last executing test programs: 7.090044082s ago: executing program 0 (id=210): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010000000000040000000a0000000c00ca800800090064010100557264e07d73af9215f4772ec2641f7235c96faf3f"], 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000005837e1dccf0050d88d03ffc04b443bfe1ba84efec30a020000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4044014) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f0000000200)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000001ec0)={0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010003306000000000000000000000000000000000000000000000000ac1e040100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/249, 0xf9, 0x10001, &(0x7f00000001c0)={0xa, 0x4e24, 0x4, @mcast1, 0xf}, 0x1c) rt_tgsigqueueinfo(0x0, 0x0, 0xa, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) pidfd_send_signal(r7, 0x2a, &(0x7f0000000040)={0x12, 0x2, 0x74b0}, 0x0) 6.52617591s ago: executing program 0 (id=213): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x34, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) syz_extract_tcp_res(&(0x7f00000001c0), 0x1000, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'syzkaller0\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'syzkaller0\x00', @local}) sendmsg(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x20040084) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x62000) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x62000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000006100)={0x2020}, 0x2020) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x8000) syz_usb_connect(0x5, 0x57, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x57, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 6.046895755s ago: executing program 0 (id=215): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000280)) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x63, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="84caae8b2543f31cd7a7acde8174049e68eeb1e3b770505ff1df2e371e93e537766f6b875903f2286a62ce570611", 0x2e, 0x4008090, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000300)=""/242, 0xf2, 0x80, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12e5110100000008b404010000000000000109022400010000000309040006fd0300000009210a000401222800090581034000000bfe"], 0x0) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000280)) (async) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x63, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="84caae8b2543f31cd7a7acde8174049e68eeb1e3b770505ff1df2e371e93e537766f6b875903f2286a62ce570611", 0x2e, 0x4008090, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000300)=""/242, 0xf2, 0x80, 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12e5110100000008b404010000000000000109022400010000000309040006fd0300000009210a000401222800090581034000000bfe"], 0x0) (async) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) 3.707426331s ago: executing program 2 (id=229): r0 = socket(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001200)={'batadv_slave_0\x00'}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x4, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)="ec085233ce8f5d331877cc5694f2f79c7fe65ef3673c6fb9e2bfb6d0175933a57f8f9b3d0fb0c6f1c61f0e628d5d10d3f53cf21c0f1744c346068d7045d9fd1cd70fbcbd7a4630e7d0c55301ffcfacaa1078e9843aa9031a191eed906266c24bc8244ae70bf1a3489cf6114e11343df25cc38b7aedd2ac6e993f7a0e4899c064a5a82125da340ee3f84cb4d0921db14377b63456aebd4cb1e306ac78330a6e02cd0edc3f27f05a916756d5d568f0f48a758bfab8a48ce61a64c2ede788cf67ce3094b112b82730876b4eb1c806fd628bbdec53eee3146c1b9696955cd49fed2fd18f6046ddb5becd7cfde5d850e8b0078dc4b30852566af02bbc72eb122ae307b6afc96174cefd1de98e41a13a8a57775700cdf18d7bc51dbec4844129e1de47b05702b7c07f1e8860c2cfd0ebcbee100d0cf7209a6047a8298d549491a3ceb8cd305ca208cdfcf7fa8de050377a4b96682c50e9106a2d05975358690b0dc31deea9275459cda548466c2433f27a6825157e2b7f80207172715deef44a44e6adc91a4e812bd87e38fc96349d4424d2858a5665b6d7aef919ce17171a30e6510941be6e268146eba918e4d18abf7ba36bf5178fd98c06c2901b2ed51c19964381e6c8d9d50f1903e8ab1fc1a98081378d242d5675d703b4ec9ea295a55099264936bdea5ada37319b596cb9f6be125941496a62bc5c8bb8748288c80ea21ffcebffeaeb3b589b36c9e2cba7743b430b642aeb6be19bdf587c6d84f93d86accf6f4b3ac1b840848900ea17c604346af5e2c154fad9b3b76aa3ddfd2ebff61525cba725f9117b9179a0dfb05d2be0b7df54aa906bb2574058cf516b5932e0c384379fba5f1e786d9d457d64a9ed5c02a942034c9c8f91c8878807fc3d3c8d2520e8b4b0bc3b304711389280bf7b525a17dceabc365d996f9bc43f89067a764140a9954713e0fc0896cadf221816e9dd9161812a43a9cf856005c8067533f181c76b8f40fe9bcb304e5e872c7de7505689a0457143c6a7bc879c28262d0a4241e5dc36465231a9e6e6ac38527328c202dd9d006a14981827e814a105e5ec002d15265025aa8aadb61c20cb585d30ff96aa7276faa290c73eb69a8bd0b32f44a3113bf8dcfe2308cc67c3cb1e4dff3be9378c5b9f28a4ccada01f9680739ba3229ac672229bd88f7184e7a0c2d57fa7a61cb2905b2e4c67e582a45c519c6f55c4be960374f2df81555e415d930d93bd383bdc376cabec9a3e8a5b0902a5d3ce3a4a5a9a05045c0eaf51e74ad7cd29077b352df4acd1579c78ef3bc6e614511e2013e40d475e3f2a966696521fd93ef4c2d7a9d5e630244a290e2d1e378b2323acfa7f0ba87f9c7674cda772ec3967ae59a7dceabbc07fbb3da3c0bc7521c72b370452ba93f36e9e25f583335cc4712e14c770339bfc2adfa300b4c44f6ca30e140b1e5b6f9096df04d101f97290a467a3980b3ddfff37906f47374fa07477c74218903a4fcfb2a9cb2762ba4d7933b07c3036694f51d526bdb8056660c39d9961336d4a45f903dcfd48f98b4f7632adfd63e431d4dff76347e6076f69d0779ea4911c9d7c9686e79eaf657004c6d7b36028e8816f558dbfd9d1cbc656d1933f8ca78616f925ec71233f7573cf06d93ec31d0cae94dfb71478532ee47996c33e2c47dd53eebd4ce91518ceec2311f508fd74be7579fab6808365b801ab52ba0179f977633405a991e86e8b92c724e826cceefecba7371065fdfdd5a3af29c78dce415b8da7f6f0c7cc7535417cf073224314ef0ef1f08dde3aea340d39d63bb36fbe5db7477cf832756ddfd7dc6656809f758c489e185f1b3f0999076ea681262e0f284b3c7aca67dfcdce64cc87c5cd50e35d027e16766f30684f88e757bc759658667cbb80fbbc0c69f058d988869f76ff33d75ede122bc512eaff713c775fc324b309db5e8cae8067b15fcd9acf0e481608173f0c5ec59d393b3523330b7ac49c21c580925e59269d9cea13560c7d761903253f9ef1991142d5f5e66aaafcd88a8f2e496d6e299860f3f1baf83e695bdfd839813a24326bba7520889367b9c694783267587c0bdec4c24b0f3e0ff23c5631e40f219fe71c43788e379bf322", 0x5dd}], 0x1, &(0x7f0000001240)}}], 0x1, 0x20044000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x1, 0x2, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @loopback, 0xfffffffa}, 0x1c) getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000006c0)={r7, 0x1, 0x6, @random="61855f0d3189"}, 0x10) 3.622301744s ago: executing program 2 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x7, 0x1, 0x0, 0x7, 0xf9, 0x0, 0xfa, 0xff, 0x6, 0x2, 0xffff, 0x7, 0x3, 0x4, 0x7fffffff, [0xa, 0x7c]}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x888e}, @void, @eth={@random="73f87aa4d1f2", @random="000000000104", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x0, 0x6, "8ba6ed", 0x9, 0x33, 0x1, @mcast2, @empty, [@hopopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}}, 0x8a) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680fadecedecefc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.508648037s ago: executing program 2 (id=231): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000400000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000400000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) fsmount(r0, 0x0, 0x0) (async) r2 = fsmount(r0, 0x0, 0x0) fchownat(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 3.495152087s ago: executing program 2 (id=232): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0xffffffffffffff23}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0xae, {0xae, 0x2, "b6eaec8d55d5e9de3d297ade21df4e0d6412d5a8569c56703705055825acbba892f333c610cfbe2e20ee7f9c67f9443e3c649909e71dc40507346972f6284b51ca376a38f7f9fe31e8cc0f96d40a9103849711b93ef36bcd51b83031f75075950daa0f45f7772e76e56d6d891503a7e59410262f34ec46c871e3652c929c522355192cea7146138d159e27748e65d80023c269491832031450364eff364eac37cfcd5093a3f408c86ebf42f0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000180)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xf, 0x40, 0x0, 0x0, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x1, 0xab}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0xea, 0x1, "5aba3224", "95c301a1"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x48, 0x10, 0x80, 0x6}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0xa, 0x56, "b6fd0ec6d6f2f02f5b14811d057ae2303c5b2a9f49163288c1ababf74f226b0750657febf73b13175124130940dc91c7780fb723d49148cc1865293c883fcf5553d7836f8e0d031141d7f8ecf5ea24e061c3b87aac9e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xc1}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000480)={0x40, 0xb, 0x2, "581a"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000500)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "c685"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5a}}) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, &(0x7f0000000780)={0x20, 0xe, 0x54, {0x54, 0x23, "44a9416ea5f8696afb6de5b2f088104b7e7c06006c946ec6d9e1527ec4294f72e581e9da39640c6678a272d67b701ca5c6295ed01c7ec9cc5939641e285fcdb54b87cc9fda5e53ab1c462af535b33a2ed9ad"}}, &(0x7f0000000800)={0x0, 0x3, 0x69, @string={0x69, 0x3, "f95e773721075e12a43c8d5ed0a15a4d9db0fc434781c41b3c5591a7c831b007b021067915dbaf3a33ce8cc366670c1577da5c5fbb4172cf48628bf7ceefa7ba2fa82283cbe97cf84933e208555f0f4ffc4b2c12cab2bad0c71f7fc98b9df459ab1a180de76ae1"}}, &(0x7f0000000880)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "7be7aa8a71d700ba1461e8fcd804cf34"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x4, 0x7}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x18, 0x54, 0x40, "0ae9fbe0", "207aa9cb"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x0, 0x4e, 0x1, 0x1, 0xff}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0xc, 0x79, "f590b6ecf22ede2f9d4dfb5adee89ca865753e482d13279a28a40f37047e0b6b039f038cdfa8ca0bc7eb09e5259082bebfe3e43ac1983d292163d716b4fac0b1abb39b5b907a6476d3eb69cb8cbad0c390d4c244bc342a19460446dbaa45769473486c9fe959bbdefb47385e4464eec6c410a4b046419b5418"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x5}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xab}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "7502"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0xffffffffffffffce, @random="f7f4152806f0"}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "16ee"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0xe2}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000e80)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000f00)={0x60, 0x1, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3, &(0x7f0000000ec0)=[{0x2, 0x2, 0x7}, {0x8, 0x78, 0x80000000}], 0x2, 0x2, 0x18, 0x22, 0x18, 0x68}) 3.137992359s ago: executing program 3 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async) r6 = syz_clone(0xb69e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r8, 0x0, 0x0) (async) r9 = socket(0x10, 0x2, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r10, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000002340)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x9, 0x240000, 0xe, 0xc, 0x10, 0x5, 0x0, 0x0, 0x80, 0x399}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r10, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531cda5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38167f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x5, 0x2, 0x80000000, 0x1, 0x0, 0x9, {0x0, 0x1, 0xb, 0x9, 0x5, 0x4, 0x9, 0x7fffffff, 0x20004, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) recvmmsg(r11, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r12, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x79}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9c}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc33}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x90d}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 3.137464419s ago: executing program 3 (id=238): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'team_slave_1\x00', 0xffff85f5}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0x20, 0x20000040}, 0x40000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x306, @random="4efabb6c6469"}, 0x68, {0x2, 0x4e22, @private=0xa010102}, 'netdevsim0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x1) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f8, 0x10, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x14000001}, 0x4044001) recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/218, 0xda}, {&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/233, 0xe9}], 0x8, &(0x7f0000000cc0)=""/156, 0x9c}, 0x7}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/69, 0x45}, {&(0x7f0000000f80)=""/200, 0xc8}, {&(0x7f0000001080)=""/15, 0xf}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x7}, 0x4}, {{&(0x7f0000002140)=@pppoe, 0x80, &(0x7f0000003280)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/184, 0xb8}], 0x2, &(0x7f00000032c0)=""/41, 0x29}, 0x149}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003300)=""/229, 0xe5}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/46, 0x2e}, {&(0x7f0000004440)=""/206, 0xce}, {&(0x7f0000004540)=""/234, 0xea}], 0x5, &(0x7f00000046c0)=""/104, 0x68}, 0x5}, {{&(0x7f0000004740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/22, 0x16}, {&(0x7f0000004800)=""/97, 0x61}, {&(0x7f0000004880)=""/49, 0x31}], 0x3, &(0x7f0000004900)=""/89, 0x59}, 0xfc000000}], 0x5, 0x40, &(0x7f0000004ac0)) recvmsg$can_raw(r0, &(0x7f0000004ec0)={&(0x7f0000004b00)=@ll, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004b80)=""/211, 0xd3}, {&(0x7f0000004c80)=""/108, 0x6c}, {&(0x7f0000004d00)=""/57, 0x39}, {&(0x7f0000004d40)=""/181, 0xb5}], 0x4, &(0x7f0000004e40)=""/97, 0x61}, 0x2000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000004f00), 0x8c000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000004f80), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000005080)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0xbfcb8a07259bdc2f}, 0xc, &(0x7f0000005040)={&(0x7f0000004fc0)={0x68, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000050c0), 0x2200, 0x0) sendfile(r2, r4, &(0x7f0000005100)=0x2, 0x7) close_range(r4, r0, 0x0) listen(r0, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000005200)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x44000) recvmsg(r5, &(0x7f00000087c0)={&(0x7f0000005240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000008700)=[{&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/181, 0xb5}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/180, 0xb4}, {&(0x7f0000006480)=""/208, 0xd0}, {&(0x7f0000006580)=""/193, 0xc1}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/99, 0x63}], 0x9}, 0x102) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008840), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000008900)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000088c0)={&(0x7f0000008880)={0x1c, r7, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) fremovexattr(r0, &(0x7f0000008940)=@known='trusted.overlay.nlink\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000008980)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008b80)={0x80, 0x0, &(0x7f0000008a80)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000089c0)={@fda={0x66646185, 0x2, 0x1, 0x2f}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0x3}}, &(0x7f0000008a40)={0x0, 0x20, 0x38}}, 0x400}, @enter_looper, @enter_looper, @acquire, @release={0x40046306, 0x2}, @increfs_done, @release], 0x80, 0x0, &(0x7f0000008b00)="e9c54a980b75438ec19e2d1a74de8012a1ca375748b38ad2ea19627ec10a7622a1ea4f7adc0f9fd1cecb1e55d0ff6451d2c36ef1f5aa8e2433a73b24cf5030229976a489af8c0b63880cab10cf29f9bec0f4c262090960eabc0596b53a3f14d96593f078e8321b1190604b518631b419dddd018fc0ecd0d9f841fd99bb0c6814"}) ioctl$XFS_IOC_FSGROWFSLOG(r8, 0x4008586f, &(0x7f0000008bc0)={0x80, 0x400}) socket$inet6_udp(0xa, 0x2, 0x0) 3.032943752s ago: executing program 3 (id=239): r0 = socket(0x1e, 0x80000, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x8, 0x8, 0x4, {{0x24, 0x4, 0x1, 0x31, 0x90, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x58, [@empty]}, @timestamp={0x44, 0x28, 0xe2, 0x0, 0x6, [0xf, 0x9, 0x9, 0x1a68, 0x6, 0x0, 0x200, 0xfff, 0x8]}, @generic={0x0, 0xa, "ef3a24e5e1baaf9c"}, @cipso={0x86, 0x43, 0x3, [{0x5, 0xf, "fb22f23812bb8c234e727cdd0e"}, {0x1, 0x8, "765c75c85e22"}, {0x2, 0x10, "69cda580eb66b2f662948ad2b22b"}, {0x5, 0x11, "3dc92968aa7e3e73738c6cde946487"}, {0x5, 0x5, "280232"}]}]}}}}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="18000000190001000d000000fbdbdf251d01090004000680"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) 2.985360054s ago: executing program 0 (id=240): syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029200030109200c080b0001010130f70904000000010130000a2401012e000310000013240303000000060004000000080004000a0011240a060100000000dfb7b5860300000009040100000102300009040101010805f80a2525020000000707000904020000010230000904020101010230000905820900040602210a2525040000000200"/164], 0x0) 2.918107416s ago: executing program 3 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="0f12dfba4200b0ee2e2e660f20da0f9d465066b9800000c00f326635001000000f3066b9800000c00f326635004000000f3064660f73ddf1d9e40f1f400066b9030100c00f32", 0x46}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '!-$]\'@/![\x87#[$^,\''}], 0xa, "263976be64c246a92ddf2c506be5bcc1944115af0da14be5b0666bc46eff3d71f04a28df28272e048d99de60a95babc5e074f0f7debb83f3e1b1715d157fd07df268ea2eb8d62e1fe1183de13fac3ab7e67b6a46f65b23e6be2148e9f123e49bf73c23c5ef6f853690f65baf0e7890bb95a7b143c17dfb09facdd394e6969fb3f5a0a3f926851057060fc5b7929d411357"}, 0xad) 2.78366894s ago: executing program 3 (id=242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) flock(0xffffffffffffffff, 0x1) (async) r2 = syz_usb_connect$printer(0xf, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7b, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0xff, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x0, 0xb}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x80, 0xa, 0x0, 0x8, 0x3}, 0x12c, &(0x7f00000002c0)={0x5, 0xf, 0x12c, 0x5, [@generic={0xf9, 0x10, 0x2, "805d753be470fe7545f9bdec18d9cb58727b024ed83bac44c7a2fc7a9d0735b3d33b6b2db7e52f06ca6cefc1d617d89b35c88b0800d516b2156aac7b389585eba451f47194f78abbd25ecb7cc7d3d17590c56fd2b7467901b0ad99bb92c2b1f43a16582172e16933548fc8747d0714ea919c53715054a0e4e8232cd1b65c109ed102086e6f90f27339914872cbccb1afb515e1216f897f82ccb9ecac520dc40159bb8aa4c84cfd93d6c34a5c38eb6be54880568cdbf633b1427694327d187fc40ec7b8179efa8000896404facf895d3b53df8e97b5b6ee445f5124adba62926fa98a136fe07b243b61212dfeb2e80a5657a1e7a3687a"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "11051aba245567b481bcea54abc0d0ec"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "e9d168c8a3995b3c8b57f4bdf8c5b30d"}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x49, &(0x7f0000000580)=ANY=[@ANYBLOB="4903ae346ccd71e53a49259838b568b2fd14dd0bfd118375d92f454a97c522f363eea00f60cd996e6f7ae29ca8d46d4fa5a03beee0dd99f2113ca51d9e228a7b2970b1ec51767d4ae845513a26ee30dec9fa388ce70689432cb70dd0b902c095afa80c513759ba7f90d8e428bf419dfd4cc3b30f852c81b89c4eb684e0bfec69d36f35ec0fc3c73af9f824983cb102342860cbd3da39a2d12f"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x400a}}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="2022280000002821c263138526662c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={'veth0_vlan\x00', {0x2, 0x4e24, @remote}}) 1.998023846s ago: executing program 3 (id=248): syz_usb_connect$cdc_ecm(0x5, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="d67b32eca6664f67", @ANYRESDEC], &(0x7f0000000b80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x310, 0x0, 0x95, 0x9, 0x8, 0x80}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x79, &(0x7f00000000c0)=@string={0x79, 0x3, "c3939ff043ea00f50b3409b94e7df2282f0af0645f16342aa0fe69ac64b6b682e6714167b5734af064625c941c7f8cb756919fce399d7ab20811cbd4c5c855162036cc057fa045a5f04837f69413287ada6e1956c7e9038307d2b7017a89ac11edf9ca88ade0b467162a497371a6e4307ff897f40257db"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) r1 = socket(0xa, 0x3, 0x3d) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0xd0) 1.612023068s ago: executing program 0 (id=249): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async, rerun: 64) syz_usb_connect(0x3, 0xa08, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xa2, 0x19, 0x89, 0xff, 0x147a, 0xe03c, 0xdcaf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f6, 0x3, 0x3, 0x8, 0x40, 0x8, "", [{{0x9, 0x4, 0x8e, 0x0, 0x1, 0xf, 0x4b, 0xc3, 0x4, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '7'}, {0x5, 0x24, 0x0, 0x6584}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x8001, 0x6}, [@mdlm_detail={0xb1, 0x24, 0x13, 0x1, "d413f58795f2fdcfc4180dce67f53feee96e23a93ff0a00ffefecacac4e555abfa13ee2352d16f2f6227220258668f1feabc65bc1b849f206635de2c94095c37ac9aec4fb3f27030a3b27b4a2b271788aa21007417b73b4b73883f87dd5ea7440f632a03736980cfa62bd5b616d0f50473208cdb6dde9b7576bec22a813fe027e21a51760f62e05835585b797110076b7a8eb2a51af94f4ea16ae7f2344798eab980df4be8e82359ac16155c9f"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x63, 0x6}}]}}, {{0x9, 0x4, 0x1b, 0x0, 0xf, 0xc0, 0x3, 0x97, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e6a208"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x8, 0x7f}, {0x6, 0x24, 0x1a, 0x7ff, 0x15}, [@obex={0x5, 0x24, 0x15, 0x24}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7, 0xfff}, @dmm={0x7, 0x24, 0x14, 0xc7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x3c, 0x7}]}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0xda, 0x5, 0xdf, [@generic={0x3, 0x0, "14"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x46}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x9, 0xf9, 0x5c}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x80, 0x8, 0x0, [@generic={0x73, 0x11, "c64d3a1e8733a1df91fa6fe104a7c7bf03f8308c3c48c1f21290e951240ce9884ccc7f0612fad50504bd27ad9195518878d2d01ca538ca41baf941aab2da96b95ac05f3a7ab822d76c6bdd485be4721b87fd70f7a008cbc16b3f01745b53e6002ef1657a695a66ac6f8715c779652a9dfd"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x7, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xfc, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0x7, 0x7, [@generic={0xbe, 0x31, "5e73b0ff17eb341cf3cfa0b0ff7370553d9f82219389ae75d8f508d07ca41a953861094a4d64926f945434d9f694c302788001c41d6c028a1cd9665cba603ccd642adf1c837dd7875d23bcff7f9c19a5a501ac4b40d9b9307d4cccf00c71a39cbe26d66bbb10d871372b81138e218a463900e2b9065c1b27c491d04427c365a38921046ab6b355e739874dc86b58306e50d928101d49f7151cdae8eb93f7074853e47658d8a0526d014ab932dca37650a5fb9dbcc690d8330e95619c"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xff, 0x5, 0x5, [@generic={0x1c, 0xb, "0e8575082f19a1a5c4ad966707a13b2c139e8ba7677d6733deec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x6, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x1, 0x5, [@generic={0xf4, 0xe, "422e322c63ade161ede37f8b89dca75ef32fc53f5b32d41085a754dae2ad7da6ce43088cbb87421864b4ddc35d5536c73dc0068f13f75f8b0f25ec5cc0bc3a72c9892b1c10babf5e15fbf5107a6398ed12ccefcc5b6545348491e66f5e7a15eb31b7da04b31a2381e1c27a342a328062e85aeffd8ecd0d4d100c24ea6ef1dbe5d41bd6d7146db80a9e3d476ea027928dcff49b16878962b7b5cf41071708a2115e2f79d522c9cf03d167f188100c26ae1e765404aee025427908d5fedb32cd16e54699283f89b105bc779ff41397f0cbbc0a4d271317a8b1385b3deef36a3f5c95966dea84ce49f0bfd2f61e7445a089c385"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0xf, 0x20, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7d, 0xa}, @generic={0xca, 0x23, "536e86500828c96f13a0146347e5d839a83137771e59bf242d2c0353ee5ab0cc2fd86760a12a8b33237bc834c2e0290666e7a9f7625ba7b9ec5843a389c8eb245e141c5f7c2b1284bb2086f45dfe422a5f269bd206901aa82be1853b7f2628019709094b0bf6330ab9d2e17650483418d018233c9f8f2eaca2783d2fcd46a6852c59d9b3b25e629aa9e48ed3757dcafedecab06bf71c61ae6dec901c44f472b0635dd93d68ac5617b7de6923c06b0aa78637f7ad8c988c760bc910377946dadc723962f472088f56"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x4, 0x8, 0x4}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x3, 0x0, 0x9, [@generic={0x4, 0x1, "11c4"}, @generic={0x25, 0x11, "7124d90bf061a82421ee8d36687a5801b69a580fd889f1fc52f38f9204bab222babcb4"}]}}]}}, {{0x9, 0x4, 0xe, 0x3, 0x9, 0xff, 0x55, 0x9a, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "ea73e1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x57, 0x800, 0x7ff, 0x3}, {0x6, 0x24, 0x1a, 0x18, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @mdlm_detail={0xe3, 0x24, 0x13, 0x1, "a5db188e282d57a0d235c72032165e74a1286aa29126b861871d8eeed0208ddc44568e81f0ee1f5f37363e9d48eeaabe24cf691297e6c060760c1bbac7b2ba6bf544c13a1e760b0fc0f8974c103aa2370098b6e1e8ddab60470cf60ae7d6211d3e5571c6c717035713e26c6fa9372d10f38161536ce36e4d5f175ec5a9eaebac5ec162bcad0f1e4443ff1424fbd4d5a88af6b211d325be2cbb03c2420ca920716234d650f1fccae1122487c24cf3cb61c7b9428bf8950e53e3cee4621a96cd437ac28895096c779de89f8e3073372a05d6ca47ac92a519b149a7ac4e40286f"}, @obex={0x5, 0x24, 0x15, 0x1}]}], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0x8, 0x3, 0x4, [@generic={0xfe, 0x1, "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"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x6, 0x18, 0x9, [@generic={0xa9, 0x10, "16d1764bdbf22b4a08f35162c7c0a2c81d86c195af855e526b59ba93d9f8f94906566031d429a70a30ec3fed69076020b028e9861f4e99e669f80038ed708af9accefd8c5d18706de7e6979d8dfca73e0656e1322f4fa2849a6c2b50086d5e46e72248b6d125316b34f34cf2248607bc6fda226e67fc92e20af17769b766e10a412aeb60b6744c61c175c305e8a4a6da72f4287a7c6ab6d563522d38a5111b2d3f71fa4b708c5b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xe}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x0, 0x6, 0x8, [@generic={0xd1, 0x30, "787a1d0923cf6662c76cc63371d8602245077b1ad17ad86635d767a391ac07ad1d2864adec1e53ad7bde5f1dd8779e9f966921373dd9c4bfc220b7734aeb2f5426bf094c8aa84b8bc2d228558f97dd82fe8c4f84b7974cdc5766e75602b717b072707377ff2f4bacffc2b9be102ee38b873bee87b699315dfb3e4aa1f8b264353852d238be0114bc57ef89d53152d01025137d591ac95d0c4c0d8877fdfebdd6aae28be2e3f91a90de90861ba88a735419b19052dedde9e89b71a55c8233c856cddb084b9e8d6ecdd503ea40bcae94"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0xb3, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xc3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x30, 0x81, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0xf9, 0x8, [@generic={0x2b, 0x1, "794fe7c029652b50e2ed4daa0cb3e5f4e20d1cf997e5702b86e47da01a195f1601ceaf03d447193ccc"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x3, 0x3, [@generic={0x38, 0x11, "2fa916974b934203a9437964b0d4b48ff36c55519e00dcd88ab7e627cfbecdef1baeee6a6905f2dd93c5af083239e3414901aa1474e8"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x3, 0x6, 0x9, [@generic={0x98, 0x8, "076730357407b8e439bc4a1580c061661c959f75e5b9f10faeab99fd50bf46ec5071586c61a76ec142d3076c42cc5ce89629d007f932122ba625b8ee259c74045a0a43c00f1257e520997ad3ba58fb5bfe0c90c0061f05d39d3d3bc7062aaf61cb34e9784e1bdf60809d20f152b51d989009bdfce99a6bd37160d11336bb98d7f60349a32583130a3c509cefc68e72238bba6427fc98"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x7f, 0x10, 0x61}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x110, 0x7, 0x2, 0xd, 0x10, 0x3}, 0x19, &(0x7f0000000b80)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x2, 0x8ba}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x2, 0x2}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2406}}, {0x3a, &(0x7f0000000c00)=@string={0x3a, 0x3, "6c9b620e2a4951ad5f28612fd2224b6f7c3295aa0607de8fad38764b7b57e7234425c0431e890330472b8b8f3fc740f8fa1391bd1de65fe8"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "bb9bf72fb02ddc85356b3517f9b0cd1ce32dcf5f57f6f2a8be2a246d8535f92816524f41f0fc32d443315f79999da0ebe5773567046b8e467fb4"}}, {0x83, &(0x7f0000000c80)=@string={0x83, 0x3, "876d241b17e2e647302740690b3f0591b7f3f55f6a8d45a4b6d1b7e0c555ff7ef158e087478e755faaa5803835940659db244a1109cd0f6c950b2b8aabee1b537eae25a318d8554811e74add1d28019ec0f282a87573125bf92cc855116707b7cfc5ca52c5cdfba9ef7527856aad179e149319272fa3644c32d87fabba3ffdf277"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x419}}]}) (rerun: 64) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a"], 0x1c}}, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000000)=0x3) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r4, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) write$binfmt_aout(r5, 0x0, 0xff2f) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) poll(&(0x7f0000000080)=[{r7, 0x400}], 0x1, 0x73) (async, rerun: 32) ioctl$BLKGETNRZONES(r7, 0x80041285, &(0x7f0000000100)=0x9244) (async) read$ptp(r7, &(0x7f0000000080)=""/23, 0x17) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9804}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4d9, 0xa081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x58, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xfffc, 0x7, 0x1, {0x22, 0xb8e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x95, 0x7, 0x34}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x310, 0x8, 0xfb, 0x81, 0x8, 0x21}, 0xc5, &(0x7f0000000e80)=ANY=[@ANYBLOB="050fc500040b100108e100ff030600010b10010240000d09d014079e10038790a32dae866d3822c89f1d5f6c2cbd64fdd3ad7ae225f97fd15700357cfafcf2e5061f380062257262fa51f3ace796aa483ee66995c8a732d8174f93d555726adaa51e3cc9d0b84226b2a19ab17555765e6650020642ae2a0e1e07af73fb7f3d681eae832b16507ad9e77e468d4ccf9a943c0358899fda85ce2cbc4da087cdd8319e75c75f2744cf70f8ec14e01ac9f6149db4d02972deb49f380c100a40c0000000000f0800"], 0x1, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x43e}}]}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64) 1.507288461s ago: executing program 1 (id=250): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001900010027bd7000fddbdf25028300000a0020002ac4272725000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 1.438045354s ago: executing program 0 (id=251): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000020ef17a46040000102030109022400010106480109040001010301020809210100000122b60009058103207bfd2dca"], &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x8, 0xe, 0x2, 0x8, 0x3a}, 0x110, &(0x7f0000000480)={0x5, 0xf, 0x110, 0x2, [@generic={0x100, 0x10, 0x4, "afac686671c887a4edb6999bc60b2c57400ef85ccc9521fbbc03446a9c59180cc225bb4713fab4ff9856a3c25cb3ef01a7de78d0ccfe1004feaaef203e0bea7a6ddfeaff17b97b68dab95dc14100f765a54272d8fc932baab831d25fda6bd677a5df1e12f6eb99131551003bae21d2b478d8be6971b61cac06b9a0d414d5b26aaa949a372dbe01a9d80c519902b74b36d2748444186e5b18d41cae5bbf99062b06363bd660e996d6e5c99dc9b6edd0fd58bd54816760ce81e00db4046a03345d3abf599d17b65bc436fdf08f6ed6308ace9d27e8f15a7b1834c956c563b525275161b272d929e9839277d1b05d3d3a959d782be15e0b64261cb47a834a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x66, 0x5, 0x7f, 0x7, 0xf2}]}, 0x1, [{0x20, &(0x7f00000005c0)=@string={0x20, 0x3, "1a9e1de9c09cd9e0d0d2f1aec4bd5ae9d3fcda1df909b8d0633c64eea6f4"}}]}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_sset_info={0x37, 0x8000, 0xfffffffffffffffa}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000240)="900000001d001f4d154a817393278bff0a800500000000000000840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed4959a6215be0000766436d0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x9, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x83, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_usb_connect$uac2(0x0, 0xb6, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xdf, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x3, 0xa0, 0xf8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x8, 0x20, 0x34}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x26, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x4, 0x404, 0x2, 0x3, 0x4, 0x5, 0x0, 0xfe, 0xf}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0xfd, "0f5162"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x40, 0x3, "216e5d1c9de3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x0, 0x5, 0x8, {0x8, 0x25, 0x1, 0x80, 0x30, 0x40, 0xd7a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x2, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0xd, 0xf4, {0x8, 0x25, 0x1, 0x2, 0x30, 0xa, 0x1}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x52, 0x7, 0x7, 0x20, 0x9}, 0x37, &(0x7f0000000740)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0xe, 0xa3}, @generic={0x6, 0x10, 0x2, "32bf29"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1b, 0x5, 0xfff, 0x89}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0xff0f, 0x2, [0x76f32c75d447575, 0x30]}, @ptm_cap={0x3}]}, 0x5, [{0xfa, &(0x7f0000000780)=@string={0xfa, 0x3, "77c225b8ab0d6e6d1e9005d81077f992b2c08ec9adfb28962f796410e4ccea7ed78746c908b6c092498fc993b52d21d9843ef647d723455c66cdae37a95fc02626b4b6afc972a7a4b940ba6072bd3b5e5b29a337aa1bbe0531ad07c3c7bcd6624dc54bc083a241f782683fc44ac52101b4aa634847ba18d659786f0302b062d439648880dc290533a84a99cb8f9993c4e9ce7f46c9c88340858bafb225585681c5d184e1693bda69128af4c020690109099439afe208c358d9d70eecbde79ffaeb3397caa0f42621a7dac3ddb6267eab9b84e04840407c83e5ce19f3dbe09d34f6cdbc38fa1cc07afb33a1c4bc21230996029dbf1ffbe600"}}, {0x27, &(0x7f0000000880)=@string={0x27, 0x3, "1f9bdd8c0f30723e117e2948d80aae7bcddc31b3c6e52c1c4142a1f05b5916a7c57106525a"}}, {0x56, &(0x7f00000008c0)=@string={0x56, 0x3, "ca990b006593cb857f5ef08ad79aca4bda0ad38c16e111eb9e66c0e5954f7e4bbe171ce336a6923900ab8fcb884d39d92d1450f7db8de4c66cab1bc24b83067879ddd3b51b6043b516cde093337a9a72ac05399c"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_control_io$uac2(r5, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x20, 0x4, 0x83, {0x83, 0x31, "3f17c65cde99e0857b96392716a652e002b37b06184b6b22f93dd82a1c542709ea167cd418b7246b3ebaf1dcd721bdaa5eaa90fe80a6385805ccdd90180acbaa1540493b3d67fda00465010143495db4400892ae17548e067be2be0c33fe356f98979c3907a3a7d07e498e13feaf3d9ee58341ce34a9f135e27fc34900aa51ac7d"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x20, 0x30, 0xf, "e6bc85390e4eaddfec6fc9d03a0d5f"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "b8d3"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "cf5721"}, &(0x7f0000000cc0)={0x20, 0x83, 0x1, '\t'}, &(0x7f0000000d00)=ANY=[@ANYBLOB="1584030004000eb64b"], &(0x7f0000000d40)={0x20, 0x85, 0x3, "40f847"}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@allocspi={0x148, 0x16, 0x1, 0x70bd2c, 0x25dfdbfd, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x7b1, 0x4e22, 0xfffb, 0xa, 0xa0, 0x20, 0x62, 0x0, r6}, {@in6=@mcast2, 0x4d2, 0x3c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xc979, 0x4000000000000002, 0x7ff, 0xe, 0x5408f534, 0xb, 0x7, 0x3}, {0x8, 0xffffffff, 0x8, 0x100000000}, {0xfffffff8, 0x1, 0x66ff}, 0x70bd2d, 0x0, 0x2, 0x2, 0x0, 0x60}, 0xfbc9, 0xfa}, [@etimer_thresh={0x8, 0xc, 0x1}, @extra_flags={0x8, 0x18, 0x1}, @policy_type={0xa}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @migrate={0x4}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010101, @in=@broadcast, 0x2, 0x7f, 0x9f}}]}, 0x148}, 0x1, 0x0, 0x0, 0x48085}, 0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.436957714s ago: executing program 1 (id=252): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x90, 0x90, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x21, 0x30, 0x3a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0x3, 0x3, {0xa, 0x25, 0x25, 0x1ff, 0x6, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x7, 0x3, {0xa, 0x25, 0x25, 0x10001, 0x6, 0x2001}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x8, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x3c, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "bd20841d7924"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc60, 0x8, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x8, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xa147, 0xe, 0x3, 0x2, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x76, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x10, 0x9, 0x6, 0x20}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x52, &(0x7f0000000180)=@string={0x52, 0x3, "6cb2e9ff52d3309eed6bd3186903ebf48403077762bef83eaa536d20c60f3c1592dc8007928fca809ce5f3d08c85da79ce03bb4acda21ecc0322c3911fcf1542d7b8e2af702468fdd148f6ab55efd8e0"}}, {0xe0, &(0x7f0000000200)=@string={0xe0, 0x3, "62d7bb566d30fce82066984d3b626780b26ea2a171cf47a15f38165c075a95adb42dd4fccc055c0714002bfab2afe9c4cc6698873262a5eea1fd3cef08f4838966de04f031b4723c8370f37fc9ee244c8b3a6111259d69e3c5efb801b1ce107412f923791cbbc0e018c559399d3301f05fd7df7b467e179802e94b1c1b0fce5d36fd7b0a342a996872e24fa47c7b9d74fe4599f959ed41bf527c0440853a504e7fda3946ea4b921a3e52c55cd59f7b3a84fd5f0974d8b504ceefe38d6dbafe209010717f6dae4e9835e4e896501da3fbcdaa6853bbe566bd95f93cb9a23a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x423}}, {0xb7, &(0x7f0000000340)=@string={0xb7, 0x3, "95be764dc0f29b42599d7a98a371782d35db01477e143e11ecae93efc3e68ca5a643d47d02533127087371cfcbabeccab08fe94e5b7223134759dcdb1f76e603f9c03073f33d8ed6886c9c5b66515ed2e11a03ee0450989b944c16f70156d3e917dc9c35c5297afc8beb7f5d0ff89b01f407fe0f870fa96a045ee7af8e92b62e27dc6057b0e666bd4c8c4a9e65b5366ca05864bd939b01f9dde4c48a0f01c0e02b64eb5360f1d22aaae6ac36e33ae4eb684be0862d"}}, {0x4c, &(0x7f0000000400)=@string={0x4c, 0x3, "c81c547ebd4413aed37a061034c09c3b82a1bd87f80b50e93cefffce6de76c8de9056be37e8417658d340b4af1650e26b275e2e3f89b350df2a3f36725049394e324d30c6d53ffb11381"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x440c}}, {0xe7, &(0x7f0000000500)=@string={0xe7, 0x3, "c2d736930d1aa28dea47d1e76fafda1a67072dea78992b47dcf465112966b3c7dfef92bb29e0426c6a56ed01ed93e43fcfacacfcc17cc8c4ecbec0e0aca38c8f60ed86217314b9d3e59e7474009965940ca35645acc9a4539f12208c52b8e258af59f718019a4242617707c1180ca5d0b7f72ff2ef4483e4baed5e9b949248584ffb6cc937979a0b13a7586867916516272ffda3bd1d1a6ddfd7e958b12e9a1760a91fbe55dfe815cfab7a922df6332966863744adfc1460a18a7a222ee416573d619d9fbe6589876ff1ef2e44c7e7d4671d03e567cf34809c026981efe1185bdd0f4a55da"}}]}) 472.679065ms ago: executing program 2 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) fdatasync(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000002010102000005000000000005000006080008400000008108000340000030000a001a"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x20b, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x42010, &(0x7f00000000c0)={[], [], 0x2c}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3e988951) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "13deb7347882dfb27659d99e4d"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dbbfa0f5ce"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket(0x9, 0x80006, 0x6e) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6e0101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r9, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) ioctl$KVM_CREATE_VM(r8, 0xae03, 0x25) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x60) 282.939691ms ago: executing program 1 (id=254): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 210.283694ms ago: executing program 1 (id=255): write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @void, @eth={@broadcast, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x205}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f791e", 0x33, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xff, '\x00', {0x8, 0x6, "054e82", 0x100, 0x4, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [], "a8eb56"}}}}}}}}, 0x6d) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c020000190001000000000010000000e00000010000000000000000000000000a0101000000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x80c4) writev(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) 209.958734ms ago: executing program 1 (id=256): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000500)={0x18, 0x1, 0x0, {0xd}}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x3fb7, &(0x7f0000000380)={0x0, 0x4b3d, 0x4, 0x0, 0x20e}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x1, 0x257, 0x0, r11}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x8, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x6e0, 0x5, 0xc5}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f0000000200)={0x0, 0x1460, 0x800, 0x1000, 0x3e6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0x1, 0x2aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec8d, 0x20000, 0x1, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x2, 0x902c4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6b9, 0x8000, 0x2, 0x21b}}], 0x4, &(0x7f0000002080)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r0, '\x00', {0x3, 0xeae, 0x0, 0x0}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x4a, &(0x7f0000001600)=0xffffffff, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 92.041207ms ago: executing program 2 (id=257): keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505100040000000010109024800010100000109040000ff0202000005240600e905240000000d240f010024130005240102ff032413"], 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505100040000000010109024800010100000109040000ff0202000005240600e905240000000d240f010024130005240102ff032413"], 0x0) (async) 0s ago: executing program 1 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0x9b, {0x9b, 0x23, "3733c9698e1547810389d4d2cf107d589b3851d606fc99cb0d6790a283b8c031d768dda65ca86c20d91c863e13f5fa8ea81c2f89dd6a20421a6c5687e8797d0b744c58abadc30b69a57bb36d149fbbbbb9d20e0d2980689af005032060989cd12782855030afe9c5046a76a96908b68b2b66dacb54cb6a156e127d0f71db602047b7e6c3bbb1de06ff049c20d7791529c58a09bce2a8cfd13a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000001c0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x9, "ab6cdfbf"}, @local=@item_012={0x1, 0x2, 0x3, "12"}, @main=@item_4={0x3, 0x0, 0xc, "9cb5cc35"}, @local=@item_4={0x3, 0x2, 0x8, "8abf2c32"}, @global=@item_4={0x3, 0x1, 0x9, "89b97672"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9a, 0x1, {0x22, 0x47}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0xa, 0x99, "23bc13326d5803e1c87739974adc4756f73735db4984623e40adba7416190881bf83a1bbf3a3658761d560f595d93c186a1980d04fc5ba7efb7cfb833ef3da99f7a85557b4999ca180a65969645d7ff824c0ee4b3e0cef12842faa41e130977506b9c651818854cbd82370b28caef7635c2241650e829189ce3a78fde0de74837da84391fc97832c5ec85f917d7a23ce0d39bb35b5c1561198"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0xe7, "2ac7dfe2e4ead99d92122f369ced5967054ea08deb5093c776e6c3c3793bd97fd6a14a7ea19df3453aabc7830beb49f34f15cca82879908fdf272eb477d100554c58f17458427bd82a977bbaa13b6e20f69284481f518ed5dfb39831c2a92338cd8bba96cb1564af2a6914f39a3704c1377f14d949302ded55ef548435f5d901fb753639420020f7ec92d1e8c8679cfac6939d5faea3e8f66a3edd738ecb46755dbe1d03ac475ed90be0839da56a6cbbed27919c2dc70d0d6c41f2d512dfbf220188457933079d71a085d4b8122ad7849854481a6a55530bc9431b8294c0a57ec8c9201a106752"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 23.544637][ T36] audit: type=1400 audit(1781207139.480:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.548357][ T287] cgroup: Unknown subsys name 'net' [ 23.567322][ T36] audit: type=1400 audit(1781207139.480:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.594873][ T36] audit: type=1400 audit(1781207139.510:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.595328][ T287] cgroup: Unknown subsys name 'devices' [ 23.714974][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.720708][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.836582][ T36] audit: type=1400 audit(1781207139.770:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.860051][ T36] audit: type=1400 audit(1781207139.770:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.885224][ T36] audit: type=1400 audit(1781207139.770:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.909234][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.918121][ T36] audit: type=1400 audit(1781207139.850:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.943676][ T36] audit: type=1400 audit(1781207139.850:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.979712][ T36] audit: type=1400 audit(1781207139.910:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.005746][ T36] audit: type=1400 audit(1781207139.910:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.006404][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.894132][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.901245][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.908520][ T296] bridge_slave_0: entered allmulticast mode [ 24.914936][ T296] bridge_slave_0: entered promiscuous mode [ 24.925566][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.932707][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.939788][ T295] bridge_slave_0: entered allmulticast mode [ 24.946282][ T295] bridge_slave_0: entered promiscuous mode [ 24.954994][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.962069][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.969203][ T296] bridge_slave_1: entered allmulticast mode [ 24.975749][ T296] bridge_slave_1: entered promiscuous mode [ 24.991331][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.999161][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.006397][ T295] bridge_slave_1: entered allmulticast mode [ 25.012798][ T295] bridge_slave_1: entered promiscuous mode [ 25.047531][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.054653][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.062098][ T294] bridge_slave_0: entered allmulticast mode [ 25.068753][ T294] bridge_slave_0: entered promiscuous mode [ 25.075070][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.082152][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.089404][ T297] bridge_slave_0: entered allmulticast mode [ 25.095826][ T297] bridge_slave_0: entered promiscuous mode [ 25.105225][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.112316][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.119951][ T294] bridge_slave_1: entered allmulticast mode [ 25.126366][ T294] bridge_slave_1: entered promiscuous mode [ 25.132423][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.139626][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.146834][ T297] bridge_slave_1: entered allmulticast mode [ 25.153167][ T297] bridge_slave_1: entered promiscuous mode [ 25.306407][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.313616][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.320933][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.328020][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.347398][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.354526][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.361849][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.368931][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.391940][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.399052][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.406388][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.413458][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.431937][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.439315][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.446646][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.453711][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.493216][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.500679][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.508620][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.516516][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.524046][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.531247][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.538749][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.546042][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.575728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.582812][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.590444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.597540][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.605279][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.612344][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.620089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.627192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.634856][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.641897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.649505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.656618][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.664260][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.671416][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.694494][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.701569][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.741030][ T296] veth0_vlan: entered promiscuous mode [ 25.759813][ T294] veth0_vlan: entered promiscuous mode [ 25.782967][ T297] veth0_vlan: entered promiscuous mode [ 25.789797][ T296] veth1_macvtap: entered promiscuous mode [ 25.797040][ T295] veth0_vlan: entered promiscuous mode [ 25.815890][ T297] veth1_macvtap: entered promiscuous mode [ 25.823378][ T294] veth1_macvtap: entered promiscuous mode [ 25.836044][ T295] veth1_macvtap: entered promiscuous mode [ 25.887976][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.952601][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.192725][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.212540][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.252625][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.344202][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.352399][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 26.361033][ T31] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 26.371502][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.374921][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 26.381622][ T31] usb 2-1: config 1 has no interface number 1 [ 26.397229][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 26.399940][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.411549][ T10] usb 1-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 26.421152][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 26.431056][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.439082][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 26.448865][ T10] usb 1-1: config 0 descriptor?? [ 26.457956][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.466470][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.475010][ T311] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 26.483132][ T31] usb 2-1: Product: syz [ 26.487350][ T31] usb 2-1: Manufacturer: syz [ 26.491992][ T31] usb 2-1: SerialNumber: syz [ 26.497496][ T311] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 228 [ 26.506312][ T311] usb 4-1: can't read configurations, error -22 [ 26.642685][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.792553][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 26.799327][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.807128][ T311] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 26.822548][ T311] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 228 [ 26.835432][ T311] usb 4-1: can't read configurations, error -22 [ 26.842848][ T311] usb usb4-port1: attempt power cycle [ 26.860974][ T10] ortek 0003:05A4:8003.0001: ignoring exceeding usage max [ 26.883684][ T10] ortek 0003:05A4:8003.0001: unknown main item tag 0x2 [ 26.891597][ T10] ortek 0003:05A4:8003.0001: hidraw0: USB HID v0.04 Device [HID 05a4:8003] on usb-dummy_hcd.0-1/input0 [ 27.072592][ T66] usb 1-1: USB disconnect, device number 2 [ 27.183036][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.203088][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 27.209876][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.217827][ T311] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 27.226911][ T311] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 228 [ 27.233340][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.236693][ T311] usb 4-1: can't read configurations, error -22 [ 27.256305][ T31] usb 2-1: USB disconnect, device number 2 [ 27.281561][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.304861][ T339] Zero length message leads to an empty skb [ 27.365685][ T344] netlink: 'syz.1.11': attribute type 16 has an invalid length. [ 27.392645][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.411198][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.413271][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 27.423510][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 27.426381][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.440881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.441641][ T311] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 27.449674][ T10] usb 3-1: Product: syz [ 27.458258][ T311] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 228 [ 27.464088][ T10] usb 3-1: Manufacturer: syz [ 27.471505][ T311] usb 4-1: can't read configurations, error -22 [ 27.480534][ T10] usb 3-1: SerialNumber: syz [ 27.481384][ T311] usb usb4-port1: unable to enumerate USB device [ 27.694940][ T334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.703640][ T334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.852574][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.004100][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.012711][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.025162][ T311] usb 1-1: string descriptor 0 read error: -22 [ 28.031444][ T311] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 28.040992][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.467582][ T356] overlayfs: failed to resolve './file1': -2 [ 28.576286][ T361] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17'. [ 28.585426][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 28.652762][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 28.652780][ T36] audit: type=1400 audit(1781207144.590:126): avc: denied { write } for pid=367 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.972583][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.124284][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.132705][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 29.141345][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.151527][ T66] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.160616][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 29.173080][ T66] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 29.182300][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.190883][ T66] usb 2-1: Product: syz [ 29.195134][ T66] usb 2-1: Manufacturer: syz [ 29.199927][ T66] usb 2-1: SerialNumber: syz [ 29.322222][ T36] audit: type=1400 audit(1781207145.250:127): avc: denied { execute } for pid=380 comm="syz.0.23" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.322262][ T381] process 'syz.0.23' launched './file0' with NULL argv: empty string added [ 29.323479][ T381] Invalid argument reading file caps for ./file0 [ 29.348789][ T36] audit: type=1400 audit(1781207145.250:128): avc: denied { execute_no_trans } for pid=380 comm="syz.0.23" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.408690][ T388] netlink: 'syz.0.25': attribute type 28 has an invalid length. [ 29.416601][ T389] netlink: 'syz.0.25': attribute type 28 has an invalid length. [ 29.447704][ T36] audit: type=1400 audit(1781207145.380:129): avc: denied { create } for pid=390 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.480774][ T36] audit: type=1400 audit(1781207145.410:130): avc: denied { create } for pid=391 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.545902][ T36] audit: type=1400 audit(1781207145.480:131): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.575519][ T36] audit: type=1400 audit(1781207145.510:132): avc: denied { read write } for pid=400 comm="syz.1.31" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.602075][ T36] audit: type=1400 audit(1781207145.510:133): avc: denied { open } for pid=400 comm="syz.1.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.626167][ T36] audit: type=1400 audit(1781207145.540:134): avc: denied { create } for pid=400 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.645480][ T36] audit: type=1400 audit(1781207145.540:135): avc: denied { ioctl } for pid=400 comm="syz.1.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.722688][ T403] tipc: Started in network mode [ 29.727709][ T403] tipc: Node identity d6ba617f956f, cluster identity 4711 [ 29.735193][ T403] tipc: Enabled bearer , priority 0 [ 29.758926][ T403] syzkaller0: entered promiscuous mode [ 29.764542][ T403] syzkaller0: entered allmulticast mode [ 29.770715][ T403] tipc: Resetting bearer [ 29.779690][ T402] tipc: Resetting bearer [ 29.792250][ T402] tipc: Disabling bearer [ 29.990454][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.002763][ T311] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 30.010470][ T10] usb 3-1: USB disconnect, device number 2 [ 30.019417][ T66] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 30.029355][ T66] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 30.038898][ T66] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 30.047278][ T66] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 30.059274][ T66] usb 2-1: unit 37 not found! [ 30.064502][ T66] usb 2-1: unit 0 not found! [ 30.075556][ T311] usb 1-1: USB disconnect, device number 3 [ 30.083975][ T66] usb 2-1: USB disconnect, device number 3 [ 30.134273][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.442604][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.442604][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.542729][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.592581][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 30.599017][ T311] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 30.602707][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 30.607684][ T311] usb 1-1: config 0 has no interface number 0 [ 30.615117][ T66] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1560, setting to 1024 [ 30.618920][ T311] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 30.631700][ T66] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.639970][ T311] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 30.653030][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.662872][ T311] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 30.669647][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 30.681297][ T311] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 30.688796][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.697429][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.706105][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 30.714635][ T311] usb 1-1: Product: syz [ 30.720394][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.722894][ T311] usb 1-1: Manufacturer: syz [ 30.729591][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 30.734274][ T311] usb 1-1: SerialNumber: syz [ 30.744261][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.753445][ T311] usb 1-1: config 0 descriptor?? [ 30.756722][ T66] usb 2-1: config 0 descriptor?? [ 30.765915][ T405] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 30.769950][ T395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 30.780511][ T10] usb 3-1: config 0 descriptor?? [ 30.979116][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x4 [ 30.986506][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x4 [ 30.994295][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.001587][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.009082][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.016505][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.024536][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.031749][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.039242][ T66] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 31.047997][ T66] logitech 0003:046D:C293.0002: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 31.072543][ T66] logitech 0003:046D:C293.0002: no inputs found [ 31.211040][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 31.217874][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.488704][ T10] steelseries 0003:1038:12B6.0003: item fetching failed at offset 5/40 [ 31.497589][ T10] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 31.691382][ T10] usb 3-1: USB disconnect, device number 3 [ 31.738533][ T311] usb-storage 1-1:0.20: USB Mass Storage device detected [ 31.748599][ T311] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 31.756946][ T311] scsi host1: usb-storage 1-1:0.20 [ 31.775501][ T311] usb 1-1: USB disconnect, device number 4 [ 32.112598][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.262527][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 32.268942][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.279560][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.286439][ T311] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 32.297393][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.309852][ T311] usb 1-1: config 0 descriptor?? [ 32.480345][ T452] ======================================================= [ 32.480345][ T452] WARNING: The mand mount option has been deprecated and [ 32.480345][ T452] and is ignored by this kernel. Remove the mand [ 32.480345][ T452] option from the mount to silence this warning. [ 32.480345][ T452] ======================================================= [ 32.516629][ T452] overlay: Bad value for 'index' [ 32.523657][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.548878][ T453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.549236][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.571714][ T453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.746358][ T472] Invalid logical block size (4) [ 32.786459][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 32.792969][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.803364][ T311] usb 1-1: USB disconnect, device number 5 [ 32.839557][ T46] usb 2-1: USB disconnect, device number 4 [ 32.953144][ T491] netlink: 388 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.972538][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.082574][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.143860][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.154283][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.163473][ T46] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 33.184207][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 33.193353][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.201372][ T10] usb 3-1: Product: syz [ 33.205640][ T10] usb 3-1: Manufacturer: syz [ 33.210259][ T10] usb 3-1: SerialNumber: syz [ 33.242581][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 33.248777][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.259762][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.269772][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.278900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.287719][ T9] usb 4-1: config 0 descriptor?? [ 33.293943][ T9] hub 4-1:0.0: USB hub found [ 33.323799][ T46] usb 2-1: descriptor type invalid, skip [ 33.329640][ T46] usb 2-1: No LPM exit latency info found, disabling LPM. [ 33.337867][ T46] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 33.348629][ T46] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 33.360230][ T46] usb 2-1: string descriptor 0 read error: -22 [ 33.366514][ T46] usb 2-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 33.375707][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.462543][ T311] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 33.493682][ T9] hub 4-1:0.0: 15 ports detected [ 33.499091][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 33.587936][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.596736][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.606173][ T66] usb 2-1: USB disconnect, device number 5 [ 33.623386][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 33.632299][ T311] usb 1-1: config 222 has an invalid interface number: 229 but max is 1 [ 33.640742][ T311] usb 1-1: config 222 contains an unexpected descriptor of type 0x1, skipping [ 33.650239][ T311] usb 1-1: config 222 has an invalid interface number: 132 but max is 1 [ 33.658656][ T311] usb 1-1: config 222 contains an unexpected descriptor of type 0x1, skipping [ 33.667598][ T311] usb 1-1: config 222 has no interface number 0 [ 33.673949][ T311] usb 1-1: config 222 has no interface number 1 [ 33.680299][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 33.691644][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 33.698154][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 33.704421][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 33.712712][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 33.723390][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 33.733358][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 33.738850][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 33.746309][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.756515][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0x6 has an invalid bInterval 68, changing to 4 [ 33.775476][ T311] usb 1-1: config 222 interface 229 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 1023 [ 33.787159][ T311] usb 1-1: config 222 interface 229 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 33.795589][ T9] usb 4-1: USB disconnect, device number 6 [ 33.798223][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 33.815063][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 33.826061][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 33.837032][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 33.847972][ T311] usb 1-1: config 222 interface 132 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 33.859277][ T311] usb 1-1: config 222 interface 132 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 33.870682][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 33.881778][ T311] usb 1-1: config 222 interface 132 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 33.892711][ T311] usb 1-1: config 222 interface 132 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 33.902915][ T311] usb 1-1: config 222 interface 229 has no altsetting 0 [ 33.909892][ T311] usb 1-1: config 222 interface 132 has no altsetting 0 [ 33.918460][ T311] usb 1-1: New USB device found, idVendor=05cc, idProduct=3351, bcdDevice=37.25 [ 33.927765][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.935997][ T311] usb 1-1: Product: Ч [ 33.940132][ T311] usb 1-1: Manufacturer: ĖŖź’Øēæ‚ą»“ģ­¾ļŽå§ć‘šį¬žļØŗā¢³ē·µå±ą½¤źŖ£č‚œā¢æā¤»ęø½ė‡’īøįØ»äŗ€ćŽ°ė‘¶źŖ¾ź°•ä§©į½¤ī•„ä¤˜į·¼ą±Žć¢„č“˜ä¼‘ī¼“ā”³Ż»ė”…ē“Šä¬¹ģ’„źŠ–Ņ¾é½Šć‘¬ėŒ®čˆę‚ ķŠÆåø‘ę‡–į±ć­±ä¹›ēø©å‹€ē–č¶€į˜ŗīØ¶ļ’µģ§£ķš [ 33.961236][ T311] usb 1-1: SerialNumber: syz [ 33.967291][ T495] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.156143][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 34.156163][ T36] audit: type=1326 audit(1781207150.090:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.1.60" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5753d9ce59 code=0x0 [ 34.189548][ T36] audit: type=1400 audit(1781207150.120:167): avc: denied { mount } for pid=494 comm="syz.0.59" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.211397][ T36] audit: type=1400 audit(1781207150.120:168): avc: denied { unmount } for pid=494 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.435676][ T311] usb 1-1: USB disconnect, device number 6 [ 34.984824][ T36] audit: type=1400 audit(1781207150.920:169): avc: denied { setopt } for pid=507 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.004477][ T36] audit: type=1400 audit(1781207150.940:170): avc: denied { read write } for pid=507 comm="syz.0.63" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.028638][ T36] audit: type=1400 audit(1781207150.940:171): avc: denied { open } for pid=507 comm="syz.0.63" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.054776][ T36] audit: type=1400 audit(1781207150.940:172): avc: denied { ioctl } for pid=507 comm="syz.0.63" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.079286][ T36] audit: type=1400 audit(1781207150.940:173): avc: denied { ioctl } for pid=507 comm="syz.0.63" path="socket:[4678]" dev="sockfs" ino=4678 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.123492][ T36] audit: type=1400 audit(1781207151.060:174): avc: denied { append } for pid=512 comm="syz.3.65" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.174119][ T514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1610450249 (1610450249 ns) > initial count (751459529 ns). Using initial count to start timer. [ 35.196796][ T514] kvm: kvm [512]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 35.205659][ T514] kvm: kvm [512]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 35.217864][ T522] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 35.227127][ T522] input: syz0 as /devices/virtual/input/input4 [ 35.239018][ T36] audit: type=1400 audit(1781207151.170:175): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=481 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.282597][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.388807][ T528] overlayfs: overlapping lowerdir path [ 35.432583][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 35.439206][ T311] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 35.447465][ T311] usb 1-1: config 1 has no interface number 0 [ 35.453757][ T311] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.463750][ T311] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 35.473864][ T311] usb 1-1: config 1 interface 105 has no altsetting 0 [ 35.482509][ T335] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.482538][ T311] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.482566][ T311] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.507262][ T311] usb 1-1: Product: syz [ 35.511460][ T311] usb 1-1: Manufacturer: syz [ 35.516127][ T311] usb 1-1: SerialNumber: syz [ 35.527102][ T510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.536068][ T510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.652508][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 35.659033][ T335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.667564][ T335] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 35.680418][ T335] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 35.689772][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.698057][ T335] usb 4-1: Product: syz [ 35.702289][ T335] usb 4-1: Manufacturer: syz [ 35.709484][ T335] usb 4-1: SerialNumber: syz [ 35.714840][ T10] usb 3-1: skipping empty audio interface (v1) [ 35.725919][ T539] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 35.735473][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.748018][ T10] usb 3-1: USB disconnect, device number 4 [ 35.760263][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.926741][ T335] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.938924][ T335] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 35.948310][ T510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.956698][ T335] usb 4-1: USB disconnect, device number 7 [ 35.962800][ T510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.975349][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.175626][ T311] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5 [ 36.186529][ T311] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 36.372586][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.388073][ T567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.64'. [ 36.502546][ T310] usb 2-1: device descriptor read/64, error -71 [ 36.521973][ T569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=159 sclass=netlink_route_socket pid=569 comm=syz.3.83 [ 36.592577][ T311] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.752633][ T310] usb 2-1: device descriptor read/64, error -71 [ 36.761573][ T311] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 36.770702][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.772658][ T335] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.778739][ T311] usb 3-1: Product: syz [ 36.790503][ T311] usb 3-1: Manufacturer: syz [ 36.795534][ T311] usb 3-1: SerialNumber: syz [ 36.800977][ T311] usb 3-1: config 0 descriptor?? [ 36.807307][ T311] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 36.912563][ T335] usb 4-1: device descriptor read/64, error -71 [ 36.992574][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.009055][ T311] usb 3-1: USB disconnect, device number 5 [ 37.122602][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.152558][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.362546][ T310] usb 2-1: device descriptor read/64, error -71 [ 37.392625][ T335] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.472697][ T310] usb usb2-port1: attempt power cycle [ 37.522605][ T572] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 37.523213][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.762548][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.772543][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.812640][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.833752][ T310] usb 2-1: device descriptor read/8, error -71 [ 37.882672][ T335] usb usb4-port1: attempt power cycle [ 37.913769][ T311] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 37.924921][ T311] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.939735][ T311] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 37.949815][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.957905][ T311] usb 3-1: Product: syz [ 37.962093][ T311] usb 3-1: Manufacturer: syz [ 37.966826][ T311] usb 3-1: SerialNumber: syz [ 37.972391][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.064824][ T9] usb 1-1: USB disconnect, device number 7 [ 38.184594][ T311] usb 3-1: MIDIStreaming interface descriptor not found [ 38.199881][ T311] usb 3-1: USB disconnect, device number 6 [ 38.216209][ T310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.234247][ T335] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.254599][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.273617][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.408910][ T310] usb 2-1: device descriptor read/8, error -71 [ 38.415421][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.522729][ T310] usb usb2-port1: unable to enumerate USB device [ 38.612576][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.652598][ T335] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.673751][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.749207][ T653] netlink: 'syz.2.91': attribute type 27 has an invalid length. [ 38.762540][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 38.769571][ T10] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 38.779384][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.788466][ T10] usb 1-1: config 0 descriptor?? [ 38.797636][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.804960][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.813277][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.845743][ T654] netlink: 'syz.2.91': attribute type 27 has an invalid length. [ 38.869705][ T654] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.876856][ T654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.886576][ T654] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.893770][ T654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.910102][ T654] veth0_vlan: left promiscuous mode [ 38.916101][ T654] veth0_vlan: entered promiscuous mode [ 38.922875][ T335] usb usb4-port1: unable to enumerate USB device [ 38.930840][ T654] veth1_macvtap: left promiscuous mode [ 38.937503][ T654] veth1_macvtap: entered promiscuous mode [ 39.198005][ T650] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 39.205832][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.212639][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 39.212691][ T36] audit: type=1400 audit(1781207155.140:200): avc: denied { ioctl } for pid=649 comm="syz.0.90" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.245895][ T10] cherry 0003:046A:0027.0004: unknown main item tag 0x4 [ 39.252940][ T10] cherry 0003:046A:0027.0004: unknown main item tag 0xd [ 39.260580][ T10] cherry 0003:046A:0027.0004: hidraw0: USB HID v0.81 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 39.362900][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 39.369404][ T311] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 39.382409][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.389275][ T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 39.398468][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.407659][ T311] usb 3-1: config 0 descriptor?? [ 39.532632][ T310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 39.587540][ T36] audit: type=1400 audit(1781207155.520:201): avc: denied { create } for pid=662 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.623149][ T36] audit: type=1400 audit(1781207155.560:202): avc: denied { nlmsg_read } for pid=668 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 39.684030][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.694377][ T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.703496][ T310] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 39.714462][ T310] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 39.729402][ T310] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 39.738662][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.747390][ T310] usb 2-1: Product: syz [ 39.751656][ T310] usb 2-1: Manufacturer: syz [ 39.756357][ T310] usb 2-1: SerialNumber: syz [ 39.819095][ T656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.827938][ T656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.838488][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x2 [ 39.847735][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 39.854657][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 39.861440][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 39.867748][ T36] audit: type=1400 audit(1781207155.800:203): avc: denied { write } for pid=674 comm="syz.3.99" name="ip6_tables_targets" dev="proc" ino=4026532625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.868487][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 39.898538][ T311] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 39.905739][ T311] lua 0003:1E7D:2C2E.0005: item fetching failed at offset 31/40 [ 39.913894][ T311] lua 0003:1E7D:2C2E.0005: parse failed [ 39.919540][ T311] lua 0003:1E7D:2C2E.0005: probe with driver lua failed with error -22 [ 39.932541][ T665] usb 1-1: USB disconnect, device number 8 [ 39.965296][ T36] audit: type=1400 audit(1781207155.900:204): avc: denied { map } for pid=657 comm="syz.1.93" path="socket:[5014]" dev="sockfs" ino=5014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 40.018479][ T36] audit: type=1400 audit(1781207155.950:205): avc: denied { map } for pid=657 comm="syz.1.93" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.049079][ T310] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.054729][ T335] usb 3-1: USB disconnect, device number 7 [ 40.077102][ T310] usb 2-1: USB disconnect, device number 10 [ 40.099248][ T681] overlay: Unknown parameter '/' [ 40.101507][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.147497][ T690] capability: warning: `syz.3.103' uses 32-bit capabilities (legacy support in use) [ 40.148847][ T36] audit: type=1400 audit(1781207156.080:206): avc: denied { wake_alarm } for pid=688 comm="syz.3.103" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.178809][ T36] audit: type=1400 audit(1781207156.100:207): avc: denied { name_bind } for pid=688 comm="syz.3.103" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.341590][ T36] audit: type=1400 audit(1781207156.270:208): avc: denied { write } for pid=703 comm="syz.3.107" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 40.417728][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 40.422823][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.623171][ T36] audit: type=1400 audit(1781207156.540:209): avc: denied { create } for pid=716 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 40.647233][ T583] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.652628][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 40.660274][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.668788][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.672681][ T335] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.679201][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 40.724502][ T310] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 40.734487][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.742797][ T310] usb 2-1: Product: syz [ 40.747003][ T310] usb 2-1: Manufacturer: syz [ 40.751623][ T310] usb 2-1: SerialNumber: syz [ 40.762584][ T310] usb 2-1: config 0 descriptor?? [ 40.778974][ T310] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 40.845897][ T410] udevd[410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.875175][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.892548][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.907563][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.921236][ T335] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.930717][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.941787][ T335] usb 1-1: config 0 descriptor?? [ 40.973780][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.982478][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.991407][ T311] usb 2-1: USB disconnect, device number 11 [ 41.192580][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 41.342592][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 41.350368][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 41.359773][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 41.368092][ T9] usb 4-1: Product: syz [ 41.372445][ T9] usb 4-1: SerialNumber: syz [ 41.377383][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 41.383727][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.391741][ T9] usb 4-1: config 0 descriptor?? [ 41.398189][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 41.406621][ T335] usb 1-1: USB disconnect, device number 9 [ 41.414555][ T9] usb 4-1: Detected FT2232C/D [ 41.541698][ T733] input: syz1 as /devices/virtual/input/input6 [ 41.612226][ T731] rust_binder: Error while translating object. [ 41.612303][ T731] rust_binder: Failure in copy_transaction_data: EINVAL [ 41.632698][ T731] rust_binder: 730:731 transaction to 730 failed: EINVAL [ 41.644374][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 41.663060][ T738] netlink: 'syz.1.117': attribute type 12 has an invalid length. [ 41.667061][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 41.679524][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 41.695846][ T9] usb 4-1: USB disconnect, device number 12 [ 41.703010][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 41.713303][ T9] ftdi_sio 4-1:0.0: device disconnected [ 42.132539][ T310] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 42.263198][ T760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.283792][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.295117][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.305481][ T310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.314607][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.323540][ T310] usb 1-1: config 0 descriptor?? [ 42.532549][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.682517][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 42.682521][ T311] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 42.696577][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.703195][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 42.707682][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.720044][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.730120][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.733536][ T310] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 42.739239][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.755413][ T10] usb 2-1: config 0 descriptor?? [ 42.761755][ T10] hub 2-1:0.0: USB hub found [ 42.774140][ T310] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 42.780995][ T310] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 42.791439][ T310] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 42.798511][ T310] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 42.805640][ T310] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 42.816949][ T310] savu 0003:1E7D:2D5A.0006: parse failed [ 42.823813][ T310] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 42.843606][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.865540][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.884322][ T311] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.893685][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.903045][ T311] usb 4-1: config 0 descriptor?? [ 42.932432][ T66] usb 1-1: USB disconnect, device number 10 [ 43.073729][ T778] netlink: 104 bytes leftover after parsing attributes in process `syz.2.132'. [ 43.082966][ T779] netlink: 104 bytes leftover after parsing attributes in process `syz.2.132'. [ 43.162562][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 43.162602][ T759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.181219][ T759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.392545][ T66] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 43.467561][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 43.474697][ T792] netlink: 164 bytes leftover after parsing attributes in process `syz.0.137'. [ 43.483858][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.512942][ T10] usb 2-1: USB disconnect, device number 12 [ 43.543580][ T66] usb 3-1: too many endpoints for config 0 interface 0 altsetting 211: 223, using maximum allowed: 30 [ 43.566927][ T66] usb 3-1: config 0 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.590009][ T66] usb 3-1: config 0 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.605837][ T66] usb 3-1: config 0 interface 0 altsetting 211 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 43.619793][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.627219][ T66] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.639251][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.651643][ T66] usb 3-1: config 0 descriptor?? [ 44.084138][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 44.106630][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.125573][ T66] usb 3-1: USB disconnect, device number 8 [ 44.193588][ T804] rust_binder: 111: no such ref 1 [ 44.207418][ T804] rust_binder: 803:804 transaction to 0 failed: EINVAL [ 44.487039][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 44.487059][ T36] audit: type=1400 audit(1781207160.420:230): avc: denied { read } for pid=812 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.537150][ T36] audit: type=1400 audit(1781207160.470:231): avc: denied { getopt } for pid=812 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.562637][ T36] audit: type=1400 audit(1781207160.500:232): avc: denied { write } for pid=812 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.852508][ T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.872497][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.012598][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 45.024859][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.032728][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 45.043595][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.062553][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.081788][ T66] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 151, using maximum allowed: 30 [ 45.102844][ T66] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 45.122572][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.133336][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 45.141302][ T10] usb 3-1: can't read configurations, error -71 [ 45.148571][ T66] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 45.157928][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.166026][ T66] usb 2-1: Product: syz [ 45.170433][ T66] usb 2-1: Manufacturer: syz [ 45.175115][ T66] usb 2-1: SerialNumber: syz [ 45.505781][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 45.511809][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.543526][ T311] usb 4-1: USB disconnect, device number 13 [ 45.666791][ T832] kernel profiling enabled (shift: 63) [ 45.672402][ T832] profiling shift: 63 too large [ 45.889348][ T36] audit: type=1400 audit(1781207161.820:233): avc: denied { connect } for pid=839 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.002684][ T36] audit: type=1400 audit(1781207161.940:234): avc: denied { ioctl } for pid=845 comm="syz.3.152" path="socket:[7990]" dev="sockfs" ino=7990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.063437][ T849] netlink: 396 bytes leftover after parsing attributes in process `syz.3.153'. [ 46.128463][ T36] audit: type=1326 audit(1781207162.060:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=848 comm="syz.3.153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a79ce59 code=0x50000 [ 46.158630][ T36] audit: type=1326 audit(1781207162.090:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=848 comm="syz.3.153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a79ce59 code=0x50000 [ 46.184029][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.191987][ T36] audit: type=1326 audit(1781207162.090:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=848 comm="syz.3.153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a79ce59 code=0x50000 [ 46.217288][ T36] audit: type=1326 audit(1781207162.090:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=848 comm="syz.3.153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a79ce59 code=0x50000 [ 46.242911][ T36] audit: type=1326 audit(1781207162.090:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=848 comm="syz.3.153" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a79ce59 code=0x50000 [ 46.412510][ T10] usb 3-1: device descriptor read/64, error -71 [ 46.662504][ T10] usb 3-1: device descriptor read/64, error -71 [ 46.772611][ T10] usb usb3-port1: attempt power cycle [ 46.874985][ T858] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.943083][ T605] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.132536][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.153505][ T10] usb 3-1: device descriptor read/8, error -71 [ 47.283510][ T10] usb 3-1: device descriptor read/8, error -71 [ 47.522551][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.553578][ T10] usb 3-1: device descriptor read/8, error -71 [ 47.635854][ T311] usb 2-1: USB disconnect, device number 13 [ 47.683467][ T10] usb 3-1: device descriptor read/8, error -71 [ 47.777688][ T865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 47.802640][ T10] usb usb3-port1: unable to enumerate USB device [ 47.864046][ T867] capability: warning: `syz.1.158' uses deprecated v2 capabilities in a way that may be insecure [ 48.782649][ T873] netlink: 188 bytes leftover after parsing attributes in process `syz.2.161'. [ 48.972516][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.022490][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.022503][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 49.064576][ T879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.163'. [ 49.132525][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 49.142557][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 49.153806][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.162000][ T66] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 49.174236][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 21, changing to 8 [ 49.185640][ T66] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.198810][ T66] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice= 0.40 [ 49.208152][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.216267][ T66] usb 2-1: Product: syz [ 49.220584][ T66] usb 2-1: Manufacturer: syz [ 49.224704][ T886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 49.225363][ T66] usb 2-1: SerialNumber: syz [ 49.235148][ T886] vcan0: entered promiscuous mode [ 49.244125][ T886] vcan0: entered allmulticast mode [ 49.333892][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.342395][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 49.354966][ T10] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 49.362616][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 49.364197][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.379814][ T10] usb 3-1: Product: syz [ 49.384153][ T10] usb 3-1: Manufacturer: syz [ 49.389141][ T10] usb 3-1: SerialNumber: syz [ 49.413141][ T894] overlayfs: empty lowerdir [ 49.494780][ T36] kauditd_printk_skb: 36234 callbacks suppressed [ 49.494798][ T36] audit: type=1400 audit(1781207165.430:36474): avc: denied { mounton } for pid=897 comm="syz.0.170" path="/proc/126/task" dev="proc" ino=7108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.525881][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.534610][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.554301][ T311] usb 4-1: string descriptor 0 read error: -22 [ 49.560561][ T311] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 49.572507][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.596799][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.607400][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.626799][ T10] usb 3-1: USB disconnect, device number 13 [ 50.032562][ T335] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.144943][ T905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.172'. [ 50.154043][ T905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.172'. [ 50.196158][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.204522][ T66] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 50.232523][ T335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.244354][ T66] usb 2-1: USB disconnect, device number 14 [ 50.252115][ T335] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.262585][ T335] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 50.267343][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 50.278952][ T335] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 50.308813][ T335] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 50.319937][ T335] usb 1-1: config 1 interface 1 has no altsetting 0 [ 50.328831][ T335] usb 1-1: string descriptor 0 read error: -22 [ 50.342123][ T335] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 50.351579][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.387173][ T882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 50.417185][ T10] usb 4-1: USB disconnect, device number 14 [ 50.464702][ T911] tmpfs: Unknown parameter '' [ 50.562111][ T335] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 50.580080][ T335] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 50.602647][ T335] usb 1-1: USB disconnect, device number 11 [ 50.684348][ T310] kernel read not supported for file /147/net/icmp6 (pid: 310 comm: kworker/1:2) [ 50.772556][ T311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.811137][ T36] audit: type=1400 audit(1781207166.740:36475): avc: denied { shutdown } for pid=933 comm="syz.0.181" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.852107][ T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.861698][ T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.932558][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 50.951437][ T311] usb 3-1: config 177 has an invalid interface number: 219 but max is 1 [ 50.967417][ T311] usb 3-1: config 177 has an invalid interface number: 251 but max is 1 [ 50.984182][ T311] usb 3-1: config 177 contains an unexpected descriptor of type 0x1, skipping [ 50.993521][ T311] usb 3-1: config 177 has no interface number 0 [ 50.999969][ T311] usb 3-1: config 177 has no interface number 1 [ 51.006503][ T311] usb 3-1: config 177 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 51.017911][ T311] usb 3-1: config 177 interface 219 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 51.029638][ T311] usb 3-1: config 177 interface 219 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 51.040950][ T311] usb 3-1: config 177 interface 251 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 51.052152][ T311] usb 3-1: config 177 interface 251 has no altsetting 0 [ 51.063068][ T311] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=c5.57 [ 51.082412][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.090581][ T311] usb 3-1: Product: syz [ 51.094862][ T311] usb 3-1: Manufacturer: syz [ 51.099504][ T311] usb 3-1: SerialNumber: syz [ 51.104182][ T310] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 51.122082][ T943] kvm: kvm [938]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.131040][ T943] kvm: kvm [938]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 51.253653][ T310] usb 1-1: No LPM exit latency info found, disabling LPM. [ 51.272921][ T310] usb 1-1: config 24 has no interfaces? [ 51.315987][ T311] pl2303 3-1:177.219: required endpoints missing [ 51.335473][ T311] pl2303 3-1:177.251: required endpoints missing [ 51.354240][ T311] usb 3-1: USB disconnect, device number 14 [ 51.812535][ T36] audit: type=1400 audit(1781207167.740:36476): avc: denied { bpf } for pid=953 comm="syz.1.187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.900142][ T36] audit: type=1400 audit(1781207167.830:36477): avc: denied { relabelfrom } for pid=955 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.922577][ T36] audit: type=1400 audit(1781207167.830:36478): avc: denied { relabelto } for pid=955 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.007528][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.016920][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.025515][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.034222][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.132545][ T335] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.232533][ T66] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.282519][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 52.289076][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.300331][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.310471][ T335] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 52.319695][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.328632][ T335] usb 3-1: config 0 descriptor?? [ 52.332926][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.382519][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 52.389310][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.397998][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.408234][ T66] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.422567][ T66] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 52.431674][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.440019][ T66] usb 2-1: Product: syz [ 52.444289][ T66] usb 2-1: Manufacturer: syz [ 52.448926][ T66] usb 2-1: SerialNumber: syz [ 52.503663][ T311] usb 4-1: config 0 has no interfaces? [ 52.510840][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 52.520286][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.528516][ T311] usb 4-1: Product: syz [ 52.533043][ T311] usb 4-1: Manufacturer: syz [ 52.537704][ T311] usb 4-1: SerialNumber: syz [ 52.543980][ T335] wacom 0003:056A:0084.0007: unknown main item tag 0x0 [ 52.546931][ T311] usb 4-1: config 0 descriptor?? [ 52.552419][ T335] wacom 0003:056A:0084.0007: unknown main item tag 0x0 [ 52.563039][ T335] wacom 0003:056A:0084.0007: unknown main item tag 0x0 [ 52.574565][ T335] wacom 0003:056A:0084.0007: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 52.659639][ T66] usb 2-1: MIDIStreaming interface descriptor not found [ 52.670426][ T66] usb 2-1: USB disconnect, device number 15 [ 52.684562][ T410] udevd[410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.740271][ T46] usb 3-1: USB disconnect, device number 15 [ 52.774358][ T335] usb 4-1: USB disconnect, device number 15 [ 53.308425][ T36] audit: type=1400 audit(1781207169.240:36479): avc: denied { bind } for pid=973 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.357278][ T36] audit: type=1400 audit(1781207169.290:36480): avc: denied { cmd } for pid=977 comm="iou-wrk-978" path="socket:[8657]" dev="sockfs" ino=8657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.423909][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.592516][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 53.599101][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.610166][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.620138][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.629412][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.638880][ T46] usb 2-1: config 0 descriptor?? [ 53.645290][ T46] hub 2-1:0.0: USB hub found [ 53.845429][ T46] hub 2-1:0.0: 1 port detected [ 53.862381][ T310] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 53.871747][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.884682][ T310] usb 1-1: can't set config #24, error -71 [ 53.891410][ T310] usb 1-1: USB disconnect, device number 12 [ 53.972993][ T36] audit: type=1400 audit(1781207169.910:36481): avc: denied { block_suspend } for pid=992 comm="syz.0.200" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.003777][ T46] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 54.010680][ T46] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 54.024893][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 54.035254][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.073794][ T46] usb 2-1: USB disconnect, device number 16 [ 54.286641][ T1019] netlink: 'syz.2.203': attribute type 22 has an invalid length. [ 54.314042][ T36] audit: type=1400 audit(1781207170.240:36482): avc: denied { mounton } for pid=1021 comm="syz.1.207" path="/58/file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.385596][ T1029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1029 comm=syz.0.210 [ 54.502598][ T66] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 54.632552][ T66] usb 4-1: device descriptor read/64, error -71 [ 54.872556][ T66] usb 4-1: device descriptor read/64, error -71 [ 54.894141][ T36] audit: type=1400 audit(1781207170.830:36483): avc: denied { create } for pid=1035 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.920899][ T36] audit: type=1400 audit(1781207170.830:36484): avc: denied { sys_admin } for pid=1035 comm="syz.1.212" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 55.112558][ T66] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 55.212529][ T46] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 55.242555][ T66] usb 4-1: device descriptor read/64, error -71 [ 55.364074][ T46] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 55.372370][ T46] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 55.382596][ T46] usb 2-1: config 8 has no interface number 0 [ 55.388781][ T46] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 55.398862][ T46] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 55.413488][ T46] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 55.422758][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.430818][ T46] usb 2-1: Product: syz [ 55.435232][ T46] usb 2-1: Manufacturer: syz [ 55.439932][ T46] usb 2-1: SerialNumber: syz [ 55.482529][ T66] usb 4-1: device descriptor read/64, error -71 [ 55.592631][ T66] usb usb4-port1: attempt power cycle [ 55.648910][ T36] audit: type=1400 audit(1781207171.580:36485): avc: denied { read } for pid=1041 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.670521][ T1042] fuse: Unknown parameter 'groĻ^sup_id' [ 55.677956][ T1042] mmap: syz.1.214 (1042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.722572][ T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 55.736944][ T46] usb 2-1: USB disconnect, device number 17 [ 55.852549][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.942547][ T66] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 55.963868][ T66] usb 4-1: device descriptor read/8, error -71 [ 56.093660][ T66] usb 4-1: device descriptor read/8, error -71 [ 56.102598][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.255433][ T36] audit: type=1400 audit(1781207172.190:36486): avc: denied { write } for pid=1045 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.332557][ T66] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 56.342563][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 56.353565][ T66] usb 4-1: device descriptor read/8, error -71 [ 56.472578][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.483799][ T66] usb 4-1: device descriptor read/8, error -71 [ 56.522572][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 56.592771][ T66] usb usb4-port1: unable to enumerate USB device [ 56.683777][ T9] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 56.691875][ T9] usb 2-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 56.702145][ T9] usb 2-1: config 1 has no interface number 0 [ 56.708376][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.712632][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.719946][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 56.733873][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.741896][ T9] usb 2-1: Product: syz [ 56.746167][ T9] usb 2-1: Manufacturer: syz [ 56.832679][ T31] usb usb1-port1: attempt power cycle [ 57.026252][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 57.036439][ T9] snd-usb-audio 2-1:1.4: probe with driver snd-usb-audio failed with error -22 [ 57.047880][ T9] usb 2-1: USB disconnect, device number 18 [ 57.061468][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.4/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.172595][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 57.193728][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.285955][ T36] audit: type=1400 audit(1781207173.220:36487): avc: denied { ioctl } for pid=1050 comm="syz.3.218" path="socket:[9075]" dev="sockfs" ino=9075 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.323571][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.330577][ T36] audit: type=1400 audit(1781207173.260:36488): avc: denied { getopt } for pid=1052 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.365281][ T1053] netlink: 'syz.3.219': attribute type 15 has an invalid length. [ 57.373105][ T1053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.512203][ T36] audit: type=1400 audit(1781207173.440:36489): avc: denied { ioctl } for pid=1062 comm="syz.2.222" path="socket:[10828]" dev="sockfs" ino=10828 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.562555][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 57.579672][ T1073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 57.593727][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.653428][ T36] audit: type=1400 audit(1781207173.590:36490): avc: denied { getopt } for pid=1089 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.674153][ T1090] SELinux: policydb version 122882019 does not match my version range 15-33 [ 57.683171][ T1090] SELinux: failed to load policy [ 57.688243][ T36] audit: type=1400 audit(1781207173.610:36491): avc: denied { load_policy } for pid=1089 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.737721][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.811419][ T36] audit: type=1400 audit(1781207173.740:36492): avc: denied { mount } for pid=1102 comm="syz.2.229" name="/" dev="ramfs" ino=11271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.852798][ T31] usb usb1-port1: unable to enumerate USB device [ 57.982552][ T311] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 58.132542][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 58.139333][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.148034][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 58.161170][ T311] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 58.170525][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.178621][ T311] usb 2-1: Product: syz [ 58.182840][ T311] usb 2-1: Manufacturer: syz [ 58.187450][ T311] usb 2-1: SerialNumber: syz [ 58.252557][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.349755][ T1122] fuse: Bad value for 'fd' [ 58.401829][ T1098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.412755][ T1098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.421562][ T31] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 58.430024][ T1098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.438777][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.443222][ T1098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.456846][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.476029][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.483780][ T1098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.489160][ T31] usb 3-1: SerialNumber: syz [ 58.510241][ T31] usb 3-1: bad CDC descriptors [ 58.514650][ T1098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.532822][ T1098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.555818][ T1098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.573731][ T1098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.592580][ T1098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.610661][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 58.631983][ T311] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 58.642317][ T311] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 58.653537][ T311] usb 2-1: USB disconnect, device number 19 [ 58.922548][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 58.972547][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.072573][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 59.078931][ T9] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 59.089191][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.098676][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.122542][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 59.128575][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 59.138359][ T1143] fuse: Bad value for 'fd' [ 59.138650][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.145805][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.150890][ T9] usb 1-1: Product: syz [ 59.150910][ T9] usb 1-1: Manufacturer: syz [ 59.150927][ T9] usb 1-1: SerialNumber: syz [ 59.168118][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 59.186122][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.205943][ T31] usb 4-1: config 0 descriptor?? [ 59.388932][ T9] usb 1-1: unit 0 not found! [ 59.398606][ T9] usb 1-1: USB disconnect, device number 17 [ 59.414313][ T410] udevd[410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.461256][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 59.475238][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.484375][ T31] usb 4-1: USB disconnect, device number 20 [ 59.782549][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 59.905770][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.914753][ T31] usb 4-1: device descriptor read/64, error -71 [ 59.921743][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.930239][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.938783][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.946994][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.955925][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.964087][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.972687][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.981518][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.990567][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.014467][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 60.162569][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.282557][ T311] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 60.352545][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 60.402534][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 60.433862][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 60.442643][ T311] usb 2-1: not running at top speed; connect to a high speed hub [ 60.451047][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 60.463508][ T311] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 60.472891][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.480999][ T311] usb 2-1: Product: syz [ 60.485253][ T311] usb 2-1: Manufacturer: syz [ 60.489892][ T311] usb 2-1: SerialNumber: syz [ 60.503834][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.514893][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.523991][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.532528][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.534395][ T9] usb 1-1: config 0 descriptor?? [ 60.698070][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.707153][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.718750][ T311] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 60.729499][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.740994][ T311] usb 2-1: USB disconnect, device number 20 [ 60.752208][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 60.760329][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.763576][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.771730][ T9] usb 1-1: USB disconnect, device number 18 [ 60.785199][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.902649][ T31] usb usb4-port1: attempt power cycle [ 61.025807][ T311] usb 3-1: USB disconnect, device number 16 [ 61.042667][ T1171] netlink: 'syz.2.253': attribute type 26 has an invalid length. [ 61.050518][ T1171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 61.122380][ T1172] rust_binder: Error in use_page_slow: ESRCH [ 61.122401][ T1172] rust_binder: use_range failure ESRCH [ 61.128604][ T1172] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 61.134144][ T1172] rust_binder: Failure in copy_transaction_data: ESRCH [ 61.142047][ T1172] rust_binder: 1170:1172 transaction to 1170 failed: ESRCH [ 61.154007][ T1171] loop9: detected capacity change from 0 to 7 [ 61.246186][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 61.262552][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.283852][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.353212][ T1172] Invalid logical block size (1050184017) [ 61.423601][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.433573][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.452518][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 61.461643][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.470981][ T9] usb 1-1: config 0 descriptor?? [ 61.672564][ T311] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 61.680254][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 61.680849][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.696836][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.713671][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.752702][ T310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.833731][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.843981][ T311] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 61.854986][ T311] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 61.868900][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.875203][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=0010, bcdDevice= 0.40 [ 61.884585][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.892709][ T311] usb 3-1: SerialNumber: syz [ 61.908257][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.914348][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.917820][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.930262][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.945205][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.958254][ T310] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.967361][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.976494][ T310] usb 2-1: config 0 descriptor?? [ 61.982639][ T31] usb usb4-port1: unable to enumerate USB device [ 62.099823][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.108566][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.117552][ T31] usb 3-1: USB disconnect, device number 17 [ 62.143484][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.152125][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.185076][ T310] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 62.194516][ T310] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.342998][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 62.350638][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 62.363954][ C0] ------------[ cut here ]------------ [ 62.369680][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 62.378336][ C0] index 327 is out of range for type 'const int[34]' [ 62.385076][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 62.385110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.385124][ C0] Workqueue: usb_hub_wq hub_event [ 62.385161][ C0] Call Trace: [ 62.385168][ C0] [ 62.385175][ C0] __dump_stack+0x21/0x30 [ 62.385206][ C0] dump_stack_lvl+0x140/0x1c0 [ 62.385233][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.385261][ C0] ? __kernfs_create_file+0x52/0x280 [ 62.385291][ C0] ? device_add_attrs+0x1b2/0x850 [ 62.385308][ C0] ? device_register+0x21/0x30 [ 62.385334][ C0] dump_stack+0x19/0x20 [ 62.385360][ C0] ubsan_epilogue+0xe/0x40 [ 62.385377][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 62.385408][ C0] ? __kasan_check_write+0x18/0x20 [ 62.385428][ C0] aiptek_irq+0x20cb/0x2a00 [ 62.385479][ C0] ? kcov_remote_start+0x1d3/0x3c0 [ 62.385502][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 62.385523][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 62.385543][ C0] dummy_timer+0x816/0x4300 [ 62.385573][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.385595][ C0] ? timerqueue_del+0xd7/0x130 [ 62.385619][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 62.385647][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.385668][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 62.385699][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 62.385726][ C0] ? read_tsc+0xd/0x20 [ 62.385751][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 62.385777][ C0] hrtimer_run_softirq+0x159/0x560 [ 62.385794][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 62.385823][ C0] handle_softirqs+0x1aa/0x630 [ 62.385843][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 62.385870][ C0] __irq_exit_rcu+0x47/0xb0 [ 62.385889][ C0] irq_exit_rcu+0xd/0x30 [ 62.385907][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 62.385928][ C0] [ 62.385934][ C0] [ 62.385941][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 62.385963][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3a/0x70 [ 62.385985][ C0] Code: bc 29 7d 7e 65 8b 15 bd 29 7d 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 74 2c 8b 91 c8 0b 00 00 <83> fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 cc [ 62.386001][ C0] RSP: 0018:ffffc90000097370 EFLAGS: 00000246 [ 62.386017][ C0] RAX: ffffffff8210d6e4 RBX: ffff88811a62ec30 RCX: ffff888102651300 [ 62.386032][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 62.386044][ C0] RBP: ffffc90000097370 R08: ffff88813689556f R09: 1ffff11026d12aad [ 62.386058][ C0] R10: dffffc0000000000 R11: ffffed1026d12aae R12: 0000000000010efa [ 62.386072][ C0] R13: dffffc0000000000 R14: 1ffff92000012e78 R15: ffff888101652800 [ 62.386088][ C0] ? __kernfs_new_node+0x244/0x740 [ 62.386114][ C0] __kernfs_new_node+0x244/0x740 [ 62.386174][ C0] ? kernfs_new_node+0x280/0x280 [ 62.386208][ C0] ? __kasan_check_write+0x18/0x20 [ 62.386235][ C0] ? _raw_spin_lock+0x92/0x120 [ 62.386276][ C0] kernfs_new_node+0x154/0x280 [ 62.386301][ C0] __kernfs_create_file+0x52/0x280 [ 62.386330][ C0] sysfs_add_file_mode_ns+0x1d2/0x280 [ 62.386349][ C0] internal_create_group+0x68d/0xeb0 [ 62.386374][ C0] ? sysfs_create_group+0x40/0x40 [ 62.386395][ C0] ? __kernfs_create_file+0x203/0x280 [ 62.386424][ C0] ? sysfs_add_file_mode_ns+0x1d2/0x280 [ 62.386450][ C0] sysfs_create_groups+0x5c/0x130 [ 62.386471][ C0] device_add_attrs+0x1b2/0x850 [ 62.386489][ C0] ? device_add_class_symlinks+0x260/0x260 [ 62.386508][ C0] ? class_to_subsys+0xba/0x120 [ 62.386529][ C0] ? device_add_class_symlinks+0xde/0x260 [ 62.386548][ C0] device_add+0x4e8/0xbf0 [ 62.386565][ C0] device_register+0x21/0x30 [ 62.386590][ C0] usb_create_ep_devs+0x156/0x320 [ 62.386609][ C0] usb_new_device+0xae7/0x15b0 [ 62.386636][ C0] ? __cfi_usb_new_device+0x10/0x10 [ 62.386663][ C0] hub_event+0x30c6/0x4700 [ 62.386696][ C0] ? __cfi_hub_event+0x10/0x10 [ 62.386712][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 62.386731][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 62.386758][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.386790][ C0] process_scheduled_works+0x7d4/0x1020 [ 62.386813][ C0] worker_thread+0xc51/0x1370 [ 62.386837][ C0] kthread+0x2c9/0x370 [ 62.386858][ C0] ? __cfi_worker_thread+0x10/0x10 [ 62.386878][ C0] ? __cfi_kthread+0x10/0x10 [ 62.386899][ C0] ret_from_fork+0x67/0xa0 [ 62.386915][ C0] ? __cfi_kthread+0x10/0x10 [ 62.386937][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.386957][ C0] [ 62.386964][ C0] ---[ end trace ]--- [ 62.594159][ T31] usb 2-1: USB disconnect, device number 21 [ 62.606692][ C0] ================================================================== [ 62.606725][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20e9/0x2a00 [ 62.857917][ C0] Read of size 4 at addr ffffffff8670ef9c by task kworker/0:0/9 [ 62.865614][ C0] [ 62.867983][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 62.868024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.868044][ C0] Workqueue: usb_hub_wq hub_event [ 62.868074][ C0] Call Trace: [ 62.868084][ C0] [ 62.868094][ C0] __dump_stack+0x21/0x30 [ 62.868135][ C0] dump_stack_lvl+0x140/0x1c0 [ 62.868174][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.868212][ C0] ? __cfi__printk+0x10/0x10 [ 62.868253][ C0] print_address_description+0x71/0x210 [ 62.868290][ C0] print_report+0x4a/0x70 [ 62.868324][ C0] kasan_report+0x162/0x1a0 [ 62.868357][ C0] ? aiptek_irq+0x20e9/0x2a00 [ 62.868382][ C0] ? aiptek_irq+0x20e9/0x2a00 [ 62.868405][ C0] __asan_report_load4_noabort+0x18/0x20 [ 62.868431][ C0] aiptek_irq+0x20e9/0x2a00 [ 62.868456][ C0] ? kcov_remote_start+0x1d3/0x3c0 [ 62.868487][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 62.868517][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 62.868544][ C0] dummy_timer+0x816/0x4300 [ 62.868586][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.868616][ C0] ? timerqueue_del+0xd7/0x130 [ 62.868649][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 62.868688][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 62.868712][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 62.868752][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 62.868793][ C0] ? read_tsc+0xd/0x20 [ 62.868830][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 62.868864][ C0] hrtimer_run_softirq+0x159/0x560 [ 62.868887][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 62.868924][ C0] handle_softirqs+0x1aa/0x630 [ 62.868950][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 62.868984][ C0] __irq_exit_rcu+0x47/0xb0 [ 62.869009][ C0] irq_exit_rcu+0xd/0x30 [ 62.869032][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 62.869063][ C0] [ 62.869072][ C0] [ 62.869081][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 62.869108][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3a/0x70 [ 62.869138][ C0] Code: bc 29 7d 7e 65 8b 15 bd 29 7d 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 74 2c 8b 91 c8 0b 00 00 <83> fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 cc [ 62.869161][ C0] RSP: 0018:ffffc90000097370 EFLAGS: 00000246 [ 62.869183][ C0] RAX: ffffffff8210d6e4 RBX: ffff88811a62ec30 RCX: ffff888102651300 [ 62.869204][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 62.869221][ C0] RBP: ffffc90000097370 R08: ffff88813689556f R09: 1ffff11026d12aad [ 62.869241][ C0] R10: dffffc0000000000 R11: ffffed1026d12aae R12: 0000000000010efa [ 62.869271][ C0] R13: dffffc0000000000 R14: 1ffff92000012e78 R15: ffff888101652800 [ 62.869293][ C0] ? __kernfs_new_node+0x244/0x740 [ 62.869330][ C0] __kernfs_new_node+0x244/0x740 [ 62.869364][ C0] ? kernfs_new_node+0x280/0x280 [ 62.869398][ C0] ? __kasan_check_write+0x18/0x20 [ 62.869425][ C0] ? _raw_spin_lock+0x92/0x120 [ 62.869464][ C0] kernfs_new_node+0x154/0x280 [ 62.869498][ C0] __kernfs_create_file+0x52/0x280 [ 62.869537][ C0] sysfs_add_file_mode_ns+0x1d2/0x280 [ 62.869563][ C0] internal_create_group+0x68d/0xeb0 [ 62.869596][ C0] ? sysfs_create_group+0x40/0x40 [ 62.869624][ C0] ? __kernfs_create_file+0x203/0x280 [ 62.869663][ C0] ? sysfs_add_file_mode_ns+0x1d2/0x280 [ 62.869688][ C0] sysfs_create_groups+0x5c/0x130 [ 62.869718][ C0] device_add_attrs+0x1b2/0x850 [ 62.869744][ C0] ? device_add_class_symlinks+0x260/0x260 [ 62.869769][ C0] ? class_to_subsys+0xba/0x120 [ 62.869799][ C0] ? device_add_class_symlinks+0xde/0x260 [ 62.869825][ C0] device_add+0x4e8/0xbf0 [ 62.869850][ C0] device_register+0x21/0x30 [ 62.869884][ C0] usb_create_ep_devs+0x156/0x320 [ 62.869911][ C0] usb_new_device+0xae7/0x15b0 [ 62.869947][ C0] ? __cfi_usb_new_device+0x10/0x10 [ 62.869980][ C0] hub_event+0x30c6/0x4700 [ 62.870013][ C0] ? __cfi_hub_event+0x10/0x10 [ 62.870034][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 62.870060][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 62.870096][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.870135][ C0] process_scheduled_works+0x7d4/0x1020 [ 62.870168][ C0] worker_thread+0xc51/0x1370 [ 62.870199][ C0] kthread+0x2c9/0x370 [ 62.870230][ C0] ? __cfi_worker_thread+0x10/0x10 [ 62.870268][ C0] ? __cfi_kthread+0x10/0x10 [ 62.870299][ C0] ret_from_fork+0x67/0xa0 [ 62.870323][ C0] ? __cfi_kthread+0x10/0x10 [ 62.870353][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.870380][ C0] [ 62.870389][ C0] [ 63.317466][ C0] The buggy address belongs to the variable: [ 63.323535][ C0] .str.25+0x1c/0x20 [ 63.327455][ C0] [ 63.329810][ C0] The buggy address belongs to the physical page: [ 63.336323][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x670e [ 63.345188][ C0] flags: 0x4000(reserved|zone=0) [ 63.350209][ C0] raw: 0000000000004000 ffffea000019c388 ffffea000019c388 0000000000000000 [ 63.358867][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 63.367485][ C0] page dumped because: kasan: bad access detected [ 63.373957][ C0] page_owner info is not present (never set?) [ 63.380084][ C0] [ 63.382443][ C0] Memory state around the buggy address: [ 63.388114][ C0] ffffffff8670ee80: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 f9 [ 63.396217][ C0] ffffffff8670ef00: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 [ 63.404506][ C0] >ffffffff8670ef80: 07 f9 f9 f9 00 05 f9 f9 04 f9 f9 f9 00 f9 f9 f9 [ 63.412694][ C0] ^ [ 63.417589][ C0] ffffffff8670f000: 07 f9 f9 f9 06 f9 f9 f9 07 f9 f9 f9 00 00 00 00 [ 63.425716][ C0] ffffffff8670f080: 00 00 00 00 f9 f9 f9 f9 00 00 f9 f9 00 01 f9 f9 [ 63.433790][ C0] ================================================================== [ 63.441876][ C0] Disabling lock debugging due to kernel taint [ 63.448038][ C0] ------------[ cut here ]------------ [ 63.453491][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 63.462081][ C0] index 328 is out of range for type 'const int[34]' [ 63.468787][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 63.468816][ C0] Tainted: [B]=BAD_PAGE [ 63.468822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 63.468833][ C0] Workqueue: usb_hub_wq hub_event [ 63.468853][ C0] Call Trace: [ 63.468859][ C0] [ 63.468867][ C0] __dump_stack+0x21/0x30 [ 63.468894][ C0] dump_stack_lvl+0x140/0x1c0 [ 63.468918][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.468943][ C0] ? input_event_dispose+0x2f5/0x6d0 [ 63.468962][ C0] dump_stack+0x19/0x20 [ 63.468986][ C0] ubsan_epilogue+0xe/0x40 [ 63.469002][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 63.469031][ C0] aiptek_irq+0x1f85/0x2a00 [ 63.469047][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 63.469067][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 63.469084][ C0] dummy_timer+0x816/0x4300 [ 63.469111][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 63.469130][ C0] ? timerqueue_del+0xd7/0x130 [ 63.469152][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 63.469179][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 63.469197][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 63.469225][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 63.469251][ C0] ? read_tsc+0xd/0x20 [ 63.469275][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 63.469298][ C0] hrtimer_run_softirq+0x159/0x560 [ 63.469314][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 63.469339][ C0] handle_softirqs+0x1aa/0x630 [ 63.469357][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 63.469382][ C0] __irq_exit_rcu+0x47/0xb0 [ 63.469398][ C0] irq_exit_rcu+0xd/0x30 [ 63.469414][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 63.469433][ C0] [ 63.469438][ C0] [ 63.469444][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 63.469461][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3a/0x70 [ 63.469481][ C0] Code: bc 29 7d 7e 65 8b 15 bd 29 7d 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 74 2c 8b 91 c8 0b 00 00 <83> fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 cc [ 63.469496][ C0] RSP: 0018:ffffc90000097370 EFLAGS: 00000246 [ 63.469510][ C0] RAX: ffffffff8210d6e4 RBX: ffff88811a62ec30 RCX: ffff888102651300 [ 63.469523][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 63.469534][ C0] RBP: ffffc90000097370 R08: ffff88813689556f R09: 1ffff11026d12aad [ 63.469546][ C0] R10: dffffc0000000000 R11: ffffed1026d12aae R12: 0000000000010efa [ 63.469558][ C0] R13: dffffc0000000000 R14: 1ffff92000012e78 R15: ffff888101652800 [ 63.469573][ C0] ? __kernfs_new_node+0x244/0x740 [ 63.469596][ C0] __kernfs_new_node+0x244/0x740 [ 63.469618][ C0] ? kernfs_new_node+0x280/0x280 [ 63.469640][ C0] ? __kasan_check_write+0x18/0x20 [ 63.469657][ C0] ? _raw_spin_lock+0x92/0x120 [ 63.469681][ C0] kernfs_new_node+0x154/0x280 [ 63.469703][ C0] __kernfs_create_file+0x52/0x280 [ 63.469746][ C0] sysfs_add_file_mode_ns+0x1d2/0x280 [ 63.469763][ C0] internal_create_group+0x68d/0xeb0 [ 63.469784][ C0] ? sysfs_create_group+0x40/0x40 [ 63.469802][ C0] ? __kernfs_create_file+0x203/0x280 [ 63.469827][ C0] ? sysfs_add_file_mode_ns+0x1d2/0x280 [ 63.469843][ C0] sysfs_create_groups+0x5c/0x130 [ 63.469862][ C0] device_add_attrs+0x1b2/0x850 [ 63.469878][ C0] ? device_add_class_symlinks+0x260/0x260 [ 63.469895][ C0] ? class_to_subsys+0xba/0x120 [ 63.469914][ C0] ? device_add_class_symlinks+0xde/0x260 [ 63.469931][ C0] device_add+0x4e8/0xbf0 [ 63.469946][ C0] device_register+0x21/0x30 [ 63.469968][ C0] usb_create_ep_devs+0x156/0x320 [ 63.469985][ C0] usb_new_device+0xae7/0x15b0 [ 63.470009][ C0] ? __cfi_usb_new_device+0x10/0x10 [ 63.470033][ C0] hub_event+0x30c6/0x4700 [ 63.470054][ C0] ? __cfi_hub_event+0x10/0x10 [ 63.470067][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 63.470094][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 63.470117][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 63.470142][ C0] process_scheduled_works+0x7d4/0x1020 [ 63.470163][ C0] worker_thread+0xc51/0x1370 [ 63.470183][ C0] kthread+0x2c9/0x370 [ 63.470203][ C0] ? __cfi_worker_thread+0x10/0x10 [ 63.470220][ C0] ? __cfi_kthread+0x10/0x10 [ 63.470243][ C0] ret_from_fork+0x67/0xa0 [ 63.470257][ C0] ? __cfi_kthread+0x10/0x10 [ 63.470276][ C0] ret_from_fork_asm+0x1a/0x30 [ 63.470294][ C0] [ 63.470299][ C0] ---[ end trace ]--- [ 63.906215][ T9] usb 1-1: USB disconnect, device number 19 [ 63.912189][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 63.933873][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 63.933893][ T36] audit: type=1400 audit(1781207179.870:36504): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.988863][ T36] audit: type=1400 audit(1781207179.870:36505): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.011177][ T36] audit: type=1400 audit(1781207179.870:36506): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.032952][ T36] audit: type=1400 audit(1781207179.870:36507): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.054228][ T36] audit: type=1400 audit(1781207179.870:36508): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.088107][ T36] audit: type=1400 audit(1781207179.870:36509): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.111230][ T36] audit: type=1400 audit(1781207179.870:36510): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.282679][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.432546][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 64.439120][ T9] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 64.449534][ T9] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 64.462496][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 64.469170][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 64.478273][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.486965][ T9] usb 1-1: config 0 descriptor?? [ 64.493099][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 66.418712][ T311] usb 1-1: USB disconnect, device number 20