last executing test programs: 37.737179991s ago: executing program 0 (id=485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8000005b) preadv2(r4, 0x0, 0x0, 0xa07, 0x9, 0x3) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x180000, @empty, 0x10000}, 0x1c) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x4}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000002c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xc100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r7, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)="e349b6b60fe289aa6288800ab6fc70bbcd730b32e7b92e21e8e4d27090138b3c2e528e76ea8ba9e67d10865ac6391d62b1f19cadbbc8cbc93abcb7da164e28555071a67349a3cc16cd69246e7c0886cd27759a8404f4ef0ce4d3e77c4f96dd06c4aeb8b62720ba63e145273521c50183c77e4ae588fb219f0c841366658e9468421722a966848db7a71b2d587dd9f99451f3320a78a96f10c287d166bc8ca7fcaf55b3d92da4b96944edbb93e412b48f1788b4ec586b8dfdcc37e9838073a1fdd05ecb886db72aa8b14b7d5da44eb504b6e816525cbd057909b692d3c0ca25a9a0a804d398b07001c982331fa255a32aa1f9155281170e71", 0x3}], 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) (async) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 37.501402097s ago: executing program 0 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5e6681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000140)=0x2, 0xc, 0x1, 0x0, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.501190887s ago: executing program 0 (id=487): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xac1e48e5371a6b88) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x8080) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ff) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 37.500302127s ago: executing program 0 (id=488): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1}, 0x1f00) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRESOCT], 0x0) 36.170283722s ago: executing program 0 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x1b, 0x0, 0xd2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 35.904589048s ago: executing program 0 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x132, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) clock_gettime(0xa00, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x10, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0x25, 0x30, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x377}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x9, 0x8, {0xa, 0x25, 0x25, 0xa28, 0x2, 0x9bf2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x0, 0xb, {0xa, 0x25, 0x25, 0xffffffff, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 19.758388808s ago: executing program 32 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x132, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) clock_gettime(0xa00, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x10, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0x25, 0x30, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x377}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x9, 0x8, {0xa, 0x25, 0x25, 0xa28, 0x2, 0x9bf2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x0, 0xb, {0xa, 0x25, 0x25, 0xffffffff, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 5.81951086s ago: executing program 4 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x32, 0xffffffff80000001}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000100)="64430f09c4e1b05d752a66bad00466ed0f01c342d9900020000066ba410066edb805000000b9001000000f01d92e36450fc79902000000b9940300000f32c744240049990000c74424025ce7d0ddc7442406000000000f011c24", 0x5a}], 0x1, 0x38, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c002001", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffffffff3900000004000d80"], 0x18}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) mount$9p_fd(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000003c0), 0x2, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0xffffffff}}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) 5.596529126s ago: executing program 4 (id=633): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000000)={0x0, 0xf, 0xc, {0xc, 0x21, "02008bf8fa57a55e4027"}}, 0x0, 0x0, 0x0}, 0x0) 5.596024546s ago: executing program 2 (id=634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000019002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010100000000000000000000000000000000000000000002000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.525995767s ago: executing program 2 (id=635): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe7436000) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001d00)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x200000007f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x5, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.215990845s ago: executing program 2 (id=636): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}}) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851) syz_usb_disconnect(r0) close_range(r1, 0xffffffffffffffff, 0x0) 2.812321398s ago: executing program 4 (id=641): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002c80)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f0000000200)={0x40, 0x31, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r3, r3, 0x0, 0x7f03) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)=@buf={0x28, &(0x7f0000000100)="49d969f7c6470edbec659370d072bad0b011002b384e36397f243f91575bb0ca71cf111b9624dc65"}) writev(r1, &(0x7f0000001700)=[{&(0x7f00000003c0)="8db52d573748291118f2b2cfce6f692e58307f1c5e7bd32bfa9aa850ea1ba7f646d80060458dc00fe677cdfe8d583f4eff8a078e1b900210388327687e13fd5a8dbf1473aa3942a1c484368a913759a42b9daaed177f828aa764b159b380500e668f054de09e1befd9182ad7d113135437e0dea91442fc92a508dfdebe069a1bbbea04cc7a2171295b5ed55e1206f9eb1677c0667ac8ae9af3", 0x99}, {&(0x7f0000000480)="a9dcf677cd8568b2366926e8fa788de9cbbe7bd14e28d694fd44d2ac45989a3b4032e1b37a5904", 0x27}, {&(0x7f00000004c0)="58d27f53d16d5d50bc6174f0f3ff1ce2597d2e0baadc04f666538f7d7a1586b73a26079e049abb17da4563b33a8d5aa866dc096d04174f9113a162d56afe39247e07e5541ddc797fa5f33b1e8b4196f6b18abe7fb251c6b87102", 0x5a}, {&(0x7f0000000540)="7fa1e634bfa05988bf0b5971381b468e1bec08e4d739bde5752b31f7f168e04dfa05fb495f17f1d4dc51d41991ec0961f4750d65c15660cbef66d221c0bf6dbd33f00647b2c689fffdb13be0a009f94a1bcb4cd93724e614ab4a68bca4ed3e39179d0736d7df2e2ee079e0245e4fee612e5e81aff4a0b27ea81ce1d0fe9287d916c359c87197213557ff12e110daf6aec6612128055b8fe46721fe6cf223a23d8236c64317b4ae744e219dd4339dedd7d6dc52ce63efb1d6df111c19a4ff35e8054dee7d56290781", 0xc8}, {&(0x7f0000000640)="4ef0ca12ea285f69a0aba244285b212665d53455b1944c6d940a3eab4308ff96bc0c3449c84bb496a6e87f0c92e9ef133652b0dbd8f56e3e2d1fc4cf327a70ab65129874dfdf10e01bff26547bce1ba00f68c728a22ed732ae5f6fad9e9d2ea90e528921c0e8cb7e264489c350931fc06da6461961983c9e1e7eb408309a", 0x7e}, {&(0x7f0000000700)="79f13e891baec431414d6edae91859322779095990a98c5bbfaef1e4a2038ab6bc2ff4cd55a79f176e5b0696acf3763ab21d64610c68a0227379d73d10df7685fc9b3d75f19645e370d6487ae9d75021479fdf438f647d10021e8667b67a3452a4d2024b51c43358e920938d3254bcb98f1ea1b952f84e7c29c2c40fe9e60b07301cc09c63cdfc8870ec472e2b07aaf61c7532c4209186519b242f2ef3199cf8b4fe0beaaed81f1ad9a3d8e6833be14a376539d248a60d68253c517aef39ac75aa42a3daf4d7c8bb5c2a6eac3670d7fef490128966964a07229e2aee36e6f5e5721b02b5fdd73e0fb8cc74c4ed2e424b7028f41ffa0d4a850b98a79fca13c4b3a9c5d25af88eee29ddfd675af652d1d15fb6b9be2b02e383d19bd52ee64289914d6d072445988d63947c936710d4fb7c1f9d7ceed250f0ff2e602fe3e7810d0827bc7e58d61ace6279d445c6a3e20037456a597065f8def8aafad5452c24b8f02a40e9fb0fdb3eb534e83331b11f37d93fe30c19e858fb0b38174e740612791a097d80d017d3a7431ddc406d2ccab7099ab7f5d75fbd966e1f91229e2e3ee8bad11324f82641ba8cad2a08974ff1868e1c563b8d20751b36ce88172607210f15e7243d10ae9a747057d713318c0b535075e02ba828e2551fe564ac9960b5bfc7c8077a3ae9d036f6a967c785105d4bcb19c8cc96016a6b494d630f7dc484eb4e7fbaf040d490b33305182b908fde491763859dc8c936bc0dedac2fe1cba1b8e469d39699ce0b1de3a92616a4498652f259750f36fc7847ecd3411b3195b9e24d05415d64ba51763588f1b0c202a8efb44f401e179575384c178104df2572e37a2884f4751f292a1f4618d4bf5e8556df6a349a79a49b36fd6326ccd6353cd6f40833b061c0887069663faefb677d4d2c386ddf8c39b8f61bbcf419514ca350b3a5d72ce76da5a10745680c0b767e603059b056b35da351bcaa3491bf1284442a611ea28d5254ce04576216497bc4da9e3389de9008fd179e331ce7fc179713836c357d8e76256bc50b2c93d8a00aacdc3cfbcb9acc6f22d21ad995ba9fac55ffc924b27b6f218445ec254993b8a5ce22b4b98c39e6e1f9d96f57931aca3b53f3590760929f92f218385b586652a2a0ad747c5dfd2f19124082d4144c8a3e6bc40d5b2b0c0d3a87ffb947050860d7045276fa60577205d781ce2f917ad5c75b9979229b16a5839e16497edcfa31f7444331e2421f7702adfcbb1b46bb02e816a44d7258df1232ffca7af78dddaa30b8f591852282b2b1879fc99522957d758674e9b7c6b5a6071b70ef01bbbc334dda951dfe4791e04c9d4b011aae39302f6f8a7143ab668e9c5886a5de6543de495d840d6e378be54d5f061ca6d61c5cf4dee31cb359f664b040347a748914c6cea1ad3a620cdc4c0d938a572dcbc21788c57def61f3f1db87fbcffd2370e5ac253b715604b2d3f18b5753ce044c50b5c7bab547f2c93bd45b5251b182881f261d8bc8d485b08875f4b1d77de5f5b91c126968b4eeb746cd660fbca8495a24aad50a858ddaf22c777983d562c9c4c98d4b26840d663a35e82538dc9af9c020591edebf1e16ea654d62908bc3795fa79ce9dbae17c87b112b95e65722d1c0904154da701a5da855585a1ed20b952823968c7ebe37eeeaddd428e610917a58243d6c29d5b507ce5b2bdf5333f2f3e0e12f16c80219117366bb0a6be364d6da0cbf860fdabf0bbd4f01c599bcad72b49a7fb53d66b8bdd0f81456b7c645caa13d9aa9211751fb4092ae5acbfd2993c5d6b716814685674a7a82ed14d8f36439424077b91f2d461451942d44a6038ee28369f1509c90f9920427bf90afb5e44ec7159066ee3f2582d239ebf9856d987ea0b739a1f8fe511326ade0babd0410be95c3c8eea6637f8984b6ef382a953e04f9d1ffd5d3aa3f56614dfcbe70fbac5c7d6f5b6edb3e9aa02116e1ffa7342d148a5bac1238c67fa98af73f7bc9e71ce0b2493c964f2b74c5ab2b3ed5692b361e4acfad19e8cb456ab68fdf59d819119e89fb9bdff4b898465ce2abaab43f22f52eeb9906a2f8511e74dfc9f69db1ceee12d87459f9e55c31eb69680627ffab91dcf5d52b5c4c17ebcf81008f14b43b4f5ecb38aacfecdb4082aa9cf5805c67601eb3201d0ace18b1e79acacabbfee550f82491ac9f44cdf82ac61f3815f3a19d6971b0022a62d9aca3ededb3e98469d2c1cdc7765d0bc884785187c5ac558b01aabcf47383a2991be682792073f9f7ac446e59e7dc5a0a2e6034416a12ebd0d2d51e8946dd075770650bb1bf354d0624b01f0c712cd85c1248eda5508d7447fd12442a11b5cd08d5747c6932b029bc4c3aa8e775e7bd77081e7fa917f8aedcd5fdc4b3a44a3ee2ba92113bfb7eb3855bc820d933a6c3bd71e13013b4bca1dedb2bd42220ec5bf2cd2e821b8844ae00424e4cca5825b9e2b66bd66f55b91711758afbb32270c1616d5d8050bf28f8bf3bd230cf4545b9f56d4329a0d39ba9dd5ee6eb49f6e2bdd6b914aa90ac86fbb48c9e8bdcf6d3129c74ddc7eefdbcafdfc6800fec94c6b1b833b43532039debcdae5cf0818ac1351f29ae6887aa605b390452760b2e2e1bdbc199ce084d0b77f6c99c54dd0bc57fe22cca414e764a07becd645bf09f6d43a485b04d481a5e762412134cd7a874241ca905925058c2c42f898ea26fa902256a613a077d550571c20e12a2ab1850da50da0e5f76efa049a85c047449df7338d19db6fe39671b086c7299c6b25a08c9c76670824a6591bdb77f2dc8f6addde61a1fbfdeee83b068fe5b4a8743fd5e86fb14e41082c2bc71c28a9efa5f021fa4626caeaa51383cd5f8c3bec792024de5860c999b56b9ea5f160a0b804ab8118a23acfc228379ecad48665a81ca3eaf7a04339bc05445eca8f0e27737917eee24301053a6bd8caf8b9ef19ff468e57922e2a39d1c3b5903487ca9a3321bded7d920efabaff79b5e9bab98cf8a21da1a0a5c5d6b35c389a972d8157cbc72e8dade31cac6940c0a752f57b7f2f5078fe43a3ccf4bd0865e0dff138e84c44e010b4dd0bf96f3463add2c97f0565518cdb4caaae2b3c1cd2aaa90736ccb06162fbaeaf6375d8880eae897f6edcb5d5c253a7e6631d2f7694b52ebdb4190220c9062603a2d72224180b297e1689e3a3a22853af8620c652e7cf7f76610a07598f9cb665c6f904d4332ec79befc33857046bf97ac80ec58c149e719abf587726cdd41309f191ed496d46c70bbdf2be4b3f17bcefc05dc10d7401acb88733b7ca2b799a24733b5b64899f3eceb3e2f4190b637d1da9be7c3fb76a3c00028ed5217d9a7db903f23eddb6451c3844fda73786097cc4663194c8293453bfa918319800397f1c37107fbe149845efe76a058b345fa76520e92b492c9b954f5d7c6de89cd419d6ef0047dd32349daae707e054e0f362b767e281e9da7961630e966618447e98f8b43b1bc0ed8a2a15a0fc1a911dbae9d16c078abffcaf1a7655a48bcfdc969de03177e1a11c7c277feef8d67cb80b47e093fbfc37a0444e2216f0a0ee33c48f09b326a89ba34eeba0678b24b8de9d31c416acf073ce37c95d5c3717c65e37f9135637e25bfdd52538b44bb3acc74a70897109b6839289124efe8a7219191d796eebce4cb9488a91826d3fb7e7a003d94b62b433879050ab57789398e44b05a9a3d894638fc384c9c84bfef805565be2ee829db79a7c6c468cd8fcf252b89eabb7943869cc56f408da154124e57307d9c245f315c41cef2754176ae31d7a1692b87a6b44f404254574694cc2fc403f023400b0d40d7d76bc68452a399e326e9571a212e1fbafc4341afff73883c9e5145edf6797445b84b7ab6d6cc3391ecbadf68dc5584b574f9485e574f504ce203a5ae4ee704791fc7d60583b3dc69d6cd843ea03206fd5730dbd378c422dc9806f3d34ef437b465c46126d17ec87a47d3c9539ef34ff1257b7282a121cda29f61e6c3075ae87112c92e941b67c7ca2ed5e1350933dce9ecbf728c8e22e14417cbd0f8fa2112478c7f0f29c648947745679a044679876b667ec9b2aa0fa9d50447071a2ae10882e351f7910c315c5d96965e4706fd724e13367f48f9738316a758e6c155535edcdf3ac901dcd0b405f0d2c4cfda157af635bbddb370b83fe70f7244c76f6ab0c6e402548033e7e4086bdf806364f9e8a4289af0155fc51bfa7bf32fba336db1b3ff373dd23319f48bd39014b7f5f25bbeca174af1562f7f788c620deefa91e74e6fc9ef202535d91e8d7f7296b2ccbb28c3fa7546838802ec9f01440366bfd0ad936e60c53ada4869c5289237840b031056061f71e87a90a429e5ea8acb4af21ae2cde0ccca5d1e970c7e64fd42226caf3389c81d228332487facdf20f5cdaee02dcee1e2979d061e8d0867036284dc4635468687db12d67d4b61a804d44eb56ae7fb548c2327758d54957c6a994fa1e6d537dd3b4d46fdd0049f2d6fe36f379ae0382668f01a0514ee3d47a3a520e8e686f8619dfd5b4bb5438588f012128f7f00eb3267ecfffdf042a9b0ce0da766e91280871370b33d4ac799c7aa3edda0af6891687fe584f1a5e4376c7241d03220f48dd992e58170240870b573e9523429b03f58c1a0880721e2b7eab3a249d22aa2c60f84ed54fadc0eb0bf7da3f2a39294897ec7e91d6c28d5f61c66328679ccf1d41d6039c216e7bb0b1589b0f850bb5bd1bdf53d1b0c7c5f094dc6df50ff67132b2c371c1ba9019bb12cb3e4479b8b770a8f4bd0ffec091504eb8053fcca051109a159a7ba799f2480dbb6f79a38420b976d5706a48d1e5115b447f8233fdbe5597df5adf1ca14ef3a5884c582c1b3af03ccf9a315112ba6e6d537a2c058235a53c4b58bd15f1de0be3641c4b8687466952128e691d3901ddd89cf69997df5feca9ddd7796d401384ac4dab0162a4a3b0a129344cc11d3e026e1cea8b12cb4e6e8da61f3689b99fecbf9c1c69fad125bbd8fb663998760f7cd3f8f89634869e48df3c879df701694277f591e5310b62df646436bd25d65bb8f1324778c97cc2c849fde8d0517e81b05b14fd4e33979042fa650792e4dea77d0c20b7b0cb61bd3a5c21425bd9499df6cf74758c79e6e30024c516df53936800d47df7f9f6f5e86ec5013d4d2eb8c0b5a07513f23a95d7471cedb34f0243ec7b7b760c1faaa8f492a0855d29749b7033b9f8091ea3e22a9c6264852cc88d69254379ba63231f53d7721ee7dd55d90d88507cb0450a186f23b355c5291f0ec2548c198c6a1ff9dbaec1dfd3bbc0e1ff2c6e25e1d1f0465f15256c105ec232997b5b45e2a51fcff8118465fda429d16730e95c43ee04b0cec0d50ca7cf97d89d6456e9ee2af86330abd5b8c12ae4fcae67fbd52a219e3495417f5dfc877d0b3c045f58d01843d2337b40ab7f7a81c24ff833a5201183bff5e940385627faafc208777f22007032e07ddc18bd2e953565a2d44ab5daf36675b2b66629c2cde7651ca1f9a912af1413540863aa568d248e7408bebd2233103e804b43a3040fbc18327c03ad8b9f09a3291d1079e4bd7df49dd40685812b6056006204570df14a8c050027fd19152514dd5fe4263fbcd2388bf071ce241bea9ffccc3f2ee6adf7394c3055ac7ce56b2909495dc16cb30146d01feb833ffe30b35274423a2c9da6034a70dda815cfbeabe6e4704b3cf001263f0397ae0ec05ac034d12e974ec6d43fc494538859704a55fb1c2db9cdb165d470d8733574a23ecc82ce5411de53f6ca770", 0x1000}], 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="660000000001010400000800141a000002000000240001801400018008000100e005000000000200e00000010c0002800500010000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) 1.96993328s ago: executing program 2 (id=642): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x6, 0x51, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x4, 0x0, 0xb1, "", [{{0x9, 0x4, 0x0, 0x4c, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "1ba895d4"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x1ff, 0x3d}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xa9, 0x3, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x29, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) syz_open_dev$loop(0x0, 0x71ffe2ad, 0x8000) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x44040) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x89) (async) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) fcntl$setstatus(r5, 0x4, 0x42000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000f"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x2400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfe000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x40000000, 0x9cdeff16}}], 0x18}) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f00000004c0)={0x2, 0x0, [{0xb, 0x1, 0x1}, {0x0, 0x7, 0x4, 0xb, 0xfffffff8, 0x200, 0x2}]}) 1.55976515s ago: executing program 1 (id=643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000000100001a002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010100000000000000000000000000000000000000000002000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.492541632s ago: executing program 1 (id=644): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe7436000) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001d00)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x200000007f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x5, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.330989956s ago: executing program 1 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x25a401, 0x0) r1 = syz_io_uring_complete(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_batadv\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x101, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) close(r2) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fstat(r2, &(0x7f0000000040)) fstat(r2, &(0x7f00000000c0)) 871.774758ms ago: executing program 2 (id=646): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000240)={0x0, 0x80000000}, &(0x7f00000003c0)={0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x9) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x4, @tid=r2}, &(0x7f0000bbdffc)) chdir(&(0x7f00000001c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418efffe0004fcff", 0x58}], 0x1) sendfile(r3, r4, 0x0, 0x20000023896) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r8, &(0x7f0000000600)="e67ab1415f2ce290f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c6bdf5fc2251eda45a465e64de685865063ff5f776983521685b3a3206ce46af9d586dd02dda5defa42c86b8c26de340e02c25f5801ca2e4fe456d3c9dc8599f9a3fc2b5152b9d2f123697defb2c35e0800", 0x7c, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181c42, 0x1f6) setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) socket$nl_xfrm(0x10, 0x3, 0x6) 564.482316ms ago: executing program 4 (id=647): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, r1) setfsuid(0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0xfffc, 0x0, 0x2, 0xa, 0x0, 0x20, 0x2e}, 0xfffffffc}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00', @in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'wlan1\x00', @local}) ppoll(&(0x7f0000000200)=[{r0, 0xa158}], 0x1, &(0x7f0000000280), 0x0, 0x0) 521.659677ms ago: executing program 4 (id=649): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000380)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="41ee3199b6856bc1f6d80ae2789fb9e156dacd817f22c8bc7eea5b3785c5650245480d2122f8c3bc58f951d3a6d6506689a1afdc5adf0b9ac91b8473ba44464bb5d817c30e8c6491f2f76f43aba21452ef160ac67e", 0x55}, {&(0x7f0000000400)="dfda529d3a3825d564c1becf20b289a028d3538dae2e04677ca60e00f1ffc802a33561096e8d8167f1b5ea9faca17bb5082712b72335a4040bb2458917dd38dd22123755ee9117552dae27e3aac2013eb31211e6d235391684ab15cf92be4dd0e545f9457d5d20ccb79c07578864abcfcc69ad3035baf3bfd9f1fb7d9fa866523288455713dd131f91eb0e434bc7d0d0f75b54a6d38d4ec8480ec71654849ec85857e0c5791968", 0xa7}, {&(0x7f00000004c0)="0f00000000000000754739a0b0c4520ad47aa2c8ceb629e2da38f31cea33a3dfd7d49c127e403832182aea5bbe1cd5b3867f660ae5458a83c780ef21fcd602bcaf82716aeaf8a38dabbafadf6f34e2cf5a697ec4a88279324c095f6031d4bc5ddd9b082e047d81e1a048d0de0d777fb50eb968a7046037a366a2acc5f37e2d3a537fceac47e337dc6d6c43a3c1ea1850baa5dd8e9b68a768d45a060cfd03b126f84d0d31a6e2316a9a7405c48a4ef94dc0133e841bb6fb875457bdc3dea251ad1b0c300000000000000000", 0xcb}, {&(0x7f0000000600)="73b8a4eb161148bba42553ee58a3738bf76e409dcab8ed6bc7766939979698db02950e86900614f6bd78a8efab894a757d58f725f0a94a289ada35a3307470413cd00d0bd2b661849ec1dc28c14ce007c4e85f650d10b4398fc61368dd2890f48e889712196c257c585ba186bb4ff18a5a07bef0ae2527381d4c3b53c6723e83966acdb73f74ab7866d9b6ea68b435b1a415ed55cbc389a00cedb1d20938a5fe5d47b4cb2b271db0be179563606e3149c58f03c340939b6671d188b48fb80e8e01e680c081b760bc99b1ad0dc3", 0xcd}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="10100000000000000101000001000000946547f2e08b7eb22e52e68cb4ddde03c4328533060aa4ef39bb278f64b3224cdb6f8cbaeb975c0a88455685c682d7b2b68a99b1e1a2825e57508d91c650e2b7dd7623fda77f3e3cf7577b0395107efecc58caafebc6892a79b8499145c709ce5e7a25e4a0cf2192278ae33e792f6e931fb301514028dd4428966f7e862eee4cf112e2b40cbaf9bf65ff0d7363e6c1d41e2646f14721e09ccbe3dae93c1dd8ad0275140a173998221d13744ced7f8ffe12b56c2f05f84eb31b6e6aee130c85db20ef8b187a87bc79908f1e997ab382e725a5eff36b48de351c50deaa6855e2d6427fbf1f8a06fd4b0e69cd26d825ea385178d58c8f104ab069f12b6caf034a456ca7ed33cbdb505b94f843a2dc16833cf1132aef755abecabc8eb31760713abc9ecc618ab188eb453809993506e46830064416901a233bc3ac340b4a03f3bc2a328536e095197ff0cb9bf34f7cdfa19d5cbb04bf654fe81296fe6478064637764bda8970921c30249e7e7dd4df3f15c92c15fe409a9b5775e9e54ec2e0cbdd8a9f502cb11fb4e182303ea7b7392b54413a4ab556400328395d30b7fbdf2a5c2a0db5bcdecc4ab7ee235beaeee0fa96809daeff5f80959290470ebcbf75875ac4a1422add7142c95bbeed25cc73b2ce6203e23b6c203e6f1cde9da0d2d20979954f03cd80e8f9d0754835bd0427c1b1845dfeceb0a9e50dbc3cbd8ef45ef672268b18ea130f257b1868a965d7e415dc002fd45c22e570f03db15fbccc42e804340ffa4bcfeed3a17295e8b5d0c81f88cf1fff3a92d37717ef08789d349b77b5f1e495fc241f1b09bc832eeb6b069da56938f59a2edd51681f6cc34328025f673603a4ade54ae30216657d8a1855e449fba9d10d907a360c69dfc60de287018bf038b8d0ead8f7a6dfbb406a1444b77d941439010e54a21338d3bdd06e081ce331b75d475dd57e401f90d8334c0c5d292883d865a8a5567430a76dec2fb5eac9f4fbc2929f2ea127ba1a2b4c36efe41a7978a2946b054e86f1f22e6cabfa61fec074e59648261afdd51bec1103b994de97bb95f415a2c8969c59221efa22ff6fb3fa7208e5ea42072bd0b0097c74edf584dbf847ef0c5ed89686d29879e36af0fdf0bbedd6aaa1e980cdcff9377fc5d029d9ffeeb718cc08bdc374931e25aaf6cb4fde1ec599d1c22659d59f765a85b00769b9218c356acc73adaf9a9b6f51e211112629650a2dadfd18af661f3e869b584a2d93223f09adbea41895eb8990a0e8c70b5bbf18667b447379fb14c6ef3192344f49eb0d14ba5213c78a6d0801e2af194a1a9727d392ded4c60c4c4daab940edbc1dadadbd91d71ef451399343d475030c49f7c5d57a13af2441cc6fcab3f60afa032d3b8517119f68ed2d02cc6ebac9a554b320e6d1b72f99e5a5d74fa3390a2a3bd64c4e535a05d2e8f12e15beec4d7874c06059b7b9f74310fff5b8800c61f9d1887b7dd24e398d6f7f03cfb296c705d5b832d5b99784ab9f0b2bb2ccf4df2c280e141abdc81e6da1cc41f95b1f2da77fd7b1e94251f28179bae0d62f54c91d8fc8aaa78dffe3e8cafd6dccab3b1f53cd31b2b082341c13867eb04b5212e66d480ed6fa6a5e5cd57ca90843bbab5395fd81f5e17b43a65ae85d0a1260c0e7029e2f36305684bd11ae978c7be016273174690617d03e81ff33910bad6a1ba5b379f7e890f3fea217ee0fabb5e1bde49aa16890afd4f654a90da61edd3f7e46109dc42dd13f5adabd06c9cefbbbecaedae4db24e164d3520a7c32e5806182f4cbb3a855331fa474ff07eec2ba815b97528811558c6ee4000000004f573e42c5b2201917d48a5e26e473c6e9bead7ccff498ff2aa238ec7986c45f631e482b395b71da07b8c6acc5f0579a6d2a7241d976744e2812f0d8b42f705a60209117b421bd219f47859b73117b9bba4f8a29c6d1037a0ab1d25db0ed643feb625187346643d98f8b470907b58c6ae9a14942ced344f3b0bf7b372d560cfc6ed86c95ab414d154efe9e3fb839790e0700ddaf9f06c73700f956af595c87091d3c824acf49bda9d4d38a7eed1b9aa2e2edbe7c42cf198325968d0bae08372d95470d2bea77bce1713d6d790fe9949737bfc50789a2cfb62aa916b3d3d6d1ccb8008df03cf8c5f2f0de34789adc778533c72f7acd0f63db7ce712f36b814c55997cfa6e17b4ff35cee6648dd98473b23923cc414f0eaae5ef92e83a8268b0e2919db5b776d221d48441b4d75467b3c62bd1d912d08d0e91c0d96ff645ab962fe910637d6c154dc09d7c6cf6ab9d209e701f0cde9028e21d7b56017ddf841071543b5bec22975a7ef7dcff0cea206d680e9ef8188d091f75af4922cbb5a6c0b81cb596296ff6e2580d6d889aa5cf224ef5caf79a3c2a18fefe904f91c031f459e43755a6cd2fce72de8df83a972459f4d6c978a29d9c7b705a5708a791749a4bee3400a5e98bdeef7e8ff4eae12ab13f7050f360c1e7f9b2c2ec8114d4f8469faa9880ad0928d106e6812dd3c4826d5e489916b522b162cc09c11cb577cd6d83329ee3d52e46074c6b6fe5b40a5991f80a7a39df08b91c8fe5a3ddb936e72b918f78a21252ecd2d8b72eecc2f788317fdd4d8a64915bae45b6e91406e1d19998468c54cede833663c5df7de4f64d9959e96a6cfacff426a24d0c60a02fca9270f5af61d191b141f9f206b42861534afa3001b72ae0bb9684212fc97992ae7fd08757c93273fee3272e76f5e7bc0c412de28ff76f9fe4450a6afd463dca152a826e86e1acbbfa4cb846842cc3a33bccafa96f601b78d1a9d823b1eba828fc6445572750ac09e0760afba1600f5c1ede83ed3877ce792e7e8eaffac72240ed262018dde59ea10efd47b1612b394e4d064ea088481fb3d15fd2ff3d30872f4c8b8b9acbe3e5ffe05b369f943f0ad1126f4f70f11a26a547ca2ce2f97b94bd4187274018a52457c59b8dcd521ceda2cb7e6251557f2cb522a2fd81cde2c099c955e97f6b3dc65c574e9e24eb61afe35957cc60760722dd415fb34ad7d3e86642a332d5e4d984afcf2af589b2993924a27ccc94c2f1b0e03c97308bda4037901235db97e5b92efd01901bc6d6071ee04674aba2606a99c08290a4009e6c3b92523b2a3e460c6385eca4e386d7f3f1daebb49ba17a6571d49d17c80e47010b47b4ad21ea045b83b2d350a1b523bdd5c8956473e3503fdeb5285625541d6d15b61dd6fb398361e6c45b868cfc37946df2633b1cea0f7722c9ba0dfbd801f2ec6a42a7eb85f52f164f82433e60f778c8ac89416154136d81827a50b58da73cd17e6c5e5e84709604b1833748bcd7e35cbe6e81f8773378670b50785d7a4f67f0e5e96a29fbd10288548728887eafa0a74207279e8395206078be23586041a0d87c50dd896b444c3569e48dcb23308cdd42f73baead0fc3e13dcc5e0f98676bcf204f340c4436d5449cb2144e5f789d37bfc191132921494b8aab474604dbdce9f079debb38f62f491df6e555847d8263882cab2595ab41dc58ab8ff2efe77722bb6d5ba94b034cf722169609cec36f635e92aedd22a22f3b3f495772d17f9d50844766ebcaad82b3dd994f849c49052922f74bb98b31f301ca0a66f18942745e821de5a9a3cbbc321c1672538004c4952837f1505ae610a7e7f85b67f04ba0a0c410cf9888a5bf7761f8854b57edb799f05df04b96fb3f0f322f11e64384fa244ae58e99d65dd21a75099829bea688b53eec370bb143f0b65ab45928c6af37d0f3cd92c16a677a1f40d3f5c2eca04b72ebeca04d7a856af17d331170c49ec4491fca1e7bc652331aa7d95a2c62b5540e9a9fb28561c4628a673fb0961c4139370015ab107e67e8a5a2d84a6b31658ac04347463f313f190c8b7caa302c5766e9a52b5f810a6f2ff0ab82a019a589209cc53839ef6c3db32d33b94722e40efaff75946e45c2dbd02d3dcf651e48d99d7d96f9f2084c354642356d3d4f220984987b5e228a00979578ee6fedecc97d344e4936b98724093d91d034de819a810f0c49d559dc55b569c37a389a108aad2168362984b2e9c884759fb71ed969c4036eb7c7592acff7e2046ab9bb0d1dd7f1ec87860178a94d809bd58204702bb193f3f8e5d7bd00e0593f389df3b91f3e78e35a352ee7d5d7e8fd999189826a2971cadf494b24be108a1b74b47ccd47a8fb83b7a1c296ae3fb93f6b1f37d47bc9a63af705c8ad56644db7118fc72f45bde97c3e27b32fa59ec76064c530abadd23e071020d0b2837d7582f11947cd61b835a8e1e0d90c90cd506dbc0a923980105841ecf9457e25418150df4708a79b8246bac107a797670b275ad8851569fa25c28df775b42aff7b7e63391bc2c1cda56c0dc42784b8354174ed247d62ddd441a0f0bca4e0048b710060a8663eac450ae46e9ff7b27b7e85f1a80dd2ab6b8f28fea5b09d154e5f6b7c610eef3cba236eed26660280e45bc3f8ac0ed0aa45509136730a6d30a54465809db247d68574f046bb2be93632a4118841389304e304bfdf3cf429cdb78d944f4af51edde07022c36228cf95e120fe1fbd4b869abf5141cc4568463a98f480592f480349f57b047fe5262f107af1471ba76b6ab78ede7d8ddc4ad0e91d9620be08345a881d4bf8452af4b16e4b38ee6ef2b502890c6c25015473ff5ba05fc4e8f8461736f4eed51ef3e09e7ea74288cbe88f90dd24e9d5b946d06d1726fe50b1c93323f047cf85e506d53eb4e56a18880ae0e34bef18338e113924a88e2764321f70c4970766f4dd6528f6944c423e9e341aef8922bb400a5a020e3d74574fb22e7872f1f3442da5949ea3a56184a6aeb1cf4c3e5ec4a7066984898d807cf03be61cfcbd74c384e080aac3f554ae82f650d190c9700684fc909084c68be70ed5027ad3a48f902528156679dcb67f110aee0114f846a573917a2981f964d902028a760794b897422e54cc6abfe4e6751c2fb24d7474a70ef877cafeed115a4a8753445e24d7cc5661e71179b8bff57e1d589abddcf347bdc324733fd52d5bc209e3a732cfd1b467a9b9f635960adf190353187debb2be950f15f9a94cd50b8f3fdd7857bf23e1d251f86e849cbdc5c6b0168e63ce9e190e8cf626a5f03862e09a792328b0aca74edc6ff21330395c78d1ef2903fd1717bf35c95f6e74b98ec38f7e7b229724a501fbcb61a9a5a5807eaa8bb38ddceb1907bb9d0a52cea5dd030ae7cd910e0b0330b5cb910842c2c2f0de60647ed991b563749d258bc880c5afe39fb70f3d0e7bebf29c8742004410d9b7e3d5253e34b78ecbd8b27bc73b22fc7319dd3ecf1bb49399f77da9655528d2af105b214de44acdb639c1fc1004496712ce7688d2e964edc9236101309123e28cbfe749412897ac935611df30455344c81377779e4c150a1febf30821f62b7b7f556a42f1211280ad120030ce8a8b39484b57617367b73e7a354509233e1c2737ab4730e59ea06faf9bc858a232de83cee47016811a965e3881a795f12826d1d2507cac341cd2a9a34f6f4eb390fd4470180660f7eced36b21668de15b74259ac1f0e594780f95f48cb3879d0a4f53247ddafa4d4ac70ff0e90dbbe3738bd650debca1881273f9242eeef39966927f50f4f24fb863f8693c99d93b9d80abe64e3fd8e4032f94e8546f4aac5b75893c2072f56c61983615d23697b58dc4ce2d0ae42651c9c93c3bbfc1e810b2ae24564b9cb0c189510692b4d61fdb650bf8640b7e45f40f9d96e617e5aa8278c189ff8e506928cd8d24ebfc2f9cfed96b0565e33ca000100000000000003010000080000006dfaf82d06f55cfefa886341d4797cbf14b4ffa768fa99ccd61a76afb64534321b7e89a37a7b0a6c08b2f50157c014801798b0fbdb68a24c09c8d75a83acc17dc24dea30b57a824b7de8847b639984065892a900988995f213b681fc4cabc0b5b3214781362576ce7d29534b57b750d537956ba648d6417e42eebafdf63536ccf79a1858de30137bc529751b0234012073f2e2f9e4395222139efebc5c280b077366ce4ee25f202565d8fa4951a89e506a38d63d4ebbbc32b1328b1dfb2dbc49feb94fedb87bd37428a0c378868d27c3ceedd224c41d49e6aa4b73dec873ecc536166e6adf6ff39d4e74c460fe000000"], 0x1110}}, {{&(0x7f00000018c0)=@x25, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000000140)}}], 0x2, 0x810) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) getpeername$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000003140)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) memfd_create(&(0x7f0000002240)='key_or_keyring:', 0x2) inotify_init1(0x800) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001940)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0x1) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) unshare(0x20400) r7 = socket(0x1, 0xf3fbec0486b17337, 0x38) setsockopt$MRT6_ADD_MIF(r7, 0x3a, 0xca, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="000200000000000000000500000002000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d00000057000e0088800900080211000001080211000000ec03f3b85ad3000092008181a1ffe538ffffffffffff040000000006010101010101030100060243832a0100720603030303030371070100ff0101064876060ff42200040000"], 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 444.736639ms ago: executing program 4 (id=650): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}}) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851) syz_usb_disconnect(r0) close_range(r1, 0xffffffffffffffff, 0x0) 411.6024ms ago: executing program 1 (id=652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000000100001b002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010100000000000000000000000000000000000000000002000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) 373.304081ms ago: executing program 1 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6d6c55303b2b7f07) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x401, 0xc3, "00000000000000000000ffff00"}) (async) ioctl$TCSETS(r2, 0x5402, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, 0x0, 0x0) (async) read$watch_queue(r4, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @empty}}}, 0x3a) getsockopt(r1, 0x111, 0x10000001, 0x0, &(0x7f00000000c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) 264.348424ms ago: executing program 1 (id=656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x8c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r1, &(0x7f0000000040), r2, 0x0, 0x807, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0x6, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @local}}}, 0x108) syz_usb_control_io$hid(r0, 0x0, 0x0) 231.971985ms ago: executing program 3 (id=657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x31, 0x4, @tid=r3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/74, 0x4a}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/45, 0x2d}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/168, 0xa8}], 0x9, &(0x7f00000040c0)=""/18, 0x12}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004100)=""/95, 0x5f}, {&(0x7f0000004180)=""/146, 0x92}], 0x2, &(0x7f0000004280)=""/167, 0xa7}, 0x6}, {{&(0x7f0000004340)=@ax25={{0x3, @null}, [@remote, @bcast, @netrom, @null, @default, @bcast, @remote, @default]}, 0x80, &(0x7f00000059c0)=[{&(0x7f00000043c0)=""/24, 0x18}, {&(0x7f0000004400)=""/117, 0x75}, {&(0x7f0000004480)=""/125, 0x7d}, {&(0x7f0000004500)=""/223, 0xdf}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/117, 0x75}, {&(0x7f0000004780)=""/145, 0x91}, {&(0x7f0000004840)=""/235, 0xeb}, {&(0x7f0000004940)=""/122, 0x7a}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0xa, &(0x7f0000005a80)=""/35, 0x23}, 0x7}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/251, 0xfb}, {&(0x7f0000006bc0)=""/208, 0xd0}], 0x3, &(0x7f0000006d00)}}, {{&(0x7f0000006d40)=@can, 0x80, &(0x7f0000007100)=[{&(0x7f0000006dc0)=""/120, 0x78}, {&(0x7f0000006e40)=""/252, 0xfc}, {&(0x7f0000006f40)=""/238, 0xee}, {&(0x7f0000007040)=""/35, 0x23}, {&(0x7f0000007080)=""/65, 0x41}], 0x5, &(0x7f0000007180)=""/215, 0xd7}, 0x1000}, {{0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000007280)=""/230, 0xe6}, {&(0x7f0000007380)=""/39, 0x27}, {&(0x7f00000073c0)=""/59, 0x3b}, {&(0x7f0000007400)=""/107, 0x6b}, {&(0x7f0000007480)=""/185, 0xb9}, {&(0x7f0000008840)=""/4105, 0x1009}, {&(0x7f0000008540)=""/235, 0xeb}], 0x7}, 0x5}], 0x6, 0x12142, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/152) (async) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000000a80)={0x10000016}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001e002100000000000000000007000008"], 0x20}}, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000040)="ccfaf3f54f53cfa88f7bf336f47d93c41fb1d56f2ddd1a8e73159e4fb29e06", 0x1f}, {&(0x7f0000000080)="bdb9ed31", 0x4}], 0x2) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20002040) socket$nl_route(0x10, 0x3, 0x0) 183.706966ms ago: executing program 3 (id=658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x2) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000005c0)=""/90, 0x5a}, 0x5}], 0x1, 0x12182, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000480)={0x8000, 0x0, 0x2}, 0x24, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$FICLONE(r3, 0xc020660b, 0xffffffffffffffff) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x2400002}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e8", 0x101d0}], 0x1, 0x0, 0x0, 0x48001}, 0x4000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xcdb, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) 92.300948ms ago: executing program 2 (id=659): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x9, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0xfffffffffffffe7d, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xfffc}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(0x0, 0x0, r2) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0xc9, 0x0, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="66b9800000c00f32663500080000fc303b3b00008ee8f2f0095bf4fd0f20c06635040000000f22c0640f7812f2f20f32b808008ee8b819027c9bba4100b008ee", 0x40}], 0x1, 0x19, 0x0, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080012c000000001", 0x1c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb05, &(0x7f0000000040)={0x0, 0xf527, 0x1, 0x1, 0x324}, 0x0, 0x0, 0x0) madvise(&(0x7f00000ae000/0x3000)=nil, 0x3000, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000400), {0x32}, &(0x7f0000000440)=""/88, 0x58, &(0x7f00000004c0), &(0x7f0000000500)=[r9, 0xffffffffffffffff], 0x2, {r10}}, 0x58) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r11, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 90.381318ms ago: executing program 3 (id=660): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5433, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 90.189388ms ago: executing program 3 (id=661): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) (async) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x400, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}]}, 0x1c}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet(0x2, 0x5, 0x0) (async) socket$inet(0x2, 0x5, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x10000) sendfile(r5, r7, 0x0, 0x7ffff004) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00143fffffffda060200ea0000e80001dd0008040d000400"/41, 0x29}], 0x1) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r9], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000002100)={@val={0x0, 0xd}, @void, @eth={@multicast, @random="71d6bff6e2de", @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x2, 0x4, 0x30, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x11, 0x0, 0x2, [0x3, 0x8, 0xcc5, 0x1]}]}}, {0x16, 0xa0, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}}}}}, 0x4a) (async) write$tun(r1, &(0x7f0000002100)={@val={0x0, 0xd}, @void, @eth={@multicast, @random="71d6bff6e2de", @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x2, 0x4, 0x30, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x11, 0x0, 0x2, [0x3, 0x8, 0xcc5, 0x1]}]}}, {0x16, 0xa0, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}}}}}, 0x4a) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 19.30163ms ago: executing program 3 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000010000000032000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010100000000000000000000000000000000000000000002000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=663): prlimit64(0x0, 0xe, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x8140, 0x102, 0x3}, 0x18) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x49d, 0x82083) ioctl$EVIOCGLED(r1, 0x40284504, 0x0) r2 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)={0x200}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) open$dir(&(0x7f0000000140)='./file0\x00', 0x121000, 0x19c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9, 0x26, 0x1a, 0x4}, {0xa3, 0x1d, 0x10}]}) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x2}, 0x0) socketpair(0x5, 0x2, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0)=0x2, 0x80, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): denied { module_load } for pid=1190 comm="syz.0.302" path="/72/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 69.466560][ T1191] Invalid ELF header len 6 [ 69.536376][ T36] audit: type=1400 audit(1777718852.820:302): avc: denied { mounton } for pid=1198 comm="syz.2.305" path="/proc/181/task" dev="proc" ino=11628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.565100][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.574695][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.582589][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.590224][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.599180][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.601288][ T1200] Invalid logical block size (4) [ 69.606778][ T311] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 69.623109][ T311] playstation 0003:054C:09CC.000E: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 69.715839][ T1207] FAULT_INJECTION: forcing a failure. [ 69.715839][ T1207] name failslab, interval 1, probability 0, space 0, times 1 [ 69.728551][ T1207] CPU: 1 UID: 0 PID: 1207 Comm: syz.0.307 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 69.728598][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.728612][ T1207] Call Trace: [ 69.728617][ T1207] [ 69.728624][ T1207] __dump_stack+0x21/0x30 [ 69.728647][ T1207] dump_stack_lvl+0x140/0x1c0 [ 69.728670][ T1207] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.728690][ T1207] ? __cfi_avc_has_perm+0x10/0x10 [ 69.728712][ T1207] ? kasan_save_alloc_info+0x40/0x50 [ 69.728732][ T1207] dump_stack+0x19/0x20 [ 69.728750][ T1207] should_fail_ex+0x3d7/0x530 [ 69.728770][ T1207] should_failslab+0xac/0x100 [ 69.728785][ T1207] __kmalloc_cache_noprof+0x41/0x470 [ 69.728807][ T1207] ? vhost_task_create+0x12c/0x400 [ 69.728821][ T1207] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 69.728838][ T1207] vhost_task_create+0x12c/0x400 [ 69.728851][ T1207] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 69.728868][ T1207] ? __cfi_vhost_task_create+0x10/0x10 [ 69.728882][ T1207] ? __cfi_vhost_task_fn+0x10/0x10 [ 69.728895][ T1207] ? __kasan_check_write+0x18/0x20 [ 69.728915][ T1207] ? mutex_lock+0x97/0x1d0 [ 69.728935][ T1207] ? __cfi_mutex_lock+0x10/0x10 [ 69.728954][ T1207] ? kernel_text_address+0xa9/0xe0 [ 69.728974][ T1207] kvm_mmu_post_init_vm+0x161/0x300 [ 69.729005][ T1207] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 69.729028][ T1207] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 69.729047][ T1207] ? kstrtoull+0x13b/0x1e0 [ 69.729065][ T1207] ? kstrtouint+0x78/0xf0 [ 69.729082][ T1207] ? ioctl_has_perm+0x1bc/0x500 [ 69.729101][ T1207] ? __asan_memcpy+0x5a/0x80 [ 69.729121][ T1207] ? ioctl_has_perm+0x408/0x500 [ 69.729140][ T1207] ? has_cap_mac_admin+0xd0/0xd0 [ 69.729159][ T1207] ? __kasan_check_write+0x18/0x20 [ 69.729179][ T1207] ? mutex_lock_killable+0x97/0x1d0 [ 69.729200][ T1207] ? __cfi_mutex_lock_killable+0x10/0x10 [ 69.729221][ T1207] ? proc_fail_nth_write+0x184/0x220 [ 69.729240][ T1207] kvm_vcpu_ioctl+0xa48/0x1000 [ 69.729268][ T1207] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.729290][ T1207] ? __cfi_vfs_write+0x10/0x10 [ 69.729311][ T1207] ? __kasan_check_write+0x18/0x20 [ 69.729331][ T1207] ? mutex_unlock+0x90/0x240 [ 69.729351][ T1207] ? __cfi_mutex_unlock+0x10/0x10 [ 69.729371][ T1207] ? __fget_files+0x2c5/0x340 [ 69.729386][ T1207] ? __fget_files+0x2c5/0x340 [ 69.729400][ T1207] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.729417][ T1207] ? security_file_ioctl+0x3e/0x110 [ 69.729435][ T1207] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.729457][ T1207] __se_sys_ioctl+0x132/0x1b0 [ 69.729471][ T1207] __x64_sys_ioctl+0x7f/0xa0 [ 69.729485][ T1207] x64_sys_call+0x1878/0x2ee0 [ 69.729506][ T1207] do_syscall_64+0x57/0xf0 [ 69.729521][ T1207] ? clear_bhb_loop+0x50/0xa0 [ 69.729541][ T1207] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.729559][ T1207] RIP: 0033:0x7f371479cdd9 [ 69.729576][ T1207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.729589][ T1207] RSP: 002b:00007f37156a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.729609][ T1207] RAX: ffffffffffffffda RBX: 00007f3714a15fa0 RCX: 00007f371479cdd9 [ 69.729620][ T1207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 69.729629][ T1207] RBP: 00007f37156a4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.729650][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.729659][ T1207] R13: 00007f3714a16038 R14: 00007f3714a15fa0 R15: 00007ffe09880878 [ 69.729671][ T1207] [ 70.096851][ T311] playstation 0003:054C:09CC.000E: Failed to retrieve feature with reportID 18: -71 [ 70.107385][ T311] playstation 0003:054C:09CC.000E: Failed to retrieve DualShock4 pairing info: -71 [ 70.117512][ T311] playstation 0003:054C:09CC.000E: Failed to get MAC address from DualShock4 [ 70.126346][ T311] playstation 0003:054C:09CC.000E: Failed to create dualshock4. [ 70.135355][ T311] playstation 0003:054C:09CC.000E: probe with driver playstation failed with error -71 [ 70.139811][ T1216] overlayfs: failed to resolve './file7': -2 [ 70.148499][ T31] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 70.158829][ T1214] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 70.159728][ T311] usb 4-1: USB disconnect, device number 21 [ 70.198248][ T1219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.311'. [ 70.230851][ T315] Bluetooth: hci1: Frame reassembly failed (-84) [ 70.248875][ T36] audit: type=1400 audit(1777718853.540:303): avc: denied { mounton } for pid=1221 comm="syz.1.314" path="/proc/235/cgroup" dev="proc" ino=11097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 70.271701][ T36] audit: type=1400 audit(1777718853.540:304): avc: denied { remount } for pid=1221 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 70.312394][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 70.451015][ T31] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 70.506916][ T36] audit: type=1400 audit(1777718853.774:305): avc: denied { write } for pid=1239 comm="syz.1.318" path="socket:[11242]" dev="sockfs" ino=11242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.540532][ T1242] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 70.561440][ T36] audit: type=1400 audit(1777718853.831:306): avc: denied { setopt } for pid=1243 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.610860][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 70.616314][ T31] usb usb3-port1: attempt power cycle [ 70.866672][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.866680][ T1225] Bluetooth: hci0: command 0x1003 tx timeout [ 70.983918][ T31] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 71.005589][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 71.143709][ T31] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 71.165383][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 71.170765][ T31] usb usb3-port1: unable to enumerate USB device [ 71.367525][ T311] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 71.463441][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 71.527367][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 71.533739][ T311] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 71.543804][ T311] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 71.552898][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.560923][ T311] usb 2-1: Product: syz [ 71.565099][ T311] usb 2-1: Manufacturer: syz [ 71.569690][ T311] usb 2-1: SerialNumber: syz [ 71.576109][ T311] r8152-cfgselector 2-1: Unknown version 0x0000 [ 71.582428][ T311] r8152-cfgselector 2-1: config 0 descriptor?? [ 71.623274][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 71.629976][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 71.642592][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 71.651683][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.659771][ T45] usb 1-1: Product: syz [ 71.663957][ T45] usb 1-1: Manufacturer: syz [ 71.668616][ T45] usb 1-1: SerialNumber: syz [ 71.806248][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.807875][ T36] audit: type=1326 audit(1777718854.994:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1248 comm="syz.1.322" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f893b99cdd9 code=0x0 [ 71.862045][ T1250] netlink: 'syz.1.322': attribute type 16 has an invalid length. [ 71.889617][ T1247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.898200][ T1247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.909277][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.916243][ T45] usb 1-1: unit 3 not found! [ 71.920845][ T45] usb 1-1: unit 255 not found! [ 71.929220][ T45] usb 1-1: USB disconnect, device number 25 [ 71.943269][ T692] udevd[692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.401275][ T393] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 72.401285][ T1225] Bluetooth: hci1: command 0x1003 tx timeout [ 72.428867][ T1252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.323'. [ 72.509983][ T1254] FAULT_INJECTION: forcing a failure. [ 72.509983][ T1254] name failslab, interval 1, probability 0, space 0, times 0 [ 72.522719][ T1254] CPU: 0 UID: 0 PID: 1254 Comm: syz.3.324 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 72.522753][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.522765][ T1254] Call Trace: [ 72.522771][ T1254] [ 72.522778][ T1254] __dump_stack+0x21/0x30 [ 72.522809][ T1254] dump_stack_lvl+0x140/0x1c0 [ 72.522832][ T1254] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.522856][ T1254] dump_stack+0x19/0x20 [ 72.522877][ T1254] should_fail_ex+0x3d7/0x530 [ 72.522902][ T1254] should_failslab+0xac/0x100 [ 72.522920][ T1254] kmem_cache_alloc_node_noprof+0x45/0x420 [ 72.522950][ T1254] ? dup_task_struct+0xc1/0xd80 [ 72.522974][ T1254] ? kasan_save_alloc_info+0x40/0x50 [ 72.522997][ T1254] ? __kasan_kmalloc+0x96/0xb0 [ 72.523032][ T1254] ? __kmalloc_cache_noprof+0x23c/0x470 [ 72.523060][ T1254] dup_task_struct+0xc1/0xd80 [ 72.523081][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523109][ T1254] ? _raw_spin_lock_irq+0x93/0x120 [ 72.523131][ T1254] ? copy_process+0x32a0/0x32a0 [ 72.523153][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523179][ T1254] copy_process+0x55a/0x32a0 [ 72.523203][ T1254] ? __cfi_copy_process+0x10/0x10 [ 72.523226][ T1254] ? __kmalloc_cache_noprof+0x23c/0x470 [ 72.523255][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523281][ T1254] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 72.523301][ T1254] vhost_task_create+0x1f7/0x400 [ 72.523319][ T1254] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 72.523340][ T1254] ? __cfi_vhost_task_create+0x10/0x10 [ 72.523359][ T1254] ? __cfi_vhost_task_fn+0x10/0x10 [ 72.523379][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523406][ T1254] ? mutex_lock+0x97/0x1d0 [ 72.523431][ T1254] ? __cfi_mutex_lock+0x10/0x10 [ 72.523455][ T1254] ? kernel_text_address+0xa9/0xe0 [ 72.523481][ T1254] kvm_mmu_post_init_vm+0x161/0x300 [ 72.523508][ T1254] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 72.523536][ T1254] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 72.523560][ T1254] ? kstrtoull+0x13b/0x1e0 [ 72.523583][ T1254] ? kstrtouint+0x78/0xf0 [ 72.523605][ T1254] ? ioctl_has_perm+0x1bc/0x500 [ 72.523630][ T1254] ? __asan_memcpy+0x5a/0x80 [ 72.523660][ T1254] ? ioctl_has_perm+0x408/0x500 [ 72.523685][ T1254] ? has_cap_mac_admin+0xd0/0xd0 [ 72.523709][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523740][ T1254] ? mutex_lock_killable+0x97/0x1d0 [ 72.523767][ T1254] ? __cfi_mutex_lock_killable+0x10/0x10 [ 72.523797][ T1254] ? proc_fail_nth_write+0x184/0x220 [ 72.523823][ T1254] kvm_vcpu_ioctl+0xa48/0x1000 [ 72.523851][ T1254] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.523878][ T1254] ? __cfi_vfs_write+0x10/0x10 [ 72.523905][ T1254] ? __kasan_check_write+0x18/0x20 [ 72.523931][ T1254] ? mutex_unlock+0x90/0x240 [ 72.523960][ T1254] ? __cfi_mutex_unlock+0x10/0x10 [ 72.523986][ T1254] ? __fget_files+0x2c5/0x340 [ 72.524005][ T1254] ? __fget_files+0x2c5/0x340 [ 72.524023][ T1254] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.524043][ T1254] ? security_file_ioctl+0x3e/0x110 [ 72.524067][ T1254] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.524098][ T1254] __se_sys_ioctl+0x132/0x1b0 [ 72.524117][ T1254] __x64_sys_ioctl+0x7f/0xa0 [ 72.524135][ T1254] x64_sys_call+0x1878/0x2ee0 [ 72.524161][ T1254] do_syscall_64+0x57/0xf0 [ 72.524182][ T1254] ? clear_bhb_loop+0x50/0xa0 [ 72.524206][ T1254] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.524234][ T1254] RIP: 0033:0x7fad86b9cdd9 [ 72.524261][ T1254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.524276][ T1254] RSP: 002b:00007fad87aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.524295][ T1254] RAX: ffffffffffffffda RBX: 00007fad86e15fa0 RCX: 00007fad86b9cdd9 [ 72.524308][ T1254] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 72.524320][ T1254] RBP: 00007fad87aca090 R08: 0000000000000000 R09: 0000000000000000 [ 72.524331][ T1254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.524342][ T1254] R13: 00007fad86e16038 R14: 00007fad86e15fa0 R15: 00007ffeac625188 [ 72.524357][ T1254] [ 73.062035][ T389] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 73.123640][ T1278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.333'. [ 73.221890][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 73.228054][ T389] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.238214][ T389] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 73.247303][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.256167][ T389] usb 1-1: config 0 descriptor?? [ 73.307167][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 73.392471][ T783] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 73.467007][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 73.475012][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 73.484307][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.492360][ T31] usb 4-1: Product: syz [ 73.496649][ T31] usb 4-1: Manufacturer: syz [ 73.501314][ T31] usb 4-1: SerialNumber: syz [ 73.553529][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.564468][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.575673][ T783] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.584796][ T783] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 73.592904][ T783] usb 3-1: Manufacturer: syz [ 73.602138][ T783] usb 3-1: config 0 descriptor?? [ 73.935348][ T31] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 74.021269][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.021588][ T393] Bluetooth: hci0: command 0x1003 tx timeout [ 74.036833][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 74.036867][ T36] audit: type=1400 audit(1777718857.086:309): avc: denied { read write } for pid=1279 comm="syz.2.334" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.066321][ T36] audit: type=1400 audit(1777718857.086:310): avc: denied { open } for pid=1279 comm="syz.2.334" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.123397][ T783] usbhid 3-1:0.0: can't add hid device: -71 [ 74.130375][ T783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 74.142026][ T783] usb 3-1: USB disconnect, device number 33 [ 74.148096][ T31] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 74.155693][ T31] usb 4-1: 2:1: cannot get freq (v2/v3): err -32 [ 74.309786][ T31] usb 4-1: 2:1: cannot get freq (v2/v3): err -32 [ 74.324449][ T31] usb 4-1: USB disconnect, device number 22 [ 74.354652][ T692] udevd[692]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.482155][ T311] r8152-cfgselector 2-1: Unknown version 0x0000 [ 74.488881][ T311] r8152-cfgselector 2-1: bad CDC descriptors [ 74.495899][ T311] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 74.687006][ T1297] FAULT_INJECTION: forcing a failure. [ 74.687006][ T1297] name failslab, interval 1, probability 0, space 0, times 0 [ 74.699696][ T1297] CPU: 1 UID: 0 PID: 1297 Comm: syz.2.338 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 74.699724][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.699736][ T1297] Call Trace: [ 74.699742][ T1297] [ 74.699750][ T1297] __dump_stack+0x21/0x30 [ 74.699807][ T1297] dump_stack_lvl+0x140/0x1c0 [ 74.699832][ T1297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.699858][ T1297] dump_stack+0x19/0x20 [ 74.699884][ T1297] should_fail_ex+0x3d7/0x530 [ 74.699903][ T1297] should_failslab+0xac/0x100 [ 74.699917][ T1297] __kmalloc_cache_node_noprof+0x46/0x430 [ 74.699952][ T1297] ? kasan_save_track+0x4f/0x80 [ 74.699970][ T1297] ? __get_vm_area_node+0x14d/0x3d0 [ 74.699993][ T1297] ? __kasan_slab_alloc+0x73/0x90 [ 74.700010][ T1297] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 74.700038][ T1297] ? dup_task_struct+0xc1/0xd80 [ 74.700055][ T1297] __get_vm_area_node+0x14d/0x3d0 [ 74.700071][ T1297] __vmalloc_node_range_noprof+0x30e/0x1480 [ 74.700103][ T1297] ? copy_process+0x55a/0x32a0 [ 74.700127][ T1297] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 74.700156][ T1297] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 74.700183][ T1297] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 74.700202][ T1297] ? memset_orig+0x30/0xb0 [ 74.700215][ T1297] ? arch_dup_task_struct+0x5b/0xe0 [ 74.700248][ T1297] ? __asan_memcpy+0x5a/0x80 [ 74.700275][ T1297] dup_task_struct+0x5d6/0xd80 [ 74.700296][ T1297] ? copy_process+0x55a/0x32a0 [ 74.700321][ T1297] ? _raw_spin_lock_irq+0x93/0x120 [ 74.700336][ T1297] ? copy_process+0x32a0/0x32a0 [ 74.700351][ T1297] ? __kasan_check_write+0x18/0x20 [ 74.700371][ T1297] copy_process+0x55a/0x32a0 [ 74.700405][ T1297] ? __cfi_copy_process+0x10/0x10 [ 74.700426][ T1297] ? __kmalloc_cache_noprof+0x23c/0x470 [ 74.700454][ T1297] ? __kasan_check_write+0x18/0x20 [ 74.700480][ T1297] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 74.700495][ T1297] vhost_task_create+0x1f7/0x400 [ 74.700507][ T1297] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 74.700523][ T1297] ? __cfi_vhost_task_create+0x10/0x10 [ 74.700567][ T1297] ? __cfi_vhost_task_fn+0x10/0x10 [ 74.700584][ T1297] ? __kasan_check_write+0x18/0x20 [ 74.700614][ T1297] ? mutex_lock+0x97/0x1d0 [ 74.700633][ T1297] ? __cfi_mutex_lock+0x10/0x10 [ 74.700651][ T1297] ? kernel_text_address+0xa9/0xe0 [ 74.700670][ T1297] kvm_mmu_post_init_vm+0x161/0x300 [ 74.700711][ T1297] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 74.700737][ T1297] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 74.700764][ T1297] ? kstrtoull+0x13b/0x1e0 [ 74.700783][ T1297] ? kstrtouint+0x78/0xf0 [ 74.700799][ T1297] ? ioctl_has_perm+0x1bc/0x500 [ 74.700817][ T1297] ? __asan_memcpy+0x5a/0x80 [ 74.700856][ T1297] ? ioctl_has_perm+0x408/0x500 [ 74.700880][ T1297] ? has_cap_mac_admin+0xd0/0xd0 [ 74.700910][ T1297] ? __kasan_check_write+0x18/0x20 [ 74.700929][ T1297] ? mutex_lock_killable+0x97/0x1d0 [ 74.700948][ T1297] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.700981][ T1297] ? proc_fail_nth_write+0x184/0x220 [ 74.701008][ T1297] kvm_vcpu_ioctl+0xa48/0x1000 [ 74.701036][ T1297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.701066][ T1297] ? __cfi_vfs_write+0x10/0x10 [ 74.701085][ T1297] ? __kasan_check_write+0x18/0x20 [ 74.701103][ T1297] ? mutex_unlock+0x90/0x240 [ 74.701138][ T1297] ? __cfi_mutex_unlock+0x10/0x10 [ 74.701164][ T1297] ? __fget_files+0x2c5/0x340 [ 74.701184][ T1297] ? __fget_files+0x2c5/0x340 [ 74.701205][ T1297] ? bpf_lsm_file_ioctl+0xd/0x20 [ 74.701221][ T1297] ? security_file_ioctl+0x3e/0x110 [ 74.701238][ T1297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.701258][ T1297] __se_sys_ioctl+0x132/0x1b0 [ 74.701288][ T1297] __x64_sys_ioctl+0x7f/0xa0 [ 74.701306][ T1297] x64_sys_call+0x1878/0x2ee0 [ 74.701332][ T1297] do_syscall_64+0x57/0xf0 [ 74.701356][ T1297] ? clear_bhb_loop+0x50/0xa0 [ 74.701374][ T1297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.701390][ T1297] RIP: 0033:0x7fa04919cdd9 [ 74.701402][ T1297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.701429][ T1297] RSP: 002b:00007fa04a07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.701450][ T1297] RAX: ffffffffffffffda RBX: 00007fa049415fa0 RCX: 00007fa04919cdd9 [ 74.701464][ T1297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 74.701476][ T1297] RBP: 00007fa04a07b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.701489][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.701504][ T1297] R13: 00007fa049416038 R14: 00007fa049415fa0 R15: 00007fff9a1b8c88 [ 74.701516][ T1297] [ 74.701546][ T1297] syz.2.338: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 75.171810][ T1297] CPU: 1 UID: 0 PID: 1297 Comm: syz.2.338 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 75.171840][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.171852][ T1297] Call Trace: [ 75.171857][ T1297] [ 75.171864][ T1297] __dump_stack+0x21/0x30 [ 75.171894][ T1297] dump_stack_lvl+0x140/0x1c0 [ 75.171920][ T1297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.171947][ T1297] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 75.171972][ T1297] dump_stack+0x19/0x20 [ 75.171995][ T1297] warn_alloc+0x1e7/0x2c0 [ 75.172019][ T1297] ? __kasan_kmalloc+0x28/0xb0 [ 75.172039][ T1297] ? __cfi_warn_alloc+0x10/0x10 [ 75.172061][ T1297] ? kasan_save_track+0x4f/0x80 [ 75.172079][ T1297] ? dup_task_struct+0xc1/0xd80 [ 75.172107][ T1297] ? __get_vm_area_node+0x3bd/0x3d0 [ 75.172133][ T1297] __vmalloc_node_range_noprof+0x333/0x1480 [ 75.172162][ T1297] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 75.172192][ T1297] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 75.172219][ T1297] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 75.172247][ T1297] ? memset_orig+0x30/0xb0 [ 75.172267][ T1297] ? arch_dup_task_struct+0x5b/0xe0 [ 75.172295][ T1297] ? __asan_memcpy+0x5a/0x80 [ 75.172323][ T1297] dup_task_struct+0x5d6/0xd80 [ 75.172346][ T1297] ? copy_process+0x55a/0x32a0 [ 75.172368][ T1297] ? _raw_spin_lock_irq+0x93/0x120 [ 75.172392][ T1297] ? copy_process+0x32a0/0x32a0 [ 75.172415][ T1297] ? __kasan_check_write+0x18/0x20 [ 75.172443][ T1297] copy_process+0x55a/0x32a0 [ 75.172469][ T1297] ? __cfi_copy_process+0x10/0x10 [ 75.172503][ T1297] ? __kmalloc_cache_noprof+0x23c/0x470 [ 75.172532][ T1297] ? __kasan_check_write+0x18/0x20 [ 75.172560][ T1297] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 75.172582][ T1297] vhost_task_create+0x1f7/0x400 [ 75.172600][ T1297] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 75.172622][ T1297] ? __cfi_vhost_task_create+0x10/0x10 [ 75.172638][ T1297] ? __cfi_vhost_task_fn+0x10/0x10 [ 75.172655][ T1297] ? __kasan_check_write+0x18/0x20 [ 75.172680][ T1297] ? mutex_lock+0x97/0x1d0 [ 75.172706][ T1297] ? __cfi_mutex_lock+0x10/0x10 [ 75.172731][ T1297] ? kernel_text_address+0xa9/0xe0 [ 75.172756][ T1297] kvm_mmu_post_init_vm+0x161/0x300 [ 75.172780][ T1297] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 75.172804][ T1297] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 75.172829][ T1297] ? kstrtoull+0x13b/0x1e0 [ 75.172851][ T1297] ? kstrtouint+0x78/0xf0 [ 75.172873][ T1297] ? ioctl_has_perm+0x1bc/0x500 [ 75.172897][ T1297] ? __asan_memcpy+0x5a/0x80 [ 75.172922][ T1297] ? ioctl_has_perm+0x408/0x500 [ 75.172947][ T1297] ? has_cap_mac_admin+0xd0/0xd0 [ 75.172991][ T1297] ? __kasan_check_write+0x18/0x20 [ 75.173019][ T1297] ? mutex_lock_killable+0x97/0x1d0 [ 75.173050][ T1297] ? __cfi_mutex_lock_killable+0x10/0x10 [ 75.173080][ T1297] ? proc_fail_nth_write+0x184/0x220 [ 75.173108][ T1297] kvm_vcpu_ioctl+0xa48/0x1000 [ 75.173141][ T1297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.173172][ T1297] ? __cfi_vfs_write+0x10/0x10 [ 75.173202][ T1297] ? __kasan_check_write+0x18/0x20 [ 75.173230][ T1297] ? mutex_unlock+0x90/0x240 [ 75.173260][ T1297] ? __cfi_mutex_unlock+0x10/0x10 [ 75.173288][ T1297] ? __fget_files+0x2c5/0x340 [ 75.173310][ T1297] ? __fget_files+0x2c5/0x340 [ 75.173330][ T1297] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.173353][ T1297] ? security_file_ioctl+0x3e/0x110 [ 75.173380][ T1297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.173411][ T1297] __se_sys_ioctl+0x132/0x1b0 [ 75.173433][ T1297] __x64_sys_ioctl+0x7f/0xa0 [ 75.173453][ T1297] x64_sys_call+0x1878/0x2ee0 [ 75.173491][ T1297] do_syscall_64+0x57/0xf0 [ 75.173515][ T1297] ? clear_bhb_loop+0x50/0xa0 [ 75.173542][ T1297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.173568][ T1297] RIP: 0033:0x7fa04919cdd9 [ 75.173586][ T1297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.173605][ T1297] RSP: 002b:00007fa04a07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.173627][ T1297] RAX: ffffffffffffffda RBX: 00007fa049415fa0 RCX: 00007fa04919cdd9 [ 75.173644][ T1297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 75.173658][ T1297] RBP: 00007fa04a07b090 R08: 0000000000000000 R09: 0000000000000000 [ 75.173672][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.173686][ T1297] R13: 00007fa049416038 R14: 00007fa049415fa0 R15: 00007fff9a1b8c88 [ 75.173705][ T1297] [ 75.204407][ T783] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 75.206577][ T1297] Mem-Info: [ 75.374755][ T783] usb 4-1: Using ep0 maxpacket: 16 [ 75.378073][ T1297] active_anon:7670 inactive_anon:1 isolated_anon:0 [ 75.378073][ T1297] active_file:6475 inactive_file:2309 isolated_file:0 [ 75.378073][ T1297] unevictable:0 dirty:12 writeback:0 [ 75.378073][ T1297] slab_reclaimable:5222 slab_unreclaimable:71206 [ 75.378073][ T1297] mapped:24878 shmem:166 pagetables:957 [ 75.378073][ T1297] sec_pagetables:3 bounce:0 [ 75.378073][ T1297] kernel_misc_reclaimable:0 [ 75.378073][ T1297] free:1532476 free_pcp:3980 free_cma:0 [ 75.384673][ T783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 75.387945][ T1297] Node 0 active_anon:30680kB inactive_anon:4kB active_file:25900kB inactive_file:9236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99512kB dirty:48kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4992kB pagetables:3828kB sec_pagetables:12kB all_unreclaimable? no [ 75.398254][ T783] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 75.398625][ T1297] DMA32 free:2950100kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963348kB mlocked:0kB bounce:0kB free_pcp:13248kB local_pcp:7196kB free_cma:0kB [ 75.410694][ T783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.413284][ T1297] lowmem_reserve[]: 0 3921 3921 [ 75.419244][ T783] usb 4-1: Product: syz [ 75.422856][ T1297] Normal free:3179804kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30680kB inactive_anon:4kB active_file:25900kB inactive_file:9236kB unevictable:0kB writepending:48kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2652kB local_pcp:2064kB free_cma:0kB [ 75.428507][ T783] usb 4-1: Manufacturer: syz [ 75.433169][ T1297] lowmem_reserve[]: [ 75.438269][ T783] usb 4-1: SerialNumber: syz [ 75.442976][ T1297] 0 0 0 [ 75.452802][ T783] usb 4-1: config 0 descriptor?? [ 75.454077][ T1297] DMA32: [ 75.463428][ T783] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 75.464068][ T1297] 3*4kB [ 75.469951][ T783] usb 4-1: Detected FT232R [ 75.473963][ T1297] (M) [ 75.736525][ T389] usb 1-1: string descriptor 0 read error: -71 [ 75.753635][ T1297] 1*8kB [ 75.775544][ T389] usb 1-1: USB disconnect, device number 26 [ 75.802427][ T1297] (M) [ 75.858859][ T311] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 75.869219][ T1297] 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (M) 717*4096kB (M) = 2950100kB [ 75.882656][ T1297] Normal: 3*4kB (ME) 7*8kB (UE) 1*16kB (U) 8*32kB (U) 36*64kB (UME) 24*128kB (UM) 47*256kB (UME) 20*512kB (UM) 15*1024kB (UME) 11*2048kB (UM) 760*4096kB (ME) = 3178836kB [ 75.899767][ T1297] 8947 total pagecache pages [ 75.904964][ T1297] 1 pages in swap cache [ 75.909223][ T1297] Free swap = 124836kB [ 75.913406][ T1297] Total swap = 124996kB [ 75.917600][ T1297] 2097051 pages RAM [ 75.923375][ T1297] 0 pages HighMem/MovableOnly [ 75.928084][ T1297] 352248 pages reserved [ 75.932276][ T1297] 0 pages cma reserved [ 75.939220][ T1297] Memory allocations: [ 75.943590][ T1297] 0 B 0 init/main.c:1477 func:do_initcalls [ 75.950913][ T1297] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 75.959050][ T1297] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 75.959976][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.967179][ T1297] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 75.981187][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.983954][ T1297] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 75.998889][ T1297] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 76.007793][ T1297] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 76.015843][ T1297] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 76.023760][ T1297] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 76.031761][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 76.037370][ T1297] 0 B 0 init/initramfs.c:101 func:find_link [ 76.045491][ T311] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 76.053992][ T311] usb 2-1: config 0 has no interface number 0 [ 76.060268][ T311] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 76.068892][ T783] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 76.077587][ T783] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 76.085814][ T783] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 76.089563][ T311] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.094812][ T783] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 76.102857][ T311] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.120432][ T311] usb 2-1: config 0 interface 196 has no altsetting 0 [ 76.129861][ T783] usb 4-1: USB disconnect, device number 23 [ 76.139297][ T311] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 76.144266][ T783] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 76.148640][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.166231][ T311] usb 2-1: Product: syz [ 76.170576][ T311] usb 2-1: Manufacturer: syz [ 76.175226][ T311] usb 2-1: SerialNumber: syz [ 76.175764][ T783] ftdi_sio 4-1:0.0: device disconnected [ 76.190823][ T311] usb 2-1: config 0 descriptor?? [ 76.200608][ T1294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.218431][ T1307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.342'. [ 76.434997][ T783] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 76.444470][ T783] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.447500][ T311] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 76.476213][ T311] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 76.490492][ T36] audit: type=1400 audit(1777718859.385:311): avc: denied { lock } for pid=1326 comm="syz.1.348" path="socket:[13341]" dev="sockfs" ino=13341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.501293][ T311] usb 2-1: USB disconnect, device number 29 [ 76.562837][ T315] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.569291][ T315] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.636783][ T1336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 76.658857][ T36] audit: type=1400 audit(1777718859.545:312): avc: denied { bind } for pid=1337 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.678220][ T374] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 76.684567][ T36] audit: type=1326 audit(1777718859.545:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1337 comm="syz.3.352" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fad86b9cdd9 code=0x0 [ 76.710514][ T36] audit: type=1400 audit(1777718859.545:314): avc: denied { read } for pid=1337 comm="syz.3.352" dev="sockfs" ino=12865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.813497][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 76.845384][ T374] usb 3-1: Using ep0 maxpacket: 16 [ 76.851716][ T374] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 76.862580][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.873508][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.883365][ T311] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 76.891012][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 76.904207][ T374] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 76.913371][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.922222][ T374] usb 3-1: config 0 descriptor?? [ 76.973262][ T31] usb 1-1: device descriptor read/64, error -71 [ 77.079823][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 77.086035][ T311] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 77.094336][ T311] usb 2-1: config 0 has no interface number 1 [ 77.100480][ T311] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.101260][ T783] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 77.111815][ T311] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 77.130656][ T311] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 77.142063][ T311] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 77.152344][ T311] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.165624][ T311] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 77.177140][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 77.188315][ T311] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 77.199831][ T311] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 77.208928][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.216929][ T311] usb 2-1: Product: syz [ 77.221131][ T311] usb 2-1: Manufacturer: syz [ 77.225739][ T311] usb 2-1: SerialNumber: syz [ 77.231139][ T311] usb 2-1: config 0 descriptor?? [ 77.236456][ T1332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.271677][ T783] usb 4-1: Using ep0 maxpacket: 16 [ 77.278049][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.289108][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.298898][ T783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.311737][ T783] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.314471][ T31] usb 1-1: device descriptor read/64, error -71 [ 77.320891][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.335847][ T783] usb 4-1: config 0 descriptor?? [ 77.370615][ T374] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0010/input/input11 [ 77.383493][ T36] audit: type=1400 audit(1777718860.230:315): avc: denied { read } for pid=97 comm="acpid" name="event3" dev="devtmpfs" ino=696 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.388589][ T374] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0010/input/input12 [ 77.405728][ T36] audit: type=1400 audit(1777718860.230:316): avc: denied { open } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=696 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.441152][ T374] kye 0003:0458:5013.0010: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 77.464046][ T36] audit: type=1400 audit(1777718860.305:317): avc: denied { ioctl } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=696 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.493847][ T389] usb 2-1: USB disconnect, device number 30 [ 77.501187][ T36] audit: type=1400 audit(1777718860.324:318): avc: denied { mount } for pid=1331 comm="syz.1.349" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.591422][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 77.596536][ T1317] input: syz0 as /devices/virtual/input/input13 [ 77.608378][ T374] usb 3-1: USB disconnect, device number 34 [ 77.740621][ T31] usb 1-1: device descriptor read/64, error -71 [ 77.769192][ T783] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 77.778650][ T783] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 77.982672][ T783] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 77.990919][ T783] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 78.002507][ T783] microsoft 0003:045E:07DA.0011: no inputs found [ 78.007418][ T31] usb 1-1: device descriptor read/64, error -71 [ 78.009340][ T783] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 78.134997][ T31] usb usb1-port1: attempt power cycle [ 78.198007][ T1366] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 78.205711][ T1366] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 78.212684][ T1343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.217315][ T1366] netlink: 3613 bytes leftover after parsing attributes in process `syz.1.359'. [ 78.222330][ T1343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.239597][ T1343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.248076][ T1343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.256475][ T374] usb 4-1: USB disconnect, device number 24 [ 78.285995][ T1370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'. [ 78.412076][ T783] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 78.497266][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 78.519648][ T31] usb 1-1: device descriptor read/8, error -71 [ 78.572941][ T783] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 78.581088][ T783] usb 3-1: config 0 has no interface number 0 [ 78.587267][ T783] usb 3-1: config 0 interface 41 has no altsetting 0 [ 78.595323][ T783] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 78.604425][ T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.612444][ T783] usb 3-1: Product: syz [ 78.616655][ T783] usb 3-1: Manufacturer: syz [ 78.621256][ T783] usb 3-1: SerialNumber: syz [ 78.626830][ T783] usb 3-1: config 0 descriptor?? [ 78.658209][ T31] usb 1-1: device descriptor read/8, error -71 [ 78.710421][ T1225] Bluetooth: hci0: command 0x1003 tx timeout [ 78.710438][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.912910][ T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 78.941346][ T31] usb 1-1: device descriptor read/8, error -71 [ 79.090660][ T31] usb 1-1: device descriptor read/8, error -71 [ 79.114533][ T1398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.369'. [ 79.211323][ T374] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 79.218971][ T31] usb usb1-port1: unable to enumerate USB device [ 79.383277][ T374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.391707][ T374] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 79.402062][ T374] usb 4-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 79.413109][ T374] usb 4-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 79.426380][ T374] usb 4-1: config 1 interface 0 has no altsetting 0 [ 79.435144][ T374] usb 4-1: string descriptor 0 read error: -22 [ 79.441385][ T374] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.450456][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.462362][ T374] usb 4-1: bad CDC descriptors [ 79.674317][ T374] usb 4-1: USB disconnect, device number 25 [ 79.706654][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 79.706670][ T36] audit: type=1400 audit(1777718862.407:320): avc: denied { listen } for pid=1359 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 80.162564][ T783] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 80.174362][ T783] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 80.183877][ T783] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 80.191873][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 80.195242][ T783] usb 3-1: USB disconnect, device number 35 [ 80.287722][ T374] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 80.363847][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.372440][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 80.383390][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 80.396094][ T31] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 80.405195][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.413210][ T31] usb 1-1: Product: syz [ 80.417398][ T31] usb 1-1: Manufacturer: syz [ 80.422023][ T31] usb 1-1: SerialNumber: syz [ 80.447784][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 80.453482][ T374] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 80.462564][ T374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.470199][ T374] usb 2-1: can't read configurations, error -61 [ 80.586143][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 80.607395][ T374] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 80.644599][ T31] usb 1-1: Can't get UAC3 power state for id 10 [ 80.652040][ T31] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 80.661440][ T31] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 80.673298][ T31] usb 1-1: USB disconnect, device number 31 [ 80.747150][ T311] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 80.755386][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.766323][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.776166][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 80.783766][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.798172][ T374] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 80.806193][ T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.815300][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.824076][ T374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.831708][ T374] usb 2-1: can't read configurations, error -61 [ 80.838323][ T374] usb usb2-port1: attempt power cycle [ 80.844168][ T311] usb 4-1: config 0 descriptor?? [ 81.209474][ T374] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 81.217981][ T1422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.378'. [ 81.249507][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 81.258287][ T374] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 81.267316][ T1426] usb usb8: usbfs: process 1426 (syz.0.380) did not claim interface 0 before use [ 81.267923][ T374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.284661][ T374] usb 2-1: can't read configurations, error -61 [ 81.292070][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.299526][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.307173][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.314593][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.322047][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.329457][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.336886][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.344421][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.351824][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.359249][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.366700][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.374134][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.381716][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.389209][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.396640][ T311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 81.404171][ T311] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 81.414811][ T311] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.449417][ T374] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 81.471039][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 81.476530][ T374] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 81.485387][ T374] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.493014][ T374] usb 2-1: can't read configurations, error -61 [ 81.499404][ T374] usb usb2-port1: unable to enumerate USB device [ 81.507665][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.516207][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.590183][ T36] audit: type=1400 audit(1777718864.180:321): avc: denied { setopt } for pid=1410 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.653546][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 81.824716][ T1431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.833793][ T1431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.986488][ T1433] veth1: entered allmulticast mode [ 82.031958][ T1432] veth1: left allmulticast mode [ 82.067462][ T389] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 82.083246][ T36] audit: type=1400 audit(1777718864.640:322): avc: denied { read } for pid=1434 comm="syz.0.383" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.106526][ T36] audit: type=1400 audit(1777718864.640:323): avc: denied { open } for pid=1434 comm="syz.0.383" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.440503][ T374] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 82.601809][ T374] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.615143][ T374] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.625522][ T374] usb 1-1: config 2 interface 0 has no altsetting 0 [ 82.634514][ T374] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 82.643894][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.749582][ T917] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 83.111913][ T374] usbhid 1-1:2.0: can't add hid device: -71 [ 83.120667][ T374] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 83.133032][ T374] usb 1-1: USB disconnect, device number 32 [ 83.284868][ T36] audit: type=1400 audit(1777718865.766:324): avc: denied { listen } for pid=1439 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.326318][ T36] audit: type=1400 audit(1777718865.766:325): avc: denied { accept } for pid=1439 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.371405][ T36] audit: type=1400 audit(1777718865.850:326): avc: denied { mount } for pid=1441 comm="syz.1.386" name="/" dev="ramfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.556281][ T36] audit: type=1400 audit(1777718866.019:327): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.582217][ T1450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 83.609950][ T1452] netlink: 68 bytes leftover after parsing attributes in process `syz.3.389'. [ 83.620001][ T1454] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 83.649737][ T36] audit: type=1400 audit(1777718866.094:328): avc: denied { write } for pid=1453 comm="syz.1.390" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.695227][ T1460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.390'. [ 83.715007][ T1460] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 84.008231][ T917] usb 4-1: device descriptor read/64, error -71 [ 84.262898][ T917] usb 4-1: device descriptor read/64, error -71 [ 84.529391][ T917] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 84.678805][ T917] usb 4-1: device descriptor read/64, error -71 [ 84.859755][ T388] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 84.935558][ T917] usb 4-1: device descriptor read/64, error -71 [ 84.968904][ T1480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.398'. [ 84.998259][ T388] usb 1-1: device descriptor read/64, error -71 [ 85.024423][ T1490] fuse: Bad value for 'fd' [ 85.104853][ T374] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 85.160638][ T36] audit: type=1400 audit(1777718867.530:329): avc: denied { load_policy } for pid=1496 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.160653][ T1497] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 85.160682][ T1497] SELinux: failed to load policy [ 85.190172][ T917] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 85.223055][ T917] usb 4-1: device descriptor read/8, error -71 [ 85.254002][ T388] usb 1-1: device descriptor read/64, error -71 [ 85.265660][ T374] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.278600][ T374] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 85.287668][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.296383][ T374] usb 2-1: config 0 descriptor?? [ 85.302553][ T374] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 85.361717][ T917] usb 4-1: device descriptor read/8, error -71 [ 85.509778][ T388] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 85.519166][ T374] usb 2-1: USB disconnect, device number 35 [ 85.616827][ T389] usb 3-1: device descriptor read/64, error -71 [ 85.617412][ T917] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 85.648330][ T388] usb 1-1: device descriptor read/64, error -71 [ 85.649996][ T917] usb 4-1: device descriptor read/8, error -71 [ 85.798545][ T917] usb 4-1: device descriptor read/8, error -71 [ 85.872131][ T389] usb 3-1: device descriptor read/64, error -71 [ 85.904099][ T388] usb 1-1: device descriptor read/64, error -71 [ 85.915122][ T311] usb 4-1: USB disconnect, device number 26 [ 86.021395][ T388] usb usb1-port1: attempt power cycle [ 86.053288][ T311] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 86.127919][ T389] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 86.191850][ T311] usb 4-1: device descriptor read/64, error -71 [ 86.266474][ T389] usb 3-1: device descriptor read/64, error -71 [ 86.299863][ T45] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 86.319681][ T45] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.383722][ T388] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 86.405973][ T388] usb 1-1: device descriptor read/8, error -71 [ 86.458326][ T311] usb 4-1: device descriptor read/64, error -71 [ 86.512450][ T1507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.407'. [ 86.526468][ T389] usb 3-1: device descriptor read/64, error -71 [ 86.544633][ T388] usb 1-1: device descriptor read/8, error -71 [ 86.650306][ T389] usb usb3-port1: attempt power cycle [ 86.714063][ T311] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 86.788694][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 86.799318][ T388] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 86.821729][ T388] usb 1-1: device descriptor read/8, error -71 [ 86.852625][ T311] usb 4-1: device descriptor read/64, error -71 [ 86.948569][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 86.954867][ T45] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 86.960677][ T388] usb 1-1: device descriptor read/8, error -71 [ 86.963775][ T45] usb 2-1: config 0 has no interface number 0 [ 86.975284][ T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 86.985638][ T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 86.997229][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 87.006360][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.014457][ T45] usb 2-1: Product: syz [ 87.018653][ T45] usb 2-1: Manufacturer: syz [ 87.023298][ T45] usb 2-1: SerialNumber: syz [ 87.023313][ T389] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 87.038023][ T45] usb 2-1: config 0 descriptor?? [ 87.043425][ T1509] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.050701][ T1509] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.059934][ T389] usb 3-1: device descriptor read/8, error -71 [ 87.076491][ T388] usb usb1-port1: unable to enumerate USB device [ 87.205407][ T389] usb 3-1: device descriptor read/8, error -71 [ 87.271704][ T1509] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.279037][ T1509] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.353506][ T311] usb 4-1: device descriptor read/64, error -71 [ 87.460108][ T389] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 87.470886][ T311] usb usb4-port1: attempt power cycle [ 87.482450][ T389] usb 3-1: device descriptor read/8, error -71 [ 87.500359][ T45] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 87.510474][ T45] asix 2-1:0.34: probe with driver asix failed with error -71 [ 87.518924][ T45] usb 2-1: USB disconnect, device number 36 [ 87.620915][ T389] usb 3-1: device descriptor read/8, error -71 [ 87.737257][ T389] usb usb3-port1: unable to enumerate USB device [ 87.833073][ T311] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 87.855488][ T311] usb 4-1: device descriptor read/8, error -71 [ 87.994041][ T311] usb 4-1: device descriptor read/8, error -71 [ 88.227396][ T389] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 88.248703][ T311] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 88.271127][ T311] usb 4-1: device descriptor read/8, error -71 [ 88.388911][ T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.399983][ T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 88.410897][ T389] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.423768][ T389] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 88.432899][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.442206][ T311] usb 4-1: device descriptor read/8, error -71 [ 88.461948][ T389] usb 1-1: config 0 descriptor?? [ 88.467331][ T1514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 88.568513][ T311] usb usb4-port1: unable to enumerate USB device [ 88.856211][ T374] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 88.905383][ T389] samsung 0003:0419:0600.0014: unexpected long global item [ 88.912815][ T389] samsung 0003:0419:0600.0014: parse failed [ 88.918732][ T389] samsung 0003:0419:0600.0014: probe with driver samsung failed with error -22 [ 89.010900][ T36] audit: type=1400 audit(1777718871.133:330): avc: denied { remount } for pid=1528 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.032468][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.045801][ T374] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 89.054965][ T1534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.416'. [ 89.059192][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.076205][ T374] usb 3-1: config 0 descriptor?? [ 89.083415][ T374] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 89.119765][ T783] usb 1-1: USB disconnect, device number 37 [ 89.297080][ T783] usb 3-1: USB disconnect, device number 40 [ 89.357070][ T374] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 89.495625][ T374] usb 2-1: device descriptor read/64, error -71 [ 89.751403][ T374] usb 2-1: device descriptor read/64, error -71 [ 89.964557][ T45] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 90.007180][ T374] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 90.124382][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 90.135482][ T45] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.143605][ T45] usb 1-1: config 0 has no interface number 0 [ 90.150432][ T374] usb 2-1: device descriptor read/64, error -71 [ 90.162778][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.172035][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.180761][ T45] usb 1-1: Product: syz [ 90.184972][ T45] usb 1-1: Manufacturer: syz [ 90.189810][ T45] usb 1-1: SerialNumber: syz [ 90.196329][ T45] usb 1-1: config 0 descriptor?? [ 90.207617][ T45] smsc95xx v2.0.0 [ 90.228379][ T36] audit: type=1400 audit(1777718872.278:331): avc: denied { checkpoint_restore } for pid=1559 comm="syz.3.425" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.412269][ T374] usb 2-1: device descriptor read/64, error -71 [ 90.540162][ T374] usb usb2-port1: attempt power cycle [ 90.550693][ T389] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 90.635948][ T917] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 90.644413][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 90.655284][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.725098][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.736077][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.746061][ T389] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 90.755345][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.764301][ T389] usb 4-1: config 0 descriptor?? [ 90.818253][ T917] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.831688][ T917] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 90.840930][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.860388][ T917] usb 3-1: config 0 descriptor?? [ 90.868880][ T917] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 90.880136][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 90.890927][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 90.902273][ T45] usb 1-1: USB disconnect, device number 38 [ 90.913081][ T374] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 90.935462][ T374] usb 2-1: device descriptor read/8, error -71 [ 91.074388][ T374] usb 2-1: device descriptor read/8, error -71 [ 91.082883][ T45] usb 3-1: USB disconnect, device number 41 [ 91.199292][ T389] wacom 0003:056A:030C.0015: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 91.328788][ T374] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 91.351177][ T374] usb 2-1: device descriptor read/8, error -71 [ 91.412455][ T389] usb 4-1: USB disconnect, device number 31 [ 91.489764][ T374] usb 2-1: device descriptor read/8, error -71 [ 91.605904][ T374] usb usb2-port1: unable to enumerate USB device [ 92.096010][ T389] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 92.255891][ T45] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 92.257478][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.274313][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.284839][ T389] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.293920][ T389] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 92.301939][ T389] usb 3-1: Manufacturer: syz [ 92.311413][ T389] usb 3-1: config 0 descriptor?? [ 92.422832][ T45] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 92.433401][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 92.447150][ T45] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 92.456276][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.467604][ T45] usb 4-1: config 0 descriptor?? [ 92.902051][ T45] usb 4-1: string descriptor 0 read error: -71 [ 92.908848][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 92.917045][ T45] usb 4-1: USB disconnect, device number 32 [ 92.959307][ T388] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 93.120907][ T388] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.134049][ T388] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 93.143164][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.151851][ T388] usb 1-1: config 0 descriptor?? [ 93.157900][ T388] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 93.174480][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 93.184489][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.192980][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.228043][ T389] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 93.236979][ T389] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 93.245077][ T389] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 93.253311][ T389] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 93.261197][ T389] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 93.271381][ T389] usb 3-1: USB disconnect, device number 42 [ 93.373276][ T388] usb 1-1: USB disconnect, device number 39 [ 93.849911][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.857438][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.864869][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.872377][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.879834][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.887278][ T388] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 93.894891][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.902430][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.910025][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.917447][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.924881][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.932315][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.939729][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.947135][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.954566][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.961999][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.969375][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.976801][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.984465][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.991887][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 93.999299][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.006791][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.014206][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.021641][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.029057][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.036489][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.043885][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.051375][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.058864][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.066246][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.073764][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.081216][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.088662][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.096197][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.103654][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.111167][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.118648][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.126125][ T388] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.136254][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.143693][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.151096][ T388] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.160323][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.168172][ T388] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 94.177285][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.184707][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.192156][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.200590][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.208249][ T388] usb 4-1: config 0 descriptor?? [ 94.213281][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.220764][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.228708][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.236479][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.244003][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.251449][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.258863][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.266319][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.273834][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.281270][ T36] audit: type=1400 audit(1777718876.078:332): avc: denied { setattr } for pid=1626 comm="syz.0.449" name="TIPC" dev="sockfs" ino=15571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.303977][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.311412][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.318957][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.326479][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.333904][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.341372][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.348832][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.356361][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.363774][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.371439][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.378994][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.386417][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.393879][ T389] hid-generic 0001:007C:0009.0017: unknown main item tag 0x0 [ 94.402783][ T389] hid-generic 0001:007C:0009.0017: hidraw0: HID v0.1a Device [syz0] on syz0 [ 94.450841][ T1633] fido_id[1633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.696431][ T389] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 94.857267][ T389] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.868259][ T389] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 94.879940][ T389] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.889015][ T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.897037][ T389] usb 1-1: Product: syz [ 94.901240][ T389] usb 1-1: Manufacturer: syz [ 94.905847][ T389] usb 1-1: SerialNumber: syz [ 94.912132][ T389] cdc_mbim 1-1:1.0: skipping garbage [ 95.182082][ T1650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.411671][ T389] cdc_mbim 1-1:1.0: bind() failure [ 95.418547][ T389] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 95.426886][ T389] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 95.436409][ T389] usb 1-1: USB disconnect, device number 40 [ 95.708573][ T36] audit: type=1326 audit(1777718877.420:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.1.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f893b99cdd9 code=0x0 [ 95.708924][ T388] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 95.912775][ T388] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.925900][ T388] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 95.935049][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.956905][ T388] usb 3-1: config 0 descriptor?? [ 95.964230][ T388] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 95.980034][ T1667] FAULT_INJECTION: forcing a failure. [ 95.980034][ T1667] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.993230][ T1667] CPU: 0 UID: 0 PID: 1667 Comm: syz.1.458 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 95.993263][ T1667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.993278][ T1667] Call Trace: [ 95.993286][ T1667] [ 95.993295][ T1667] __dump_stack+0x21/0x30 [ 95.993329][ T1667] dump_stack_lvl+0x140/0x1c0 [ 95.993358][ T1667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.993389][ T1667] ? __cfi_sk_ioctl+0x10/0x10 [ 95.993419][ T1667] dump_stack+0x19/0x20 [ 95.993446][ T1667] should_fail_ex+0x3d7/0x530 [ 95.993477][ T1667] should_fail+0xf/0x20 [ 95.993504][ T1667] should_fail_usercopy+0x1e/0x30 [ 95.993535][ T1667] _copy_from_user+0x20/0xa0 [ 95.993557][ T1667] dev_ethtool+0xc1/0x19d0 [ 95.993582][ T1667] ? inet_ioctl+0x492/0x570 [ 95.993610][ T1667] ? __cfi_dev_ethtool+0x10/0x10 [ 95.993635][ T1667] ? full_name_hash+0xa1/0xf0 [ 95.993666][ T1667] ? dev_get_by_name_rcu+0xe9/0x140 [ 95.993687][ T1667] dev_ioctl+0x390/0x1000 [ 95.993723][ T1667] sock_do_ioctl+0x249/0x330 [ 95.993758][ T1667] ? sock_show_fdinfo+0xd0/0xd0 [ 95.993786][ T1667] ? __cfi_sock_ioctl+0x10/0x10 [ 95.993814][ T1667] sock_ioctl+0x5b5/0x7f0 [ 95.993840][ T1667] ? __cfi_sock_ioctl+0x10/0x10 [ 95.993867][ T1667] ? __fget_files+0x2c5/0x340 [ 95.993889][ T1667] ? bpf_lsm_file_ioctl+0xd/0x20 [ 95.993913][ T1667] ? security_file_ioctl+0x3e/0x110 [ 95.993952][ T1667] ? __cfi_sock_ioctl+0x10/0x10 [ 95.993977][ T1667] __se_sys_ioctl+0x132/0x1b0 [ 95.993998][ T1667] __x64_sys_ioctl+0x7f/0xa0 [ 95.994018][ T1667] x64_sys_call+0x1878/0x2ee0 [ 95.994048][ T1667] do_syscall_64+0x57/0xf0 [ 95.994072][ T1667] ? clear_bhb_loop+0x50/0xa0 [ 95.994099][ T1667] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.994124][ T1667] RIP: 0033:0x7f893b99cdd9 [ 95.994142][ T1667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.994161][ T1667] RSP: 002b:00007f893a3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.994184][ T1667] RAX: ffffffffffffffda RBX: 00007f893bc16180 RCX: 00007f893b99cdd9 [ 95.994201][ T1667] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 95.994216][ T1667] RBP: 00007f893a3b5090 R08: 0000000000000000 R09: 0000000000000000 [ 95.994244][ T1667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.994257][ T1667] R13: 00007f893bc16218 R14: 00007f893bc16180 R15: 00007ffd25330178 [ 95.994274][ T1667] [ 96.299839][ T374] usb 3-1: USB disconnect, device number 43 [ 96.358934][ T917] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 96.518778][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 96.525265][ T917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.532333][ T917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 96.541422][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 96.549054][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.558216][ T917] usb 1-1: config 0 descriptor?? [ 96.689328][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.778779][ T1739] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 96.787922][ T917] apple 0003:05AC:0241.0018: unknown main item tag 0x6 [ 96.789882][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.798702][ T917] apple 0003:05AC:0241.0018: item fetching failed at offset 11/43 [ 96.805262][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.814005][ T917] apple 0003:05AC:0241.0018: parse failed [ 96.824432][ T917] apple 0003:05AC:0241.0018: probe with driver apple failed with error -22 [ 96.839151][ T388] usb 4-1: USB disconnect, device number 33 [ 96.945081][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.002376][ T68] usb 1-1: USB disconnect, device number 41 [ 97.190244][ T388] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 97.200871][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 97.339403][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.361859][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.372813][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.382675][ T388] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 97.391753][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.400452][ T388] usb 4-1: config 0 descriptor?? [ 97.551087][ T1744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 97.595311][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.622064][ T1742] netlink: 'syz.3.463': attribute type 25 has an invalid length. [ 97.635716][ T388] usbhid 4-1:0.0: can't add hid device: -71 [ 97.641852][ T388] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.650587][ T388] usb 4-1: USB disconnect, device number 34 [ 97.712481][ T45] usb usb2-port1: attempt power cycle [ 97.840308][ T917] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 98.001440][ T917] usb 1-1: config 1 has an invalid interface number: 244 but max is 1 [ 98.009728][ T917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.019929][ T917] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 98.029005][ T917] usb 1-1: config 1 has no interface number 2 [ 98.035112][ T917] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.049475][ T917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.058558][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.066607][ T917] usb 1-1: Product: syz [ 98.070789][ T917] usb 1-1: Manufacturer: syz [ 98.075417][ T917] usb 1-1: SerialNumber: syz [ 98.083007][ T917] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 98.090477][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 98.098134][ T917] cdc_ncm 1-1:1.0: bind() failure [ 98.118533][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.257017][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.296563][ T1749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.305105][ T1749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.317019][ T388] usb 1-1: USB disconnect, device number 42 [ 98.501068][ T917] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 98.511897][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 98.534476][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.660930][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 98.667311][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.678493][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.688412][ T917] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.698411][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.706651][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.717136][ T917] usb 4-1: config 0 descriptor?? [ 98.727954][ T917] hub 4-1:0.0: USB hub found [ 98.820875][ T45] usb usb2-port1: unable to enumerate USB device [ 98.936395][ T917] hub 4-1:0.0: 1 port detected [ 99.119185][ T68] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 99.150274][ T1757] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 99.157936][ T1757] SELinux: failed to load policy [ 99.280140][ T68] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.290363][ T68] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.299345][ T68] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 99.308448][ T68] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.317310][ T68] usb 1-1: config 0 descriptor?? [ 99.541631][ T36] audit: type=1400 audit(1777718881.014:334): avc: denied { accept } for pid=1756 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.767258][ T1776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.474'. [ 99.929165][ T45] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 100.025096][ T388] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 100.067701][ T45] usb 2-1: device descriptor read/64, error -71 [ 100.186499][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.194980][ T388] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 100.203224][ T388] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 100.213577][ T388] usb 3-1: config 63 has no interface number 0 [ 100.219820][ T388] usb 3-1: config 63 interface 66 has no altsetting 0 [ 100.228164][ T388] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 100.237225][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.245284][ T388] usb 3-1: Product: syz [ 100.249491][ T388] usb 3-1: Manufacturer: syz [ 100.254102][ T388] usb 3-1: SerialNumber: syz [ 100.281520][ T917] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 100.287908][ T917] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 100.296914][ T917] usbhid 4-1:0.0: can't add hid device: -32 [ 100.302916][ T917] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 100.323462][ T45] usb 2-1: device descriptor read/64, error -71 [ 100.330138][ T917] usb 4-1: USB disconnect, device number 35 [ 100.476421][ T388] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 100.483057][ T388] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 100.489660][ T388] usb 3-1: No valid video chain found. [ 100.497660][ T388] usb 3-1: USB disconnect, device number 44 [ 100.579249][ T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 100.717817][ T45] usb 2-1: device descriptor read/64, error -71 [ 100.973554][ T45] usb 2-1: device descriptor read/64, error -71 [ 101.090976][ T45] usb usb2-port1: attempt power cycle [ 101.154788][ T917] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 101.206322][ T36] audit: type=1400 audit(1777718882.581:335): avc: denied { write } for pid=1788 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.314687][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 101.321736][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.335523][ T917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.348888][ T917] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 101.358260][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.381722][ T917] usb 4-1: config 0 descriptor?? [ 101.453136][ T45] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 101.475545][ T45] usb 2-1: device descriptor read/8, error -71 [ 101.614231][ T45] usb 2-1: device descriptor read/8, error -71 [ 101.764143][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 101.790490][ T36] audit: type=1400 audit(1777718883.125:336): avc: denied { setopt } for pid=1802 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.820257][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.833961][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.841259][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.855101][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.862348][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.869486][ T45] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 101.877301][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.884541][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.891787][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.899071][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.906569][ T917] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0 [ 101.914401][ T45] usb 2-1: device descriptor read/8, error -71 [ 101.925211][ T917] itetech 0003:06CB:73F4.0019: hidraw0: USB HID v0.04 Device [HID 06cb:73f4] on usb-dummy_hcd.3-1/input0 [ 102.031127][ T388] usb 4-1: USB disconnect, device number 36 [ 102.046118][ T1820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.051515][ T45] usb 2-1: device descriptor read/8, error -71 [ 102.059049][ T1820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.071164][ T36] audit: type=1400 audit(1777718883.397:337): avc: denied { read } for pid=1818 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.085911][ T917] usb 1-1: USB disconnect, device number 43 [ 102.111091][ T36] audit: type=1400 audit(1777718883.425:338): avc: denied { watch watch_reads } for pid=1822 comm="syz.0.485" path="/116/file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.167248][ T45] usb usb2-port1: unable to enumerate USB device [ 102.401624][ T68] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 102.561520][ T68] usb 3-1: Using ep0 maxpacket: 32 [ 102.567938][ T68] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.582832][ T68] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.594049][ T68] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.603922][ T68] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.618250][ T68] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.625561][ T68] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 102.634631][ T68] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.643228][ T68] usb 3-1: config 0 descriptor?? [ 102.657450][ T388] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 102.817253][ T388] usb 1-1: Using ep0 maxpacket: 16 [ 102.823478][ T388] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.833714][ T388] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.844379][ T388] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.853550][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.861645][ T388] usb 1-1: Product: syz [ 102.865842][ T388] usb 1-1: Manufacturer: syz [ 102.870600][ T388] usb 1-1: SerialNumber: syz [ 102.871269][ T45] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 102.876108][ T68] usbhid 3-1:0.0: can't add hid device: -71 [ 102.888830][ T68] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.898196][ T68] usb 3-1: USB disconnect, device number 45 [ 103.043846][ T45] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 103.052990][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.061016][ T45] usb 4-1: Product: syz [ 103.065241][ T45] usb 4-1: Manufacturer: syz [ 103.069970][ T45] usb 4-1: SerialNumber: syz [ 103.119287][ T388] usb 1-1: 0:2 : does not exist [ 103.124269][ T388] usb 1-1: unit 9 not found! [ 103.130675][ T388] usb 1-1: USB disconnect, device number 44 [ 103.140751][ T1287] udevd[1287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.222255][ T374] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 103.383126][ T374] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.393295][ T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.402323][ T374] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.421087][ T374] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.431869][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.440160][ T374] usb 2-1: Product: syz [ 103.444382][ T374] usb 2-1: Manufacturer: syz [ 103.449050][ T374] usb 2-1: SerialNumber: syz [ 103.456125][ T374] cdc_mbim 2-1:1.0: skipping garbage [ 103.461519][ T374] usb 2-1: selecting invalid altsetting 1 [ 103.504360][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 103.680532][ T388] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 103.852662][ T388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.862825][ T388] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.871822][ T388] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 103.881099][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.893532][ T388] usb 3-1: config 0 descriptor?? [ 103.899240][ T374] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 103.905979][ T374] cdc_mbim 2-1:1.0: bind() failure [ 103.914481][ T374] usb 2-1: USB disconnect, device number 49 [ 104.154650][ T1853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.163295][ T1853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.171926][ T1853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.180463][ T1853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.277331][ T45] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 104.437960][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 104.448350][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 104.457664][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.465918][ T45] usb 1-1: Product: syz [ 104.470145][ T45] usb 1-1: Manufacturer: syz [ 104.474777][ T45] usb 1-1: SerialNumber: syz [ 104.703652][ T388] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 104.863494][ T388] usb 2-1: Using ep0 maxpacket: 8 [ 104.870054][ T388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.878522][ T388] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 104.887323][ T388] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.897601][ T388] usb 2-1: config 1 interface 0 altsetting 102 bulk endpoint 0x82 has invalid maxpacket 584 [ 104.907743][ T388] usb 2-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.920726][ T388] usb 2-1: config 1 interface 0 has no altsetting 0 [ 104.928895][ T388] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.937979][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.945997][ T388] usb 2-1: Product: syz [ 104.950189][ T388] usb 2-1: Manufacturer: syz [ 104.954793][ T388] usb 2-1: SerialNumber: syz [ 104.960929][ T1856] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 105.183820][ T1856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.192480][ T1856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.203662][ T388] usb 2-1: USB disconnect, device number 50 [ 105.567227][ C1] usblp0: nonzero write bulk status received: -71 [ 105.567528][ T388] usb 4-1: USB disconnect, device number 37 [ 105.765920][ T1862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.498'. [ 105.788152][ T36] audit: type=1400 audit(1777718886.878:339): avc: denied { read } for pid=1863 comm="syz.1.499" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.811722][ T36] audit: type=1400 audit(1777718886.878:340): avc: denied { open } for pid=1863 comm="syz.1.499" path="/141/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.836241][ T36] audit: type=1400 audit(1777718886.878:341): avc: denied { ioctl } for pid=1863 comm="syz.1.499" path="/141/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.046469][ T388] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 106.206321][ T388] usb 2-1: Using ep0 maxpacket: 32 [ 106.212044][ T1853] usblp0: removed [ 106.213418][ T388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.230247][ T388] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 106.240614][ T388] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 106.251054][ T388] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 106.260438][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.268445][ T388] usb 2-1: Product: syz [ 106.272670][ T388] usb 2-1: Manufacturer: syz [ 106.277298][ T388] usb 2-1: SerialNumber: syz [ 106.501477][ T388] ums-jumpshot 2-1:6.0: USB Mass Storage device detected [ 106.509600][ T388] ums-jumpshot 2-1:6.0: Quirks match for vid 05dc pid 0001: 2 [ 106.570191][ T388] usb 2-1: USB disconnect, device number 51 [ 106.632626][ T917] usb 3-1: USB disconnect, device number 46 [ 106.646732][ T1870] rust_binder: Write failure EFAULT in pid:340 [ 106.718830][ T36] audit: type=1400 audit(1777718887.760:342): avc: denied { create } for pid=1872 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 106.749856][ T36] audit: type=1400 audit(1777718887.770:343): avc: denied { sys_admin } for pid=1872 comm="syz.2.502" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 106.867581][ T36] audit: type=1400 audit(1777718887.901:344): avc: denied { sqpoll } for pid=1882 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.927434][ T36] audit: type=1400 audit(1777718887.948:345): avc: denied { write } for pid=1884 comm="syz.2.506" name="nf_conntrack" dev="proc" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.007205][ T1888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 107.236944][ T36] audit: type=1400 audit(1777718888.239:346): avc: denied { wake_alarm } for pid=1905 comm="syz.2.513" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.347994][ T917] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 107.507543][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 107.518602][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1288, setting to 1024 [ 107.529699][ T917] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.538796][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.547761][ T917] usb 4-1: config 0 descriptor?? [ 107.553077][ T1900] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.988586][ T917] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 107.999007][ T917] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input20 [ 108.075147][ T917] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 108.203422][ T1900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.212288][ T1900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.093861][ T388] usb 4-1: USB disconnect, device number 38 [ 109.832101][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 115.619182][ T36] audit: type=1400 audit(1777718896.102:347): avc: denied { append } for pid=1911 comm="syz.1.514" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.643248][ T1914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 115.715039][ T1920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 115.792639][ T36] audit: type=1400 audit(1777718896.271:348): avc: denied { write } for pid=1926 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.043049][ T68] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 116.202881][ T68] usb 3-1: Using ep0 maxpacket: 32 [ 116.209123][ T68] usb 3-1: config index 0 descriptor too short (expected 557, got 45) [ 116.217356][ T68] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.227483][ T68] usb 3-1: config 0 has no interfaces? [ 116.234123][ T68] usb 3-1: string descriptor 0 read error: -71 [ 116.241000][ T68] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 116.250519][ T68] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.259284][ T68] usb 3-1: config 0 descriptor?? [ 116.264474][ T68] usb 3-1: can't set config #0, error -71 [ 116.271260][ T68] usb 3-1: USB disconnect, device number 47 [ 116.577147][ T1935] binder: Unknown parameter 'defcontext01777777777777777777777' [ 116.610889][ T36] audit: type=1400 audit(1777718897.040:349): avc: denied { read } for pid=1940 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.727942][ T36] audit: type=1400 audit(1777718897.143:350): avc: denied { ioctl } for pid=1940 comm="syz.1.524" path="socket:[17134]" dev="sockfs" ino=17134 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.842669][ T68] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 116.980865][ T68] usb 4-1: device descriptor read/64, error -71 [ 117.194009][ T389] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 117.236762][ T68] usb 4-1: device descriptor read/64, error -71 [ 117.355301][ T389] usb 3-1: config 14 has an invalid interface number: 144 but max is 1 [ 117.363610][ T389] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 117.372429][ T389] usb 3-1: config 14 has an invalid interface number: 36 but max is 1 [ 117.380631][ T389] usb 3-1: config 14 has no interface number 0 [ 117.386828][ T389] usb 3-1: config 14 has no interface number 1 [ 117.393003][ T389] usb 3-1: config 14 interface 144 altsetting 5 endpoint 0x1 has invalid maxpacket 7016, setting to 64 [ 117.404074][ T389] usb 3-1: config 14 interface 144 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.417235][ T389] usb 3-1: config 14 interface 144 has no altsetting 0 [ 117.424128][ T389] usb 3-1: config 14 interface 36 has no altsetting 0 [ 117.432417][ T389] usb 3-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=8f.2b [ 117.441502][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.449516][ T389] usb 3-1: Product: syz [ 117.453700][ T389] usb 3-1: Manufacturer: syz [ 117.458303][ T389] usb 3-1: SerialNumber: syz [ 117.464205][ T1947] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.471498][ T1947] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.492400][ T68] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 117.630958][ T68] usb 4-1: device descriptor read/64, error -71 [ 117.692837][ T1947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.701391][ T1947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.710715][ T1947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.719236][ T1947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.727656][ T1947] cgroup: release_agent respecified [ 117.886730][ T68] usb 4-1: device descriptor read/64, error -71 [ 118.004054][ T68] usb usb4-port1: attempt power cycle [ 118.366322][ T68] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 118.388740][ T68] usb 4-1: device descriptor read/8, error -71 [ 118.527262][ T68] usb 4-1: device descriptor read/8, error -71 [ 118.781945][ T68] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 118.804390][ T68] usb 4-1: device descriptor read/8, error -71 [ 118.942839][ T68] usb 4-1: device descriptor read/8, error -71 [ 119.059119][ T68] usb usb4-port1: unable to enumerate USB device [ 119.823258][ T1952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.527'. [ 120.039496][ T36] audit: type=1326 audit(1777718900.249:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1945 comm="syz.2.525" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04919cdd9 code=0x7fc00000 [ 120.098630][ T389] usb 3-1: USB disconnect, device number 48 [ 120.129421][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.177459][ T36] audit: type=1400 audit(1777718900.381:352): avc: denied { mounton } for pid=1969 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 120.226435][ T1969] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.233678][ T1969] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.240757][ T1969] bridge_slave_0: entered allmulticast mode [ 120.247283][ T1969] bridge_slave_0: entered promiscuous mode [ 120.253767][ T1969] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.260794][ T1969] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.267943][ T1969] bridge_slave_1: entered allmulticast mode [ 120.274251][ T1969] bridge_slave_1: entered promiscuous mode [ 120.319317][ T1969] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.326370][ T1969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.333664][ T1969] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.340713][ T1969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.361589][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.368835][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.378435][ T1709] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.385606][ T1709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.394613][ T1709] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.401670][ T1709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.428007][ T1969] veth0_vlan: entered promiscuous mode [ 120.438916][ T1969] veth1_macvtap: entered promiscuous mode [ 120.455621][ T389] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 120.615216][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 120.621623][ T389] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 120.629976][ T389] usb 3-1: config 8 has no interface number 0 [ 120.636593][ T389] usb 3-1: config 8 interface 37 has no altsetting 0 [ 120.645299][ T389] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=2b.c9 [ 120.654729][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.662928][ T389] usb 3-1: Product: syz [ 120.667218][ T389] usb 3-1: Manufacturer: syz [ 120.672234][ T389] usb 3-1: SerialNumber: syz [ 120.732247][ T388] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.902772][ T388] usb 5-1: Using ep0 maxpacket: 16 [ 120.909307][ T388] usb 5-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 120.919880][ T388] usb 5-1: config 0 interface 0 altsetting 133 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 120.933187][ T388] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.939902][ T388] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 120.956085][ T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.972366][ T388] usb 5-1: config 0 descriptor?? [ 120.994466][ T388] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 121.130520][ T389] ums-sddr55 3-1:8.37: USB Mass Storage device detected [ 121.192024][ T389] usb 3-1: USB disconnect, device number 49 [ 121.766108][ T45] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 121.925878][ T389] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 121.928018][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.941934][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.952056][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.963108][ T45] usb 4-1: string descriptor 0 read error: -22 [ 121.969367][ T45] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 121.978468][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.087073][ T389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.095113][ T389] usb 3-1: not running at top speed; connect to a high speed hub [ 122.103735][ T389] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid maxpacket 61501, setting to 64 [ 122.115243][ T389] usb 3-1: config 1 interface 0 has no altsetting 0 [ 122.123225][ T389] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.132347][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.140593][ T389] usb 3-1: Product: syz [ 122.144777][ T389] usb 3-1: Manufacturer: syz [ 122.149371][ T389] usb 3-1: SerialNumber: syz [ 122.155034][ T1985] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 122.277599][ T1225] Bluetooth: hci0: command 0x1003 tx timeout [ 122.277602][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.379131][ T389] usb 3-1: bad CDC descriptors [ 122.385709][ T389] usb 3-1: USB disconnect, device number 50 [ 122.586058][ T2001] capability: warning: `syz.1.541' uses 32-bit capabilities (legacy support in use) [ 122.619358][ T2003] 9pnet_fd: Insufficient options for proto=fd [ 123.742484][ T389] usb 5-1: USB disconnect, device number 2 [ 123.857662][ T36] audit: type=1400 audit(1777718903.834:353): avc: denied { bind } for pid=2026 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.892254][ T2033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'. [ 123.945054][ T2039] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.153236][ T68] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 124.270485][ T389] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 124.314384][ T68] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.325395][ T68] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.335269][ T68] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 124.344340][ T68] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.353515][ T68] usb 3-1: config 0 descriptor?? [ 124.431459][ T389] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 124.442444][ T389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 124.453277][ T389] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 124.466320][ T389] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 124.475414][ T389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.484266][ T389] usb 5-1: config 0 descriptor?? [ 124.489573][ T2035] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 124.721842][ T311] usb 4-1: USB disconnect, device number 43 [ 124.790712][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 124.800121][ T2029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.808984][ T2029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.817487][ T36] audit: type=1400 audit(1777718904.734:354): avc: denied { getopt } for pid=2027 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.838513][ T68] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 124.846000][ T68] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 124.853418][ T68] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 124.860994][ T68] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 124.868421][ T68] playstation 0003:054C:0DF2.001B: item fetching failed at offset 4/5 [ 124.876770][ T68] playstation 0003:054C:0DF2.001B: Parse failed [ 124.883146][ T68] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22 [ 124.903952][ T36] audit: type=1400 audit(1777718904.819:355): avc: denied { read } for pid=2047 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.923901][ T36] audit: type=1400 audit(1777718904.819:356): avc: denied { ioctl } for pid=2047 comm="syz.1.560" path="socket:[18542]" dev="sockfs" ino=18542 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.950842][ T389] waltop 0003:172F:0038.001C: unknown main item tag 0x0 [ 124.958486][ T389] waltop 0003:172F:0038.001C: unexpected long global item [ 124.958908][ T2050] netlink: 'syz.1.561': attribute type 3 has an invalid length. [ 124.966425][ T389] waltop 0003:172F:0038.001C: probe with driver waltop failed with error -22 [ 124.977660][ T2050] netlink: 944 bytes leftover after parsing attributes in process `syz.1.561'. [ 125.080471][ T311] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 125.165439][ T389] usb 5-1: USB disconnect, device number 3 [ 125.261604][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 125.268074][ T311] usb 4-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 125.278442][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.288870][ T311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.298068][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.306090][ T311] usb 4-1: Product: syz [ 125.310409][ T311] usb 4-1: Manufacturer: syz [ 125.315044][ T311] usb 4-1: SerialNumber: syz [ 125.409861][ T2067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 125.449254][ T2071] netlink: 100 bytes leftover after parsing attributes in process `syz.1.567'. [ 125.513182][ T2080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 125.522110][ T2080] bridge_slave_1: left allmulticast mode [ 125.527875][ T2080] bridge_slave_1: left promiscuous mode [ 125.533837][ T2080] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.541775][ T2080] bridge_slave_0: left allmulticast mode [ 125.547483][ T2080] bridge_slave_0: left promiscuous mode [ 125.553355][ T2080] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.701862][ T311] usb 4-1: 0:2 : does not exist [ 125.710650][ T311] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 125.726336][ T311] usb 4-1: USB disconnect, device number 44 [ 125.744125][ T1967] udevd[1967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.986315][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.050310][ T389] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 126.124848][ T45] usb 5-1: device descriptor read/64, error -71 [ 126.211177][ T389] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.219362][ T389] usb 2-1: config 0 has no interface number 0 [ 126.225535][ T389] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.236454][ T389] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.246256][ T389] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.259120][ T389] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 126.270452][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.280455][ T389] usb 2-1: config 0 descriptor?? [ 126.285761][ T2095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.575'. [ 126.380762][ T45] usb 5-1: device descriptor read/64, error -71 [ 126.636433][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.774991][ T45] usb 5-1: device descriptor read/64, error -71 [ 126.932399][ T389] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.001D/input/input22 [ 126.949124][ T389] uclogic 0003:28BD:0042.001D: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 127.030749][ T45] usb 5-1: device descriptor read/64, error -71 [ 127.096285][ T311] usb 3-1: USB disconnect, device number 51 [ 127.145356][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.153961][ T45] usb usb5-port1: attempt power cycle [ 127.155532][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.175353][ T783] usb 2-1: USB disconnect, device number 52 [ 127.521161][ T311] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 127.532888][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.577237][ T2127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.586'. [ 127.600302][ T45] usb 5-1: device descriptor read/8, error -71 [ 127.629971][ T2129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 127.661049][ T36] audit: type=1400 audit(1777718907.409:357): avc: denied { getopt } for pid=2128 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.661470][ T2129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5292 sclass=netlink_route_socket pid=2129 comm=syz.3.587 [ 127.745500][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 127.756364][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.768376][ T45] usb 5-1: device descriptor read/8, error -71 [ 127.778703][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.798179][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.820991][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.835025][ T311] usb 3-1: config 0 descriptor?? [ 127.845243][ T311] hub 3-1:0.0: USB hub found [ 127.870354][ T36] audit: type=1400 audit(1777718907.596:358): avc: denied { create } for pid=2131 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.009351][ T36] audit: type=1400 audit(1777718907.728:359): avc: denied { create } for pid=2135 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.034393][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.056727][ T311] hub 3-1:0.0: 1 port detected [ 128.065501][ T45] usb 5-1: device descriptor read/8, error -71 [ 128.204009][ T45] usb 5-1: device descriptor read/8, error -71 [ 128.321513][ T45] usb usb5-port1: unable to enumerate USB device [ 128.386137][ T2143] syz.3.593 (2143): /proc/2142/oom_adj is deprecated, please use /proc/2142/oom_score_adj instead. [ 128.427081][ T917] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 128.449937][ T2151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.596'. [ 128.472799][ T2153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.586690][ T917] usb 2-1: Using ep0 maxpacket: 16 [ 128.592921][ T917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.605805][ T917] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 128.614923][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.623670][ T917] usb 2-1: config 0 descriptor?? [ 128.938439][ T783] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 128.993105][ T2169] rust_binder: Write failure EFAULT in pid:19 [ 129.098274][ T783] usb 4-1: Using ep0 maxpacket: 32 [ 129.110754][ T783] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 129.118952][ T783] usb 4-1: config 0 has no interface number 0 [ 129.125109][ T783] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 129.130320][ T917] usbhid 2-1:0.0: can't add hid device: -71 [ 129.135144][ T783] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.148350][ T917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.152383][ T783] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.168705][ T783] usb 4-1: config 0 interface 196 has no altsetting 0 [ 129.171702][ T917] usb 2-1: USB disconnect, device number 53 [ 129.178370][ T783] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 129.190592][ T783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.198821][ T783] usb 4-1: Product: syz [ 129.202995][ T783] usb 4-1: Manufacturer: syz [ 129.207669][ T783] usb 4-1: SerialNumber: syz [ 129.212949][ T783] usb 4-1: config 0 descriptor?? [ 129.218439][ T2161] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 129.354545][ T311] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 129.361062][ T311] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 129.369139][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.377695][ T311] usbhid 3-1:0.0: can't add hid device: -32 [ 129.383704][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 129.409643][ T311] usb 3-1: USB disconnect, device number 52 [ 129.535231][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 129.541668][ T45] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 129.549815][ T45] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 129.558018][ T45] usb 5-1: config 0 has no interface number 0 [ 129.564109][ T45] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.574082][ T45] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.585927][ T45] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 129.595016][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.603032][ T45] usb 5-1: Product: syz [ 129.607229][ T45] usb 5-1: Manufacturer: syz [ 129.611864][ T45] usb 5-1: SerialNumber: syz [ 129.617191][ T45] usb 5-1: config 0 descriptor?? [ 129.622447][ T2172] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.629694][ T2172] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.827344][ T2182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.605'. [ 129.852548][ T2172] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.860039][ T2172] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.868071][ T783] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 129.877446][ T783] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 130.064357][ T151] ipheth 4-1:0.196: ipheth_rx_submit: usb_submit_urb: -90 [ 130.085063][ T2172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.093948][ T2172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.108400][ T45] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 130.119327][ T45] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 130.129784][ T45] asix 5-1:0.251: probe with driver asix failed with error -5 [ 130.142736][ T45] usb 5-1: USB disconnect, device number 8 [ 130.153395][ T783] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 130.273551][ T1693] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.292027][ T783] usb 2-1: device descriptor read/64, error -71 [ 130.455693][ T2220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.464423][ T2220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.472589][ T2220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.481023][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.481923][ T2220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.500837][ T311] usb 4-1: USB disconnect, device number 45 [ 130.528100][ T311] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 130.569023][ T783] usb 2-1: device descriptor read/64, error -71 [ 130.649107][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 130.655955][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.664718][ T45] usb 5-1: config 42 has an invalid interface number: 178 but max is 0 [ 130.673090][ T45] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 130.683338][ T45] usb 5-1: config 42 has no interface number 0 [ 130.689552][ T45] usb 5-1: config 42 interface 178 has no altsetting 0 [ 130.698429][ T45] usb 5-1: string descriptor 0 read error: -22 [ 130.704623][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.c3 [ 130.713727][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.835415][ T783] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 130.936522][ T389] usb 5-1: USB disconnect, device number 9 [ 130.974173][ T783] usb 2-1: device descriptor read/64, error -71 [ 131.229747][ T783] usb 2-1: device descriptor read/64, error -71 [ 131.347415][ T783] usb usb2-port1: attempt power cycle [ 131.497710][ T2237] syzkaller0: entered promiscuous mode [ 131.503343][ T2237] syzkaller0: entered allmulticast mode [ 131.509656][ T2237] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 131.637157][ T2245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 131.703488][ T2249] overlayfs: conflicting options: userxattr,verity=require [ 131.712708][ T783] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 131.720889][ T2249] x_tables: duplicate entry at hook 2 [ 131.726564][ T2248] x_tables: duplicate entry at hook 2 [ 131.757761][ T783] usb 2-1: device descriptor read/8, error -71 [ 131.785472][ T2259] netlink: 'syz.3.619': attribute type 4 has an invalid length. [ 131.902224][ T783] usb 2-1: device descriptor read/8, error -71 [ 132.167572][ T783] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 132.189879][ T783] usb 2-1: device descriptor read/8, error -71 [ 132.328547][ T783] usb 2-1: device descriptor read/8, error -71 [ 132.359425][ T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 132.423437][ T1225] Bluetooth: hci0: command 0x1003 tx timeout [ 132.423437][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.444755][ T783] usb usb2-port1: unable to enumerate USB device [ 132.466842][ T2277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.624'. [ 132.519266][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 132.525588][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.536021][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.547886][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.557056][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.565184][ T45] usb 4-1: Product: syz [ 132.569379][ T45] usb 4-1: Manufacturer: syz [ 132.574026][ T45] usb 4-1: SerialNumber: syz [ 132.902931][ T783] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 132.977515][ T917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.063946][ T783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.074160][ T783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.084664][ T783] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 133.093768][ T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.101822][ T783] usb 3-1: Product: syz [ 133.106025][ T783] usb 3-1: Manufacturer: syz [ 133.110651][ T783] usb 3-1: SerialNumber: syz [ 133.130514][ T36] audit: type=1400 audit(1777718912.541:360): avc: denied { set_context_mgr } for pid=2289 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.131320][ T2290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.150333][ T2290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:564 [ 133.150355][ T917] usb 5-1: Using ep0 maxpacket: 32 [ 133.174178][ T36] audit: type=1400 audit(1777718912.541:361): avc: denied { call } for pid=2289 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.199052][ T917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.207841][ T917] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 133.220605][ T917] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 133.229916][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.238437][ T917] usb 5-1: Product: syz [ 133.243694][ T917] usb 5-1: Manufacturer: syz [ 133.248571][ T917] usb 5-1: SerialNumber: syz [ 133.311265][ T2296] netlink: 68 bytes leftover after parsing attributes in process `syz.1.630'. [ 134.278759][ T2310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.634'. [ 135.259474][ T45] usb 4-1: 0:2 : does not exist [ 135.271537][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 135.285007][ T45] usb 4-1: USB disconnect, device number 46 [ 135.293889][ T783] usb 3-1: 0:1 : does not exist [ 135.298877][ T783] usb 3-1: unit 4 not found! [ 135.307437][ T917] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 135.311043][ T783] usb 3-1: USB disconnect, device number 53 [ 135.322721][ T917] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 135.366437][ T917] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.394789][ T2318] udevd[2318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.396021][ T917] usb 5-1: USB disconnect, device number 10 [ 135.434098][ T1967] udevd[1967]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 135.705916][ T783] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 135.716469][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 135.759341][ T917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.855027][ T783] usb 3-1: device descriptor read/64, error -71 [ 135.877991][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.888267][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.899422][ T45] usb 4-1: config 1 interface 1 has no altsetting 1 [ 135.908369][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.917528][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.925620][ T917] usb 5-1: Using ep0 maxpacket: 32 [ 135.931065][ T45] usb 4-1: Product: syz [ 135.935425][ T45] usb 4-1: Manufacturer: syz [ 135.940295][ T45] usb 4-1: SerialNumber: syz [ 135.945654][ T917] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.956814][ T917] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.971489][ T917] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.981109][ T45] usb 4-1: selecting invalid altsetting 1 [ 135.987028][ T917] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 135.995518][ T917] usb 5-1: Product: syz [ 135.999744][ T917] usb 5-1: Manufacturer: syz [ 136.013091][ T917] hub 5-1:4.0: USB hub found [ 136.132097][ T783] usb 3-1: device descriptor read/64, error -71 [ 136.222179][ T917] hub 5-1:4.0: 2 ports detected [ 136.227367][ T917] hub 5-1:4.0: insufficient power available to use all downstream ports [ 136.408109][ T36] audit: type=1400 audit(1777718915.610:362): avc: denied { getopt } for pid=2319 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.409291][ T783] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 136.436052][ T45] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 136.436085][ T45] cdc_ncm 4-1:1.0: bind() failure [ 136.440245][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 136.462509][ T917] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 136.468950][ T917] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 136.476389][ T45] cdc_ncm 4-1:1.1: bind() failure [ 136.490295][ T45] usb 4-1: USB disconnect, device number 47 [ 136.496832][ T917] usb 5-1: USB disconnect, device number 11 [ 136.579775][ T783] usb 3-1: device descriptor read/64, error -71 [ 136.782193][ T374] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 136.835497][ T783] usb 3-1: device descriptor read/64, error -71 [ 136.942047][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 136.948340][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.959407][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.963807][ T783] usb usb3-port1: attempt power cycle [ 136.978227][ T374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.993500][ T374] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.002933][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.017271][ T374] usb 2-1: config 0 descriptor?? [ 137.025550][ T1693] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.032525][ T1225] Bluetooth: hci0: unexpected event 0x2f length: 0 < 1 [ 137.283207][ T917] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.336388][ T783] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 137.369383][ T783] usb 3-1: device descriptor read/8, error -71 [ 137.454639][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.461938][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.472516][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.480408][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.487733][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.498940][ T917] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.508169][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.515561][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.523875][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.528637][ T783] usb 3-1: device descriptor read/8, error -71 [ 137.531835][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.545447][ T917] usb 5-1: config 0 descriptor?? [ 137.553694][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.564267][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.571680][ T374] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 137.594859][ T374] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001E/input/input24 [ 137.611562][ T374] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 137.687284][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.695945][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.704871][ T2325] option changes via remount are deprecated (pid=2324 comm=syz.1.639) [ 137.713152][ T2325] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 "" [ 137.722366][ T311] usb 2-1: USB disconnect, device number 58 [ 137.794651][ T783] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 137.817057][ T783] usb 3-1: device descriptor read/8, error -71 [ 137.955067][ T783] usb 3-1: device descriptor read/8, error -71 [ 137.988882][ T917] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 137.998588][ T917] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001F/input/input25 [ 138.071813][ T783] usb usb3-port1: unable to enumerate USB device [ 138.081090][ T917] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 138.251044][ T36] audit: type=1400 audit(1777718917.336:363): avc: denied { read } for pid=2335 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 138.282149][ T2337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.643'. [ 138.383263][ T783] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 138.397702][ T36] audit: type=1400 audit(1777718917.477:364): avc: denied { ioctl } for pid=2332 comm="syz.2.642" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 203) OK Stopping crond: stopped /usr/sbin/crond (pid 196) OK [ 138.515705][ T36] audit: type=1326 audit(1777718917.589:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.1.645" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f893b99cdd9 code=0x0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 150) [ 138.584390][ T783] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 138.593288][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.606267][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.616180][ T783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.629783][ T338] usb 5-1: USB disconnect, device number 12 [ 138.649531][ T783] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.665724][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping network: [ 138.676712][ T783] usb 3-1: config 0 descriptor?? [ 138.733723][ T36] audit: type=1400 audit(1777718917.796:366): avc: denied { read write } for pid=2365 comm="ip" path="/dev/console" dev="rootfs" ino=1066 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 138.770427][ T36] audit: type=1400 audit(1777718917.824:367): avc: denied { unlink } for pid=151 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 138.850002][ T36] audit: type=1400 audit(1777718917.908:368): avc: denied { read write } for pid=2371 comm="iptables" path="/dev/console" dev="rootfs" ino=1066 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 138.873749][ T36] audit: type=1400 audit(1777718917.918:369): avc: denied { search } for pid=2371 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 138.895885][ T36] audit: type=1400 audit(1777718917.918:370): avc: denied { write } for pid=2371 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.905608][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 138.934258][ T36] audit: type=1400 audit(1777718917.918:371): avc: denied { add_name } for pid=2371 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.942325][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 Stopping system message bus: [ 138.966928][ T36] audit: type=1400 audit(1777718917.918:372): avc: denied { create } for pid=2371 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.974908][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 138.992800][ T36] audit: type=1400 audit(1777718917.918:373): avc: denied { read open } for pid=2371 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=4132 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.009837][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.036803][ T36] audit: type=1400 audit(1777718917.918:374): avc: denied { lock } for pid=2371 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=4132 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.048480][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.094837][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.105503][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 done [ 139.115598][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.124038][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.131518][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.138975][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.146390][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.153864][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.161290][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.167428][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.174920][ T783] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 139.182860][ T783] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 139.200025][ T783] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 139.244108][ T783] usb 3-1: USB disconnect, device number 58 [ 139.257867][ T2383] fido_id[2383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory Stopping klogd: [ 139.444495][ T2402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.652'. [ 139.474526][ T2405] fuse: Bad value for 'group_id' [ 139.486012][ T2405] fuse: Bad value for 'group_id' OK [ 139.495548][ T2408] 9pnet_virtio: no channels available for device ./cgroup/file0 Stopping acpid: [ 139.606417][ T338] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.616494][ T2426] random: crng reseeded on system resumption [ 139.735728][ T2438] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 139.743760][ T2438] syzkaller1: entered promiscuous mode [ 139.749570][ T338] usb 5-1: device descriptor read/64, error -71 [ 139.749859][ T2438] syzkaller1: entered allmulticast mode [ 139.787702][ T783] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 139.820578][ T2441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.662'. [ 139.947421][ T783] usb 2-1: Using ep0 maxpacket: 32 [ 139.953773][ T783] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.965326][ T389] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 139.972934][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 139.984109][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.995269][ T783] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 140.004485][ T783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.012578][ T338] usb 5-1: device descriptor read/64, error -71 [ 140.020107][ T783] usb 2-1: config 0 descriptor?? [ 140.025403][ T2413] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 140.033121][ T783] hub 2-1:0.0: USB hub found [ 140.160575][ T917] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 140.162448][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.179118][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.189082][ T389] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.201990][ T389] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 140.211232][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.220080][ T389] usb 3-1: config 0 descriptor?? [ 140.247236][ T783] hub 2-1:0.0: 2 ports detected [ 140.277823][ T338] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.299113][ T917] usb 4-1: device descriptor read/64, error -71 [ 140.416356][ T338] usb 5-1: device descriptor read/64, error -71 [ 140.461784][ T783] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 140.468152][ T783] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 140.476959][ T783] usbhid 2-1:0.0: can't add hid device: -71 [ 140.482912][ T783] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.512650][ T783] usb 2-1: USB disconnect, device number 59 [ 140.554896][ T917] usb 4-1: device descriptor read/64, error -71 OK Stopping syslogd: stopped /sbin/syslogd (pid 94) OK [ 140.653253][ T389] playstation 0003:054C:09CC.0021: unknown main item tag 0x0 [ 140.660704][ T389] playstation 0003:054C:09CC.0021: unknown main item tag 0x0 [ 140.668146][ T389] playstation 0003:054C:09CC.0021: unknown main item tag 0x0 [ 140.675573][ T338] usb 5-1: device descriptor read/64, error -71 [ 140.681861][ T389] playstation 0003:054C:09CC.0021: unknown main item tag 0x0 [ 140.689504][ T389] playstation 0003:054C:09CC.0021: item fetching failed at offset 7/9 [ 140.698062][ T389] playstation 0003:054C:09CC.0021: Parse failed [ 140.704377][ T389] playstation 0003:054C:09CC.0021: probe with driver playstation failed with error -22 umount: can't remount debugfs read-only [ 140.789418][ T338] usb usb5-port1: attempt power cycle [ 140.810683][ T917] usb 4-1: new high-speed USB device number 49 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 140.881031][ T389] usb 3-1: USB disconnect, device number 59 Connection to 10.128.0.206 closed by remote host. [ 141.144206][ T1693] bridge_slave_1: left allmulticast mode [ 141.149881][ T1693] bridge_slave_1: left promiscuous mode [ 141.155574][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.163573][ T1693] bridge_slave_0: left allmulticast mode [ 141.169258][ T1693] bridge_slave_0: left promiscuous mode [ 141.174888][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.303010][ T1693] veth1_macvtap: left promiscuous mode [ 141.308542][ T1693] veth0_vlan: left promiscuous mode [ 141.568760][ T1693] bridge_slave_1: left allmulticast mode [ 141.574420][ T1693] bridge_slave_1: left promiscuous mode [ 141.580313][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.587850][ T1693] bridge_slave_0: left allmulticast mode [ 141.593596][ T1693] bridge_slave_0: left promiscuous mode [ 141.599355][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.606983][ T1693] bridge_slave_1: left allmulticast mode [ 141.612706][ T1693] bridge_slave_1: left promiscuous mode [ 141.618329][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.625706][ T1693] bridge_slave_0: left allmulticast mode [ 141.631378][ T1693] bridge_slave_0: left promiscuous mode [ 141.636955][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.837080][ T1693] tipc: Left network mode [ 141.843736][ T1693] veth1_macvtap: left promiscuous mode [ 141.849324][ T1693] veth0_vlan: left promiscuous mode [ 141.854841][ T1693] veth1_macvtap: left promiscuous mode [ 141.860409][ T1693] veth0_vlan: left promiscuous mode [ 141.866038][ T1693] veth1_macvtap: left promiscuous mode [ 141.871544][ T1693] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 143.166211][ T2452] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 143.172954][ T2452] ACPI: PM: Preparing to enter system sleep state S5 [ 143.179862][ T2452] kvm: exiting hardware virtualization [ 143.185450][ T2452] reboot: Power down serialport: VM disconnected.