last executing test programs: 3.872538941s ago: executing program 1 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$evdev(r1, &(0x7f0000000400)=[{{0x77359400}, 0x11, 0x8, 0x81b}], 0x18) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) 3.629982866s ago: executing program 1 (id=276): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r2 = socket(0x1e, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1}}], 0x1, 0x1, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0xf46, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x13, 0x7, 0x0, 0x9, 0x4, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0x4, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0x31, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xd000, 0x0, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1) 3.334907752s ago: executing program 1 (id=282): lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x20, 0x2, "cfa7"}, 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') r1 = socket$inet6(0xa, 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0xffffffff}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x1b, 0x0, 0xfee00c00}]}) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"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"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x11, @ipv4={'\x00', '\xff\xff', @remote}, 0x10001}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f00000002c0)="380f7b2c2e9332e2656b66acd2831cd23fe514798d534cddfb631abb23f1e4fb8361e448819e621869ace543db147423a070e23a38abd8cbd356b11906976f774d45532780bcc34af1192a1c1a222c6210fe9be3a9f14afbc7dfb0b47fc47c31fe6a2a8ac5d80a2fa9a64e834fc9752d08b4463049ea75ed3c54d85a591a5a01645e53e06ec3ec52088c804fe3a0d565abf075ac26f468d93ff4da26e17dd7e5c85e10ccaa06191ca935f329d8b7049991d23e2f533c5e9e0bc19a6f43931cfbc4ef6760d40f739bfe07f9cf52c75d45e9cd781558dc51630d9e24c1", 0xdc) (async, rerun: 64) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10) listen(r5, 0x5) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) sendto$inet6(r6, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r6, &(0x7f0000000580)=[{&(0x7f0000001240)="4fb6b3c65f18ee12bc9643b50723670ed775fd626fd07522a419a1bf640fbb", 0x1f}, {&(0x7f0000000680)="64e4159daa", 0x5}], 0x2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x70) (async) ioprio_set$uid(0x0, 0x0, 0x4007) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x67, 0x4, 0x7fff0022}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async, rerun: 32) write$cgroup_subtree(r0, 0x0, 0x3e) (rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x3c, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) 2.806851492s ago: executing program 1 (id=288): getpriority(0x4320e11e835fbdba, 0x0) (async) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406d04900940000102030109028e000301ffc010080b0002010130070904000000010130000a2401102a0007000000132403ff010606060203"], 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000080)={[0x6]}) (async, rerun: 64) wait4(r0, &(0x7f0000000040), 0x4, &(0x7f0000000100)) (async, rerun: 64) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) 2.732581564s ago: executing program 0 (id=290): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c001}, 0x8000) syz_usb_connect(0x3, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403"], 0x0) 1.694840755s ago: executing program 3 (id=299): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x4, 0x9, 0x7f, 0xc4, 0x9, 0x60, 0xfc, 0x0, 0x1, 0x6, 0x2, 0x2, 0x5}, {0x6, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7f, 0xb, 0x5, 0xf, 0x8, 0x4, 0x5}, {0xba6a, 0x5, 0x9, 0x0, 0x7, 0xd7, 0x63, 0x8, 0x0, 0xfe, 0xd9, 0xb, 0x4}], 0x40}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000780)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, &(0x7f0000000280)=[0x10001, 0x8, 0x1, 0x8, 0x0, 0x49, 0x7, 0x9]) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_usb_connect$cdc_ecm(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffffffffffcb5, 0x1, 0x1, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @country_functional={0x12, 0x24, 0x7, 0x60, 0x7, [0x8001, 0x3, 0x5, 0xbf0, 0x3, 0x80]}, @ncm={0x6, 0x24, 0x1a, 0x100, 0x28}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 1.383170581s ago: executing program 2 (id=301): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@local, @remote, r1}, 0xc) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) 1.358648762s ago: executing program 2 (id=302): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x160}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x60094}, 0x4048000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket(0xa, 0x3, 0x8) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d800800"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) 1.223052015s ago: executing program 2 (id=303): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/211) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201e10000000040050be0170000000000010902"], 0x0) 1.043150979s ago: executing program 1 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x28, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) 1.042327148s ago: executing program 1 (id=305): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_connect$uac2(0x6, 0xac, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xe, 0x20, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x3, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf685, 0x4, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xbe, 0x2, 0x7, 0x4, "e440051c662c"}, @as_header={0x10, 0x24, 0x1, 0x98, 0x1, 0x2, 0x1, 0xa, 0x4, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0xf7, 0x8, {0x8, 0x25, 0x1, 0x3, 0xf, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x9, 0x4d, 0x7f, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfff8, 0x1, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x66, {0x8, 0x25, 0x1, 0x1, 0xf, 0xf7, 0x9}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x4, 0x8, 0x8, 0x1be, 0x3}, 0xfb, &(0x7f0000000200)={0x5, 0xf, 0xfb, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0x3}, @generic={0xd5, 0x10, 0x1, "a08834460f7f6e070f4da36d97f491a6c646138ff4edef1bf317f933f06d75770b89f8edef9d4e314749b28bb1a3217d4ea8ddeb03b599ccdba176ee5bdce1e98c16144efbeb16e641c14b44cd21520453ded42f6762d9653ec634ea932eb49877faee3d636bfa042995b9b186969405a1f8b91a5b1f1a711f8505fa4df3fb4cffc13908a194ae9fcd03541ec539aa77a6dafe73fcc23bc9d42785747d0d39a7e9b4c07252b35d4e703ec489f107e16436a083992087883d92f6a16dae2ba221c5a3eafae16c7b0bfe23385efd63f0bfabeb"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "b612946302e36c6fcb864b9aca035d58"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x40, 0x5, 0x2, "e4b7"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 926.707551ms ago: executing program 0 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setns(0xc9, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="880000000000"], 0x170}}], 0x2, 0x4000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/wakeup_count', 0x1, 0x0) write(r5, &(0x7f0000000700)='000', 0x3) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fbd1485a68493f706f41e931abff01000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fddbdf25390000000c009900090000004e00000010005a800c0002800500060000000000bc005a80040003800c000180050007000100000028000180140005000c0008000000f60a070035420200250d050004000200000005000400000000008000038005000400020000001400030008000900030008000b000010ff0706001e0001000c360435050c0501050136120c12040503246001060460056018000005000600000000001d00020032193235161029194037463a57002629502d103e104e2f4832000000160001006c10166c00050b00060c162403180336600b0000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) 880.459572ms ago: executing program 0 (id=307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0x8, 0xfffffffc}, {0x100000001, 0x7}, 0x612e}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x5}}, 0xd) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x20, 0xd, 0xda, {0xda, 0xb, "4a13592066305e7f02d9a0748a7ac534459aa42a8f26699f80aae6748ef84704e7e1e134e61d81a615998b510b32d67b913d90ef87256cf4c2378dd6fcffb9338132bf4bc0b4eb5284d624d7a1f8b3542502307341b8ca57415a2f056bba3d5e9c1cfff0af605166ef94d7d434167606af482e35ad53209472095e7f5a2b632184a388b5813b74adcfe41d657435b1cd59cb899b59b213f82e4e47a0f46611aa27feebfe29cb43a5e169274d9dcb3d711e029889c6a530c8a720ff122fde3ba29669ae369e5d4c922bff1fe55fd9794b58a8638b19db6ba7"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x85d}}, &(0x7f0000000440)={0x0, 0xf, 0xea, {0x5, 0xf, 0xea, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x47, 0x84, 0x5, 0x6, 0xfa}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0xe, 0x5}, @ptm_cap={0x3}, @generic={0xc2, 0x10, 0x1, "214efd8008cd748bc73faf0edaa34c94f3fbf67f7930a46583fe42be9bc5d951e309ed063ee10f749d6e6a99031764d1c3e388b35a06034ad21c07ead3cfeccc6be58ebf84ee5dc1d742224318f29cb5229f62e0eaecad8ee79bfeff21bb9e4530931c8a16cf751539f0686648bfcc168719ff3dc93343b60306c08c4a4241b77ce44ded3d6cd98dbad5e1311657369b9c6f2b2896cf59173bbdb53f745cf9a8d27a03a87b44f282f64266bd16ba67809861ac70fc753832377853a92dbe68"}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x5, 0x0, "71326005", "d07fa7be"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x4, 0x81, 0xef, 0x3, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x13, 0x68, "01b175662088775b005637f612c1852ec8da1878258fca30b78e30183a2d0269406b2e59fb01199d4b996d24cd8549241d83987305dfdc28217314bb3ef8d11c3fad9d5816c5498dc743fd60a2b50f9ca6d1ffb446da8084621cb17406d104cd7bdee63c1f88d9d4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x13}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1000, 0x11}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0xb, 0x2, "9920"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, '\'t'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xe0}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x48}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x7}}) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9922}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff0}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4f3b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x937d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private0, 0x6}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) fallocate(r8, 0x8, 0xc, 0x7fffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 730.822855ms ago: executing program 3 (id=308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) (fail_nth: 5) 597.944158ms ago: executing program 2 (id=309): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x2000008, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x200) 597.230238ms ago: executing program 3 (id=310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000200000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 550.880128ms ago: executing program 3 (id=311): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r1) (async) r2 = dup2(r1, r1) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) read(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r8 = syz_clone(0x48411, 0x0, 0xffffffffffffff18, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r8, 0x0, 0x0) wait4(r8, 0x0, 0x40000000, 0x0) (async) wait4(r8, 0x0, 0x40000000, 0x0) pread64(r0, &(0x7f0000019040)=""/102391, 0x18ff7, 0x1) (async) pread64(r0, &(0x7f0000019040)=""/102391, 0x18ff7, 0x1) 466.210151ms ago: executing program 2 (id=312): r0 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x90000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r4 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x8002) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f00000003c0)={0x2, 0x1, 0x2, 0x1, 0x8, 0x89, 0x5, 0x1, 0x1e3, 0x0, 0x4, 0xd, 0x5, 0x9}) r5 = fcntl$dupfd(r4, 0x0, r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000540)=0x1, 0x4) r7 = openat(r5, &(0x7f0000000580)='./file0\x00', 0x60000, 0x9f) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r5) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r8, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r9, &(0x7f0000000780)={0xfffffffffffffffc, 0x10000, 0x0, 0x1}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3000000, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000008c0)=0x5, 0x4) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000900)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r10, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r8, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x1) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400001, 0x0) r12 = accept4$inet(r7, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, &(0x7f0000000c40)=0x10, 0x80000) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000c80)=0x100, 0x4) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000dc0)={r1, &(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x141000, &(0x7f0000000d00)={@align=0x3, {0x5, 0x5, 0xe, 0x7fff}}, 0xfff, &(0x7f0000000d40)={@_ha_fsid}, &(0x7f0000000d80)=0x90000000}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r11, 0x3312, 0x2) 446.8437ms ago: executing program 2 (id=313): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000140)=""/123, 0x7b}], 0x9}, 0x61}], 0x1, 0x40000040, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000700), &(0x7f0000000740)=0x40) bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x3ffffd, 0x0, {0x25, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20000010) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x2401}}, {0xb, &(0x7f00000000c0)=@string={0xb, 0x3, "288a3683da1740217a"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x300a}}]}) 371.474312ms ago: executing program 3 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x60, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) 227.130215ms ago: executing program 0 (id=315): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x1) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) 226.874435ms ago: executing program 0 (id=316): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xbcc, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffff7fff, 0x200, 0xfffffffb, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x12, 0x0, &(0x7f0000001a40)) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(0xffffffffffffffff, 0x2) (async) writev(r10, &(0x7f0000002340)=[{&(0x7f0000000140)="6531c0b6220ec459ba8d35999cc5663e2b498f970826736a9ce2d96d42b61b456288640e88456ebfd598fc680cd977cf117b50c9564269638b8795b12013e422ef203cde", 0x44}], 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (rerun: 32) 199.268445ms ago: executing program 0 (id=317): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x2, 0x2b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x197}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0xfffffffffffffedb, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa6, 0xcc, 0xa8, 0x10, 0xf19, 0x105, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x2, 0xc0, 0x2, "", [{{0x9, 0x4, 0xda, 0x8, 0x0, 0x4, 0x2d, 0xfc, 0x8, [@cdc_ecm={{0x0, 0x24, 0x6, 0x0, 0x0, "2fac87"}, {0x0, 0x24, 0x0, 0x3}, {0x0, 0x24, 0xf, 0x1, 0x3, 0x1, 0xe0, 0x23}, [@acm={0x0, 0x24, 0x2, 0x3}, @country_functional={0x0, 0x24, 0x7, 0x40, 0x6, [0xffff, 0x7, 0xffff, 0x7fff, 0x43a9, 0x2]}]}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15555555555556ad, [{0x9d, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x40f}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x1009}}]}) 56.584319ms ago: executing program 3 (id=318): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf2501000000000000000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24040086}, 0x40) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 0s ago: executing program 32 (id=318): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf2501000000000000000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24040086}, 0x40) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 23.680273][ T36] audit: type=1400 audit(1785620595.980:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.683607][ T286] cgroup: Unknown subsys name 'net' [ 23.702956][ T36] audit: type=1400 audit(1785620595.980:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.730295][ T36] audit: type=1400 audit(1785620596.010:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.730719][ T286] cgroup: Unknown subsys name 'devices' [ 23.857779][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.863404][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.958584][ T36] audit: type=1400 audit(1785620596.260:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.981771][ T36] audit: type=1400 audit(1785620596.260:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.006640][ T36] audit: type=1400 audit(1785620596.260:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.027960][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.038609][ T36] audit: type=1400 audit(1785620596.340:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.064112][ T36] audit: type=1400 audit(1785620596.340:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.068235][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.090353][ T36] audit: type=1400 audit(1785620596.360:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.124100][ T36] audit: type=1400 audit(1785620596.360:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.961360][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.968539][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.975651][ T295] bridge_slave_0: entered allmulticast mode [ 24.981898][ T295] bridge_slave_0: entered promiscuous mode [ 24.991574][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.998722][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.005869][ T295] bridge_slave_1: entered allmulticast mode [ 25.012123][ T295] bridge_slave_1: entered promiscuous mode [ 25.029126][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.036229][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.043309][ T293] bridge_slave_0: entered allmulticast mode [ 25.049656][ T293] bridge_slave_0: entered promiscuous mode [ 25.055919][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.062973][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.070083][ T294] bridge_slave_0: entered allmulticast mode [ 25.076474][ T294] bridge_slave_0: entered promiscuous mode [ 25.083027][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.090132][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.097347][ T294] bridge_slave_1: entered allmulticast mode [ 25.103614][ T294] bridge_slave_1: entered promiscuous mode [ 25.109673][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.116791][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.123861][ T296] bridge_slave_0: entered allmulticast mode [ 25.130159][ T296] bridge_slave_0: entered promiscuous mode [ 25.136390][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.143435][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.150540][ T293] bridge_slave_1: entered allmulticast mode [ 25.156790][ T293] bridge_slave_1: entered promiscuous mode [ 25.171526][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.178620][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.185714][ T296] bridge_slave_1: entered allmulticast mode [ 25.192009][ T296] bridge_slave_1: entered promiscuous mode [ 25.353268][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.360352][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.367699][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.374738][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.385053][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.392108][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.399398][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.406451][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.429639][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.436809][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.444112][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.451187][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.461298][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.468393][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.475694][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.482738][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.515980][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.523448][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.531140][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.538660][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.546046][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.553318][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.560861][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.568101][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.582805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.589892][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.597714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.604746][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.623343][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.630427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.643924][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.651015][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.668836][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.675933][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.683713][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.690779][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.715614][ T295] veth0_vlan: entered promiscuous mode [ 25.724310][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.731373][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.739745][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.746857][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.772464][ T295] veth1_macvtap: entered promiscuous mode [ 25.810933][ T296] veth0_vlan: entered promiscuous mode [ 25.822147][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.841534][ T294] veth0_vlan: entered promiscuous mode [ 25.871936][ T293] veth0_vlan: entered promiscuous mode [ 25.887525][ T294] veth1_macvtap: entered promiscuous mode [ 25.895449][ T296] veth1_macvtap: entered promiscuous mode [ 25.910601][ T293] veth1_macvtap: entered promiscuous mode [ 25.994782][ T322] rust_binder: Error while translating object. [ 25.994876][ T322] rust_binder: Failure in copy_transaction_data: EINVAL [ 26.005871][ T322] rust_binder: 321:322 transaction to 321 failed: EINVAL [ 26.050492][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.088629][ T336] bridge0: entered promiscuous mode [ 26.093929][ T336] bridge0: entered allmulticast mode [ 26.109830][ T333] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 26.135477][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.265430][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.274833][ T349] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure [ 26.295582][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.327944][ T353] rust_binder: Error while translating object. [ 26.327995][ T353] rust_binder: Failure in copy_transaction_data: EINVAL [ 26.334263][ T353] rust_binder: 352:353 transaction to 352 failed: EINVAL [ 26.406403][ T64] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.436605][ T64] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 26.457224][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 26.479734][ T31] usb 3-1: config 3 has an invalid interface number: 119 but max is 2 [ 26.495420][ T31] usb 3-1: config 3 has an invalid interface number: 138 but max is 2 [ 26.503975][ T31] usb 3-1: config 3 has an invalid interface number: 206 but max is 2 [ 26.505520][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.512494][ T31] usb 3-1: config 3 has an invalid interface number: 23 but max is 2 [ 26.536814][ T31] usb 3-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 26.548478][ T31] usb 3-1: config 3 has no interface number 0 [ 26.554595][ T31] usb 3-1: config 3 has no interface number 1 [ 26.562616][ T31] usb 3-1: config 3 has no interface number 2 [ 26.568861][ T31] usb 3-1: config 3 has no interface number 3 [ 26.575062][ T31] usb 3-1: config 3 interface 119 altsetting 247 endpoint 0xF has invalid maxpacket 880, setting to 64 [ 26.586974][ T31] usb 3-1: config 3 interface 119 altsetting 247 has a duplicate endpoint with address 0xF, skipping [ 26.598092][ T31] usb 3-1: config 3 interface 119 altsetting 247 endpoint 0x6 has invalid maxpacket 528, setting to 64 [ 26.613134][ T31] usb 3-1: config 3 interface 206 altsetting 1 endpoint 0xD has invalid maxpacket 1823, setting to 64 [ 26.624404][ T31] usb 3-1: config 3 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 26.638481][ T31] usb 3-1: too many endpoints for config 3 interface 23 altsetting 247: 98, using maximum allowed: 30 [ 26.657133][ T31] usb 3-1: config 3 interface 23 altsetting 247 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 26.671154][ T31] usb 3-1: config 3 interface 23 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 26.697309][ T31] usb 3-1: config 3 interface 23 altsetting 247 has an endpoint descriptor with address 0x13, changing to 0x3 [ 26.709176][ T31] usb 3-1: config 3 interface 23 altsetting 247 endpoint 0xE has an invalid bInterval 85, changing to 4 [ 26.724700][ T31] usb 3-1: config 3 interface 23 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 26.737136][ T31] usb 3-1: config 3 interface 23 altsetting 247 has 8 endpoint descriptors, different from the interface descriptor's value: 98 [ 26.750422][ T31] usb 3-1: config 3 interface 119 has no altsetting 0 [ 26.757744][ T31] usb 3-1: config 3 interface 138 has no altsetting 0 [ 26.764567][ T31] usb 3-1: config 3 interface 206 has no altsetting 0 [ 26.771402][ T31] usb 3-1: config 3 interface 23 has no altsetting 0 [ 26.779802][ T31] usb 3-1: New USB device found, idVendor=08b9, idProduct=1197, bcdDevice=aa.54 [ 26.788757][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.789115][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.804450][ T31] usb 3-1: Product: ␉ [ 26.814956][ T31] usb 3-1: Manufacturer: 纃꿥러⣗兛؅㍙픫ɍ뻼녴鱯䠿真૲Ŵ纪ʼn庛苕오 [ 26.824952][ T31] usb 3-1: SerialNumber:  [ 26.830889][ T334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 26.844288][ T370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 26.935453][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.941795][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.050819][ T31] usb 3-1: USB disconnect, device number 2 [ 27.105429][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 27.116863][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.126785][ T64] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 27.136380][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.144398][ T64] usb 1-1: Product: syz [ 27.148617][ T64] usb 1-1: Manufacturer: syz [ 27.153332][ T64] usb 1-1: SerialNumber: syz [ 27.175654][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.295531][ T9] usb usb4-port1: attempt power cycle [ 27.379886][ T64] usb 1-1: USB disconnect, device number 2 [ 27.635544][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 27.680712][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.745736][ T407] fuse: Unknown parameter '@Z{F0177777777777777777777718446744073709551615' [ 27.757151][ T407] netlink: 'syz.1.30': attribute type 11 has an invalid length. [ 27.816654][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.935504][ T64] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.036404][ T429] SELinux: policydb version -1020846420 does not match my version range 15-33 [ 28.045502][ T429] SELinux: failed to load policy [ 28.065645][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 28.098161][ T435] 9pnet_fd: Insufficient options for proto=fd [ 28.107986][ T64] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 28.117157][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.123410][ T64] usb 3-1: config 127 has no interface number 0 [ 28.123974][ T433] input: syz0 as /devices/virtual/input/input4 [ 28.135999][ T64] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 28.157137][ T64] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 28.170734][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.190291][ T64] usb 3-1: Product: syz [ 28.194506][ T64] usb 3-1: Manufacturer: syz [ 28.205514][ T64] usb 3-1: SerialNumber: syz [ 28.223493][ T402] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 28.246495][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.355664][ T9] usb usb4-port1: unable to enumerate USB device [ 28.465424][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.626906][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.635735][ T402] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 28.637612][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 28.656021][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 28.668619][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 28.682344][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.690944][ T31] usb 1-1: Product: syz [ 28.695238][ T31] usb 1-1: Manufacturer: syz [ 28.700065][ T31] usb 1-1: SerialNumber: syz [ 28.849021][ T64] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 28.875490][ T64] asix 3-1:127.57: probe with driver asix failed with error -71 [ 28.886154][ T64] usb 3-1: USB disconnect, device number 3 [ 28.906308][ T446] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 28.925888][ T439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.934464][ T439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.962614][ T439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.972467][ T439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.983837][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 28.983853][ T36] audit: type=1400 audit(1785620601.280:219): avc: denied { unlink } for pid=438 comm="syz.0.40" name="file0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 29.125280][ T36] audit: type=1400 audit(1785620601.420:220): avc: denied { create } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.144822][ T36] audit: type=1400 audit(1785620601.440:221): avc: denied { ioctl } for pid=453 comm="syz.1.45" path="socket:[4579]" dev="sockfs" ino=4579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.169029][ T36] audit: type=1400 audit(1785620601.440:222): avc: denied { connect } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.188227][ T36] audit: type=1400 audit(1785620601.440:223): avc: denied { write } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.207265][ T36] audit: type=1400 audit(1785620601.440:224): avc: denied { setattr } for pid=453 comm="syz.1.45" name="PACKET" dev="sockfs" ino=4578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.251038][ T458] Zero length message leads to an empty skb [ 29.258476][ T36] audit: type=1400 audit(1785620601.560:225): avc: denied { accept } for pid=457 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.305455][ T318] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 29.395123][ T465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.407236][ T36] audit: type=1400 audit(1785620601.710:226): avc: denied { getopt } for pid=464 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.435631][ T318] usb 4-1: device descriptor read/64, error -71 [ 29.676074][ T318] usb 4-1: device descriptor read/64, error -71 [ 29.685444][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.835889][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 29.842150][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.852337][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.862847][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 29.871980][ T9] usb 3-1: New USB device strings: Mfr=1, Product=244, SerialNumber=3 [ 29.880272][ T9] usb 3-1: Product: syz [ 29.884463][ T9] usb 3-1: Manufacturer: syz [ 29.889110][ T9] usb 3-1: SerialNumber: syz [ 29.915630][ T318] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 30.045471][ T318] usb 4-1: device descriptor read/64, error -71 [ 30.089124][ T36] audit: type=1400 audit(1785620602.390:227): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.295439][ T318] usb 4-1: device descriptor read/64, error -71 [ 30.365452][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.405568][ T318] usb usb4-port1: attempt power cycle [ 30.516576][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 30.526397][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 30.536207][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 30.545901][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 30.557290][ T64] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 30.566452][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.574482][ T64] usb 2-1: Product: syz [ 30.578723][ T64] usb 2-1: Manufacturer: syz [ 30.583392][ T64] usb 2-1: SerialNumber: syz [ 30.588954][ T64] usb 2-1: config 0 descriptor?? [ 30.594991][ T64] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 30.745492][ T318] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 30.766464][ T318] usb 4-1: device descriptor read/8, error -71 [ 30.866983][ T64] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 30.896441][ T318] usb 4-1: device descriptor read/8, error -71 [ 30.921712][ T36] audit: type=1400 audit(1785620603.220:228): avc: denied { lock } for pid=487 comm="syz.2.54" path="socket:[4743]" dev="sockfs" ino=4743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 30.999975][ T64] usb 2-1: USB disconnect, device number 2 [ 31.009080][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.017928][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.044932][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.053568][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.066096][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.074697][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.083773][ T497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.092468][ T497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.135491][ T318] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 31.156486][ T318] usb 4-1: device descriptor read/8, error -71 [ 31.224396][ T31] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 31.233062][ T31] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 31.241232][ T31] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 31.249843][ T31] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 31.258845][ T31] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 31.271814][ T31] usb 1-1: USB disconnect, device number 3 [ 31.298733][ T318] usb 4-1: device descriptor read/8, error -71 [ 31.307249][ T491] udevd[491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.405647][ T318] usb usb4-port1: unable to enumerate USB device [ 31.702961][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.718105][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.727554][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.737391][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.827265][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.088439][ T566] netlink: 328 bytes leftover after parsing attributes in process `syz.3.74'. [ 32.099044][ T566] netlink: 'syz.3.74': attribute type 5 has an invalid length. [ 32.106933][ T566] netlink: 'syz.3.74': attribute type 32 has an invalid length. [ 32.225500][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.378739][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.392389][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.402791][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 32.412133][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.428257][ T580] Invalid ELF header type: 2 != 1 [ 32.431789][ T31] usb 2-1: config 0 descriptor?? [ 32.435106][ T580] process 'syz.0.80' launched './file0' with NULL argv: empty string added [ 32.455465][ T318] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 32.626607][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.637628][ T318] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.646795][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.656303][ T318] usb 4-1: config 0 descriptor?? [ 32.993835][ T584] netlink: 140 bytes leftover after parsing attributes in process `syz.0.82'. [ 33.020357][ T586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=586 comm=syz.0.83 [ 33.033116][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 33.115511][ T588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.84'. [ 33.186713][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.194946][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.209696][ T592] netlink: 'syz.0.85': attribute type 27 has an invalid length. [ 33.228388][ T593] fido_id[593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.835927][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.882064][ T616] input: syz0 as /devices/virtual/input/input6 [ 33.914299][ T623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=623 comm=syz.2.96 [ 33.929580][ T623] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 34.058379][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.076826][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.425427][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.518193][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 34.518211][ T36] audit: type=1400 audit(1785620606.820:269): avc: denied { ioctl } for pid=633 comm="syz.2.100" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x4b62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.583232][ T638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.593392][ T638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.601235][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 34.607671][ T639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.618246][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 34.636227][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.644396][ T10] usb 1-1: Product: syz [ 34.649368][ T639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.662131][ T10] usb 1-1: Manufacturer: syz [ 34.670859][ T36] audit: type=1400 audit(1785620606.970:270): avc: denied { create } for pid=640 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 34.695430][ T10] usb 1-1: SerialNumber: syz [ 34.716452][ T36] audit: type=1400 audit(1785620606.970:271): avc: denied { write } for pid=640 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 34.774072][ T36] audit: type=1400 audit(1785620607.070:272): avc: denied { setopt } for pid=648 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.806075][ T36] audit: type=1400 audit(1785620607.110:273): avc: denied { getopt } for pid=648 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.826951][ T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.845649][ T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.968549][ T632] netlink: 148 bytes leftover after parsing attributes in process `syz.0.99'. [ 34.982638][ T10] usb 1-1: 1:1: invalid format type 0x9978 is detected, processed as PCM [ 34.995427][ T10] usb 1-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes [ 35.007481][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.007793][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 35.024460][ T10] usb 1-1: USB disconnect, device number 4 [ 35.037400][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 35.048890][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.059560][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.059777][ T36] audit: type=1400 audit(1785620607.360:274): avc: denied { connect } for pid=652 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.092694][ T31] usb 2-1: USB disconnect, device number 3 [ 35.106071][ T36] audit: type=1400 audit(1785620607.390:275): avc: denied { mounton } for pid=652 comm="syz.1.105" path="/26/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.143986][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 35.219332][ T36] audit: type=1400 audit(1785620607.520:276): avc: denied { read write } for pid=663 comm="syz.0.109" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.251093][ T36] audit: type=1400 audit(1785620607.520:277): avc: denied { open } for pid=663 comm="syz.0.109" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.299372][ T36] audit: type=1400 audit(1785620607.600:278): avc: denied { listen } for pid=667 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.337874][ T674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.113'. [ 35.645448][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.785445][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.025457][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.242560][ T704] netlink: 80 bytes leftover after parsing attributes in process `syz.2.124'. [ 36.265481][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.394642][ T712] ======================================================= [ 36.394642][ T712] WARNING: The mand mount option has been deprecated and [ 36.394642][ T712] and is ignored by this kernel. Remove the mand [ 36.394642][ T712] option from the mount to silence this warning. [ 36.394642][ T712] ======================================================= [ 36.429733][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.435717][ T712] No source specified [ 36.498692][ T718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 36.572783][ T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.581426][ T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.675440][ T10] usb 2-1: device descriptor read/64, error -71 [ 36.785593][ T10] usb usb2-port1: attempt power cycle [ 36.925458][ T31] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 37.086484][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 37.097565][ T31] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 37.108590][ T31] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 37.121829][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.128529][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 37.135612][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.137702][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.154089][ T31] usb 1-1: config 0 descriptor?? [ 37.159441][ T734] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 37.186677][ T10] usb 2-1: device descriptor read/8, error -71 [ 37.291168][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.299784][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.316509][ T10] usb 2-1: device descriptor read/8, error -71 [ 37.555448][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.569464][ T31] playstation 0003:054C:05C4.0003: unknown main item tag 0x0 [ 37.576927][ T10] usb 2-1: device descriptor read/8, error -71 [ 37.583277][ T31] playstation 0003:054C:05C4.0003: unknown main item tag 0xe [ 37.590764][ T31] playstation 0003:054C:05C4.0003: unknown main item tag 0x2 [ 37.599241][ T31] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.0c Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 37.706513][ T10] usb 2-1: device descriptor read/8, error -71 [ 37.768736][ T31] playstation 0003:054C:05C4.0003: Invalid byte count transferred, expected 16 got 0 [ 37.778421][ T31] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22 [ 37.788070][ T31] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4 [ 37.797059][ T31] playstation 0003:054C:05C4.0003: Failed to create dualshock4. [ 37.814254][ T31] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22 [ 37.816024][ T10] usb usb2-port1: unable to enumerate USB device [ 37.859505][ T751] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 37.931397][ T318] usbhid 4-1:0.0: can't add hid device: -32 [ 37.937583][ T318] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 37.977310][ T318] usb 1-1: USB disconnect, device number 5 [ 38.059614][ T767] veth0_to_batadv: mtu greater than device maximum [ 38.331927][ T783] veth0_vlan: left promiscuous mode [ 38.525124][ T800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 38.650345][ T807] netlink: 3 bytes leftover after parsing attributes in process `syz.1.158'. [ 38.755454][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.905446][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 38.911525][ T319] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 38.922809][ T319] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 16596, setting to 1024 [ 38.934287][ T319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.941183][ T319] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 38.950334][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.959022][ T319] usb 1-1: config 0 descriptor?? [ 39.023461][ T827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.164'. [ 39.089276][ T829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.097922][ T829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.167795][ T319] usbhid 1-1:0.0: can't add hid device: -71 [ 39.174231][ T319] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.184612][ T319] usb 1-1: USB disconnect, device number 6 [ 39.387429][ T833] input: syz1 as /devices/virtual/input/input7 [ 39.669766][ T36] kauditd_printk_skb: 1750 callbacks suppressed [ 39.670159][ T36] audit: type=1400 audit(1785620611.970:2029): avc: denied { append } for pid=848 comm="syz.2.170" name="pfkey" dev="proc" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.985533][ T318] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.135481][ T318] usb 1-1: Using ep0 maxpacket: 8 [ 40.141770][ T318] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.150102][ T318] usb 1-1: config 179 has no interface number 0 [ 40.156470][ T318] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 40.167778][ T318] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 40.179106][ T318] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.190367][ T318] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 40.201978][ T318] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.215330][ T318] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 40.224439][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.233636][ T855] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.446753][ T36] audit: type=1400 audit(1785620612.750:2030): avc: denied { mounton } for pid=854 comm="syz.0.172" path="/47/file0" dev="incremental-fs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.519607][ T10] usb 1-1: USB disconnect, device number 7 [ 40.519773][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.534090][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 41.046231][ T858] overlay: Unknown parameter 'pcr' [ 41.127780][ T36] audit: type=1400 audit(1785620613.430:2031): avc: denied { mounton } for pid=864 comm="syz.0.176" path="/51/file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.545524][ T319] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.581399][ T874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.590744][ T874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.600061][ T874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.608747][ T874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.696553][ T319] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 41.715483][ T319] usb 1-1: New USB device found, idVendor=b9dd, idProduct=0003, bcdDevice= 0.00 [ 41.724558][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.746214][ T319] usb 1-1: config 0 descriptor?? [ 41.756632][ T319] cdc_ether 1-1:0.0: skipping garbage [ 41.762058][ T319] usb 1-1: bad CDC descriptors [ 41.957632][ T318] usb 1-1: USB disconnect, device number 8 [ 41.995428][ T36] audit: type=1400 audit(1785620614.290:2032): avc: denied { ioctl } for pid=875 comm="syz.2.179" path="socket:[12548]" dev="sockfs" ino=12548 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.095282][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.103989][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.182854][ T880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=880 comm=syz.3.181 [ 42.195239][ T880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16633 sclass=netlink_route_socket pid=880 comm=syz.3.181 [ 42.208823][ T880] veth1_to_bond: entered allmulticast mode [ 42.220711][ T880] netlink: 5456 bytes leftover after parsing attributes in process `syz.3.181'. [ 42.314167][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.324144][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.333060][ T36] audit: type=1400 audit(1785620614.630:2033): avc: denied { accept } for pid=877 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.337516][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.360997][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.489511][ T883] kvm: kvm [882]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 42.498569][ T883] kvm: kvm [882]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 42.620506][ T881] veth1_to_bond: left allmulticast mode [ 42.635702][ T36] audit: type=1400 audit(1785620614.940:2034): avc: denied { write } for pid=892 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.825431][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.886326][ T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.894924][ T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.903252][ T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.911906][ T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.915517][ T318] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.985454][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 42.991056][ T31] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 43.008129][ T31] usb 1-1: string descriptor 0 read error: -71 [ 43.014409][ T31] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 43.023514][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.034220][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 43.040540][ T31] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 43.050581][ T31] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 43.058968][ T31] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 43.085447][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 43.091924][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.101834][ T318] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 43.111010][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.119870][ T318] usb 2-1: Product: syz [ 43.124077][ T318] usb 2-1: Manufacturer: syz [ 43.128734][ T318] usb 2-1: SerialNumber: syz [ 43.336875][ T318] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.343838][ T318] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 43.351210][ T318] usb 2-1: unable to issue vendor read request (ret = -71) [ 43.358736][ T318] usb 2-1: unable to issue vendor read request (ret = -71) [ 43.366318][ T318] usb 2-1: unable to issue vendor read request (ret = -71) [ 43.373751][ T318] usb 2-1: unable to issue vendor read request (ret = -71) [ 43.383604][ T318] usb 2-1: USB disconnect, device number 8 [ 43.396171][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.435008][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.443562][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.463559][ T917] rust_binder: Failure in copy_transaction_data: EINVAL [ 43.463584][ T917] rust_binder: 916:917 transaction to 916 failed: EINVAL [ 43.470668][ T917] rust_binder: 916:917 netlink report failed: ESRCH [ 43.498356][ T36] audit: type=1400 audit(1785620615.800:2035): avc: denied { setopt } for pid=918 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.700823][ T36] audit: type=1400 audit(1785620616.000:2036): avc: denied { ioctl } for pid=924 comm="syz.3.197" path="socket:[10686]" dev="sockfs" ino=10686 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.732991][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.741768][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.785478][ T319] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.869422][ T932] netlink: 5 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.878616][ T932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.887889][ T932] gretap0: entered promiscuous mode [ 43.894637][ T932] netlink: 5 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.903536][ T932] 0{X: renamed from gretap0 [ 43.909505][ T932] 0{X: left promiscuous mode [ 43.914569][ T932] 0{X: entered allmulticast mode [ 43.921959][ T932] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 43.938923][ T36] audit: type=1400 audit(1785620616.240:2037): avc: denied { getopt } for pid=931 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.958564][ T319] usb 1-1: Using ep0 maxpacket: 8 [ 43.964783][ T319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.971540][ T319] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 43.990775][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.000178][ T319] usb 1-1: config 0 descriptor?? [ 44.208798][ T319] hid (null): unknown global tag 0xe [ 44.214222][ T319] hid (null): usage index exceeded [ 44.220485][ T319] wacom 0003:056A:0057.0004: unknown main item tag 0x2 [ 44.227979][ T319] wacom 0003:056A:0057.0004: ignoring exceeding usage max [ 44.235571][ T318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.245899][ T319] wacom 0003:056A:0057.0004: unknown global tag 0xe [ 44.252506][ T319] wacom 0003:056A:0057.0004: item 0 0 1 14 parsing failed [ 44.264883][ T319] wacom 0003:056A:0057.0004: parse failed [ 44.270907][ T319] wacom 0003:056A:0057.0004: probe with driver wacom failed with error -22 [ 44.288756][ T939] rust_binder: Failure in copy_transaction_data: EINVAL [ 44.288778][ T939] rust_binder: 938:939 transaction to 938 failed: EINVAL [ 44.295825][ T939] rust_binder: 938:939 netlink report failed: ESRCH [ 44.344437][ T36] audit: type=1400 audit(1785620616.640:2038): avc: denied { getopt } for pid=945 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.395711][ T318] usb 2-1: Using ep0 maxpacket: 8 [ 44.402020][ T318] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 44.415131][ T318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.421845][ T318] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 44.431004][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.445335][ T318] usb 2-1: config 0 descriptor?? [ 44.476150][ T952] netlink: 80 bytes leftover after parsing attributes in process `syz.3.207'. [ 44.538584][ T954] rust_binder: 953:954 transaction to 0 failed: EINVAL [ 44.538669][ T954] rust_binder: 953:954 netlink report failed: ESRCH [ 44.752235][ T964] rust_binder: Failure in copy_transaction_data: EINVAL [ 44.752269][ T964] rust_binder: 963:964 transaction to 963 failed: EINVAL [ 44.759527][ T964] rust_binder: 963:964 netlink report failed: ESRCH [ 44.826860][ T966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.835853][ T966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.844364][ T966] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2699251765 (345504225920 ns) > initial count (278308894080 ns). Using initial count to start timer. [ 44.860434][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.870729][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.881486][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x2 [ 44.889872][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x4 [ 44.898031][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.906161][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.914250][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.922462][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.930636][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.938765][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.946888][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.954993][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.963112][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.971242][ T318] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 44.980724][ T318] logitech-djreceiver 0003:046D:C70E.0005: hidraw0: USB HID v80.09 Device [HID 046d:c70e] on usb-dummy_hcd.1-1/input0 [ 45.082063][ T318] usb 2-1: USB disconnect, device number 9 [ 45.490796][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 45.490814][ T36] audit: type=1400 audit(1785620617.790:2041): avc: denied { write } for pid=983 comm="syz.3.216" path="socket:[10786]" dev="sockfs" ino=10786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.503541][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.531453][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.542139][ T36] audit: type=1400 audit(1785620617.830:2042): avc: denied { write } for pid=983 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.565927][ T36] audit: type=1400 audit(1785620617.870:2043): avc: denied { ioctl } for pid=988 comm="syz.3.218" path="socket:[10797]" dev="sockfs" ino=10797 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.612404][ T36] audit: type=1400 audit(1785620617.910:2044): avc: denied { read } for pid=991 comm="syz.1.220" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.632531][ T36] audit: type=1400 audit(1785620617.910:2045): avc: denied { validate_trans } for pid=990 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.672833][ T36] audit: type=1400 audit(1785620617.970:2046): avc: denied { search } for pid=990 comm="syz.3.219" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 45.699539][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.708252][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.108712][ T1000] rust_binder: Error while translating object. [ 46.108756][ T1000] rust_binder: Failure in copy_transaction_data: EINVAL [ 46.115039][ T1000] rust_binder: 999:1000 transaction to 999 failed: EINVAL [ 46.122203][ T1000] rust_binder: 999:1000 netlink report failed: ESRCH [ 46.301909][ T36] audit: type=1400 audit(1785620618.600:2047): avc: denied { execute } for pid=1006 comm="syz.3.224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.332454][ T36] audit: type=1400 audit(1785620618.630:2048): avc: denied { ioctl } for pid=1006 comm="syz.3.224" path="socket:[10828]" dev="sockfs" ino=10828 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.389614][ T36] audit: type=1400 audit(1785620618.690:2049): avc: denied { watch_reads } for pid=1011 comm="syz.2.225" path="/66/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.412577][ T36] audit: type=1400 audit(1785620618.690:2050): avc: denied { watch } for pid=1011 comm="syz.2.225" path="/66" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.508059][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.525609][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.571294][ T31] usb 1-1: USB disconnect, device number 10 [ 46.889469][ T1051] tipc: Started in network mode [ 46.894409][ T1051] tipc: Node identity 4, cluster identity 4711 [ 46.925403][ T1051] tipc: Node number set to 4 [ 47.305543][ T1068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.314114][ T1068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.348291][ T1068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.369539][ T1073] netlink: 80 bytes leftover after parsing attributes in process `syz.0.241'. [ 47.378653][ T1068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.925454][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.999570][ T1095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.010813][ T1095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.024591][ T1095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.033225][ T1095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.075491][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 48.081711][ T318] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 48.095919][ T318] usb 1-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 48.105052][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.113125][ T318] usb 1-1: Product: syz [ 48.117635][ T318] usb 1-1: Manufacturer: syz [ 48.122270][ T318] usb 1-1: SerialNumber: syz [ 48.142747][ T1097] mmap: syz.3.251 (1097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.333972][ T318] usb 1-1: USB disconnect, device number 11 [ 48.385299][ T1110] tipc: Enabling of bearer rejected, failed to enable media [ 48.427127][ T1113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 48.660502][ T1122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.669187][ T1122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.677872][ T1122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.686737][ T1122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.745446][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.858205][ T1124] netlink: 25 bytes leftover after parsing attributes in process `syz.0.261'. [ 48.868300][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.906628][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.918353][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.929427][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.940797][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.950014][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.959517][ T1115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.071910][ T1126] rust_binder: Error while translating object. [ 49.071978][ T1126] rust_binder: Failure in copy_transaction_data: EINVAL [ 49.078304][ T1126] rust_binder: 1125:1126 transaction to 1125 failed: EINVAL [ 49.085522][ T1126] rust_binder: 1125:1126 netlink report failed: ESRCH [ 49.114798][ T1128] FAULT_INJECTION: forcing a failure. [ 49.114798][ T1128] name failslab, interval 1, probability 0, space 0, times 1 [ 49.115644][ T318] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.127829][ T1128] CPU: 0 UID: 0 PID: 1128 Comm: syz.3.263 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 49.127913][ T1128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.127953][ T1128] Call Trace: [ 49.127973][ T1128] [ 49.127995][ T1128] __dump_stack+0x21/0x30 [ 49.128092][ T1128] dump_stack_lvl+0x140/0x1c0 [ 49.128174][ T1128] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.128258][ T1128] dump_stack+0x19/0x20 [ 49.128351][ T1128] should_fail_ex+0x3c2/0x510 [ 49.128416][ T1128] should_failslab+0xac/0x100 [ 49.128488][ T1128] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 49.128553][ T1128] ? __kasan_check_write+0x18/0x20 [ 49.128605][ T1128] ? _raw_spin_lock+0x92/0x120 [ 49.128659][ T1128] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x46a/0x18e0 [ 49.128767][ T1128] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.128822][ T1128] krealloc_noprof+0x8d/0x130 [ 49.128883][ T1128] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x46a/0x18e0 [ 49.128977][ T1128] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 49.129103][ T1128] ? avc_has_extended_perms+0x7fb/0xe60 [ 49.129172][ T1128] ? __asan_memcpy+0x5a/0x80 [ 49.129225][ T1128] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 49.129306][ T1128] ? __asan_set_shadow_00+0x12/0x20 [ 49.129387][ T1128] ? do_vfs_ioctl+0x182d/0x2010 [ 49.129449][ T1128] ? arch_stack_walk+0x10a/0x170 [ 49.129502][ T1128] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 49.129572][ T1128] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 49.129665][ T1128] ? _parse_integer+0x2e/0x40 [ 49.129737][ T1128] ? ioctl_has_perm+0x39a/0x500 [ 49.129791][ T1128] ? has_cap_mac_admin+0xd0/0xd0 [ 49.129846][ T1128] ? proc_fail_nth_write+0x184/0x220 [ 49.129921][ T1128] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.130004][ T1128] ? selinux_file_ioctl+0x732/0x1480 [ 49.130058][ T1128] ? vfs_write+0xbcf/0xfd0 [ 49.130112][ T1128] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.130172][ T1128] ? __cfi_vfs_write+0x10/0x10 [ 49.130226][ T1128] ? __kasan_check_write+0x18/0x20 [ 49.130279][ T1128] ? mutex_unlock+0x90/0x240 [ 49.130362][ T1128] ? __cfi_mutex_unlock+0x10/0x10 [ 49.130478][ T1128] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.130572][ T1128] ? security_file_ioctl+0x3e/0x110 [ 49.130655][ T1128] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 49.130724][ T1128] __se_sys_ioctl+0x132/0x1b0 [ 49.130789][ T1128] __x64_sys_ioctl+0x7f/0xa0 [ 49.130849][ T1128] x64_sys_call+0x1878/0x2ee0 [ 49.130902][ T1128] do_syscall_64+0x57/0xf0 [ 49.130964][ T1128] ? clear_bhb_loop+0x50/0xa0 [ 49.131049][ T1128] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.131109][ T1128] RIP: 0033:0x7faabc99e019 [ 49.131161][ T1128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.131205][ T1128] RSP: 002b:00007faabd78d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.131269][ T1128] RAX: ffffffffffffffda RBX: 00007faabcc25fa0 RCX: 00007faabc99e019 [ 49.131321][ T1128] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 49.131362][ T1128] RBP: 00007faabd78d090 R08: 0000000000000000 R09: 0000000000000000 [ 49.131395][ T1128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.131435][ T1128] R13: 00007faabcc26038 R14: 00007faabcc25fa0 R15: 00007ffd0d408718 [ 49.131480][ T1128] [ 49.517662][ T1142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.526269][ T1142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.536718][ T1142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.545295][ T1142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.626519][ T318] usb 1-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 49.636879][ T318] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.649831][ T318] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 49.658938][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.668040][ T318] usb 1-1: config 0 descriptor?? [ 50.071695][ T1147] netlink: 5 bytes leftover after parsing attributes in process `syz.2.269'. [ 50.084488][ T318] usb 1-1: USB disconnect, device number 12 [ 50.094629][ T1146] rust_binder: Write failure EFAULT in pid:240 [ 50.172573][ T1153] netlink: 'syz.2.271': attribute type 27 has an invalid length. [ 50.210878][ T1157] rust_binder: Error while translating object. [ 50.210923][ T1157] rust_binder: Failure in copy_transaction_data: EINVAL [ 50.217167][ T1157] rust_binder: 1156:1157 transaction to 1156 failed: EINVAL [ 50.224238][ T1157] rust_binder: 1156:1157 netlink report failed: ESRCH [ 50.253866][ T1159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.262503][ T1159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.271686][ T502] udevd[502]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.598730][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 50.616113][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input8 [ 50.630931][ T1163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.631429][ T31] usb 2-1: USB disconnect, device number 10 [ 50.631572][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.653110][ T1165] FAULT_INJECTION: forcing a failure. [ 50.653110][ T1165] name failslab, interval 1, probability 0, space 0, times 0 [ 50.667149][ T1165] CPU: 0 UID: 0 PID: 1165 Comm: syz.0.274 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 50.667182][ T1165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.667197][ T1165] Call Trace: [ 50.667204][ T1165] [ 50.667212][ T1165] __dump_stack+0x21/0x30 [ 50.667248][ T1165] dump_stack_lvl+0x140/0x1c0 [ 50.667278][ T1165] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.667311][ T1165] dump_stack+0x19/0x20 [ 50.667340][ T1165] should_fail_ex+0x3c2/0x510 [ 50.667365][ T1165] should_failslab+0xac/0x100 [ 50.667392][ T1165] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 50.667418][ T1165] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 50.667455][ T1165] krealloc_noprof+0x8d/0x130 [ 50.667479][ T1165] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 50.667514][ T1165] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x4fb/0x18e0 [ 50.667557][ T1165] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 50.667596][ T1165] ? avc_has_extended_perms+0x7fb/0xe60 [ 50.667624][ T1165] ? __asan_memcpy+0x5a/0x80 [ 50.667646][ T1165] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 50.667689][ T1165] ? __asan_set_shadow_00+0x12/0x20 [ 50.667722][ T1165] ? do_vfs_ioctl+0x182d/0x2010 [ 50.667750][ T1165] ? arch_stack_walk+0x10a/0x170 [ 50.667771][ T1165] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 50.667801][ T1165] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 50.667836][ T1165] ? _parse_integer+0x2e/0x40 [ 50.667863][ T1165] ? ioctl_has_perm+0x39a/0x500 [ 50.667885][ T1165] ? has_cap_mac_admin+0xd0/0xd0 [ 50.667908][ T1165] ? proc_fail_nth_write+0x184/0x220 [ 50.667942][ T1165] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.667973][ T1165] ? selinux_file_ioctl+0x732/0x1480 [ 50.667993][ T1165] ? vfs_write+0xbcf/0xfd0 [ 50.668016][ T1165] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 50.668038][ T1165] ? __cfi_vfs_write+0x10/0x10 [ 50.668060][ T1165] ? __kasan_check_write+0x18/0x20 [ 50.668081][ T1165] ? mutex_unlock+0x90/0x240 [ 50.668112][ T1165] ? __cfi_mutex_unlock+0x10/0x10 [ 50.668146][ T1165] ? bpf_lsm_file_ioctl+0xd/0x20 [ 50.668175][ T1165] ? security_file_ioctl+0x3e/0x110 [ 50.668209][ T1165] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 50.668241][ T1165] __se_sys_ioctl+0x132/0x1b0 [ 50.668269][ T1165] __x64_sys_ioctl+0x7f/0xa0 [ 50.668296][ T1165] x64_sys_call+0x1878/0x2ee0 [ 50.668318][ T1165] do_syscall_64+0x57/0xf0 [ 50.668343][ T1165] ? clear_bhb_loop+0x50/0xa0 [ 50.668373][ T1165] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.668401][ T1165] RIP: 0033:0x7f5811d9e019 [ 50.668420][ T1165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.668440][ T1165] RSP: 002b:00007f5812be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.668464][ T1165] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811d9e019 [ 50.668482][ T1165] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 50.668497][ T1165] RBP: 00007f5812be8090 R08: 0000000000000000 R09: 0000000000000000 [ 50.668511][ T1165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.668525][ T1165] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffea55e0848 [ 50.668544][ T1165] [ 51.018875][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 51.018894][ T36] audit: type=1400 audit(1785620623.010:2071): avc: denied { read } for pid=1166 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.067886][ T36] audit: type=1400 audit(1785620623.360:2072): avc: denied { connect } for pid=1173 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.087539][ T36] audit: type=1400 audit(1785620623.370:2073): avc: denied { audit_read } for pid=1169 comm="syz.0.277" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.215156][ T1188] rust_binder: Error while translating object. [ 51.215199][ T1188] rust_binder: Failure in copy_transaction_data: EINVAL [ 51.221482][ T1188] rust_binder: 1187:1188 transaction to 1187 failed: EINVAL [ 51.228760][ T1188] rust_binder: 1187:1188 netlink report failed: ESRCH [ 51.268832][ T1193] rust_binder: Error while translating object. [ 51.268891][ T1193] rust_binder: Failure in copy_transaction_data: EINVAL [ 51.275180][ T1193] rust_binder: 1191:1193 transaction to 1191 failed: EINVAL [ 51.283556][ T1193] rust_binder: 1191:1193 netlink report failed: ESRCH [ 51.315795][ T1195] FAULT_INJECTION: forcing a failure. [ 51.315795][ T1195] name failslab, interval 1, probability 0, space 0, times 0 [ 51.328492][ T1195] CPU: 0 UID: 0 PID: 1195 Comm: syz.0.286 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 51.328523][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.328536][ T1195] Call Trace: [ 51.328541][ T1195] [ 51.328549][ T1195] __dump_stack+0x21/0x30 [ 51.328582][ T1195] dump_stack_lvl+0x140/0x1c0 [ 51.328609][ T1195] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.328638][ T1195] dump_stack+0x19/0x20 [ 51.328663][ T1195] should_fail_ex+0x3c2/0x510 [ 51.328685][ T1195] should_failslab+0xac/0x100 [ 51.328710][ T1195] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 51.328733][ T1195] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 51.328765][ T1195] krealloc_noprof+0x8d/0x130 [ 51.328786][ T1195] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 51.328815][ T1195] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x5b4/0x18e0 [ 51.328853][ T1195] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 51.328887][ T1195] ? avc_has_extended_perms+0x7fb/0xe60 [ 51.328909][ T1195] ? __asan_memcpy+0x5a/0x80 [ 51.328929][ T1195] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 51.328958][ T1195] ? __asan_set_shadow_00+0x12/0x20 [ 51.328985][ T1195] ? do_vfs_ioctl+0x182d/0x2010 [ 51.329009][ T1195] ? arch_stack_walk+0x10a/0x170 [ 51.329028][ T1195] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 51.329053][ T1195] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 51.329081][ T1195] ? _parse_integer+0x2e/0x40 [ 51.329104][ T1195] ? ioctl_has_perm+0x39a/0x500 [ 51.329129][ T1195] ? has_cap_mac_admin+0xd0/0xd0 [ 51.329148][ T1195] ? proc_fail_nth_write+0x184/0x220 [ 51.329176][ T1195] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 51.329205][ T1195] ? selinux_file_ioctl+0x732/0x1480 [ 51.329224][ T1195] ? vfs_write+0xbcf/0xfd0 [ 51.329243][ T1195] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 51.329262][ T1195] ? __cfi_vfs_write+0x10/0x10 [ 51.329282][ T1195] ? __kasan_check_write+0x18/0x20 [ 51.329300][ T1195] ? mutex_unlock+0x90/0x240 [ 51.329327][ T1195] ? __cfi_mutex_unlock+0x10/0x10 [ 51.329356][ T1195] ? bpf_lsm_file_ioctl+0xd/0x20 [ 51.329381][ T1195] ? security_file_ioctl+0x3e/0x110 [ 51.329409][ T1195] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 51.329437][ T1195] __se_sys_ioctl+0x132/0x1b0 [ 51.329461][ T1195] __x64_sys_ioctl+0x7f/0xa0 [ 51.329483][ T1195] x64_sys_call+0x1878/0x2ee0 [ 51.329501][ T1195] do_syscall_64+0x57/0xf0 [ 51.329523][ T1195] ? clear_bhb_loop+0x50/0xa0 [ 51.329549][ T1195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.329574][ T1195] RIP: 0033:0x7f5811d9e019 [ 51.329590][ T1195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.329606][ T1195] RSP: 002b:00007f5812be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.329628][ T1195] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811d9e019 [ 51.329643][ T1195] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 51.329656][ T1195] RBP: 00007f5812be8090 R08: 0000000000000000 R09: 0000000000000000 [ 51.329668][ T1195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.329680][ T1195] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffea55e0848 [ 51.329697][ T1195] [ 51.722919][ T1210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.739232][ T1210] 9p: Unknown uid 00000000004294967295 [ 51.908634][ T65] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 51.919246][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398) [ 51.930857][ T65] Buffer I/O error on device sda1, logical block 143360 [ 51.937924][ T65] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 51.948500][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143461) [ 51.960124][ T65] Buffer I/O error on device sda1, logical block 143423 [ 51.967169][ T65] device offline error, dev sda, sector 1155366 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 51.977723][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144420) [ 51.989363][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 51.990457][ T36] audit: type=1400 audit(1785620624.300:2074): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.002005][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421) [ 52.029515][ T534] Buffer I/O error on device sda1, logical block 144382 [ 52.035595][ T36] audit: type=1400 audit(1785620624.330:2075): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.063881][ T65] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 52.064419][ T36] audit: type=1400 audit(1785620624.330:2076): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.074729][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 52.099775][ T36] audit: type=1400 audit(1785620624.330:2077): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.104381][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 149542) [ 52.125592][ T36] audit: type=1400 audit(1785620624.330:2078): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.137405][ T65] Buffer I/O error on device sda1, logical block 149504 [ 52.158496][ T309] device offline error, dev sda, sector 1274038 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 2 [ 52.164984][ T65] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 52.175726][ T309] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 159254) [ 52.185117][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 149605) [ 52.198552][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2033, error -5) [ 52.208207][ T65] Buffer I/O error on device sda1, logical block 149567 [ 52.221939][ T309] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 52.227835][ T318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.238977][ T36] audit: type=1400 audit(1785620624.330:2079): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.246056][ T65] device offline error, dev sda, sector 1204518 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 52.269555][ T534] Buffer I/O error on device sda1, logical block 159216 [ 52.279442][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 150564) [ 52.287033][ T309] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 142886) [ 52.297922][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 150565) [ 52.310134][ T534] Buffer I/O error on device sda1, logical block 159217 [ 52.321128][ T65] device offline error, dev sda, sector 1241278 op 0x1:(WRITE) flags 0x0 phys_seg 14 prio class 2 [ 52.338555][ T65] device offline error, dev sda, sector 1257654 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 52.349222][ T36] audit: type=1400 audit(1785620624.330:2080): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.365649][ T309] Buffer I/O error on device sda1, logical block 142848 [ 52.378845][ T309] Buffer I/O error on device sda1, logical block 142849 [ 52.380554][ T534] Buffer I/O error on device sda1, logical block 159218 [ 52.392934][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2036, error -5) [ 52.405641][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2036, error -5) [ 52.418548][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 52.431259][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2034, error -5) [ 52.443971][ T534] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 52.456931][ T1222] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 52.457714][ T73] Aborting journal on device sda1-8. [ 52.466438][ T1222] Buffer I/O error on dev sda1, logical block 33721, lost async page write [ 52.470827][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 52.488055][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 52.505045][ T1222] EXT4-fs (sda1): shut down requested (2) [ 52.506012][ T318] usb 1-1: Using ep0 maxpacket: 8 [ 52.517181][ T318] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 52.525418][ T318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.536482][ T318] usb 1-1: config 0 has no interface number 0 [ 52.543547][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.554062][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.565470][ T318] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 52.572613][ T1222] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 52.574553][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.574581][ T318] usb 1-1: Product: syz [ 52.592907][ T318] usb 1-1: Manufacturer: syz [ 52.597599][ T318] usb 1-1: SerialNumber: syz [ 52.604087][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 52.613451][ T318] usb 1-1: config 0 descriptor?? [ 52.618790][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.629957][ T31] usb 2-1: Product: syz [ 52.634248][ T31] usb 2-1: Manufacturer: syz [ 52.639765][ T318] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 52.646339][ T31] usb 2-1: SerialNumber: syz [ 52.651049][ T318] usb 1-1: No valid video chain found. [ 52.693259][ T1230] rust_binder: Write failure EINVAL in pid:194 [ 52.714577][ T1232] rust_binder: Error while translating object. [ 52.721439][ T1232] rust_binder: Failure in copy_transaction_data: EINVAL [ 52.727850][ T1232] rust_binder: 1231:1232 transaction to 1231 failed: EINVAL [ 52.735007][ T1232] rust_binder: 1231:1232 netlink report failed: ESRCH [ 52.803228][ T1234] netlink: 'syz.3.297': attribute type 2 has an invalid length. [ 52.817588][ T1236] FAULT_INJECTION: forcing a failure. [ 52.817588][ T1236] name failslab, interval 1, probability 0, space 0, times 0 [ 52.830675][ T1236] CPU: 1 UID: 0 PID: 1236 Comm: syz.2.298 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 52.830711][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.830726][ T1236] Call Trace: [ 52.830732][ T1236] [ 52.830741][ T1236] __dump_stack+0x21/0x30 [ 52.830777][ T1236] dump_stack_lvl+0x140/0x1c0 [ 52.830814][ T1236] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.830847][ T1236] dump_stack+0x19/0x20 [ 52.830886][ T1236] should_fail_ex+0x3c2/0x510 [ 52.830912][ T1236] should_failslab+0xac/0x100 [ 52.830941][ T1236] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 52.830965][ T1236] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x7d7/0x18e0 [ 52.831006][ T1236] ? __asan_memset+0x39/0x50 [ 52.831029][ T1236] krealloc_noprof+0x8d/0x130 [ 52.831054][ T1236] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x7d7/0x18e0 [ 52.831098][ T1236] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 52.831140][ T1236] ? avc_has_extended_perms+0x7fb/0xe60 [ 52.831169][ T1236] ? __asan_memcpy+0x5a/0x80 [ 52.831191][ T1236] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 52.831226][ T1236] ? __asan_set_shadow_00+0x12/0x20 [ 52.831258][ T1236] ? do_vfs_ioctl+0x182d/0x2010 [ 52.831286][ T1236] ? arch_stack_walk+0x10a/0x170 [ 52.831309][ T1236] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 52.831339][ T1236] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 52.831373][ T1236] ? _parse_integer+0x2e/0x40 [ 52.831401][ T1236] ? ioctl_has_perm+0x39a/0x500 [ 52.831424][ T1236] ? has_cap_mac_admin+0xd0/0xd0 [ 52.831448][ T1236] ? proc_fail_nth_write+0x184/0x220 [ 52.831482][ T1236] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.831516][ T1236] ? selinux_file_ioctl+0x732/0x1480 [ 52.831539][ T1236] ? vfs_write+0xbcf/0xfd0 [ 52.831561][ T1236] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 52.831584][ T1236] ? __cfi_vfs_write+0x10/0x10 [ 52.831607][ T1236] ? __kasan_check_write+0x18/0x20 [ 52.831628][ T1236] ? mutex_unlock+0x90/0x240 [ 52.831666][ T1236] ? __cfi_mutex_unlock+0x10/0x10 [ 52.831690][ T1236] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.831709][ T1236] ? security_file_ioctl+0x3e/0x110 [ 52.831733][ T1236] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 52.831756][ T1236] __se_sys_ioctl+0x132/0x1b0 [ 52.831775][ T1236] __x64_sys_ioctl+0x7f/0xa0 [ 52.831793][ T1236] x64_sys_call+0x1878/0x2ee0 [ 52.831808][ T1236] do_syscall_64+0x57/0xf0 [ 52.831825][ T1236] ? clear_bhb_loop+0x50/0xa0 [ 52.831861][ T1236] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.831888][ T1236] RIP: 0033:0x7fb1def9e019 [ 52.831901][ T1236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.831915][ T1236] RSP: 002b:00007fb1dfe34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.831933][ T1236] RAX: ffffffffffffffda RBX: 00007fb1df225fa0 RCX: 00007fb1def9e019 [ 52.831945][ T1236] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 52.831956][ T1236] RBP: 00007fb1dfe34090 R08: 0000000000000000 R09: 0000000000000000 [ 52.831968][ T1236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.831978][ T1236] R13: 00007fb1df226038 R14: 00007fb1df225fa0 R15: 00007ffe2aea2688 [ 52.831992][ T1236] [ 52.855942][ T372] usb 1-1: USB disconnect, device number 13 [ 52.880991][ T31] usb 2-1: 0:1 : does not exist [ 52.979629][ T1238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.995662][ T31] usb 2-1: unit 6 not found! [ 53.043255][ T1238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.048607][ T31] usb 2-1: unit 2 not found! [ 53.213342][ T31] usb 2-1: USB disconnect, device number 11 [ 53.219580][ T1247] SELinux: failed to load policy [ 53.308390][ T1250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.317055][ T1250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.450604][ T1252] rust_binder: Write failure EINVAL in pid:198 [ 53.623287][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 53.695446][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 53.760639][ T1261] FAULT_INJECTION: forcing a failure. [ 53.760639][ T1261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.773852][ T1261] CPU: 0 UID: 0 PID: 1261 Comm: syz.3.308 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 53.773885][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.773900][ T1261] Call Trace: [ 53.773907][ T1261] [ 53.773916][ T1261] __dump_stack+0x21/0x30 [ 53.773950][ T1261] dump_stack_lvl+0x140/0x1c0 [ 53.773971][ T1261] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.773995][ T1261] dump_stack+0x19/0x20 [ 53.774015][ T1261] should_fail_ex+0x3c2/0x510 [ 53.774033][ T1261] should_fail+0xf/0x20 [ 53.774049][ T1261] should_fail_usercopy+0x1e/0x30 [ 53.774067][ T1261] _copy_from_user+0x20/0xa0 [ 53.774088][ T1261] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0xeef/0x3fe0 [ 53.774113][ T1261] ? __asan_set_shadow_00+0x12/0x20 [ 53.774136][ T1261] ? do_vfs_ioctl+0x182d/0x2010 [ 53.774155][ T1261] ? arch_stack_walk+0x10a/0x170 [ 53.774170][ T1261] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 53.774190][ T1261] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 53.774213][ T1261] ? _parse_integer+0x2e/0x40 [ 53.774231][ T1261] ? ioctl_has_perm+0x39a/0x500 [ 53.774246][ T1261] ? has_cap_mac_admin+0xd0/0xd0 [ 53.774261][ T1261] ? proc_fail_nth_write+0x184/0x220 [ 53.774284][ T1261] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 53.774307][ T1261] ? selinux_file_ioctl+0x732/0x1480 [ 53.774321][ T1261] ? vfs_write+0xbcf/0xfd0 [ 53.774337][ T1261] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 53.774357][ T1261] ? __cfi_vfs_write+0x10/0x10 [ 53.774372][ T1261] ? __kasan_check_write+0x18/0x20 [ 53.774387][ T1261] ? mutex_unlock+0x90/0x240 [ 53.774408][ T1261] ? __cfi_mutex_unlock+0x10/0x10 [ 53.774432][ T1261] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.774451][ T1261] ? security_file_ioctl+0x3e/0x110 [ 53.774475][ T1261] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 53.774497][ T1261] __se_sys_ioctl+0x132/0x1b0 [ 53.774516][ T1261] __x64_sys_ioctl+0x7f/0xa0 [ 53.774534][ T1261] x64_sys_call+0x1878/0x2ee0 [ 53.774548][ T1261] do_syscall_64+0x57/0xf0 [ 53.774564][ T1261] ? clear_bhb_loop+0x50/0xa0 [ 53.774585][ T1261] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.774605][ T1261] RIP: 0033:0x7faabc99e019 [ 53.774618][ T1261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.774631][ T1261] RSP: 002b:00007faabd78d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.774649][ T1261] RAX: ffffffffffffffda RBX: 00007faabcc25fa0 RCX: 00007faabc99e019 [ 53.774660][ T1261] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 53.774671][ T1261] RBP: 00007faabd78d090 R08: 0000000000000000 R09: 0000000000000000 [ 53.774681][ T1261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.774690][ T1261] R13: 00007faabcc26038 R14: 00007faabcc25fa0 R15: 00007ffd0d408718 [ 53.774704][ T1261] [ 53.845606][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 54.068695][ T31] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 54.078820][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.088174][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.096289][ T31] usb 2-1: Product: syz [ 54.100477][ T31] usb 2-1: Manufacturer: syz [ 54.105097][ T31] usb 2-1: SerialNumber: syz [ 54.109815][ T1273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.122631][ T1273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.132019][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 54.138343][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 54.176694][ T372] usb 4-1: USB disconnect, device number 10 [ 54.355693][ T31] r8152-cfgselector 2-1: Needed 2 retries to read version [ 54.375346][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 54.381876][ T31] r8152-cfgselector 2-1: bad CDC descriptors [ 54.436790][ T534] bridge_slave_1: left allmulticast mode [ 54.442530][ T534] bridge_slave_1: left promiscuous mode [ 54.457651][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.477995][ T534] bridge_slave_0: left allmulticast mode SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 54.483693][ T534] bridge_slave_0: left promiscuous mode [ 54.489616][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.559789][ T319] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 54.618533][ T534] veth1_macvtap: left promiscuous mode [ 54.628432][ T372] usb 3-1: USB disconnect, device number 4 [ 55.069190][ T534] bridge_slave_1: left allmulticast mode [ 55.074921][ T534] bridge_slave_1: left promiscuous mode [ 55.080764][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.088776][ T534] bridge_slave_0: left allmulticast mode [ 55.094443][ T534] bridge_slave_0: left promiscuous mode [ 55.100198][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.107922][ T534] bridge_slave_1: left allmulticast mode [ 55.113582][ T534] bridge_slave_1: left promiscuous mode [ 55.119287][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.126769][ T534] bridge_slave_0: left allmulticast mode [ 55.132409][ T534] bridge_slave_0: left promiscuous mode [ 55.138137][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.145934][ T534] bridge_slave_1: left allmulticast mode [ 55.151619][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.159084][ T534] bridge_slave_0: left allmulticast mode [ 55.164727][ T534] bridge_slave_0: left promiscuous mode [ 55.170389][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.429134][ T534] tipc: Left network mode [ 55.435935][ T534] veth1_macvtap: left promiscuous mode [ 55.441500][ T534] veth0_vlan: left promiscuous mode [ 55.447112][ T534] veth1_macvtap: left promiscuous mode [ 55.452635][ T534] veth0_vlan: left promiscuous mode [ 55.458166][ T534] veth1_macvtap: left promiscuous mode [ 55.463689][ T534] veth0_vlan: left promiscuous mode