last executing test programs: 6.056092025s ago: executing program 0 (id=138): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') (async) io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200)) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000180)={0xe0281c00, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 6.050735636s ago: executing program 0 (id=140): syz_usb_connect(0x5, 0x46, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x2, 0x4) (async) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) (async) syz_usb_connect$cdc_ncm(0x2, 0x8d, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r2], &(0x7f0000000440)={0xa, &(0x7f0000000140)={0x5, 0x6, 0x310, 0x81, 0x7, 0xd, 0x20, 0x81}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x0, 0x8000}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x81d}}]}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) (async) r5 = socket$pptp(0x18, 0x1, 0x2) read(r5, &(0x7f0000000000)=""/114, 0x72) (async) r6 = epoll_create(0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r8, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x1, 0x2, {0xa, 0x4e24, 0x7, @private2}}}, 0x3a) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x4, 0x1, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047459, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x31) (async) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x1, @empty}}, 0x1e) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x4) (async) syz_usb_connect$cdc_ecm(0x4, 0x115, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8b, {{0x9, 0x24, 0x6, 0x0, 0x0, "e2793063"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x5, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @mdlm_detail={0x24, 0x24, 0x13, 0x0, "89caeba4523ac41865ce3ebafedf2c95f5d2f421e2f3fe8101f4d78b1edab8fc"}, @mdlm_detail={0x6c, 0x24, 0x13, 0x0, "3c6cf0f47783542b4ad15a4b365467e6cb5f379971ff1f4acf27c18befb8b15f072e390f05333172ee4c3167f703a12800592ab583656c26a08f6c473f3fed7194ccf9832a29d5e9d793265a0e5c2b6b0c31060c6f978ba5a36516964ca32fc443df927388062667"}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x706}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x228, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x80, 0xd}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x0, 0x3, 0x4, 0x8, 0x69}, 0x127, &(0x7f0000000740)={0x5, 0xf, 0x127, 0x5, [@generic={0xe5, 0x10, 0x4, "47f3b89b6edcb3cfd1959acd6cfe0e55946a52f4319e3c954b9a639c5734e5655e5f9b0f01f7e9e772ea71288cd2ec71df164dab8a0cc25e02ca735df1343adeecc3e9c6a3b967ea730d0f584aa9fabe06ce97c65aa96d015a7887bb1881f1f1637d76e4cc1008a566a66612d65e5eb7d24d9bd1fad8609ebe40b5eeb1c4c38d9a3301ab8c9b7302d3553c717c6470cf20d394d3611e821069085aca145b7e2c7ddcd24697eb690d117d2966be65b6c5450ea4225f42436eba0fcb78e248d10d5db7d0a50c30eac974b2f604a1351a9e54f5b7276ce420587f075710e151665d330a"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0xd, 0xf6a6eac394b3d99b, 0x1c5, [0xffc030, 0xc0c0, 0xc00f, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0x9, 0x8000}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xc, 0xf01e, 0x6, [0x30, 0xffcf]}]}, 0x2, [{0x31, &(0x7f0000000280)=@string={0x31, 0x3, "24c24112544e03aa70198beb4219aa8eecd2cc72abace6422995e02c292ec377fd59e399069291715c9b6f51cdb683"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}]}) 6.000737929s ago: executing program 0 (id=142): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ac0565020000000000010902240001000010020904000305030042000921000033012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2d, {0x2d, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b146"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.364611485s ago: executing program 2 (id=151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x3, 0x2, 0x7, 0xd, 0x3, 0x7}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff14000200475400f6a13bb10000a8880065584803", 0xfffffe4c, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x40}, 0x14) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x22, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.352779475s ago: executing program 2 (id=152): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000000c0)=0x49, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) shutdown(r2, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) r6 = fsmount(r4, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f00000014c0)={0x0, 0x5000, 0xfb7f0000, r10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000028e000/0x4000)=nil, 0x4000}, 0x12f3a14ae0931fd5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 4.292402568s ago: executing program 0 (id=155): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x10000, 0xffffffffe240446c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0x6f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x61, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r3, 0x0, 0x0) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='%*.\x00', &(0x7f0000000200)='%:\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000340)='/dev/fuse\x00']}, &(0x7f0000000440)={[&(0x7f00000003c0)='fuse\x00']}, 0x1000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203010902740001010da0010904000f03020600f80624060000b305240024030d240f0106000000af5a0180d00c24523777e5000705f8ff03032414"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x10, 0xa, 0x8, 0x1}, 0x0, 0x0}) 3.75964991s ago: executing program 2 (id=163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x83, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x9, 0x17}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r1, 0x409, 0x20) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0x21, 0xb, {0xb, 0xd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x32, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0x6, 0x3, 0x40, 0x5}, 0x2f, &(0x7f0000000100)={0x5, 0xf, 0x2f, 0x1, [@generic={0x2a, 0x10, 0x1, "5c468f77e52cf9b8c709f44b351a00c20d82e83409686eb32e46f4ac01afe9e9f1993b844ca503"}]}, 0x1, [{0x5a, &(0x7f00000001c0)=@string={0x5a, 0x3, "7533f69248d6dc226b258ea21767f0c31328a18f2cdbf4f59de6bb6e3ca9cb40ed97c16e11763e9847270bb4773acc0055bb1f401b5bbfc46c1dd987b04259d93f01d2293c6b1c4c49f72c3d5452ee86dc153929cc53670e"}}]}) 3.548563632s ago: executing program 3 (id=165): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x31, &(0x7f0000000300)=""/49}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x4ea5, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2c4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/53, 0x0, &(0x7f0000002840)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.040606302s ago: executing program 0 (id=166): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) keyctl$assume_authority(0x10, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$revoke(0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) 2.656991564s ago: executing program 3 (id=167): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r4, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.239740709s ago: executing program 2 (id=168): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001cc0), 0x28080, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000140)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x21) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000000)) 2.22443835s ago: executing program 2 (id=169): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x7, 0x4, 0x7, 0xb9777117, 0x9, 0x2}]}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, 0x0) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (rerun: 32) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) (async, rerun: 32) r6 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt(r6, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r6, &(0x7f0000000000), 0x10) dup3(r5, r6, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x2c, 0x6b, {0x6b, 0x10, "6f0b6ded094fc885e61996ceb11a4b807eb5a0c359ac785c3de738c6a9acab9d28fdd21ef126c616e7e41fcd611ccc686dce91b771e759c39fb39b5f001cbffca7779924775897903f806723c06ed33fdc324b42b0eda679ce4f5e4e7ec550908f7ae59dc12adea890"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x60, 0x31, 0x4e, "200c153a05c6768a442263600da56bc5fb217c943cbf5c40bf86ed4e702eb75f27a8aaf41a1d3eb798a0ec9b6f601af16b675cf4e8b059e4d33b73336922e8451bc7e42190fd2f8d21fa302478b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.174378472s ago: executing program 0 (id=170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000001080)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 2.121111996s ago: executing program 2 (id=172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {}, {}, {0x6}]}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000002280)=""/152, 0x98}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000100)=""/31, 0x1f}], 0x3) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205000000a7"], 0x0}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) 1.597283836s ago: executing program 1 (id=173): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d73000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={[0x81]}, 0x8}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x20100, 0x262, 0x24}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x1) write$evdev(r2, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x12, 0x8000, 0x7}, {{0x77359400}, 0x16, 0x6, 0x7ff}, {{0x77359400}, 0x4, 0x8b0, 0x8}], 0x48) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d73000) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={[0x81]}, 0x8}) (async) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x20100, 0x262, 0x24}, 0x18) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x1) (async) write$evdev(r2, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x12, 0x8000, 0x7}, {{0x77359400}, 0x16, 0x6, 0x7ff}, {{0x77359400}, 0x4, 0x8b0, 0x8}], 0x48) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) 1.565875888s ago: executing program 1 (id=174): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) dup3(r3, r2, 0x80000) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x3, 0x8, 0x19003, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x7ff}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xd) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x11, 0x1d, 0x9f, &(0x7f0000000180)}) 1.393068668s ago: executing program 1 (id=175): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f0000002100)=""/4099, 0x1003}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f0000000800)=""/153, 0x99}, {&(0x7f00000008c0)=""/114, 0x72}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000000)=""/154, 0x9a}, {&(0x7f0000001d40)=""/271, 0x10f}], 0x9}, 0xc}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xfeffffff}], 0x4, 0x40000100, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc000000195caa6e222488d81900000000000000000000000000000000000001ac1414aa00000004000000000000000000000000000000000a0000000000003228a1ff976acfae92c100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f00000007c0)={&(0x7f0000000300)={0xa, 0x4e21, 0x46d74c71, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1], 0x48}, 0x46830) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7b, 0x4) (async) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000005a000100000000000000000004000080070005"], 0x1c}], 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r10, &(0x7f0000000080)='./file1\x00', 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) open_tree(r10, &(0x7f00000000c0)='./file0\x00', 0x1) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x4e21, @local}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) 1.391376338s ago: executing program 1 (id=176): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24104) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0, 0x6000}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x31, &(0x7f0000000300)=""/49}]}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000006c0)={0x1, 0x0, 0x1000, 0xce, &(0x7f0000000580)="f44a229984d66412b09a0d8a07ac0d57af660fedafd34120e8662e6d4321fdae7d2b809866242a6ee00ee6a5a5d649fa4f24f360fec6d31ef585a0521af79dd67419ffa335b131c5696f93f4aebe33da90e6363a0eb337d64cf38c247a11279d86f7ce808e54aa7d159512605cdc7484bc8ab43d81f25728b54bf11771027a6cb711412f29f63d601ee2b0f518ea9775746802fc13c52a6e8d4d545b8eca7a82f11bbfb7f7a7b0911d1ad249e90f7ed2cbbe821b5d1f76ca30b1336c82d7787dbc8b0d67aa1467ace373ccf4abf2", 0x4e, 0x0, &(0x7f0000000340)="ce79abb0126b7eae0a53e47271b47cf00a73fd2684050178621ae1bd5990d41a9555035e67da91209163bcbea5518a35c2238627cb41c9e63f8b2e0aca24669a964f89ea5b71c8e1fa6459e30f9b"}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) eventfd2(0x81, 0x80001) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000780)=""/53, 0x0, &(0x7f0000002840)=""/4092, 0x8000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 774.215864ms ago: executing program 3 (id=177): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, 0x0, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97b96d02674f51eae4da00"}}) 763.466745ms ago: executing program 3 (id=178): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @multicast2}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x3, 0x3ff, 0x5, r2}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x19, 0x4}, 0x18, 0x1) dup(r3) landlock_restrict_self(r3, 0x3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x4}}, 0x26) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}}) 653.050031ms ago: executing program 3 (id=179): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x6, 0x4, 0x3, 0x18, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',nodejmap,cache=fs']) 585.267636ms ago: executing program 3 (id=180): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ac0565020000000000010902240001000010020904000305030042000921000033012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2e, {0x2e, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 565.377927ms ago: executing program 1 (id=181): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000000c0)=0x49, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) shutdown(r2, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x40, 0x14, 0x2, "f538"}, 0x0, 0x0, 0x0, 0x0}) r6 = fsmount(r4, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f00000014c0)={0x0, 0x5000, 0xfb7f0000, r10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000028e000/0x4000)=nil, 0x4000}, 0x12f3a14ae0931fd5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=182): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x22, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0xa0, {0xa0, 0x5, "35ecb05bc38c402efb12f3f7b0226d879376c7704bde151526796f25545ebaf19cf248a3677b3773bb5b2d0572c1c1b12c7a258e263b0e368da27b2dba108e15e987e3ab4b6f10c54465543b305e4a8ed36d930caba9e3bc7b660832cdfafe3ee4b570eaaaceede678034add70b785d85b148bc1b28fec7f7c2dacead9575fe40d54c98b0052f3ba5632ad2a55bc0b71757a5581cc6f3495bd5e8a3bbde8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) socket$packet(0x11, 0x2, 0x300) (async) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x22, 0x8}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0xa0, {0xa0, 0x5, "35ecb05bc38c402efb12f3f7b0226d879376c7704bde151526796f25545ebaf19cf248a3677b3773bb5b2d0572c1c1b12c7a258e263b0e368da27b2dba108e15e987e3ab4b6f10c54465543b305e4a8ed36d930caba9e3bc7b660832cdfafe3ee4b570eaaaceede678034add70b785d85b148bc1b28fec7f7c2dacead9575fe40d54c98b0052f3ba5632ad2a55bc0b71757a5581cc6f3495bd5e8a3bbde8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 21.720580][ T36] audit: type=1400 audit(1769846869.980:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.721825][ T282] cgroup: Unknown subsys name 'net' [ 21.743274][ T36] audit: type=1400 audit(1769846869.980:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.770568][ T36] audit: type=1400 audit(1769846870.010:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.770737][ T282] cgroup: Unknown subsys name 'devices' [ 21.975442][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.981090][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.099495][ T36] audit: type=1400 audit(1769846870.360:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.122763][ T36] audit: type=1400 audit(1769846870.360:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.130087][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.147848][ T36] audit: type=1400 audit(1769846870.360:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.179351][ T36] audit: type=1400 audit(1769846870.430:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.186886][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.205629][ T36] audit: type=1400 audit(1769846870.430:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.240023][ T36] audit: type=1400 audit(1769846870.450:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.265642][ T36] audit: type=1400 audit(1769846870.450:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.147407][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.154743][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.161912][ T289] bridge_slave_0: entered allmulticast mode [ 23.168487][ T289] bridge_slave_0: entered promiscuous mode [ 23.177254][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.184370][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.191459][ T289] bridge_slave_1: entered allmulticast mode [ 23.198153][ T289] bridge_slave_1: entered promiscuous mode [ 23.294037][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.301095][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.308221][ T290] bridge_slave_0: entered allmulticast mode [ 23.314458][ T290] bridge_slave_0: entered promiscuous mode [ 23.330740][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.337838][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.344938][ T291] bridge_slave_0: entered allmulticast mode [ 23.351132][ T291] bridge_slave_0: entered promiscuous mode [ 23.357407][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.364555][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.371784][ T290] bridge_slave_1: entered allmulticast mode [ 23.378258][ T290] bridge_slave_1: entered promiscuous mode [ 23.395460][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.402578][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.409865][ T291] bridge_slave_1: entered allmulticast mode [ 23.416114][ T291] bridge_slave_1: entered promiscuous mode [ 23.472119][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.479439][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.486593][ T292] bridge_slave_0: entered allmulticast mode [ 23.492942][ T292] bridge_slave_0: entered promiscuous mode [ 23.499585][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.506771][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.513977][ T292] bridge_slave_1: entered allmulticast mode [ 23.520334][ T292] bridge_slave_1: entered promiscuous mode [ 23.587873][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.594946][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.602228][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.609283][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.697172][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.704255][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.711691][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.718786][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.731464][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.738578][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.745902][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.752944][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.771565][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.779205][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.787144][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.794830][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.802264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.809702][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.834851][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.860610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.867678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.896380][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.903456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.915650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.922732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.936719][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.943783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.964973][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.972005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.982693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.989794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.000079][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.007155][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.052152][ T290] veth0_vlan: entered promiscuous mode [ 24.069905][ T289] veth0_vlan: entered promiscuous mode [ 24.082248][ T290] veth1_macvtap: entered promiscuous mode [ 24.092421][ T289] veth1_macvtap: entered promiscuous mode [ 24.103197][ T291] veth0_vlan: entered promiscuous mode [ 24.109337][ T292] veth0_vlan: entered promiscuous mode [ 24.137259][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.142451][ T292] veth1_macvtap: entered promiscuous mode [ 24.175239][ T291] veth1_macvtap: entered promiscuous mode [ 24.262217][ T338] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.276477][ T334] rust_binder: 2: no such ref 0 [ 24.374408][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.513146][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.563121][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.673167][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 24.679545][ T10] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.692697][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 24.699442][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 24.708697][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.718515][ T10] usb 1-1: config 0 descriptor?? [ 24.725221][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.736498][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.746327][ T9] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 24.761341][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 24.768001][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 24.777180][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.785962][ T9] usb 3-1: config 0 descriptor?? [ 25.068571][ T359] capability: warning: `syz.1.10' uses deprecated v2 capabilities in a way that may be insecure [ 25.080126][ T359] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 25.087985][ T362] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 25.096869][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.105589][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.132093][ T10] kye 0003:0458:501A.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 25.146233][ T10] kye 0003:0458:501A.0001: hidraw0: USB HID v0.09 Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 25.158513][ T10] kye 0003:0458:501A.0001: tablet-enabling feature report not found [ 25.166770][ T10] kye 0003:0458:501A.0001: tablet enabling failed [ 25.195690][ T9] hid (null): unknown global tag 0xe [ 25.199934][ T367] kvm: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0xc1) = 0x9d05 [ 25.207170][ T9] magicmouse 0003:05AC:0265.0002: unknown global tag 0xe [ 25.220441][ T367] kvm: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0xc2) = 0xe505 [ 25.222574][ T9] magicmouse 0003:05AC:0265.0002: item 0 0 1 14 parsing failed [ 25.231718][ T367] kvm: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xcb05 [ 25.237098][ T9] magicmouse 0003:05AC:0265.0002: magicmouse hid parse failed [ 25.249906][ T367] kvm: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x186) = 0xcf05 [ 25.257764][ T9] magicmouse 0003:05AC:0265.0002: probe with driver magicmouse failed with error -22 [ 25.262004][ T367] kvm: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x187) = 0x8c05 [ 25.283188][ T367] kvm_intel: kvm [366]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x1d9) = 0x5905 [ 25.338605][ T31] usb 1-1: USB disconnect, device number 2 [ 25.401250][ T10] usb 3-1: USB disconnect, device number 2 [ 25.574790][ T383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.919952][ T397] rust_binder: 6: no such ref 0 [ 25.997337][ T401] can0: slcan on ttyS3. [ 26.703146][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 26.854766][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.865056][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 26.874769][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.893285][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.905799][ T45] usb 1-1: string descriptor 0 read error: -22 [ 26.912092][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.921580][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.932169][ T45] usb 1-1: 0:2 : does not exist [ 26.943171][ T401] can0 (unregistered): slcan off ttyS3. [ 27.055317][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 27.055337][ T36] audit: type=1400 audit(1769846875.320:170): avc: denied { mounton } for pid=469 comm="syz.1.30" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.090006][ T36] audit: type=1400 audit(1769846875.320:171): avc: denied { append } for pid=469 comm="syz.1.30" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.123439][ T36] audit: type=1400 audit(1769846875.320:172): avc: denied { map } for pid=469 comm="syz.1.30" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.146077][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.154350][ T36] audit: type=1400 audit(1769846875.400:173): avc: denied { remount } for pid=473 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.173962][ T36] audit: type=1400 audit(1769846875.410:174): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.203989][ T478] mmap: syz.1.32 (478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.216042][ T36] audit: type=1400 audit(1769846875.480:175): avc: denied { getopt } for pid=477 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.235733][ T36] audit: type=1400 audit(1769846875.480:176): avc: denied { create } for pid=477 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 27.294370][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.306055][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.315849][ T9] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.328723][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.335384][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 27.344485][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.353290][ T9] usb 3-1: config 0 descriptor?? [ 27.483131][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.633107][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 27.635166][ T486] rust_binder: 25: no such ref 0 [ 27.641606][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 27.653150][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.661185][ T31] usb 2-1: Product: syz [ 27.665410][ T31] usb 2-1: Manufacturer: syz [ 27.670170][ T31] usb 2-1: SerialNumber: syz [ 27.676113][ T31] usb 2-1: config 0 descriptor?? [ 27.682710][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 27.690960][ T31] usb 2-1: Detected FT4233HP [ 27.761611][ T9] hid (null): unknown global tag 0xe [ 27.768322][ T9] magicmouse 0003:05AC:0265.0003: unknown global tag 0xe [ 27.775450][ T9] magicmouse 0003:05AC:0265.0003: item 0 0 1 14 parsing failed [ 27.783279][ T9] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed [ 27.790786][ T9] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22 [ 27.962881][ T482] usb 3-1: USB disconnect, device number 3 [ 27.969049][ T427] netlink: 'syz.0.23': attribute type 13 has an invalid length. [ 28.082951][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 28.090613][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.100137][ T31] usb 2-1: USB disconnect, device number 2 [ 28.107019][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.116700][ T31] ftdi_sio 2-1:0.0: device disconnected [ 28.385364][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 28.394673][ T45] usb 1-1: Warning! Unlikely big volume range (=52533), cval->res is probably wrong. [ 28.404582][ T45] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/28725/1 [ 28.414988][ T45] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 28.424823][ T45] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 28.435969][ T45] usb 1-1: USB disconnect, device number 3 [ 28.459146][ T36] audit: type=1400 audit(1769846876.720:177): avc: denied { ioctl } for pid=489 comm="syz.3.35" path="socket:[4773]" dev="sockfs" ino=4773 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.483768][ T36] audit: type=1400 audit(1769846876.730:178): avc: denied { getopt } for pid=489 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.507836][ T36] audit: type=1400 audit(1769846876.770:179): avc: denied { bind } for pid=492 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.553570][ T500] cgroup: Unknown subsys name 'audit' [ 28.578821][ T500] ======================================================= [ 28.578821][ T500] WARNING: The mand mount option has been deprecated and [ 28.578821][ T500] and is ignored by this kernel. Remove the mand [ 28.578821][ T500] option from the mount to silence this warning. [ 28.578821][ T500] ======================================================= [ 28.692875][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 28.793097][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.815795][ T519] rust_binder: 58: no such ref 0 [ 28.944357][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.954856][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.964642][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.973534][ T31] usb 3-1: SerialNumber: syz [ 28.980540][ T31] cdc_acm 3-1:1.0: skipping garbage [ 28.986118][ T31] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 29.133159][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.181731][ T10] usb 3-1: USB disconnect, device number 4 [ 29.294400][ T45] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.305445][ T45] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.315301][ T45] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.329040][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 29.336139][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 29.345687][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.358209][ T45] usb 1-1: config 0 descriptor?? [ 29.689019][ T531] netlink: 104 bytes leftover after parsing attributes in process `syz.1.49'. [ 29.768378][ T45] hid (null): unknown global tag 0xe [ 29.782489][ T45] magicmouse 0003:05AC:0265.0004: unknown global tag 0xe [ 29.791095][ T45] magicmouse 0003:05AC:0265.0004: item 0 0 1 14 parsing failed [ 29.799005][ T45] magicmouse 0003:05AC:0265.0004: magicmouse hid parse failed [ 29.807350][ T45] magicmouse 0003:05AC:0265.0004: probe with driver magicmouse failed with error -22 [ 29.969044][ T482] usb 1-1: USB disconnect, device number 4 [ 30.123114][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.221757][ T570] rust_binder: 56: no such ref 0 [ 30.253135][ T45] usb 2-1: device descriptor read/64, error -71 [ 30.493215][ T45] usb 2-1: device descriptor read/64, error -71 [ 30.593089][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.723089][ T484] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.743094][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.754284][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.765267][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.775039][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.787967][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.797044][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.805661][ T9] usb 3-1: config 0 descriptor?? [ 30.873132][ T484] usb 1-1: Using ep0 maxpacket: 32 [ 30.878475][ T45] usb 2-1: device descriptor read/64, error -71 [ 30.885949][ T484] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.898988][ T484] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.905648][ T484] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 30.914736][ T484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.923959][ T484] usb 1-1: config 0 descriptor?? [ 31.046479][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 31.052629][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 31.061731][ T9] usb 3-1: USB disconnect, device number 5 [ 31.133102][ T45] usb 2-1: device descriptor read/64, error -71 [ 31.243339][ T45] usb usb2-port1: attempt power cycle [ 31.323085][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.473154][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 31.479842][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.488197][ T10] usb 4-1: config 1 has no interface number 0 [ 31.494385][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.504460][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.514495][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 31.522708][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 31.531846][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.533679][ T484] usbhid 1-1:0.0: can't add hid device: -71 [ 31.540147][ T10] usb 4-1: Product: syz [ 31.548588][ T484] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 31.553093][ T10] usb 4-1: Manufacturer: syz [ 31.565054][ T484] usb 1-1: USB disconnect, device number 5 [ 31.567920][ T10] usb 4-1: SerialNumber: syz [ 31.579711][ T589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.588500][ T589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.603110][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 31.624464][ T45] usb 2-1: device descriptor read/8, error -71 [ 31.754264][ T45] usb 2-1: device descriptor read/8, error -71 [ 31.993139][ T45] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 32.000879][ T589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.008279][ T589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.024287][ T45] usb 2-1: device descriptor read/8, error -71 [ 32.154156][ T45] usb 2-1: device descriptor read/8, error -71 [ 32.263265][ T45] usb usb2-port1: unable to enumerate USB device [ 32.303143][ T484] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.423166][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 32.423202][ T36] audit: type=1400 audit(1769846880.680:208): avc: denied { accept } for pid=588 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 32.473135][ T484] usb 1-1: Using ep0 maxpacket: 16 [ 32.481393][ T484] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 32.492000][ T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.501351][ T484] usb 1-1: Product: syz [ 32.501385][ T36] audit: type=1400 audit(1769846880.760:209): avc: denied { ioctl } for pid=588 comm="syz.3.64" path="socket:[6238]" dev="sockfs" ino=6238 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.506000][ T484] usb 1-1: Manufacturer: syz [ 32.534795][ T484] usb 1-1: SerialNumber: syz [ 32.542370][ T484] r8152-cfgselector 1-1: Unknown version 0x0000 [ 32.548775][ T484] r8152-cfgselector 1-1: config 0 descriptor?? [ 32.574925][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.585946][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.596977][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.609944][ T10] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:0c:15:3a:05:c6 [ 32.626959][ T10] usb 4-1: USB disconnect, device number 2 [ 32.633681][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 32.644812][ T36] audit: type=1400 audit(1769846880.900:210): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.677496][ T36] audit: type=1400 audit(1769846880.940:211): avc: denied { read } for pid=603 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.701165][ T36] audit: type=1400 audit(1769846880.940:212): avc: denied { open } for pid=603 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.724573][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.735973][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.740759][ T36] audit: type=1400 audit(1769846880.940:213): avc: denied { getattr } for pid=603 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.755867][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 32.770856][ T36] audit: type=1400 audit(1769846881.020:214): avc: denied { write } for pid=602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.807994][ T36] audit: type=1400 audit(1769846881.020:215): avc: denied { add_name } for pid=602 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.830564][ T36] audit: type=1400 audit(1769846881.070:216): avc: denied { remove_name } for pid=613 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=865 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.009639][ T9] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 33.057567][ T639] rust_binder: 86: no such ref 0 [ 33.293097][ T484] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.444404][ T484] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.455345][ T484] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.465634][ T484] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 33.478541][ T484] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.485273][ T484] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 33.494369][ T484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.504129][ T484] usb 3-1: config 0 descriptor?? [ 33.577512][ T646] devtmpfs: Unknown parameter 'fuse' [ 33.823113][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.914715][ T484] magicmouse 0003:05AC:0265.0005: item fetching failed at offset 3/5 [ 33.923529][ T484] magicmouse 0003:05AC:0265.0005: magicmouse hid parse failed [ 33.931204][ T484] magicmouse 0003:05AC:0265.0005: probe with driver magicmouse failed with error -22 [ 33.974448][ T31] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 33.982571][ T31] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 33.992791][ T31] usb 1-1: config 1 has no interface number 0 [ 33.998917][ T31] usb 1-1: config 1 interface 78 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.012108][ T31] usb 1-1: config 1 interface 78 has no altsetting 0 [ 34.020270][ T31] usb 1-1: New USB device found, idVendor=2f24, idProduct=9314, bcdDevice=3a.31 [ 34.029464][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.037597][ T31] usb 1-1: Product: syz [ 34.041757][ T31] usb 1-1: Manufacturer: syz [ 34.046400][ T31] usb 1-1: SerialNumber: syz [ 34.115057][ T10] usb 3-1: USB disconnect, device number 6 [ 34.143117][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.214525][ T36] audit: type=1400 audit(1769846882.480:217): avc: denied { setcurrent } for pid=650 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.293109][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 34.299934][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.308836][ T9] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 34.316903][ T9] usb 2-1: config 9 has no interface number 0 [ 34.323073][ T9] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0x2C, changing to 0xC [ 34.334661][ T9] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 34.344357][ T9] usb 2-1: config 9 interface 5 has no altsetting 0 [ 34.352742][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 34.361853][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.369924][ T9] usb 2-1: Product: 銢덶芷ᗍ͏⻡前䈡䤳硫竱踞엃㰞ﰼᬎ஭붏뼞髓ᇡ즏唾妥ꔨ덀੹㓛Ԓ闊⟔布쳋㲈頡昮簪ᶨ⡥ꩀ␟㰈쐩줂볾滵喇ण쾿Ǥ걯㔖୥۴ਊ锣䬭䕻錐⍼葱밟ꀘ犒⪣紇㊁굍銏Қꉕ熧勞䚫誁⟜駄 [ 34.396946][ T9] usb 2-1: Manufacturer: М [ 34.401534][ T9] usb 2-1: SerialNumber: ࠧ [ 34.493146][ T484] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.610385][ T648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 34.624150][ T9] usb 2-1: USB disconnect, device number 7 [ 34.648435][ T484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.661710][ T484] usb 4-1: not running at top speed; connect to a high speed hub [ 34.671091][ T484] usb 4-1: string descriptor 0 read error: -22 [ 34.677588][ T484] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.687041][ T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.907136][ T484] cdc_ncm 4-1:1.0: bind() failure [ 34.913274][ T484] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 34.920154][ T484] cdc_ncm 4-1:1.1: bind() failure [ 34.927027][ T484] usb 4-1: USB disconnect, device number 3 [ 35.203152][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.354191][ T9] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.367217][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 35.373908][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 35.383069][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.383078][ T484] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.399301][ T9] usb 3-1: config 0 descriptor?? [ 35.533134][ T484] usb 2-1: Using ep0 maxpacket: 16 [ 35.540038][ T484] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.550232][ T484] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 35.561450][ T484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.570631][ T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.578681][ T484] usb 2-1: Product: syz [ 35.582866][ T484] usb 2-1: Manufacturer: syz [ 35.587659][ T484] usb 2-1: SerialNumber: syz [ 35.608315][ T9] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.0006/input/input4 [ 35.623264][ T9] uclogic 0003:28BD:0935.0006: input,hidraw0: USB HID v1.01 Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 35.794168][ T668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.802787][ T668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.815016][ T484] cdc_ncm 2-1:1.0: bind() failure [ 35.819393][ T10] usb 3-1: USB disconnect, device number 7 [ 35.822841][ T484] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 35.839480][ T484] cdc_ncm 2-1:1.1: bind() failure [ 35.854353][ T484] usb 2-1: USB disconnect, device number 8 [ 35.861603][ T676] rust_binder: 64: no such ref 0 [ 35.982544][ T680] kvm: MWAIT instruction emulated as NOP! [ 36.534494][ T31] usb 1-1: USB disconnect, device number 7 [ 36.587157][ T693] raw_sendmsg: syz.3.89 forgot to set AF_INET. Fix it! [ 36.594124][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.718081][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.729650][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.745046][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 36.753134][ T9] usb 2-1: config 0 has no interface number 0 [ 36.760086][ T9] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 36.771484][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 36.784524][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 36.793593][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.802180][ T9] usb 2-1: config 0 descriptor?? [ 36.843074][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.973090][ T331] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 36.994233][ T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.005297][ T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.015283][ T31] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.015922][ T9] usb 2-1: string descriptor 0 read error: -71 [ 37.029807][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.037676][ T9] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 37.048774][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.053293][ T9] usb 2-1: USB disconnect, device number 9 [ 37.066212][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 37.080598][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.089466][ T31] usb 1-1: config 0 descriptor?? [ 37.103122][ T331] usb 4-1: device descriptor read/64, error -71 [ 37.343138][ T331] usb 4-1: device descriptor read/64, error -71 [ 37.379912][ T705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.499720][ T31] magicmouse 0003:05AC:0265.0007: item fetching failed at offset 3/5 [ 37.508069][ T31] magicmouse 0003:05AC:0265.0007: magicmouse hid parse failed [ 37.515609][ T31] magicmouse 0003:05AC:0265.0007: probe with driver magicmouse failed with error -22 [ 37.560120][ T708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.94'. [ 37.603147][ T331] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 37.616175][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 37.616192][ T36] audit: type=1400 audit(1769846885.880:241): avc: denied { map } for pid=709 comm="syz.2.95" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.702262][ T9] usb 1-1: USB disconnect, device number 8 [ 37.733082][ T331] usb 4-1: device descriptor read/64, error -71 [ 37.803133][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.963170][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 37.969616][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.980651][ T331] usb 4-1: device descriptor read/64, error -71 [ 37.986948][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.997872][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.008551][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 38.017050][ T10] usb 2-1: Product: syz [ 38.021216][ T10] usb 2-1: Manufacturer: syz [ 38.028448][ T10] hub 2-1:4.0: USB hub found [ 38.063164][ T483] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.103264][ T331] usb usb4-port1: attempt power cycle [ 38.214592][ T483] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 38.222976][ T483] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 38.230803][ T36] audit: type=1400 audit(1769846886.490:242): avc: denied { create } for pid=716 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.237310][ T10] hub 2-1:4.0: 2 ports detected [ 38.252360][ T36] audit: type=1400 audit(1769846886.520:243): avc: denied { ioctl } for pid=716 comm="syz.0.97" path="socket:[6830]" dev="sockfs" ino=6830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.256768][ T483] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 38.291341][ T483] usb 3-1: config 220 has no interface number 2 [ 38.298123][ T483] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 38.311037][ T36] audit: type=1400 audit(1769846886.570:244): avc: denied { bind } for pid=721 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.311733][ T483] usb 3-1: config 220 interface 0 has no altsetting 0 [ 38.338503][ T483] usb 3-1: config 220 interface 76 has no altsetting 0 [ 38.345507][ T483] usb 3-1: config 220 interface 1 has no altsetting 0 [ 38.354086][ T483] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 38.363369][ T483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.371447][ T483] usb 3-1: Product: syz [ 38.375699][ T483] usb 3-1: Manufacturer: syz [ 38.380330][ T483] usb 3-1: SerialNumber: syz [ 38.443080][ T331] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 38.464034][ T331] usb 4-1: device descriptor read/8, error -71 [ 38.590514][ T483] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 38.596983][ T483] usb 3-1: No valid video chain found. [ 38.602509][ T483] usb 3-1: selecting invalid altsetting 0 [ 38.609705][ T331] usb 4-1: device descriptor read/8, error -71 [ 38.621445][ T483] usb 3-1: USB disconnect, device number 8 [ 38.683170][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.844286][ T31] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 38.851565][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.861419][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 38.873106][ T331] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 38.873944][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 38.889599][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.894237][ T331] usb 4-1: device descriptor read/8, error -71 [ 38.897853][ T31] usb 1-1: Product: syz [ 38.908082][ T31] usb 1-1: Manufacturer: syz [ 38.912673][ T31] usb 1-1: SerialNumber: syz [ 38.918200][ T31] usb 1-1: config 0 descriptor?? [ 38.924380][ T31] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 39.034112][ T331] usb 4-1: device descriptor read/8, error -71 [ 39.042672][ T10] usb 2-1: USB disconnect, device number 10 [ 39.116600][ T730] rust_binder: 81: no such ref 0 [ 39.129490][ T31] usb 1-1: USB disconnect, device number 9 [ 39.144174][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.145046][ T331] usb usb4-port1: unable to enumerate USB device [ 39.637875][ T36] audit: type=1400 audit(1769846887.900:245): avc: denied { map } for pid=736 comm="syz.0.102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.661865][ T36] audit: type=1400 audit(1769846887.900:246): avc: denied { read write } for pid=736 comm="syz.0.102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.959447][ T36] audit: type=1400 audit(1769846888.220:247): avc: denied { name_bind } for pid=749 comm="syz.2.107" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.023336][ T755] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.035702][ T36] audit: type=1400 audit(1769846888.300:248): avc: denied { map } for pid=754 comm="syz.2.109" path="socket:[5817]" dev="sockfs" ino=5817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.058609][ T36] audit: type=1400 audit(1769846888.300:249): avc: denied { read } for pid=754 comm="syz.2.109" path="socket:[5817]" dev="sockfs" ino=5817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.086755][ T36] audit: type=1400 audit(1769846888.350:250): avc: denied { read write } for pid=759 comm="syz.2.110" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.113197][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.120816][ T331] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 40.138225][ T761] bridge0: entered allmulticast mode [ 40.274491][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.284806][ T10] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.295897][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.305549][ T10] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.315652][ T10] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 40.328948][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.336774][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 40.346058][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.354647][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.363949][ T10] usb 1-1: config 0 descriptor?? [ 40.368960][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.377090][ T331] usb 4-1: Product: syz [ 40.381347][ T331] usb 4-1: Manufacturer: syz [ 40.386544][ T331] usb 4-1: SerialNumber: syz [ 40.403097][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.483084][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.554225][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.565167][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.574943][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.588766][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 40.597874][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.600678][ T331] usb 4-1: 0:2 : does not exist [ 40.611532][ T31] usb 2-1: config 0 descriptor?? [ 40.613503][ T331] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 40.628049][ T331] usb 4-1: USB disconnect, device number 8 [ 40.643060][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 40.649270][ T45] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 40.657429][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.667575][ T45] usb 3-1: config 0 has no interface number 0 [ 40.673768][ T45] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 40.684755][ T45] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 40.694609][ T45] usb 3-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.707516][ T45] usb 3-1: config 0 interface 96 has no altsetting 0 [ 40.715590][ T45] usb 3-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f [ 40.724853][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.732883][ T45] usb 3-1: Product: syz [ 40.737091][ T45] usb 3-1: Manufacturer: syz [ 40.741706][ T45] usb 3-1: SerialNumber: syz [ 40.747109][ T45] usb 3-1: config 0 descriptor?? [ 40.791813][ T10] magicmouse 0003:05AC:0265.0008: item fetching failed at offset 3/5 [ 40.801016][ T10] magicmouse 0003:05AC:0265.0008: magicmouse hid parse failed [ 40.808625][ T10] magicmouse 0003:05AC:0265.0008: probe with driver magicmouse failed with error -22 [ 40.953533][ T766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.962553][ T766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.974002][ T45] usb 3-1: USB disconnect, device number 9 [ 41.004000][ T10] usb 1-1: USB disconnect, device number 10 [ 41.143918][ T774] rust_binder: 100: no such ref 0 [ 41.220804][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 41.226993][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.235748][ T31] usb 2-1: USB disconnect, device number 11 [ 41.724886][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.746561][ T789] capability: warning: `syz.1.121' uses 32-bit capabilities (legacy support in use) [ 41.884295][ T31] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 41.892602][ T31] usb 3-1: config 0 has no interface number 0 [ 41.898788][ T31] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 41.909122][ T31] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.918986][ T31] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.930681][ T31] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 41.939971][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.948009][ T31] usb 3-1: Product: syz [ 41.952155][ T31] usb 3-1: Manufacturer: syz [ 41.956996][ T31] usb 3-1: SerialNumber: syz [ 41.962214][ T31] usb 3-1: config 0 descriptor?? [ 41.967481][ T778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.975326][ T31] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 41.983376][ T31] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 42.012160][ T798] syz.3.123 uses obsolete (PF_INET,SOCK_PACKET) [ 42.018500][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 42.152526][ T800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.174380][ T45] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 42.187113][ T45] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 42.190585][ T10] usb 3-1: USB disconnect, device number 10 [ 42.206629][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.213832][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 42.219974][ T10] ftdi_sio 3-1:0.99: device disconnected [ 42.223207][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.237334][ T45] usb 2-1: config 0 descriptor?? [ 42.242710][ T796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 42.252601][ T805] syzkaller0: entered promiscuous mode [ 42.258145][ T805] syzkaller0: entered allmulticast mode [ 42.264092][ T483] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.415358][ T483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.426473][ T483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.436381][ T483] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 42.445631][ T483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.454650][ T483] usb 4-1: config 0 descriptor?? [ 42.603060][ T331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.654264][ T45] wacom 0003:056A:00D5.0009: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 42.664534][ T45] wacom 0003:056A:00D5.0009: hidraw0: USB HID v0.04 Device [HID 056a:00d5] on usb-dummy_hcd.1-1/input0 [ 42.676633][ T45] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D5.0009/input/input6 [ 42.730531][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 42.730546][ T36] audit: type=1400 audit(1769846890.990:261): avc: denied { write } for pid=810 comm="syz.2.127" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.774118][ T331] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.785181][ T331] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.795039][ T331] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 42.808158][ T331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.815053][ T331] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 42.824189][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.843183][ T331] usb 1-1: config 0 descriptor?? [ 42.855237][ T9] usb 2-1: USB disconnect, device number 12 [ 42.862998][ T483] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 42.870183][ T483] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 42.877044][ T483] arvo 0003:1E7D:30D4.000A: item fetching failed at offset 2/7 [ 42.884739][ T483] arvo 0003:1E7D:30D4.000A: parse failed [ 42.890528][ T483] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 42.974834][ T819] netlink: 324 bytes leftover after parsing attributes in process `syz.2.129'. [ 43.253193][ T331] hid (null): unknown global tag 0xe [ 43.259844][ T331] magicmouse 0003:05AC:0265.000B: unknown global tag 0xe [ 43.266977][ T331] magicmouse 0003:05AC:0265.000B: item 0 0 1 14 parsing failed [ 43.274719][ T331] magicmouse 0003:05AC:0265.000B: magicmouse hid parse failed [ 43.282195][ T331] magicmouse 0003:05AC:0265.000B: probe with driver magicmouse failed with error -22 [ 43.373035][ T821] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 43.374558][ T36] audit: type=1400 audit(1769846891.630:262): avc: denied { load_policy } for pid=820 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.380831][ T821] SELinux: failed to load policy [ 43.455243][ T31] usb 1-1: USB disconnect, device number 11 [ 43.567649][ T484] usb 4-1: USB disconnect, device number 9 [ 43.583253][ T824] rust_binder: 106: no such ref 0 [ 43.971691][ T36] audit: type=1400 audit(1769846898.236:263): avc: denied { mounton } for pid=830 comm="syz.0.133" path="/23/file0" dev="incremental-fs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.995274][ T36] audit: type=1400 audit(1769846898.236:264): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.025020][ T835] tipc: Started in network mode [ 44.030018][ T835] tipc: Node identity a6579cf4a3ed, cluster identity 4711 [ 44.037334][ T835] tipc: Enabled bearer , priority 0 [ 44.077180][ T835] syzkaller0: entered promiscuous mode [ 44.082679][ T835] syzkaller0: entered allmulticast mode [ 44.088591][ T835] tipc: Resetting bearer [ 44.096565][ T834] tipc: Resetting bearer [ 44.108121][ T834] tipc: Disabling bearer [ 44.172715][ T36] audit: type=1400 audit(1769846898.436:265): avc: denied { write } for pid=838 comm="syz.0.136" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.221171][ T36] audit: type=1400 audit(1769846898.486:266): avc: denied { getopt } for pid=843 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.256586][ T853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.265268][ T856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'. [ 44.271548][ T853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.274671][ T856] tipc: Invalid UDP bearer configuration [ 44.281964][ T856] tipc: Enabling of bearer rejected, failed to enable media [ 44.543125][ T484] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 44.544014][ T36] audit: type=1400 audit(1769846898.816:267): avc: denied { ioctl } for pid=871 comm="syz.3.147" path="socket:[8449]" dev="sockfs" ino=8449 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.553206][ T482] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.653444][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.734429][ T482] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 44.743558][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.753311][ T482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.761610][ T484] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 44.770946][ T482] usb 3-1: config 0 descriptor?? [ 44.775945][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.784072][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.793253][ T484] usb 2-1: config 0 descriptor?? [ 44.814225][ T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.825324][ T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.835233][ T31] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.848071][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.854717][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 44.864314][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.872928][ T31] usb 1-1: config 0 descriptor?? [ 44.944104][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.954362][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.965556][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.974737][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.982773][ T45] usb 4-1: Product: syz [ 44.986968][ T45] usb 4-1: Manufacturer: syz [ 44.991600][ T45] usb 4-1: SerialNumber: syz [ 45.197275][ T863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.207019][ T863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.218043][ T482] wacom 0003:056A:00B8.000C: unknown main item tag 0x2 [ 45.225286][ T861] netlink: 'syz.1.143': attribute type 28 has an invalid length. [ 45.226899][ T45] usb 4-1: 0:2 : does not exist [ 45.238119][ T482] wacom 0003:056A:00B8.000C: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 45.248479][ T484] uclogic 0003:28BD:0055.000D: interface is invalid, ignoring [ 45.258296][ T45] usb 4-1: USB disconnect, device number 10 [ 45.266065][ T482] wacom 0003:056A:00B8.000C: hidraw0: USB HID v0.02 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 45.280458][ T482] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.000C/input/input10 [ 45.294714][ T31] hid (null): unknown global tag 0xe [ 45.297123][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.301396][ T31] magicmouse 0003:05AC:0265.000E: unknown global tag 0xe [ 45.326096][ T31] magicmouse 0003:05AC:0265.000E: item 0 0 1 14 parsing failed [ 45.337452][ T31] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 45.345290][ T31] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22 [ 45.423635][ T31] usb 3-1: USB disconnect, device number 11 [ 45.439520][ T482] usb 2-1: USB disconnect, device number 13 [ 45.497133][ T45] usb 1-1: USB disconnect, device number 12 [ 45.753193][ T876] kvm: kvm [875]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x0 [ 45.763598][ T876] kvm: kvm [875]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0xb800 [ 45.836986][ T36] audit: type=1400 audit(1769846900.106:268): avc: denied { create } for pid=879 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.838271][ T880] fuseblk: Bad value for 'fd' [ 45.892991][ T885] Zero length message leads to an empty skb [ 45.984877][ T899] rust_binder: 131: no such ref 0 [ 46.069322][ T36] audit: type=1400 audit(1769846900.336:269): avc: denied { read } for pid=905 comm="syz.1.156" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.093122][ T36] audit: type=1400 audit(1769846900.336:270): avc: denied { open } for pid=905 comm="syz.1.156" path="/42/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.305369][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.463091][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 46.475032][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.483478][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.493757][ T45] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.506733][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 46.515444][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.524560][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.532785][ T45] usb 1-1: Product: syz [ 46.537218][ T45] usb 1-1: Manufacturer: syz [ 46.542150][ T45] usb 1-1: SerialNumber: syz [ 46.750642][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 46.755916][ T940] rust_binder: 132: no such ref 0 [ 46.767374][ T45] usb 1-1: USB disconnect, device number 13 [ 46.773227][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.793107][ T331] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.924273][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 46.933434][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.941882][ T9] usb 3-1: config 0 descriptor?? [ 46.948228][ T331] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.959260][ T331] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.969253][ T331] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 46.982076][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 46.988704][ T331] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 46.997774][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.006512][ T331] usb 2-1: config 0 descriptor?? [ 47.350334][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.358641][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.366786][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.374931][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.383101][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.391211][ T9] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x0 [ 47.413683][ T331] hid (null): unknown global tag 0xe [ 47.420580][ T331] magicmouse 0003:05AC:0265.0010: unknown global tag 0xe [ 47.428006][ T331] magicmouse 0003:05AC:0265.0010: item 0 0 1 14 parsing failed [ 47.435691][ T331] magicmouse 0003:05AC:0265.0010: magicmouse hid parse failed [ 47.443229][ T331] magicmouse 0003:05AC:0265.0010: probe with driver magicmouse failed with error -22 [ 47.551009][ T45] usb 3-1: USB disconnect, device number 12 [ 47.615479][ T483] usb 2-1: USB disconnect, device number 14 [ 47.833066][ T331] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.984180][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.995307][ T331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.004366][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.013203][ T331] usb 4-1: config 0 descriptor?? [ 48.064815][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 48.064830][ T36] audit: type=1400 audit(1769846902.336:274): avc: denied { setopt } for pid=948 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.343094][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.449054][ T331] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 48.458502][ T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input13 [ 48.473095][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.523112][ T483] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 48.533665][ T331] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 48.673092][ T483] usb 3-1: device descriptor read/64, error -71 [ 48.705282][ T36] audit: type=1400 audit(1769846902.976:275): avc: denied { bpf } for pid=964 comm="syz.1.173" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.726141][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.803677][ T36] audit: type=1400 audit(1769846903.076:276): avc: denied { read } for pid=969 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.869731][ T972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=23577 sclass=netlink_xfrm_socket pid=972 comm=syz.1.175 [ 48.896254][ T975] rust_binder: 176: no such ref 0 [ 48.913063][ T483] usb 3-1: device descriptor read/64, error -71 [ 48.973073][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.981145][ T484] usb 4-1: USB disconnect, device number 11 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 49.120072][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.146354][ T36] audit: type=1400 audit(1769846903.416:277): avc: denied { read write } for pid=997 comm="ip" path="/dev/console" dev="rootfs" ino=98 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 49.153085][ T483] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 49.178705][ T36] audit: type=1400 audit(1769846903.446:278): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 49.223485][ T36] audit: type=1400 audit(1769846903.456:279): avc: denied { ioctl } for pid=960 comm="syz.2.172" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 OK Stopping iptables: [ 49.282907][ T36] audit: type=1400 audit(1769846903.546:280): avc: denied { read write } for pid=1002 comm="iptables" path="/dev/console" dev="rootfs" ino=98 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 49.307531][ T36] audit: type=1400 audit(1769846903.556:281): avc: denied { search } for pid=1002 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 49.329629][ T36] audit: type=1400 audit(1769846903.556:282): avc: denied { write } for pid=1002 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 49.352502][ T483] usb 3-1: device descriptor read/64, error -71 [ 49.359790][ T36] audit: type=1400 audit(1769846903.556:283): avc: denied { add_name } for pid=1002 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 done [ 49.381476][ T9] usb 1-1: device descriptor read/64, error -71 Stopping klogd: [ 49.493170][ T9] usb usb1-port1: attempt power cycle OK Stopping acpid: [ 49.593164][ T483] usb 3-1: device descriptor read/64, error -71 [ 49.658914][ T1022] 9p: Unknown Cache mode or invalid value fs [ 49.703305][ T483] usb usb3-port1: attempt power cycle [ 49.833138][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.854393][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.953097][ T331] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.984450][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.043181][ T483] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 50.064419][ T483] usb 3-1: device descriptor read/8, error -71 [ 50.104487][ T331] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.115414][ T331] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.125177][ T331] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 50.137982][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.144603][ T331] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 50.153745][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.162235][ T331] usb 4-1: config 0 descriptor?? [ 50.194450][ T483] usb 3-1: device descriptor read/8, error -71 [ 50.223101][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 50.244114][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.374210][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.433213][ T483] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 50.454176][ T483] usb 3-1: device descriptor read/8, error -71 [ 50.483175][ T9] usb usb1-port1: unable to enumerate USB device [ 50.543158][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd OK [ 50.571792][ T331] magicmouse 0003:05AC:0265.0012: item fetching failed at offset 3/5 Stopping syslogd[ 50.580627][ T331] magicmouse 0003:05AC:0265.0012: magicmouse hid parse failed : [ 50.589350][ T331] magicmouse 0003:05AC:0265.0012: probe with driver magicmouse failed with error -22 stopped /sbin/sy[ 50.600145][ T483] usb 3-1: device descriptor read/8, error -71 slogd (pid 92) OK umount: can't remount debugfs read-only [ 50.693127][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 50.699739][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.713113][ T45] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 50.713613][ T483] usb usb3-port1: unable to enumerate USB device umount: sysfs bu[ 50.733123][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 sy - remounted read-only umount: devtmpfs busy - remounted read[ 50.745884][ T45] usb 2-1: config 0 descriptor?? -only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.141 closed by remote host. Sent SIGTERM to all processes [ 50.828879][ T482] usb 4-1: USB disconnect, device number 12 [ 50.854668][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 50.860717][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.890528][ T45] usb 2-1: USB disconnect, device number 15 [ 50.983752][ T293] bridge_slave_1: left allmulticast mode [ 50.989429][ T293] bridge_slave_1: left promiscuous mode [ 50.995220][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.002780][ T293] bridge_slave_0: left allmulticast mode [ 51.008536][ T293] bridge_slave_0: left promiscuous mode [ 51.014352][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.174558][ T293] tipc: Left network mode [ 51.179978][ T293] veth1_macvtap: left promiscuous mode [ 51.185761][ T293] veth0_vlan: left promiscuous mode [ 51.485847][ T293] bridge_slave_1: left allmulticast mode [ 51.491513][ T293] bridge_slave_1: left promiscuous mode [ 51.497280][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.505306][ T293] bridge_slave_0: left allmulticast mode [ 51.510969][ T293] bridge_slave_0: left promiscuous mode [ 51.516791][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.524514][ T293] bridge_slave_1: left allmulticast mode [ 51.530147][ T293] bridge_slave_1: left promiscuous mode [ 51.535834][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.543303][ T293] bridge_slave_0: left allmulticast mode [ 51.548940][ T293] bridge_slave_0: left promiscuous mode [ 51.554605][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.585362][ T293] bridge0 (unregistering): left allmulticast mode [ 51.746807][ T293] veth1_macvtap: left promiscuous mode [ 51.752406][ T293] veth0_vlan: left promiscuous mode [ 51.758061][ T293] veth1_macvtap: left promiscuous mode [ 51.763620][ T293] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 52.949817][ T1038] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 52.956798][ T1038] ACPI: PM: Preparing to enter system sleep state S5 [ 52.963721][ T1038] kvm: exiting hardware virtualization [ 52.969246][ T1038] reboot: Power down serialport: VM disconnected.