last executing test programs: 34.818330655s ago: executing program 2 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x8000000, 0x2000, &(0x7f000053d000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@svm={0x9, 0x1, 0x1080, {0xfec0c000}, {"57c3c4ea6820e124f3f1202fefba1f86a1b7b275c6010fdbea300c04ec6231e732bb10a24a4f16fa5d67300a11e8aa7753a15d2f6f9fea860c45d2d2bbc4d98697442c9df19f1cb4fe8177b340f396d8be1d7aec3ed8427f430e05e746348b12ff92dbfb918f36be941a07f1ade7a89b66d9b7786916f1b36efd1c715b573b30c79de7b7338fa1626fe73166591a18fe56cca0dce4082d626e4c45871c41629e0fc5ab00075529a89e2fe486d36a1ec6416802d909011a6f04fa84fcbc03fc3e285b2f0d1990afa2bf3eddadaaa4b8915857abbe301719b4a251c276c562f9f7f8eda31e0230c55377b528a73e1f1ef855963bb91e4c828786f92b06a307e2fd8629db6a0ccfd64ca74d6f67a1d56edcddf5babf54f02867e91f5545475f72197956d5e50b1e33ad06f1b5f2c4e997ed4f9a00772ce6045bb6588020383a57dbd7235b188267227d17f09d9420c8b4b6d2a0429b171e038508267ef4420705cb8bfd503027bf40eef3ae815ede73a5ca27a47cabc796de33de5909774b8cec79c954c3bc00c66be4e32f667c8ce3fa24504ff7d581b2212de14cea4724d31591b8ab484d7d9c50dd2c1a4abc1fcf0735b64ce8d23d303b08f9694927e25c644f52a4f0bc8f19e4fa35634b57170d177d739a7aaf2432149cb5753184dc54302d1935ee4873c435f9e9a733805e676350d050d1bb6630d1eb48e53a393d385923696f65a7e7d7a25f8bf3b1a64fa6016bc3e8db82ce9736cbdae48fe20746ebbd2eccc0860d705a1527c1174cb23bcbcbfa5cf844e9a4c94e2c5be32e8de9bfa03712b9d1eaeb3154f660a04d7bdcc54ff0dbf4dfe7fec76097e2228f34ed570c7a968aabbcf943f67628556eae628da7823e721731379b2a1e00b36ec0105bd8863747c7fadd913b9b0e631a60f5043f1a2683325bea4c7829b5012141666992697cede9749e6620ae58ff2b3bbaabd3af33978725c01c93ec320191f0abe107c79248796273eecf23015af70e8bf8cb280a1d5ad280cd53f852d5a6ae523ede1b5b51ae3ec6958484e7dc8b9ff45286faba11d251a126a4452f2f4fc2c00573167c50d8118fd9701a2c6c0da45cfe9b8b6b486fa80246a6590ff06eaa4be529c7f2f6f4137d3af50ab8923987bfd84314da8bf19e2724fd67e938dcafab32c4b89d7afa75aff840035502214eabe1143673cbd71d6c72b74e226743555dda4b78cb4600aebd4a6fad074ac464a2ca35013556df9be4602c16cc6e9dcd207c07fd58237e3664e4a11bd4f2775757fdaa7387af73adfe3947931b2e9c55b7d1db63763f05997e676469c74922eaf51d3c32ac17050778236f462c4d4232418637d0ff63be4665ae0f426d90df05967608ac443d101040a6cc292d79a684fb04c120ebc61d203e64b1825ecf6189a9778e2e1330d3615ff376d06f2f005fb5860b3142078e6fa27f52bf90eb4e1ecaf6bcbffe4f8d094c98d3d964534f6a09ab51407b28d8888dfd7c09a466077bc1c959c341a21a27281af06b3b3c6e8db7ecf1790223ffb5d3200ea49a69974412fc03148958e12a469a40263d8f405aa8cf4a849c1ab3aebfcbfdab00c8b6ea56c99d34544d1498e48825543ce9510a4f5ff902c1bb6450f6fa88ee2e1820d899eb7663f59d0c23ffb311fdff02806117f835bd2d58995ede5330a83369aa791a06c1b75755260361deff478b567e10410197d3bd57d4fe4b6e9a979c9afca5c0e80975431695f6e190cd0ff5dc51ef606ffc3ff30b37eea17b41da8d47d99b883b1fe8a41e22086cb68e66848010c7f33be00a1bfca571c780a1cfd09a6abb0a88353ec9c92c4e8b366b84c021dcfa00d1bd4e0878b100f71cbcd4345b62da63d4d45b5ed5fb5856e0f6cedf4b1559b99fe5b415f0e0e1bcac9ed747c7dc63e03ee7ab8ad575a0db78653dd4ea2b584a86137f6562697104b6b56c924b339c59445ab6cc0bc3b6f566250c9b6e7202cf8090902b486191d2d992dde6757010e39374d48db2598b75f36171270bc8cc0b5da413deef12bc1b3fb7660020512b422c2fa889047606d195a2520f77be0854667f8cfd5804e34ed08b06914fba20da7602cc299df3b85f7885670539681c21c7e56298c24df9da83aca1026d34a8ed0be383ef67b83627e80e5d092a9d916d639e9527a9b8a06fd02055b0a66a05e52f6e8c2220041d9537c6ce1c13ccac42425934a2881092fd9b78d915a0267370097e018c1888f1a7c446e94edadf5ede24f5bf227cf63abd0763549d40d5bfd147cef8e5e85140d4327d0e06472691e9ec7029b2194417202e37f5292309f54e064511cef26cb609d79019c0e1b63c48aa84d6dea49450b47270ca73a2e933cc2844d232466f89acc244ce1a550328fdd40c76f78c682dac8398fcdabe4fdac80e722e6cc01a58565b66f5f5407bfafb8db0cbc33db336d2ce40a21ac66115d2f29bd3da11f0e86c7424c8f0e25a0a80d478c4888dede9b2e766b48026120108972bdbffa5e54cadeb81aba482ce4ba023c910dc88c6968a579142c7b3a3b8972e1af6eb4ead197e6e18abab2eb6ac067c022ce4f61f4f8c30ce636819b88c944bb79d4b377ef122caaa6eb5669087e26c49710cc406296de99ed33128766899fe0d99de448463f14c6ee8d5ae08c8fab152e9f48a5a19c076014ea87103311a1e2a39f3df68cf4d8cb3f817061d0ac70b554e8a80f363d2c6acc47523bc19111d06e3acdafdeb31aa404f1588fca3d3b1dd59c312272b354b998b95f7b9e366e480974c6d2d44a612c16ce606169961db8ed791d6311f0f0cc8f84028ddd43e55437dd787f4a89cf7dbdc118dc931966282c61b3ca3c2c2fe520b3e61f33d9ef4a80676e11962dd13588ebf48f21d5fadab0acb1162008c645181ccf5ae1177cfcc5214528e972c2ca9a0ba86bcf81e17bb184fef32fcea0a75a9fa664f912209492bc9d7af7ec71297d49cd035da547aae505f98315975ce6baddce90f7e93c6f038d9c4fb2e127b47a7feceb9e3cb3894354396e5f33411a21f8f3fb3edf7693e740af8a8ef5087441e61751d45737453ccc20371656bc665c9983d798d13450ce26612719b2718affa9f55819b3e06dd295fa214bbf395ffde90ea47ceeaa1a9c2421453fc5db359a0d3bb88a3cfd60e33b190844d72dd08eb8ff0fb64a0a6ed5dcafd8c3af69f2588daf764267ec22c21216bd8a81b0cc14e7ffbc0955ada35b50c8bc54f8407cd6d604189f012ab6ba092de0ec6e67610334d0f23bb2cd2db18cae56ab85bf35947c247efa99e289b9090c78861666dcfc4671c9b8eeabaea95293fd89e700fd3658c5570d0669bcdd1b9b7c161662ec617fbafd23e728055adf644e5de44f7791030aa35afa15cd6cdc09f5b8686a3be0e5ba1865011e62f7f83f1af64624cbc4e4d46ebba6af995236b2948341f1feaad371a02b2902a119f0440f5942f15341b2f28c55cf95cb719a66d3cde84c6ece12216bd1a994b9fbb6de3050507617dd48c98b242803c8b9e4c9c2e13725f010111d6eca3c2fa1001121960d2d926d61ff1acfac270f6f477ddbd605f00a2649bab9711754385a5d8fc1f5709525c5bd7d77c9e94473733f8c834b6fb9a1e9362641a25f0d59242b80dbf22b4d8a8e3f63a64a98496bbaa6ceefb057ac523ec9a6fa01b2effe1a57217847024584149e051314d31f16d8106d2cd019a9dc21a11c67f920ec50fa244b2d31a9f75bfbc8560edcd32ec1e8a21bf5845724396794605dfbcac7f6eafeb1f4f3788b32f447894189aa567cdfe7e6fb6ed9a6ed7f5b7b49dd70ec3b3255efb1aa80f46b7f4877e6df5562c3e7a713736996a629bc310043ea65822ea9490dea29b4f5acb6eeaafdbf989532d81e35153d73a16a9810c134086a9abbeb19597f58b7e9ab77e63762f1c5f1715c7d204847fcb983fef6e5d6a390d087dd85b8a4f588878b09c04f02d324f7c20ae057b10da4a9e523aebc21f4a8835f1f9750c1b3014aef4bf661eedbdf5c7e3c6f449920d9592e09372e735c9492b841874697b36fb19eaacc791d4c79af12b03c7deef2c8c311a90c8db12c6a70b26228e91971c86a16a2f7b535070a5b931af3423c199001585f20a9583a8f905c73655072a11a1659cdd3c8df5895bd51bff40b3a8b09df582f4ac952fa68460526228bd47545da9423d810c256d3eaa9084de15bc7b0e3e0dcfef3651ac67d782ec70b61d14de62dcabf3bb3aee48b5f9b754303a2821f319d9ca8c362c0b7082ad05d401b73a86d2f7ce52fffaf1a341e21cbfdf29ab9e8464b67e79e1ac8a29b4cc13f918aee1cc5a1e9623c73369bf967fc8c72edd4e6491bf1aae47cb9b1cdc1ce88115e2ac1c26c7847462cac5c08f46113a2ea274b0f5d13d0a907fefd7e4d80eaa64e7bb6800841fe1f8393f20fcf632cadb379d7e86585ea34a0b1f9704ffe635f97fe88cf167447aa60ede3f1eebc24892b7a534cd939578414537fce9bdf4467571a8f87c2c6e3e073fb5af3325510ca4d6c551374ddca923883d7a8e16c424cd09de3f6346dde26197f1e15935f5bfe2f120c45304019e34324d4cd537b1305bf0cdfa932fdc0383988562a3acc8fb905875db22b1d377e76eb765e4d7a467c2db5138926de226dc94d86e001dbbc19b26127b89ac6c2a0dbea4c89fdd3667ee7062920be32373cf0deb049aec02ac647b4aa5dd5f5d3d7be91efd507421641688a8bd4f419b14379bf91cff2d6fc0bb2b8b2d283a080b1e0d897656273b9db9c95af2136c00596aa794b7aae95d8d76fc26abd65def59ee01b6187b86458b5353e83a83778590f2c62cce9c7f10c17f98d12378b3878f02dcffd8b52b06f25d41ab659beb80526e0928fdf1324f01db08523b6b6362378732c4cd239da18707bec17118c921a44314b440426c06f1b0fe236f073f59a4896dbe146febcc1246835c4f3fa7557143ee64fd80f8f84b307176c00528b285fd8860bbb7aad6d99df5f55217b0a75cd3bc89b6a597805504b75e45e4279d89aa3ce73b97be640f1f44684ffd95d2d968b84f29a7b599b2762d7d31814234d0daa790d875510a168bc657f69998994b8631e3d65280ae4a8509a28287db78c720a81da721d32f27fa41fe83fc7b3903fcc24e6b9215066548574dbfa891e5e106f4d04983bde3753c57c980ca6d80b68d58c04d97444d7368a2b87afa9e25cd5b8ee308ea840125a32bb4f7ebfc28e959c79d8f1fc7663595d1f1a136d9f610d25ee10dd6ffdcb4e8977052c08a445b70c752c0c455677cbfa53d47ca766c6baf62abb84029a1ff70988b15d64cb900b268adddff31335fcaecb829e3d52097b67beb4dbb753e6ebcd969f2ed7366bac5b23893e108b67ab062472ca0f459cbe5103717cd69bb4d5ee3f6c28cc109fe219c1d40708c7d47014009bc54fe34060cb604246159e5f5a3442810615e46b769600934843e4d9a6f00a27aa86c1080b93d96c7aef7e87126d64134f06901545cf9161ec4dc95ca4d0cbd873068a647c1a18aee48c97df5d6abe959a2cc04b5eff2f96b35856a47f086fca6e027abfca0ab5611c1b8a864fc115f07bc95b25d6855aae2365a44bc512f59dd32f30747f7e23ef4b65b641fffefc4040d373260b866158bf6338c52b10f4347afafe4335c27dfce4709e0bad0a7e0c0be4f075f32db31483850ea219842bb03c95edbbcdcb2416208052491a17551531564288ea0df79dc800a761a760e15d55550aaeeed89805b318290be3871d460f5c1989ce099517983"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 34.779255088s ago: executing program 2 (id=666): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r1, 0x8, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x234, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbae}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x882}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f2f4851284134ab5c9f7f3b653c1ad985c433e2b74d6e8a4bafd4d11a90ed063"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5e183cecfc4b98a8d9d4fd24c054352fb546fc0664bfc5f8a234ba"}}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5050}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x881}, 0x40000) 34.767150929s ago: executing program 2 (id=667): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan1\x00', @random="a64a88c4a088"}) r1 = syz_clone(0x100, &(0x7f0000000080)="a6c8b4aecda41b5e82b098236da7dfe044ae4fdef7f3cf97cadfa9b306a9cd3837a6707edfaceff12d8e2729acc0", 0x2e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="52dca3a8070bee97053765cb15c2e5cc42d79a0e7df1981da3ec802bccc8a41eb9852c3d192c78bd064f4360451094bd23b91e28817854d53b3787af97b6d77b902b54380895b9eb1c2e30ecb7ab2413b463536dab151e756dcc811a2f62b127f6ebed70b99488d811a7eea2084841") fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000001c0)={0x0, 0x3, 0x100, 0x100000000, r1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000200)=""/21, 0x15}) r2 = openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000002c0)={0x1, 0xe5a7}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000300)={0x6, 0x1, 0xffff0001, 0x0, 0x61, 0x0, 0x1000}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4844}, 0x1) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000540)) r5 = socket$nl_route(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000600)=""/68, 0x44}], 0x1, 0xc, 0x7) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x16c, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfa31}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x48c0) pread64(r5, &(0x7f0000000a80)=""/4096, 0x1000, 0xffffffff7fffffff) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a80), 0x2b0100, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x2) ioctl$SNAPSHOT_FREE(r0, 0x3305) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4) fsetxattr$security_capability(r3, &(0x7f0000001c80), &(0x7f0000001cc0)=@v1={0x1000000, [{0x4, 0xbe}]}, 0xc, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect$uac3(0x6, 0xb9, &(0x7f0000001d00)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0xff, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x53, 0x20, 0x9, {0x8, 0xb, 0x2, 0x0, 0x1, 0x22, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x43, 0x9}, [@multiply_unit={0xb, 0x24, 0xd, 0x3, 0x6, 0x5, 0x7}, @feature_unit={0xd, 0x24, 0x7, 0x6, 0x5, [0x1, 0x6]}, @power_domain={0xb, 0x24, 0x10, 0xf, 0x6, 0x4c00, 0xd1, "32e7"}, @mixer_unit={0xa, 0x24, 0x5, 0x6, 0xe, "9bedb0c82f"}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x1, 0x100, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x4, 0x3, {0xa, 0x25, 0x25, 0xf08, 0x60, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf8, 0x3, 0xe0, {0xa, 0x25, 0x25, 0x8, 0x81, 0x7}}}}}}}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x0, 0x6, 0xb7, 0x3, 0x40, 0x2}, 0x5, &(0x7f0000001e00)={0x5, 0xf, 0x5}, 0x1, [{0x8d, &(0x7f0000001e40)=@string={0x8d, 0x3, "10ecadad6e2e528a68d6c1767cf821323658c8c03600789b1e4a1dc8daa2516bdecf18fc0b835dbfd83b30ac9e6e831a5c80aa8ca122f28ed7f156ab97ec3b8b97737fe9ad24dd572ddca1452ae982178dabef485d48e6067240c4448a7d3e60f4ca6d5bef3146958b0d2456cd286430ab33c8aead0fd09d9de251c5dbb3bea57e945eb0161133a958fb6f"}}]}) 34.204467383s ago: executing program 2 (id=668): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x24000, 0x4d) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file1\x00', 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", '\x00', "000000d900"}, 0x38) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) ptrace(0x10, r3) r4 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@sr0, r4, &(0x7f0000000200)={0x100, 0x8, 0x1, 0x8, 0x100000000, 0xa, 0xffff, 0x0, 0x1}) ptrace(0x11, r3) close(0x3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x24000, 0x4d) (async) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file1\x00', 0xffffffffffffff9c) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", '\x00', "000000d900"}, 0x38) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tkill(r3, 0x13) (async) ptrace(0x10, r3) (async) geteuid() (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@sr0, r4, &(0x7f0000000200)={0x100, 0x8, 0x1, 0x8, 0x100000000, 0xa, 0xffff, 0x0, 0x1}) (async) ptrace(0x11, r3) (async) close(0x3) (async) 34.160888546s ago: executing program 2 (id=669): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x142, 0x85) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030302e303030300f3030725f69643d00"/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001400,\x00']) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000140)=0x4) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) unshare(0x6c000600) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x442803, 0x1) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) pidfd_send_signal(r2, 0x5, &(0x7f00000000c0)={0x85, 0x8, 0xffffffc4}, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee01) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001700)=""/4110, 0x100e}], 0x4}, 0x9a}], 0x1, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x7ff, 0x5, 0x7fff, 0x7, 0x6}) 34.021090796s ago: executing program 2 (id=670): r0 = socket(0x28, 0x805, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89a3, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x3, 0xe, 0x5e, 0x6, 0xc, 0x3, 0xa, 0x1, 0x6, [0xfb1f, 0x7f, 0x77, 0x1, 0xfffffffd, 0x2c, 0x6, 0x1]}}) listen(r0, 0x7) accept4$unix(r0, 0x0, 0x0, 0x0) 33.993229209s ago: executing program 32 (id=670): r0 = socket(0x28, 0x805, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89a3, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x3, 0xe, 0x5e, 0x6, 0xc, 0x3, 0xa, 0x1, 0x6, [0xfb1f, 0x7f, 0x77, 0x1, 0xfffffffd, 0x2c, 0x6, 0x1]}}) listen(r0, 0x7) accept4$unix(r0, 0x0, 0x0, 0x0) 3.900403697s ago: executing program 1 (id=903): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da470000000000010902240001000000000904000009030000b009210000000122220009058103"], 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ff"], 0x24}], 0x1}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00%'], 0x30}], 0x1}, 0x0) (async) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x4, 0x38, 0x10002, 0x0}) sendfile(r4, r2, &(0x7f0000000000)=0x4, 0x5) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x5000, 0x6, 0x4, 0x8000, 0x0, [{0x40, 0x7f, 0x8, '\x00', 0x9}, {0x9, 0x1, 0x2, '\x00', 0xff}, {0x7, 0xd, 0x5, '\x00', 0x8a}, {0x3, 0x3, 0x2, '\x00', 0xe2}, {0x6, 0x0, 0x5e, '\x00', 0x81}, {0xff, 0x4, 0x8, '\x00', 0x81}, {0x5, 0x1, 0x8, '\x00', 0x97}, {0x5, 0x16, 0xc, '\x00', 0x1}, {0x6, 0xc, 0x2, '\x00', 0x6}, {0x4, 0x2, 0x5, '\x00', 0x3}, {0x5, 0xe0, 0x84, '\x00', 0x9}, {0xd, 0x4, 0x0, '\x00', 0x2}, {0x8, 0x56, 0x9, '\x00', 0x6}, {0x7, 0x3, 0x60, '\x00', 0x81}, {0x1, 0x4, 0xe, '\x00', 0x3}, {0x9, 0x4, 0xf1}, {0x1, 0x2, 0x7}, {0x0, 0x0, 0x3, '\x00', 0x9}, {0x6, 0xff, 0x3}, {0x10, 0xf, 0xa, '\x00', 0x8}, {0x29, 0xa0, 0x1, '\x00', 0x7}, {0x7, 0x6, 0x3, '\x00', 0x60}, {0x0, 0x5, 0x80, '\x00', 0x3}, {0x3, 0x2d, 0xd, '\x00', 0xf}]}}) (async) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00a949395554c2dd82bb55d7222300000096010006010083000000002a90a086ff41b3c83e25038a39942bb0087e36d470664cf1e87979875fb9d1a2e300"/71], 0x0}, 0x0) 3.896130487s ago: executing program 1 (id=904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000101017eb3000088b14d4705100002800c000280050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x20008890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05030000000000000000130000000c0009"], 0x20}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f00000003c0)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf252100000009001f0070687930f90000000500200000000000bfe55f03d3c98e"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x60000600) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4020}], 0x1, 0x9) 3.764066108s ago: executing program 1 (id=908): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2\xa2$\x97c+\xc8g\x1d;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c pp\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\V\x03k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94dq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "018788d79913dad4", "29bc1d6b2577456ed78151138f19cf7a", "ecaac06c", "3eece13222e081c1"}, 0x28) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000280)=@md5={0x1, "d4998c29e5793da84557c673ac505af1"}, 0x11, 0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000000)={&(0x7f0000000240)=[{0x9, 0x9, 0xc, 0x6, 0x10001}], 0x1, 0x28, 0x5, 0x7634}) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0a009100ffffffffffffaaaaaaaaaaaa86dd694fd2cd016088fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x19a) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 2.58478536s ago: executing program 4 (id=918): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4e, 0x1800005, 0x81, 0x1, 0xfff8, 0x0, 0x1000, 0x4000000000a, 0x4bfb, 0x4, 0x200000000002, 0x20000000000004, 0x401, 0x5, 0x9, 0x100000090], 0x0, 0x28657}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x8, 0x6, 0x7f30}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x141003) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x72}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24010}, 0x24000010) ptrace$cont(0x21, r0, 0x5, 0x4) 2.57686854s ago: executing program 4 (id=919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="0002"], 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002100)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x5e3200) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9000070900be00830000000057a90da1f60b00000400c22eadad05e03b1d62bd742539be860e1fc58908b8d72e200ce6634f878df66168cd75f2d67b2da41270b6b880d8260a0fedbc069ce752a700ac0d00eefa51"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x40) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/95) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x9, 0x2, 0x1, 0x0, @irqchip={0x3, 0x68}}, {0x4f, 0x2, 0x0, 0x0, @adapter={0x9, 0x2, 0xfffffffffffffffd, 0x7e1, 0x3}}]}) 2.460357049s ago: executing program 3 (id=923): r0 = socket(0x26, 0x80000, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000ff8008000f0001000000181fa198b0", 0x24) socket(0x26, 0x80000, 0x1) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000ff8008000f0001000000181fa198b0", 0x24) (async) 2.445585591s ago: executing program 3 (id=924): r0 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x8, @string={0x8, 0x3, "6f40e85c1700"}}}, 0x0) 2.182022751s ago: executing program 0 (id=930): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e000100", @ANYRESHEX], 0x1c}], 0x1}, 0x4080) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0xfffffffffffffff7) 2.124263426s ago: executing program 0 (id=931): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)="1e0e", 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000055000100000000000000000007000000c4371433837a92cf2051913dcc1b6f659e1632e531bc863a36a0d16f"], 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r3, &(0x7f0000003100)=ANY=[], 0x10448) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x5, 0x16, 0xffffb7b4, 0x5, 0x1000, 0x7, 0xd61f}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r8 = syz_open_pts(r7, 0xa0200) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x1, 0x6, 0x9, 0x9, 0x1, "1a63ab98bcb3c6649117b9cf972121496ea79d", 0x7ff, 0x7f}) r9 = dup3(r8, r7, 0x0) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r9, &(0x7f0000000e00)={0x2020}, 0x2020) socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x1, @multicast2, 0x4e21, 0x1, 'sed\x00', 0x4, 0x4, 0x55}, {@loopback, 0x4e20, 0x1, 0xffffffff, 0x9, 0x5}}, 0x44) 1.324695297s ago: executing program 0 (id=932): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xf) read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000e8868c906080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201", @ANYRES32], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.087595686s ago: executing program 3 (id=933): mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000000c0)={[{}, {@subsystem='blkio'}]}) 1.03634586s ago: executing program 3 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @local, 0xfff}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @local, 0xfff}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) (async) 1.03576604s ago: executing program 3 (id=935): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) pwritev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="97da5c3712ddfefad681bb0edf041aea6a2f5f56cf824895da4c05b9ac977abe461f095b7f6f674879d875c38b3e122a457b0a9b8f3ec36e4ab089b75043b8cb56693fce78e0260c7e519488e5db4bd5b06e0b381174228d65a1f910c34ffc1e9d8185855c2181c01568b042dc0869cf3a07f48727d70481588f2ff9dec56ad0f6b83936ba0a5f103d0fb2bffefd7a743730271f0c4b3a85e7e3ce00af96252c7915ccec8062190e571d6ee8d295a590584d1f23bb6fb74c0905c0434bf4428142ba523d6b5b30c02bb236650dcfbef5dae6f1d6c7263236fd162b07f8f6e55099dae6ced11900d02047d14d4e8ad79992dacffa2f75b77b", 0xf8}, {&(0x7f00000001c0)="269ac7eec459fd3547d278e64ee127b1838b31a15c43e0c8e188d754be0b5466ee38def35262ad3c7e0d226d9c0df4b2473d778b909a8cc90ed196962fa053e4ef77d096a3dd2a81736e0e66077553032fbdaef656c1d3e273f477145bc9be6ef58d0d", 0x63}, {&(0x7f0000000380)="c401e97925f8b25b727cc45147678ba3647a523db12d5aa29fedce05d14dae486339d982a5e53ea5bc78fc35056dfa465be2a366c8b8f4e5626876975715293fc181fe37409f8074c2ee72b55df22ccfd108df59b28d9b1905c40751b6e6d93b147617a8ba4f3f17e86db5b86f36882ae9d9bdf12931119ce5f8fb8cca17773d13e22d4ebfaa835a908b1d0cac32f236c4f3296fa5f68b473e84a52251bcfc130fa7dd68745139a83aa23d4320b7f481e7a52f3ff9b7e47a4d4f29029fac686225a9b42e66907c1de0771588be3b50", 0xcf}, {&(0x7f0000000480)="8cc3dc60dcd8300b4b7b51b04b06f6d7a9bd41d14369f8d159a23465497bd2023968310d32787ec3a0fe0da78e301e0bf451f271ebdd84cc4df9a7f79c802f1bd16cc2bad2ff612c295bcc05adaaadbff9c1a5f9a7321863790c18fb932a53ffc818451330ef2f73c83fedd1c46485295a848dd5374579eb4d52e32cc5984afa92725acd04216dd2b2c1b27b8fad54566400da72a304c947a110bb8621e02f9b9defac3ba7ce47e14b7b223f2d40642093c8503a6f204ea5f7f8073e4fa76532ef798844916729903bb432d9ac0802b0738b88b34ea9b526563bc8e1", 0xdc}, {&(0x7f0000000580)="32624c20c05a3e697eed3285a2faafd324118a6fbae297b0b25df9c095874e53fc71da609c8e9249e7700b6d0ed52bad8caea5", 0x33}, {&(0x7f00000005c0)="24aa7d5ad653eb4325d5f1061f74bd1cdccc1e6b2090f8bf47b11ad5b24f80ef5a29024fd29f69ea6ef9ff93cba6b07d404372052bedfa5a4abdad29f3d95ec8c6b1a86aa1e75ca03a73bb909058d59afa1707db4aa3bbd9bdabc76dd77f4c8983f35e30773644939746f91dd298e99ef6b36e785b8434fb8a9a3474b86b0d2977", 0x81}, {&(0x7f0000000680)="f9283d1ff427a793162e341543f1984d725e69cf841a091d43d4ebe16347431751e81d85", 0x24}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="65388255d68bbe6caf2f352c7a224231a2718639d36d130576401ecc285f1c10940dd25fde160d65b60cb32484dc9cf8fc7374647e953c8b48ad531e9a1ee53dc78a3158492d1f93c1db5ed05c1cd54d903e5328d812c64ae3c0eaec28ef1670d74c09e2dad2137b9a0a81527cd97de0a5029fbaff8aa7b1772eaebbde78cad2565f40004924d4d02b085ab558f5763fef0a23c464191e6a76e3a1aadaae5933c567ac2756bc21c5e1752a161c8be9c5292bdeae469ec7a81acb49603396151a7a379b3122f9b99b7b3f696bc3ec", 0xce}, {&(0x7f00000017c0)}], 0xa, 0xb, 0x8) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040040455070000000000010902240001000040b109040000010300010009210101000122050009058103ff"], 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c00000031"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r3 = gettid() clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x2d) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000001", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf254a000000080001003a00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990008000000230000003c0075803800128034002a00710700ff00010005418325400601ffffffffffff04000000ffffffffffff030000000002000008021100000101000000"], 0x6c}, 0x1, 0x0, 0x0, 0x240088c0}, 0x20000000) 885.697432ms ago: executing program 4 (id=936): ptrace$pokeuser(0x6, 0x0, 0x6, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000}, {0x1, 0x9, 0x80}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbfe, {0xb}}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x1, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in6=@loopback, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x1, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 869.093233ms ago: executing program 4 (id=937): mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}}, 0x14}}, 0x800) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) fchown(r0, r3, 0xee01) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x40000, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d6d2bd1783f726976706f72743c63616368653d6c6f6f73652c6e6f78617474722c61707072616973652c657569643d", @ANYRESDEC=r3, @ANYBLOB=',measure,pcr=00000000000000000037,obj_user=./binderfs2/binder1\x00,subj_type=..\\[+:[*]#*-#,\x00']) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x4000) 804.465428ms ago: executing program 4 (id=938): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x21, 0x804, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 746.194942ms ago: executing program 4 (id=939): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001ac0), 0x101201, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000001b00)={0x10}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x40, 0x4, 0x11, {0x11, 0xf, "2cec8819661e15ce3ea05f0f456ca5"}}, 0x0, 0x0, 0x0}, 0x0) 732.428244ms ago: executing program 0 (id=940): unshare(0x6060600) syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x8, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x69, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x3, {0x7, 0x25, 0x1, 0xc, 0x20, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xffff, 0x9, 0x1, "6dec5d"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x1, 0x2, {0x7, 0x25, 0x1, 0xc, 0x7, 0xf139}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="e19292ffcf4704bb311af176549303fa054a", 0x12}], 0x1) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffb, @remote, 0xfffffffe}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x32}, 0x2, @in=@remote, 0x3502, 0x1, 0x1, 0x0, 0x4, 0xfffffffd, 0xfffffffc}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) pread64(r2, &(0x7f0000000380)=""/257, 0x101, 0x8) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) unshare(0x0) 660.500279ms ago: executing program 1 (id=941): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000002380)={0x0, 0x1}) (async) r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) (async) fstat(r2, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) (async) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r3, &(0x7f0000000200)) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async) read$FUSE(r1, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x30) (async) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000011c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r7, 0x2, r5}) pipe2$9p(&(0x7f0000000140), 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000001100), 0x2, 0x0) (async) ioctl$TUNATTACHFILTER(r8, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r9, &(0x7f0000000100)="97", 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, r6, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) sendfile(r12, r12, 0x0, 0x5) 625.614322ms ago: executing program 1 (id=942): syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="0100800000000000000001000000140002007767320000000000000000000000000058000880540000802c00098028000080060001000a0000001400000000000005000300fd00000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b"], 0x80}}, 0x20000010) r3 = socket$inet6(0xa, 0x3, 0x9) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="01579180fab737bdbce3695d4a3b8de50db7584de47c1956297a6be52fa52426656fbd82a0ea5fbb08c6796f4e54498d20e4a2b23a165b4ad0456dbde8630308191b5f1d721bf5c9323d7acf7569a97d7fe7f0e525f2185c89c68a7660f51b9c2ca5bce6a8ab7743c5fc1b207246bc75f37926d928267e2ef0681362c775fccb05ba2262867c63863b5744e4b8d47339bd942af5b782ab9b9a38908e83e14ca5de962be89db5e44f820a9f841988d2d547ef144fea8c05138c5ea4534b6503daa737b2960a098ecbbf9991f2bc94f695aead3751b134e6b6d2594676462b42e512479b70f5ca0c6907b578d4d055400a5f19ec8b5d4268a3c969b061a9be68", 0xff, 0x22040000, &(0x7f0000000100)={0xa, 0x4e23, 0xffffffff, @private1, 0x5}, 0x1c) 461.508475ms ago: executing program 3 (id=943): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x542f, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x6, 0x59, 0xef, 0x8, 0x4b4, 0x6830, 0x37dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x60, 0x40}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1}, 0x2}) syz_usb_connect$uac3(0x0, 0xff, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x9e, 0x0, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x16, 0x3ff}, [@cluster_info_segment={0x6, 0x20, 0x4, 0xab, 0x36}, @cluster_info_segment={0x6, 0x20, 0x5, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x89b, 0x9, "2261092f1432c751"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x0, 0x1, "bfa3d7c69613e4"}, @as_header={0x17, 0x24, 0x1, 0x64, 0xe1, 0xee1, 0x1, 0x8, 0x4, 0x8, 0x2}, @as_header={0x17, 0x24, 0x1, 0x1, 0x0, 0x2, 0x2, 0x2, 0x9, 0x3, 0x42}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7, 0x3, {0xa, 0x25, 0x25, 0x6, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x1, "4849dc29dd"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x0, 0x1002, 0x3, 0x40, 0x4, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x94, 0x64, {0xa, 0x25, 0x25, 0x8001, 0xfe, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xf, 0x4, 0x6, 0x8, 0xab}, 0xb4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x6, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x401}}, {0x29, &(0x7f0000000080)=@string={0x29, 0x3, "f88b8caad782a93fdb4e388aa22aa602264f873cb5dfac2c3f1259ab1c06a9953deb6c5b496557"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0xbd, &(0x7f0000000400)=@string={0xbd, 0x3, "09ae72649e97338a41b3dfbb0b865dad6ff0ade56124125f0111065e66ff2fdc83ad34370e08bf18f93d395a01fbd33ca55fac0502b9b2d71289fffaa7b47832c6314366adde272bf742470e6a742208b3e15db5d6ebb281c2e29ad371aa2a77deb42b02981bb13ab63feb8d4f7413e877c0e81bffaa7bdcc238cf1e190ab51c15a6145dfdf6061d274fe5efcce7b707bbc766cda6f4eeac6fbe0395549f13dcca531642daee80d93ae0bd97b717655cd46b3dca6d9e1a4a7b48d1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}]}) (async) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) (async, rerun: 32) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x1, 0x7, 0x4, 0x3, {{0x2d, 0x4, 0x3, 0x5, 0xb4, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @multicast1, {[@ssrr={0x89, 0xb, 0x2a, [@private=0xa010101, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x2, [{@empty, 0x2}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0xa3}, {@multicast2, 0x7}, {@multicast1, 0xa7d}, {@remote, 0x22}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x4}]}, @cipso={0x86, 0x26, 0x3, [{0x1, 0x9, "0d91b7bb5df9f4"}, {0x0, 0x3, '`'}, {0x6, 0x6, "45cbd6d8"}, {0x0, 0x8, "bb73c3a728d3"}, {0x6, 0x6, "35ba5959"}]}, @end, @timestamp={0x44, 0x20, 0xf8, 0x0, 0xe, [0x1, 0x7, 0x1, 0x101, 0xff, 0xfffffffd, 0x7ff]}]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000140)={@loopback, @multicast2, r3}, 0xc) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) r6 = syz_socket_connect_nvme_tcp() setsockopt$sock_timeval(r6, 0x1, 0x1, &(0x7f0000000180)={0x77359400}, 0x10) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r5, 0x40047705, 0x2) (async, rerun: 32) process_madvise(r4, 0x0, 0x0, 0x16, 0x0) (async, rerun: 32) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x1}, 0x4) (rerun: 32) 441.05µs ago: executing program 0 (id=944): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x15c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x8, &(0x7f0000000040)=[{0x1af7, 0x8, 0x9, 0x400}, {0x8000, 0x1e, 0xb3, 0x80000001}, {0xc0, 0x1, 0x6, 0x3}, {0xfff, 0x6e, 0x12, 0x8}, {0x80, 0x40, 0x4, 0x8}, {0x2, 0x4, 0x6, 0x3a2fe49e}, {0x1, 0x4, 0xe, 0xf8ed}, {0xe7, 0x0, 0x2, 0x1}]}) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x8000000, 0x0, 0x0}, 0x0, 0x0) 0s ago: executing program 0 (id=945): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x100, &(0x7f00000014c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x7, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x7, [@midi_out_jack={0x1b, 0x24, 0x3, 0x2, 0xe, 0xa, [{0x1, 0x80}, {0x8, 0x4}, {0x2, 0x3}, {0x6}, {0x7, 0x2}, {0xb5, 0x2}, {0x9, 0xee}, {0x6, 0x40}, {0xf9, 0x8b}, {0xbf, 0x7}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0xc5d, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x0, 0x1, [{0x8, 0x3}], 0xa}], [{{0x9, 0x5, 0xb, 0x1, 0x0, 0x6, 0x9, 0xa8, {0x5, 0x25, 0x1, 0x1, '$'}}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x7, 0x5, 0x5, {0x10, 0x25, 0x1, 0xc, "cabcf8b627a7e2af754724be"}}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x2, 0xc, 0x5, {0xd, 0x25, 0x1, 0x9, "2331ab0804a0e61c60"}}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0x1, 0x4, {0x9, 0x25, 0x1, 0x5, "6ff4fb469c"}}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0x1, 0x4, {0x9, 0x25, 0x1, 0x5, "c005a807e2"}}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xfb, 0x2, 0x3, {0x14, 0x25, 0x1, 0x10, "194426b84c775cd43680d1eb33c6c762"}}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x1, 0x0, 0x7, {0x13, 0x25, 0x1, 0xf, "32a8b818a629a038c6f5f6d143b040"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x6, 0x7, {0xe, 0x25, 0x1, 0xa, "0188e92d1159e591d676"}}}]}}}}}]}}, &(0x7f0000001840)={0xa, &(0x7f00000015c0)={0xa, 0x6, 0x310, 0xff, 0x7f, 0x3a, 0x0, 0x4c}, 0x19, &(0x7f0000001900)=ANY=[@ANYBLOB="050f8121f2c342d7da18f9650a22bb19bcb619000114100402c5e3614e7b0af6e2c96309c4a7cff7342c4a56c9ad269fceddd42a17ef89e6b8126c936ef8eb163cea4d2af882b0c0297de4cfe0dc1c64ceeb1e803c63a22ac3dc16302f60f508c929b5530fe191f02c4d8cdb2f4f5cfb2ac5076d0b22f2fbb5f5a20620c76665c7e98df6"], 0x5, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42f}}, {0xcf, &(0x7f0000001680)=@string={0xcf, 0x3, "dffc01f36ce27e011cb8e4395c84c43d601cfd05645d868d216b278e9f91bf3b85920c3f9edd915d0f531b53018d79fbcc29d54b81f21b5ffaa6a60a6bbbb083369b389e3625b4a29ab08eb2269c6ab081c8ed738a99f0cdd0d4c49bba9c89c4445882575f800853c8114be02a8d38cb01b505083b707ca51e9ce063ebfd9e5f23877dfdde7ebe2195bb74318df1c8011d5d48c41ebbdf3180f3c889d9208cd2528937962faeb403ffa9543d20f0d2759d6ea2016c6a55da4c3df20ef224826aef6d5b098ed46f3451de0ab171"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0xfff, 0xb, 0x1, 0x2, 0x4, 0x0, 0x5, 0xa0, 0xffff, 0x5, 0x3, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x4, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x4, 0x70, 0xff, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x7f, 0x6}, {0x6, 0x24, 0x1a, 0x65d9, 0x25}, [@mdlm_detail={0x29, 0x24, 0x13, 0x7, "cd2d544afd6cfeb54233e4d50d340de788bfa2cd257ac9881b8cb8694068f2cedf3732c16f"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x59, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x0, 0x1, 0x9, 0x8, 0x60}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x5, 0xf0f, 0x4, [0x3f00, 0xc000, 0x30]}]}, 0x6, [{0x13, &(0x7f0000001600)=@string={0x13, 0x3, "9718b1ee95465c58f8f1abb9f389a0480b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0x57, &(0x7f0000000240)=@string={0x57, 0x3, "6b1eadfa19488ca8f61ea2a6644feaf051f1c9011d4af874783ccb2321f88ae65cd065ecc278c6507c797a443b2fe9f2b0db94ebe60decd93cb2e69c28aaddd58a0dc6b500061d636fc21ee07fd2f81cb9d5ebcbde"}}, {0xcc, &(0x7f0000000380)=@string={0xcc, 0x3, "d5711f7892cd73b19833f53c394535d98ee310da75eccbaa8093d9f9b7fe033374c8bf3c29d7f6ab44a8ed2f1af467377dd86846aadf8d3d7c403c3db9d4d231e45071d51dd3942818c8cd9749c77b0374d4cdcfb4263510c6d36bfe4d06372c1a49bd076b0e6d04ab8dcfa41e6870a38bc48793e511d3ba0686ff33c2123c4d651031b34de5887277f89c447a7d21cbf424c02db9ea32c7af1ebb44a8147c11a3820e81d0f644467cd49d0ae6a98248a3c33abeab70207215ab6401cb5bc517d1c6bbe52cc152ad4adf"}}, {0xb9, &(0x7f0000000480)=@string={0xb9, 0x3, "c96cc2d57571240ee2a15d203e9ba8b18dc2c159525bde374156c14f4dd37192abf1df7ac22cbf462c4aad1020a4b0a61bcd77b3c9e9ec3f9e058594eaddf14af044a1b28bcb705c28b0967bc71104c6728808e325456ed249f901ac086f1784daa81712c65c6aeaa523ff8ea5592ecf369b1c52e69d5392684cdf4966b70641f05fe94e91dac8ebb2cc5bd938005c6e4f066553d203cfeebc4a397cc0ba5abbb132370a40d219fde5c95ecbb60cc4a026123c16034c40"}}, {0x31, &(0x7f00000002c0)=@string={0x31, 0x3, "f70f79fb865b372b182ba43c9a9a8d58e354e5e05efd2131e9464a900fa3fdb01d7756ed819dbc37c0202b1e980ba8"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0xaaaab82, 0x56, 0x0, 0x0) bind$bt_rfcomm(r8, &(0x7f00000018c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250c00000008000100289c"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) kernel console output (not intermixed with test programs): to 10 [ 104.998441][ T857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.008195][ T857] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.017430][ T857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.028844][ T857] hub 3-1:1.0: bad descriptor, ignoring hub [ 105.034835][ T857] hub 3-1:1.0: probe with driver hub failed with error -5 [ 105.042078][ T857] cdc_wdm 3-1:1.0: skipping garbage [ 105.047278][ T857] cdc_wdm 3-1:1.0: skipping garbage [ 105.053040][ T857] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 105.058962][ T857] cdc_wdm 3-1:1.0: Unknown control protocol [ 105.092399][ T1597] usb 2-1: device descriptor read/8, error -71 [ 105.261223][ T397] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 105.282213][ T397] usb 4-1: device descriptor read/8, error -71 [ 105.331210][ T1597] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 105.352228][ T1597] usb 2-1: device descriptor read/8, error -71 [ 105.412265][ T397] usb 4-1: device descriptor read/8, error -71 [ 105.482344][ T1597] usb 2-1: device descriptor read/8, error -71 [ 105.591416][ T1597] usb usb2-port1: unable to enumerate USB device [ 105.651199][ T397] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 105.672204][ T397] usb 4-1: device descriptor read/8, error -71 [ 105.802877][ T397] usb 4-1: device descriptor read/8, error -71 [ 105.911368][ T397] usb usb4-port1: unable to enumerate USB device [ 106.131654][ T1597] usb 3-1: USB disconnect, device number 70 [ 106.421200][ T1597] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 106.571176][ T1597] usb 3-1: Using ep0 maxpacket: 32 [ 106.581516][ T1597] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 106.598464][ T1597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.616268][ T1597] usb 3-1: string descriptor 0 read error: -22 [ 106.624981][ T1597] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 106.625184][ T317] usbhid 1-1:1.0: can't add hid device: -71 [ 106.637639][ T1597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.654675][ T36] audit: type=1400 audit(33555002.617:532): avc: denied { write } for pid=2295 comm="syz.0.519" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.661221][ T317] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 106.690518][ T1597] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 106.690522][ T317] usb 1-1: USB disconnect, device number 65 [ 106.706018][ T1597] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.714486][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.905672][ T36] audit: type=1400 audit(33555002.887:533): avc: denied { map } for pid=2286 comm="syz.2.516" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.929878][ T36] audit: type=1400 audit(33555002.887:534): avc: denied { unlink } for pid=2286 comm="syz.2.516" name="#1" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.952114][ T36] audit: type=1400 audit(33555002.887:535): avc: denied { mount } for pid=2286 comm="syz.2.516" name="/" dev="overlay" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.001587][ T2311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 107.011221][ T857] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 107.162299][ T857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.172569][ T857] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.185454][ T857] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 107.194898][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.204150][ T857] usb 4-1: config 0 descriptor?? [ 107.245331][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 107.245347][ T36] audit: type=1400 audit(33555003.227:541): avc: denied { ioctl } for pid=2329 comm="syz.1.530" path="socket:[13986]" dev="sockfs" ino=13986 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.282749][ T2331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.291793][ T2331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.307550][ T317] usb 3-1: USB disconnect, device number 71 [ 107.315305][ T36] audit: type=1400 audit(33555003.297:542): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.342781][ T2337] ./file0: Can't lookup blockdev [ 107.407685][ T36] audit: type=1400 audit(33555003.387:543): avc: denied { write } for pid=2350 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.441215][ T1597] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 107.481438][ T857] usb 4-1: string descriptor 0 read error: -71 [ 107.495199][ T857] usbhid 4-1:0.0: can't add hid device: -71 [ 107.503075][ T2360] tipc: Enabling of bearer rejected, failed to enable media [ 107.511440][ T857] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.520130][ T857] usb 4-1: USB disconnect, device number 63 [ 107.533394][ T36] audit: type=1400 audit(33555003.517:544): avc: denied { bind } for pid=2362 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.592472][ T1597] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 5 [ 107.602825][ T1597] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 107.612103][ T1597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 107.620088][ T1597] usb 1-1: Product: syz [ 107.624288][ T1597] usb 1-1: Manufacturer: syz [ 107.628870][ T1597] usb 1-1: SerialNumber: syz [ 107.791233][ T317] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 107.838629][ T1597] usb 1-1: USB disconnect, device number 66 [ 107.941585][ T317] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 107.950460][ T317] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.958104][ T317] usb 3-1: can't read configurations, error -61 [ 107.991032][ T36] audit: type=1400 audit(33555003.967:545): avc: denied { bind } for pid=2364 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.010504][ T36] audit: type=1400 audit(33555003.967:546): avc: denied { lock } for pid=2364 comm="syz.3.541" path="socket:[14037]" dev="sockfs" ino=14037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 108.033997][ T36] audit: type=1400 audit(33555004.017:547): avc: denied { read } for pid=2375 comm="syz.3.543" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.094041][ T317] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 108.135274][ T36] audit: type=1400 audit(33555004.117:548): avc: denied { write } for pid=2378 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.166845][ T2384] overlayfs: failed to resolve './file0': -2 [ 108.251641][ T317] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 108.260622][ T317] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.268231][ T317] usb 3-1: can't read configurations, error -61 [ 108.274651][ T317] usb usb3-port1: attempt power cycle [ 108.369283][ T2388] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.421245][ T1597] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 108.428878][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 108.455329][ T36] audit: type=1400 audit(33555004.437:549): avc: denied { ioctl } for pid=2392 comm="syz.0.550" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.581220][ T1597] usb 4-1: Using ep0 maxpacket: 32 [ 108.587340][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.597611][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.606569][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.619909][ T1597] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.621224][ T317] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 108.629745][ T1597] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.647157][ T1597] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.657132][ T1597] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.661929][ T317] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 108.664248][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 108.672745][ T317] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.680718][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.688481][ T317] usb 3-1: can't read configurations, error -61 [ 108.696818][ T10] usb 2-1: Product: syz [ 108.707104][ T10] usb 2-1: Manufacturer: syz [ 108.711832][ T10] usb 2-1: SerialNumber: syz [ 108.716506][ T1597] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.725570][ T1597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.734047][ T1597] usb 4-1: Product: syz [ 108.738403][ T10] usb 2-1: config 0 descriptor?? [ 108.743393][ T1597] usb 4-1: Manufacturer: syz [ 108.747998][ T1597] usb 4-1: SerialNumber: syz [ 108.757580][ T2386] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.831219][ T317] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 108.851902][ T317] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 108.860797][ T317] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.868584][ T317] usb 3-1: can't read configurations, error -61 [ 108.874972][ T317] usb usb3-port1: unable to enumerate USB device [ 108.968678][ T1597] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 108.981597][ T1597] usb 4-1: USB disconnect, device number 64 [ 108.988844][ T1597] usblp0: removed [ 109.302936][ T36] audit: type=1400 audit(33555005.287:551): avc: denied { map } for pid=2398 comm="syz.0.552" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.231269][ T31] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 110.381193][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 110.387377][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 110.399673][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 110.408737][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.416841][ T31] usb 4-1: Product: syz [ 110.420998][ T31] usb 4-1: Manufacturer: syz [ 110.425728][ T31] usb 4-1: SerialNumber: syz [ 110.481211][ T317] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 110.633877][ T317] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 110.643007][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 110.651988][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.661667][ T31] usb 4-1: USB disconnect, device number 65 [ 110.668910][ T317] usb 1-1: config 0 descriptor?? [ 110.876830][ T317] usb 1-1: Cannot read MAC address [ 110.882101][ T317] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 110.894579][ T317] usb 1-1: USB disconnect, device number 67 [ 110.961210][ T10] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 111.093897][ T317] usb 2-1: USB disconnect, device number 71 [ 111.112220][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.123596][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.134454][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.152327][ T10] usb 3-1: Product: syz [ 111.156530][ T10] usb 3-1: Manufacturer: syz [ 111.163990][ T2424] overlayfs: missing 'lowerdir' [ 111.168873][ T10] usb 3-1: SerialNumber: syz [ 111.177167][ T10] usb 3-1: config 0 descriptor?? [ 111.183926][ T10] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 111.253904][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.262644][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.554287][ T10] usb 3-1: USB disconnect, device number 76 [ 111.611202][ T45] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 111.762361][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.770925][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.779814][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.789098][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.799065][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 111.810424][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.823780][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.833013][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.844633][ T45] usb 4-1: config 0 descriptor?? [ 111.851075][ T2449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.134031][ T2478] overlay: filesystem on ./bus not supported as upperdir [ 112.271514][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.302909][ T45] usb 4-1: USB disconnect, device number 66 [ 112.321340][ T45] usblp0: removed [ 112.409807][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 112.409826][ T36] audit: type=1400 audit(33555014.386:563): avc: denied { mounton } for pid=2507 comm="syz.0.588" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 112.606640][ T36] audit: type=1400 audit(33555014.586:564): avc: denied { create } for pid=2516 comm="syz.1.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.637351][ T36] audit: type=1400 audit(33555014.616:565): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.721247][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 112.796603][ T36] audit: type=1400 audit(33555014.776:566): avc: denied { write } for pid=2525 comm="syz.2.595" name="file0" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.818102][ T2533] netlink: 56 bytes leftover after parsing attributes in process `syz.2.597'. [ 112.818930][ T36] audit: type=1400 audit(33555014.776:567): avc: denied { open } for pid=2525 comm="syz.2.595" path="/138/file0" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.850021][ T36] audit: type=1400 audit(33555014.776:568): avc: denied { ioctl } for pid=2525 comm="syz.2.595" path="/138/file0" dev="tmpfs" ino=760 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.901177][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 112.907660][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.923094][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 112.932247][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.940328][ T31] usb 1-1: Product: syz [ 112.945880][ T31] usb 1-1: Manufacturer: syz [ 112.950491][ T31] usb 1-1: SerialNumber: syz [ 113.011244][ T397] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 113.055638][ T2550] netlink: 9 bytes leftover after parsing attributes in process `syz.3.602'. [ 113.064613][ T2550] gretap0: entered promiscuous mode [ 113.071186][ T2550] netlink: 5 bytes leftover after parsing attributes in process `syz.3.602'. [ 113.080085][ T2550] 0ªî{X¹¦: renamed from gretap0 [ 113.085878][ T2550] 0ªî{X¹¦: left promiscuous mode [ 113.090990][ T2550] 0ªî{X¹¦: entered allmulticast mode [ 113.096737][ T2550] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 113.161649][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 113.172911][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.184414][ T397] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.198617][ T397] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 113.207707][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.216835][ T397] usb 2-1: config 0 descriptor?? [ 113.256644][ T36] audit: type=1400 audit(33555015.236:569): avc: denied { mounton } for pid=2555 comm="syz.3.604" path="/155/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.491193][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 113.621195][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.628833][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.635846][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.643404][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.650365][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.657451][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.664536][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.671510][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.678475][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.685487][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.692645][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.710927][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.720925][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.721218][ T31] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 113.733795][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.743499][ T31] usb 1-1: found format II with max.bitrate = 4, frame size=65533 [ 113.756235][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.758787][ T31] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 113.763566][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.774079][ T31] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 113.780083][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.791523][ T31] usb 1-1: found format II with max.bitrate = 4, frame size=65533 [ 113.796520][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.806002][ T31] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 113.810746][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.820337][ T31] usb 1-1: failed to enable PITCH for EP 0x1 [ 113.827022][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.841611][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.841619][ T31] usb 1-1: unit 8 not found! [ 113.848930][ T31] usb 1-1: USB disconnect, device number 68 [ 113.860851][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.868383][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.875415][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.882450][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.888798][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.896011][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.903234][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.910224][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.917249][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.924234][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.931214][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.938157][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.945127][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.952108][ T1597] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 113.959710][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.966749][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.973878][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.980821][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.987812][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 113.994989][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 114.001972][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 114.008913][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 114.015902][ T397] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 114.023527][ T397] aureal 0003:0755:2626.000E: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 114.037191][ T397] usb 2-1: USB disconnect, device number 72 [ 114.047806][ T2565] fido_id[2565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.121355][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 114.130020][ T1597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.140351][ T1597] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.149257][ T1597] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.163765][ T1597] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 114.171214][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 114.172831][ T1597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.188377][ T1597] usb 3-1: Product: syz [ 114.192568][ T1597] usb 3-1: Manufacturer: syz [ 114.197146][ T1597] usb 3-1: SerialNumber: syz [ 114.202820][ T1597] usb 3-1: config 0 descriptor?? [ 114.261249][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.321214][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 114.327730][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.336217][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.349237][ T31] usb 1-1: string descriptor 0 read error: -22 [ 114.355478][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 114.364599][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.408594][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.418129][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.426257][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.434740][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.442843][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.451408][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.459415][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.467928][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.476067][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.484747][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.493751][ T397] usb 3-1: USB disconnect, device number 77 [ 114.511398][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.592447][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.608391][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 114.618584][ T31] usb 1-1: USB disconnect, device number 69 [ 114.621322][ T10] usb usb4-port1: attempt power cycle [ 114.641215][ T1597] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 114.791238][ T1597] usb 2-1: Using ep0 maxpacket: 16 [ 114.797505][ T1597] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 114.811026][ T1597] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 114.820128][ T1597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.828158][ T1597] usb 2-1: Product: syz [ 114.832341][ T1597] usb 2-1: Manufacturer: syz [ 114.836918][ T1597] usb 2-1: SerialNumber: syz [ 114.961195][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 114.982213][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.047950][ T1597] usb 2-1: USB disconnect, device number 73 [ 115.059611][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.112796][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.177021][ T36] audit: type=1400 audit(33555017.156:570): avc: denied { attach_queue } for pid=2584 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.321213][ T357] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 115.351217][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 115.372285][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.451214][ T357] usb 1-1: device descriptor read/64, error -71 [ 115.502195][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.611780][ T10] usb usb4-port1: unable to enumerate USB device [ 115.611832][ T36] audit: type=1400 audit(33555017.596:571): avc: denied { mount } for pid=2606 comm="syz.1.622" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.641529][ T36] audit: type=1400 audit(33555017.626:572): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.669520][ T2611] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 115.691186][ T357] usb 1-1: device descriptor read/64, error -71 [ 115.703033][ T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 115.705977][ T2613] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 115.851238][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 115.857443][ T31] usb 3-1: unable to get BOS descriptor set [ 115.864052][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.875592][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.884674][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.892692][ T31] usb 3-1: Product: syz [ 115.896849][ T31] usb 3-1: Manufacturer: syz [ 115.901465][ T31] usb 3-1: SerialNumber: syz [ 115.931250][ T357] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 116.041196][ T45] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 116.061218][ T357] usb 1-1: device descriptor read/64, error -71 [ 116.108711][ T31] usb 3-1: bad CDC descriptors [ 116.114547][ T31] usb 3-1: USB disconnect, device number 78 [ 116.192294][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.203278][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.213091][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 116.222236][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.230755][ T45] usb 2-1: config 0 descriptor?? [ 116.301223][ T357] usb 1-1: device descriptor read/64, error -71 [ 116.421325][ T357] usb usb1-port1: attempt power cycle [ 116.642966][ T45] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 116.650422][ T45] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 116.657936][ T45] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 116.665394][ T45] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 116.673043][ T45] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 116.683732][ T45] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 116.686656][ T2651] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 116.761198][ T357] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 116.791378][ T2662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.792160][ T357] usb 1-1: device descriptor read/8, error -71 [ 116.799908][ T2662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.838550][ T45] playstation 0003:054C:0DF2.000F: Invalid byte count transferred, expected 20 got 0 [ 116.848099][ T45] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 116.857385][ T45] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 116.866172][ T45] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 116.874653][ T45] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 116.937580][ T357] usb 1-1: device descriptor read/8, error -71 [ 117.021386][ T10] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 117.045174][ T31] usb 2-1: USB disconnect, device number 74 [ 117.181242][ T357] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 117.202179][ T357] usb 1-1: device descriptor read/8, error -71 [ 117.231264][ T1597] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 117.332262][ T357] usb 1-1: device descriptor read/8, error -71 [ 117.381633][ T1597] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 117.390455][ T1597] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 117.398162][ T1597] usb 4-1: can't read configurations, error -61 [ 117.441316][ T357] usb usb1-port1: unable to enumerate USB device [ 117.531220][ T1597] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 117.572765][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 117.572794][ T36] audit: type=1400 audit(33555019.556:587): avc: denied { map } for pid=2692 comm="syz.1.648" path="/proc/679/auxv" dev="proc" ino=17288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 117.614462][ T2696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2696 comm=syz.1.649 [ 117.681639][ T1597] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 117.690610][ T1597] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 117.698311][ T1597] usb 4-1: can't read configurations, error -61 [ 117.704728][ T1597] usb usb4-port1: attempt power cycle [ 117.861209][ T31] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 118.012431][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.024956][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.034064][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.042114][ T31] usb 2-1: Product: syz [ 118.046280][ T31] usb 2-1: Manufacturer: syz [ 118.050867][ T31] usb 2-1: SerialNumber: syz [ 118.051192][ T1597] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 118.082037][ T1597] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 118.091007][ T1597] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 118.102936][ T1597] usb 4-1: can't read configurations, error -61 [ 118.231227][ T1597] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 118.251947][ T1597] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 118.260748][ T1597] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 118.268840][ T1597] usb 4-1: can't read configurations, error -61 [ 118.275260][ T1597] usb usb4-port1: unable to enumerate USB device [ 118.501247][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 118.652445][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.663359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.673158][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.686071][ T1597] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 118.693670][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.702805][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.711699][ T10] usb 1-1: config 0 descriptor?? [ 118.851190][ T1597] usb 3-1: Using ep0 maxpacket: 8 [ 118.857963][ T1597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.866365][ T1597] usb 3-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 118.876674][ T1597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.885583][ T1597] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.899843][ T1597] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.908941][ T1597] usb 3-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 118.917137][ T1597] usb 3-1: Product: syz [ 118.921335][ T1597] usb 3-1: Manufacturer: syz [ 118.926026][ T1597] usb 3-1: SerialNumber: syz [ 119.070312][ T31] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 119.076912][ T31] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 119.084674][ T31] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 119.127347][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x4 [ 119.134387][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.135106][ T10] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 119.144179][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.157022][ T10] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.175465][ T1597] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 119.182700][ T1597] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 119.189487][ T1597] cdc_ncm 3-1:1.0: bind() failure [ 119.195623][ T1597] usb 3-1: USB disconnect, device number 80 [ 119.271377][ T2696] netlink: 'syz.1.649': attribute type 27 has an invalid length. [ 119.282164][ T31] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 119.289148][ T31] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 119.302077][ T31] usb 2-1: USB disconnect, device number 75 [ 119.309115][ T31] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 119.493819][ T2700] usb 1-1: string descriptor 0 read error: -19 [ 119.493819][ T317] usb 1-1: USB disconnect, device number 74 [ 119.493886][ T2727] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -19 [ 119.836110][ T2737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.845043][ T2737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.035184][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.042228][ T2741] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.049272][ T2741] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.056266][ T2741] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.071220][ T317] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 120.221188][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 120.227380][ T317] usb 2-1: config 1 has an invalid interface number: 33 but max is 1 [ 120.235504][ T317] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.244239][ T317] usb 2-1: config 1 has an invalid interface number: 186 but max is 1 [ 120.252492][ T317] usb 2-1: config 1 has no interface number 0 [ 120.258575][ T317] usb 2-1: config 1 has no interface number 1 [ 120.264705][ T317] usb 2-1: config 1 interface 33 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 120.275580][ T317] usb 2-1: config 1 interface 33 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 120.286267][ T317] usb 2-1: config 1 interface 33 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 120.297254][ T317] usb 2-1: config 1 interface 33 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 120.308048][ T317] usb 2-1: config 1 interface 33 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 120.311190][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 120.319178][ T317] usb 2-1: config 1 interface 33 has no altsetting 0 [ 120.333284][ T317] usb 2-1: config 1 interface 186 has no altsetting 0 [ 120.341546][ T317] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0141, bcdDevice=62.b8 [ 120.350624][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.358714][ T317] usb 2-1: Product: syz [ 120.362904][ T317] usb 2-1: Manufacturer: syz [ 120.367568][ T317] usb 2-1: SerialNumber: syz [ 120.401231][ T1597] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 120.441199][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 120.471202][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 120.477506][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.487739][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.498094][ T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 120.507288][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.515322][ T10] usb 1-1: Product: syz [ 120.519584][ T10] usb 1-1: Manufacturer: syz [ 120.524207][ T10] usb 1-1: SerialNumber: syz [ 120.531210][ T1597] usb 4-1: device descriptor read/64, error -71 [ 120.576991][ T317] ftdi_sio 2-1:1.33: FTDI USB Serial Device converter detected [ 120.584940][ T317] ftdi_sio ttyUSB0: unknown device type: 0x62b8 [ 120.592210][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 120.597850][ T317] ftdi_sio 2-1:1.186: FTDI USB Serial Device converter detected [ 120.606128][ T317] ftdi_sio ttyUSB1: unknown device type: 0x62b8 [ 120.612852][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.622123][ T317] usb 2-1: USB disconnect, device number 76 [ 120.628127][ T31] usb 3-1: config 1 has an invalid interface association descriptor of length 6, skipping [ 120.638609][ T317] ftdi_sio 2-1:1.33: device disconnected [ 120.644901][ T317] ftdi_sio 2-1:1.186: device disconnected [ 120.651170][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.661459][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.671204][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.686132][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.695233][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.703248][ T31] usb 3-1: Product: syz [ 120.707395][ T31] usb 3-1: Manufacturer: syz [ 120.712097][ T31] usb 3-1: SerialNumber: syz [ 120.730912][ T2741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.656'. [ 120.743974][ T10] usb 1-1: 0:1 : does not exist [ 120.748855][ T10] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 120.757041][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.768157][ T10] usb 1-1: USB disconnect, device number 75 [ 120.775097][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.781373][ T1597] usb 4-1: device descriptor read/64, error -71 [ 120.920993][ T36] audit: type=1400 audit(33555022.896:588): avc: denied { setopt } for pid=2742 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.922286][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.949111][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.962687][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 120.967908][ T31] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 120.974866][ T31] cdc_ncm 3-1:1.0: bind() failure [ 120.982204][ T31] usb 3-1: USB disconnect, device number 81 [ 121.031216][ T1597] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 121.161221][ T1597] usb 4-1: device descriptor read/64, error -71 [ 121.289404][ T36] audit: type=1400 audit(33555023.266:589): avc: denied { append } for pid=2747 comm="syz.1.659" dev="proc" ino=4026532497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 121.333091][ T36] audit: type=1400 audit(33555023.316:590): avc: denied { associate } for pid=2747 comm="syz.1.659" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.401265][ T1597] usb 4-1: device descriptor read/64, error -71 [ 121.429639][ T2753] netlink: 'syz.1.660': attribute type 13 has an invalid length. [ 121.437829][ T2753] erspan0: refused to change device tx_queue_len [ 121.514304][ T1597] usb usb4-port1: attempt power cycle [ 121.546590][ T2764] 9pnet_fd: Insufficient options for proto=fd [ 121.801256][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 121.861239][ T1597] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 121.882185][ T1597] usb 4-1: device descriptor read/8, error -71 [ 121.953880][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.963433][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.971574][ T10] usb 2-1: Product: syz [ 121.975778][ T10] usb 2-1: Manufacturer: syz [ 121.980353][ T10] usb 2-1: SerialNumber: syz [ 122.012238][ T1597] usb 4-1: device descriptor read/8, error -71 [ 122.041243][ T383] Bluetooth: hci0: command 0x1003 tx timeout [ 122.041739][ T418] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.200722][ T36] audit: type=1400 audit(33555024.176:591): avc: denied { mount } for pid=2777 comm="syz.2.668" name="/" dev="incremental-fs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.224189][ T36] audit: type=1400 audit(33555024.176:592): avc: denied { read } for pid=2777 comm="syz.2.668" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.247968][ T36] audit: type=1400 audit(33555024.176:593): avc: denied { open } for pid=2777 comm="syz.2.668" path="/173/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.272360][ T1597] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 122.275584][ T36] audit: type=1400 audit(33555024.186:594): avc: denied { mounton } for pid=2777 comm="syz.2.668" path="/173/file0" dev="incremental-fs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.302251][ T1597] usb 4-1: device descriptor read/8, error -71 [ 122.305146][ T36] audit: type=1400 audit(33555024.196:595): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.329601][ T36] audit: type=1400 audit(33555024.236:596): avc: denied { write } for pid=289 comm="syz-executor" name="/" dev="incremental-fs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.432256][ T1597] usb 4-1: device descriptor read/8, error -71 [ 122.469512][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.476641][ T2785] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.483955][ T2785] bridge_slave_0: entered allmulticast mode [ 122.490143][ T2785] bridge_slave_0: entered promiscuous mode [ 122.496919][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.503990][ T2785] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.511062][ T2785] bridge_slave_1: entered allmulticast mode [ 122.517454][ T2785] bridge_slave_1: entered promiscuous mode [ 122.526951][ T305] bridge_slave_1: left allmulticast mode [ 122.532633][ T305] bridge_slave_1: left promiscuous mode [ 122.538262][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.545562][ T1597] usb usb4-port1: unable to enumerate USB device [ 122.552176][ T305] bridge_slave_0: left allmulticast mode [ 122.557817][ T305] bridge_slave_0: left promiscuous mode [ 122.568501][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.646919][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 122.646936][ T36] audit: type=1400 audit(33555024.626:600): avc: denied { read } for pid=2796 comm="syz.0.674" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.667878][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.682868][ T36] audit: type=1400 audit(33555024.626:601): avc: denied { open } for pid=2796 comm="syz.0.674" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.683068][ T2785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.713341][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.720372][ T2785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.729361][ T305] veth1_macvtap: left promiscuous mode [ 122.734986][ T305] veth0_vlan: left promiscuous mode [ 122.780971][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.788249][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.800992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.808081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.816864][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.823925][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.849757][ T2785] veth0_vlan: entered promiscuous mode [ 122.860157][ T2785] veth1_macvtap: entered promiscuous mode [ 122.877223][ T36] audit: type=1400 audit(33555024.856:602): avc: denied { mounton } for pid=2785 comm="syz-executor" path="/root/syzkaller.9WfmRq/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 122.901798][ T36] audit: type=1400 audit(33555024.856:603): avc: denied { mount } for pid=2785 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.923954][ T36] audit: type=1400 audit(33555024.856:604): avc: denied { mounton } for pid=2785 comm="syz-executor" path="/root/syzkaller.9WfmRq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 122.948965][ T2801] kvm: kvm [2800]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 122.950646][ T36] audit: type=1400 audit(33555024.856:605): avc: denied { mounton } for pid=2785 comm="syz-executor" path="/root/syzkaller.9WfmRq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 122.987407][ T36] audit: type=1400 audit(33555024.886:606): avc: denied { mounton } for pid=2785 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 123.002684][ T317] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 123.010955][ T36] audit: type=1400 audit(33555024.886:607): avc: denied { mounton } for pid=2785 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 123.182213][ T317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.193764][ T317] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 123.203068][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.211061][ T317] usb 1-1: Product: syz [ 123.215369][ T317] usb 1-1: Manufacturer: syz [ 123.219956][ T317] usb 1-1: SerialNumber: syz [ 123.225247][ T317] usb 1-1: config 0 descriptor?? [ 123.230954][ T317] plusb 1-1:0.0: probe with driver plusb failed with error -22 [ 123.381288][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.421245][ T31] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 123.433605][ T1597] usb 1-1: USB disconnect, device number 76 [ 123.533609][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 123.542758][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.550828][ T10] usb 5-1: Product: syz [ 123.555034][ T10] usb 5-1: Manufacturer: syz [ 123.559635][ T10] usb 5-1: SerialNumber: syz [ 123.565192][ T10] usb 5-1: config 0 descriptor?? [ 123.571553][ T10] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 123.580005][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.588531][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.598703][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.609112][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 123.618301][ T31] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 123.626394][ T31] usb 4-1: Product: syz [ 123.630556][ T31] usb 4-1: Manufacturer: syz [ 123.635172][ T31] usb 4-1: SerialNumber: syz [ 123.845291][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.855530][ T31] usb 4-1: USB disconnect, device number 79 [ 123.863302][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.251232][ T355] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 124.401198][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 124.412272][ T2812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.422044][ T2812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.427910][ T2823] netlink: 188 bytes leftover after parsing attributes in process `syz.3.682'. [ 124.524460][ T2823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 124.576496][ T10] usb 2-1: USB disconnect, device number 77 [ 124.871250][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 124.952014][ T1597] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 125.021213][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.027809][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.036261][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.047127][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 70, changing to 7 [ 125.059501][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 125.068685][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.076713][ T10] usb 2-1: Product: syz [ 125.080895][ T10] usb 2-1: Manufacturer: syz [ 125.085612][ T10] usb 2-1: SerialNumber: syz [ 125.102645][ T1597] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.111045][ T1597] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.121238][ T1597] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.130223][ T1597] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.144597][ T1597] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 125.153693][ T1597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.161735][ T1597] usb 4-1: Product: syz [ 125.165904][ T1597] usb 4-1: Manufacturer: syz [ 125.170578][ T1597] usb 4-1: SerialNumber: syz [ 125.294044][ T2827] overlayfs: missing 'lowerdir' [ 125.304887][ T10] usb 2-1: USB disconnect, device number 78 [ 125.314048][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.380781][ T1597] usb 4-1: 0:2 : does not exist [ 125.385738][ T1597] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 125.400988][ T1597] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 125.410369][ T1597] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.422133][ T1597] usb 4-1: USB disconnect, device number 80 [ 125.426065][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.546763][ T2851] bridge0: port 3(syz_tun) entered blocking state [ 125.553275][ T2851] bridge0: port 3(syz_tun) entered disabled state [ 125.559735][ T2851] syz_tun: entered allmulticast mode [ 125.565459][ T2851] syz_tun: entered promiscuous mode [ 125.570756][ T2851] bridge0: port 3(syz_tun) entered blocking state [ 125.577201][ T2851] bridge0: port 3(syz_tun) entered forwarding state [ 125.587093][ T36] audit: type=1400 audit(125.568:608): avc: denied { accept } for pid=2850 comm="syz.0.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.632447][ T2854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.641095][ T2854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.071723][ T1597] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 126.170433][ T317] usb 5-1: USB disconnect, device number 2 [ 126.205853][ T36] audit: type=1326 audit(126.188:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22fd59c799 code=0x0 [ 126.222416][ T1597] usb 2-1: Using ep0 maxpacket: 16 [ 126.242403][ T1597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.261550][ T1597] usb 2-1: config 1 has an invalid interface descriptor of length 7, skipping [ 126.270475][ T1597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.282478][ T1597] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 126.291571][ T1597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.301918][ T1597] usb 2-1: Product: syz [ 126.303552][ T2889] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 126.308851][ T1597] usb 2-1: Manufacturer: syz [ 126.316639][ T2889] fuse: blksize only supported for fuseblk [ 126.329657][ T1597] usb 2-1: SerialNumber: syz [ 126.337727][ T2892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.346972][ T2892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.531210][ T317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.661233][ T317] usb 5-1: device descriptor read/64, error -71 [ 126.901184][ T317] usb 5-1: device descriptor read/64, error -71 [ 127.057438][ T2904] netlink: 'syz.3.711': attribute type 22 has an invalid length. [ 127.078632][ T2908] netlink: 92 bytes leftover after parsing attributes in process `syz.3.712'. [ 127.151202][ T317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.281247][ T317] usb 5-1: device descriptor read/64, error -71 [ 127.341212][ T857] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 127.491202][ T857] usb 4-1: Using ep0 maxpacket: 16 [ 127.498959][ T857] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 127.508249][ T857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.516322][ T857] usb 4-1: Product: syz [ 127.520508][ T857] usb 4-1: Manufacturer: syz [ 127.525193][ T317] usb 5-1: device descriptor read/64, error -71 [ 127.531482][ T857] usb 4-1: SerialNumber: syz [ 127.641337][ T317] usb usb5-port1: attempt power cycle [ 127.743980][ T857] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 127.756900][ T857] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.771984][ T857] usb 4-1: USB disconnect, device number 81 [ 127.782058][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.981196][ T317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.002278][ T317] usb 5-1: device descriptor read/8, error -71 [ 128.132225][ T317] usb 5-1: device descriptor read/8, error -71 [ 128.250099][ T2925] fuse: Bad value for 'fd' [ 128.371485][ T317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.392214][ T317] usb 5-1: device descriptor read/8, error -71 [ 128.410789][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 128.410807][ T36] audit: type=1400 audit(128.388:615): avc: denied { mounton } for pid=2924 comm="syz.0.717" path="/186/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 128.410839][ T2930] binder: Unknown parameter 'subj_user' [ 128.511230][ T857] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 128.522347][ T317] usb 5-1: device descriptor read/8, error -71 [ 128.631302][ T317] usb usb5-port1: unable to enumerate USB device [ 128.661240][ T857] usb 4-1: Using ep0 maxpacket: 8 [ 128.667403][ T857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.677880][ T857] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.692074][ T857] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 128.701452][ T857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.709451][ T857] usb 4-1: Product: syz [ 128.713640][ T857] usb 4-1: Manufacturer: syz [ 128.718230][ T857] usb 4-1: SerialNumber: syz [ 128.830965][ T1597] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.841574][ T1597] usb 2-1: MIDIStreaming interface descriptor not found [ 128.858993][ T1597] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 128.878627][ T1597] usb 2-1: USB disconnect, device number 79 [ 128.889373][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.005804][ T857] usb 4-1: MIDIStreaming interface descriptor not found [ 129.015355][ T857] usb 4-1: USB disconnect, device number 82 [ 129.107433][ T2941] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 129.115587][ T2941] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 129.144167][ T2943] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 129.171241][ T1597] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 129.281331][ T36] audit: type=1400 audit(129.268:616): avc: denied { lock } for pid=2951 comm="syz.0.726" path="socket:[18968]" dev="sockfs" ino=18968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 129.321194][ T1597] usb 2-1: Using ep0 maxpacket: 32 [ 129.327464][ T1597] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 129.335699][ T1597] usb 2-1: config 0 has no interface number 0 [ 129.341826][ T1597] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 129.353516][ T1597] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 129.362606][ T1597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.370605][ T1597] usb 2-1: Product: syz [ 129.374786][ T1597] usb 2-1: Manufacturer: syz [ 129.379387][ T1597] usb 2-1: SerialNumber: syz [ 129.384601][ T1597] usb 2-1: config 0 descriptor?? [ 129.389819][ T2937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.481534][ T355] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.490238][ T355] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 129.499987][ T355] usb 1-1: chopping to 0 config(s) [ 129.515638][ T355] usb 1-1: can't read configurations, error -32 [ 129.603199][ T2937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.661236][ T355] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 129.791220][ T355] usb 1-1: device descriptor read/64, error -32 [ 129.861193][ T31] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 130.021193][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 130.027576][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 130.028231][ T2937] netlink: 'syz.1.720': attribute type 4 has an invalid length. [ 130.035832][ T36] audit: type=1400 audit(130.008:617): avc: denied { shutdown } for pid=2936 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.062923][ T31] usb 4-1: config 1 has no interface number 0 [ 130.066687][ T2937] netlink: 'syz.1.720': attribute type 4 has an invalid length. [ 130.069017][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.076834][ T355] usb 1-1: device descriptor read/64, error -32 [ 130.087621][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.113307][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 130.122002][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 130.131485][ T31] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 130.139621][ T31] usb 4-1: Product: syz [ 130.143829][ T31] usb 4-1: Manufacturer: syz [ 130.148495][ T31] usb 4-1: SerialNumber: syz [ 130.154102][ T2974] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 130.161376][ T2974] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 130.231261][ T355] usb usb1-port1: attempt power cycle [ 130.341199][ T857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.371181][ T31] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 130.381393][ T31] usb 4-1: USB disconnect, device number 83 [ 130.404679][ T2985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.413948][ T2985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.491210][ T857] usb 5-1: Using ep0 maxpacket: 8 [ 130.497386][ T857] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.505759][ T857] usb 5-1: config 179 has no interface number 0 [ 130.512095][ T857] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.523182][ T857] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.534424][ T857] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.545569][ T857] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.557170][ T857] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.570441][ T857] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.579504][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.581213][ T355] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 130.595895][ T2981] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 130.621732][ T355] usb 1-1: device descriptor read/8, error -32 [ 130.752146][ T355] usb 1-1: device descriptor read/8, error -32 [ 130.808474][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.817081][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.825993][ T357] usb 5-1: USB disconnect, device number 7 [ 130.825991][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.826024][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.991186][ T355] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 131.011696][ T355] usb 1-1: device descriptor read/8, error -32 [ 131.141760][ T355] usb 1-1: device descriptor read/8, error -32 [ 131.161223][ T397] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 131.251203][ T355] raw-gadget.1 gadget.0: failed to queue suspend event [ 131.258178][ T355] usb usb1-port1: unable to enumerate USB device [ 131.312367][ T397] usb 4-1: config index 0 descriptor too short (expected 65170, got 92) [ 131.320779][ T397] usb 4-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 131.334545][ T397] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.343870][ T397] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1F, changing to 0xF [ 131.355467][ T397] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42475, setting to 1024 [ 131.369883][ T397] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.379108][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.387420][ T397] usb 4-1: Product: syz [ 131.391853][ T397] usb 4-1: Manufacturer: syz [ 131.396457][ T397] usb 4-1: SerialNumber: syz [ 131.402246][ T2987] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 131.567458][ T3000] overlayfs: conflicting lowerdir path [ 131.601185][ T857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.751201][ T857] usb 5-1: Using ep0 maxpacket: 16 [ 131.757491][ T857] usb 5-1: config 0 has no interfaces? [ 131.763084][ T857] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 131.772146][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.781171][ T857] usb 5-1: config 0 descriptor?? [ 131.869875][ T1597] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 131.884050][ T1597] asix 2-1:0.188: probe with driver asix failed with error -71 [ 131.892940][ T1597] usb 2-1: USB disconnect, device number 80 [ 131.967699][ T397] usb 4-1: USB disconnect, device number 84 [ 131.974206][ T3017] overlay: ./file0 is not a directory [ 131.987379][ T857] usb 5-1: USB disconnect, device number 8 [ 132.015190][ T36] audit: type=1400 audit(131.998:618): avc: denied { mounton } for pid=3024 comm="syz.4.749" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 132.045115][ T36] audit: type=1400 audit(132.028:619): avc: denied { bind } for pid=3027 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.069995][ T36] audit: type=1400 audit(132.028:620): avc: denied { connect } for pid=3027 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.089835][ T36] audit: type=1400 audit(132.068:621): avc: denied { link } for pid=3032 comm="syz.4.751" name="#9" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.128207][ T36] audit: type=1400 audit(132.108:622): avc: denied { create } for pid=3036 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 132.137746][ T3037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.151181][ T36] audit: type=1400 audit(132.118:623): avc: denied { setopt } for pid=3036 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 132.156808][ T3037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.178928][ T36] audit: type=1400 audit(132.118:624): avc: denied { shutdown } for pid=3036 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.202696][ T1597] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 132.235022][ T3020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.244111][ T3020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.331201][ T397] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 132.362701][ T1597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.372979][ T1597] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 132.382363][ T1597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.390593][ T1597] usb 2-1: Product: syz [ 132.395461][ T1597] usb 2-1: Manufacturer: syz [ 132.400175][ T1597] usb 2-1: SerialNumber: syz [ 132.451209][ T857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.602382][ T857] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.616611][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.625709][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.634553][ T857] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 132.641935][ T1597] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.646442][ T857] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 132.663779][ T857] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.665542][ T1597] usb 2-1: USB disconnect, device number 81 [ 132.691875][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.704808][ T3035] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 132.785247][ T3045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.794276][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.804820][ T3045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.812998][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.919667][ T857] usb 5-1: USB disconnect, device number 9 [ 133.301213][ T857] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.392652][ T3060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.401750][ T3060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.441198][ T317] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 133.451331][ T857] usb 5-1: Using ep0 maxpacket: 32 [ 133.457692][ T857] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 133.466209][ T857] usb 5-1: config 0 has no interface number 0 [ 133.472456][ T857] usb 5-1: config 0 interface 184 has no altsetting 0 [ 133.480914][ T857] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 133.490617][ T857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.498899][ T857] usb 5-1: Product: syz [ 133.503347][ T857] usb 5-1: Manufacturer: syz [ 133.508037][ T857] usb 5-1: SerialNumber: syz [ 133.514409][ T857] usb 5-1: config 0 descriptor?? [ 133.520539][ T857] smsc75xx v1.0.0 [ 133.592707][ T317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.600965][ T317] usb 2-1: not running at top speed; connect to a high speed hub [ 133.609770][ T317] usb 2-1: config 14 has an invalid interface number: 95 but max is 0 [ 133.618360][ T317] usb 2-1: config 14 has no interface number 0 [ 133.624722][ T317] usb 2-1: config 14 interface 95 has no altsetting 0 [ 133.633311][ T317] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=da.f0 [ 133.642737][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.650829][ T317] usb 2-1: Product: syz [ 133.655395][ T317] usb 2-1: Manufacturer: syz [ 133.660085][ T317] usb 2-1: SerialNumber: syz [ 133.878786][ T317] usbserial_generic 2-1:14.95: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 133.892719][ T317] usbserial_generic 2-1:14.95: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 133.903945][ T317] usbserial_generic 2-1:14.95: device has no bulk endpoints [ 133.913622][ T317] usb 2-1: USB disconnect, device number 82 [ 134.328319][ T3055] netlink: 'syz.4.758': attribute type 16 has an invalid length. [ 134.452015][ T3075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.482102][ T3075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.721195][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 134.768806][ T3055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.778522][ T3055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.813700][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 134.826846][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 134.836731][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 134.847899][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 134.857820][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 134.868402][ T857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 134.871201][ T10] usb 2-1: device descriptor read/64, error -71 [ 134.878195][ T857] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 134.896540][ T857] usb 5-1: USB disconnect, device number 10 [ 135.052530][ T3089] input: syz1 as /devices/virtual/input/input17 [ 135.084911][ T3095] netlink: 'syz.3.772': attribute type 27 has an invalid length. [ 135.141251][ T10] usb 2-1: device descriptor read/64, error -71 [ 135.381330][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 135.391248][ T397] usb 4-1: device descriptor read/64, error -71 [ 135.511225][ T10] usb 2-1: device descriptor read/64, error -71 [ 135.651212][ T397] usb 4-1: Using ep0 maxpacket: 32 [ 135.659159][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.670352][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.680223][ T397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.695325][ T397] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 135.696552][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.704588][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.713842][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.722048][ T397] usb 4-1: config 0 descriptor?? [ 135.738945][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.747886][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.755764][ T10] usb 2-1: device descriptor read/64, error -71 [ 135.762997][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 135.763012][ T36] audit: type=1400 audit(135.748:628): avc: denied { mount } for pid=3114 comm="syz.0.778" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.790527][ T36] audit: type=1400 audit(135.748:629): avc: denied { name_bind } for pid=3114 comm="syz.0.778" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 135.811077][ T36] audit: type=1400 audit(135.748:630): avc: denied { node_bind } for pid=3114 comm="syz.0.778" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 135.871773][ T10] usb usb2-port1: attempt power cycle [ 136.140572][ T397] hid (null): unknown global tag 0xe [ 136.146034][ T397] hid (null): unknown global tag 0xc [ 136.152241][ T397] hid (null): unknown global tag 0x2c [ 136.158496][ T397] hid (null): unknown global tag 0x85 [ 136.164156][ T397] hid (null): unknown global tag 0xd [ 136.169445][ T397] hid (null): bogus close delimiter [ 136.174672][ T397] hid (null): unknown global tag 0xc [ 136.182176][ T397] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0011/input/input18 [ 136.194363][ T397] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0011/input/input19 [ 136.210540][ T397] kye 0003:0458:5011.0011: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 136.222717][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 136.261039][ T10] usb 2-1: device descriptor read/8, error -71 [ 136.315616][ T3120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.324870][ T3120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.336420][ T36] audit: type=1400 audit(136.318:631): avc: denied { create } for pid=3119 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 136.392083][ T10] usb 2-1: device descriptor read/8, error -71 [ 136.473133][ T317] usb 4-1: USB disconnect, device number 85 [ 136.631199][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 136.652402][ T10] usb 2-1: device descriptor read/8, error -71 [ 136.782195][ T10] usb 2-1: device descriptor read/8, error -71 [ 136.891365][ T10] usb usb2-port1: unable to enumerate USB device [ 136.988760][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.997809][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.010198][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.019314][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.231217][ T317] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 137.382322][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.393300][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.403069][ T317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.416028][ T317] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.425095][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.434368][ T317] usb 4-1: config 0 descriptor?? [ 137.703338][ T36] audit: type=1400 audit(137.688:632): avc: denied { create } for pid=3143 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.841890][ T317] usbhid 4-1:0.0: can't add hid device: -71 [ 137.847903][ T317] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 137.856569][ T317] usb 4-1: USB disconnect, device number 86 [ 137.871293][ T31] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 138.001217][ T31] usb 2-1: device descriptor read/64, error -71 [ 138.241208][ T31] usb 2-1: device descriptor read/64, error -71 [ 138.481222][ T31] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 138.550164][ T36] audit: type=1400 audit(138.528:633): avc: denied { read write } for pid=3150 comm="syz.0.791" name="file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.572350][ T36] audit: type=1400 audit(138.528:634): avc: denied { open } for pid=3150 comm="syz.0.791" path="/228/file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.591257][ T317] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 138.594505][ T36] audit: type=1400 audit(138.528:635): avc: denied { ioctl } for pid=3150 comm="syz.0.791" path="/228/file0" dev="tmpfs" ino=1234 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.641232][ T31] usb 2-1: device descriptor read/64, error -71 [ 138.756182][ T317] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 138.764706][ T317] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 138.773735][ T317] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 138.778838][ T3162] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 138.784112][ T317] usb 4-1: config 220 has no interface number 2 [ 138.791995][ T3162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 138.798098][ T317] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 138.798132][ T317] usb 4-1: config 220 interface 0 has no altsetting 0 [ 138.798147][ T317] usb 4-1: config 220 interface 76 has no altsetting 0 [ 138.798163][ T317] usb 4-1: config 220 interface 1 has no altsetting 0 [ 138.808532][ T3162] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.821672][ T317] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 138.857179][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.865252][ T317] usb 4-1: Product: syz [ 138.869437][ T317] usb 4-1: Manufacturer: syz [ 138.874100][ T317] usb 4-1: SerialNumber: syz [ 138.911228][ T31] usb 2-1: device descriptor read/64, error -71 [ 138.925009][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.933575][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.988950][ T36] audit: type=1400 audit(138.968:636): avc: denied { write } for pid=3174 comm="syz.4.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.021383][ T31] usb usb2-port1: attempt power cycle [ 139.084427][ T317] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 139.090808][ T317] usb 4-1: No valid video chain found. [ 139.096633][ T317] usb 4-1: selecting invalid altsetting 0 [ 139.104613][ T3180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.801'. [ 139.114317][ T317] usb 4-1: USB disconnect, device number 87 [ 139.361221][ T31] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 139.382256][ T31] usb 2-1: device descriptor read/8, error -71 [ 139.512217][ T31] usb 2-1: device descriptor read/8, error -71 [ 139.621944][ T3191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.630779][ T3191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.751206][ T31] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 139.780032][ T31] usb 2-1: device descriptor read/8, error -71 [ 139.922253][ T31] usb 2-1: device descriptor read/8, error -71 [ 139.987754][ T3213] rust_binder: Write failure EFAULT in pid:77 [ 140.010775][ T36] audit: type=1400 audit(139.988:637): avc: denied { create } for pid=3214 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.041505][ T31] usb usb2-port1: unable to enumerate USB device [ 140.532714][ T3224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.814'. [ 140.971217][ T397] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 141.131189][ T1597] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 141.138827][ T397] usb 2-1: Using ep0 maxpacket: 8 [ 141.152144][ T397] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.160518][ T397] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 141.168613][ T397] usb 2-1: config 9 has no interface number 0 [ 141.181179][ T397] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0x2C, changing to 0xC [ 141.192621][ T397] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 141.202296][ T397] usb 2-1: config 9 interface 5 has no altsetting 0 [ 141.210514][ T397] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 141.219756][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.231207][ T397] usb 2-1: Product: syz [ 141.235396][ T397] usb 2-1: Manufacturer: syz [ 141.239995][ T397] usb 2-1: SerialNumber: syz [ 141.301178][ T1597] usb 4-1: Using ep0 maxpacket: 16 [ 141.308376][ T1597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.319074][ T1597] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 141.331985][ T1597] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.341027][ T1597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.349714][ T1597] usb 4-1: config 0 descriptor?? [ 141.356620][ T1597] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 141.454843][ T397] usb 2-1: USB disconnect, device number 91 [ 141.558832][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 141.558849][ T36] audit: type=1400 audit(141.537:639): avc: denied { ioctl } for pid=3253 comm="syz.3.823" path="socket:[21164]" dev="sockfs" ino=21164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.687212][ T45] usb 4-1: USB disconnect, device number 88 [ 141.990767][ T3265] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 141.999815][ T3265] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 142.009424][ T3265] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 142.196896][ T3275] netlink: 'syz.3.830': attribute type 58 has an invalid length. [ 142.204728][ T45] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 142.213732][ T3275] netlink: 'syz.3.830': attribute type 58 has an invalid length. [ 142.351195][ T45] usb 2-1: device descriptor read/64, error -71 [ 142.461262][ T317] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 142.591357][ T45] usb 2-1: device descriptor read/64, error -71 [ 142.602959][ T3291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.611796][ T3291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.620275][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.631675][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.641521][ T317] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.650557][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.659122][ T317] usb 4-1: config 0 descriptor?? [ 142.665047][ T317] hub 4-1:0.0: USB hub found [ 142.831222][ T45] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 142.865038][ T317] hub 4-1:0.0: 1 port detected [ 142.961270][ T45] usb 2-1: device descriptor read/64, error -71 [ 143.091191][ T857] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.150287][ T3302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.158855][ T3302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.201206][ T45] usb 2-1: device descriptor read/64, error -71 [ 143.242534][ T857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.250960][ T857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.261105][ T857] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.272559][ T857] usb 5-1: string descriptor 0 read error: -22 [ 143.278746][ T857] usb 5-1: New USB device found, idVendor=6335, idProduct=0454, bcdDevice=51.26 [ 143.287821][ T857] usb 5-1: New USB device strings: Mfr=13, Product=208, SerialNumber=209 [ 143.298660][ T857] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 143.311321][ T45] usb usb2-port1: attempt power cycle [ 143.508874][ T857] usb 5-1: USB disconnect, device number 11 [ 143.651191][ T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 143.672242][ T45] usb 2-1: device descriptor read/8, error -71 [ 143.678664][ T317] hub 4-1:0.0: activate --> -90 [ 143.812252][ T45] usb 2-1: device descriptor read/8, error -71 [ 143.859707][ T3309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.868286][ T3309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.877465][ T3309] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 143.888423][ T3309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.897230][ T3309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.051184][ T45] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 144.072240][ T45] usb 2-1: device descriptor read/8, error -71 [ 144.090976][ T31] usb 4-1: USB disconnect, device number 89 [ 144.202358][ T45] usb 2-1: device descriptor read/8, error -71 [ 144.251302][ T857] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.311287][ T45] usb usb2-port1: unable to enumerate USB device [ 144.403660][ T857] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.412737][ T857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.421176][ T857] usb 5-1: Product: syz [ 144.425358][ T857] usb 5-1: Manufacturer: syz [ 144.429953][ T857] usb 5-1: SerialNumber: syz [ 144.499738][ T3315] netlink: 'syz.0.844': attribute type 27 has an invalid length. [ 144.563199][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.571815][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.580892][ T36] audit: type=1400 audit(144.557:640): avc: denied { setopt } for pid=3323 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.611096][ T3329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.616299][ T3331] Invalid logical block size (-1) [ 144.619707][ T3329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.657325][ T3337] netlink: 'syz.3.851': attribute type 32 has an invalid length. [ 144.694539][ T3341] binder: Unknown parameter '–%Œ €ÑèÞ<Åиkˆ¥/ꆾ^‹ÎÜÖ_Ó"Ö9*{ñ^¢W~.&ÎÃ|/' [ 144.711945][ T36] audit: type=1400 audit(144.697:641): avc: denied { create } for pid=3342 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 144.731677][ T36] audit: type=1400 audit(144.697:642): avc: denied { append } for pid=3342 comm="syz.3.854" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.747690][ T3348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.763012][ T3348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.971798][ T45] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 144.987423][ T3351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.995988][ T3351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.007447][ T3351] netlink: 'syz.1.856': attribute type 17 has an invalid length. [ 145.050312][ T857] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 145.056721][ T857] cdc_ncm 5-1:1.0: bind() failure [ 145.062752][ T857] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 145.069563][ T857] cdc_ncm 5-1:1.1: bind() failure [ 145.131224][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 145.137467][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.148457][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.158217][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.171338][ T45] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 145.180384][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.189129][ T45] usb 4-1: config 0 descriptor?? [ 145.246151][ T3359] SELinux: policydb table sizes (3,3) do not match mine (8,7) [ 145.253848][ T3359] SELinux: failed to load policy [ 145.259415][ T36] audit: type=1400 audit(145.237:643): avc: denied { ioctl } for pid=3358 comm="syz.0.858" path="socket:[21345]" dev="sockfs" ino=21345 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.284048][ T3359] batadv_slave_0: entered promiscuous mode [ 145.290576][ T3359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 145.300099][ T36] audit: type=1326 audit(145.277:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8239c799 code=0x7ffc0000 [ 145.323084][ T36] audit: type=1326 audit(145.277:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8239c799 code=0x7ffc0000 [ 145.326616][ T3362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.346001][ T36] audit: type=1326 audit(145.277:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8239c799 code=0x7ffc0000 [ 145.356033][ T3362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.377009][ T36] audit: type=1326 audit(145.277:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8239c799 code=0x7ffc0000 [ 145.410118][ T36] audit: type=1326 audit(145.277:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3c8239c799 code=0x7ffc0000 [ 145.415504][ T317] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 145.441203][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 145.447302][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.457899][ T45] usb 4-1: USB disconnect, device number 90 [ 145.581189][ T317] usb 2-1: device descriptor read/64, error -71 [ 145.768309][ T3374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.777115][ T3374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.831188][ T317] usb 2-1: device descriptor read/64, error -71 [ 146.071194][ T317] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 146.201219][ T317] usb 2-1: device descriptor read/64, error -71 [ 146.313901][ T3387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.866'. [ 146.451227][ T317] usb 2-1: device descriptor read/64, error -71 [ 146.454323][ T3397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 146.561397][ T317] usb usb2-port1: attempt power cycle [ 146.901212][ T317] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 146.908934][ T45] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 146.932337][ T317] usb 2-1: device descriptor read/8, error -71 [ 147.021478][ T10] usb 5-1: USB disconnect, device number 12 [ 147.037189][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 147.037205][ T36] audit: type=1400 audit(147.017:726): avc: denied { create } for pid=3403 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 147.081242][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 147.092286][ T317] usb 2-1: device descriptor read/8, error -71 [ 147.098832][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.107320][ T45] usb 4-1: config 4 has an invalid interface number: 10 but max is 0 [ 147.116944][ T45] usb 4-1: config 4 has no interface number 0 [ 147.124569][ T45] usb 4-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=64.b5 [ 147.133790][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.141848][ T45] usb 4-1: Product: syz [ 147.146039][ T45] usb 4-1: Manufacturer: syz [ 147.150618][ T45] usb 4-1: SerialNumber: syz [ 147.201857][ T36] audit: type=1326 audit(147.187:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.0.875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c8239c799 code=0x0 [ 147.252697][ T36] audit: type=1400 audit(147.237:728): avc: denied { write } for pid=3411 comm="syz.0.875" dev="sockfs" ino=21473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.253823][ T3420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.281753][ T3420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.351204][ T317] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 147.366387][ T45] usb 4-1: USB disconnect, device number 91 [ 147.373677][ T317] usb 2-1: device descriptor read/8, error -71 [ 147.461240][ T857] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.502303][ T317] usb 2-1: device descriptor read/8, error -71 [ 147.591215][ T857] usb 5-1: device descriptor read/64, error -71 [ 147.611277][ T317] usb usb2-port1: unable to enumerate USB device [ 147.831222][ T857] usb 5-1: device descriptor read/64, error -71 [ 147.993174][ T36] audit: type=1400 audit(147.977:729): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.091194][ T857] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.191233][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 148.221227][ T857] usb 5-1: device descriptor read/64, error -71 [ 148.341216][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 148.348138][ T10] usb 4-1: config 7 has an invalid interface number: 49 but max is 3 [ 148.356306][ T10] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 148.365015][ T10] usb 4-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 148.375111][ T10] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 148.383982][ T10] usb 4-1: config 7 has no interface number 0 [ 148.390480][ T10] usb 4-1: config 7 interface 49 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 148.401369][ T397] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 148.409043][ T10] usb 4-1: config 7 interface 49 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 148.419984][ T10] usb 4-1: config 7 interface 49 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 148.430066][ T10] usb 4-1: config 7 interface 49 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 148.440906][ T10] usb 4-1: config 7 interface 49 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 148.451785][ T10] usb 4-1: config 7 interface 49 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 148.462456][ T10] usb 4-1: config 7 interface 49 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 148.471195][ T857] usb 5-1: device descriptor read/64, error -71 [ 148.473214][ T10] usb 4-1: config 7 interface 49 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 148.489919][ T10] usb 4-1: config 7 interface 49 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 148.500703][ T10] usb 4-1: config 7 interface 49 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 148.511323][ T10] usb 4-1: config 7 interface 49 has no altsetting 0 [ 148.519476][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice= 0.4b [ 148.528568][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.536565][ T10] usb 4-1: Product: á° [ 148.540701][ T10] usb 4-1: Manufacturer: С [ 148.545367][ T10] usb 4-1: SerialNumber: syz [ 148.550996][ T3425] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 148.581306][ T857] usb usb5-port1: attempt power cycle [ 148.601200][ T397] usb 2-1: device descriptor read/64, error -71 [ 148.759305][ T3425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.768524][ T3425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.776845][ T3425] No source specified [ 148.776845][ T36] audit: type=1400 audit(148.757:730): avc: denied { mounton } for pid=3424 comm="syz.3.879" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.813603][ T10] usb 4-1: USB disconnect, device number 92 [ 148.861291][ T397] usb 2-1: device descriptor read/64, error -71 [ 148.921247][ T857] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.942330][ T857] usb 5-1: device descriptor read/8, error -71 [ 149.072319][ T857] usb 5-1: device descriptor read/8, error -71 [ 149.101213][ T397] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 149.231233][ T397] usb 2-1: device descriptor read/64, error -71 [ 149.311228][ T857] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 149.332350][ T857] usb 5-1: device descriptor read/8, error -71 [ 149.462278][ T857] usb 5-1: device descriptor read/8, error -71 [ 149.491212][ T397] usb 2-1: device descriptor read/64, error -71 [ 149.571348][ T857] usb usb5-port1: unable to enumerate USB device [ 149.601312][ T397] usb usb2-port1: attempt power cycle [ 149.821243][ T10] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 149.941190][ T397] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 149.962788][ T397] usb 2-1: device descriptor read/8, error -71 [ 149.971797][ T10] usb 4-1: too many configurations: 245, using maximum allowed: 8 [ 149.980449][ T10] usb 4-1: config index 0 descriptor too short (expected 46063, got 56) [ 149.988976][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 149.997875][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.008428][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.018517][ T10] usb 4-1: config index 1 descriptor too short (expected 46063, got 56) [ 150.026967][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.035839][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.046338][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.056565][ T10] usb 4-1: config index 2 descriptor too short (expected 46063, got 56) [ 150.065014][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.073904][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.084345][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.094543][ T10] usb 4-1: config index 3 descriptor too short (expected 46063, got 56) [ 150.102980][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.111914][ T397] usb 2-1: device descriptor read/8, error -71 [ 150.118112][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.128605][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.138605][ T10] usb 4-1: config index 4 descriptor too short (expected 46063, got 56) [ 150.147082][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.156051][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.166565][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.176575][ T10] usb 4-1: config index 5 descriptor too short (expected 46063, got 56) [ 150.184981][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.193853][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.204310][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.220901][ T10] usb 4-1: config index 6 descriptor too short (expected 46063, got 56) [ 150.221732][ T3441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.229517][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.246590][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.256217][ T3441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.258559][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.274917][ T10] usb 4-1: config index 7 descriptor too short (expected 46063, got 56) [ 150.288979][ T10] usb 4-1: config 181 has too many interfaces: 126, using maximum allowed: 32 [ 150.297155][ T3441] netlink: 'syz.0.885': attribute type 5 has an invalid length. [ 150.298325][ T10] usb 4-1: config 181 has an invalid descriptor of length 130, skipping remainder of the config [ 150.307350][ T3441] netlink: 45 bytes leftover after parsing attributes in process `syz.0.885'. [ 150.316091][ T10] usb 4-1: config 181 has 0 interfaces, different from the descriptor's value: 126 [ 150.337213][ T10] usb 4-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 1.00 [ 150.346360][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.354605][ T397] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 150.362483][ T10] usb 4-1: Product: syz [ 150.366656][ T10] usb 4-1: Manufacturer: syz [ 150.371425][ T10] usb 4-1: SerialNumber: syz [ 150.392180][ T397] usb 2-1: device descriptor read/8, error -71 [ 150.522134][ T397] usb 2-1: device descriptor read/8, error -71 [ 150.631196][ T857] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 150.631338][ T397] usb usb2-port1: unable to enumerate USB device [ 150.782283][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.793647][ T857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.806531][ T857] usb 5-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 150.815607][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.824278][ T857] usb 5-1: config 0 descriptor?? [ 150.829522][ T3457] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 150.957928][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.966628][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.043488][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.050491][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.071650][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.081077][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.088243][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.095461][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.102541][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.109684][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.116691][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.123726][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.130720][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.137748][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.144760][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.151798][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.158805][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.165899][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.173269][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.180292][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.187305][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.194484][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.202411][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.209488][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.216571][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.224048][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.231413][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.238468][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.250011][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.257281][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.264688][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.271896][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.279067][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.286231][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.293413][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.300465][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.307743][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.315055][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.322210][ T857] lenovo 0003:04B3:3105.0012: unknown main item tag 0x0 [ 151.331059][ T857] lenovo 0003:04B3:3105.0012: hidraw0: USB HID v0.20 Device [HID 04b3:3105] on usb-dummy_hcd.4-1/input0 [ 151.354026][ T857] usb 5-1: USB disconnect, device number 17 [ 151.400689][ T3472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.409356][ T3472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.418170][ T3472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.426717][ T3472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.481238][ T45] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 151.632592][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.640997][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.651273][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.661615][ T45] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 151.670747][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.678776][ T45] usb 2-1: Product: syz [ 151.683055][ T45] usb 2-1: Manufacturer: syz [ 151.687647][ T45] usb 2-1: SerialNumber: syz [ 151.898685][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 151.909131][ T45] usb 2-1: USB disconnect, device number 104 [ 151.919145][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.021188][ T857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.146819][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.155443][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.171195][ T857] usb 5-1: Using ep0 maxpacket: 16 [ 152.177461][ T857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.188561][ T857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.198442][ T857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.205090][ T857] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 152.214137][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.223135][ T857] usb 5-1: config 0 descriptor?? [ 152.448728][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 152.472631][ T3496] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 152.550728][ T10] usb 4-1: USB disconnect, device number 93 [ 152.554046][ T3498] netlink: 'syz.3.905': attribute type 6 has an invalid length. [ 152.609231][ T3504] x_tables: unsorted underflow at hook 3 [ 152.637921][ T857] hid (null): unknown global tag 0xd [ 152.643286][ T857] hid (null): unknown global tag 0xc [ 152.648631][ T857] hid (null): unknown global tag 0xe [ 152.653951][ T857] hid (null): global environment stack underflow [ 152.660282][ T857] hid (null): report_id 0 is invalid [ 152.760362][ T3514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.768979][ T3514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.779839][ T3514] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 152.787524][ T3514] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.911'. [ 152.803993][ T3514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.813685][ T3514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.881283][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 152.921301][ T397] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 152.962117][ T357] usb 5-1: USB disconnect, device number 18 [ 153.031223][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 153.037461][ T10] usb 4-1: config 120 interface 0 has no altsetting 0 [ 153.045836][ T10] usb 4-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=da.36 [ 153.054983][ T397] usb 2-1: device descriptor read/64, error -71 [ 153.061706][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.069702][ T10] usb 4-1: Product: syz [ 153.073925][ T10] usb 4-1: Manufacturer: syz [ 153.078508][ T10] usb 4-1: SerialNumber: syz [ 153.285852][ T36] audit: type=1400 audit(153.267:731): avc: denied { map } for pid=3501 comm="syz.3.907" path="socket:[22325]" dev="sockfs" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 153.288078][ T10] asix 4-1:120.0: probe with driver asix failed with error -22 [ 153.316451][ T397] usb 2-1: device descriptor read/64, error -71 [ 153.324670][ T10] usb 4-1: USB disconnect, device number 94 [ 153.340151][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.348672][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.512198][ T3521] netlink: 'syz.4.913': attribute type 16 has an invalid length. [ 153.519927][ T3521] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.913'. [ 153.561224][ T397] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 153.691229][ T397] usb 2-1: device descriptor read/64, error -71 [ 153.714114][ T36] audit: type=1400 audit(153.697:732): avc: denied { getattr } for pid=3529 comm="syz.4.916" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.840844][ T36] audit: type=1400 audit(153.807:733): avc: denied { connect } for pid=3541 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.951221][ T397] usb 2-1: device descriptor read/64, error -71 [ 154.026807][ T36] audit: type=1400 audit(154.007:734): avc: denied { mounton } for pid=3560 comm="syz.0.927" path="/proc/833/task" dev="proc" ino=22460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 154.061202][ T857] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.071279][ T397] usb usb2-port1: attempt power cycle [ 154.171180][ T317] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 154.231224][ T857] usb 5-1: Using ep0 maxpacket: 16 [ 154.242155][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.253192][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.262973][ T857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.275775][ T857] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.284944][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.293763][ T857] usb 5-1: config 0 descriptor?? [ 154.331176][ T317] usb 4-1: Using ep0 maxpacket: 16 [ 154.337311][ T317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.347464][ T317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.357610][ T317] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.366728][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.374756][ T317] usb 4-1: Product: syz [ 154.378908][ T317] usb 4-1: Manufacturer: syz [ 154.383511][ T317] usb 4-1: SerialNumber: syz [ 154.411223][ T397] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 154.432242][ T397] usb 2-1: device descriptor read/8, error -71 [ 154.562223][ T397] usb 2-1: device descriptor read/8, error -71 [ 154.701777][ T857] HID 045e:07da: Invalid code 65791 type 1 [ 154.710417][ T857] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input21 [ 154.725755][ T857] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 154.791932][ T317] usb 4-1: cannot find UAC_HEADER [ 154.798729][ T317] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 154.801241][ T397] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 154.809157][ T317] usb 4-1: USB disconnect, device number 95 [ 154.825309][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.842214][ T397] usb 2-1: device descriptor read/8, error -71 [ 154.921738][ T857] usb 5-1: USB disconnect, device number 19 [ 154.972300][ T397] usb 2-1: device descriptor read/8, error -71 [ 155.082308][ T397] usb usb2-port1: unable to enumerate USB device [ 155.127723][ T3580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.136239][ T3580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.313672][ T3589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'. [ 155.414949][ T36] audit: type=1400 audit(155.397:735): avc: denied { setcheckreqprot } for pid=3588 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 155.519384][ T3594] No source specified [ 155.658194][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.666763][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.676689][ T36] audit: type=1400 audit(155.657:736): avc: denied { bind } for pid=3600 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.696786][ T36] audit: type=1400 audit(155.657:737): avc: denied { name_bind } for pid=3600 comm="syz.0.940" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 155.718425][ T36] audit: type=1400 audit(155.657:738): avc: denied { node_bind } for pid=3600 comm="syz.0.940" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 155.723460][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.749144][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.891220][ T397] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 156.001209][ T857] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 156.042287][ T397] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.050304][ T397] usb 5-1: config 0 has no interface number 0 [ 156.056494][ T397] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.067417][ T397] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.077186][ T397] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 156.086263][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.094797][ T397] usb 5-1: config 0 descriptor?? [ 156.152307][ T857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.162510][ T857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.171429][ T317] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 156.180384][ T857] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.189631][ T857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.197666][ T857] usb 2-1: Product: syz [ 156.201852][ T857] usb 2-1: Manufacturer: syz [ 156.206440][ T857] usb 2-1: SerialNumber: syz [ 156.322383][ T317] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 156.332534][ T317] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 156.341907][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.348191][ T357] hid-generic 000A:0007:000C.0015: unknown main item tag 0x6 [ 156.358616][ T357] hid-generic 000A:0007:000C.0015: unexpected long global item [ 156.366474][ T357] hid-generic 000A:0007:000C.0015: probe with driver hid-generic failed with error -22 [ 156.388376][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.396968][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.416293][ T857] usb 2-1: 0:2 : does not exist [ 156.424773][ T857] usb 2-1: USB disconnect, device number 109 [ 156.433063][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.503363][ T397] prodikeys 0003:041E:2801.0016: unknown main item tag 0x1 [ 156.511489][ T397] prodikeys 0003:041E:2801.0016: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 156.523227][ T397] hid_prodikeys: hid-prodikeys: failed to find output report [ 156.523227][ T397] [ 156.535759][ T3616] ================================================================== [ 156.543840][ T3616] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 [ 156.552075][ T3616] Read of size 7 at addr ffff888125743ac0 by task fido_id/3616 [ 156.559602][ T3616] [ 156.561993][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: fido_id Not tainted syzkaller #0 4bc4d07fd992eb4da2ed6b7c018f2a9dd207192e [ 156.562013][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.562022][ T3616] Call Trace: [ 156.562028][ T3616] [ 156.562035][ T3616] __dump_stack+0x21/0x30 [ 156.562053][ T3616] dump_stack_lvl+0x140/0x1c0 [ 156.562072][ T3616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.562086][ T3616] print_address_description+0x71/0x210 [ 156.562101][ T3616] print_report+0x4a/0x70 [ 156.562114][ T3616] kasan_report+0x162/0x1a0 [ 156.562127][ T3616] ? read_report_descriptor+0xbf/0x100 [ 156.562139][ T3616] ? read_report_descriptor+0xbf/0x100 [ 156.562149][ T3616] kasan_check_range+0x25a/0x2b0 [ 156.562160][ T3616] ? read_report_descriptor+0xbf/0x100 [ 156.562176][ T3616] __asan_memcpy+0x31/0x80 [ 156.562189][ T3616] read_report_descriptor+0xbf/0x100 [ 156.562200][ T3616] ? __cfi_read_report_descriptor+0x10/0x10 [ 156.562211][ T3616] sysfs_kf_bin_read+0x1c6/0x200 [ 156.562225][ T3616] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 156.562238][ T3616] kernfs_fop_read_iter+0x30e/0x580 [ 156.562250][ T3616] vfs_read+0x654/0xcb0 [ 156.562264][ T3616] ? __cfi_vfs_read+0x10/0x10 [ 156.562276][ T3616] ? __kasan_slab_free+0x6a/0x80 [ 156.562285][ T3616] ? putname+0x113/0x150 [ 156.562300][ T3616] ? putname+0x113/0x150 [ 156.562324][ T3616] ? __kasan_check_read+0x15/0x20 [ 156.562337][ T3616] ksys_read+0x145/0x260 [ 156.562350][ T3616] ? __cfi_ksys_read+0x10/0x10 [ 156.562363][ T3616] ? __kasan_check_read+0x15/0x20 [ 156.562376][ T3616] __x64_sys_read+0x7f/0x90 [ 156.562388][ T3616] x64_sys_call+0x2638/0x2ee0 [ 156.562402][ T3616] do_syscall_64+0x57/0xf0 [ 156.562416][ T3616] ? clear_bhb_loop+0x50/0xa0 [ 156.562431][ T3616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.562445][ T3616] RIP: 0033:0x7fc8ee8a7407 [ 156.562456][ T3616] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.562466][ T3616] RSP: 002b:00007ffce2a50250 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 156.562480][ T3616] RAX: ffffffffffffffda RBX: 00007fc8eef78880 RCX: 00007fc8ee8a7407 [ 156.562489][ T3616] RDX: 0000000000001000 RSI: 00007ffce2a502a0 RDI: 0000000000000004 [ 156.562496][ T3616] RBP: 000055e9504202c0 R08: 0000000000000000 R09: 0000000000000000 [ 156.562503][ T3616] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e95041f4c0 [ 156.562511][ T3616] R13: 00007ffce2a502a0 R14: 0000000000000004 R15: 000055e94b2884d8 [ 156.562519][ T3616] [ 156.562523][ T3616] [ 156.813568][ T3616] Allocated by task 397: [ 156.817787][ T3616] kasan_save_track+0x3e/0x80 [ 156.822450][ T3616] kasan_save_alloc_info+0x40/0x50 [ 156.827543][ T3616] __kasan_kmalloc+0x96/0xb0 [ 156.832115][ T3616] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.838525][ T3616] kmemdup_noprof+0x31/0x80 [ 156.843020][ T3616] hid_open_report+0x200/0x1110 [ 156.847868][ T3616] pk_probe+0x1cb/0x10d0 [ 156.852110][ T3616] hid_device_probe+0x2c1/0x5d0 [ 156.856952][ T3616] really_probe+0x2d8/0x890 [ 156.861463][ T3616] __driver_probe_device+0x198/0x280 [ 156.866736][ T3616] driver_probe_device+0x54/0x3f0 [ 156.871744][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 156.877099][ T3616] bus_for_each_drv+0x267/0x300 [ 156.881941][ T3616] __device_attach+0x2c9/0x3c0 [ 156.886690][ T3616] device_initial_probe+0x1e/0x30 [ 156.891697][ T3616] bus_probe_device+0x18b/0x270 [ 156.896529][ T3616] device_add+0x80c/0xbf0 [ 156.900844][ T3616] hid_add_device+0x39b/0x560 [ 156.905498][ T3616] usbhid_probe+0xde3/0x12b0 [ 156.910087][ T3616] usb_probe_interface+0x6a9/0xc00 [ 156.915183][ T3616] really_probe+0x2d8/0x890 [ 156.919680][ T3616] __driver_probe_device+0x198/0x280 [ 156.924952][ T3616] driver_probe_device+0x54/0x3f0 [ 156.929956][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 156.935392][ T3616] bus_for_each_drv+0x267/0x300 [ 156.940220][ T3616] __device_attach+0x2c9/0x3c0 [ 156.944968][ T3616] device_initial_probe+0x1e/0x30 [ 156.949981][ T3616] bus_probe_device+0x18b/0x270 [ 156.954818][ T3616] device_add+0x80c/0xbf0 [ 156.959146][ T3616] usb_set_configuration+0x1acf/0x20b0 [ 156.964596][ T3616] usb_generic_driver_probe+0x95/0x160 [ 156.970042][ T3616] usb_probe_device+0x1d1/0x380 [ 156.974969][ T3616] really_probe+0x2d8/0x890 [ 156.979462][ T3616] __driver_probe_device+0x198/0x280 [ 156.984750][ T3616] driver_probe_device+0x54/0x3f0 [ 156.989771][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 156.995128][ T3616] bus_for_each_drv+0x267/0x300 [ 156.999967][ T3616] __device_attach+0x2c9/0x3c0 [ 157.004721][ T3616] device_initial_probe+0x1e/0x30 [ 157.009740][ T3616] bus_probe_device+0x18b/0x270 [ 157.014587][ T3616] device_add+0x80c/0xbf0 [ 157.018900][ T3616] usb_new_device+0x9f8/0x15b0 [ 157.023645][ T3616] hub_event+0x30c6/0x4700 [ 157.028042][ T3616] process_scheduled_works+0x7d1/0x1020 [ 157.033573][ T3616] worker_thread+0xc70/0x10b0 [ 157.038261][ T3616] kthread+0x2c9/0x370 [ 157.042315][ T3616] ret_from_fork+0x67/0xa0 [ 157.046726][ T3616] ret_from_fork_asm+0x1a/0x30 [ 157.051480][ T3616] [ 157.053797][ T3616] Freed by task 397: [ 157.057670][ T3616] kasan_save_track+0x3e/0x80 [ 157.062331][ T3616] kasan_save_free_info+0x4a/0x60 [ 157.067347][ T3616] __kasan_slab_free+0x5f/0x80 [ 157.072095][ T3616] kfree+0x158/0x440 [ 157.075976][ T3616] hid_close_report+0x628/0x6f0 [ 157.080809][ T3616] hid_device_probe+0x523/0x5d0 [ 157.085642][ T3616] really_probe+0x2d8/0x890 [ 157.090143][ T3616] __driver_probe_device+0x198/0x280 [ 157.095406][ T3616] driver_probe_device+0x54/0x3f0 [ 157.100438][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 157.105792][ T3616] bus_for_each_drv+0x267/0x300 [ 157.110643][ T3616] __device_attach+0x2c9/0x3c0 [ 157.115396][ T3616] device_initial_probe+0x1e/0x30 [ 157.120404][ T3616] bus_probe_device+0x18b/0x270 [ 157.125240][ T3616] device_add+0x80c/0xbf0 [ 157.129553][ T3616] hid_add_device+0x39b/0x560 [ 157.134216][ T3616] usbhid_probe+0xde3/0x12b0 [ 157.138797][ T3616] usb_probe_interface+0x6a9/0xc00 [ 157.143913][ T3616] really_probe+0x2d8/0x890 [ 157.148407][ T3616] __driver_probe_device+0x198/0x280 [ 157.153768][ T3616] driver_probe_device+0x54/0x3f0 [ 157.158776][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 157.164130][ T3616] bus_for_each_drv+0x267/0x300 [ 157.168964][ T3616] __device_attach+0x2c9/0x3c0 [ 157.173710][ T3616] device_initial_probe+0x1e/0x30 [ 157.178722][ T3616] bus_probe_device+0x18b/0x270 [ 157.183553][ T3616] device_add+0x80c/0xbf0 [ 157.187866][ T3616] usb_set_configuration+0x1acf/0x20b0 [ 157.193307][ T3616] usb_generic_driver_probe+0x95/0x160 [ 157.198747][ T3616] usb_probe_device+0x1d1/0x380 [ 157.203582][ T3616] really_probe+0x2d8/0x890 [ 157.208067][ T3616] __driver_probe_device+0x198/0x280 [ 157.213350][ T3616] driver_probe_device+0x54/0x3f0 [ 157.218357][ T3616] __device_attach_driver+0x2f1/0x4b0 [ 157.223711][ T3616] bus_for_each_drv+0x267/0x300 [ 157.228546][ T3616] __device_attach+0x2c9/0x3c0 [ 157.233299][ T3616] device_initial_probe+0x1e/0x30 [ 157.238311][ T3616] bus_probe_device+0x18b/0x270 [ 157.243174][ T3616] device_add+0x80c/0xbf0 [ 157.247486][ T3616] usb_new_device+0x9f8/0x15b0 [ 157.252239][ T3616] hub_event+0x30c6/0x4700 [ 157.256652][ T3616] process_scheduled_works+0x7d1/0x1020 [ 157.262183][ T3616] worker_thread+0xc70/0x10b0 [ 157.266858][ T3616] kthread+0x2c9/0x370 [ 157.270914][ T3616] ret_from_fork+0x67/0xa0 [ 157.275406][ T3616] ret_from_fork_asm+0x1a/0x30 [ 157.280164][ T3616] [ 157.282478][ T3616] The buggy address belongs to the object at ffff888125743ac0 [ 157.282478][ T3616] which belongs to the cache kmalloc-8 of size 8 [ 157.296186][ T3616] The buggy address is located 0 bytes inside of [ 157.296186][ T3616] freed 8-byte region [ffff888125743ac0, ffff888125743ac8) [ 157.309622][ T3616] [ 157.311939][ T3616] The buggy address belongs to the physical page: [ 157.318374][ T3616] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881257434a0 pfn:0x125743 [ 157.328509][ T3616] flags: 0x4000000000000000(zone=1) [ 157.333699][ T3616] page_type: f5(slab) [ 157.337667][ T3616] raw: 4000000000000000 ffff888100041500 ffffea00049131c0 dead000000000002 [ 157.346232][ T3616] raw: ffff8881257434a0 000000008080006d 00000001f5000000 0000000000000000 [ 157.354802][ T3616] page dumped because: kasan: bad access detected [ 157.361212][ T3616] page_owner tracks the page as allocated [ 157.366906][ T3616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 355, tgid 355 (kworker/0:3), ts 36796983443, free_ts 36693996001 [ 157.387377][ T3616] post_alloc_hook+0x3b8/0x3f0 [ 157.392134][ T3616] prep_new_page+0x20/0x120 [ 157.396622][ T3616] get_page_from_freelist+0x496e/0x4a20 [ 157.402158][ T3616] __alloc_pages_noprof+0x35f/0x7e0 [ 157.407347][ T3616] alloc_slab_page+0x6b/0x1e0 [ 157.412015][ T3616] allocate_slab+0x69/0x420 [ 157.416501][ T3616] ___slab_alloc+0x5a2/0x8d0 [ 157.421100][ T3616] __kmalloc_cache_noprof+0x2cd/0x470 [ 157.426474][ T3616] usb_control_msg+0x83/0x490 [ 157.431136][ T3616] hub_port_reset+0x30e/0x16b0 [ 157.435889][ T3616] hub_port_init+0x2bc/0x2840 [ 157.440549][ T3616] hub_event+0x2676/0x4700 [ 157.444950][ T3616] process_scheduled_works+0x7d1/0x1020 [ 157.450479][ T3616] worker_thread+0xc70/0x10b0 [ 157.455139][ T3616] kthread+0x2c9/0x370 [ 157.459194][ T3616] ret_from_fork+0x67/0xa0 [ 157.463593][ T3616] page last free pid 148 tgid 148 stack trace: [ 157.469722][ T3616] free_unref_page+0xbcf/0xf80 [ 157.474466][ T3616] __free_pages+0x6b/0x3b0 [ 157.478863][ T3616] __free_slab+0xb5/0x110 [ 157.483172][ T3616] free_slab+0x18/0xe0 [ 157.487220][ T3616] __put_partials+0x11b/0x150 [ 157.491874][ T3616] put_cpu_partial+0x91/0xc0 [ 157.496446][ T3616] __slab_free+0x1cf/0x2a0 [ 157.500839][ T3616] ___cache_free+0xc9/0xe0 [ 157.505267][ T3616] qlist_free_all+0xb5/0x130 [ 157.509842][ T3616] kasan_quarantine_reduce+0x14f/0x180 [ 157.515285][ T3616] __kasan_slab_alloc+0x28/0x90 [ 157.520114][ T3616] kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 157.525998][ T3616] __alloc_skb+0x108/0x370 [ 157.530395][ T3616] alloc_skb_with_frags+0xce/0x8b0 [ 157.535486][ T3616] sock_alloc_send_pskb+0x883/0x9a0 [ 157.540662][ T3616] unix_dgram_sendmsg+0x647/0x1ac0 [ 157.545750][ T3616] [ 157.548051][ T3616] Memory state around the buggy address: [ 157.553655][ T3616] ffff888125743980: fa fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc [ 157.561691][ T3616] ffff888125743a00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 157.569730][ T3616] >ffff888125743a80: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 157.577770][ T3616] ^ [ 157.583901][ T3616] ffff888125743b00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 157.591942][ T3616] ffff888125743b80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 157.599984][ T3616] ================================================================== [ 157.608949][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.614653][ T397] usb 5-1: USB disconnect, device number 20 [ 157.617817][ T3616] Disabling lock debugging due to kernel taint [ 157.629631][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.638360][ T36] audit: type=1400 audit(157.607:739): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 157.662661][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.671398][ T36] audit: type=1400 audit(157.607:740): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.692283][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.704509][ T317] usb 4-1: string descriptor 0 read error: -71 [ 157.710891][ T317] hub 4-1:32.0: bad descriptor, ignoring hub [ 157.717422][ T317] hub 4-1:32.0: probe with driver hub failed with error -5 [ 157.741469][ T317] usb 4-1: USB disconnect, device number 96