last executing test programs: 2m3.314045528s ago: executing program 2 (id=264): getresgid(&(0x7f0000000000), 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) 2m2.149151143s ago: executing program 2 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x3, 0x57}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2501000000000000008ec0095809"], 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) 2m2.072000605s ago: executing program 2 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x800001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400d5}, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20003) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000300)={0x3, 0x0, @pic={0x77, 0xff, 0x4, 0xc0, 0x7e, 0xff, 0x3, 0x3, 0x3, 0x6, 0x6, 0x1, 0x3, 0x7f, 0x72, 0x9}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="d15a000f20e035200000000f22e00f01df66ba4100edb9270900000f32c7442400d253bfa4c7442402dfd90000c7442406000000000f01142466670f0866bad004ed66bad004ed0f22a1", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@local}) 2m2.037983495s ago: executing program 2 (id=276): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@verity_require}, {@metacopy_off}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x8c4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/195, 0xbe, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x10a}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000002c0)={0x58, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf8, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xed, 0x2, "68335f2f367497272a74f412b5695754d8624f529abb52ada225586d7746c9f11924e2f9633eadc2f5810decb238b25dd8c42ccf0c6c1e01a1ad2a009b3f7a81f68b054c7de9679de7a634724baa008cdc526ad9bc694149dc46438fd15045b87b4d3d0bd19f24d1cd0b6870eddba5bb9dc248d857290f440ef3926a0addecf34eae6732ee2b51410f9d489ee89b09ab1d246062496e746726318cb509e56c560c383e54c56d6d2a96824cc9110916ea38943af9c5698a1f3872c2c22dcea06735d27f50bb409862dbb0288c8edbc98d42b8c1155e01a00da59cb53b3db947af3ea3da28b0541610f0"}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf8, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xed, 0x2, "68335f2f367497272a74f412b5695754d8624f529abb52ada225586d7746c9f11924e2f9633eadc2f5810decb238b25dd8c42ccf0c6c1e01a1ad2a009b3f7a81f68b054c7de9679de7a634724baa008cdc526ad9bc694149dc46438fd15045b87b4d3d0bd19f24d1cd0b6870eddba5bb9dc248d857290f440ef3926a0addecf34eae6732ee2b51410f9d489ee89b09ab1d246062496e746726318cb509e56c560c383e54c56d6d2a96824cc9110916ea38943af9c5698a1f3872c2c22dcea06735d27f50bb409862dbb0288c8edbc98d42b8c1155e01a00da59cb53b3db947af3ea3da28b0541610f0"}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x9) (async) write$cgroup_type(r7, &(0x7f0000000080), 0x9) 2m1.990223556s ago: executing program 2 (id=277): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0000891f0180c200000ebbbbbbbbbbbb08004500002000670000032f907800001fe1e0000001a00086dd000c90782e970000ebc1f87b7f0553ed8a382cd16f95f8c5f16f4ccc340619c3922e1ab37eb6ec7162f8616271399bfa65257b37dbd28b069806c23ba57e7d776ab8"], 0x32) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r5 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0xb46c}], 0x1, 0x121, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001000)={0x7, 0x1, 0x8, 0x0, 0x3, 0xa, 0x9}, 0xc) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = syz_open_pts(r0, 0x20000) ioctl$TCSETSF(r9, 0x5404, &(0x7f00000000c0)={0x5, 0x3b8, 0x6, 0x6, 0x17, "ebca01924ae746b199186a42bbed10a0d6e107"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xa) 2m1.886376768s ago: executing program 2 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x0, 0x0, 0x80000004}]) (async) io_getevents(r4, 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660fc77161660f0094e6be3e36260f01c5b872068ed8baf80c66b8d13add8c66efbafc0cb013ee66b9800000c00f326635008000000f3066b9800000c00f326635000400000f30f3f32a2967660f38255c910366b9800000c00f326635000800000f30", 0x63}], 0x1, 0x18, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="0f20e035000010000f22e00f0f2f9766ba6100b0f1eec4c3dd7d6b007066ba2000ed66baa100b0abeec4c1f950c4c4e1895568ffb9800000c00f3235010000000f30b805000000b9000000000f01d9", 0x4f}], 0x1, 0x17, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) (async) recvmmsg(r7, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f00000009c0)=""/259, 0x103}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000000)=""/113, 0x71}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f78}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}], 0x7, 0x2040, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m1.868009929s ago: executing program 32 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x0, 0x0, 0x80000004}]) (async) io_getevents(r4, 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660fc77161660f0094e6be3e36260f01c5b872068ed8baf80c66b8d13add8c66efbafc0cb013ee66b9800000c00f326635008000000f3066b9800000c00f326635000400000f30f3f32a2967660f38255c910366b9800000c00f326635000800000f30", 0x63}], 0x1, 0x18, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="0f20e035000010000f22e00f0f2f9766ba6100b0f1eec4c3dd7d6b007066ba2000ed66baa100b0abeec4c1f950c4c4e1895568ffb9800000c00f3235010000000f30b805000000b9000000000f01d9", 0x4f}], 0x1, 0x17, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) (async) recvmmsg(r7, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f00000009c0)=""/259, 0x103}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000000)=""/113, 0x71}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f78}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}], 0x7, 0x2040, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m31.410389515s ago: executing program 1 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd6000000000042d289a724704000000000000002b21df5d0f559830fe64cc02735d9043941d3bd16737156268f5d6a04e18065675784d39f03b9cd5343ebd0c873adb97046072cf94891d12e3c45595311c76f993bf1a703a576f63147145cb74610394d8d58a1c7f38c994aeb38114d0076877384ca4566708ce01609922fc3c7ff939a5bc2ef9d8dff7082523b8d79b6d448e35b49f975eb0a1004627aedf632f942ba2e336033c30740359e067874eb3edb72287e2144e98284907d0c577d5d4c4f9694b4752a44825b25d7273cd2f42eb741e604308fc68df62f6a82188"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x200448d4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd6000000000042d289a724704000000000000002b21df5d0f559830fe64cc02735d9043941d3bd16737156268f5d6a04e18065675784d39f03b9cd5343ebd0c873adb97046072cf94891d12e3c45595311c76f993bf1a703a576f63147145cb74610394d8d58a1c7f38c994aeb38114d0076877384ca4566708ce01609922fc3c7ff939a5bc2ef9d8dff7082523b8d79b6d448e35b49f975eb0a1004627aedf632f942ba2e336033c30740359e067874eb3edb72287e2144e98284907d0c577d5d4c4f9694b4752a44825b25d7273cd2f42eb741e604308fc68df62f6a82188"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x200448d4) (async) 1m31.394188946s ago: executing program 1 (id=579): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' #)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x0, 0x257, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 1m29.490125757s ago: executing program 1 (id=602): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x3, 0xb2, &(0x7f0000000180)="358940d330b376a363b612fa96ead69c9696e16e1b57e49301027c5b19b6227fb440e3af6daa611f1d30ec1769404c01fd52cc6fd44f447eef6c7dafdb16781cd8fdb9a83f125d5fe46591aea7063c2ff99e926b0e032ce63aa54a717e7be3c797a6dbf416063a8b347ecb338198d6c988a14258ce695d425cae22729463a578658630e98960adcd7e9a10866cff643dafe6b64bc3d61a9abf276a5c3795df0f9631f12e845dca9ff242ccf051fa1cd2beb2") syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x1200010, 0x0) 1m27.44021769s ago: executing program 1 (id=612): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'batadv_slave_0\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0xfdef) r3 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924e2b08503eb8ff897240a0001ff23000d2403020703000400070081090401000021022000090401010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b800000803090582090800400603fb24018203f30600"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00030400000007000000"], 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x873, &(0x7f0000000240)={0x0, 0xb2bb, 0x1000, 0x1, 0x246, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f00000003c0)) syz_ublk_setup_io_uring(0x7597, &(0x7f0000000400)={0x0, 0xc375, 0x0, 0x1, 0x84}, &(0x7f0000000100), &(0x7f0000000500)=0x0, &(0x7f0000000540)) r7 = mmap$IORING_OFF_SQES(0x0, 0xc, 0x1000000, 0x2010, r1, 0x10000000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/pid_for_children\x00') syz_ublk_add_dev(r1, r5, r6, r7, &(0x7f0000000680)={0x2e, 0x50, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x4, 0x7bd, 0x0, 0x0, 0x1000, 0x1, r8, 0x0, 0x91}}}, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x14) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r10, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m26.07983269s ago: executing program 1 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x4e21, @remote}}) 1m25.871082195s ago: executing program 1 (id=622): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r2, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, &(0x7f0000000680)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d82f642def57865dcd0d339b20", 0xc5, 0x40041, 0x0, 0x0) (async) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) 1m25.869115484s ago: executing program 33 (id=622): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r2, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, &(0x7f0000000680)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d82f642def57865dcd0d339b20", 0xc5, 0x40041, 0x0, 0x0) (async) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) 1.058712176s ago: executing program 0 (id=1444): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904000002070101000905010297"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000000c0)) write$char_usb(r1, &(0x7f0000000040)="9d", 0x1) 704.667484ms ago: executing program 3 (id=1446): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r5, 0x7fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmmsg$unix(r6, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x204000, 0x0) ioctl$PTP_PIN_GETFUNC(r7, 0xc0603d06, &(0x7f0000000340)={'\x00', 0x8, 0x3, 0x8}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 635.023776ms ago: executing program 3 (id=1447): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00", @ANYRES32=r0], 0x1c}], 0x1}, 0x4040000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0x7, 0x40, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8c, 0x19, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7}}}}}}}}]}}, 0x0) 634.425336ms ago: executing program 5 (id=1448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x801, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e21, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 633.922636ms ago: executing program 5 (id=1449): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x20) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f0", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) accept(r1, 0x0, 0x0) 624.253506ms ago: executing program 5 (id=1450): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0x16) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000200)={0x8}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 585.596397ms ago: executing program 0 (id=1451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000093, 0x0, 0x6}]}) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='btrfs\x00', 0x0, 0x0) 534.986358ms ago: executing program 5 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x7c0e4d12acc29676, 0xe, 0x2, 0x8040, 0xf}, 0x30, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"db92cfc5160ab66251e23246ca66c5ca", 0x0, 0x0, {0x1, 0x1}, {0x401, 0x9}, 0x9f6d, [0x2, 0xad, 0x658, 0x0, 0x2, 0x4, 0x1, 0x5, 0x6, 0x7fffffffffffffff, 0x40, 0x4, 0x7, 0x7, 0x4, 0x1]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000a80)={{r0}, r5, 0x1c, @unused=[0x10, 0x4, 0x5], @devid=r6}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000600)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x4, '\x00', @loopback}}}}}}}, 0x52) writev(r1, &(0x7f0000000380), 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 531.244758ms ago: executing program 0 (id=1453): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f00004d9000/0x3000)=nil, 0x3000, 0x17) (async) madvise(&(0x7f00004d9000/0x3000)=nil, 0x3000, 0x17) r3 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r4, &(0x7f0000000280)=""/175, 0xaf) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="28800000210001e901a07e2fcf801d9cb3982fd5113e3d1dd90a00000000000001016200000c001445e45ba160faeebac308be9ea02b30c78012d8b978cfe9c700000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="28800000210001e901a07e2fcf801d9cb3982fd5113e3d1dd90a00000000000001016200000c001445e45ba160faeebac308be9ea02b30c78012d8b978cfe9c700000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000835120882400001020301090269000301002000080b0101010520070904000000010120000924012e0b0609000209040100"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000835120882400001020301090269000301002000080b0101010520070904000000010120000924012e0b0609000209040100"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0xffffffff}]}) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000004c0)={{0x40}, 0x100, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0xc0, 0x3c}, {0x200000010000, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xff7ffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@local, 0x3507, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="440000001100010000000000fbdbdf25100000000b00000056ccabd869c203001e00d08068d00ed58a6abf90299835adcf96d4a707844cc6e15a8c3c1f4500000400c880"], 0x9a}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 525.645358ms ago: executing program 0 (id=1454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4090}, 0x4010) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r7) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) getsockopt$inet6_buf(r8, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async) syz_usb_connect$midi(0x2, 0x33, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x8, 0x20, 0x8e, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xb5, [], [{{0x9, 0x5, 0x2, 0x3, 0x3df, 0x5, 0x4, 0x3, {0x6, 0x25, 0x1, 0x2, "afbc"}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 472.25576ms ago: executing program 5 (id=1455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x20}, @empty, 0x0, 0x6, [@multicast1, @multicast2, @local, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x28) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000600)=""/46, &(0x7f0000000480)=0x2e) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}, 0x5}], 0x1, 0x2000, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r1, 0x8913, &(0x7f00000001c0)={'veth0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001600)={&(0x7f0000001280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x2}}], 0xffffffffffffff1c}, 0x20048090) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x1fd, 0x0, &(0x7f0000000000/0x3000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) lsetxattr$system_posix_acl(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x200094, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}, {@cache_loose}], [], 0x6b}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r9, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r9, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r10}, 0x10) ioctl$KVM_GET_MSRS_sys(r2, 0x4018aee2, &(0x7f00000000c0)) 454.67955ms ago: executing program 4 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_ima(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x5, 0x0, 0xd, 0xda, 0x86, "b1096d12998109defcf61c8b5af1c236935cd227c2dbf77863b7fdeb5d91680e555c41cce92dc27d23edf775dd8e4b9d6735ae7a83797f9c8dbb3aa54f55cd629606f8e236f1d02276e328076d486df63b19c39664dff6b1388c8f1520cc733ddbc3d6260608334180ebc5ae03f1cd8ba7655c4c2df273e5888e86ca85cd564641baebe636ee"}, 0x8f, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c03503000000440f22c0b805000000b9070000000f01d9670f78e8c744240083000000c744240230400000ff2c24c744240084000000c7442402f26ec9aaff1c240f30c4e101e401c4a11571f105c744240003000000c7442402a1f60000ff1c2444f6f7", 0x67}], 0x1, 0x20, &(0x7f0000000180)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 411.043681ms ago: executing program 5 (id=1457): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x7) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502"], 0x0) 373.510342ms ago: executing program 4 (id=1458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x10c, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x801, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e21, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 361.891112ms ago: executing program 4 (id=1459): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) waitid(0x1, r0, 0x0, 0x2, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe52}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x48004) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x40) 306.994323ms ago: executing program 4 (id=1460): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000000c0)) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0x20200000000000, 0x20200000000000}}) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000040)=[0x6, 0x5]) (async) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) setuid(0xee00) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x10}}, 0x14}}, 0x20008810) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0, 0x0) 290.027514ms ago: executing program 4 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) accept4$unix(r2, 0x0, &(0x7f0000000080), 0x80000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000347000/0x1000)=nil, 0x1000, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x200c00, 0x0) (async) unshare(0x2040600) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000102c0)=ANY=[@ANYBLOB="1400800056000100000000000000000007000000b8765a9992d2d8255fc1d063a9afb59bcb81c132b1683371aa64bff547f963c28a370ec84bdc2498fda1d76b271c30a03f"], 0x14}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (rerun: 64) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r5, &(0x7f0000012300)={0x2020}, 0x203c) (async) read$FUSE(r5, &(0x7f0000022740)={0x2020}, 0x2020) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000000000000000000000000db0e94c0"], 0x14}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x719000) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000200)={0x2, 0x200, 0x4, 0x9, 0x7, "027200", 0x0, 0x200400}) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x2) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000180)) 184.980246ms ago: executing program 4 (id=1462): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)={0x500, 0x112, 0xc}, 0x18) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000100)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xc0000000, @rand_addr=' \x01\x00', 0x9}, 0x1c, 0x0}}], 0x1, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x76, &(0x7f0000002500)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r2, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 102.938778ms ago: executing program 3 (id=1463): syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x7}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x0) (async) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000740)={0x7, {{0xa, 0x4e23, 0x81, @mcast1, 0x5}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000740)={0x7, {{0xa, 0x4e23, 0x81, @mcast1, 0x5}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e20, 0x0, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x9, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@fragment={0x3a, 0x0, 0x1, 0x1, 0x0, 0x9, 0x64}], "8a"}}}}}}, 0x43) (async) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x9, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@fragment={0x3a, 0x0, 0x1, 0x1, 0x0, 0x9, 0x64}], "8a"}}}}}}, 0x43) 94.267708ms ago: executing program 3 (id=1464): r0 = socket$inet6(0xa, 0x800, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000040)={@mcast2}, 0x14) 81.994409ms ago: executing program 3 (id=1465): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)={0x5, {{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x1, 0x2, [{{0x2, 0xbfd, @local}}, {{0x2, 0x4e20, @multicast1}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0xe) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_open_dev$MSR(&(0x7f0000002280), 0x4, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002300), r1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002700)={&(0x7f0000002340)={0x3b8, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1d12}}}}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf39}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "53545e09a064138ba898f9dcb0a90d27a6c2424f811aa9875075f163"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3f877c6eeb3224c9f05a28757f51639e774e899e5f3e7f31c916c9d9a2131e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x181}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "064fa2a36fcd5dab6939c91f9e11dfe14d695a90cbb779337227db"}}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "718a198a11e9aa7c3ab392a7bdf192c1ae6664e8188dc3808477f14ff1383c3916"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ebc275eb0cf2a35a60a7f0e733b33425b20fc6fd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "d9d67980f4df"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) write(r2, &(0x7f0000002780)="daac89c831584a39a15dc511cd57ade2284ceee2af69defc49cdd3f19ec0642f37aa82edb7e421197558f09965abc7c59b6ea687498c92ac24b0b8f37c360c0ae28d5553079611818a8a194ac2086d9c2739edbfc10af6250a73", 0x5a) write$tun(r1, &(0x7f0000002800)={@val={0x0, 0x9200}, @void, @llc={@llc={0x54, 0xd4, 'c', "dd24f4850efae14a42b814d7f3f079b2b50045d3cfff107778909299833ad9e2f084da346ddfba12c7a582b536187558b43ad1f78c12dd0ac358b4ab3c0194be6f766877b05e0c402b7902ed36dbc4872c765622bc5bb81f275d41163fb0cb2cdb297a4fe9f399c960887dedef5d669d6ccfb19337cc527168953c81d00e859bcfd84dbcb615b0f84dd33c8f88c485077ecd63fd1d"}}}, 0x9c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) r6 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000002a00)="b31be85ef045ed74a3018e95ba15ba4815a3935cfce8a93f501eaa940a53e4976a9a9a73a605f5480e8133893e0182ad99a7346f73774f66d571d6f390d64e037611b91ff07da398e3ba9ea9ffc6da", 0x4f, 0x40, &(0x7f0000002a80)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) getsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000002ac0)=""/40, &(0x7f0000002b00)=0x28) io_setup(0x608, &(0x7f0000002b40)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r2, 0x0, r6) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002c00)) setuid(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002cc0)={0x2, &(0x7f0000002c80)=[{0x4, 0x5, 0x5}, {0x5, 0x8, 0x7, 0x800}]}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002d00)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) io_cancel(r7, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x5, 0x9, r9, &(0x7f0000002d80)="53a32a5685896894d216de81ed0b2f8452f8ab3c478441fc3263e25c0304963206759877376ee437f9bdd17b0607267d9279f9db6cff757e46efbcd9d5e9e6c017b618a41361517198b0cf3ac3a1fec7f9831ee8c1220d2c410896e85bf84d5b5b5f0c5c9ceed90b88db4715fbde77b75481f09becb40eeec1c3c0225ad59f3a5093f2410315d3064c4da5698586ea2f3992f975585978162c0f2dea2e5f7900fc0873", 0xa3, 0x1}, &(0x7f0000002e80)) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000002ec0)={0xffffffffffffffff}) quotactl_fd$Q_GETQUOTA(r10, 0xffffffff80000701, r3, &(0x7f0000002f40)) 1.31822ms ago: executing program 3 (id=1466): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x84804}, 0x2000c880) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0xd, 0x0, 0x0, &(0x7f0000000000)=0x2000000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/75, 0x4b}], 0x1}, 0xfffffffd}], 0x2, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x8080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301010100"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x17, 0x1, 0xd) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.09462ms ago: executing program 0 (id=1467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x10c, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x801, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e21, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 0s ago: executing program 0 (id=1468): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000003c0)={0x40, 0x0, 0x1f, "6dfaabfbf093de0198b04ba2432b59409895b218add98b551d26fc9e526d17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): etlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2667 comm=syz.0.737 [ 105.273301][ T2667] netlink: 'syz.0.737': attribute type 28 has an invalid length. [ 105.300536][ T2676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.309112][ T2676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.381647][ T2676] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 105.408875][ T2676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.425493][ T2676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.445168][ T370] usbhid 6-1:0.0: can't add hid device: -71 [ 105.451133][ T370] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 105.459845][ T370] usb 6-1: USB disconnect, device number 14 [ 105.679361][ T2609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 105.690736][ T65] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 105.702481][ T65] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 105.714455][ T65] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ba:6a:35:7a:7a:ad [ 105.729372][ T65] usb 5-1: USB disconnect, device number 32 [ 105.736723][ T65] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 105.783028][ T65] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 105.794856][ T65] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 105.804370][ T65] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 105.911746][ T370] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.015323][ T2716] ip6gretap0: entered allmulticast mode [ 106.049895][ T2718] x_tables: duplicate underflow at hook 1 [ 106.080512][ T370] usb 6-1: Using ep0 maxpacket: 32 [ 106.086816][ T370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.096844][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 106.096860][ T36] audit: type=1400 audit(1784409390.704:570): avc: denied { bind } for pid=2720 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.098083][ T370] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 106.103922][ T36] audit: type=1400 audit(1784409390.704:571): avc: denied { create } for pid=2720 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 106.124145][ T370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.164700][ T370] usb 6-1: config 0 descriptor?? [ 106.220047][ T36] audit: type=1400 audit(1784409390.825:572): avc: denied { accept } for pid=2720 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.370409][ T2660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.379966][ T2660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.392540][ T370] usb 6-1: USB disconnect, device number 15 [ 106.906060][ T36] audit: type=1400 audit(1784409391.520:573): avc: denied { mount } for pid=2736 comm="syz.5.751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 106.930118][ T36] audit: type=1400 audit(1784409391.540:574): avc: denied { mounton } for pid=2736 comm="syz.5.751" path="/19/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.953125][ T36] audit: type=1400 audit(1784409391.560:575): avc: denied { read } for pid=2736 comm="syz.5.751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.975726][ T36] audit: type=1400 audit(1784409391.560:576): avc: denied { open } for pid=2736 comm="syz.5.751" path="/19/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.024172][ T36] audit: type=1400 audit(1784409391.560:577): avc: denied { search } for pid=2736 comm="syz.5.751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.046649][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.053891][ T36] audit: type=1400 audit(1784409391.611:578): avc: denied { unmount } for pid=2282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.063156][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.099999][ T36] audit: type=1400 audit(1784409391.711:579): avc: denied { setopt } for pid=2742 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.401583][ T65] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 107.431396][ T369] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 107.540802][ T65] usb 5-1: device descriptor read/64, error -71 [ 107.580489][ T369] usb 6-1: Using ep0 maxpacket: 32 [ 107.586627][ T369] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 107.599333][ T369] usb 6-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 107.608631][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.617014][ T369] usb 6-1: Product: syz [ 107.621333][ T369] usb 6-1: Manufacturer: syz [ 107.626075][ T369] usb 6-1: SerialNumber: syz [ 107.631384][ T2763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.639901][ T2763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.669518][ T2765] cgroup: fork rejected by pids controller in /syz0 [ 107.779217][ T65] usb 5-1: device descriptor read/64, error -71 [ 107.846975][ T369] usb 6-1: USB disconnect, device number 16 [ 108.017815][ T65] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 108.147022][ T65] usb 5-1: device descriptor read/64, error -71 [ 108.385503][ T65] usb 5-1: device descriptor read/64, error -71 [ 108.461769][ T2835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.482906][ T2835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.495755][ T65] usb usb5-port1: attempt power cycle [ 108.534642][ T2830] input: syz1 as /devices/virtual/input/input16 [ 108.540917][ T2830] input: failed to attach handler leds to device input16, error: -6 [ 108.602814][ T2852] overlayfs: failed to clone upperpath [ 108.722728][ T2867] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 108.771309][ T2875] netlink: 'syz.3.791': attribute type 58 has an invalid length. [ 108.832891][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 108.852760][ T65] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 108.873777][ T65] usb 5-1: device descriptor read/8, error -71 [ 108.982047][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 108.992647][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.011868][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.021657][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.034767][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.043930][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.052347][ T65] usb 5-1: device descriptor read/8, error -71 [ 109.061847][ T10] usb 6-1: config 0 descriptor?? [ 109.199596][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.290168][ T65] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 109.321101][ T65] usb 5-1: device descriptor read/8, error -71 [ 109.450310][ T65] usb 5-1: device descriptor read/8, error -71 [ 109.470567][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input18 [ 109.496693][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 109.558800][ T65] usb usb5-port1: unable to enumerate USB device [ 109.669360][ T65] usb 6-1: USB disconnect, device number 17 [ 110.106659][ T2894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.115211][ T2894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.137500][ T2892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2892 comm=syz.0.796 [ 110.244680][ T2906] overlayfs: empty lowerdir [ 110.503631][ T370] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 110.563261][ T65] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 110.654425][ T370] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.665688][ T370] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 110.675467][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.683533][ T370] usb 6-1: Product: syz [ 110.687785][ T370] usb 6-1: Manufacturer: syz [ 110.692422][ T370] usb 6-1: SerialNumber: syz [ 110.722490][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 110.728765][ T65] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.741997][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.748771][ T65] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 110.759924][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.768705][ T65] usb 5-1: config 0 descriptor?? [ 110.974947][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x2 [ 110.982321][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0xd [ 110.989624][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 110.996943][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x1 [ 111.004259][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 111.011582][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 111.018898][ T65] dragonrise 0003:0079:0006.0008: unknown main item tag 0x3 [ 111.026232][ T65] dragonrise 0003:0079:0006.0008: item fetching failed at offset 40/44 [ 111.034700][ T65] dragonrise 0003:0079:0006.0008: parse failed [ 111.040911][ T65] dragonrise 0003:0079:0006.0008: probe with driver dragonrise failed with error -22 [ 111.099405][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 111.099423][ T36] audit: type=1400 audit(1784409395.734:597): avc: denied { map } for pid=2909 comm="syz.5.802" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.129618][ T370] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 111.185107][ T65] usb 5-1: USB disconnect, device number 37 [ 111.198070][ T2925] netlink: 'syz.4.806': attribute type 46 has an invalid length. [ 111.206369][ T2925] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 111.214643][ T2925] overlayfs: missing 'lowerdir' [ 111.239176][ T2927] fuse: Bad value for 'group_id' [ 111.243113][ T36] audit: type=1400 audit(1784409395.865:598): avc: denied { lock } for pid=2928 comm="syz.0.808" path="socket:[18851]" dev="sockfs" ino=18851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 111.244206][ T2927] fuse: Bad value for 'group_id' [ 111.278989][ T36] audit: type=1400 audit(1784409395.915:599): avc: denied { mounton } for pid=2930 comm="syz.0.809" path="/288/file0" dev="tmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 111.279158][ T2932] overlay: ./file0 is not a directory [ 111.302135][ T2931] overlay: ./file0 is not a directory [ 111.310986][ T36] audit: type=1400 audit(1784409395.915:600): avc: denied { mount } for pid=2930 comm="syz.0.809" name="/" dev="configfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.450053][ T36] audit: type=1400 audit(1784409396.086:601): avc: denied { read write } for pid=2909 comm="syz.5.802" name="lp0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 111.475327][ T2945] tmpfs: Unknown parameter 'Uoswap' [ 111.481349][ T36] audit: type=1400 audit(1784409396.086:602): avc: denied { open } for pid=2909 comm="syz.5.802" path="/dev/usb/lp0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 111.598354][ T2953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.606861][ T2953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.836016][ T36] audit: type=1400 audit(1784409396.468:603): avc: denied { write } for pid=2959 comm="syz.4.819" path="socket:[18956]" dev="sockfs" ino=18956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.162735][ T2965] kvm: vcpu 0: requested 30 ns lapic timer period limited to 200000 ns [ 112.222476][ T2968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=2968 comm=syz.3.821 [ 112.235078][ T2968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=2968 comm=syz.3.821 [ 112.247662][ T36] audit: type=1400 audit(1784409396.880:604): avc: denied { accept } for pid=2971 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.268129][ T2968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=2968 comm=syz.3.821 [ 112.280786][ T36] audit: type=1400 audit(1784409396.890:605): avc: denied { ioctl } for pid=2973 comm="syz.0.824" path="socket:[18999]" dev="sockfs" ino=18999 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.565345][ T36] audit: type=1400 audit(1784409397.211:606): avc: denied { mount } for pid=2990 comm="syz.3.829" name="/" dev="ramfs" ino=19010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.722953][ T65] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 112.749538][ T3001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.758021][ T3001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.882347][ T65] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 112.895347][ T65] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 112.904523][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.913130][ T65] usb 5-1: config 0 descriptor?? [ 113.119860][ T312] usb 5-1: USB disconnect, device number 38 [ 113.254750][ T65] usb 6-1: USB disconnect, device number 18 [ 113.266506][ T65] usblp0: removed [ 113.409066][ T3025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.417599][ T3025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.487814][ T3032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.497720][ T3032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.549230][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.557743][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.708394][ T65] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 113.867701][ T370] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 113.868787][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.886201][ T65] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.895274][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.903799][ T65] usb 6-1: config 0 descriptor?? [ 114.018375][ T370] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 114.029465][ T370] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.040847][ T370] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 114.054038][ T370] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.060667][ T370] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 114.069745][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.078514][ T370] usb 5-1: config 0 descriptor?? [ 114.083740][ T3048] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 114.110636][ T65] usbhid 6-1:0.0: can't add hid device: -71 [ 114.116685][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.125687][ T65] usb 6-1: USB disconnect, device number 19 [ 114.544886][ T65] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 114.592575][ T3059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.602762][ T3059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.613635][ T370] lenovo 0003:17EF:6062.0009: unknown main item tag 0x1 [ 114.621135][ T370] lenovo 0003:17EF:6062.0009: unknown main item tag 0x0 [ 114.628301][ T370] lenovo 0003:17EF:6062.0009: unknown main item tag 0x0 [ 114.636034][ T370] lenovo 0003:17EF:6062.0009: unknown main item tag 0x0 [ 114.642988][ T370] lenovo 0003:17EF:6062.0009: unknown main item tag 0x0 [ 114.650729][ T370] lenovo 0003:17EF:6062.0009: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 114.715245][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.726256][ T65] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 114.735314][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.743820][ T65] usb 6-1: config 0 descriptor?? [ 115.244909][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.253407][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.263607][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.272507][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.551572][ T65] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 115.559015][ T65] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 115.575934][ T65] usb 6-1: USB disconnect, device number 20 [ 115.575983][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 115.826875][ T3080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.835475][ T3080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.082440][ T3085] rust_binder: Write failure EFAULT in pid:111 [ 116.082761][ T3085] syzkaller1: entered promiscuous mode [ 116.094460][ T3085] syzkaller1: entered allmulticast mode [ 116.363198][ T3119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.372181][ T3119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.382807][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 116.382822][ T36] audit: type=1400 audit(1784409401.037:616): avc: denied { read write } for pid=3118 comm="syz.3.866" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.412191][ T36] audit: type=1400 audit(1784409401.037:617): avc: denied { open } for pid=3118 comm="syz.3.866" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.414392][ T3119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3119 comm=syz.3.866 [ 116.435493][ T36] audit: type=1400 audit(1784409401.067:618): avc: denied { ioctl } for pid=3118 comm="syz.3.866" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.587185][ T312] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 116.626437][ T370] usb 5-1: USB disconnect, device number 39 [ 116.649176][ T1506] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.737914][ T312] usb 6-1: unable to get BOS descriptor or descriptor too short [ 116.746285][ T312] usb 6-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 116.756694][ T312] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.767017][ T312] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 116.776070][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.784087][ T312] usb 6-1: Product: syz [ 116.788265][ T312] usb 6-1: Manufacturer: syz [ 116.792844][ T312] usb 6-1: SerialNumber: syz [ 117.001668][ T312] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 117.014672][ T312] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 117.024948][ T312] usb 6-1: USB disconnect, device number 21 [ 117.052097][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.368594][ T3180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.377267][ T3180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.542716][ T3184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3184 comm=syz.5.885 [ 117.773165][ T45] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 117.923784][ T45] usb 6-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 117.936854][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.946583][ T45] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.958495][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.966638][ T45] usb 6-1: SerialNumber: syz [ 117.967136][ T3192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 118.039445][ T36] audit: type=1400 audit(1784409402.703:619): avc: denied { ioctl } for pid=3191 comm="syz.3.888" path="socket:[19388]" dev="sockfs" ino=19388 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.082451][ T3197] netlink: 252 bytes leftover after parsing attributes in process `syz.3.889'. [ 118.174558][ T36] audit: type=1400 audit(1784409402.843:620): avc: denied { create } for pid=3200 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.195158][ T45] usb 6-1: 0:2 : does not exist [ 118.200042][ T45] usb 6-1: unit 5: unexpected type 0x0b [ 118.209792][ T45] usb 6-1: USB disconnect, device number 22 [ 118.217809][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.259312][ T3203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.267842][ T3203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.276255][ T3203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.284763][ T3203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.700172][ T644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.706295][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 118.742484][ T36] audit: type=1400 audit(1784409403.405:621): avc: denied { shutdown } for pid=3209 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.770661][ T3215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 118.779550][ T3215] bridge_slave_1: left allmulticast mode [ 118.785201][ T3215] bridge_slave_1: left promiscuous mode [ 118.790871][ T3215] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.800438][ T3215] bridge_slave_0: left allmulticast mode [ 118.806260][ T3215] bridge_slave_0: left promiscuous mode [ 118.806889][ T3218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.898'. [ 118.812506][ T3215] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.941172][ T36] audit: type=1400 audit(1784409403.605:622): avc: denied { shutdown } for pid=3237 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.969371][ T65] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 118.973607][ T36] audit: type=1400 audit(1784409403.626:623): avc: denied { accept } for pid=3237 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.998513][ T36] audit: type=1400 audit(1784409403.656:624): avc: denied { read } for pid=3242 comm="syz.4.907" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.021550][ T36] audit: type=1400 audit(1784409403.686:625): avc: denied { open } for pid=3242 comm="syz.4.907" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.130190][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 119.138224][ T65] usb 6-1: not running at top speed; connect to a high speed hub [ 119.147919][ T65] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 119.156980][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.165012][ T65] usb 6-1: Product: syz [ 119.169187][ T65] usb 6-1: Manufacturer: syz [ 119.173786][ T65] usb 6-1: SerialNumber: syz [ 119.308312][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 119.457865][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 119.464023][ T45] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.472421][ T45] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 119.482703][ T45] usb 5-1: config 179 has no interface number 0 [ 119.489022][ T45] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.498952][ T45] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 119.512106][ T45] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.521198][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.735961][ T45] usb 5-1: USB disconnect, device number 40 [ 119.773215][ T3274] veth1: entered allmulticast mode [ 119.782014][ T3274] veth1: left allmulticast mode [ 119.855887][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.864844][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.874654][ T3283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.919'. [ 119.906497][ T65] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 119.921028][ T65] usb 6-1: USB disconnect, device number 23 [ 119.929848][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.971979][ T3298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.923'. [ 120.046228][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.054724][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.063879][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.072518][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.116018][ T45] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 120.275542][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 120.281788][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.293099][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.302934][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.315853][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.324893][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.333783][ T45] usb 5-1: config 0 descriptor?? [ 120.588951][ T3318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 120.598582][ T3318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.607428][ T3318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.616034][ T3318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.624498][ T3318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.641616][ T3320] &nr: renamed from bond_slave_1 [ 120.739515][ T45] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 120.749095][ T45] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 120.756340][ T45] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 120.763702][ T45] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 120.771756][ T45] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 120.783228][ T45] microsoft 0003:045E:07DA.000A: no inputs found [ 120.790205][ T45] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 120.944082][ T65] usb 5-1: USB disconnect, device number 41 [ 121.143974][ T3332] syzkaller0: entered promiscuous mode [ 121.149462][ T3332] syzkaller0: entered allmulticast mode [ 121.156291][ T3332] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 121.389976][ T3343] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 121.418562][ T3346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.427110][ T3346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.498896][ T3356] : renamed from vlan0 (while UP) [ 121.508003][ T3356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 122.261605][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 122.365256][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 122.365272][ T36] audit: type=1400 audit(1784409407.035:631): avc: denied { create } for pid=3365 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.523277][ T36] audit: type=1400 audit(1784409407.195:632): avc: denied { setopt } for pid=3369 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.543293][ T3370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 122.608309][ T36] audit: type=1400 audit(1784409407.275:633): avc: denied { map } for pid=3371 comm="syz.4.948" path="socket:[21114]" dev="sockfs" ino=21114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.656300][ T36] audit: type=1400 audit(1784409407.325:634): avc: denied { write } for pid=3375 comm="syz.4.950" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 122.681309][ T36] audit: type=1400 audit(1784409407.325:635): avc: denied { open } for pid=3375 comm="syz.4.950" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.277915][ T491] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 123.427564][ T491] usb 6-1: Using ep0 maxpacket: 16 [ 123.433839][ T491] usb 6-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 123.444141][ T491] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 123.454513][ T491] usb 6-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 123.463594][ T491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.471617][ T491] usb 6-1: Product: syz [ 123.475775][ T491] usb 6-1: Manufacturer: syz [ 123.480379][ T491] usb 6-1: SerialNumber: syz [ 123.686828][ T36] audit: type=1400 audit(1784409408.358:636): avc: denied { ioctl } for pid=3381 comm="syz.5.952" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.836650][ T65] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 123.987301][ T65] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 123.998117][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.004719][ T65] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 124.013953][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.022643][ T65] usb 5-1: config 0 descriptor?? [ 124.028036][ T3387] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 124.261556][ T36] audit: type=1400 audit(1784409408.939:637): avc: denied { mounton } for pid=3405 comm="syz.0.957" path="/file0" dev="ramfs" ino=22158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 124.266855][ T3406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 124.329207][ T36] audit: type=1400 audit(1784409409.009:638): avc: denied { setattr } for pid=3409 comm="syz.0.959" name="/" dev="configfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.449619][ T65] uclogic 0003:2179:0053.000B: interface is invalid, ignoring [ 124.647890][ T3423] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 124.647906][ T3423] rust_binder: Read failure Err(EFAULT) in pid:781 [ 124.656287][ T3423] rust_binder: pid 3423 performed invalid decrement on ref [ 124.688656][ T3425] loop7: detected capacity change from 0 to 7 [ 124.695481][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.704599][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.712686][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.721836][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.729709][ T313] loop7: unable to read partition table [ 124.737637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.746798][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.754971][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.764141][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.772132][ T3425] loop7: unable to read partition table [ 124.778280][ T3425] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 124.778804][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.797964][ T3387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.800894][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.809454][ T3387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.828074][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.837255][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.845554][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.854715][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.854855][ T3430] netlink: 'syz.3.965': attribute type 25 has an invalid length. [ 124.862858][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.879377][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.887847][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.897003][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.911129][ T3433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.920455][ T3433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.055773][ T3442] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39451 sclass=netlink_xfrm_socket pid=3442 comm=syz.0.970 [ 126.001395][ T3454] netlink: 140 bytes leftover after parsing attributes in process `syz.3.974'. [ 126.012436][ T3454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.021401][ T3454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.041866][ T491] usb 6-1: USB disconnect, device number 24 [ 126.046909][ T3456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 126.080465][ T3458] netlink: 140 bytes leftover after parsing attributes in process `syz.3.974'. [ 126.129129][ T3464] netlink: 'syz.5.977': attribute type 4 has an invalid length. [ 126.137007][ T3464] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.977'. [ 126.164517][ T36] audit: type=1400 audit(1784409410.853:639): avc: denied { getopt } for pid=3463 comm="syz.5.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.198431][ T3470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.208930][ T3470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.379580][ T36] audit: type=1400 audit(1784409411.063:640): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.408208][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.416766][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.551167][ T491] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 126.582514][ T2759] usb 5-1: USB disconnect, device number 42 [ 126.608145][ T3491] netlink: 'syz.4.985': attribute type 46 has an invalid length. [ 126.700867][ T491] usb 6-1: Using ep0 maxpacket: 32 [ 126.707033][ T491] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 126.717996][ T491] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 126.731723][ T491] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 126.740816][ T491] usb 6-1: New USB device strings: Mfr=83, Product=0, SerialNumber=0 [ 126.748899][ T491] usb 6-1: Manufacturer: syz [ 126.754079][ T491] usb 6-1: config 0 descriptor?? [ 126.933612][ T3493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.942047][ T2759] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 126.942196][ T3493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.090139][ T2759] usb 5-1: Using ep0 maxpacket: 16 [ 127.095659][ T2759] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 127.109318][ T2759] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.118401][ T2759] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 127.126776][ T2759] usb 5-1: Product: syz [ 127.130990][ T2759] usb 5-1: Manufacturer: syz [ 127.138444][ T2759] r8152-cfgselector 5-1: Unknown version 0x0000 [ 127.144902][ T2759] r8152-cfgselector 5-1: config 0 descriptor?? [ 127.151912][ T2759] cdc_acm 5-1:0.0: Zero length descriptor references [ 127.158615][ T2759] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 127.167672][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.177711][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.186541][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.196041][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.204177][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.212297][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.220396][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.228485][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.236585][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.244690][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.252838][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.260952][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.269028][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.277128][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.285216][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.293307][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.301406][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.309477][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.317563][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.325815][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.333917][ T491] logitech-djreceiver 0003:046D:C714.000C: unknown main item tag 0x0 [ 127.364870][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 127.364888][ T36] audit: type=1400 audit(1784409412.045:643): avc: denied { getopt } for pid=3490 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.374379][ T491] r8152-cfgselector 5-1: USB disconnect, device number 43 [ 127.391133][ T31] usb 6-1: USB disconnect, device number 25 [ 127.910506][ T3499] overlayfs: missing 'lowerdir' [ 128.015637][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.023165][ T3517] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 128.030938][ T3517] netlink: 9 bytes leftover after parsing attributes in process `syz.3.994'. [ 128.056039][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.065126][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.094182][ T3525] netlink: 'syz.0.997': attribute type 46 has an invalid length. [ 128.102301][ T3525] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28443 sclass=netlink_xfrm_socket pid=3525 comm=syz.0.997 [ 128.258180][ T491] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 128.409230][ T491] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.417237][ T491] usb 6-1: not running at top speed; connect to a high speed hub [ 128.425817][ T491] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 128.434009][ T491] usb 6-1: config 0 has no interface number 0 [ 128.440134][ T491] usb 6-1: config 0 interface 175 has no altsetting 0 [ 128.448238][ T491] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 128.457419][ T491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.465727][ T491] usb 6-1: Product: syz [ 128.469911][ T491] usb 6-1: Manufacturer: syz [ 128.474658][ T491] usb 6-1: SerialNumber: syz [ 128.479950][ T491] usb 6-1: config 0 descriptor?? [ 128.557661][ T370] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 128.688586][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.697250][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.708704][ T491] ums-alauda 6-1:0.175: USB Mass Storage device detected [ 128.725973][ T491] ums-alauda 6-1:0.175: This device (07b4,010a,0102 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 128.725973][ T491] Please send a copy of this message to and [ 128.728717][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.762579][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.768235][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.773081][ T370] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.781250][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.810075][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.824373][ T370] usb 5-1: config 0 descriptor?? [ 128.827252][ T491] usb 6-1: USB disconnect, device number 26 [ 129.314666][ T3573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.323467][ T3573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.448403][ T3537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.457028][ T3537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.465414][ T370] usb 5-1: language id specifier not provided by device, defaulting to English [ 129.576034][ T491] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 129.688499][ T3577] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 129.696267][ T3577] netlink: 'syz.0.1015': attribute type 2 has an invalid length. [ 129.725798][ T491] usb 6-1: Using ep0 maxpacket: 16 [ 129.731977][ T491] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 91, using maximum allowed: 30 [ 129.742833][ T491] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 129.757176][ T491] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 129.766352][ T491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.774329][ T491] usb 6-1: Product: syz [ 129.778498][ T491] usb 6-1: Manufacturer: syz [ 129.783083][ T491] usb 6-1: SerialNumber: syz [ 129.868013][ T370] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input21 [ 129.880942][ T370] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input22 [ 129.893793][ T370] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input23 [ 129.914504][ T370] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000D/input/input24 [ 129.930348][ T370] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 129.971655][ T3582] batadv_slave_1: entered allmulticast mode [ 129.979668][ T3582] veth1_to_bond: entered promiscuous mode [ 129.987724][ T36] audit: type=1400 audit(1784409414.679:644): avc: denied { bind } for pid=3581 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.117880][ T2759] usb 5-1: USB disconnect, device number 44 [ 130.729625][ T3592] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 130.747555][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 130.814890][ T36] audit: type=1400 audit(1784409415.511:645): avc: denied { connect } for pid=3597 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.859294][ T3598] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 130.896539][ T3598] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 130.925750][ T3581] veth1_to_bond: left promiscuous mode [ 130.931310][ T3581] batadv_slave_1: left allmulticast mode [ 130.958582][ T3601] netlink: 'syz.3.1023': attribute type 27 has an invalid length. [ 131.203695][ T491] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 131.353499][ T491] usb 5-1: Using ep0 maxpacket: 8 [ 131.359871][ T491] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.368235][ T491] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 131.376431][ T491] usb 5-1: config 2 has no interface number 0 [ 131.382494][ T491] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 131.393796][ T491] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.404114][ T491] usb 5-1: config 2 interface 232 has no altsetting 0 [ 131.415536][ T491] usb 5-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 131.424652][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.432648][ T491] usb 5-1: Product: syz [ 131.436829][ T491] usb 5-1: Manufacturer: syz [ 131.442033][ T491] usb 5-1: SerialNumber: syz [ 131.448425][ T3605] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 131.545577][ T3618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.554461][ T3618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.661744][ T491] usb 5-1: USB disconnect, device number 45 [ 131.670283][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.232/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.121231][ T3625] rust_binder: Failure in copy_transaction_data: EINVAL [ 132.121252][ T3625] rust_binder: 3624:3625 transaction to 3624 failed: EINVAL [ 132.146392][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.165862][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.462018][ T491] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 132.499677][ T2759] usb 6-1: USB disconnect, device number 27 [ 132.622959][ T491] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 132.634349][ T491] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 132.643462][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.651448][ T491] usb 5-1: Product: syz [ 132.655648][ T491] usb 5-1: Manufacturer: syz [ 132.660263][ T491] usb 5-1: SerialNumber: syz [ 132.665795][ T3632] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 132.841545][ T2759] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 132.879573][ T491] usb 5-1: USB disconnect, device number 46 [ 133.001358][ T2759] usb 6-1: Using ep0 maxpacket: 8 [ 133.007436][ T2759] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 133.020483][ T2759] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 133.029549][ T2759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.038127][ T2759] usb 6-1: config 0 descriptor?? [ 133.244899][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.253486][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.462799][ T2759] ryos 0003:1E7D:3232.000E: unexpected long global item [ 133.469882][ T2759] ryos 0003:1E7D:3232.000E: parse failed [ 133.475726][ T2759] ryos 0003:1E7D:3232.000E: probe with driver ryos failed with error -22 [ 133.663450][ T370] usb 6-1: USB disconnect, device number 28 [ 133.790971][ T3653] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1040'. [ 133.799995][ T3652] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1040'. [ 133.940244][ T2759] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 134.000315][ T3658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1042'. [ 134.080093][ T2759] usb 5-1: device descriptor read/64, error -71 [ 134.339782][ T2759] usb 5-1: device descriptor read/64, error -71 [ 134.589548][ T2759] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 134.719353][ T2759] usb 5-1: device descriptor read/64, error -71 [ 134.925423][ T370] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 134.959114][ T2759] usb 5-1: device descriptor read/64, error -71 [ 135.069089][ T2759] usb usb5-port1: attempt power cycle [ 135.078953][ T370] usb 6-1: Using ep0 maxpacket: 8 [ 135.085088][ T370] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 135.097360][ T370] usb 6-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 135.106414][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.114423][ T370] usb 6-1: Product: syz [ 135.118591][ T370] usb 6-1: Manufacturer: syz [ 135.123194][ T370] usb 6-1: SerialNumber: syz [ 135.329907][ T370] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.338244][ T370] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 135.349364][ T370] usb 6-1: USB disconnect, device number 29 [ 135.357787][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.408617][ T2759] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 135.429601][ T2759] usb 5-1: device descriptor read/8, error -71 [ 135.559481][ T2759] usb 5-1: device descriptor read/8, error -71 [ 135.627316][ T36] audit: type=1400 audit(1784409420.316:646): avc: denied { create } for pid=3681 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 135.798208][ T2759] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 135.809603][ T3686] rust_binder: Failure in copy_transaction_data: EINVAL [ 135.809629][ T3686] rust_binder: 3685:3686 transaction to 3685 failed: EINVAL [ 135.818605][ T36] audit: type=1400 audit(1784409420.517:647): avc: denied { map } for pid=3685 comm="syz.3.1051" path="socket:[23000]" dev="sockfs" ino=23000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 135.850841][ T2759] usb 5-1: device descriptor read/8, error -71 [ 135.858350][ T3692] cgroup: none used incorrectly [ 135.871178][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.879699][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.979111][ T2759] usb 5-1: device descriptor read/8, error -71 [ 136.088005][ T2759] usb usb5-port1: unable to enumerate USB device [ 136.648447][ T3718] rust_binder: Failure in copy_transaction_data: EINVAL [ 136.648477][ T3718] rust_binder: 3717:3718 transaction to 3717 failed: EINVAL [ 136.655601][ T3719] rust_binder: Failure in copy_transaction_data: EINVAL [ 136.662929][ T3719] rust_binder: 3717:3719 transaction to 3717 failed: EINVAL [ 136.940154][ T36] audit: type=1400 audit(1784409421.638:648): avc: denied { write } for pid=3724 comm="syz.0.1064" path="socket:[24238]" dev="sockfs" ino=24238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.987380][ T312] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 137.046971][ T2759] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 137.137899][ T312] usb 6-1: config index 0 descriptor too short (expected 58, got 45) [ 137.147422][ T312] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 137.156518][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.164531][ T312] usb 6-1: Product: syz [ 137.168747][ T312] usb 6-1: Manufacturer: syz [ 137.173337][ T312] usb 6-1: SerialNumber: syz [ 137.206832][ T2759] usb 5-1: Using ep0 maxpacket: 32 [ 137.213043][ T2759] usb 5-1: config 6 has an invalid interface number: 251 but max is 1 [ 137.221409][ T2759] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 137.231660][ T2759] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 137.240580][ T2759] usb 5-1: config 6 has no interface number 0 [ 137.246695][ T2759] usb 5-1: config 6 interface 251 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.259977][ T2759] usb 5-1: config 6 interface 251 has no altsetting 0 [ 137.268604][ T2759] usb 5-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 137.277752][ T2759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 137.285743][ T2759] usb 5-1: Product: syz [ 137.290110][ T2759] usb 5-1: Manufacturer: syz [ 137.294810][ T2759] usb 5-1: SerialNumber: syz [ 137.427529][ T3736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.436084][ T3736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.448411][ T3736] input: syz1 as /devices/virtual/input/input25 [ 137.807195][ T3723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.816448][ T3723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.846258][ T312] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:1a:30:07:06:b6 [ 137.857725][ T312] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 138.389580][ C0] usb 6-1: Rx status -71 [ 138.389684][ T370] usb 6-1: USB disconnect, device number 30 [ 138.393894][ C0] usb 6-1: eth1: intr status -71 [ 138.406226][ T149] usb 6-1: device reset failed [ 138.526781][ T36] audit: type=1400 audit(1784409423.229:649): avc: denied { nlmsg_read } for pid=3774 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.874479][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.884124][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.896557][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.905999][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.225217][ T369] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 139.394919][ T369] usb 6-1: Using ep0 maxpacket: 32 [ 139.401486][ T369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.413448][ T369] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 139.431157][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.441456][ T369] usb 6-1: Product: syz [ 139.445168][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.454019][ T369] usb 6-1: Manufacturer: syz [ 139.458845][ T369] usb 6-1: SerialNumber: syz [ 139.464148][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.681057][ T369] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 139.716490][ T369] usb 6-1: USB disconnect, device number 31 [ 139.804074][ T2759] asix 5-1:6.251: probe with driver asix failed with error -22 [ 139.804370][ T3810] loop7: detected capacity change from 0 to 7 [ 139.816316][ T2759] usb 5-1: USB disconnect, device number 51 [ 139.823848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.833003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.840954][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.850127][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.858367][ T3810] loop7: unable to read partition table [ 139.864050][ T3810] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 139.870469][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.886662][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.894896][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.904411][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.912524][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.921684][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.930126][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.939249][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.947472][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.956640][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.304413][ T2759] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 140.454090][ T2759] usb 5-1: Using ep0 maxpacket: 8 [ 140.469428][ T2759] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 140.484054][ T2759] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 140.495992][ T2759] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 140.508124][ T2759] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 140.521264][ T2759] usb 5-1: config 1 interface 0 has no altsetting 0 [ 140.530139][ T2759] usb 5-1: string descriptor 0 read error: -22 [ 140.536553][ T2759] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 140.545797][ T2759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.555320][ T3810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.711580][ T3837] rust_binder: Error while translating object. [ 140.711578][ T36] audit: type=1400 audit(1784409425.411:650): avc: denied { transfer } for pid=3836 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.737149][ T3837] rust_binder: Failure in copy_transaction_data: EINVAL [ 140.737180][ T3837] rust_binder: 3836:3837 transaction to 3836 failed: EINVAL [ 140.854311][ T36] audit: type=1326 audit(1784409425.561:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.3.1092" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfe39de99 code=0x0 [ 140.965332][ T2759] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x2 [ 141.043688][ T2759] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 141.051332][ T2759] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 141.317211][ T36] audit: type=1400 audit(1784409426.021:652): avc: denied { read write } for pid=3853 comm="syz.0.1093" name="file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.341313][ T36] audit: type=1400 audit(1784409426.041:653): avc: denied { open } for pid=3853 comm="syz.0.1093" path="/393/file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.364616][ T36] audit: type=1400 audit(1784409426.071:654): avc: denied { append } for pid=3853 comm="syz.0.1093" name="file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.407350][ T36] audit: type=1400 audit(1784409426.071:655): avc: denied { lock } for pid=3853 comm="syz.0.1093" path="/393/file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.452782][ T36] audit: type=1400 audit(1784409426.152:656): avc: denied { relabelfrom } for pid=3858 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.483354][ T36] audit: type=1400 audit(1784409426.152:657): avc: denied { relabelto } for pid=3858 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.659161][ T3866] netlink: 'syz.3.1099': attribute type 16 has an invalid length. [ 141.667126][ T3866] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.1099'. [ 141.678104][ T3866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.699472][ T3866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.883078][ T312] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 142.020142][ T3875] sit0: entered promiscuous mode [ 142.027838][ T3875] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 142.036094][ T3875] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1102'. [ 142.045593][ T312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.073780][ T312] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 142.082841][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.103548][ T312] usb 6-1: SerialNumber: syz [ 142.112134][ T312] usb 6-1: config 0 descriptor?? [ 142.119253][ T312] hub 6-1:0.0: bad descriptor, ignoring hub [ 142.125251][ T312] hub 6-1:0.0: probe with driver hub failed with error -5 [ 142.140303][ T312] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 142.143077][ T2759] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 142.160814][ T312] usb 6-1: Detected SIO [ 142.168989][ T312] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 142.254276][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 142.433633][ T491] usb 6-1: USB disconnect, device number 32 [ 142.441936][ T491] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 142.454116][ T491] ftdi_sio 6-1:0.0: device disconnected [ 142.855965][ T36] audit: type=1326 audit(1784409427.562:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.1111" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0979de99 code=0x0 [ 143.142247][ T312] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 143.192093][ T3915] ip6tnl0: entered allmulticast mode [ 143.244341][ T36] audit: type=1326 audit(1784409427.953:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.1120" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fc699de99 code=0x0 [ 143.302124][ T312] usb 6-1: Using ep0 maxpacket: 16 [ 143.308712][ T312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.315599][ T312] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 143.324758][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.333390][ T312] usb 6-1: config 0 descriptor?? [ 143.353880][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.363996][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.373268][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.383344][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.391719][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.402040][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.409946][ T3939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'. [ 143.421729][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.430313][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.442034][ T2759] usb 5-1: device descriptor read/64, error -71 [ 143.552307][ T2759] usb 5-1: device reset changed ep0 maxpacket size! [ 143.559219][ T369] usb 5-1: USB disconnect, device number 52 [ 143.691880][ T369] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 143.741678][ T312] kone 0003:1E7D:2CED.0010: unknown main item tag 0x2 [ 143.748673][ T312] kone 0003:1E7D:2CED.0010: ignoring exceeding usage max [ 143.759216][ T312] kone 0003:1E7D:2CED.0010: hidraw0: USB HID v0.81 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 143.841770][ T369] usb 5-1: Using ep0 maxpacket: 16 [ 143.848014][ T369] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.858968][ T369] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.865601][ T369] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 143.874737][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.883286][ T369] usb 5-1: config 0 descriptor?? [ 143.946938][ T370] usb 6-1: USB disconnect, device number 33 [ 143.992680][ T1482] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.999137][ T1482] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.012765][ T3958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.021280][ T3958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.041715][ T3961] fuse: Bad value for 'fd' [ 144.292755][ T369] usbhid 5-1:0.0: can't add hid device: -71 [ 144.298755][ T369] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.307485][ T369] usb 5-1: USB disconnect, device number 53 [ 145.051108][ T2759] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 145.267429][ T2759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.277665][ T2759] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 145.285810][ T2759] usb 5-1: can't read configurations, error -71 [ 145.955261][ T4016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=4016 comm=syz.5.1147 [ 146.020571][ T644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.026256][ T4029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.053161][ T4029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.069439][ T4031] tipc: Started in network mode [ 146.083856][ T4031] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 146.098698][ T4031] tipc: Enabled bearer , priority 10 [ 146.185281][ T4038] ip6gretap0: entered promiscuous mode [ 146.190877][ T4038] ip6gretap0: entered allmulticast mode [ 146.520319][ T2759] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 146.560101][ T4056] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=20097 sclass=netlink_xfrm_socket pid=4056 comm=syz.3.1157 [ 146.574900][ T4056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.584233][ T4056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.597033][ T4056] rust_binder: Error while translating object. [ 146.597071][ T4056] rust_binder: Failure in copy_transaction_data: EINVAL [ 146.604906][ T4056] rust_binder: 4055:4056 transaction to 4055 failed: EINVAL [ 146.650296][ T2759] usb 5-1: device descriptor read/64, error -71 [ 146.692454][ T4065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 146.755554][ T4075] overlayfs: failed to clone upperpath [ 146.900180][ T2759] usb 5-1: device descriptor read/64, error -71 [ 146.930157][ T369] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 147.060075][ T369] usb 6-1: device descriptor read/64, error -71 [ 147.140009][ T2759] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 147.210023][ T491] tipc: Node number set to 4269801492 [ 147.222404][ T1502] bridge_slave_1: left allmulticast mode [ 147.228061][ T1502] bridge_slave_1: left promiscuous mode [ 147.234317][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.241917][ T1502] bridge_slave_0: left allmulticast mode [ 147.247613][ T1502] bridge_slave_0: left promiscuous mode [ 147.253301][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.269921][ T2759] usb 5-1: device descriptor read/64, error -71 [ 147.296912][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 147.296923][ T36] audit: type=1400 audit(1784409431.995:666): avc: denied { mount } for pid=4078 comm="syz.0.1164" name="/" dev="pstore" ino=1899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 147.325334][ T369] usb 6-1: device descriptor read/64, error -71 [ 147.401153][ T1502] veth1_macvtap: left promiscuous mode [ 147.406675][ T1502] veth0_vlan: left promiscuous mode [ 147.511008][ T2759] usb 5-1: device descriptor read/64, error -71 [ 147.569822][ T369] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 147.619890][ T2759] usb usb5-port1: attempt power cycle [ 147.699709][ T369] usb 6-1: device descriptor read/64, error -71 [ 147.939635][ T369] usb 6-1: device descriptor read/64, error -71 [ 147.959642][ T2759] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 147.980609][ T2759] usb 5-1: device descriptor read/8, error -71 [ 147.989288][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 148.049668][ T369] usb usb6-port1: attempt power cycle [ 148.110539][ T2759] usb 5-1: device descriptor read/8, error -71 [ 148.349418][ T2759] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 148.370379][ T2759] usb 5-1: device descriptor read/8, error -71 [ 148.389398][ T369] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 148.410344][ T369] usb 6-1: device descriptor read/8, error -71 [ 148.510617][ T2759] usb 5-1: device descriptor read/8, error -71 [ 148.540307][ T369] usb 6-1: device descriptor read/8, error -71 [ 148.629491][ T2759] usb usb5-port1: unable to enumerate USB device [ 148.779251][ T369] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 148.800257][ T369] usb 6-1: device descriptor read/8, error -71 [ 148.930184][ T369] usb 6-1: device descriptor read/8, error -71 [ 149.039223][ T369] usb usb6-port1: unable to enumerate USB device [ 149.114833][ T4095] overlayfs: lower data-only dirs require metacopy support. [ 149.208606][ T36] audit: type=1400 audit(1784409433.906:667): avc: denied { write } for pid=4106 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.238256][ T4111] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1176'. [ 149.628842][ T369] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 149.798772][ T369] usb 5-1: Using ep0 maxpacket: 16 [ 149.806749][ T369] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 149.816181][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.824414][ T369] usb 5-1: Product: syz [ 149.828869][ T369] usb 5-1: Manufacturer: syz [ 149.833542][ T369] usb 5-1: SerialNumber: syz [ 150.038686][ T370] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 150.044750][ T369] usb 5-1: Can't get UAC3 power state for id 10 [ 150.053882][ T369] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 150.061536][ T369] usb 5-1: 0:3 : does not exist [ 150.066569][ T369] usb 5-1: 0:4 : does not exist [ 150.071715][ T369] usb 5-1: 0:5 : does not exist [ 150.076752][ T369] usb 5-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 150.088032][ T369] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 150.101253][ T369] usb 5-1: USB disconnect, device number 60 [ 150.116104][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.198607][ T370] usb 6-1: Using ep0 maxpacket: 8 [ 150.211343][ T370] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 150.220424][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.228413][ T370] usb 6-1: Product: 瘍斜悈譬ᗂᐿ䫟㒇晢떲⓵앴⨨렲븴쳻Ⓙ洘痌Ȧ췁莭줟窆姶軯욆虸㣌푇ࢅ焸罖욼鸎ኄၢ蠾낖톲냢瀢숭빖㈋엪걮ஃ䌀瘯돨큣䎄暘脟겆쯕慪蓏슸㳬 [ 150.249836][ T370] usb 6-1: Manufacturer: 糴୊ꉇ欤쇬槹㲪‫蔊䇍끫ꉸʹꥶᯤ鷤⒘๱墻䟂窱ꞕ঄⌁骱轂↛㙶讀⌰뙯扠ꪇ螚ॄ駄钽핫酞뾱⁒궒샰왧鯭ƍ䰦캿ᥕ⾜䇎盆钔穼睵댷蹉ᶾ憷憳隋탿㥭앣㻡ᱪꬉ낺뱝⭝䙅偏⦊쨱ಯ꿔㯐䗮႗ [ 150.489835][ T4125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.499872][ T4125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.528659][ T36] audit: type=1400 audit(1784409435.236:668): avc: denied { getopt } for pid=4136 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.561759][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.570414][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.588695][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.597215][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.609403][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.617826][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.629626][ T4139] SELinux: policydb string length 376993134 does not match expected length 8 [ 150.639186][ T4139] SELinux: failed to load policy [ 150.644683][ T4139] SELinux: policydb version 1634273512 does not match my version range 15-33 [ 150.653939][ T4139] SELinux: failed to load policy [ 150.660153][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.668937][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.681257][ T370] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 150.690626][ T370] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 150.701165][ T370] usb 6-1: USB disconnect, device number 38 [ 150.712419][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.737669][ T36] audit: type=1400 audit(1784409435.436:669): avc: denied { create } for pid=4146 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.858442][ T369] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 151.008319][ T369] usb 5-1: Using ep0 maxpacket: 32 [ 151.014968][ T369] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.023097][ T369] usb 5-1: config 0 has no interface number 0 [ 151.030563][ T369] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.039636][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.047627][ T369] usb 5-1: Product: syz [ 151.051802][ T369] usb 5-1: Manufacturer: syz [ 151.056383][ T369] usb 5-1: SerialNumber: syz [ 151.062245][ T369] usb 5-1: config 0 descriptor?? [ 151.067991][ T369] smsc95xx v2.0.0 [ 151.319680][ T36] audit: type=1400 audit(1784409436.027:670): avc: denied { lock } for pid=4161 comm="syz.0.1195" path="socket:[25490]" dev="sockfs" ino=25490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.428130][ T491] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 151.468477][ T369] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 151.479224][ T369] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.579746][ T491] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 151.589810][ T491] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 151.600827][ T491] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.609900][ T491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.617879][ T491] usb 6-1: Product: syz [ 151.622043][ T491] usb 6-1: Manufacturer: syz [ 151.626635][ T491] usb 6-1: SerialNumber: syz [ 151.834311][ T491] cdc_ncm 6-1:1.0: bind() failure [ 151.840154][ T491] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 151.846953][ T491] cdc_ncm 6-1:1.1: bind() failure [ 151.855372][ T491] usb 6-1: USB disconnect, device number 39 [ 151.909982][ T4143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.918549][ T4143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.934494][ T369] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 151.945889][ T369] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 151.955087][ T369] usb 5-1: USB disconnect, device number 61 [ 152.185999][ T4186] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1199'. [ 152.257310][ T4189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1200'. [ 152.290044][ T36] audit: type=1400 audit(1784409436.997:671): avc: denied { map } for pid=4193 comm="syz.4.1202" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.392140][ T4202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4202 comm=syz.0.1205 [ 152.405213][ T4203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4203 comm=syz.0.1205 [ 152.419287][ T4202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1205'. [ 152.547760][ T369] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 152.652844][ T4202] fuse: Bad value for 'fd' [ 152.697714][ T369] usb 5-1: Using ep0 maxpacket: 8 [ 152.704097][ T369] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.714458][ T369] usb 5-1: string descriptor 0 read error: -22 [ 152.720744][ T369] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 152.729829][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.741514][ T369] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.939642][ T369] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.960385][ T369] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 152.973941][ T369] usb 5-1: USB disconnect, device number 62 [ 152.975799][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.572361][ T36] audit: type=1400 audit(1784409438.277:672): avc: denied { validate_trans } for pid=4209 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.697374][ T31] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 153.857321][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 153.863475][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.870231][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 153.879354][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.887983][ T31] usb 5-1: config 0 descriptor?? [ 154.057254][ T370] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 154.207186][ T370] usb 6-1: Using ep0 maxpacket: 16 [ 154.213330][ T370] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 154.227625][ T370] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 154.236689][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.244713][ T370] usb 6-1: Product: syz [ 154.248890][ T370] usb 6-1: Manufacturer: syz [ 154.253473][ T370] usb 6-1: SerialNumber: syz [ 154.294857][ T31] logitech 0003:046D:CA03.0011: unknown main item tag 0x2 [ 154.302165][ T31] logitech 0003:046D:CA03.0011: unknown main item tag 0x6 [ 154.309385][ T31] logitech 0003:046D:CA03.0011: ignoring exceeding usage max [ 154.318360][ T31] logitech 0003:046D:CA03.0011: hidraw0: USB HID vcc.5e Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 154.329864][ T31] logitech 0003:046D:CA03.0011: no inputs found [ 154.467803][ T370] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 154.468908][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 154.476506][ T370] usb 6-1: 2:1 : sample bitwidth 60 in over sample bytes 3 [ 154.485349][ T4218] bridge_slave_1: left allmulticast mode [ 154.492687][ T370] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 154.498164][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.511765][ T31] usb 5-1: USB disconnect, device number 63 [ 154.517968][ T4218] bridge_slave_0: left allmulticast mode [ 154.525146][ T4218] bridge_slave_0: left promiscuous mode [ 154.531057][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.532355][ T370] usb 6-1: USB disconnect, device number 40 [ 154.550502][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.674057][ T4223] SELinux: policydb magic number 0x67635807 does not match expected magic number 0xf97cff8c [ 154.684368][ T4223] SELinux: failed to load policy [ 154.711050][ T4227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.720066][ T4227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.984702][ T4229] batadv_slave_1: entered promiscuous mode [ 155.029697][ T36] audit: type=1326 audit(1784409439.738:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1216" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0979de99 code=0x0 [ 155.246878][ T369] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 155.275731][ T4236] fuse: Unknown parameter '000000000000000000000040x000000000000000a0x00000000000000070000000000000000000000000000000000000000' [ 155.397823][ T369] usb 6-1: Using ep0 maxpacket: 32 [ 155.404742][ T369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 155.414527][ T369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.424853][ T369] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.435458][ T369] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 155.444699][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.452917][ T369] usb 6-1: Product: syz [ 155.457327][ T369] usb 6-1: Manufacturer: syz [ 155.461984][ T369] usb 6-1: SerialNumber: syz [ 155.734897][ T4228] batadv_slave_1: left promiscuous mode [ 155.735713][ T369] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 155.748436][ T369] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 155.757569][ T369] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 155.765126][ T369] usb 6-1: 3:0: cannot get min/max values for control 11 (id 3) [ 155.775402][ T369] usb 6-1: USB disconnect, device number 41 [ 155.885450][ T4250] batadv_slave_1: entered promiscuous mode [ 155.896832][ T4251] batadv_slave_1: left promiscuous mode [ 156.042934][ T4259] overlayfs: missing 'lowerdir' [ 156.056555][ T4261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.065061][ T4261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.136621][ T31] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 156.296558][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 156.309620][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.324967][ T31] usb 5-1: config 6 has an invalid interface number: 97 but max is 0 [ 156.333960][ T31] usb 5-1: config 6 has no interface number 0 [ 156.346542][ T31] usb 5-1: config 6 interface 97 has no altsetting 0 [ 156.357680][ T31] usb 5-1: New USB device found, idVendor=0499, idProduct=103d, bcdDevice=5a.5d [ 156.376535][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.384560][ T31] usb 5-1: Product: syz [ 156.388988][ T31] usb 5-1: Manufacturer: syz [ 156.393585][ T31] usb 5-1: SerialNumber: syz [ 156.496506][ T370] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 156.647773][ T370] usb 6-1: unable to get BOS descriptor or descriptor too short [ 156.656129][ T370] usb 6-1: not running at top speed; connect to a high speed hub [ 156.666349][ T370] usb 6-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 156.675481][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.683919][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.692289][ T370] usb 6-1: Product: syz [ 156.696528][ T370] usb 6-1: Manufacturer: syz [ 156.697365][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.706362][ T370] usb 6-1: SerialNumber: syz [ 156.712675][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.723495][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.912334][ T36] audit: type=1400 audit(1784409441.618:674): avc: denied { read } for pid=4295 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.937755][ T370] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.948299][ T370] usb 6-1: USB disconnect, device number 42 [ 156.963282][ T3583] udevd[3583]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.123924][ T31] snd-usb-audio 5-1:6.97: probe with driver snd-usb-audio failed with error -2 [ 157.138784][ T31] usb 5-1: USB disconnect, device number 64 [ 157.149719][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.97/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.246342][ T4309] 9pnet_fd: Insufficient options for proto=fd [ 157.253012][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.257935][ T4311] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1239'. [ 157.262410][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.278930][ T4313] 9pnet_fd: Insufficient options for proto=fd [ 157.293353][ T36] audit: type=1400 audit(1784409441.999:675): avc: denied { append } for pid=4316 comm="syz.3.1240" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.296723][ T4317] binder: Unknown parameter 'seclabFl' [ 157.348793][ T4321] veth0: entered allmulticast mode [ 157.430726][ T4324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.439884][ T4324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.456890][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 157.617287][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.627409][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.636387][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.647303][ T31] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 157.656375][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.664349][ T31] usb 5-1: Product: syz [ 157.668514][ T31] usb 5-1: Manufacturer: syz [ 157.673114][ T31] usb 5-1: SerialNumber: syz [ 157.816180][ T890] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 157.889297][ T36] audit: type=1400 audit(1784409442.599:676): avc: denied { watch watch_reads } for pid=4306 comm="syz.4.1237" path="/154/file0" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 157.968288][ T890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.978760][ T890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.985029][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.996022][ T890] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.999981][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.010547][ T890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.026167][ T890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.034306][ T890] usb 6-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 158.058718][ T890] usb 6-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 158.074839][ T890] usb 6-1: SerialNumber: syz [ 158.093403][ T31] usb 5-1: USB disconnect, device number 65 [ 158.109277][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.206106][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.214671][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.285613][ T890] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 158.293019][ T890] cdc_ncm 6-1:1.0: bind() failure [ 158.299533][ T890] usb 6-1: USB disconnect, device number 43 [ 158.750947][ T36] audit: type=1400 audit(1784409443.459:677): avc: denied { create } for pid=4377 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 158.771481][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.781206][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.800345][ T36] audit: type=1400 audit(1784409443.509:678): avc: denied { append } for pid=4383 comm="syz.3.1259" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 158.865772][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.884541][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.995794][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.006714][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.225866][ T369] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 159.385806][ T369] usb 6-1: Using ep0 maxpacket: 16 [ 159.392503][ T369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 159.402761][ T369] usb 6-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 159.416907][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.432096][ T369] usb 6-1: Product: syz [ 159.437300][ T369] usb 6-1: Manufacturer: syz [ 159.442093][ T369] usb 6-1: SerialNumber: syz [ 159.493312][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.501882][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.660517][ T369] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.667527][ T369] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 159.674791][ T369] usb 6-1: unable to issue vendor read request (ret = -71) [ 159.684022][ T369] usb 6-1: unable to issue vendor read request (ret = -71) [ 159.694046][ T369] usb 6-1: unable to issue vendor read request (ret = -71) [ 159.701548][ T369] usb 6-1: unable to issue vendor read request (ret = -71) [ 159.713022][ T369] usb 6-1: USB disconnect, device number 44 [ 159.721202][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.925713][ T2759] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 160.035236][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.044108][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.052557][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.061218][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.076635][ T2759] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 160.084742][ T2759] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 160.094923][ T2759] usb 5-1: config 0 has no interface number 0 [ 160.102365][ T2759] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 160.111426][ T2759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.119471][ T2759] usb 5-1: Product: syz [ 160.123654][ T2759] usb 5-1: Manufacturer: syz [ 160.128249][ T2759] usb 5-1: SerialNumber: syz [ 160.133299][ T2759] usb 5-1: config 0 descriptor?? [ 160.344622][ T2759] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 160.351308][ T2759] usb 5-1: No valid video chain found. [ 160.360098][ T2759] usb 5-1: USB disconnect, device number 66 [ 160.405611][ T890] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 160.556589][ T890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.567488][ T890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.577375][ T890] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 160.586812][ T890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.596842][ T890] usb 6-1: config 0 descriptor?? [ 160.655668][ T2759] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 160.785925][ T2759] usb 5-1: device descriptor read/64, error -71 [ 160.964852][ T4456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.965399][ T4456] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 28) [ 160.971897][ T4456] rust_binder: Error while translating object. [ 160.982427][ T4456] rust_binder: Failure in copy_transaction_data: EINVAL [ 160.988643][ T4456] rust_binder: 4455:4456 transaction to 4455 failed: EINVAL [ 161.006936][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.021399][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.025989][ T2759] usb 5-1: device descriptor read/64, error -71 [ 161.028477][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.041986][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.049012][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.056023][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.063024][ T890] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 161.070511][ T890] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 161.095717][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.106536][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.216734][ T890] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 161.275413][ T2759] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 161.405388][ T2759] usb 5-1: device descriptor read/64, error -71 [ 161.417402][ T890] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 161.425814][ T890] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 161.436838][ T890] usb 6-1: USB disconnect, device number 45 [ 161.632639][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.641195][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.649539][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.658078][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.665341][ T2759] usb 5-1: device descriptor read/64, error -71 [ 161.775455][ T2759] usb usb5-port1: attempt power cycle [ 161.935917][ T36] audit: type=1400 audit(1784409446.650:679): avc: denied { read } for pid=4496 comm="syz.5.1300" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.115254][ T2759] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 162.136243][ T2759] usb 5-1: device descriptor read/8, error -71 [ 162.185707][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.195988][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.205514][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.215610][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.266238][ T2759] usb 5-1: device descriptor read/8, error -71 [ 162.446829][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.456194][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.467584][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.477079][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.515180][ T2759] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 162.546165][ T2759] usb 5-1: device descriptor read/8, error -71 [ 162.676128][ T2759] usb 5-1: device descriptor read/8, error -71 [ 162.795156][ T2759] usb usb5-port1: unable to enumerate USB device [ 163.101282][ T36] audit: type=1400 audit(1784409447.810:680): avc: denied { ioctl } for pid=4538 comm="syz.3.1313" path="socket:[29172]" dev="sockfs" ino=29172 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.325060][ T890] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 163.396363][ T36] audit: type=1400 audit(1784409448.110:681): avc: denied { append } for pid=4550 comm="syz.4.1318" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.476490][ T890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.484559][ T890] usb 6-1: not running at top speed; connect to a high speed hub [ 163.492975][ T890] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.503972][ T890] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 163.513086][ T890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.521536][ T890] usb 6-1: Product: syz [ 163.525746][ T890] usb 6-1: Manufacturer: syz [ 163.530348][ T890] usb 6-1: SerialNumber: syz [ 163.774082][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.782896][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 163.785099][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.914955][ T31] usb 5-1: device descriptor read/64, error -71 [ 163.942229][ T890] usb 6-1: USB disconnect, device number 46 [ 164.154903][ T31] usb 5-1: device descriptor read/64, error -71 [ 164.394867][ T31] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 164.413384][ T36] audit: type=1400 audit(1784409449.120:682): avc: denied { nlmsg_read } for pid=4559 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 164.446739][ T4562] page size migration: [4562 (syz.3.1323)] madvise_vma_pad_pages:333: Invalid attempt to madvise padding on MAP_SHARED vma [ 164.519865][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.541142][ T31] usb 5-1: device descriptor read/64, error -71 [ 164.545399][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.562765][ T36] audit: type=1400 audit(1784409449.270:683): avc: denied { ioctl } for pid=4569 comm="syz.3.1327" path="socket:[29288]" dev="sockfs" ino=29288 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.617817][ T4574] overlayfs: failed to resolve './file2': -2 [ 164.675317][ T36] audit: type=1400 audit(1784409449.390:684): avc: denied { append } for pid=4577 comm="syz.5.1330" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.784814][ T31] usb 5-1: device descriptor read/64, error -71 [ 164.902473][ T31] usb usb5-port1: attempt power cycle [ 164.984766][ T370] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 165.078473][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.088002][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.136031][ T370] usb 6-1: not running at top speed; connect to a high speed hub [ 165.155078][ T370] usb 6-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.169278][ T370] usb 6-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.182359][ T370] usb 6-1: config 1 interface 0 has no altsetting 0 [ 165.190562][ T370] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.40 [ 165.199658][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.207683][ T370] usb 6-1: Product: ᠊ [ 165.211819][ T370] usb 6-1: Manufacturer: 뾝Ⲕ⇉楤賷ﴱ릅ﭽ [ 165.218235][ T370] usb 6-1: SerialNumber: ᰉ [ 165.223966][ T4579] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 165.231152][ T4579] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 165.244718][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 165.265662][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.395669][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.634714][ T31] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 165.655646][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.786508][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.820642][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.829526][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.866899][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 165.885241][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.893744][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.894742][ T31] usb usb5-port1: unable to enumerate USB device [ 166.566879][ T36] audit: type=1400 audit(1784409451.280:685): avc: denied { bind } for pid=4641 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.608561][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.617103][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.346044][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 167.360277][ T36] audit: type=1400 audit(1784409452.070:686): avc: denied { mounton } for pid=4661 comm="syz.3.1363" path="/413/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.393809][ T4664] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.403219][ T36] audit: type=1400 audit(1784409452.110:687): avc: denied { mounton } for pid=4663 comm="syz.4.1364" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 167.403224][ T4664] tmpfs: Unknown parameter 'nr_inOdes' [ 167.435527][ T4664] fuse: Bad value for 'rootmode' [ 167.441845][ T4664] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.527183][ T4681] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1371'. [ 167.536659][ T4681] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1371'. [ 167.545594][ T4681] 0{X: renamed from gretap0 [ 167.551189][ T4681] 0{X: left promiscuous mode [ 167.556376][ T4681] 0{X: entered allmulticast mode [ 167.562444][ T4681] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 167.705454][ T370] usbhid 6-1:1.0: can't add hid device: -71 [ 167.718966][ T370] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 167.735577][ T370] usb 6-1: USB disconnect, device number 47 [ 167.765229][ T4690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.780892][ T4690] kvm: pic: non byte read [ 167.785568][ T4690] kvm: pic: level sensitive irq not supported [ 167.785620][ T4690] kvm: pic: non byte read [ 167.797029][ T4690] kvm: pic: level sensitive irq not supported [ 167.797067][ T4690] kvm: pic: non byte read [ 167.807672][ T4690] kvm: pic: level sensitive irq not supported [ 167.807725][ T4690] kvm: pic: non byte read [ 167.990195][ T36] audit: type=1400 audit(1784409452.701:688): avc: denied { connect } for pid=4699 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.094321][ T370] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 168.122737][ T890] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.128542][ T4705] fuse: Unknown parameter '_i;g{e' [ 168.130316][ T890] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.143124][ T890] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.154435][ T890] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.161749][ T890] rtc rtc0: __rtc_set_alarm: err=-22 [ 168.234324][ T370] usb 6-1: device descriptor read/64, error -71 [ 168.474286][ T370] usb 6-1: device descriptor read/64, error -71 [ 168.674259][ T2759] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 168.705312][ T4717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4717 comm=syz.0.1384 [ 168.718051][ T370] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 168.739203][ T36] audit: type=1326 audit(1784409453.451:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.0.1385" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fc699de99 code=0x0 [ 168.773178][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.781745][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.834225][ T2759] usb 5-1: Using ep0 maxpacket: 16 [ 168.840418][ T2759] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 168.853194][ T2759] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 168.854234][ T370] usb 6-1: device descriptor read/64, error -71 [ 168.862621][ T2759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.877066][ T2759] usb 5-1: Product: syz [ 168.881229][ T2759] usb 5-1: Manufacturer: syz [ 168.885820][ T2759] usb 5-1: SerialNumber: syz [ 169.093250][ T2759] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.100212][ T2759] usb 5-1: unit 4 not found! [ 169.104230][ T370] usb 6-1: device descriptor read/64, error -71 [ 169.105024][ T2759] usb 5-1: unit 8 not found! [ 169.115746][ T2759] usb 5-1: unit 1 not found! [ 169.120322][ T2759] usb 5-1: unit 9 not found! [ 169.135488][ T2759] usb 5-1: USB disconnect, device number 75 [ 169.148963][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.224326][ T370] usb usb6-port1: attempt power cycle [ 169.306183][ T36] audit: type=1400 audit(1784409454.021:690): avc: denied { append } for pid=4735 comm="syz.3.1391" name="sda1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.564155][ T370] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 169.585120][ T370] usb 6-1: device descriptor read/8, error -71 [ 169.608287][ T4749] can0: slcan on ttyS3. [ 169.655460][ T4749] can0 (unregistered): slcan off ttyS3. [ 169.721950][ T370] usb 6-1: device descriptor read/8, error -71 [ 169.896750][ T4761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4761 comm=syz.3.1399 [ 169.954117][ T2759] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 169.964105][ T370] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 169.995087][ T370] usb 6-1: device descriptor read/8, error -71 [ 170.104088][ T2759] usb 5-1: device descriptor read/64, error -71 [ 170.145118][ T370] usb 6-1: device descriptor read/8, error -71 [ 170.264176][ T370] usb usb6-port1: unable to enumerate USB device [ 170.344059][ T2759] usb 5-1: device descriptor read/64, error -71 [ 170.584033][ T2759] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 170.734015][ T2759] usb 5-1: device descriptor read/64, error -71 [ 170.921960][ T4772] syzkaller0: refused to change device tx_queue_len [ 171.003996][ T2759] usb 5-1: device descriptor read/64, error -71 [ 171.124086][ T2759] usb usb5-port1: attempt power cycle [ 171.142583][ T4780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1406'. [ 171.152632][ T4780] tipc: Enabled bearer , priority 10 [ 171.172334][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.173985][ T370] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 171.181333][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.334988][ T370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 171.346146][ T370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42722, setting to 1024 [ 171.357321][ T370] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 171.366360][ T370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.374936][ T370] usb 6-1: config 0 descriptor?? [ 171.382213][ T4770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.463935][ T2759] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 171.484979][ T2759] usb 5-1: device descriptor read/8, error -71 [ 171.615428][ T2759] usb 5-1: device descriptor read/8, error -71 [ 171.791872][ T370] hid-steam 0003:28DE:1142.0013: item fetching failed at offset 4/5 [ 171.800264][ T370] hid-steam 0003:28DE:1142.0013: steam_probe:parse of hid interface failed [ 171.809096][ T370] hid-steam 0003:28DE:1142.0013: probe with driver hid-steam failed with error -22 [ 171.845989][ T4784] SELinux: ebitmap: map size 2585547753 does not match my size 64 (high bit was 704179291) [ 171.856033][ T2759] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 171.863610][ T4784] SELinux: failed to load policy [ 171.884948][ T2759] usb 5-1: device descriptor read/8, error -71 [ 171.994152][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.002746][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.013261][ T31] usb 6-1: USB disconnect, device number 52 [ 172.017939][ T2759] usb 5-1: device descriptor read/8, error -71 [ 172.034623][ T36] audit: type=1400 audit(1784409456.751:691): avc: denied { map } for pid=4790 comm="syz.3.1411" path="socket:[32334]" dev="sockfs" ino=32334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.058772][ T36] audit: type=1400 audit(1784409456.751:692): avc: denied { read } for pid=4790 comm="syz.3.1411" path="socket:[32334]" dev="sockfs" ino=32334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.143967][ T2759] usb usb5-port1: unable to enumerate USB device [ 172.231332][ T4794] syzkaller1: entered promiscuous mode [ 172.236857][ T4794] syzkaller1: entered allmulticast mode [ 172.724334][ T4811] can0: slcan on ttyS3. [ 172.774718][ T4809] can0 (unregistered): slcan off ttyS3. [ 172.790234][ T4824] tmpfs: Unknown parameter 'noinode32' [ 173.061608][ T4856] Invalid argument reading file caps for ./file0 [ 173.068828][ T4856] Invalid argument reading file caps for ./file0 [ 173.087470][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.096064][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.183776][ T369] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 173.333755][ T369] usb 6-1: Using ep0 maxpacket: 32 [ 173.340195][ T369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 173.349882][ T369] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 173.358936][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.366935][ T369] usb 6-1: Product: syz [ 173.371086][ T369] usb 6-1: Manufacturer: syz [ 173.375680][ T369] usb 6-1: SerialNumber: syz [ 173.435985][ T4872] bridge_slave_1: entered promiscuous mode [ 173.442452][ T4872] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 173.450212][ T4872] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1428'. [ 173.470320][ T36] audit: type=1400 audit(1784409458.181:693): avc: denied { mount } for pid=4873 comm="syz.0.1429" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.584238][ T369] usb 6-1: Fast Track Pro config OK [ 173.592593][ T369] usb 6-1: MIDIStreaming interface descriptor not found [ 173.602507][ T369] usb 6-1: USB disconnect, device number 53 [ 173.853744][ T31] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 174.054248][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.065427][ T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.074777][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.084298][ T31] usb 5-1: config 0 descriptor?? [ 174.333672][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 174.497391][ T31] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 174.515034][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 174.515041][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input31 [ 174.534987][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.545220][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.554235][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.568761][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 174.578327][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.586610][ T10] usb 6-1: Product: syz [ 174.591027][ T10] usb 6-1: Manufacturer: syz [ 174.591243][ T31] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 174.596242][ T10] usb 6-1: SerialNumber: syz [ 174.751310][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.759866][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.777280][ T36] audit: type=1400 audit(1784409459.491:694): avc: denied { read } for pid=4895 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 174.833137][ T10] usb 6-1: unit 4 not found! [ 174.841664][ T10] usb 6-1: USB disconnect, device number 54 [ 174.851794][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.001486][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.010042][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 175.285539][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.297582][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.308499][ T36] audit: type=1400 audit(1784409460.021:695): avc: denied { read write } for pid=4926 comm="ip" path="/dev/console" dev="rootfs" ino=30 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: [ 175.410880][ T36] audit: type=1400 audit(1784409460.121:696): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK [ 175.435480][ T36] audit: type=1400 audit(1784409460.121:697): avc: denied { read write } for pid=4937 comm="iptables" path="/dev/console" dev="rootfs" ino=30 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 175.463603][ T36] audit: type=1400 audit(1784409460.121:698): avc: denied { search } for pid=4937 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 175.485901][ T36] audit: type=1400 audit(1784409460.121:699): avc: denied { write } for pid=4937 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 175.508448][ T36] audit: type=1400 audit(1784409460.121:700): avc: denied { add_name } for pid=4937 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.535150][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.544047][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.554503][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.563421][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 done Stopping klogd: OK Stopping acpid: [ 175.845385][ T4957] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 175.853189][ T4957] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1446'. [ 175.872103][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.880627][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.366742][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.375367][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.493691][ T369] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 176.643475][ T369] usb 6-1: Using ep0 maxpacket: 32 [ 176.649615][ T369] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 176.657807][ T369] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.667893][ T369] usb 6-1: config 0 has no interface number 0 [ 176.673984][ T369] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.683788][ T369] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.696730][ T369] usb 6-1: config 0 interface 196 has no altsetting 0 [ 176.704951][ T369] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 176.714062][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.722095][ T369] usb 6-1: Product: syz [ 176.726272][ T369] usb 6-1: Manufacturer: syz [ 176.730859][ T369] usb 6-1: SerialNumber: syz [ 176.736225][ T369] usb 6-1: config 0 descriptor?? OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.208 closed by remote host. [ 177.104888][ T31] usb 4-1: USB disconnect, device number 8 [ 177.213687][ T369] ipheth 6-1:0.196: Unable to find endpoints [ 177.237119][ T369] usb 6-1: USB disconnect, device number 55 [ 177.523901][ T369] usb 5-1: USB disconnect, device number 80 [ 177.585265][ T1478] tipc: Disabling bearer [ 177.590597][ T1478] tipc: Left network mode [ 177.596000][ T1478] veth1_macvtap: left promiscuous mode [ 177.601501][ T1478] veth0_vlan: left promiscuous mode [ 177.664676][ T1478] veth0 (unregistering): left allmulticast mode [ 177.824445][ T1478] ------------[ cut here ]------------ [ 177.829922][ T1478] WARNING: CPU: 0 PID: 1478 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 177.840009][ T1478] Modules linked in: [ 177.843915][ T1478] CPU: 0 UID: 0 PID: 1478 Comm: kworker/u8:16 Not tainted syzkaller #0 5adf726ab28801c07fd45706e49e1b3a66128c4b [ 177.855722][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 177.865783][ T1478] Workqueue: netns cleanup_net [ 177.870553][ T1478] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 177.876553][ T1478] Code: e8 b1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 45 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 37 5b 7e fc 49 83 c7 08 eb c9 e8 2c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 177.896198][ T1478] RSP: 0018:ffffc9000dc07b90 EFLAGS: 00010293 [ 177.902269][ T1478] RAX: ffffffff850916c4 RBX: ffff888131544700 RCX: ffff88811f942600 [ 177.910254][ T1478] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043bc5b8 [ 177.918244][ T1478] RBP: ffffc9000dc07bb0 R08: 0000000000000003 R09: 0000000000000004 [ 177.926237][ T1478] R10: dffffc0000000000 R11: fffff52001b80f04 R12: dffffc0000000000 [ 177.934486][ T1478] R13: dffffc0000000000 R14: ffff8881043bc000 R15: 00000000000005b8 [ 177.942459][ T1478] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 177.951488][ T1478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.958076][ T1478] CR2: 00007f5d7ab51bd0 CR3: 000000010b332000 CR4: 00000000003526b0 [ 177.966060][ T1478] DR0: 000004000002002c DR1: fffeffffff7fff05 DR2: 0000000080000002 [ 177.974052][ T1478] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 177.982026][ T1478] Call Trace: [ 177.985309][ T1478] [ 177.988228][ T1478] cleanup_net+0x6ba/0xc90 [ 177.992624][ T1478] ? __cfi_cleanup_net+0x10/0x10 [ 177.997569][ T1478] ? kick_pool+0xb9/0x540 [ 178.001886][ T1478] process_scheduled_works+0x7f7/0x1060 [ 178.007452][ T1478] worker_thread+0xc99/0x13f0 [ 178.012134][ T1478] kthread+0x2c7/0x360 [ 178.016204][ T1478] ? __cfi_worker_thread+0x10/0x10 [ 178.021323][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.025927][ T1478] ret_from_fork+0x67/0xa0 [ 178.030340][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.034943][ T1478] ret_from_fork_asm+0x1a/0x30 [ 178.039695][ T1478] [ 178.042691][ T1478] ---[ end trace 0000000000000000 ]--- [ 178.048431][ T1478] ------------[ cut here ]------------ [ 178.053914][ T1478] WARNING: CPU: 1 PID: 1478 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 178.064132][ T1478] Modules linked in: [ 178.068036][ T1478] CPU: 1 UID: 0 PID: 1478 Comm: kworker/u8:16 Tainted: G W syzkaller #0 5adf726ab28801c07fd45706e49e1b3a66128c4b [ 178.081333][ T1478] Tainted: [W]=WARN [ 178.085153][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 178.095230][ T1478] Workqueue: netns cleanup_net [ 178.099990][ T1478] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 178.106078][ T1478] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 e2 5a 7e fc 49 83 c7 08 eb c5 e8 d7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 5a 7e fc 5b 41 5c 41 5e 41 [ 178.125742][ T1478] RSP: 0018:ffffc9000dc07b90 EFLAGS: 00010293 [ 178.131812][ T1478] RAX: ffffffff85091719 RBX: ffff8881043bc800 RCX: ffff88811f942600 [ 178.139818][ T1478] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043bc808 [ 178.147833][ T1478] RBP: ffffc9000dc07bb0 R08: 0000000000000003 R09: 0000000000000004 [ 178.155837][ T1478] R10: dffffc0000000000 R11: fffff52001b80f04 R12: dffffc0000000000 [ 178.163835][ T1478] R13: dffffc0000000000 R14: ffff8881043bc000 R15: 0000000000000008 [ 178.172870][ T1478] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 178.181893][ T1478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.188493][ T1478] CR2: 00007fba999f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 178.196480][ T1478] Call Trace: [ 178.199749][ T1478] [ 178.202661][ T1478] cleanup_net+0x6ba/0xc90 [ 178.207091][ T1478] ? __cfi_cleanup_net+0x10/0x10 [ 178.212017][ T1478] ? kick_pool+0xb9/0x540 [ 178.216364][ T1478] process_scheduled_works+0x7f7/0x1060 [ 178.221929][ T1478] worker_thread+0xc99/0x13f0 [ 178.226635][ T1478] kthread+0x2c7/0x360 [ 178.230699][ T1478] ? __cfi_worker_thread+0x10/0x10 [ 178.235809][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.240391][ T1478] ret_from_fork+0x67/0xa0 [ 178.244806][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.249386][ T1478] ret_from_fork_asm+0x1a/0x30 [ 178.254147][ T1478] [ 178.257152][ T1478] ---[ end trace 0000000000000000 ]--- [ 178.264913][ T1478] ------------[ cut here ]------------ [ 178.270362][ T1478] WARNING: CPU: 1 PID: 1478 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 178.279925][ T1478] Modules linked in: [ 178.283821][ T1478] CPU: 1 UID: 0 PID: 1478 Comm: kworker/u8:16 Tainted: G W syzkaller #0 5adf726ab28801c07fd45706e49e1b3a66128c4b [ 178.297097][ T1478] Tainted: [W]=WARN [ 178.300874][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 178.310927][ T1478] Workqueue: netns cleanup_net [ 178.315704][ T1478] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 178.321228][ T1478] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 178.340927][ T1478] RSP: 0018:ffffc9000dc07b70 EFLAGS: 00010293 [ 178.346983][ T1478] RAX: ffffffff84ee56ce RBX: ffff888131544700 RCX: ffff88811f942600 [ 178.354976][ T1478] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811f942600 [ 178.362934][ T1478] RBP: ffffc9000dc07b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 178.370896][ T1478] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 178.378854][ T1478] R13: dffffc0000000000 R14: ffff888131545300 R15: dffffc0000000000 [ 178.386809][ T1478] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 178.395753][ T1478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Sent SIGKILL to[ 178.402373][ T1478] CR2: 00007fba999f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 all processes [ 178.411766][ T1478] Call Trace: [ 178.416427][ T1478] [ 178.419352][ T1478] xfrm_net_exit+0x31/0x80 [ 178.423941][ T1478] cleanup_net+0x6ba/0xc90 [ 178.428388][ T1478] ? __cfi_cleanup_net+0x10/0x10 [ 178.433341][ T1478] ? kick_pool+0xb9/0x540 [ 178.437665][ T1478] process_scheduled_works+0x7f7/0x1060 [ 178.443182][ T1478] worker_thread+0xc99/0x13f0 [ 178.447878][ T1478] kthread+0x2c7/0x360 [ 178.451935][ T1478] ? __cfi_worker_thread+0x10/0x10 [ 178.457048][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.461629][ T1478] ret_from_fork+0x67/0xa0 [ 178.466050][ T1478] ? __cfi_kthread+0x10/0x10 [ 178.470629][ T1478] ret_from_fork_asm+0x1a/0x30 [ 178.475395][ T1478] [ 178.478396][ T1478] ---[ end trace 0000000000000000 ]--- Requesting system poweroff [ 178.524388][ T1478] bridge_slave_1: left allmulticast mode [ 178.530029][ T1478] bridge_slave_1: left promiscuous mode [ 178.535624][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.543016][ T1478] bridge_slave_0: left allmulticast mode [ 178.548752][ T1478] bridge_slave_0: left promiscuous mode [ 178.554376][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.654749][ T1478] tipc: Disabling bearer [ 178.659758][ T1478] tipc: Left network mode [ 178.664758][ T1478] veth1_macvtap: left promiscuous mode [ 179.490989][ T5030] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 179.497743][ T5030] ACPI: PM: Preparing to enter system sleep state S5 [ 179.504598][ T5030] kvm: exiting hardware virtualization [ 179.510078][ T5030] reboot: Power down serialport: VM disconnected.