last executing test programs: 35.270314532s ago: executing program 1 (id=285): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0xffffffffffffffab, 0x6}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x21}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd63e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x890) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xf, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x41}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x10, "ce687158"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x0, 0x6, 0x0, 0x6], 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x9b, "2ce6"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x9, 0xa, "cda114"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x401, 0x1, 0x3, 0x5, 0x6, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x10, 0x40, 0x41, 0x9}, @as_header={0x7, 0x24, 0x1, 0xff, 0x4b, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x0, 0x3, {0x7, 0x25, 0x1, 0x4, 0x69, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xedb, 0x4, 0x7}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x4, 0x1, "f84694fd"}, @as_header={0x7, 0x24, 0x1, 0x79, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x51, 0x7a, 0x10, {0x7, 0x25, 0x1, 0x4, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x9, 0x79, 0x7, 0x8, 0x2b}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x457}}, {0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "2ee2452af4ded97052974eeafeed62827dbc2847fe661a430f98ce37aae69690f63db9cf6cbd848f50dfbe972c93f4ab8fb2b81f182f69a449f2c7d67384f4f4b565eaac6fae54a56d555b9e5f1c0388773acb4d2286a96b9071621445b3d7653eab9e91d96bcc2c501569c4a9c0ac18da16dc1faf2c77017362b67309a3a5bc88c4555820c8d7d218c763878ae1f0"}}, {0x2, &(0x7f0000000580)=@string={0x2}}, {0xc8, &(0x7f00000005c0)=@string={0xc8, 0x3, "43c399e5c34fdde8cfc07af82de6c5ad6717b136c9aa053d51ec6d6063397bc2163103ca64e15770cf89ce1af5490d9670eafe64156e19a973129a6d541c09f9ad566e2b08b578ad05d2a6f5767048af2c18aded3faab735558f3a23d95a645a4a0df98622d89bfb11af1412bff1ac8bd0945a1443374f509f5e39fd8f5457fa4e0da5b6a8fafa4d94712873e4057b574c0eb30ece95234ae282456355946ac14617b865cda72f2dcb7fd5f44af80f230be123586dbaf206c9e2ec7554c53bce5eef2923f6a8"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x446}}]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a17b588067a7a1538964b5c24517e09b50a2cfd64c280ac81cd0"}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c894) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000900)={0x2, 0x0, [{0xd, 0xf, 0x2, 0x8001, 0x2, 0x0, 0x9}, {0x4, 0xfffffffe, 0x0, 0x100, 0x80, 0x5d, 0x7}]}) syz_usb_connect$cdc_ncm(0x2, 0x95, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x3, 0x10, 0x58, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ce9c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x200, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0xd}, [@obex={0x5, 0x24, 0x15, 0xc105}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x7ff}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x6, 0xf0, 0x1, 0x8, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0xfb, 0x0, 0x9, 0x7f}, @obex={0x5, 0x24, 0x15, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x40, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x6, 0x3}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x111, 0xa, 0xb, 0x3, 0x20, 0x7}, 0x4e, &(0x7f0000000a80)={0x5, 0xf, 0x4e, 0x4, [@ptm_cap={0x3}, @generic={0x34, 0x10, 0x2, "c1ff971180c7b90983dcf136194b1bab542dfd92cffa95ef40fa1798f1f44fa6b64a2cc6330ae81b54437cbbb615689333"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x8f8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0xe4, 0x1, 0x18}]}, 0x3, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40b}}, {0x7d, &(0x7f0000000b40)=@string={0x7d, 0x3, "71a1f43046dc743478dfb945bb5a0823c24823f86c315f6917ef849f24c6008b5f57f86f71f89f0ee4ff59d276defde9113bc0454d34ccd09268e3edc6b3a887489938bfd9a163fd2f0a3559e675fab537fd26e18e5197d8b8d422e5739ba480fe80af2492656139a0ada2811883935ee0991d60a29e46e3e598d9"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r4 = accept4$packet(r0, &(0x7f0000000c40), &(0x7f0000000c80)=0x14, 0x800) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000d40)={0x9, &(0x7f0000000cc0)=[{0x5, 0x7, 0x1, 0x7}, {0x1, 0x0, 0x0, 0x1000}, {0x85, 0x4, 0x26, 0x8}, {0x7f, 0x6, 0x5, 0x7f}, {0x400, 0xff, 0x6, 0xfff}, {0x1000, 0x6, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x8}, {0x7, 0xd4, 0xc0, 0x9}, {0x5, 0x2, 0x7, 0x7}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000dc0)={0x6, &(0x7f0000000d80)=[{0x0, 0x3b, 0x5, 0xffffff33}, {0x86, 0x5, 0x0, 0x8d40}, {0x0, 0x5, 0x8, 0xa}, {0x9, 0xe, 0x9, 0x3}, {0x5, 0x6, 0x81, 0x81}, {0x9, 0x0, 0xf9}]}, 0x10) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000e40)={0x8000000, {{0x2, 0x4e20, @broadcast}}, 0x1, 0x2, [{{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @loopback}}]}, 0x190) syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x7, 0x40, 0xbb, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "6eb391"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x5, 0x8, 0x9}, [@acm={0x4, 0x24, 0x2, 0x4}, @ncm={0x6, 0x24, 0x1a, 0xef, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x81, 0x18}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x40}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x1, [0x200, 0x7, 0x8001, 0x5, 0x0, 0xafe9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x110, 0xff, 0x4, 0x8f, 0xff, 0x3}, 0xb9, &(0x7f0000001100)={0x5, 0xf, 0xb9, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x37, 0x5, 0x6, 0xf0f, 0xfffb, [0xff0030, 0xff0030, 0xf, 0x4100, 0xc000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x7d, 0xf7, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x273, 0x0, 0xc9}, @generic={0x73, 0x10, 0xb, "003ebfe366e61133caffd119c2a4ae421aa41a61d1d10e68950a7fe10400b407e87f3e3fc37a689ceb57ba9c7195b53f6a55f083538ea2fedc61d287983404f7b59328e5dede1e82320da40d4b65eac40a801bc19c733258459baebd523f0b66ce13f3f59adff6db6a9aca7320a24766"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xc, 0x2}]}, 0x2, [{0x6d, &(0x7f00000011c0)=@string={0x6d, 0x3, "6b35d29749ba28fc045dbbbbb5a9668cf8262df64bb6f425133dae54a698bb69f30bc31687bbf8bfc5046b8b744f5f2b833201f21aa256c78a4acaca06eb6f25b5afea134f0431037c19e791789a9a0d2c9c921a4de47a25c57688790295f631f8cd94a233432155647524"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x2c09}}]}) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000012c0)={'custom1\x00'}) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000001400)) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000001540)={0x1, 0x0, @ioapic={0xdddd0000, 0x80000001, 0x9, 0x559, 0x0, [{0xff, 0xe8, 0x4, '\x00', 0xe}, {0x9, 0x2, 0x5, '\x00', 0x5}, {0x2c, 0xa, 0x7}, {0x9, 0x7, 0xbc, '\x00', 0x6}, {0x1, 0x4, 0x3, '\x00', 0x1d}, {0xf, 0x9, 0x4, '\x00', 0x8}, {0x0, 0x80, 0x3, '\x00', 0xdb}, {0x4, 0x6, 0x0, '\x00', 0x4}, {0xb4, 0x7f, 0x0, '\x00', 0x1}, {0x1, 0x3, 0x40, '\x00', 0x3b}, {0x2, 0xb2, 0x6, '\x00', 0x5}, {0x2, 0x7a, 0x5, '\x00', 0x8}, {0x5b, 0x2, 0xa6, '\x00', 0x3}, {0x1, 0x5, 0x99, '\x00', 0x8}, {0x80, 0x8, 0x80, '\x00', 0x5}, {0x3, 0x9a, 0xfb, '\x00', 0xd}, {0x2, 0x6, 0x7, '\x00', 0xe}, {0x3, 0x5, 0x0, '\x00', 0x71}, {0x3, 0x8, 0x4, '\x00', 0x3f}, {0x1, 0x5, 0xa, '\x00', 0x8c}, {0x40, 0x6, 0x52, '\x00', 0x8}, {0x8, 0x0, 0x2, '\x00', 0x6}, {0x5, 0x1, 0x0, '\x00', 0xe}, {0x7, 0x81, 0xff, '\x00', 0x2}]}}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000017c0)={0xfffffffffffffff7, 0x8, '\x00', 0x1, &(0x7f0000001780)=[0x0]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f0000001840)={0x1, 0x0, [{0x0, 0x6, 0x2, 0x9, 0x80, 0xfffffffc, 0x8001}]}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x10020, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f00000018c0)={0x0, 0x2710}, 0x10) write$tun(r7, &(0x7f0000001900)={@void, @val={0x1, 0x4, 0x3, 0x2, 0x100, 0x401}, @arp=@generic={0x302, 0xa01, 0x6, 0x9, 0x1, @empty, "c8b80f01e663d11116", @link_local, '?'}}, 0x28) r8 = getpid() kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r7, &(0x7f0000001940)={r5, r1, 0x7}) syz_pidfd_open(r8, 0x0) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000001980)) 34.003847134s ago: executing program 1 (id=299): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) ioctl$TCFLSH(r2, 0x800455c9, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async) ioctl$TCFLSH(r2, 0x800455c9, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 31.938621965s ago: executing program 1 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)=ANY=[@ANYBLOB="240000006c0001"], 0x24}}, 0x4008000) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (rerun: 32) 31.852652477s ago: executing program 1 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(&(0x7f0000000380)=""/128, 0x80, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="480100001000330600000000008cf10000000000000000000000000000000000000000000000000000000a000000f7000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000bfcffffffffffffff0000000000000000000000000000000000000000000000000000000800000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362"], 0x148}}, 0x0) pwrite64(r2, &(0x7f0000000200)='\x00', 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000240)={0x60, 0x3, &(0x7f00003fd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3, &(0x7f0000000140)=[{0x2, 0x2, 0x10}, {0x7fffffffffffffff, 0x1, 0x5}, {0x9, 0x400, 0x8}], 0x3, 0x45, 0x66, 0x50, 0x0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast2, @local, 0x3, 0x6, 0x0, 0xb00, 0x10001, 0x6310314, r1}) socket$inet_tcp(0x2, 0x1, 0x0) 31.475926127s ago: executing program 1 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) (async) fadvise64(0xffffffffffffffff, 0x2, 0x4, 0x2) (async, rerun: 32) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) wait4(0x0, 0x0, 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x3b) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000002280)='./sys\x00', &(0x7f00000022c0), 0x1d5000, &(0x7f0000002300)={'trans=xen,', {[{@noxattr}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_appraise}, {@hash}, {@seclabel}]}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) unshare(0x64000400) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000001c0)) (async, rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async, rerun: 32) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000500)="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", 0xfc) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 64) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 31.376507199s ago: executing program 1 (id=311): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e21, 0x80, @mcast1, 0xb}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0xfe}}, {{0xa, 0x4e20, 0x5, @private1, 0x7fffffff}}]}, 0x190) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='openpromfs\x00', 0x0, &(0x7f0000000100)='./binderfs\x00') 15.808852986s ago: executing program 32 (id=311): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e21, 0x80, @mcast1, 0xb}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0xfe}}, {{0xa, 0x4e20, 0x5, @private1, 0x7fffffff}}]}, 0x190) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='openpromfs\x00', 0x0, &(0x7f0000000100)='./binderfs\x00') 2.471445888s ago: executing program 0 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x40001fe) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.38038055s ago: executing program 0 (id=556): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vlan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="020114"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4040) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.311041332s ago: executing program 3 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) 2.201317715s ago: executing program 3 (id=559): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c"], 0x1c}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f100197f1800010027bd700000010000000000000000000000000000000000010001e9134e230005000000607300000000009407d0983967e102858a9295001e440a987348c3a5a804892a196477dae863a7ef39c27e7c5ca53f04e034418007475e990dabc502f1160f0d2efc30cd1d6c1ccbe32c7f6147e61a47430c92cca68546ad4d46060cf6d059975c0f0cfbf2acf3128ee1b1a4a8ec841940371ba9467d2690dc8d9de0e74d779f06a61c724cc93715721c6bc9b700"/195, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600000000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a0001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x88, 0x68, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r3, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) ioctl(r3, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) r4 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r4}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.111865527s ago: executing program 0 (id=560): inotify_init() r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r4, 0x1, 0x24, 0x0, &(0x7f0000000740)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/53, 0xfe1d) ioctl$TCFLSH(r5, 0x40087101, 0x20001100) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4000000210001002cbd"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x20008810) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1908, 0x3}, 0x18, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x6, 0xd, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) 2.095652998s ago: executing program 3 (id=561): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000a40)='\t', 0x1, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, 0x0, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x40000) r8 = eventfd(0x7ff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) read(r8, &(0x7f0000001000), 0x8) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) syz_usb_connect(0x3, 0x38, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x91, 0x8, 0x31, 0x20, 0x5ac, 0x1402, 0xe9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x2, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0xfb, 0x3, 0x1, 0x23, 0x58, 0xd7, 0x4, [@generic={0x2, 0x3b}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x0, 0x52, 0xef, 0x77, 0x40}}]}}]}}, 0x0) 1.460519863s ago: executing program 3 (id=562): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x80) landlock_create_ruleset(0x0, 0x0, 0x3) close_range(0xffffffffffffffff, r1, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) 1.135913031s ago: executing program 4 (id=565): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, 0x0) socket(0x10, 0x803, 0x0) eventfd2(0x50, 0x0) (async) r3 = eventfd2(0x50, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) (async) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff}, 0x80000) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)=ANY=[@ANYBLOB='rlog_wakeup_cnt=00001000000000000001,\x00']) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) setsockopt$inet_udp_int(r8, 0x11, 0x66, &(0x7f0000000240), 0x4) (async) setsockopt$inet_udp_int(r8, 0x11, 0x66, &(0x7f0000000240), 0x4) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r12, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="59e5000000000000d2ff00000000000004000000", @ANYRES32=r12]) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendto$packet(r14, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffff5, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r10, r11, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x1000080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="48ef95efb23f98fa8fa834032548dd4698ec1b550b2fbd0f53eb0c97bb912d8446662a2333fdb95fc8af86ad1aeca13e372e2f17ae0ada12d9f88a04160dc20488bc4cb97fbd54e0060ed66cdaae8aca40e9ceeaa297268a47cdbffe7ce8d6825a3dfc08161032a430c9d03f94d39fc4b87b8c25f7a319485a59cd0a195b3cb218ba430100000000000000934380185c9d1548fb436451784887872aa177c7c281089be8b38b624be4e102689bafad0e8fa1d74c6ff78bc3a6f5722106a613025d2bb37c09ab89228826a38ce3959e3fd98e1c6362219d45e134e1918f8500"/237, @ANYRESHEX=r5, @ANYBLOB=',dfltgid=', @ANYRESHEX=r11, @ANYBLOB=',pcr=00000000000000000043,func=MODULE_CHECK,hash,\x00']) utimensat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) write$P9_RVERSION(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYBLOB="ecd35caf72ee6418971dcbf5fefffa443292b86f5eacb37ff0a0b6713c18d03679fa3191ec73d4930e32ba6a87809cb0e37a9d00fc84493b528e3eb50320c01a1f9e67777676ff146087b3ee4d9d9b974001df57"], 0x5) 1.124831282s ago: executing program 0 (id=566): r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)}, 0x20060) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="480100001000330600000000008cf10000000000000000000000000000000000000000000000000000000a000000f7000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000bfcffffffffffffff0000000000000000000000000000000000000000000000000000000800000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362"], 0x148}}, 0x0) 1.067198563s ago: executing program 0 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) 908.499657ms ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)="88cc4bbcc2e86a88229d0d0371b24c81dea401ef8a106f67862b82ad8606097bc90511e6211a00368c81a029f130b04f271373d1fc6d87175295b4657a2ddc4b97347ffd358bfc58eb6c9850b2a75658e8bd", 0x52, 0x3) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 907.996327ms ago: executing program 2 (id=569): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vlan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="020114"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4040) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 907.504737ms ago: executing program 0 (id=570): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xea, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000840)='./file0\x00', 0x60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002c40), 0xa00, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0xf, 0x9, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) lsetxattr$security_capability(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), &(0x7f0000001240)=@v2={0x2000000, [{0xffff5d05, 0x9}, {0x10, 0x9}]}, 0x14, 0x0) faccessat(r1, &(0x7f0000000240)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0xa1) ftruncate(r1, 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000080)={0x6, 0xfffffff4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000db40)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {0x7, 0x5}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 788.86149ms ago: executing program 2 (id=571): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x2, 0xc, 0x0, 0x0, 0x4010000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x80, 0x0, @mcast1}}]}, 0x60}}, 0x800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'netdevsim0\x00', {0x7}, 0xb}) mremap(&(0x7f0000030000/0x2000)=nil, 0x2000, 0xc00000, 0x2, &(0x7f0000000000/0xc00000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000187000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f00009e2000/0x1000)=nil, 0x1000, 0x3000, 0xf, &(0x7f0000f97000/0x3000)=nil) 745.686551ms ago: executing program 2 (id=572): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) read(r0, &(0x7f00000000c0)=""/42, 0x2a) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) 660.233833ms ago: executing program 2 (id=573): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xc821, &(0x7f0000000000)={[{@stats}]}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e", 0x8, 0x3b00, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x100400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) (async) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) (async) keyctl$invalidate(0x15, r1) (async) keyctl$read(0xb, r1, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xc821, &(0x7f0000000000)={[{@stats}]}) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e", 0x8, 0x3b00, 0x0, 0x0) (async) keyctl$setperm(0x5, r1, 0x100400) (async) 652.280133ms ago: executing program 2 (id=574): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x7ff, 0x3) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000001e80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x2, 0x80, {0x7, 0x25, 0x1, 0xc, 0x6, 0xb83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x43, 0x32, {0x7, 0x25, 0x1, 0x0, 0xd0, 0x2}}}}}}}}]}}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffeff}) ptrace$cont(0x21, r0, 0x80000001, 0x2) 612.333904ms ago: executing program 3 (id=575): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c"], 0x1c}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f100197f1800010027bd700000010000000000000000000000000000000000010001e9134e230005000000607300000000009407d0983967e102858a9295001e440a987348c3a5a804892a196477dae863a7ef39c27e7c5ca53f04e034418007475e990dabc502f1160f0d2efc30cd1d6c1ccbe32c7f6147e61a47430c92cca68546ad4d46060cf6d059975c0f0cfbf2acf3128ee1b1a4a8ec841940371ba9467d2690dc8d9de0e74d779f06a61c724cc93715721c6bc9b700"/195, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600000000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a0001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x88, 0x68, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r3, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) ioctl(r3, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) r4 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r4}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 564.024336ms ago: executing program 3 (id=576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x5, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x3, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x8, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x0, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 236.506473ms ago: executing program 4 (id=577): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x10000, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af25, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ppoll(&(0x7f0000000240)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 173.954145ms ago: executing program 4 (id=578): r0 = socket(0x2c, 0x80000, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100}}}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) (async) r2 = getpid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) close_range(r7, r7, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000010401"], 0x64}, 0x1, 0x0, 0x0, 0x20000484}, 0x20008004) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r11, 0x400, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r12, &(0x7f0000000700)={0x2020}, 0x2020) (async) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, 0x0) write$selinux_load(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75780f63addd3912548df50b2d98a7cbc3d790dc2100dc7a2908ad853f69e4022d6224b2149fdcd75e2d6e3128b891ed44515f16fdc44cb60357d8014ec5"], 0x3c) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, 0xffffffffffffffff, 0x0) socket(0x2c, 0x80802, 0x0) (async) unshare(0x20000000) 155.464946ms ago: executing program 4 (id=579): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vlan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="020114"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4040) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 423.87µs ago: executing program 4 (id=580): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x5382, 0x18) fcntl$setlease(r0, 0x400, 0x1) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="03000000e00200000900000000000000", @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000a00100000004000068210700005058464da3559e4739585899790af93f85b868dd882f0e18ddcb4ff6ddb4f8d5c18dd3fe845a8a99067877bc7dcaa8b82ae96cacb2f6b0afc49b629b729382"], 0x80}, 0x1, 0x0, 0x0, 0x20044054}, 0x40040) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xd6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETS(r5, 0x5402, &(0x7f0000001080)={0x5, 0xfffeffff, 0xff7ffff0, 0x6, 0x26, "5865677990831a243d4f25b9b8489e9a1cebb1"}) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000000c0)={0xffe, 0x80000009, 0x5, 0x2f, 0x40, "9614f403854fe9798da11806ce94cb15ea6264", 0x3, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000006c00010029bd7000ffdbdf2508000d00", @ANYRES32, @ANYBLOB="14003b80100016800c00350002f389ff66000000"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r7}, 0x6, 0x8, 0x9}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b0200000004000905"], 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000441d"], 0x38}}], 0x1, 0x46000) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x800}) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1786225710.680:295): avc: denied { mount } for pid=734 comm="syz.1.134" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.698130][ T31] hub 1-1:0.0: 1 port detected [ 56.723426][ T36] audit: type=1400 audit(1786225710.730:296): avc: denied { create } for pid=734 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.812226][ T36] audit: type=1400 audit(1786225710.820:297): avc: denied { read } for pid=737 comm="syz.3.135" path="socket:[6389]" dev="sockfs" ino=6389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.155990][ T36] audit: type=1400 audit(1786225711.160:298): avc: denied { read write } for pid=742 comm="syz.2.136" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.179021][ T36] audit: type=1400 audit(1786225711.160:299): avc: denied { open } for pid=742 comm="syz.2.136" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.316598][ T36] audit: type=1400 audit(1786225711.320:300): avc: denied { set_context_mgr } for pid=718 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.319419][ T719] rust_binder: 718:719 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 128, size: 50) [ 57.336649][ T36] audit: type=1400 audit(1786225711.330:301): avc: denied { map } for pid=718 comm="syz.0.130" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.347574][ T719] rust_binder: 718:719 error while translating object: EINVAL [ 57.370977][ T36] audit: type=1400 audit(1786225711.330:302): avc: denied { call } for pid=718 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.381494][ T719] rust_binder: Failure in copy_transaction_data: EINVAL [ 57.397326][ T719] rust_binder: 718:719 transaction call to 718:0 failed EINVAL, code 0 size 88-24 [ 57.397404][ T437] hub 1-1:0.0: activate --> -90 [ 57.404819][ T36] audit: type=1400 audit(1786225711.330:303): avc: denied { transfer } for pid=718 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.466593][ T31] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 57.606939][ T318] rust_binder: 718: undelivered TRANSACTION_ERROR: 29201 [ 57.615220][ T437] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 57.624360][ T318] usb 1-1: USB disconnect, device number 21 [ 57.634448][ T31] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 57.645405][ T31] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 57.655370][ T31] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.668719][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 57.676381][ T748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.138'. [ 57.678106][ T31] usb 3-1: string descriptor 0 read error: -22 [ 57.691697][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.700844][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.713512][ T743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.721037][ T743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.768484][ T750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=750 comm=syz.3.139 [ 57.781251][ T750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.139'. [ 57.870040][ T756] No source specified [ 57.893872][ T758] capability: warning: `syz.3.142' uses deprecated v2 capabilities in a way that may be insecure [ 57.932734][ T743] sit0: entered promiscuous mode [ 57.939308][ T743] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 57.947098][ T743] netlink: 1 bytes leftover after parsing attributes in process `syz.2.136'. [ 58.017625][ T387] usb 3-1: USB disconnect, device number 14 [ 58.419324][ T777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.428057][ T777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.626632][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 58.776594][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 58.784412][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 58.793718][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.801889][ T437] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 58.809546][ T31] usb 2-1: Product: syz [ 58.813715][ T31] usb 2-1: Manufacturer: syz [ 58.818423][ T31] usb 2-1: SerialNumber: syz [ 58.966623][ T437] usb 3-1: Using ep0 maxpacket: 16 [ 58.973090][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.984122][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.993986][ T437] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 59.003113][ T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.011873][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.014284][ T437] usb 3-1: config 0 descriptor?? [ 59.028280][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.039022][ T775] MTRR 1 not used [ 59.045383][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.055223][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.057904][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 59.075434][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.077028][ T31] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 59.086533][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.103116][ T31] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 59.118217][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 59.131771][ T31] usb 2-1: USB disconnect, device number 24 [ 59.215058][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.386602][ T428] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 59.439951][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.448683][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.458145][ T437] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 59.464834][ T437] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 59.472249][ T437] apple 0003:05AC:024B.0005: parse failed [ 59.478097][ T437] apple 0003:05AC:024B.0005: probe with driver apple failed with error -22 [ 59.547437][ T428] usb 1-1: not running at top speed; connect to a high speed hub [ 59.556052][ T428] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 59.574379][ T428] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 59.585512][ T428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.595918][ T428] usb 1-1: Product: syz [ 59.601343][ T428] usb 1-1: Manufacturer: syz [ 59.606098][ T428] usb 1-1: SerialNumber: syz [ 59.663517][ T658] usb 3-1: USB disconnect, device number 15 [ 59.670351][ T792] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 59.834748][ T428] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 59.841930][ T428] usb 1-1: unit 14 not found! [ 59.860162][ T428] usb 1-1: USB disconnect, device number 22 [ 59.956655][ T437] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 60.116573][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 60.122201][ T437] usb 2-1: no configurations [ 60.127060][ T437] usb 2-1: can't read configurations, error -22 [ 60.256620][ T437] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 60.406614][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 60.412327][ T437] usb 2-1: no configurations [ 60.417035][ T437] usb 2-1: can't read configurations, error -22 [ 60.423519][ T437] usb usb2-port1: attempt power cycle [ 60.696617][ T428] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 60.776643][ T437] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 60.796948][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 60.802580][ T437] usb 2-1: no configurations [ 60.807271][ T437] usb 2-1: can't read configurations, error -22 [ 60.847952][ T428] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 60.856164][ T428] usb 1-1: config 0 has no interface number 0 [ 60.862356][ T428] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 60.874996][ T428] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 60.884244][ T428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.892520][ T428] usb 1-1: Product: syz [ 60.896739][ T428] usb 1-1: Manufacturer: syz [ 60.901372][ T428] usb 1-1: SerialNumber: syz [ 60.906689][ T428] usb 1-1: config 0 descriptor?? [ 60.912017][ T809] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 60.921718][ T428] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:18:c7:e0:6c:c1 [ 60.946570][ T437] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 60.966990][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 60.972724][ T437] usb 2-1: no configurations [ 60.977788][ T437] usb 2-1: can't read configurations, error -22 [ 60.984319][ T437] usb usb2-port1: unable to enumerate USB device [ 61.179195][ T826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.188220][ T826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.356590][ T658] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 61.507739][ T658] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 61.517902][ T658] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 61.527796][ T658] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.540771][ T658] usb 3-1: config 1 interface 0 has no altsetting 0 [ 61.549632][ T658] usb 3-1: string descriptor 0 read error: -22 [ 61.555912][ T658] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.565029][ T658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.574443][ T825] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 61.581762][ T825] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 61.590061][ T658] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 61.852352][ T658] usb 3-1: USB disconnect, device number 16 [ 62.040777][ T831] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 62.045095][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 62.045215][ T36] audit: type=1400 audit(1786225716.050:359): avc: denied { mount } for pid=830 comm="syz.3.164" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.093629][ T36] audit: type=1400 audit(1786225716.100:360): avc: denied { create } for pid=833 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.112937][ T36] audit: type=1400 audit(1786225716.100:361): avc: denied { setopt } for pid=833 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.132155][ T36] audit: type=1400 audit(1786225716.100:362): avc: denied { mounton } for pid=833 comm="syz.3.165" path="/45/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 62.206198][ T834] fuse: root generation should be zero [ 62.403372][ T841] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 62.450813][ T36] audit: type=1400 audit(1786225716.460:363): avc: denied { read append } for pid=842 comm="syz.2.167" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.558399][ T36] audit: type=1400 audit(1786225716.570:364): avc: denied { mount } for pid=847 comm="syz.2.168" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.580576][ T36] audit: type=1400 audit(1786225716.570:365): avc: denied { search } for pid=847 comm="syz.2.168" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.602112][ T36] audit: type=1400 audit(1786225716.570:366): avc: denied { write } for pid=847 comm="syz.2.168" name="current_tracer" dev="tracefs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.624893][ T36] audit: type=1400 audit(1786225716.570:367): avc: denied { open } for pid=847 comm="syz.2.168" path="/36/tracing/current_tracer" dev="tracefs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.754253][ T36] audit: type=1400 audit(1786225716.760:368): avc: denied { write } for pid=852 comm="syz.3.170" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.754647][ T853] random: crng reseeded on system resumption [ 62.797082][ T854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.169'. [ 62.821671][ T854] SELinux: failed to load policy [ 62.896988][ T853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.905656][ T853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.147149][ T809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 66.157294][ T809] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.166228][ T809] bridge_slave_0 (unregistering): left allmulticast mode [ 66.173604][ T809] bridge_slave_0 (unregistering): left promiscuous mode [ 66.180682][ T809] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.191147][ T848] netlink: 'syz.2.168': attribute type 13 has an invalid length. [ 66.248887][ T658] usb 1-1: USB disconnect, device number 23 [ 66.255418][ T658] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 66.369560][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 66.379454][ T885] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 66.389515][ T885] SELinux: failed to load policy [ 66.475047][ T897] raw_sendmsg: syz.1.180 forgot to set AF_INET. Fix it! [ 66.616602][ T658] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 66.777807][ T658] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 66.787988][ T658] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 66.798301][ T658] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.819173][ T658] usb 1-1: config 1 interface 0 has no altsetting 0 [ 66.842240][ T658] usb 1-1: string descriptor 0 read error: -22 [ 66.849678][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.858150][ T658] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.867746][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.876426][ T658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.888165][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.898853][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.908913][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.918830][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.931217][ T872] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 66.942508][ T872] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 66.951148][ T658] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 67.139343][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 67.139363][ T36] audit: type=1400 audit(1786225721.150:396): avc: denied { map } for pid=912 comm="syz.1.182" path="/proc/146/make-it-fail" dev="proc" ino=6869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 67.178789][ T428] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 67.235951][ T658] usb 1-1: USB disconnect, device number 24 [ 67.336593][ T428] usb 3-1: Using ep0 maxpacket: 16 [ 67.343173][ T428] usb 3-1: config index 0 descriptor too short (expected 2340, got 36) [ 67.351582][ T428] usb 3-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 67.362898][ T428] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 67.371919][ T428] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.55 [ 67.381014][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.389816][ T428] usb 3-1: config 0 descriptor?? [ 67.437692][ T36] audit: type=1400 audit(1786225721.450:397): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.466339][ T36] audit: type=1400 audit(1786225721.470:398): avc: denied { accept } for pid=916 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.493515][ T919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.502267][ T919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.511937][ T919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.520556][ T919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.945912][ T36] audit: type=1400 audit(1786225721.950:399): avc: denied { bind } for pid=859 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.968824][ T428] usb 3-1: USB disconnect, device number 17 [ 67.974250][ T36] audit: type=1400 audit(1786225721.980:400): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.054047][ T930] SELinux: policydb version 0 does not match my version range 15-33 [ 68.062302][ T930] SELinux: failed to load policy [ 68.067637][ T930] netlink: 'syz.3.188': attribute type 5 has an invalid length. [ 68.306621][ T428] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 68.356634][ T658] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 68.457865][ T428] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 68.467041][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.475696][ T428] usb 3-1: config 0 descriptor?? [ 68.482580][ T428] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 68.490904][ T428] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 68.506589][ T658] usb 2-1: Using ep0 maxpacket: 16 [ 68.513069][ T658] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.524253][ T658] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.537309][ T658] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.543976][ T658] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 68.553105][ T658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.561953][ T658] usb 2-1: config 0 descriptor?? [ 68.596499][ T36] audit: type=1400 audit(1786225722.600:401): avc: denied { create } for pid=934 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.616094][ T36] audit: type=1400 audit(1786225722.610:402): avc: denied { ioctl } for pid=934 comm="syz.3.189" path="socket:[7612]" dev="sockfs" ino=7612 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.661066][ T939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.191'. [ 68.670074][ T36] audit: type=1400 audit(1786225722.670:403): avc: denied { write } for pid=938 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.692787][ T428] usb 3-1: USB disconnect, device number 18 [ 68.699176][ T939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 68.709556][ T428] ftdi_sio 3-1:0.0: device disconnected [ 68.716344][ T36] audit: type=1400 audit(1786225722.720:404): avc: denied { read } for pid=936 comm="syz.3.190" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.739670][ T36] audit: type=1400 audit(1786225722.720:405): avc: denied { open } for pid=936 comm="syz.3.190" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.781810][ T937] usb usb7: usbfs: process 937 (syz.3.190) did not claim interface 0 before use [ 68.970523][ T658] kye 0003:0458:5015.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 68.981315][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 68.988084][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 68.994821][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.001617][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.008402][ T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 69.016048][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.022868][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.029756][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.036570][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.043425][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.050228][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.057276][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.063994][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.070761][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.077546][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.084252][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.091008][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.097754][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.104465][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.111237][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.118041][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.124773][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.131708][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.138470][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.145202][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.151969][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.158714][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.165421][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.172161][ T927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.172174][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.172239][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.187375][ T927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.201892][ T65] usb 1-1: device descriptor read/64, error -71 [ 69.208250][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.214998][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.221806][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.228580][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.235359][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.242166][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.248954][ T658] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 69.260015][ T658] kye 0003:0458:5015.0006: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 69.270993][ T658] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 69.286556][ T658] kye 0003:0458:5015.0006: tablet enabling failed [ 69.446608][ T65] usb 1-1: device descriptor read/64, error -71 [ 69.546594][ T658] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 69.686626][ T65] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 69.708166][ T658] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 69.718494][ T658] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 69.728531][ T658] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.741824][ T658] usb 3-1: config 1 interface 0 has no altsetting 0 [ 69.752974][ T658] usb 3-1: string descriptor 0 read error: -22 [ 69.759700][ T658] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.769330][ T658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.781665][ T951] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 69.790242][ T951] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 69.810164][ T658] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 69.826628][ T65] usb 1-1: device descriptor read/64, error -71 [ 70.066786][ T65] usb 1-1: device descriptor read/64, error -71 [ 70.092090][ T428] usb 3-1: USB disconnect, device number 19 [ 70.176837][ T65] usb usb1-port1: attempt power cycle [ 70.516569][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 70.537740][ T65] usb 1-1: device descriptor read/8, error -71 [ 70.688047][ T65] usb 1-1: device descriptor read/8, error -71 [ 70.946590][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 70.977706][ T65] usb 1-1: device descriptor read/8, error -71 [ 71.021944][ T387] usb 2-1: USB disconnect, device number 29 [ 71.081610][ T989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.207'. [ 71.107165][ T991] Invalid argument reading file caps for ./file0 [ 71.108223][ T65] usb 1-1: device descriptor read/8, error -71 [ 71.120707][ T991] netlink: 68 bytes leftover after parsing attributes in process `syz.3.208'. [ 71.130767][ T991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=521 sclass=netlink_route_socket pid=991 comm=syz.3.208 [ 71.206852][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 71.233294][ T65] usb usb1-port1: unable to enumerate USB device [ 71.249547][ T997] incfs: Options parsing error. -22 [ 71.254827][ T997] incfs: mount failed -22 [ 71.369415][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 71.378598][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.386668][ T10] usb 3-1: Product: syz [ 71.390945][ T10] usb 3-1: Manufacturer: syz [ 71.395546][ T10] usb 3-1: SerialNumber: syz [ 71.691161][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 71.703253][ T10] usb 3-1: USB disconnect, device number 20 [ 71.770446][ T1009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 71.818658][ T1013] SELinux: ebitmap: empty map [ 71.828145][ T1013] SELinux: failed to load policy [ 71.835909][ T1013] SELinux: policydb version 2084529569 does not match my version range 15-33 [ 71.836501][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.846268][ T1013] SELinux: failed to load policy [ 71.855404][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.867707][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.876321][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.036677][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 72.136593][ T428] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 72.186640][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 72.191902][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 72.200987][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.212598][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.223574][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.236436][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 72.245677][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.253760][ T10] usb 3-1: Product: syz [ 72.257999][ T10] usb 3-1: Manufacturer: syz [ 72.262671][ T10] usb 3-1: SerialNumber: syz [ 72.268711][ T10] usb 3-1: config 0 descriptor?? [ 72.274068][ T1006] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 72.281391][ T428] usb 2-1: device descriptor read/64, error -71 [ 72.286927][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 72.298317][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 72.298335][ T36] audit: type=1400 audit(1786225726.310:431): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=572 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.327058][ T36] audit: type=1400 audit(1786225726.310:432): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=572 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.346693][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 72.351402][ T36] audit: type=1400 audit(1786225726.310:433): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=572 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.378828][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.394980][ T65] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 72.404327][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.412414][ T65] usb 1-1: Product: syz [ 72.416802][ T65] usb 1-1: Manufacturer: syz [ 72.421459][ T65] usb 1-1: SerialNumber: syz [ 72.426880][ T65] usb 1-1: config 0 descriptor?? [ 72.432892][ T65] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 72.483928][ T65] usb 3-1: USB disconnect, device number 21 [ 72.518065][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 72.533429][ T36] audit: type=1326 audit(1786225726.540:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff636f9e0d9 code=0x0 [ 72.537094][ T428] usb 2-1: device descriptor read/64, error -71 [ 72.634624][ T1011] rust_binder: Write failure EINVAL in pid:142 [ 72.636657][ T1011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.651960][ T1011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.660741][ T318] usb 1-1: USB disconnect, device number 29 [ 72.702747][ T36] audit: type=1400 audit(1786225726.710:435): avc: denied { ioctl } for pid=1026 comm="syz.3.220" path="socket:[7043]" dev="sockfs" ino=7043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.728226][ T36] audit: type=1400 audit(1786225726.710:436): avc: denied { bpf } for pid=1026 comm="syz.3.220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.803397][ T1028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.806780][ T428] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 72.813729][ T1028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.828922][ T1028] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 72.839361][ T1028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.847976][ T1028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.856458][ T1028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.865091][ T1028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.947877][ T428] usb 2-1: device descriptor read/64, error -71 [ 73.059116][ T36] audit: type=1400 audit(1786225727.070:437): avc: denied { connect } for pid=1031 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.078780][ T36] audit: type=1400 audit(1786225727.070:438): avc: denied { read } for pid=1031 comm="syz.2.222" laddr=172.20.20.10 lport=4 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.110406][ T36] audit: type=1400 audit(1786225727.120:439): avc: denied { connect } for pid=1035 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.196652][ T428] usb 2-1: device descriptor read/64, error -71 [ 73.209388][ T1043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.220593][ T1043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.326701][ T428] usb usb2-port1: attempt power cycle [ 73.436616][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 73.446650][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 73.586606][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 73.593193][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.601880][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 2047, setting to 1024 [ 73.612992][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 73.623092][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.635801][ T10] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 73.644985][ T65] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 73.654130][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.662199][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.670300][ T10] usb 1-1: Product: syz [ 73.674471][ T10] usb 1-1: Manufacturer: syz [ 73.676672][ T428] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 73.679228][ T65] usb 3-1: Product: syz [ 73.690876][ T10] usb 1-1: SerialNumber: syz [ 73.695894][ T65] usb 3-1: Manufacturer: syz [ 73.700833][ T10] usb 1-1: config 0 descriptor?? [ 73.705904][ T65] usb 3-1: SerialNumber: syz [ 73.711778][ T10] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 73.718552][ T428] usb 2-1: device descriptor read/8, error -71 [ 73.719417][ T10] usb 1-1: No valid video chain found. [ 73.729229][ T1042] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 73.867705][ T428] usb 2-1: device descriptor read/8, error -71 [ 73.911607][ T1045] bridge0: port 1(bond_slave_1) entered blocking state [ 73.918598][ T1045] bridge0: port 1(bond_slave_1) entered disabled state [ 73.925542][ T1045] bond_slave_1: entered allmulticast mode [ 73.931867][ T1045] bond_slave_1: entered promiscuous mode [ 73.943459][ T10] usb 1-1: USB disconnect, device number 30 [ 73.951474][ T65] usb 3-1: USB disconnect, device number 22 [ 73.965110][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.106634][ T428] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 74.127825][ T428] usb 2-1: device descriptor read/8, error -71 [ 74.257860][ T428] usb 2-1: device descriptor read/8, error -71 [ 74.366781][ T428] usb usb2-port1: unable to enumerate USB device [ 74.706589][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 74.706589][ T428] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 74.866609][ T428] usb 3-1: Using ep0 maxpacket: 8 [ 74.868658][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.873550][ T428] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.883199][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.895799][ T428] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.907366][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.913741][ T428] usb 3-1: New USB device found, idVendor=1223, idProduct=2f07, bcdDevice= 0.5c [ 74.933601][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.941853][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.945916][ T428] usb 3-1: config 0 descriptor?? [ 74.974222][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.983638][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.992094][ T10] usb 1-1: Manufacturer: syz [ 74.997873][ T10] usb 1-1: config 0 descriptor?? [ 75.408095][ T10] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 75.415429][ T10] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 75.424733][ T10] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 75.667716][ T1048] binder: Bad value for 'stats' [ 75.675659][ T36] audit: type=1400 audit(1786225729.680:440): avc: denied { mounton } for pid=1047 comm="syz.0.227" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.677708][ T318] usb 1-1: USB disconnect, device number 31 [ 75.797883][ T1067] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 75.849885][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 75.915674][ T1072] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 75.924643][ T1072] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.235'. [ 76.216672][ T318] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 76.396578][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 76.403187][ T318] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 76.411687][ T318] usb 2-1: config 0 has no interface number 0 [ 76.418227][ T318] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 76.428690][ T318] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 76.440675][ T318] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 76.450207][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.456782][ T65] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 76.459107][ T318] usb 2-1: Product: syz [ 76.470422][ T318] usb 2-1: Manufacturer: syz [ 76.475137][ T318] usb 2-1: SerialNumber: syz [ 76.486746][ T318] usb 2-1: config 0 descriptor?? [ 76.493071][ T1076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.500633][ T1076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.619151][ T65] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 76.628293][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.636479][ T65] usb 1-1: Product: syz [ 76.640919][ T65] usb 1-1: Manufacturer: syz [ 76.645572][ T65] usb 1-1: SerialNumber: syz [ 76.651250][ T65] usb 1-1: config 0 descriptor?? [ 76.667230][ T65] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 76.709349][ T1076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.735533][ T318] asix 2-1:0.34: probe with driver asix failed with error -71 [ 76.758571][ T318] usb 2-1: USB disconnect, device number 34 [ 76.859732][ T437] usb 1-1: USB disconnect, device number 32 [ 76.984484][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 77.051105][ T1103] netlink: 'syz.3.245': attribute type 12 has an invalid length. [ 77.086579][ T318] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 77.197812][ T1113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.207456][ T1113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.218174][ T1113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.228953][ T1113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.268107][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.276811][ T318] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 7 [ 77.289930][ T318] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 77.299444][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.307703][ T318] usb 2-1: Product: syz [ 77.312144][ T318] usb 2-1: Manufacturer: syz [ 77.317037][ T318] usb 2-1: SerialNumber: syz [ 77.527209][ T318] usb 2-1: BAAD GENERIC IO: no channels? [ 77.534973][ T318] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.545981][ T428] usbhid 3-1:0.0: can't add hid device: -71 [ 77.553095][ T318] usb 2-1: USB disconnect, device number 35 [ 77.559137][ T428] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 77.570662][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.577257][ T428] usb 3-1: USB disconnect, device number 23 [ 77.626652][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 77.759779][ T1119] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 77.771412][ T1119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.776705][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 77.782329][ T1119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.790424][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 77.801723][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.809786][ T10] usb 1-1: Product: syz [ 77.813975][ T10] usb 1-1: Manufacturer: syz [ 77.818648][ T10] usb 1-1: SerialNumber: syz [ 77.926601][ T428] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 78.027442][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.037146][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.057225][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.068865][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 78.076688][ T428] usb 3-1: Using ep0 maxpacket: 16 [ 78.083272][ T10] usb 1-1: USB disconnect, device number 33 [ 78.093889][ T428] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.103880][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.108589][ T428] usb 3-1: config 0 has no interface number 0 [ 78.126269][ T428] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 78.136870][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.147850][ T428] usb 3-1: config 0 descriptor?? [ 78.383155][ T1126] fuse: Bad value for 'fd' [ 78.390821][ T1126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.399548][ T1126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.577192][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 78.577213][ T36] audit: type=1400 audit(1786225732.590:454): avc: denied { map } for pid=1128 comm="syz.0.255" path="pipe:[3022]" dev="pipefs" ino=3022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.755209][ T1117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.763905][ T1117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.773691][ T428] uclogic 0003:28BD:0071.0008: pen parameters not found [ 78.784309][ T428] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 78.798021][ T36] audit: type=1400 audit(1786225732.810:455): avc: denied { ioctl } for pid=1138 comm="syz.0.259" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.829902][ T36] audit: type=1400 audit(1786225732.840:456): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.853980][ T36] audit: type=1400 audit(1786225732.840:457): avc: denied { open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.878205][ T36] audit: type=1400 audit(1786225732.840:458): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.903949][ T36] audit: type=1400 audit(1786225732.860:459): avc: denied { read write } for pid=1142 comm="syz.1.261" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.927330][ T36] audit: type=1400 audit(1786225732.860:460): avc: denied { open } for pid=1142 comm="syz.1.261" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.936686][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 78.983971][ T658] usb 3-1: USB disconnect, device number 24 [ 79.086636][ T10] usb 1-1: device descriptor read/64, error -71 [ 79.306630][ T318] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 79.326600][ T10] usb 1-1: device descriptor read/64, error -71 [ 79.457788][ T36] audit: type=1400 audit(1786225733.470:461): avc: denied { read } for pid=1142 comm="syz.1.261" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.480398][ T36] audit: type=1400 audit(1786225733.470:462): avc: denied { open } for pid=1142 comm="syz.1.261" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.505530][ T36] audit: type=1400 audit(1786225733.470:463): avc: denied { ioctl } for pid=1142 comm="syz.1.261" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.533819][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.543757][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.586610][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 79.615969][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.630511][ T318] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 79.646554][ T318] usb 2-1: can't read configurations, error -71 [ 79.665134][ T1154] tipc: Started in network mode [ 79.670328][ T1154] tipc: Node identity 7f000001, cluster identity 4711 [ 79.677416][ T1154] tipc: Enabling of bearer rejected, failed to enable media [ 79.694999][ T1154] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 79.703482][ T1154] tipc: Enabled bearer , priority 10 [ 79.716580][ T10] usb 1-1: device descriptor read/64, error -71 [ 79.788224][ T1169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.269'. [ 79.976812][ T10] usb 1-1: device descriptor read/64, error -71 [ 80.076610][ T318] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 80.086776][ T10] usb usb1-port1: attempt power cycle [ 80.227654][ T318] usb 2-1: Using ep0 maxpacket: 8 [ 80.233965][ T318] usb 2-1: config 7 has an invalid interface number: 202 but max is 2 [ 80.242393][ T318] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 80.251292][ T318] usb 2-1: config 7 has an invalid interface number: 176 but max is 2 [ 80.259530][ T318] usb 2-1: config 7 has an invalid interface number: 153 but max is 2 [ 80.267753][ T318] usb 2-1: config 7 has no interface number 0 [ 80.273842][ T318] usb 2-1: config 7 has no interface number 1 [ 80.279961][ T318] usb 2-1: config 7 has no interface number 2 [ 80.286077][ T318] usb 2-1: config 7 interface 202 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 16 [ 80.296061][ T318] usb 2-1: config 7 interface 202 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 80.307215][ T318] usb 2-1: config 7 interface 202 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 80.317490][ T318] usb 2-1: config 7 interface 202 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 80.328416][ T318] usb 2-1: config 7 interface 202 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 80.339415][ T318] usb 2-1: config 7 interface 202 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 80.350351][ T318] usb 2-1: config 7 interface 202 altsetting 9 endpoint 0x8 has invalid maxpacket 991, setting to 64 [ 80.361285][ T318] usb 2-1: config 7 interface 202 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 80.372060][ T318] usb 2-1: config 7 interface 176 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 80.383072][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 80.393851][ T318] usb 2-1: config 7 interface 176 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 80.404765][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 80.415520][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 80.426269][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 80.437008][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 80.446720][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 80.447813][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 80.465974][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 80.476767][ T318] usb 2-1: config 7 interface 176 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 80.487697][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 80.488217][ T10] usb 1-1: device descriptor read/8, error -71 [ 80.498491][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 80.515410][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 80.526215][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 80.536987][ T318] usb 2-1: config 7 interface 176 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 80.547936][ T318] usb 2-1: config 7 interface 176 altsetting 1 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 80.566732][ T318] usb 2-1: config 7 interface 153 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 80.578493][ T318] usb 2-1: config 7 interface 202 has no altsetting 0 [ 80.585325][ T318] usb 2-1: config 7 interface 176 has no altsetting 0 [ 80.593990][ T318] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice=d4.ec [ 80.603376][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.611665][ T318] usb 2-1: Product: syz [ 80.615941][ T318] usb 2-1: Manufacturer: Ь [ 80.620717][ T318] usb 2-1: SerialNumber: syz [ 80.627722][ T1163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.635018][ T1163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.638338][ T10] usb 1-1: device descriptor read/8, error -71 [ 80.816582][ T387] tipc: Node number set to 2130706433 [ 80.847784][ T318] pl2303 2-1:7.202: required endpoints missing [ 80.856956][ T318] pl2303 2-1:7.176: required endpoints missing [ 80.864728][ T318] pl2303 2-1:7.153: required endpoints missing [ 80.872674][ T318] usb 2-1: USB disconnect, device number 37 [ 80.886724][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 80.907749][ T10] usb 1-1: device descriptor read/8, error -71 [ 80.956845][ T658] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 81.037683][ T10] usb 1-1: device descriptor read/8, error -71 [ 81.108099][ T658] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.116692][ T658] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.129194][ T658] usb 3-1: string descriptor 0 read error: -22 [ 81.135517][ T658] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 81.144700][ T658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.153237][ T10] usb usb1-port1: unable to enumerate USB device [ 81.400289][ T1196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.409093][ T1196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.418166][ T1196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.427347][ T1196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.437093][ T1196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.447218][ T1196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.018290][ T658] usb 3-1: USB disconnect, device number 25 [ 82.208222][ T1215] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 82.222126][ T1215] SELinux: failed to load policy [ 82.230709][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.239332][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.602773][ T1236] batadv_slave_1: entered promiscuous mode [ 82.615210][ T1236] batadv_slave_1: left promiscuous mode [ 82.656593][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 82.806579][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 82.813071][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 81, changing to 7 [ 82.826029][ T10] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 82.835252][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.843349][ T10] usb 2-1: Manufacturer: ⩅烙青艢뱽䜨曾䌚頏㟎邖㷶쾹뵬辄鞾錬꯴늏Ᾰ⼘ꑩ훇葳斵곪깯ꕔ啭鹛ᱟ蠃㩷䷋蘢殩熐ᑢ덅旗ꬾ醞毙Ⳍᕐ쑩삩᢬ᛚ῜ⲯŷ扳玶ꌉ벥쒈塕젠틗윘蝣 [ 82.865728][ T10] usb 2-1: SerialNumber: 썃促샏귅ᝧ㚱꫉㴅恭㥣쉻ㄖ쨃灗觏ᫎ䧵阍擾渕ꤙታ涚᱔契嚭⭮딈굸툅灶꽈ᠬ꨿㖷轕⌺嫙婤ൊ蛹ﮛ꼑ሔ讬铐ᑚ㝃偏废ﴹ咏練ൎ뚥直䷺熔猨פ坻์ຳ闎䨣苢捅鑕셪ᝆ斸ꟍ⴯翋⌏堣멭۲痬암츻〈ꣶ [ 83.098821][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.107904][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.119577][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.130539][ T1244] tipc: Started in network mode [ 83.135533][ T1244] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 83.137396][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.147666][ T1244] tipc: Enabled bearer , priority 10 [ 83.162495][ T10] usb 2-1: 1:1 : unsupported sample bitwidth 64 in 16 bytes [ 83.170359][ T10] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 83.179320][ T10] usb 2-1: found format II with max.bitrate = 2, frame size=3803 [ 83.190165][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 83.200437][ T10] usb 2-1: USB disconnect, device number 38 [ 83.220256][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.456585][ T318] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 83.606561][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 83.612888][ T318] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.623935][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 83.635007][ T318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.648645][ T318] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 83.658016][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.671816][ T1259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.680556][ T318] usb 1-1: config 0 descriptor?? [ 83.685872][ T1259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.698316][ T1259] netlink: 964 bytes leftover after parsing attributes in process `syz.3.298'. [ 83.720041][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.736695][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 83.886590][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 83.893037][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 83.901448][ T10] usb 3-1: config 1 has no interface number 0 [ 83.908234][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.910523][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 83.916588][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.926366][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.933213][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.943665][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 83.950324][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.959788][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 83.964603][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.974352][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 83.980855][ T318] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 83.980957][ T318] magicmouse 0003:05AC:0324.0009: unbalanced collection at end of report description [ 83.989910][ T10] usb 3-1: Product: syz [ 83.997159][ T318] magicmouse 0003:05AC:0324.0009: magicmouse hid parse failed [ 84.006806][ T10] usb 3-1: Manufacturer: syz [ 84.010268][ T318] magicmouse 0003:05AC:0324.0009: probe with driver magicmouse failed with error -22 [ 84.018317][ T10] usb 3-1: SerialNumber: syz [ 84.038463][ T1257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.045671][ T1257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.247350][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 84.247370][ T36] audit: type=1400 audit(1786225738.260:542): avc: denied { write } for pid=1273 comm="syz.3.300" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.277658][ T65] tipc: Node number set to 4269801492 [ 84.279680][ T36] audit: type=1400 audit(1786225738.260:543): avc: denied { create } for pid=1273 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.306465][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.315127][ T36] audit: type=1400 audit(1786225738.260:544): avc: denied { setopt } for pid=1273 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.315174][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.342473][ T36] audit: type=1400 audit(1786225738.260:545): avc: denied { ioctl } for pid=1273 comm="syz.3.300" path="socket:[8982]" dev="sockfs" ino=8982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.367163][ T36] audit: type=1400 audit(1786225738.260:546): avc: denied { bind } for pid=1273 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.386437][ T36] audit: type=1400 audit(1786225738.310:547): avc: denied { read write } for pid=1275 comm="syz.3.301" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.411013][ T36] audit: type=1400 audit(1786225738.310:548): avc: denied { open } for pid=1275 comm="syz.3.301" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.434150][ T36] audit: type=1400 audit(1786225738.350:549): avc: denied { map } for pid=1275 comm="syz.3.301" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.457159][ T36] audit: type=1400 audit(1786225738.350:550): avc: denied { append } for pid=1275 comm="syz.3.301" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.477534][ T1257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.487153][ T1257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.096910][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.109441][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.123388][ T10] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:70:18:cb:ff:f2 [ 85.128808][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 85.142146][ T10] usb 3-1: USB disconnect, device number 26 [ 85.152001][ T10] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 85.167113][ T36] audit: type=1400 audit(1786225739.170:551): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 85.209109][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.218539][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.232220][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 85.746639][ T1264] Bluetooth: hci0: command 0x1003 tx timeout [ 85.746642][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.767901][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.776897][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.785820][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.794738][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.803657][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.812571][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.821525][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.830417][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 85.906842][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.076582][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 86.089057][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 86.115646][ T10] usb 3-1: config 0 has no interface number 0 [ 86.132162][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 86.142564][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 86.154310][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 86.167243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.175578][ T10] usb 3-1: Product: syz [ 86.180823][ T10] usb 3-1: Manufacturer: syz [ 86.185750][ T10] usb 3-1: SerialNumber: syz [ 86.194486][ T10] usb 3-1: config 0 descriptor?? [ 86.207655][ T1286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 86.215002][ T1286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 86.260632][ T428] usb 1-1: USB disconnect, device number 38 [ 86.293946][ T1325] netlink: 'syz.3.310': attribute type 4 has an invalid length. [ 86.426443][ T1286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 86.433879][ T1286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 86.642088][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 86.677329][ T428] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 86.836577][ T428] usb 1-1: Using ep0 maxpacket: 32 [ 86.842232][ T428] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 86.851814][ T428] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 86.859702][ T428] usb 1-1: can't read configurations, error -61 [ 86.996582][ T428] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 87.146558][ T428] usb 1-1: Using ep0 maxpacket: 32 [ 87.157047][ T428] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 87.165977][ T428] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 87.173687][ T428] usb 1-1: can't read configurations, error -61 [ 87.180269][ T428] usb usb1-port1: attempt power cycle [ 87.458913][ T1351] MTRR 1 not used [ 87.526577][ T428] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 87.546945][ T428] usb 1-1: Using ep0 maxpacket: 32 [ 87.556692][ T428] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 87.570031][ T428] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 87.584951][ T428] usb 1-1: can't read configurations, error -61 [ 87.657321][ T1362] 9pnet_fd: Insufficient options for proto=fd [ 87.716667][ T428] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 87.736990][ T428] usb 1-1: Using ep0 maxpacket: 32 [ 87.744302][ T428] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 87.753616][ T428] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 87.761934][ T428] usb 1-1: can't read configurations, error -61 [ 87.768815][ T428] usb usb1-port1: unable to enumerate USB device [ 88.054352][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.064029][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.129794][ T1366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.139834][ T1366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.161698][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 88.172156][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 88.183798][ T10] asix 3-1:0.34: probe with driver asix failed with error -71 [ 88.195763][ T10] usb 3-1: USB disconnect, device number 27 [ 88.310331][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.321856][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.332472][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.341610][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.960556][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 89.130850][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.141867][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.151678][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.164616][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.173734][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.186848][ T10] usb 3-1: config 0 descriptor?? [ 89.461609][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 89.461646][ T36] audit: type=1400 audit(1786225743.470:581): avc: denied { setopt } for pid=1383 comm="syz.0.331" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.506251][ T36] audit: type=1400 audit(1786225743.500:582): avc: denied { create } for pid=1383 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 89.545198][ T36] audit: type=1400 audit(1786225743.500:583): avc: denied { sys_admin } for pid=1383 comm="syz.0.331" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 89.568133][ T1387] X.509: signatureAlgorithm (103) differs from tbsCertificate.signature (7) [ 89.595933][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 89.634289][ T10] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.656543][ T36] audit: type=1400 audit(1786225743.660:584): avc: denied { ioctl } for pid=1388 comm="syz.0.333" path="socket:[10479]" dev="sockfs" ino=10479 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.723592][ T36] audit: type=1400 audit(1786225743.700:585): avc: denied { create } for pid=1388 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.829984][ T36] audit: type=1326 audit(1786225743.840:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1374 comm="syz.3.327" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff636f9e0d9 code=0x7fc00000 [ 89.956483][ T36] audit: type=1400 audit(1786225743.960:587): avc: denied { setopt } for pid=1388 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.992760][ T36] audit: type=1400 audit(1786225743.980:588): avc: denied { setopt } for pid=1394 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.124981][ T1398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.146961][ T1398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.908158][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 91.125374][ T36] audit: type=1400 audit(1786225745.130:589): avc: denied { connect } for pid=1428 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.147098][ T36] audit: type=1400 audit(1786225745.150:590): avc: denied { write } for pid=1428 comm="syz.3.346" path="socket:[11409]" dev="sockfs" ino=11409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.538937][ T1455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1455 comm=syz.3.353 [ 91.580634][ T65] logitech-hidpp-device 0005:046D:B012.000B: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 91.611041][ T1463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.620330][ T1463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.723141][ T1472] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=84 sclass=netlink_xfrm_socket pid=1472 comm=syz.0.357 [ 91.900117][ T1476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1476 comm=syz.0.359 [ 91.935517][ T1478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1478 comm=syz.0.360 [ 91.948985][ T1479] netlink: 'syz.0.360': attribute type 4 has an invalid length. [ 91.956803][ T1479] __nla_validate_parse: 25 callbacks suppressed [ 91.956824][ T1479] netlink: 17 bytes leftover after parsing attributes in process `syz.0.360'. [ 91.975264][ T387] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 92.157099][ T1489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 92.168422][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.177830][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.394703][ T1491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 92.480013][ T1495] mmap: syz.0.365 (1495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.624892][ T318] usb 3-1: USB disconnect, device number 28 [ 92.713678][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.726429][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.806588][ T65] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 92.957859][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.968201][ T65] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.978310][ T65] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 92.993030][ T65] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 93.002462][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.012019][ T65] usb 1-1: Product: syz [ 93.016382][ T65] usb 1-1: Manufacturer: syz [ 93.021333][ T65] usb 1-1: SerialNumber: syz [ 93.032035][ T65] usb-storage 1-1:1.0: USB Mass Storage device detected [ 93.036730][ T318] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 93.048727][ T65] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 93.057049][ T65] scsi host1: usb-storage 1-1:1.0 [ 93.197786][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.209527][ T318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.219031][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.227613][ T318] usb 3-1: Product: syz [ 93.231944][ T318] usb 3-1: Manufacturer: syz [ 93.236810][ T318] usb 3-1: SerialNumber: syz [ 93.263445][ T318] hub 3-1:1.0: bad descriptor, ignoring hub [ 93.276547][ T318] hub 3-1:1.0: probe with driver hub failed with error -5 [ 93.424315][ T1524] incfs: Can't find or create .index dir in ./cgroup [ 93.431207][ T1524] incfs: mount failed -22 [ 93.460026][ T1526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.373'. [ 93.469846][ T428] usb 1-1: USB disconnect, device number 43 [ 93.687138][ T1539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.697554][ T1539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.716628][ T318] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 93.868058][ T318] usb 3-1: device firmware changed [ 93.873495][ T318] usb 3-1: USB disconnect, device number 29 [ 94.007234][ T318] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 94.163260][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.175838][ T318] usb 3-1: string descriptor 0 read error: -22 [ 94.182204][ T318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.191789][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.205349][ T318] hub 3-1:1.0: bad descriptor, ignoring hub [ 94.213324][ T318] hub 3-1:1.0: probe with driver hub failed with error -5 [ 94.252157][ T1541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=1541 comm=syz.3.378 [ 94.272879][ T1541] fuse: Unknown parameter '0x0000000000000008' [ 94.334436][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.345247][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.533795][ T65] usb 3-1: USB disconnect, device number 30 [ 94.967408][ T1546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.380'. [ 94.985003][ T1548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.002683][ T1548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.014941][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 95.014960][ T36] audit: type=1400 audit(1786225748.988:615): avc: denied { write } for pid=1549 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.088045][ T1560] fuse: Bad value for 'fd' [ 95.126423][ T36] audit: type=1400 audit(1786225749.104:616): avc: denied { bind } for pid=1566 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.544979][ T1583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.612369][ T1583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.760886][ T36] audit: type=1400 audit(1786225749.716:617): avc: denied { accept } for pid=1592 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.182728][ T387] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 96.237149][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.246916][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.285562][ T318] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 96.338092][ T387] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 96.346343][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.357669][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.367508][ T387] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 96.376923][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.388693][ T387] usb 3-1: config 0 descriptor?? [ 96.460325][ T318] usb 1-1: Using ep0 maxpacket: 32 [ 96.466684][ T318] usb 1-1: config 9 has an invalid interface number: 226 but max is 0 [ 96.477202][ T318] usb 1-1: config 9 has no interface number 0 [ 96.483548][ T318] usb 1-1: config 9 interface 226 has no altsetting 0 [ 96.491962][ T318] usb 1-1: New USB device found, idVendor=5fa2, idProduct=bb1a, bcdDevice=82.9d [ 96.501192][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.509463][ T318] usb 1-1: Product: syz [ 96.513970][ T318] usb 1-1: Manufacturer: syz [ 96.518619][ T318] usb 1-1: SerialNumber: syz [ 96.609385][ T387] usbhid 3-1:0.0: can't add hid device: -71 [ 96.622954][ T387] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.638567][ T387] usb 3-1: USB disconnect, device number 31 [ 96.734254][ T318] cdc_eem 1-1:9.226: probe with driver cdc_eem failed with error -22 [ 96.745675][ T318] usb 1-1: USB disconnect, device number 44 [ 96.943635][ T387] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 97.108082][ T387] usb 3-1: Using ep0 maxpacket: 16 [ 97.114440][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.125717][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.135749][ T387] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 97.145081][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.154158][ T387] usb 3-1: config 0 descriptor?? [ 97.165217][ T387] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 97.172438][ T387] usb 3-1: No valid video chain found. [ 97.356091][ T1624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1624 comm=syz.0.405 [ 97.357404][ T36] audit: type=1400 audit(1786225751.272:618): avc: denied { ioctl } for pid=1623 comm="syz.0.405" path="socket:[13680]" dev="sockfs" ino=13680 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.397958][ T1616] netlink: 128 bytes leftover after parsing attributes in process `syz.2.401'. [ 97.407245][ T1616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.401'. [ 97.417345][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.428910][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.445173][ T387] usb 3-1: USB disconnect, device number 32 [ 97.455812][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.464291][ T36] audit: type=1400 audit(1786225751.359:619): avc: denied { mount } for pid=1626 comm="syz.3.406" name="/" dev="incremental-fs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.488784][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.498399][ T36] audit: type=1400 audit(1786225751.408:620): avc: denied { bind } for pid=1623 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.525979][ T36] audit: type=1400 audit(1786225751.428:621): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.559314][ T36] audit: type=1400 audit(1786225751.457:622): avc: denied { append } for pid=1633 comm="syz.3.407" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.985716][ T1636] Invalid argument reading file caps for ./file0 [ 98.192410][ T1640] batadv_slave_0: entered promiscuous mode [ 98.200968][ T1640] overlay: Unknown parameter '/' [ 98.206097][ T36] audit: type=1400 audit(1786225752.090:623): avc: denied { mounton } for pid=1639 comm="syz.3.410" path="/146/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 98.209891][ T1640] netlink: 'syz.3.410': attribute type 49 has an invalid length. [ 98.247183][ T428] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 98.262612][ T36] audit: type=1326 audit(1786225752.149:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1639 comm="syz.3.410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff636f9e0d9 code=0x0 [ 98.288445][ T1640] team_slave_1: entered promiscuous mode [ 98.295050][ T1640] team_slave_1: entered allmulticast mode [ 98.306287][ T1639] batadv_slave_0: left promiscuous mode [ 98.431624][ T428] usb 3-1: Using ep0 maxpacket: 32 [ 98.442641][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.473040][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.488126][ T428] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.513585][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.524477][ T428] usb 3-1: config 0 descriptor?? [ 98.535452][ T428] hub 3-1:0.0: USB hub found [ 98.540600][ T1655] netlink: 'syz.3.415': attribute type 4 has an invalid length. [ 98.548616][ T1655] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.415'. [ 98.736929][ T428] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 98.808519][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.821333][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.961857][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.971678][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.982259][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.991404][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.150150][ T428] hid-generic 0003:046D:C31C.000C: item fetching failed at offset 0/1 [ 99.158726][ T428] hid-generic 0003:046D:C31C.000C: probe with driver hid-generic failed with error -22 [ 99.466236][ T428] usb 3-1: USB disconnect, device number 33 [ 99.870875][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.885742][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.542453][ T1697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.550150][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 100.550219][ T36] audit: type=1400 audit(1786225754.376:633): avc: denied { write } for pid=1695 comm="syz.3.428" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.554429][ T1697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.662205][ T1700] veth0_vlan: entered allmulticast mode [ 100.673253][ T1700] vlan1: entered promiscuous mode [ 100.678494][ T1700] vlan1: entered allmulticast mode [ 100.688063][ T36] audit: type=1400 audit(1786225754.523:634): avc: denied { watch watch_reads } for pid=1699 comm="syz.0.429" path="/93" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.774865][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 100.939529][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 100.950636][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 100.965280][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 100.975213][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.983327][ T387] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 100.991231][ T10] usb 3-1: Product: syz [ 100.995432][ T10] usb 3-1: Manufacturer: syz [ 101.000429][ T10] usb 3-1: SerialNumber: syz [ 101.152904][ T387] usb 1-1: Using ep0 maxpacket: 32 [ 101.161882][ T387] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 101.176433][ T387] usb 1-1: config 2 has no interface number 0 [ 101.195462][ T387] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 101.215907][ T387] usb 1-1: config 2 interface 88 has no altsetting 0 [ 101.225778][ T36] audit: type=1400 audit(1786225755.042:635): avc: denied { connect } for pid=1696 comm="syz.2.427" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.235365][ T1698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.248531][ T387] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 101.259763][ T1698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.264008][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 101.295703][ T387] usb 1-1: Product: syz [ 101.299962][ T387] usb 1-1: Manufacturer: syz [ 101.303420][ T1698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.315062][ T36] audit: type=1400 audit(1786225755.140:636): avc: denied { getopt } for pid=1705 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.326476][ T1698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.342540][ T387] usb 1-1: SerialNumber: syz [ 101.358295][ T1702] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 101.368495][ T10] usb 3-1: Can't get UAC3 power state for id 10 [ 101.387553][ T10] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 101.408992][ T10] usb 3-1: USB disconnect, device number 34 [ 101.420329][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.572389][ T1702] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 101.905495][ T36] audit: type=1400 audit(1786225755.708:637): avc: denied { write } for pid=1710 comm="syz.2.434" path="socket:[13953]" dev="sockfs" ino=13953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.981764][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 102.012161][ T36] audit: type=1400 audit(1786225755.816:638): avc: denied { mounton } for pid=1713 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.044083][ T1316] bridge_slave_1: left allmulticast mode [ 102.049849][ T1316] bridge_slave_1: left promiscuous mode [ 102.055592][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.063511][ T1316] bridge_slave_0: left allmulticast mode [ 102.069515][ T1316] bridge_slave_0: left promiscuous mode [ 102.075396][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.184786][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.191948][ T1713] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.200557][ T1702] overlayfs: missing 'lowerdir' [ 102.205600][ T1713] bridge_slave_0: entered allmulticast mode [ 102.213046][ T1713] bridge_slave_0: entered promiscuous mode [ 102.221269][ T1316] veth1_macvtap: left promiscuous mode [ 102.230531][ T1316] veth0_vlan: left promiscuous mode [ 102.243364][ T1729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.261531][ T1729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.306152][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.313262][ T1713] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.320583][ T1713] bridge_slave_1: entered allmulticast mode [ 102.327150][ T1713] bridge_slave_1: entered promiscuous mode [ 102.387572][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.394678][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.402026][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.409096][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.418329][ T387] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.429769][ T387] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 102.441210][ T387] asix 1-1:2.88: probe with driver asix failed with error -71 [ 102.456156][ T387] usb 1-1: USB disconnect, device number 45 [ 102.467299][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.475075][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.485090][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.492232][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.501882][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.509040][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.538474][ T1713] veth0_vlan: entered promiscuous mode [ 102.552591][ T1713] veth1_macvtap: entered promiscuous mode [ 102.574646][ T36] audit: type=1400 audit(1786225756.366:639): avc: denied { mounton } for pid=1713 comm="syz-executor" path="/root/syzkaller.9MbVDh/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 102.599978][ T36] audit: type=1400 audit(1786225756.366:640): avc: denied { mount } for pid=1713 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.622270][ T36] audit: type=1400 audit(1786225756.366:641): avc: denied { mounton } for pid=1713 comm="syz-executor" path="/root/syzkaller.9MbVDh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.657144][ T36] audit: type=1400 audit(1786225756.366:642): avc: denied { mounton } for pid=1713 comm="syz-executor" path="/root/syzkaller.9MbVDh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.689727][ T1731] overlayfs: conflicting options: userxattr,metacopy=on [ 102.859636][ T1748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.869000][ T1748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.049630][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.182033][ T31] usb 5-1: device descriptor read/64, error -71 [ 103.416174][ T387] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 103.426335][ T31] usb 5-1: device descriptor read/64, error -71 [ 103.437114][ T1763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.445774][ T1763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.599775][ T387] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 103.608031][ T387] usb 1-1: can't read configurations, error -71 [ 103.690961][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.762516][ T1768] 9pnet_fd: Insufficient options for proto=fd [ 103.830570][ T1770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=1770 comm=syz.2.450 [ 103.843298][ T31] usb 5-1: device descriptor read/64, error -71 [ 104.029138][ T1789] SELinux: policydb string length 84 does not match expected length 8 [ 104.037510][ T1789] SELinux: failed to load policy [ 104.055808][ T1792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'. [ 104.091593][ T31] usb 5-1: device descriptor read/64, error -71 [ 104.111760][ T1800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1800 comm=syz.3.462 [ 104.124261][ T1800] netlink: 140 bytes leftover after parsing attributes in process `syz.3.462'. [ 104.210140][ T31] usb usb5-port1: attempt power cycle [ 104.221041][ T1807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.229616][ T1807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.240594][ T387] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 104.403258][ T387] usb 1-1: Invalid ep0 maxpacket: 64 [ 104.408743][ T387] usb usb1-port1: attempt power cycle [ 104.443938][ T428] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 104.556047][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.577304][ T31] usb 5-1: device descriptor read/8, error -71 [ 104.596437][ T428] usb 3-1: Using ep0 maxpacket: 16 [ 104.602571][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.613537][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.623375][ T428] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.636980][ T428] usb 3-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 104.646417][ T428] usb 3-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 104.654471][ T428] usb 3-1: Product: syz [ 104.659530][ T428] usb 3-1: config 0 descriptor?? [ 104.709374][ T31] usb 5-1: device descriptor read/8, error -71 [ 104.775112][ T1810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.779643][ T387] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 104.784331][ T1810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.810274][ T387] usb 1-1: Invalid ep0 maxpacket: 64 [ 104.942075][ T387] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 104.952211][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.962786][ T387] usb 1-1: Invalid ep0 maxpacket: 64 [ 104.968263][ T387] usb usb1-port1: unable to enumerate USB device [ 104.983695][ T31] usb 5-1: device descriptor read/8, error -71 [ 105.083540][ T428] hid-generic 0003:045E:10DA.000D: ignoring exceeding usage max [ 105.092589][ T428] hid-generic 0003:045E:10DA.000D: ignoring exceeding usage max [ 105.102549][ T428] hid-generic 0003:045E:10DA.000D: unknown main item tag 0x0 [ 105.110099][ T428] hid-generic 0003:045E:10DA.000D: unknown main item tag 0x0 [ 105.117633][ T428] hid-generic 0003:045E:10DA.000D: unbalanced collection at end of report description [ 105.127639][ T428] hid-generic 0003:045E:10DA.000D: probe with driver hid-generic failed with error -22 [ 105.138241][ T31] usb 5-1: device descriptor read/8, error -71 [ 105.247207][ T31] usb usb5-port1: unable to enumerate USB device [ 105.291328][ T31] usb 3-1: USB disconnect, device number 35 [ 105.510605][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.519277][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.814341][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 105.814362][ T36] audit: type=1400 audit(1786225759.550:655): avc: denied { shutdown } for pid=1825 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.815629][ T1826] netlink: 148 bytes leftover after parsing attributes in process `syz.2.471'. [ 105.851349][ T1826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 105.992223][ T1836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1836 comm=syz.2.474 [ 106.005710][ T1836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.474'. [ 106.260213][ T1849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.270110][ T1849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.279790][ T1849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.283141][ T31] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 106.290423][ T1849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.330887][ T1854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.341657][ T1854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.435187][ T31] usb 5-1: device descriptor read/64, error -71 [ 106.678747][ T31] usb 5-1: device descriptor read/64, error -71 [ 106.888898][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.897687][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.922245][ T31] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 107.037297][ T36] audit: type=1400 audit(1786225760.762:656): avc: denied { bind } for pid=1875 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.054229][ T31] usb 5-1: device descriptor read/64, error -71 [ 107.155310][ T1897] netlink: 'syz.0.491': attribute type 29 has an invalid length. [ 107.199348][ T1897] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 107.210317][ T1897] SELinux: failed to load policy [ 107.307799][ T31] usb 5-1: device descriptor read/64, error -71 [ 107.409445][ T428] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 107.420735][ T31] usb usb5-port1: attempt power cycle [ 107.572426][ T428] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.591388][ T428] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 107.611274][ T428] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.618266][ T428] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 107.627735][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.638191][ T428] usb 3-1: config 0 descriptor?? [ 107.645021][ T1898] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 107.774010][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 107.782347][ T1909] can0: slcan on ttyS3. [ 107.815677][ T31] usb 5-1: device descriptor read/8, error -71 [ 107.853256][ T36] audit: type=1400 audit(1786225761.561:657): avc: denied { read } for pid=1912 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.891029][ T36] audit: type=1400 audit(1786225761.591:658): avc: denied { open } for pid=1912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.934202][ T36] audit: type=1400 audit(1786225761.591:659): avc: denied { getattr } for pid=1912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.977878][ T31] usb 5-1: device descriptor read/8, error -71 [ 108.023313][ T428] usbhid 3-1:0.0: can't add hid device: -71 [ 108.036017][ T428] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.047374][ T36] audit: type=1400 audit(1786225761.749:660): avc: denied { write } for pid=1911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.073003][ T428] usb 3-1: USB disconnect, device number 36 [ 108.080524][ T36] audit: type=1400 audit(1786225761.749:661): avc: denied { add_name } for pid=1911 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.104603][ T36] audit: type=1400 audit(1786225761.749:662): avc: denied { create } for pid=1911 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.127200][ T36] audit: type=1400 audit(1786225761.749:663): avc: denied { write } for pid=1911 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=3214 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.165555][ T36] audit: type=1400 audit(1786225761.749:664): avc: denied { append } for pid=1911 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=3214 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.250467][ T31] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 108.271959][ T31] usb 5-1: device descriptor read/8, error -71 [ 108.342271][ T1906] can0 (unregistered): slcan off ttyS3. [ 108.403484][ T31] usb 5-1: device descriptor read/8, error -71 [ 108.518854][ T31] usb usb5-port1: unable to enumerate USB device [ 108.570988][ T1984] fuse: Bad value for 'group_id' [ 108.576083][ T1984] fuse: Bad value for 'group_id' [ 108.632828][ T1993] 9p: Unknown access argument : -22 [ 109.334223][ T387] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.489491][ T387] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.499941][ T387] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.511603][ T387] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.527017][ T387] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 109.537262][ T387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 109.545390][ T387] usb 5-1: Product: syz [ 109.549926][ T387] usb 5-1: Manufacturer: syz [ 109.554558][ T387] usb 5-1: SerialNumber: syz [ 109.711732][ T2023] fuse: Bad value for 'group_id' [ 109.716799][ T2023] fuse: Bad value for 'group_id' [ 109.772604][ T387] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.975302][ T65] usb 5-1: USB disconnect, device number 10 [ 109.982479][ T65] usblp0: removed [ 110.042610][ T387] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 110.235787][ T2043] batadv_slave_0: entered promiscuous mode [ 110.237132][ T387] usb 3-1: Using ep0 maxpacket: 8 [ 110.247907][ T387] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.258236][ T387] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 110.269888][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 110.281009][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 110.290857][ T387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 110.296153][ T2042] overlay: Unknown parameter '/' [ 110.306028][ T387] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 110.317833][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 110.321862][ T2042] netlink: 'syz.3.521': attribute type 49 has an invalid length. [ 110.326074][ T387] usb 3-1: Product: syz [ 110.338022][ T387] usb 3-1: Manufacturer: syz [ 110.342746][ T387] usb 3-1: SerialNumber: syz [ 110.348226][ T2041] batadv_slave_0: left promiscuous mode [ 110.349399][ T387] usb 3-1: config 0 descriptor?? [ 110.380951][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.390245][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.567156][ T387] usb 3-1: USB disconnect, device number 37 [ 110.596455][ T2053] netlink: 'syz.4.524': attribute type 4 has an invalid length. [ 110.697953][ T1111] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.131234][ T2073] batadv_slave_0: entered promiscuous mode [ 111.139623][ T2073] overlay: Unknown parameter '/' [ 111.146027][ T2072] batadv_slave_0: left promiscuous mode [ 111.164971][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 111.164992][ T36] audit: type=1400 audit(1786225764.831:676): avc: denied { open } for pid=2074 comm="syz.2.531" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.165421][ T387] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 111.178660][ T36] audit: type=1400 audit(1786225764.831:677): avc: denied { ioctl } for pid=2074 comm="syz.2.531" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.203168][ T2076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.227998][ T36] audit: type=1400 audit(1786225764.851:678): avc: denied { set_context_mgr } for pid=2074 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 111.228037][ T36] audit: type=1400 audit(1786225764.871:679): avc: denied { getopt } for pid=2074 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.228064][ T36] audit: type=1400 audit(1786225764.871:680): avc: denied { map } for pid=2074 comm="syz.2.531" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.355663][ T387] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 111.364044][ T387] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 111.372379][ T387] usb 1-1: config 0 has no interface number 0 [ 111.378588][ T387] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 111.388510][ T387] usb 1-1: config 0 interface 200 has no altsetting 0 [ 111.396934][ T387] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 111.406150][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.414305][ T387] usb 1-1: Product: syz [ 111.418751][ T387] usb 1-1: Manufacturer: syz [ 111.423439][ T387] usb 1-1: SerialNumber: syz [ 111.430055][ T387] usb 1-1: config 0 descriptor?? [ 111.644626][ T387] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input17 [ 111.656647][ T36] audit: type=1400 audit(1786225765.316:681): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=675 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.666545][ T387] usb 1-1: USB disconnect, device number 50 [ 111.680089][ T36] audit: type=1400 audit(1786225765.316:682): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=675 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.771737][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.802063][ T428] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 111.923305][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 111.929700][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.940082][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.950657][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.959806][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.963808][ T428] usb 3-1: Using ep0 maxpacket: 32 [ 111.968005][ T10] usb 5-1: Product: syz [ 111.975552][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.977271][ T10] usb 5-1: Manufacturer: syz [ 111.988905][ T428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.992777][ T10] usb 5-1: SerialNumber: syz [ 112.003312][ T428] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.016300][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.025234][ T428] usb 3-1: config 0 descriptor?? [ 112.031602][ T428] hub 3-1:0.0: USB hub found [ 112.188881][ T36] audit: type=1326 audit(1786225765.850:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.0.537" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e99e0d9 code=0x50000 [ 112.213854][ T36] audit: type=1326 audit(1786225765.850:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.0.537" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e99e0d9 code=0x50000 [ 112.234727][ T428] hub 3-1:0.0: 29 ports detected [ 112.239884][ T36] audit: type=1326 audit(1786225765.850:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.0.537" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e99e0d9 code=0x50000 [ 112.245111][ T428] hub 3-1:0.0: insufficient power available to use all downstream ports [ 112.439052][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.455219][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.469123][ T2094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 112.480572][ T2094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.536'. [ 112.713369][ T428] usb 3-1: USB disconnect, device number 38 [ 112.741553][ T1264] Bluetooth: hci0: command 0x1003 tx timeout [ 112.742045][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.808031][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.824622][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.840763][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.855812][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.640200][ T387] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 113.811737][ T387] usb 3-1: Using ep0 maxpacket: 32 [ 113.821632][ T387] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 113.832831][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.852258][ T387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 113.872349][ T387] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 113.881589][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.892648][ T387] usb 3-1: config 0 descriptor?? [ 114.304200][ T387] itetech 0003:06CB:73F6.000E: unknown main item tag 0x0 [ 114.318201][ T387] itetech 0003:06CB:73F6.000E: unknown main item tag 0x4 [ 114.346874][ T387] itetech 0003:06CB:73F6.000E: hidraw0: USB HID v0.00 Device [HID 06cb:73f6] on usb-dummy_hcd.2-1/input0 [ 114.404473][ T10] usb 5-1: 0:2 : does not exist [ 114.423843][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 114.449073][ T10] usb 5-1: USB disconnect, device number 11 [ 114.476563][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.576050][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.2.541 [ 114.692002][ T46] usb 3-1: USB disconnect, device number 39 [ 114.781154][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.798698][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.853190][ T2134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.914986][ T2137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 115.023867][ T2144] netlink: 72 bytes leftover after parsing attributes in process `syz.4.553'. [ 115.321086][ T2173] Need at least one configuration in g1. [ 115.366230][ T2173] udc dummy_udc.0: failed to start g1: -22 [ 115.372130][ T2173] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 115.389329][ T2173] UDC core: g1: couldn't find an available UDC or it's busy [ 115.536924][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 115.620470][ T2205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.629690][ T2205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.657867][ T31] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 115.688046][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 115.694334][ T46] usb 5-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 115.705019][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.719173][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.728703][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.736765][ T46] usb 5-1: SerialNumber: syz [ 115.743236][ T46] hub 5-1:1.0: bad descriptor, ignoring hub [ 115.749254][ T46] hub 5-1:1.0: probe with driver hub failed with error -5 [ 115.756577][ T46] cdc_acm 5-1:1.0: skipping garbage [ 115.761851][ T46] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 115.770403][ T46] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 115.776899][ T46] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 115.809229][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 115.815866][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.824364][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.833209][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.843372][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.854447][ T31] usb 3-1: string descriptor 0 read error: -22 [ 115.860738][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.869823][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.880504][ T31] usb 3-1: 0:2 : does not exist [ 115.946706][ T2163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.955333][ T2163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.071213][ T10] usb 5-1: USB disconnect, device number 12 [ 116.083067][ T10] usb 3-1: USB disconnect, device number 40 [ 116.540115][ T2218] incfs: Options parsing error. -22 [ 116.545485][ T2218] incfs: mount failed -22 [ 116.580417][ T36] kauditd_printk_skb: 23101 callbacks suppressed [ 116.580437][ T36] audit: type=1400 audit(1786225770.201:23787): avc: denied { connect } for pid=2221 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.607423][ T2222] netlink: 88 bytes leftover after parsing attributes in process `syz.0.566'. [ 116.633223][ T36] audit: type=1400 audit(1786225770.231:23788): avc: denied { write } for pid=2221 comm="syz.0.566" laddr=172.20.20.10 lport=6 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.654532][ T2220] 9pnet_fd: Insufficient options for proto=fd [ 116.659601][ T36] audit: type=1400 audit(1786225770.231:23789): avc: denied { read } for pid=2221 comm="syz.0.566" laddr=172.20.20.10 lport=6 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.695416][ T36] audit: type=1400 audit(1786225770.270:23790): avc: denied { mounton } for pid=2217 comm="syz.4.565" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 116.744910][ T36] audit: type=1400 audit(1786225770.360:23791): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.917033][ T36] audit: type=1400 audit(1786225770.529:23792): avc: denied { setopt } for pid=2232 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.953083][ T36] audit: type=1400 audit(1786225770.558:23793): avc: denied { setattr } for pid=2232 comm="syz.2.571" name="NETLINK" dev="sockfs" ino=18558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.997673][ T36] audit: type=1400 audit(1786225770.608:23794): avc: denied { remount } for pid=2236 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.017920][ T2237] binder: Binderfs stats mode cannot be changed during a remount [ 117.027780][ T2237] binder: Binderfs stats mode cannot be changed during a remount [ 117.048674][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 117.140483][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.160573][ T2248] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 117.178697][ T2248] kvm: apic: phys broadcast and lowest prio [ 117.211217][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.221202][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.235060][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.244219][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.252551][ T31] usb 1-1: SerialNumber: syz [ 117.258274][ T2231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.310674][ T46] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 117.461762][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 117.468417][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.470316][ T2231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.480127][ T46] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 117.493327][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.501403][ T46] usb 3-1: Product: syz [ 117.505728][ T46] usb 3-1: Manufacturer: syz [ 117.510392][ T46] usb 3-1: SerialNumber: syz [ 117.769214][ T46] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 117.779575][ T46] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 117.805091][ T46] usb 3-1: USB disconnect, device number 41 [ 117.897759][ T36] audit: type=1400 audit(1786225771.511:23795): avc: denied { read } for pid=2230 comm="syz.0.570" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.920920][ T36] audit: type=1400 audit(1786225771.511:23796): avc: denied { open } for pid=2230 comm="syz.0.570" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.950037][ T2266] dummy_hcd dummy_hcd.0: remove, state 1 [ 117.955919][ T2266] usb usb1: USB disconnect, device number 1 [ 117.975451][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.002480][ T31] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 118.014900][ T31] usb 1-1: USB disconnect, device number 51 [ 118.021733][ T31] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 118.061830][ T2266] dummy_hcd dummy_hcd.0: stopped [ 118.069432][ T2266] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 118.136533][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 118.142917][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 118.152166][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 118.162004][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 118.171859][ T10] usb 5-1: config 1 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 118.182643][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 118.189288][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 118.198404][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.209752][ T2231] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI [ 118.213275][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 118.222402][ T2231] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057] [ 118.222427][ T2231] CPU: 1 UID: 0 PID: 2231 Comm: syz.0.570 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 118.249180][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.259246][ T2231] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 118.264485][ T2231] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 69 9b 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 118.284096][ T2231] RSP: 0018:ffffc9001092f9a0 EFLAGS: 00010206 [ 118.290172][ T2231] RAX: 000000000000000a RBX: ffff88811f444410 RCX: dffffc0000000000 [ 118.298162][ T2231] RDX: ffff8881214edf00 RSI: 0000000000000003 RDI: 0000000000000005 [ 118.306141][ T2231] RBP: ffffc9001092fa18 R08: 0000000000000003 R09: 0000000000000004 [ 118.314116][ T2231] R10: 0000000000000000 R11: ffffffff83b99920 R12: 0000000000000050 [ 118.322090][ T2231] R13: ffff88811f444400 R14: 1ffff11023e88880 R15: ffff888104b7cc90 [ 118.330090][ T2231] FS: 00007f1e5f9386c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 118.339022][ T2231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.345612][ T2231] CR2: 000020000000db40 CR3: 000000011e27e000 CR4: 00000000003526b0 [ 118.353612][ T2231] Call Trace: [ 118.356898][ T2231] [ 118.359836][ T2231] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 118.365744][ T2231] usb_ep_queue+0xe3/0x230 [ 118.370178][ T2231] raw_process_ep_io+0x573/0x920 [ 118.375140][ T2231] ? raw_process_ep0_io+0x7a0/0x7a0 [ 118.380355][ T2231] ? __kasan_check_write+0x18/0x20 [ 118.385473][ T2231] ? _copy_from_user+0x87/0xa0 [ 118.390263][ T2231] ? memdup_user+0xb1/0x170 [ 118.394770][ T2231] ? raw_ioctl+0x17d6/0x37a0 [ 118.399391][ T2231] raw_ioctl+0x223d/0x37a0 [ 118.403818][ T2231] ? __cfi_raw_ioctl+0x10/0x10 [ 118.408589][ T2231] ? selinux_file_ioctl+0x732/0x1480 [ 118.413896][ T2231] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 118.419505][ T2231] ? do_futex+0x37d/0x510 [ 118.423880][ T2231] ? __cfi_do_futex+0x10/0x10 [ 118.428615][ T2231] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.433605][ T2231] ? security_file_ioctl+0x3e/0x110 [ 118.438856][ T2231] ? __cfi_raw_ioctl+0x10/0x10 [ 118.443672][ T2231] __se_sys_ioctl+0x135/0x1b0 [ 118.448372][ T2231] __x64_sys_ioctl+0x7f/0xa0 [ 118.452985][ T2231] x64_sys_call+0x1878/0x2ee0 [ 118.457673][ T2231] do_syscall_64+0x57/0xf0 [ 118.462107][ T2231] ? clear_bhb_loop+0x50/0xa0 [ 118.466817][ T2231] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.472731][ T2231] RIP: 0033:0x7f1e5e99dd6b [ 118.477159][ T2231] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 118.496803][ T2231] RSP: 002b:00007f1e5f936f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.505257][ T2231] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e5e99dd6b [ 118.513256][ T2231] RDX: 00007f1e5f936fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 118.521263][ T2231] RBP: 0000000000000003 R08: 00007f1e5ed50320 R09: 0000000000000000 [ 118.529266][ T2231] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 118.537270][ T2231] R13: 0000000000000000 R14: 00007f1e5ec25fa0 R15: 00007fffa9516c58 [ 118.545261][ T2231] [ 118.548285][ T2231] Modules linked in: [ 118.552385][ T2231] ---[ end trace 0000000000000000 ]--- [ 118.558644][ T2231] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 118.564012][ T2231] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 69 9b 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 118.583900][ T2231] RSP: 0018:ffffc9001092f9a0 EFLAGS: 00010206 [ 118.590100][ T2231] RAX: 000000000000000a RBX: ffff88811f444410 RCX: dffffc0000000000 [ 118.598247][ T2231] RDX: ffff8881214edf00 RSI: 0000000000000003 RDI: 0000000000000005 [ 118.606442][ T2231] RBP: ffffc9001092fa18 R08: 0000000000000003 R09: 0000000000000004 [ 118.614672][ T2231] R10: 0000000000000000 R11: ffffffff83b99920 R12: 0000000000000050 [ 118.622751][ T2231] R13: ffff88811f444400 R14: 1ffff11023e88880 R15: ffff888104b7cc90 [ 118.631322][ T2231] FS: 00007f1e5f9386c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 118.640537][ T2231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.647272][ T2231] CR2: 00007f5a511ef2f8 CR3: 000000011e27e000 CR4: 00000000003526b0 [ 118.655542][ T2231] DR0: 0000000000000000 DR1: 00000000e88ba5cb DR2: 0000000000000000 [ 118.664027][ T2231] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 118.672114][ T2231] Kernel panic - not syncing: Fatal exception [ 118.678883][ T2231] Kernel Offset: disabled [ 118.683220][ T2231] Rebooting in 86400 seconds..