, error -71 [ 143.204459][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.317138][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.325728][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.333905][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.342401][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.350536][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.359010][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.367047][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.375585][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.447474][ T488] usb 1-1: device descriptor read/64, error -71 [ 143.557546][ T488] usb usb1-port1: attempt power cycle [ 143.665761][ T3563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.674307][ T3563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.682990][ T366] usbhid 5-1:0.0: can't add hid device: -71 [ 143.689011][ T366] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.699119][ T366] usb 5-1: USB disconnect, device number 7 [ 143.895134][ T64] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 143.906552][ T488] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 143.916152][ T64] usb 2-1: unit 4 not found! [ 143.922506][ T64] usb 2-1: unit 144 not found! [ 143.930766][ T488] usb 1-1: device descriptor read/8, error -71 [ 143.948546][ T64] usb 2-1: USB disconnect, device number 67 [ 144.068428][ T488] usb 1-1: device descriptor read/8, error -71 [ 144.307375][ T64] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 144.315024][ T488] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 144.338338][ T488] usb 1-1: device descriptor read/8, error -71 [ 144.457351][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.467533][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 144.473469][ T488] usb 1-1: device descriptor read/8, error -71 [ 144.479788][ T64] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.487816][ T64] usb 2-1: config 0 has no interface number 0 [ 144.493938][ T64] usb 2-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.505011][ T64] usb 2-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.517969][ T64] usb 2-1: config 0 interface 1 has no altsetting 0 [ 144.524567][ T64] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 144.533633][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.542141][ T64] usb 2-1: config 0 descriptor?? [ 144.597416][ T488] usb usb1-port1: unable to enumerate USB device [ 144.617341][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 144.627657][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.636071][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 144.648866][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 144.663117][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.670475][ T3617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.674611][ T45] usb 5-1: Product: syz [ 144.680663][ T3617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.683742][ T45] usb 5-1: Manufacturer: syz [ 144.715618][ T45] usb 5-1: SerialNumber: syz [ 144.940237][ T45] usb 5-1: unit 255 not found! [ 144.952913][ T3613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.964252][ T45] usb 5-1: USB disconnect, device number 8 [ 144.977862][ T3613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.995209][ T64] usbhid 2-1:0.1: can't add hid device: -71 [ 145.005222][ T64] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 145.015610][ T64] usb 2-1: USB disconnect, device number 68 [ 145.037756][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.047505][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.058718][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.067410][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.083788][ T36] audit: type=1400 audit(1780515506.470:1307): avc: denied { execute } for pid=3624 comm="syz.2.994" path="/345/file0" dev="tmpfs" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.317264][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.457243][ T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 145.468193][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.479016][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.490091][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.499842][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.513489][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.522623][ T45] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.530900][ T45] usb 5-1: Manufacturer: syz [ 145.536872][ T45] usb 5-1: config 0 descriptor?? [ 145.547226][ T310] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 145.607203][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 145.613490][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 145.624400][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 145.637483][ T31] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 145.646524][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.659253][ T31] usb 2-1: config 0 descriptor?? [ 145.697209][ T310] usb 1-1: device descriptor read/64, error -71 [ 145.732213][ T3650] kvm: pic: level sensitive irq not supported [ 145.732389][ T3650] picdev_write: 2 callbacks suppressed [ 145.732404][ T3650] kvm: pic: non byte write [ 145.746148][ T45] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 145.759219][ T45] appleir 0003:05AC:8243.0017: No inputs registered, leaving [ 145.768422][ T45] appleir 0003:05AC:8243.0017: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 145.785489][ T45] usb 5-1: USB disconnect, device number 9 [ 145.831181][ T3660] fido_id[3660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 145.847913][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.858281][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.957192][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.068021][ T31] holtek_mouse 0003:04D9:A072.0018: ignoring exceeding usage max [ 146.076429][ T31] holtek_mouse 0003:04D9:A072.0018: ignoring exceeding usage max [ 146.084715][ T31] holtek_mouse 0003:04D9:A072.0018: usage index exceeded [ 146.091773][ T31] holtek_mouse 0003:04D9:A072.0018: item 0 2 2 2 parsing failed [ 146.099613][ T31] holtek_mouse 0003:04D9:A072.0018: hid parse failed: -22 [ 146.106731][ T31] holtek_mouse 0003:04D9:A072.0018: probe with driver holtek_mouse failed with error -22 [ 146.187154][ T45] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 146.207166][ T310] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 146.269556][ T31] usb 2-1: USB disconnect, device number 69 [ 146.337140][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.344512][ T45] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.355690][ T45] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.365674][ T45] usb 5-1: config 2 interface 0 has no altsetting 0 [ 146.372316][ T45] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 146.381361][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.437835][ T3666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.446313][ T3666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.577086][ T310] usb 1-1: device descriptor read/64, error -71 [ 146.687172][ T310] usb usb1-port1: attempt power cycle [ 146.965062][ T3671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.965134][ T3672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.981693][ T3674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.996684][ T3674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.017041][ T488] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 147.027164][ T310] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 147.047921][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.078998][ T45] usbhid 5-1:2.0: can't add hid device: -71 [ 147.084972][ T45] usbhid 5-1:2.0: probe with driver usbhid failed with error -71 [ 147.093722][ T45] usb 5-1: USB disconnect, device number 10 [ 147.168029][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.179012][ T488] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.188165][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.188257][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.197532][ T488] usb 2-1: config 0 descriptor?? [ 147.437004][ T310] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 147.458008][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.529436][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 147.589266][ T310] usb 1-1: device descriptor read/8, error -71 [ 147.598577][ T3685] syzkaller1: entered promiscuous mode [ 147.604063][ T3685] syzkaller1: entered allmulticast mode [ 147.612886][ T488] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 147.626263][ T488] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input27 [ 147.640711][ T3687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.656149][ T3687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.697057][ T310] usb usb1-port1: unable to enumerate USB device [ 147.702310][ T488] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 147.835533][ T36] audit: type=1400 audit(1780515509.220:1308): avc: denied { read } for pid=3689 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 147.857710][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.865954][ T36] audit: type=1400 audit(1780515509.250:1309): avc: denied { ioctl } for pid=3684 comm="syz.4.1011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 148.018394][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.026964][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.037160][ T45] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.046132][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 Stopping dhcpcd... [ 148.061756][ T45] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 148.070985][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.079206][ T45] usb 5-1: Product: syz [ 148.083669][ T45] usb 5-1: Manufacturer: syz [ 148.088458][ T45] usb 5-1: SerialNumber: syz stopped /sbin/dhcpcd (pid 148) Stopping network: [ 148.128576][ T488] usb 2-1: USB disconnect, device number 70 [ 148.195291][ T36] audit: type=1400 audit(1780515509.580:1310): avc: denied { read write } for pid=3708 comm="ip" path="/dev/console" dev="rootfs" ino=1120 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 148.243630][ T36] audit: type=1400 audit(1780515509.610:1311): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 148.272898][ T3718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 148.305100][ T36] audit: type=1400 audit(1780515509.690:1312): avc: denied { execute_no_trans } for pid=3720 comm="syz.0.1015" path="/215/file0/file1" dev="overlay" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 OK [ 148.347971][ T45] usb 5-1: USB disconnect, device number 11 Stopping iptables: [ 148.386762][ T36] audit: type=1400 audit(1780515509.770:1313): avc: denied { sys_module } for pid=3731 comm="syz.2.1017" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 OK [ 148.432026][ T3737] overlay: Unknown parameter 'subj_user' [ 148.436526][ T36] audit: type=1400 audit(1780515509.790:1314): avc: denied { read write } for pid=3727 comm="syz.0.1016" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.461635][ T36] audit: type=1400 audit(1780515509.790:1315): avc: denied { open } for pid=3727 comm="syz.0.1016" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping system message bus: [ 148.495239][ T36] audit: type=1400 audit(1780515509.800:1316): avc: denied { read write } for pid=3735 comm="iptables" path="/dev/console" dev="rootfs" ino=1120 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 148.526900][ T36] audit: type=1400 audit(1780515509.810:1317): avc: denied { search } for pid=3735 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 done [ 148.646879][ T31] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 148.657442][ T3747] SELinux: security_context_str_to_sid (sysadm_w) failed with errno=-22 killall: can't kill pid 882: No such process Stopping klogd: [ 148.817893][ T31] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 148.835284][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.847061][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.859537][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 OK [ 148.877052][ T31] usb 1-1: Product: syz [ 148.881388][ T31] usb 1-1: Manufacturer: syz [ 148.886048][ T31] usb 1-1: SerialNumber: syz Stopping acpid: [ 149.096499][ T31] usb 1-1: 0:2 : does not exist [ 149.101479][ T31] usb 1-1: unit 9 not found! [ 149.117632][ T31] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 149.137642][ T31] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 149.150770][ T31] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 149.165061][ T31] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 149.176398][ T31] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 149.187179][ T31] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 149.197760][ T31] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 149.216924][ T31] usb 1-1: USB disconnect, device number 89 [ 149.669232][ T3781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.677822][ T3781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.686733][ T3781] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 149.689122][ T488] kernel write not supported for file /ppp (pid: 488 comm: kworker/0:4) [ 149.846706][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 149.949690][ T45] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 149.996690][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 150.002894][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.013813][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.023655][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.032827][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.041706][ T31] usb 5-1: config 0 descriptor?? umount: can't remount debugfs read-only Connection to 10.128.1.128 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 150.124925][ T45] usb 1-1: Using ep0 maxpacket: 16 Sent SIGTERM to all processes [ 150.143268][ T45] usb 1-1: device descriptor read/all, error -71 [ 150.166668][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 150.172658][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.176360][ T491] usb 3-1: USB disconnect, device number 17 [ 150.206973][ T31] usb 5-1: USB disconnect, device number 12 [ 150.442503][ T427] bridge_slave_1: left allmulticast mode [ 150.448208][ T427] bridge_slave_1: left promiscuous mode [ 150.453798][ T427] : port 2(bridge_slave_1) entered disabled state [ 150.460937][ T427] bridge_slave_0: left allmulticast mode [ 150.467392][ T427] bridge_slave_0: left promiscuous mode [ 150.473039][ T427] : port 1(bridge_slave_0) entered disabled state [ 150.587996][ T427] tipc: Left network mode [ 150.592897][ T427] veth1_macvtap: left promiscuous mode [ 150.598400][ T427] veth0_vlan: left promiscuous mode [ 150.897844][ T427] bridge_slave_1: left allmulticast mode [ 150.903514][ T427] bridge_slave_1: left promiscuous mode [ 150.909120][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.916451][ T427] bridge_slave_0: left allmulticast mode [ 150.922204][ T427] bridge_slave_0: left promiscuous mode [ 150.927811][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.935476][ T427] bridge_slave_1: left allmulticast mode [ 150.941217][ T427] bridge_slave_1: left promiscuous mode [ 150.946859][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.954569][ T427] bridge_slave_0: left allmulticast mode [ 150.960272][ T427] bridge_slave_0: left promiscuous mode [ 150.965961][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.191286][ T427] veth1_macvtap: left promiscuous mode [ 151.196840][ T427] veth0_vlan: left promiscuous mode [ 151.202404][ T427] veth1_macvtap: left promiscuous mode [ 151.208115][ T427] veth1_macvtap: left promiscuous mode [ 151.213592][ T427] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 152.497607][ T3799] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 152.504380][ T3799] ACPI: PM: Preparing to enter system sleep state S5 [ 152.511248][ T3799] kvm: exiting hardware virtualization [ 152.516765][ T3799] reboot: Power down serialport: VM disconnected.