last executing test programs: 2m20.89053264s ago: executing program 3 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x82, 0x74) io_setup(0x4fe, &(0x7f00000009c0)=0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240beb4d9"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f0000004080)="a0", 0x1, 0xa}]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000300)={r2, &(0x7f00000003c0)='sit0\x00\x0f\x13&)\x06]^=\x0e\f\xe8\xa7\xa4\xfe\n\xe9g\xbd\x8c\xbd\xf6\x1c\xb9\xfb\x9em\x88\x8e\x13\xd0|0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd70c4fddbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="06001a010200000006001200"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4004004) r10 = syz_clone(0x2000000, &(0x7f0000000200)="6dd8960b9c5737753ab254a1c9564c7373291611586f9931e0", 0x19, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="4c21a360503bec43c506b2649d9363aa0ae48fae4091a57abf8866526678916cc9ec607b02b5c82cd7b7b3efd59d02") sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x5e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r11 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) lseek(r12, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r11, 0xc058671e, &(0x7f00000000c0)) 2m18.263552525s ago: executing program 3 (id=79): timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) setrlimit(0x0, &(0x7f0000000200)={0x1, 0x1}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280), 0x31) unshare(0x64000600) 2m18.199008417s ago: executing program 3 (id=80): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x766293fdc5a3d1bd, 0x0) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x3}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=3']) 2m18.178203458s ago: executing program 32 (id=80): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x766293fdc5a3d1bd, 0x0) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x3}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=3']) 31.737594395s ago: executing program 4 (id=712): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 31.662951228s ago: executing program 4 (id=713): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="32010003000000401e044830400011020301090269000301003003080b000201092006090400000001012000092401020046090003090601000003022000090401010101022000090501092000080500082501010604040102010303fe0500"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x410202, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) 28.186500062s ago: executing program 4 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xd2, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x5, 0x20}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "a701beeb2143d51dc9279d598c421fbe32"}]}}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) write(r1, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syslog(0x2, &(0x7f00000000c0)=""/102, 0x66) r4 = dup(r3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0xd}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x5, 0x40, 0x65, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x87, 0x0, 0x1, 0x3, 0x5, 0x1, 0x10, 0x75ee, 0x0, 0x4e20, 0x4e20}, 0x2}, 0x0, 0x1}}}}}}}}}, 0x52) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x0, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) 25.141133391s ago: executing program 4 (id=776): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x8, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x400}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x167a00, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x2000000, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x67f2, 0x4) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) readv(r3, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/90, 0x5a}], 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/9, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0840, 0x0) r7 = epoll_create1(0x80000) epoll_pwait(r7, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xd, 0x10f2, &(0x7f0000000240)={[0xfffffffffffffff7]}, 0x8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc0386723, 0x0) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f00000001c0)=0x6) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peeksig(0x4209, r10, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200000000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) 24.302122368s ago: executing program 4 (id=784): r0 = syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000680)={0x20, 0xe, 0xdd, {0xdd, 0x5, "0ea7879ae0a73db896f87b56434ffb415653e20ff6c92b1489328e03cd301b32cbd29b5f4674b1b5f3339f3a9042628a029d0de5fa108dc061266754bdd6f92f1763ae76b797bfec3cda1354456a3badf949f64a854e6e75118e52beee34efbf88982fbd1d03ee87c30926fd26078c31461a06597f9f600cd6d76d7b63d827031a959ae6665fadd7b1ad3f251ad18112e56d1901425960af757e3602e2d372650b46512f495b3e933c5ba0648dbf668d2aa678db6418acd5fd07331e614eefd95dbf5bf059771ab086e6f056501df236977114cffb624dd1d86c73"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x7d, 0x5, "0003cde2", "f26e9482"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x10, 0x1, 0xa, 0x7, 0x8, 0x7}}}, &(0x7f0000000980)={0x84, &(0x7f0000000000)={0x20, 0x10, 0x8e, "e64f6f5e1113a0f8a72658dd0c1f67c71af6ce204c7f7c19832b9c4434676137a5843b865aab0a22079cbc8caadb7545a78da478bc0fa224cca637e92f18bb53e5728717dd933cc54795c627d8a6af398ad6e12dc49fea1c9d5fc2ad42eda7818d808b4b50fa729097c9d19642ec90b7c358c6651c9e9e2f8a88848abf095ddbc7a1ef53b4a27cc2c8761e65aeb5"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xd8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.260796309s ago: executing program 4 (id=785): setuid(0xee01) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7afc47ef, 0x3f, 0xb, 0xa, 0xfa, 0x3e, 0xe, 0x4, 0xfd, 0x2, 0x9, 0x1, 0xfffffffffffffffd}, {0xc, 0x1, 0x2, 0x61, 0x40, 0x2, 0x3, 0xd8, 0x5, 0x2, 0x6, 0x6, 0xfffffffffffffffe}, {0x88e, 0x6, 0x5, 0x0, 0xf7, 0x2, 0x0, 0x8, 0x4, 0x5, 0x2, 0x38, 0x1000}], 0x8}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 24.2263417s ago: executing program 33 (id=785): setuid(0xee01) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7afc47ef, 0x3f, 0xb, 0xa, 0xfa, 0x3e, 0xe, 0x4, 0xfd, 0x2, 0x9, 0x1, 0xfffffffffffffffd}, {0xc, 0x1, 0x2, 0x61, 0x40, 0x2, 0x3, 0xd8, 0x5, 0x2, 0x6, 0x6, 0xfffffffffffffffe}, {0x88e, 0x6, 0x5, 0x0, 0xf7, 0x2, 0x0, 0x8, 0x4, 0x5, 0x2, 0x38, 0x1000}], 0x8}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 3.409857429s ago: executing program 1 (id=1001): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mlockall(0x7) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) sendmsg$inet6(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)="278f7a7961f235dd", 0x8}], 0x1}, 0x20040891) 3.350946931s ago: executing program 1 (id=1002): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = epoll_create1(0x80000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) munlockall() r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x3) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x401, 0x0, 0x0) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x5, 0x0, 0x2000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001200)={0x20002015}) 2.918802005s ago: executing program 0 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x84080, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@ignoreqv}, {@mmap}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_gt={'fowner>', r3}}]}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c091}, 0xc8a1) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) getdents(r5, &(0x7f0000000280)=""/163, 0xbb) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r9, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRESDEC=r9], 0x68}}, 0x4000841) 2.830274787s ago: executing program 0 (id=1013): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0x0, r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x40, 0x24, 0x4, {0x4, 0x31, "ff4d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x0}) 2.554607856s ago: executing program 1 (id=1015): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000d50f0000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000d50f0000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 2.013763524s ago: executing program 1 (id=1023): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xb) openat$kvm(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/98, 0x62}], 0x1, 0x34, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000590300000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e00100e9ff040000800c027fc881ac2bfdb9f5858576cd29c3880940e738"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20040af, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000b80)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) lseek(r4, 0x10000000005, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1.934945107s ago: executing program 1 (id=1024): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.933321917s ago: executing program 1 (id=1026): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000180)={0x11, 0xd, 0x0, 0x1, 0x28, 0x6, @multicast}, 0x14) setreuid(0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f00000000c0)=0xf, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000700)}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{}, 0xb5a3, 0x9, 0x8}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESDEC=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x1, 0xffffffff, 0xfbb}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 1.910312868s ago: executing program 5 (id=1027): prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x12) prctl$PR_PAC_RESET_KEYS(0x36, 0x19) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x3) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0xc) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) prctl$PR_PAC_RESET_KEYS(0x36, 0x1c) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x9) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/107) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) prctl$PR_PAC_RESET_KEYS(0x36, 0x18) prctl$PR_PAC_RESET_KEYS(0x36, 0x1a) prctl$PR_PAC_RESET_KEYS(0x36, 0x23) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) 1.896326718s ago: executing program 5 (id=1028): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "8155434b591faf399cdf4275ae54ebdf161c9b9625f73fc8a33fffb23c7f8d21bafe49e055dcee56bfe9e9a4748ab9b1cb0f5f2c8d20aa0e49e3681241a1d32b6135ebb489cd9ec24370037b2b0c6fcefb61857662ab69ecff83fd5a71840c42709a0338c94bbfdcd7f3fda20860beb953835ecf7826359ddb77a657d62d9318a3f62f93e6ebba2accb907fe82c8d828"}, 0xa0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) (async) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, r1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.810958801s ago: executing program 5 (id=1029): r0 = userfaultfd(0x801) unshare(0x6020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x88) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x40000000004, 0x12) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 1.809438231s ago: executing program 5 (id=1030): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xb, 0x2}}}}}]}}]}}, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406307312040000102030109026e0003017fa006080b0002012030230904000000010130000a2401100a000a0000000904010000010230000904010101010230000905010960"], 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @mcast1, 0xff}, 0x1c) (async) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0xfffffff9, 0x4) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'ip_vti0\x00', {'veth0_macvtap\x00'}, 0x10}) 1.51154378s ago: executing program 2 (id=1035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r0, 0x5) syz_usb_connect(0x3, 0x49, &(0x7f0000003d40)={{0x12, 0x1, 0x310, 0xf, 0xbc, 0xd8, 0x20, 0x499, 0x5001, 0x515e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x9, 0x9, 0x40, 0x6, "", [{{0x9, 0x4, 0x26, 0x4, 0x2, 0xa9, 0x52, 0x7e, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x23, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x405, 0x1, 0x6, 0xc}]}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x1, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0}) 1.23750197s ago: executing program 5 (id=1036): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8080) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$HIDIOCGRDESC(r2, 0x5501, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) read$hiddev(r1, &(0x7f0000001140)=""/126, 0x7e) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0xfffd, 0x0) 1.014831027s ago: executing program 0 (id=1037): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r3, r2, 0x0) setresgid(r3, 0x0, r3) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) read(r1, &(0x7f0000000340)=""/206, 0xce) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000001bc0)={&(0x7f0000000140), 0x8, &(0x7f0000001b80)={&(0x7f00000009c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="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"], 0x1184}, 0x1, 0x0, 0x0, 0x20000010}, 0x400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4607100708040000000000000003003e00f9ffffffe10200000000000040000000000000008b00000000000000080000000600380002"], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r6) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) read(r5, &(0x7f0000000880)=""/149, 0x95) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.008240757s ago: executing program 0 (id=1038): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', 0x0, 0x2111021, &(0x7f0000000080)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0x31}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendfile(r0, r1, 0x0, 0x7) 995.635867ms ago: executing program 0 (id=1039): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x6) r1 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x6, "", [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6, 0x80, {0x9, 0x21, 0xeffa, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x19, 0xff}}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x1, 0x88) openat$cgroup_int(r4, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x100, 0x103, 0x16}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r5) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="974501000024491fbb000000eaf38f56120b5500", 0x14}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1}}}], 0x20}, 0x40d0) (rerun: 64) 892.877431ms ago: executing program 2 (id=1040): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = geteuid() quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r2, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xffffffffffff56b3, 0x2, 0x1000, 0x1, 0x8fcf, 0x1, 0x3}) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000140)={&(0x7f00000000c0)='#^{^\x00', &(0x7f0000000100)='($+\x00', 0x5}) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7100) (async) r7 = geteuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7c00) (async) getgroups(0x1, &(0x7f00000029c0)=[0xffffffffffffffff]) (async) statx(0xffffffffffffffff, &(0x7f0000002a00)='./file0\x00', 0x0, 0x1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b40)={0x0, 0x0, 0x0}, &(0x7f0000002b80)=0xc) stat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000001c0)="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", 0x2000, &(0x7f00000053c0)={&(0x7f00000021c0)={0x50, 0x0, 0xb, {0x7, 0x2d, 0x6, 0xffffffff84100000, 0x2, 0xeea6, 0x2d, 0x6, 0x0, 0x0, 0x20, 0x6d9b}}, &(0x7f0000002240)={0x18, 0xffffffffffffffda, 0x8, {0x5}}, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x2040000000000000}}, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, 0x7fff, {0x8}}, &(0x7f0000002300)={0x18, 0x0, 0x1, {0x10001}}, &(0x7f0000002340)={0x28, 0x0, 0xf7e, {{0x0, 0x39e, 0x2}}}, &(0x7f0000002380)={0x60, 0x0, 0x80, {{0x3ff, 0xfffffffffffffffc, 0x8, 0x8, 0x8, 0xffff, 0x3, 0xf}}}, &(0x7f0000002400)={0x18}, &(0x7f0000002440)={0x14, 0x0, 0xfffffffffffffffb, {'($+\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0x1, {0x0, 0x4}}, &(0x7f00000024c0)={0x78, 0x0, 0x40000, {0x5, 0x5, 0x0, {0x2, 0x7, 0x3ff, 0x9, 0x587c, 0x0, 0x0, 0x905, 0x7, 0x1000, 0x0, r2, r4, 0x12b, 0x2}}}, &(0x7f0000002600)={0x90, 0x0, 0x80, {0x1, 0x1, 0x9, 0xac7d, 0x6, 0x2, {0x0, 0x5, 0xff, 0x2, 0x1, 0x9, 0x2, 0x3, 0x471e, 0xc000, 0x7f, r2, r5, 0x9, 0x9}}}, &(0x7f00000026c0)={0xa8, 0x0, 0xfff, [{0x2, 0x3, 0x1, 0x5, '\xe7'}, {0x3, 0x2, 0x0, 0x800}, {0x6, 0xf, 0x4, 0x10001, '($+\x00'}, {0x3, 0xbe, 0x2, 0x7, '-]'}, {0x2, 0x2, 0x5, 0x100, '#^{^\x00'}]}, &(0x7f0000002bc0)={0x3d0, 0xfffffffffffffff5, 0x7f, [{{0x1, 0x3, 0x1, 0x7fff, 0x7, 0x92f9, {0x1, 0x5, 0x2, 0x1, 0x9, 0x100, 0x2, 0x7, 0x2, 0xa000, 0x6, r2, r6, 0x2, 0x4}}, {0x3, 0x0, 0x1, 0xb, '*'}}, {{0x6, 0x2, 0xa8, 0x8001, 0x8ba, 0x8, {0x0, 0x794, 0x7, 0x2, 0x4, 0x10, 0x8, 0x1, 0x5, 0x2000, 0x5, r7, r8, 0x3, 0x9}}, {0x3, 0xd940, 0x5, 0x7, '#^{^\x00'}}, {{0x6, 0x0, 0x4, 0x3, 0xe, 0x2, {0x6, 0x7, 0x3, 0x7f, 0xa, 0x26, 0x774a, 0x8, 0x4, 0xa000, 0x2, r2, r9, 0x65f}}, {0x3, 0x950, 0x2, 0x5, '[,'}}, {{0x2, 0x2, 0x0, 0x1, 0x7, 0x0, {0x6, 0x7fff, 0x2, 0xb55, 0x3, 0x1, 0xea85, 0x3, 0x2, 0x8000, 0x6, r2, r10, 0x3, 0xec14}}, {0x5, 0x400, 0x5, 0x1, '}\\\xe9,^'}}, {{0x6, 0x3, 0xc, 0x8, 0x2, 0x40, {0x3, 0x100, 0x8, 0x5, 0x6, 0xfffffffffffffff7, 0xdf6, 0x4, 0x3, 0x8000, 0x9, r2, r11, 0x2, 0x7}}, {0x2, 0x3, 0x4, 0x2, '($+\x00'}}, {{0x2, 0x2, 0xa, 0x7607340f, 0x8, 0x42, {0x5, 0x36da, 0x0, 0x1, 0x6, 0x81, 0xd, 0x400, 0x8, 0x6000, 0x8000, r2, r13, 0x4, 0x81}}, {0x2, 0xff, 0x1, 0x9, '\''}}]}, &(0x7f0000003080)={0xa0, 0x0, 0x1ff, {{0x6, 0x3, 0x9e9, 0xb, 0x1, 0xe18, {0x4, 0x4, 0x6, 0x8000000000000000, 0x101, 0x6, 0x2, 0x64f3, 0x81, 0xa000, 0x7, r2, r14, 0xc00000, 0x2}}, {0x0, 0x10}}}, &(0x7f0000003140)={0x20, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x9, 0x5}}, &(0x7f0000005280)={0x130, 0x0, 0x7, {0xfff, 0x7c57, 0x0, '\x00', {0x8000, 0x3, 0x2, 0x2, r15, r17, 0x8000, '\x00', 0x8, 0xffffffffffffffff, 0xfffffffffffffff0, 0x1, {0x5, 0xc24}, {0x7, 0x3}, {0x7fff, 0x1}, {0x1}, 0x7, 0x9, 0x2006, 0xd}}}}) (async) setgroups(0x2, &(0x7f0000005480)=[r16, r11]) (async) setxattr$incfs_metadata(&(0x7f00000054c0)='./file0\x00', &(0x7f0000005500), &(0x7f0000005540)="e59849be0a75f24cda23a7e0b38c2749ee0856e2712372d31d935272e8aae52e923326e45a1d347f48850a0dcbd470e8a85be2d45fd4e9281a07be51a88beabc05d980b5d273b32ed6cdbfb45cf9d4c195fb3ab6fe8d140a4701f27c4aac05ff1dd1a85005e759b4095488d599a5b4dadcc3732838d5deb7b1a5f02238b25fa61bf370f8c253d94de5ca9b5496d9bb53d48cd6a390b4ed00913c436f2bfe488afb73266e4c89f995dbbbca4cc9d1f16878b9a4407cbee33deaea1a809060c9a2193c93a3bb97a22ddecd11d1df498ac5aa084844092ca65488ce810f6bf141cbc3686dc82534f1dbfcca3cfcc2", 0xed, 0x1) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r18, &(0x7f0000005740)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005700)={&(0x7f00000056c0)={0x1c, r19, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r20 = openat$dir(0xffffffffffffff9c, &(0x7f0000005780)='./file0\x00', 0x101000, 0x40) r21 = openat(r20, &(0x7f00000057c0)='./file0\x00', 0x26e804, 0xc4f376cc13e90e41) socket$nl_generic(0x10, 0x3, 0x10) (async) statx(r21, &(0x7f0000005840)='./file0\x00', 0x100, 0x2, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000603, &(0x7f0000005800)=@loop={'/dev/loop', 0x0}, r22, &(0x7f0000005980)={0x2, 0x9, 0x1, 0x2}) (async) ioctl$HIDIOCGNAME(r21, 0x80404806, &(0x7f00000059c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005a40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005d00)=[{&(0x7f0000005ac0)="073a52c69738ff299ad15cde27b33f2c3213ea9dea761ca7051094385ca67f7b7c37cc41400a7af926ee5ba3865a802ff067208bc345ed5cc1273323d76891bdb7fbb63897dc713357af1d054f3e26cd35113c73390c555a28b97408121a6dddb7380abc48d68489160a12c4e1224bea65faf403fbbc63cbb26f1ff556c852b074c5d7750b4b3e08a03c2569969d75377d769eca548571b3be73952ead28dedfd316562b6967c7a899438d06ea70ebc0064232bbe934ee26e39ae02ba0adef8f40cdc2d1c40a503cde9ec0c6be38ba76", 0xd0}, {&(0x7f0000005bc0)="619f9171cb5907dda63f5394977edf2c57d456776b95c26e2db4a240d99c8e488ee7e4c9d906b0b33848a1e1df14fe9c941b20bee94c6a09c66e6dfe60d9507e5cf33d8d87f81be1c7cf697e03959fdb10d1db521872420d5790bdfac3fae8c9c8ce74bcf3f3db9f9977c9b18619aa388a83bce7a84ee957df20b9b25eacc986adc3a250ac98bb2bc40f63f6701a7edb1e0b041248b6da5c3f4d924cbf631e05ea38691cd0c7", 0xa6}, {&(0x7f0000005c80)="b365f6c3178be65d737ef1e8ba54d933992ee704a8a2e7c19a647f4546f2ff3d4576c931917f8b394c911ad7b6dddbca6df8acf1053441f82faaf9c7ad93503f692c7a03e0a96804f69adf9ef43065bdc14a4834b0e4655ae1f6ddceaeeb3b897960bbf65f801517c80b4ef2e53d0800860155029da4623a6a729b32220307", 0x7f}], 0x3, &(0x7f0000005e00)=[@cred={{0x1c, 0x1, 0x2, {r12, r7}}}, @rights={{0x1c, 0x1, 0x1, [r20, r21, r18]}}], 0x40, 0x4}, 0x4000010) 892.545691ms ago: executing program 2 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240080) r2 = syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0xdd, {0xdd, 0x5, "0ea7879ae0a73db896f87b56434ffb415653e20ff6c92b1489328e03cd301b32cbd29b5f4674b1b5f3339f3a9042628a029d0de5fa108dc061266754bdd6f92f1763ae76b797bfec3cda1354456a3badf949f64a854e6e75118e52beee34efbf88982fbd1d03ee87c30926fd26078c31461a06597f9f600cd6d76d7b63d827031a959ae6665fadd7b1ad3f251ad18112e56d1901425960af757e3602e2d372650b46512f495b3e933c5ba0648dbf668d2aa678db6418acd5fd07331e614eefd95dbf5bf059771ab086e6f056501df236977114cffb624dd1d86c73"}}, &(0x7f0000000300)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "ab5ee4ec3a0174e834001071e4f39379956f2bbf3f2e2f7c14c1a06fc1420e5eb471af82f306476e376baabef3f5c098e4df1cdd1b219aa0ceb9f87d07590689eb04a9325ff689a1f16d7d530e17a996cc133ed41694960556f0c7706037ac3431c06f6f4c6901a976559bf90ed07c36e9dd2ee3aebc5f7323a76168da4cef17d0694206ede44aaacdee9a990da53c788db8f261ab8d2ced6895d345646e9433b0cd625913ac5758eca0a480ab4a092646eed483cc7a883898c743413fa20fd4b4d1c43ae8aa374c9fd9a9e29b97beb254347cdcb1abe2b8ed06339418"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="000f18000000050f18000210100a06010800000f0f000000000000"], &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x7d, 0x5, "a6379378", "f26e9482"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x10, 0x1, 0xa, 0x7, 0x5, 0x7}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x20, 0x17}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f00000001c0)=0xfffffffd) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) socket(0xa, 0x801, 0x0) getsockopt(r0, 0x2, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014ffffffee62726f6164636173742d6c696e6b00000000"], 0x68}}, 0x0) 681.902728ms ago: executing program 5 (id=1042): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) syz_usb_connect$uac3(0x4, 0xd1, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x1b}, [@mixer_unit={0xb, 0x24, 0x5, 0x1, 0xaf, "43528b7c709e"}, @cluster_info_segment={0x6, 0x20, 0x4, 0xaf, 0xe5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xad}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x3, 0x1, 0x40}, @as_header={0x17, 0x24, 0x1, 0x9, 0x1, 0x3, 0x3, 0x30, 0x8, 0x401, 0x5b}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf6b, 0x7, 0x0, 0xa}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x7, 0x4, 0x47, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x6, 0x1, 0xb53}}}}}}}}]}}, 0x0) 458.627845ms ago: executing program 0 (id=1043): mkdir(&(0x7f0000000040)='./file0\x00', 0x65) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) (async) mount$bpf(0x0, 0x0, 0x0, 0x5805040, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)=@ethtool_coalesce={0x0, 0x8, 0x5, 0x9, 0x1, 0x5, 0xd, 0x2, 0x81, 0x0, 0xcd6, 0x58f1, 0x5, 0x47, 0x5, 0x7a89, 0x1, 0x1, 0xff, 0x8, 0x0, 0x0, 0x10001}}) (async) r2 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000140)=0x6e, 0x80800) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0x8, 0x590c0d22, 0x0, 0x9, 0x7, 0x3, 0x0, 0x0, 0x2}}, 0x50) chown(&(0x7f0000000100)='./file0\x00', 0x0, r4) 126.827276ms ago: executing program 2 (id=1044): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYBLOB="ec11ee10868dc1e5ef", @ANYRES64=r0, @ANYRES16=r1], 0x128}, 0x40) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x2c, 0x1, 0x20000a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r9, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) (async) rt_sigtimedwait(&(0x7f0000000000)={[0xa0]}, 0x0, &(0x7f0000000100), 0x8) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000015000b0000000000000000000a0000000400000014000100ff010000000000000000000000000001140002"], 0x40}}, 0x0) 59.966028ms ago: executing program 2 (id=1045): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffffffc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) lremovexattr(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00') (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fdc000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = inotify_init() poll(&(0x7f00000000c0)=[{r0, 0x20}, {r1, 0x80}, {r2, 0x4800}, {r1, 0x8}, {r3, 0x2001}, {r7, 0x10}], 0x6, 0xf) (async) rt_sigreturn() (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0x20000002}) (async) epoll_pwait2(r9, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r9, 0x221}], 0x1, 0x0, 0x0, 0x0) (async) epoll_pwait(r9, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)={0x800001f}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d80011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 0s ago: executing program 2 (id=1046): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0xfffffffffffffe04) (async) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) (async) syz_io_uring_complete(r4, r5) (async) nanosleep(0x0, 0x0) (async) r11 = syz_open_dev$ublk_bdev(0x0, r7, 0x0) pread64$ublk_bdev(r11, &(0x7f0000005000)=""/4096, 0x1000, 0x0) (async) r12 = creat(&(0x7f0000000180)='./file0\x00', 0x9) accept$inet(r12, &(0x7f0000000280), &(0x7f00000002c0)=0x10) (async) syz_ublk_process_io(r10, 0x0, 0x1, 0x0, 0x0) (async) syz_io_uring_submit$UBLK(r4, r5, r6, 0x0) (async) syz_io_uring_complete(r4, r5) (async) syz_io_uring_submit$UBLK(r4, r5, r6, 0x0) (async) syz_io_uring_complete(r4, r5) (async) r13 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r13, 0xc0105500, &(0x7f0000000140)={0xe1, 0x12, 0x302, 0xb8e, 0x0, 0x101, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x8, 0x9, 0x263c1f9d6a35d647}) ioctl$BTRFS_IOC_GET_DEV_STATS(r13, 0xc4089434, &(0x7f0000000780)={r14, 0x230, 0x1, [0x3, 0x7, 0x5, 0x0, 0x18ef3d12], [0x3, 0x2, 0x3, 0x8, 0x4, 0x5, 0xfe, 0x1000, 0x7fff, 0x3, 0x4, 0x7, 0x9, 0xffffffffffffb497, 0x3ff, 0x3, 0x1, 0x2, 0xffffffffffffffdf, 0xfffffffffffffff7, 0x3, 0xa, 0x8, 0x464a57a5, 0x5, 0x2, 0x5, 0x9, 0x0, 0x2, 0x303, 0xffffffffffffffff, 0x9, 0x8, 0x7ff, 0x8000000000000000, 0x5, 0x3, 0x1, 0x8000000000000000, 0x8000000000000001, 0x7f, 0x3, 0x2, 0xff, 0x1, 0x2, 0x5071, 0x3, 0x80, 0xf, 0x6, 0x10000, 0x80d, 0xfff, 0x2, 0x3, 0x1, 0x477, 0x0, 0x18, 0xffffffff9f32852c, 0x6, 0x3, 0x7, 0xffffffffffff1fac, 0xfffffffffffffffe, 0x2, 0x5, 0xfffffffffffffff9, 0xfff, 0x0, 0x3, 0x3, 0xc190, 0x6, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x7dc, 0x7fffffff, 0x4, 0x131b, 0x9, 0x80, 0x7, 0xfffffffffffffffb, 0x9, 0x0, 0x9, 0xaefc, 0xfffffffffffffffd, 0x2, 0xfffffffffffffff7, 0x8, 0x6, 0x8000000000000001, 0x7, 0x2, 0xa, 0x5, 0x7, 0x7fffffffffffffff, 0xb, 0x1, 0x4, 0x200, 0x4, 0x8, 0x5, 0x98e, 0x6, 0xc, 0x9, 0x7d59, 0xe, 0xfffffffffffffffb, 0xe68, 0x7, 0x2]}) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) (async) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) kernel console output (not intermixed with test programs): ified when creating new route [ 104.420747][ T36] audit: type=1400 audit(1780476788.019:303): avc: denied { create } for pid=1490 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.680273][ T65] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 104.831365][ T65] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 104.842232][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 104.849807][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.860817][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.870610][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 104.884323][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.893382][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.901368][ T65] usb 1-1: SerialNumber: syz [ 105.041275][ T10] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 105.049388][ T10] usb 3-1: config 0 has no interface number 0 [ 105.055477][ T10] usb 3-1: too many endpoints for config 0 interface 36 altsetting 75: 210, using maximum allowed: 30 [ 105.066433][ T10] usb 3-1: config 0 interface 36 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 105.079638][ T10] usb 3-1: config 0 interface 36 has no altsetting 0 [ 105.086333][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 105.095767][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.104279][ T10] usb 3-1: config 0 descriptor?? [ 105.108179][ T1493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.118027][ T1493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.128488][ T65] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 105.137936][ T65] usb 1-1: USB disconnect, device number 41 [ 105.316641][ T10] usb 3-1: string descriptor 0 read error: -32 [ 105.324991][ T10] usb 3-1: Cannot read MAC address [ 105.330159][ T10] MOSCHIP usb-ethernet driver 3-1:0.36: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 105.344986][ T10] usb 3-1: USB disconnect, device number 36 [ 105.529869][ T1503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.362'. [ 106.017431][ T1512] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 106.025977][ T1512] SELinux: failed to load policy [ 106.163487][ T1524] fuse: Bad value for 'user_id' [ 106.168372][ T1524] fuse: Bad value for 'user_id' [ 106.270293][ T450] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 106.420290][ T10] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 106.421347][ T450] usb 3-1: config 1 interface 0 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 106.440743][ T450] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.448660][ T450] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 106.457992][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.466009][ T450] usb 3-1: Product: syz [ 106.470151][ T450] usb 3-1: Manufacturer: syz [ 106.474741][ T450] usb 3-1: SerialNumber: syz [ 106.550277][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.617172][ T1528] netlink: 'syz.1.372': attribute type 46 has an invalid length. [ 106.625456][ T1528] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.632707][ T1528] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.639954][ T1528] bridge0: entered allmulticast mode [ 106.647056][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.654144][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.661428][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.668447][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.676212][ T1528] bridge0: entered promiscuous mode [ 106.701610][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 106.701625][ T36] audit: type=1400 audit(1780476790.299:306): avc: denied { map } for pid=1529 comm="syz.1.373" path="socket:[11555]" dev="sockfs" ino=11555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 106.810281][ T10] usb 1-1: device descriptor read/64, error -71 [ 107.050273][ T10] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 107.180272][ T10] usb 1-1: device descriptor read/64, error -71 [ 107.440278][ T10] usb 1-1: device descriptor read/64, error -71 [ 107.550372][ T10] usb usb1-port1: attempt power cycle [ 107.870117][ T36] audit: type=1400 audit(1780476791.459:307): avc: denied { listen } for pid=1551 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.889981][ T36] audit: type=1400 audit(1780476791.469:308): avc: denied { accept } for pid=1551 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.909744][ T10] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 107.931314][ T10] usb 1-1: device descriptor read/8, error -71 [ 108.061289][ T10] usb 1-1: device descriptor read/8, error -71 [ 108.310335][ T10] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 108.341290][ T10] usb 1-1: device descriptor read/8, error -71 [ 108.471350][ T10] usb 1-1: device descriptor read/8, error -71 [ 108.580352][ T10] usb usb1-port1: unable to enumerate USB device [ 108.895148][ T450] usb 3-1: MIDIStreaming interface descriptor not found [ 108.905390][ T450] usb 3-1: USB disconnect, device number 37 [ 109.009685][ T1564] netlink: 'syz.2.382': attribute type 16 has an invalid length. [ 109.119763][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 109.460302][ T450] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 109.590309][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 109.620268][ T450] usb 3-1: Using ep0 maxpacket: 16 [ 109.626550][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.637478][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.647235][ T450] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.660068][ T450] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.669213][ T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.677788][ T450] usb 3-1: config 0 descriptor?? [ 109.741321][ T9] usb 1-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 109.751673][ T9] usb 1-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 109.764872][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.771494][ T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 109.780546][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.789091][ T9] usb 1-1: config 0 descriptor?? [ 109.795152][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 110.085257][ T450] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 110.092752][ T450] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 110.100971][ T450] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 110.112773][ T450] microsoft 0003:045E:07DA.000B: no inputs found [ 110.119562][ T450] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 110.199566][ T1593] cgroup: fork rejected by pids controller in /syz1 [ 110.287087][ T36] audit: type=1400 audit(1780476793.879:309): avc: denied { wake_alarm } for pid=1573 comm="syz.2.386" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.807677][ T1940] overlayfs: missing 'lowerdir' [ 110.853724][ T36] audit: type=1400 audit(1780476794.449:310): avc: denied { sqpoll } for pid=1950 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.494642][ T1980] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 64) [ 111.494670][ T1980] rust_binder: Error while translating object. [ 111.505275][ T1980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.511489][ T1980] rust_binder: 1979:1980 transaction to 1979 failed: EINVAL [ 111.591864][ T1988] syzkaller0: entered promiscuous mode [ 111.604649][ T1988] syzkaller0: entered allmulticast mode [ 111.611759][ T1989] syzkaller0: delete flow: hash 3316389524 index 2 [ 111.670146][ T36] audit: type=1400 audit(1780476795.259:311): avc: denied { create } for pid=1992 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.847203][ T36] audit: type=1400 audit(1780476795.439:312): avc: denied { connect } for pid=1998 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.072753][ T10] usb 3-1: USB disconnect, device number 38 [ 112.087216][ T36] audit: type=1400 audit(1780476795.679:313): avc: denied { create } for pid=2008 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.106892][ T36] audit: type=1400 audit(1780476795.679:314): avc: denied { sys_admin } for pid=2008 comm="syz.2.418" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.243580][ T9] usb 1-1: USB disconnect, device number 46 [ 112.450460][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 112.580291][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 112.601304][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 112.609413][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.620407][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.630151][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.643348][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.652751][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.661231][ T10] usb 3-1: config 0 descriptor?? [ 112.730959][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 112.739436][ T9] usb 1-1: config 5 has an invalid interface number: 71 but max is 0 [ 112.747545][ T9] usb 1-1: config 5 has no interface number 0 [ 112.753659][ T9] usb 1-1: config 5 interface 71 altsetting 10 has an endpoint descriptor with address 0x39, changing to 0x9 [ 112.765292][ T9] usb 1-1: config 5 interface 71 altsetting 10 endpoint 0x9 has invalid maxpacket 52920, setting to 64 [ 112.776417][ T9] usb 1-1: config 5 interface 71 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 112.787362][ T9] usb 1-1: config 5 interface 71 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.800432][ T9] usb 1-1: config 5 interface 71 has no altsetting 0 [ 112.808446][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff6e, bcdDevice=c6.c1 [ 112.817521][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.825670][ T9] usb 1-1: Product: syz [ 112.829873][ T9] usb 1-1: Manufacturer: syz [ 112.834523][ T9] usb 1-1: SerialNumber: syz [ 112.840128][ T2013] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 113.051358][ T9] usb 1-1: USB disconnect, device number 47 [ 113.071198][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 113.080542][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 113.085810][ T2020] overlayfs: failed to clone upperpath [ 113.095720][ T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 113.320855][ T2011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.329392][ T2011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.340196][ T310] usb 3-1: USB disconnect, device number 39 [ 113.434447][ T2030] kvm: kvm [2029]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 113.443234][ T2030] kvm: kvm [2029]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 113.600472][ T2042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 113.840302][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 113.990274][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 113.996429][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 114.015533][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.016484][ T2053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.022519][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 114.033569][ T2053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.039597][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.056239][ T9] usb 1-1: config 0 descriptor?? [ 114.093323][ T36] audit: type=1400 audit(1780476797.689:315): avc: denied { mount } for pid=2051 comm="syz.2.433" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.115679][ T36] audit: type=1400 audit(1780476797.719:316): avc: denied { mounton } for pid=2051 comm="syz.2.433" path="/111/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 114.115762][ T2053] overlayfs: failed to resolve '/ [ 114.115762][ T2053] ': -2 [ 114.260266][ T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 114.390295][ T10] usb 3-1: device descriptor read/64, error -71 [ 114.468746][ T9] hid (null): unknown global tag 0xa3 [ 114.474896][ T9] uclogic 0003:28BD:0078.000D: interface is invalid, ignoring [ 114.630287][ T10] usb 3-1: device descriptor read/64, error -71 [ 114.672888][ T310] usb 1-1: USB disconnect, device number 48 [ 114.870303][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 115.000275][ T10] usb 3-1: device descriptor read/64, error -71 [ 115.240275][ T10] usb 3-1: device descriptor read/64, error -71 [ 115.360385][ T10] usb usb3-port1: attempt power cycle [ 115.362077][ T2077] overlayfs: failed to clone upperpath [ 115.382830][ T36] audit: type=1400 audit(1780476798.979:317): avc: denied { write } for pid=2081 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.420276][ T450] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 115.573254][ T450] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.582393][ T450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.590399][ T450] usb 1-1: Product: syz [ 115.594656][ T450] usb 1-1: Manufacturer: syz [ 115.599234][ T450] usb 1-1: SerialNumber: syz [ 115.677649][ T36] audit: type=1400 audit(1780476799.269:318): avc: denied { read } for pid=2083 comm="syz.4.443" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.699816][ T36] audit: type=1400 audit(1780476799.269:319): avc: denied { open } for pid=2083 comm="syz.4.443" path="/68/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.700272][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 115.722308][ T36] audit: type=1400 audit(1780476799.269:320): avc: denied { mounton } for pid=2083 comm="syz.4.443" path="/68/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.751294][ T10] usb 3-1: device descriptor read/8, error -71 [ 115.881278][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.120276][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 116.141287][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.271264][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.380372][ T10] usb usb3-port1: unable to enumerate USB device [ 116.607965][ T450] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.614681][ T450] cdc_ncm 1-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 116.622148][ T450] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 116.810876][ T450] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 116.823438][ T450] usb 1-1: USB disconnect, device number 49 [ 116.829777][ T450] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 116.838943][ T36] audit: type=1400 audit(1780476800.419:321): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 116.862035][ T36] audit: type=1400 audit(1780476800.419:322): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2475 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.883540][ T36] audit: type=1400 audit(1780476800.419:323): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2475 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.906369][ T36] audit: type=1400 audit(1780476800.419:324): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2475 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.930430][ T36] audit: type=1400 audit(1780476800.509:325): avc: denied { create } for pid=2098 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.953549][ T36] audit: type=1400 audit(1780476800.509:326): avc: denied { write } for pid=2098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.983033][ T36] audit: type=1400 audit(1780476800.509:327): avc: denied { append } for pid=2098 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.009554][ T36] audit: type=1400 audit(1780476800.529:328): avc: denied { unlink } for pid=2109 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.096539][ T36] audit: type=1400 audit(1780476800.689:329): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.145563][ T36] audit: type=1400 audit(1780476800.739:330): avc: denied { write } for pid=2129 comm="syz.2.449" name="ptype" dev="proc" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.490291][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 117.600310][ T450] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 117.630293][ T9] usb 3-1: device descriptor read/64, error -71 [ 117.750289][ T450] usb 1-1: Using ep0 maxpacket: 32 [ 117.755818][ T450] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 117.764723][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.772438][ T450] usb 1-1: can't read configurations, error -61 [ 117.870296][ T9] usb 3-1: device descriptor read/64, error -71 [ 117.900282][ T450] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 118.050280][ T450] usb 1-1: Using ep0 maxpacket: 32 [ 118.055822][ T450] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 118.064568][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.072159][ T450] usb 1-1: can't read configurations, error -61 [ 118.078508][ T450] usb usb1-port1: attempt power cycle [ 118.110328][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 118.240276][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.440298][ T450] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 118.460645][ T450] usb 1-1: Using ep0 maxpacket: 32 [ 118.466139][ T450] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 118.474852][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.480271][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.482415][ T450] usb 1-1: can't read configurations, error -61 [ 118.590358][ T9] usb usb3-port1: attempt power cycle [ 118.620284][ T450] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 118.640627][ T450] usb 1-1: Using ep0 maxpacket: 32 [ 118.646117][ T450] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 118.654854][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.662442][ T450] usb 1-1: can't read configurations, error -61 [ 118.668796][ T450] usb usb1-port1: unable to enumerate USB device [ 118.940283][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 118.961220][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.091320][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.212844][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 119.221704][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 119.251347][ T36] audit: type=1400 audit(1780476802.849:331): avc: denied { getopt } for pid=2162 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.330303][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 119.351176][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.481247][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.590431][ T9] usb usb3-port1: unable to enumerate USB device [ 120.219028][ T2181] netlink: 36 bytes leftover after parsing attributes in process `syz.2.467'. [ 120.368397][ T2190] tipc: Can't bind to reserved service type 2 [ 120.530315][ T450] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 120.681658][ T450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.689655][ T450] usb 3-1: not running at top speed; connect to a high speed hub [ 120.699438][ T450] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 120.708617][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.716915][ T450] usb 3-1: Product: ⥽䩌栫刿鴥嵵哔記맲뤍玼䒺駠𥳐ョ髏Ɛ가辋Ṅ获갨辪㽾꠪꫌ﷹ笾 [ 120.728951][ T450] usb 3-1: Manufacturer: Ჱ눆骗㜢經誥䚚塐ﺮ酉ﴷෂ릍냍綍빉㋺菵쾆ꍁ쵇譯ꉉ䪑莕셍ꥒ΂ㅵ㲦嫮局벸廌횞䆹䅮걒骐簰ู瓷ணܦ긋랲쬛䑣᭛떩ꥥ巏嘏覦⚝턂顢湎ﱾ㬭䗄ꓟƗ뱗﯑⯜鸵遮꒔잼懌美ጞ鏆㜱ໍ븑⍆㝭笖ꙸ괛 [ 120.757667][ T450] usb 3-1: SerialNumber: ៶Ұ芔渥⪾莑誎噈㒓ꣁ嗈摼㞟親枩ᇱ畮ܼ䴗횽櫍짹薿达ﳉ謄ꙿᆟ驭虗퓢囃耮➫↬ﮰ﯏茄퉏ꁆㇸ嵞觊뢸訛칋碯滚ట慄珽啟谵⻴곢跧竿ể艱焺槝麟궫뤯庘滚㛙㙗⟰竌鍡௨㛾氲왝쥛⟼♈➊㶔b嫨祱䟭ᮀ愀壀뤪嬾횬鄝ᤡ䥻딞쎆胹픋츞렂盨璥䈉׵곛꙾Ѩ빉鏣뾒ῂ큒 [ 120.793528][ T321] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 120.940256][ T321] usb 1-1: device descriptor read/64, error -71 [ 121.005492][ T450] usb 3-1: 1:1 : bogus bTerminalLink 3 [ 121.011456][ T450] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 121.021455][ T450] usb 3-1: USB disconnect, device number 48 [ 121.033059][ T1162] udevd[1162]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.180280][ T321] usb 1-1: device descriptor read/64, error -71 [ 121.420290][ T321] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 121.550288][ T321] usb 1-1: device descriptor read/64, error -71 [ 121.760297][ T450] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 121.790301][ T321] usb 1-1: device descriptor read/64, error -71 [ 121.900356][ T321] usb usb1-port1: attempt power cycle [ 121.910380][ T450] usb 3-1: Using ep0 maxpacket: 32 [ 121.916483][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.927465][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.937289][ T450] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 121.946332][ T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.955019][ T450] usb 3-1: config 0 descriptor?? [ 121.963584][ T2216] sit0: entered promiscuous mode [ 121.978903][ T2216] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 121.990284][ T2216] netlink: 1 bytes leftover after parsing attributes in process `syz.1.480'. [ 121.999305][ T2218] netlink: 'syz.1.480': attribute type 5 has an invalid length. [ 122.240268][ T321] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 122.261217][ T321] usb 1-1: device descriptor read/8, error -71 [ 122.355910][ T2233] rust_binder: Write failure EFAULT in pid:232 [ 122.371051][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 122.371083][ T36] audit: type=1400 audit(1780476805.969:333): avc: denied { load_policy } for pid=2234 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.371298][ T450] savu 0003:1E7D:2D5A.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 122.377345][ T2235] SELinux: policydb version 0 does not match my version range 15-33 [ 122.425135][ T321] usb 1-1: device descriptor read/8, error -71 [ 122.426096][ T2235] SELinux: failed to load policy [ 122.490193][ T36] audit: type=1400 audit(1780476806.079:334): avc: denied { mount } for pid=2238 comm="syz.4.488" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.512091][ T36] audit: type=1400 audit(1780476806.089:335): avc: denied { unmount } for pid=2238 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.533691][ T36] audit: type=1400 audit(1780476806.139:336): avc: denied { getopt } for pid=2240 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.577634][ T2245] netlink: 'syz.1.491': attribute type 63 has an invalid length. [ 122.585466][ T2245] netlink: 5 bytes leftover after parsing attributes in process `syz.1.491'. [ 122.631286][ T450] usb 3-1: USB disconnect, device number 49 [ 122.690279][ T321] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 122.711286][ T321] usb 1-1: device descriptor read/8, error -71 [ 122.841291][ T321] usb 1-1: device descriptor read/8, error -71 [ 122.960356][ T321] usb usb1-port1: unable to enumerate USB device [ 123.196569][ T36] audit: type=1400 audit(1780476806.789:337): avc: denied { write } for pid=2270 comm="syz.2.503" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.202376][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.219299][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.226067][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.232598][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.239012][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.245440][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.251871][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.258327][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.264768][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.271187][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.277584][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.284015][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.290436][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.296837][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.303257][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.309749][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.316164][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.322592][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.328992][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.335525][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.341974][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.348398][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.354854][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.361285][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.367696][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.374136][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.380570][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.386976][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.400417][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.406868][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.413565][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.423181][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.466259][ T2284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 123.481707][ T2284] netlink: 100 bytes leftover after parsing attributes in process `syz.2.508'. [ 123.790289][ T450] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 123.940273][ T450] usb 1-1: Using ep0 maxpacket: 8 [ 123.946688][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.954267][ T450] usb 1-1: can't read configurations, error -61 [ 124.090298][ T450] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 124.240302][ T450] usb 1-1: Using ep0 maxpacket: 8 [ 124.246716][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 124.254345][ T450] usb 1-1: can't read configurations, error -61 [ 124.260704][ T450] usb usb1-port1: attempt power cycle [ 124.569881][ T36] audit: type=1400 audit(1780476808.159:338): avc: denied { write } for pid=2295 comm="syz.2.513" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.610322][ T450] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 124.630625][ T450] usb 1-1: Using ep0 maxpacket: 8 [ 124.637016][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 124.644644][ T450] usb 1-1: can't read configurations, error -61 [ 124.780322][ T450] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 124.800690][ T450] usb 1-1: Using ep0 maxpacket: 8 [ 124.807042][ T450] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 124.814649][ T450] usb 1-1: can't read configurations, error -61 [ 124.821004][ T450] usb usb1-port1: unable to enumerate USB device [ 124.860302][ T31] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 125.010989][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 125.019442][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.030479][ T31] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 125.039527][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.047533][ T31] usb 3-1: Product: syz [ 125.051702][ T31] usb 3-1: Manufacturer: 븵 [ 125.056273][ T31] usb 3-1: SerialNumber: syz [ 125.267919][ T31] usb 3-1: USB disconnect, device number 50 [ 125.278137][ T1201] udevd[1201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.776243][ T2305] rust_binder: 401: no such ref 0 [ 126.020289][ T311] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 126.152628][ T36] audit: type=1326 audit(1780476809.749:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2258 comm="syz.1.498" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc963b9ce59 code=0x7fc00000 [ 126.177821][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 126.183955][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.195096][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.205048][ T311] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 126.214165][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.216889][ T2307] netlink: 'syz.1.517': attribute type 16 has an invalid length. [ 126.222930][ T311] usb 3-1: config 0 descriptor?? [ 126.230376][ T2307] netlink: 'syz.1.517': attribute type 3 has an invalid length. [ 126.242519][ T2307] netlink: 'syz.1.517': attribute type 2 has an invalid length. [ 126.250168][ T2307] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 126.257826][ T2307] netlink: 64022 bytes leftover after parsing attributes in process `syz.1.517'. [ 126.464103][ T36] audit: type=1400 audit(1780476810.059:340): avc: denied { mount } for pid=2317 comm="syz.0.521" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 126.486153][ T36] audit: type=1400 audit(1780476810.059:341): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 126.640684][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.647584][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.655095][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.661999][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.668853][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.675714][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.682578][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.689414][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.696296][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.703194][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.710039][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.716898][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.723777][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.730656][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.737504][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.744367][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.751238][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.758181][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.765048][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.772066][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.778910][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.785782][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.792701][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.799563][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.809479][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.816398][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.823297][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.830163][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.832386][ T31] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 126.837048][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.850858][ T2305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.851541][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.879982][ T2305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.889694][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.897893][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.906517][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.913449][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.920348][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.928203][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.935082][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.941987][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.948921][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.957607][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.964520][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.971426][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.978276][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.985184][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.992041][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 126.998876][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.005741][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.013133][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.020047][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.026967][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.031340][ T31] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.033891][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.045153][ T31] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.051787][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.064934][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.071568][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.078355][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 127.084991][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.094213][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.100841][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.115745][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.115963][ T31] usb 1-1: config 0 descriptor?? [ 127.122627][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.134389][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.141275][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.148129][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.154992][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.161868][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.168718][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.175595][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.182462][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.189305][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.196165][ T311] apple 0003:05AC:024B.000F: unknown main item tag 0x0 [ 127.203636][ T311] apple 0003:05AC:024B.000F: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 127.217661][ T311] usb 3-1: USB disconnect, device number 51 [ 127.451120][ T2339] netlink: 5 bytes leftover after parsing attributes in process `syz.2.528'. [ 127.460467][ T36] audit: type=1400 audit(1780476811.059:342): avc: denied { getattr } for pid=2338 comm="syz.2.528" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.533009][ T31] lenovo 0003:17EF:60B5.0010: unknown main item tag 0x0 [ 127.540023][ T31] lenovo 0003:17EF:60B5.0010: unknown main item tag 0x0 [ 127.546997][ T31] lenovo 0003:17EF:60B5.0010: unknown main item tag 0x0 [ 127.553986][ T31] lenovo 0003:17EF:60B5.0010: unknown main item tag 0x0 [ 127.560942][ T31] lenovo 0003:17EF:60B5.0010: unknown main item tag 0x0 [ 127.567878][ T31] lenovo 0003:17EF:60B5.0010: item fetching failed at offset 31/40 [ 127.576350][ T31] lenovo 0003:17EF:60B5.0010: hid_parse failed [ 127.582541][ T31] lenovo 0003:17EF:60B5.0010: probe with driver lenovo failed with error -22 [ 127.732882][ T31] usb 1-1: USB disconnect, device number 62 [ 127.968551][ T2344] fuse: Bad value for 'group_id' [ 127.973599][ T2344] fuse: Bad value for 'group_id' [ 127.985877][ T2350] 9p: Unknown Cache mode or invalid value read)ahead [ 127.993029][ T2350] 9p: Unknown Cache mode or invalid value [ 128.080899][ T36] audit: type=1400 audit(1780476811.679:343): avc: denied { bind } for pid=2355 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.117248][ T2358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 128.120297][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 128.490302][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 128.530379][ T311] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 128.640278][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 128.645753][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 128.654623][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 128.662261][ T10] usb 1-1: can't read configurations, error -61 [ 128.681248][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.694712][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.705017][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 128.714068][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.722116][ T311] usb 3-1: Product: syz [ 128.726258][ T311] usb 3-1: Manufacturer: syz [ 128.731005][ T311] usb 3-1: SerialNumber: syz [ 128.790268][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 128.937896][ T311] usb 3-1: 0:1 : does not exist [ 128.943120][ T311] usb 3-1: unit 4 not found! [ 128.947716][ T311] usb 3-1: unit 51 not found! [ 128.952431][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 128.958112][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 128.966931][ T311] usb 3-1: USB disconnect, device number 52 [ 128.974464][ T1201] udevd[1201]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 128.985302][ T1201] udevd[1201]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 128.996432][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 129.004016][ T10] usb 1-1: can't read configurations, error -61 [ 129.010584][ T10] usb usb1-port1: attempt power cycle [ 129.350319][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 129.364788][ T36] audit: type=1400 audit(1780476812.959:344): avc: denied { accept } for pid=2373 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.390768][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 129.396382][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 129.405430][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 129.413169][ T10] usb 1-1: can't read configurations, error -61 [ 129.540318][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 129.560701][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 129.566137][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 129.575224][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 129.582829][ T10] usb 1-1: can't read configurations, error -61 [ 129.589169][ T10] usb usb1-port1: unable to enumerate USB device [ 129.690332][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 129.841229][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.851343][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.860869][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.869899][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 129.877990][ T31] usb 3-1: SerialNumber: syz [ 129.980970][ T36] audit: type=1400 audit(1780476813.579:345): avc: denied { remount } for pid=2391 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.007098][ T2394] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 130.014790][ T2394] netlink: 1 bytes leftover after parsing attributes in process `syz.1.546'. [ 130.085269][ T31] usb 3-1: 0:2 : does not exist [ 130.090178][ T31] usb 3-1: unit 128 not found! [ 130.096478][ T31] usb 3-1: USB disconnect, device number 53 [ 130.890312][ T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 131.030381][ T31] usb 3-1: device descriptor read/64, error -71 [ 131.272173][ T31] usb 3-1: device descriptor read/64, error -71 [ 131.510315][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 131.640325][ T31] usb 3-1: device descriptor read/64, error -71 [ 131.660286][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 131.761126][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.769630][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.777764][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.786235][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.794265][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.802700][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.810701][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.819201][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.820259][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 131.827805][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.833774][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.840664][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.848632][ T10] usb 1-1: config 0 has no interface number 0 [ 131.863880][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.873031][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.880278][ T31] usb 3-1: device descriptor read/64, error -71 [ 131.881029][ T10] usb 1-1: Product: syz [ 131.891471][ T10] usb 1-1: Manufacturer: syz [ 131.896043][ T10] usb 1-1: SerialNumber: syz [ 131.901187][ T10] usb 1-1: config 0 descriptor?? [ 131.906903][ T10] smsc95xx v2.0.0 [ 131.990402][ T31] usb usb3-port1: attempt power cycle [ 132.195755][ T2433] 9pnet_fd: Insufficient options for proto=fd [ 132.307896][ T2417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.316456][ T2417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.330331][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 132.351226][ T31] usb 3-1: device descriptor read/8, error -71 [ 132.481296][ T31] usb 3-1: device descriptor read/8, error -71 [ 132.720294][ T31] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 132.726081][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 132.741351][ T31] usb 3-1: device descriptor read/8, error -71 [ 132.881309][ T31] usb 3-1: device descriptor read/8, error -71 [ 133.000375][ T31] usb usb3-port1: unable to enumerate USB device [ 133.226748][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 133.238315][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 133.249018][ T10] usb 1-1: USB disconnect, device number 67 [ 133.869796][ T36] audit: type=1400 audit(1780476817.459:346): avc: denied { mounton } for pid=2465 comm="syz.1.572" path="/248/file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.030283][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 134.070307][ T450] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 134.160295][ T31] usb 1-1: device descriptor read/64, error -71 [ 134.230265][ T450] usb 3-1: Using ep0 maxpacket: 8 [ 134.236370][ T450] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.247424][ T450] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.260342][ T450] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.266957][ T450] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 134.276082][ T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.285128][ T450] usb 3-1: config 0 descriptor?? [ 134.420281][ T31] usb 1-1: device descriptor read/64, error -71 [ 134.670301][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 134.692505][ T36] audit: type=1326 audit(1780476818.289:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.2.567" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbafb99ce59 code=0x0 [ 134.746104][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x2 [ 134.753069][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x0 [ 134.760241][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x0 [ 134.767118][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x0 [ 134.774167][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x0 [ 134.790036][ T450] wacom 0003:056A:00DE.0011: unknown main item tag 0x0 [ 134.798305][ T450] wacom 0003:056A:00DE.0011: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 134.807833][ T31] usb 1-1: device descriptor read/64, error -71 [ 134.816063][ T450] wacom 0003:056A:00DE.0011: hidraw0: USB HID v0.04 Device [HID 056a:00de] on usb-dummy_hcd.2-1/input0 [ 134.839294][ T450] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00DE.0011/input/input8 [ 135.050282][ T31] usb 1-1: device descriptor read/64, error -71 [ 135.160623][ T31] usb usb1-port1: attempt power cycle [ 135.472063][ T2499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 135.510356][ T31] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 135.531316][ T31] usb 1-1: device descriptor read/8, error -71 [ 135.671404][ T31] usb 1-1: device descriptor read/8, error -71 [ 135.910281][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 135.931259][ T31] usb 1-1: device descriptor read/8, error -71 [ 136.071255][ T31] usb 1-1: device descriptor read/8, error -71 [ 136.191374][ T31] usb usb1-port1: unable to enumerate USB device [ 136.372158][ T2503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.581'. [ 136.677219][ T10] usb 3-1: USB disconnect, device number 58 [ 136.785284][ T2508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'. [ 136.794197][ T36] audit: type=1400 audit(1780476820.379:348): avc: denied { nlmsg_tty_audit } for pid=2507 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.815212][ T36] audit: type=1400 audit(1780476820.379:349): avc: denied { nlmsg_read } for pid=2507 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.891782][ T2516] overlayfs: failed to clone upperpath [ 136.927589][ T2527] netlink: 'syz.1.587': attribute type 4 has an invalid length. [ 136.935289][ T2527] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.587'. [ 136.980305][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 137.130287][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 137.136757][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.145107][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 137.157455][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 137.166533][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.174654][ T10] usb 3-1: Product: syz [ 137.178857][ T10] usb 3-1: Manufacturer: syz [ 137.183477][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 137.191071][ T10] usb 3-1: SerialNumber: syz [ 137.320264][ T9] usb 1-1: device descriptor read/64, error -71 [ 137.397456][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.405974][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.414078][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.422530][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.430605][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.439024][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.447179][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.455644][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.464530][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.473466][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.516719][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.523713][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 137.533713][ T10] usb 3-1: USB disconnect, device number 59 [ 137.541959][ T1162] udevd[1162]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.590296][ T9] usb 1-1: device descriptor read/64, error -71 [ 137.830274][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 137.960291][ T9] usb 1-1: device descriptor read/64, error -71 [ 138.200395][ T9] usb 1-1: device descriptor read/64, error -71 [ 138.260282][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 138.310404][ T9] usb usb1-port1: attempt power cycle [ 138.390313][ T10] usb 3-1: device descriptor read/64, error -71 [ 138.640291][ T10] usb 3-1: device descriptor read/64, error -71 [ 138.650307][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 138.671220][ T9] usb 1-1: device descriptor read/8, error -71 [ 138.811238][ T9] usb 1-1: device descriptor read/8, error -71 [ 138.880287][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 139.020422][ T10] usb 3-1: device descriptor read/64, error -71 [ 139.050284][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 139.071255][ T9] usb 1-1: device descriptor read/8, error -71 [ 139.201261][ T9] usb 1-1: device descriptor read/8, error -71 [ 139.260280][ T10] usb 3-1: device descriptor read/64, error -71 [ 139.310384][ T9] usb usb1-port1: unable to enumerate USB device [ 139.370389][ T10] usb usb3-port1: attempt power cycle [ 139.615263][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 139.710298][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 139.731379][ T10] usb 3-1: device descriptor read/8, error -71 [ 139.861291][ T10] usb 3-1: device descriptor read/8, error -71 [ 140.100311][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 140.121221][ T10] usb 3-1: device descriptor read/8, error -71 [ 140.146866][ T36] audit: type=1400 audit(1780476823.739:350): avc: denied { read } for pid=2567 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.190285][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 140.251270][ T10] usb 3-1: device descriptor read/8, error -71 [ 140.320291][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.360390][ T10] usb usb3-port1: unable to enumerate USB device [ 140.560324][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.678608][ T36] audit: type=1400 audit(1780476824.269:351): avc: denied { create } for pid=2572 comm="syz.1.604" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.699151][ T36] audit: type=1400 audit(1780476824.269:352): avc: denied { mounton } for pid=2572 comm="syz.1.604" path="/272/file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.722290][ T36] audit: type=1400 audit(1780476824.269:353): avc: denied { read write } for pid=2572 comm="syz.1.604" name="file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.727343][ T2581] tmpfs: Unknown parameter 'no' [ 140.745266][ T36] audit: type=1400 audit(1780476824.269:354): avc: denied { open } for pid=2572 comm="syz.1.604" path="/272/file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.756211][ T2581] futex_wake_op: syz.1.607 tries to shift op by -1; fix this program [ 140.772775][ T36] audit: type=1400 audit(1780476824.299:355): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.810303][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 140.950324][ T9] usb 1-1: device descriptor read/64, error -71 [ 141.043819][ T36] audit: type=1400 audit(1780476824.639:356): avc: denied { getopt } for pid=2593 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.063531][ T36] audit: type=1400 audit(1780476824.639:357): avc: denied { map } for pid=2593 comm="syz.2.611" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 141.210261][ T9] usb 1-1: device descriptor read/64, error -71 [ 141.320354][ T9] usb usb1-port1: attempt power cycle [ 141.374714][ T2599] fuse: Bad value for 'fd' [ 141.390295][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 141.541410][ T10] usb 3-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 141.551700][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 141.561977][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 4.40 [ 141.571086][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.579140][ T10] usb 3-1: Product: syz [ 141.583311][ T10] usb 3-1: Manufacturer: syz [ 141.588061][ T10] usb 3-1: SerialNumber: syz [ 141.670274][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 141.691226][ T9] usb 1-1: device descriptor read/8, error -71 [ 141.800326][ T10] usb 3-1: USB disconnect, device number 64 [ 141.821413][ T9] usb 1-1: device descriptor read/8, error -71 [ 142.070275][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 142.091254][ T9] usb 1-1: device descriptor read/8, error -71 [ 142.221315][ T9] usb 1-1: device descriptor read/8, error -71 [ 142.331469][ T9] usb usb1-port1: unable to enumerate USB device [ 142.360302][ T65] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 142.511264][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.522223][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.531994][ T65] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 142.541043][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.549481][ T65] usb 3-1: config 0 descriptor?? [ 142.959743][ T65] hkems 0003:2006:0118.0012: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 142.970963][ T65] hkems 0003:2006:0118.0012: no inputs found [ 142.976999][ T65] hkems 0003:2006:0118.0012: force feedback init failed [ 143.162092][ T36] audit: type=1400 audit(1780476826.759:358): avc: denied { listen } for pid=2614 comm="syz.2.617" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.180836][ T450] usb 3-1: USB disconnect, device number 65 [ 143.350323][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 143.501498][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.512425][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.521486][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.530016][ T9] usb 1-1: config 0 descriptor?? [ 143.825976][ T2646] overlayfs: failed to clone upperpath [ 143.937057][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.945607][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.954066][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.962647][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.971643][ T9] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 143.981186][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input11 [ 144.056333][ T9] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 144.182269][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.190832][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.549951][ T2658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.558489][ T2658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.001091][ T9] usb 1-1: USB disconnect, device number 80 [ 146.027644][ T36] audit: type=1400 audit(1780476829.619:359): avc: denied { create } for pid=2665 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 146.153027][ T2671] batadv_slave_1: entered promiscuous mode [ 146.161058][ T2670] batadv_slave_1: left promiscuous mode [ 146.832132][ T36] audit: type=1400 audit(1780476830.429:360): avc: denied { bind } for pid=2676 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.890549][ T36] audit: type=1400 audit(1780476830.489:361): avc: denied { accept } for pid=2679 comm="syz.2.639" path="socket:[15804]" dev="sockfs" ino=15804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.918443][ T2682] netlink: 'syz.4.640': attribute type 29 has an invalid length. [ 146.963006][ T2696] veth1_to_bond: entered allmulticast mode [ 146.966592][ T36] audit: type=1400 audit(1780476830.559:362): avc: denied { view } for pid=2697 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 146.970638][ T2696] veth1_to_bond: entered promiscuous mode [ 146.993688][ T2698] syzkaller1: entered promiscuous mode [ 146.999276][ T2698] syzkaller1: entered allmulticast mode [ 147.005510][ T2696] veth1_to_bond: left promiscuous mode [ 147.011214][ T2696] veth1_to_bond: left allmulticast mode [ 147.017857][ T2696] rust_binder: 271: no such ref 0 [ 147.160317][ T9] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 147.310296][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 147.330721][ T31] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 147.440298][ T9] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 147.492190][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 147.502913][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 147.512847][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 147.524195][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.533295][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.541329][ T31] usb 1-1: Product: ఊ [ 147.545474][ T31] usb 1-1: Manufacturer: ࠐ [ 147.550045][ T31] usb 1-1: SerialNumber: 엊⳦텃袏痳囼킇踴ۆ់膃㉅뜍뵥㳑똎䗂穟גּ銽ը䏽岩畎ㄱ禚医䴇껭씓寡檩慼⶞劖扈뷃ᩄ쳵쵚␳┏︽ẚ⇹뚄鲦Š鬜ಚ耶傴㫛❓傺畬友裡怮꫍俧㩵槳ឌ᨞脞掎馍 [ 147.574482][ T2702] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 147.590265][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 147.595725][ T9] usb usb3-port1: attempt power cycle [ 147.782824][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.791343][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.799791][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.808504][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.817017][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.825578][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.940309][ T9] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 147.960625][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 148.090335][ T9] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 148.110646][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 148.116035][ T9] usb usb3-port1: unable to enumerate USB device [ 148.341339][ T31] cdc_ncm 1-1:1.0: bind() failure [ 148.347994][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 148.358777][ T31] cdc_ncm 1-1:1.1: bind() failure [ 148.366236][ T31] usb 1-1: USB disconnect, device number 81 [ 148.452906][ T2710] syz.0.649 uses obsolete (PF_INET,SOCK_PACKET) [ 148.830296][ T31] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 148.981338][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 148.990134][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.000286][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.009135][ T31] usb 1-1: config 1 has no interface number 0 [ 149.015312][ T31] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 149.026072][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 149.040442][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.049475][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.057487][ T31] usb 1-1: Product: syz [ 149.061665][ T31] usb 1-1: Manufacturer: syz [ 149.066233][ T31] usb 1-1: SerialNumber: syz [ 149.476195][ T2718] tmpfs: Too few inodes for current use [ 149.482419][ T9] usb 1-1: USB disconnect, device number 82 [ 150.290267][ T36] audit: type=1326 audit(1780476833.879:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2721 comm="syz.1.654" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc963b9ce59 code=0x7fc00000 [ 150.355285][ T36] audit: type=1400 audit(1780476833.949:364): avc: denied { cmd } for pid=2745 comm="syz.1.663" path="socket:[16051]" dev="sockfs" ino=16051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.414872][ T36] audit: type=1400 audit(1780476834.009:365): avc: denied { listen } for pid=2747 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.434307][ T36] audit: type=1400 audit(1780476834.009:366): avc: denied { accept } for pid=2747 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.928480][ T2754] netlink: 156 bytes leftover after parsing attributes in process `syz.0.665'. [ 151.496180][ T36] audit: type=1400 audit(1780476835.089:367): avc: denied { write } for pid=2773 comm="syz.0.673" path="socket:[16474]" dev="sockfs" ino=16474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.824221][ T2779] netlink: 277 bytes leftover after parsing attributes in process `syz.1.674'. [ 152.257799][ T2782] rust_binder: 2780:2782 transaction to 0 failed: EINVAL [ 152.257833][ T2782] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.264893][ T2782] rust_binder: Read failure Err(EFAULT) in pid:320 [ 152.275077][ T36] audit: type=1400 audit(1780476835.869:368): avc: denied { create } for pid=2780 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.354674][ T36] audit: type=1326 audit(1780476835.949:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2785 comm="syz.1.677" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc963b9ce59 code=0x0 [ 153.049189][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 153.158047][ T36] audit: type=1400 audit(1780476836.749:370): avc: denied { mounton } for pid=2801 comm="syz.0.684" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.272208][ T2819] rust_binder: 281: no such ref 2 [ 153.372092][ T36] audit: type=1326 audit(1780476836.969:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.397295][ T36] audit: type=1326 audit(1780476836.969:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.422487][ T36] audit: type=1326 audit(1780476836.969:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.424265][ T2831] tmpfs: Unknown parameter 'nr`@ym' [ 153.447524][ T36] audit: type=1326 audit(1780476836.969:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.447556][ T36] audit: type=1326 audit(1780476836.969:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.503372][ T36] audit: type=1326 audit(1780476836.969:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.2.689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbafb99ce59 code=0x7ffc0000 [ 153.902643][ T2835] syzkaller0: entered promiscuous mode [ 153.908161][ T2835] syzkaller0: entered allmulticast mode [ 154.730288][ T65] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 154.881472][ T65] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.894412][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.901041][ T65] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 154.910064][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.918598][ T65] usb 1-1: config 0 descriptor?? [ 155.125680][ T2850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.134232][ T2850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.198428][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.206989][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.301416][ T65] usb 1-1: string descriptor 0 read error: -71 [ 155.309164][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 155.315159][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 155.323695][ T65] usb 1-1: USB disconnect, device number 83 [ 156.050315][ T450] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 156.180288][ T450] usb 1-1: device descriptor read/64, error -71 [ 156.240292][ T65] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 156.391708][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.399755][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 156.408687][ T65] usb 3-1: config 9 has an invalid interface number: 65 but max is 0 [ 156.417043][ T65] usb 3-1: config 9 has no interface number 0 [ 156.420278][ T450] usb 1-1: device descriptor read/64, error -71 [ 156.423303][ T65] usb 3-1: config 9 interface 65 has no altsetting 0 [ 156.440308][ T65] usb 3-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 156.449348][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.457857][ T65] usb 3-1: Product: syz [ 156.462132][ T65] usb 3-1: Manufacturer: syz [ 156.466728][ T65] usb 3-1: SerialNumber: syz [ 156.670275][ T450] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 156.674713][ T65] cdc_mbim 3-1:9.65: More than one union descriptor, skipping ... [ 156.685854][ T65] cdc_mbim 3-1:9.65: CDC Union missing and no IAD found [ 156.692842][ T65] cdc_mbim 3-1:9.65: bind() failure [ 156.699761][ T65] usb 3-1: USB disconnect, device number 70 [ 156.810279][ T450] usb 1-1: device descriptor read/64, error -71 [ 157.069886][ T450] usb 1-1: device descriptor read/64, error -71 [ 157.087878][ T2883] sit0: entered promiscuous mode [ 157.093689][ T2883] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 157.101602][ T2883] netlink: 1 bytes leftover after parsing attributes in process `syz.4.708'. [ 157.126280][ T2887] netlink: 964 bytes leftover after parsing attributes in process `syz.1.710'. [ 157.147411][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 157.147426][ T36] audit: type=1400 audit(1780476840.739:389): avc: denied { nlmsg_read } for pid=2888 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.175304][ T2889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 157.184536][ T450] usb usb1-port1: attempt power cycle [ 157.198329][ T36] audit: type=1400 audit(1780476840.789:390): avc: denied { write } for pid=2890 comm="syz.4.712" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.277165][ T2899] 9pnet_fd: Insufficient options for proto=fd [ 157.510292][ T65] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 157.530279][ T450] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 157.551222][ T450] usb 1-1: device descriptor read/8, error -71 [ 157.670271][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 157.676857][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.681319][ T450] usb 1-1: device descriptor read/8, error -71 [ 157.685311][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 157.703368][ T65] usb 3-1: string descriptor 0 read error: -22 [ 157.709555][ T65] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 157.718665][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.930930][ T450] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 157.943435][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 157.955560][ T1201] udevd[1201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.972956][ T65] usb 3-1: USB disconnect, device number 71 [ 157.981868][ T450] usb 1-1: device descriptor read/8, error -71 [ 158.111339][ T450] usb 1-1: device descriptor read/8, error -71 [ 158.220372][ T450] usb usb1-port1: unable to enumerate USB device [ 158.527196][ T2918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 158.780281][ T310] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 158.940268][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 158.946428][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.956686][ T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.967038][ T310] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 158.976099][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.984222][ T310] usb 3-1: Product: syz [ 158.988379][ T310] usb 3-1: Manufacturer: syz [ 158.992969][ T310] usb 3-1: SerialNumber: syz [ 159.202464][ T310] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 159.212096][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 159.220268][ T9] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 159.222309][ T310] usb 3-1: USB disconnect, device number 72 [ 159.236980][ T1201] udevd[1201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.360312][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.438182][ T2954] netlink: 276 bytes leftover after parsing attributes in process `syz.1.735'. [ 159.600304][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.840291][ T9] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 159.950296][ T65] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 159.970271][ T9] usb 1-1: device descriptor read/64, error -71 [ 160.110270][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 160.116427][ T65] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.127371][ T65] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.140598][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 160.147196][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 160.156339][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.164958][ T65] usb 3-1: config 0 descriptor?? [ 160.220267][ T9] usb 1-1: device descriptor read/64, error -71 [ 160.313097][ T2968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2968 comm=syz.1.740 [ 160.327644][ T2968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.740'. [ 160.340395][ T9] usb usb1-port1: attempt power cycle [ 160.360803][ T2972] overlayfs: failed to clone upperpath [ 160.574057][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x3 [ 160.582688][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.589808][ T36] audit: type=1326 audit(1780476844.189:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.1.742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc963b9ce59 code=0x0 [ 160.614402][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.621321][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.628285][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.635710][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.639161][ T2975] overlayfs: failed to clone upperpath [ 160.642634][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.655029][ T65] wacom 0003:056A:003F.0014: unknown main item tag 0x0 [ 160.663494][ T65] wacom 0003:056A:003F.0014: hidraw0: USB HID v0.04 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0 [ 160.690269][ T9] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 160.711207][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.841301][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.852460][ T450] usb 3-1: USB disconnect, device number 73 [ 161.080294][ T9] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 161.101346][ T9] usb 1-1: device descriptor read/8, error -71 [ 161.231289][ T9] usb 1-1: device descriptor read/8, error -71 [ 161.237639][ T2987] netlink: 72 bytes leftover after parsing attributes in process `syz.1.745'. [ 161.340377][ T9] usb usb1-port1: unable to enumerate USB device [ 161.511760][ T2992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 161.761607][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 161.818653][ T3004] overlayfs: failed to clone upperpath [ 161.910304][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 161.918017][ T36] audit: type=1400 audit(1780476845.509:392): avc: denied { mount } for pid=3012 comm="syz.0.753" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 161.922050][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 161.940303][ T36] audit: type=1400 audit(1780476845.519:393): avc: denied { getopt } for pid=3012 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.953320][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 161.977448][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 161.977560][ T36] audit: type=1400 audit(1780476845.579:394): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 162.008396][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 162.008425][ T36] audit: type=1400 audit(1780476845.609:395): avc: denied { shutdown } for pid=3017 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.019511][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 162.051301][ T3020] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 162.054256][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.059691][ T3020] overlayfs: missing 'lowerdir' [ 162.072721][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.086430][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.099495][ T9] usb 3-1: config 0 descriptor?? [ 162.104746][ T2993] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 162.313116][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 162.519522][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 162.529848][ T3024] bridge_slave_1: left allmulticast mode [ 162.535596][ T3024] bridge_slave_1: left promiscuous mode [ 162.545160][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.553343][ T3024] bridge_slave_0: left allmulticast mode [ 162.559019][ T3024] bridge_slave_0: left promiscuous mode [ 162.567570][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.623107][ T3035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.623129][ T3035] rust_binder: 3034:3035 transaction to 3034 failed: EINVAL [ 162.653047][ T9] usb 3-1: USB disconnect, device number 74 [ 162.675983][ T9] usblp0: removed [ 162.692863][ T1107] bridge_slave_1: left allmulticast mode [ 162.698522][ T1107] bridge_slave_1: left promiscuous mode [ 162.706050][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.713630][ T1107] bridge_slave_0: left allmulticast mode [ 162.719290][ T1107] bridge_slave_0: left promiscuous mode [ 162.725203][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.831857][ T1107] veth1_macvtap: left promiscuous mode [ 162.837415][ T1107] veth0_vlan: left promiscuous mode [ 163.179793][ T36] audit: type=1326 audit(1780476846.769:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.2.765" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbafb99ce59 code=0x0 [ 163.490286][ T310] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 163.651929][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.661893][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 163.673034][ T310] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 163.685938][ T310] usb 3-1: language id specifier not provided by device, defaulting to English [ 163.695946][ T310] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 163.705048][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.713182][ T310] usb 3-1: Product: 䮇榓侣阱䫟劅ȁ鮷堣螬튩쏥洂⬅剰㘔ヲ꧂窕뎙ࢿ솈鮖皺폆捻뮒楲ㄙ䈓찄儱嗔塹ﻡ弿죶쮆≜漵䱫馊捔睹ﮈ国Ჲﯳ㦄裏佄홶門ꚨ禨皬먷ꯇ뢀媟냧텽㤪폎㞉䫙킆ﯲ㍽䐗튘ធ쪔 [ 163.738648][ T310] usb 3-1: Manufacturer: 岷렀৽徦e䰈藱콣ꅌ續㒢ඁ᳄弟﹡ఠ賓쪙啖為ꍕ鉀倻弚ྪ퐰蕍녃阖昤뫍훚휄ᘠ跈튫ઁᓜ蹄먆竸쇚쾴⫃疓ꁬ䩲磸튴ⓢᏱ،⦒뺓⸂ [ 163.759729][ T310] usb 3-1: SerialNumber: 悯䚈痿踩黺뵾䞺벁엠ꁒ徣哏㟥樒㣔侎痀挶遍㋧訫穋㞠ꧮ뗙䧊呐窯ፘ䄅졔踺䘛房铎ຯሤ꼾鹰᪟㤣퓩ﯵ⛲붻楲蜫꿉諽궒碊捘Ⲓ䵻培乀邮䆞⺂ﶳⶈ彛냑줍㝻鼶仹䄣귌Ӎᇽ [ 163.829311][ T3081] netlink: 57 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.987006][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.995555][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.003587][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.012051][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.020062][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.028646][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.036800][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.045287][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.053493][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.061969][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.074052][ T310] usb 3-1: Can't get UAC3 power state for id 10 [ 164.081120][ T310] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 164.090380][ T310] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 164.101109][ T310] usb 3-1: USB disconnect, device number 75 [ 164.113098][ T1168] udevd[1168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.235222][ T3088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.244209][ T3088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.262061][ T3091] netlink: 'syz.1.780': attribute type 7 has an invalid length. [ 164.269843][ T3091] netlink: 'syz.1.780': attribute type 5 has an invalid length. [ 164.277642][ T3091] netlink: 17 bytes leftover after parsing attributes in process `syz.1.780'. [ 164.490334][ T31] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 164.640289][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 164.646780][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.655547][ T31] usb 1-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 164.665989][ T31] usb 1-1: config 230 has 1 interface, different from the descriptor's value: 3 [ 164.681477][ T31] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 164.691012][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.699052][ T31] usb 1-1: Product: syz [ 164.703635][ T31] usb 1-1: Manufacturer: syz [ 164.708288][ T31] usb 1-1: SerialNumber: syz [ 164.762695][ T36] audit: type=1400 audit(1780476848.359:397): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 164.800178][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.807268][ T3103] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.814730][ T3103] bridge_slave_0: entered allmulticast mode [ 164.820281][ T310] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 164.821175][ T3103] bridge_slave_0: entered promiscuous mode [ 164.834616][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.841701][ T3103] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.848751][ T3103] bridge_slave_1: entered allmulticast mode [ 164.855052][ T3103] bridge_slave_1: entered promiscuous mode [ 164.864339][ T1089] bridge_slave_1: left allmulticast mode [ 164.869974][ T1089] bridge_slave_1: left promiscuous mode [ 164.875618][ T1089] : port 2(bridge_slave_1) entered disabled state [ 164.882560][ T1089] bridge_slave_0: left allmulticast mode [ 164.888190][ T1089] bridge_slave_0: left promiscuous mode [ 164.893900][ T1089] : port 1(bridge_slave_0) entered disabled state [ 164.950279][ T310] usb 3-1: device descriptor read/64, error -71 [ 164.981607][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.988650][ T3103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.995917][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.002959][ T3103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.012852][ T1089] veth1_macvtap: left promiscuous mode [ 165.018419][ T1089] veth0_vlan: left promiscuous mode [ 165.076327][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.083729][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.093686][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.100773][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.112938][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.119991][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.145742][ T3103] veth0_vlan: entered promiscuous mode [ 165.157366][ T3103] veth1_macvtap: entered promiscuous mode [ 165.190266][ T310] usb 3-1: device descriptor read/64, error -71 [ 165.440326][ T321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.447860][ T310] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 165.580323][ T310] usb 3-1: device descriptor read/64, error -71 [ 165.601559][ T321] usb 6-1: unable to get BOS descriptor or descriptor too short [ 165.609953][ T321] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.620117][ T321] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.629265][ T321] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 165.640327][ T321] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 165.653548][ T321] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.664362][ T321] usb 6-1: config 1 interface 1 has no altsetting 0 [ 165.672894][ T321] usb 6-1: string descriptor 0 read error: -22 [ 165.679074][ T321] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 165.688173][ T321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.820277][ T310] usb 3-1: device descriptor read/64, error -71 [ 165.930414][ T310] usb usb3-port1: attempt power cycle [ 166.270293][ T310] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 166.292259][ T310] usb 3-1: device descriptor read/8, error -71 [ 166.432217][ T310] usb 3-1: device descriptor read/8, error -71 [ 166.559310][ T321] usb 6-1: 2:0: failed to get current value for ch 1 (-32) [ 166.619240][ T3134] x_tables: duplicate underflow at hook 2 [ 166.670305][ T310] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 166.691299][ T310] usb 3-1: device descriptor read/8, error -71 [ 166.770468][ T321] usb 6-1: USB disconnect, device number 2 [ 166.821236][ T310] usb 3-1: device descriptor read/8, error -71 [ 166.930593][ T310] usb usb3-port1: unable to enumerate USB device [ 167.159804][ T3138] netlink: 'syz.1.793': attribute type 12 has an invalid length. [ 167.200947][ T31] usb 1-1: unit 4 not found! [ 167.207438][ T31] usb 1-1: unit 0 not found! [ 167.233580][ T31] usb 1-1: USB disconnect, device number 92 [ 167.251501][ T1201] udevd[1201]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:230.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.590286][ T31] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 167.600319][ T310] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 167.630094][ T3174] usb usb8: usbfs: process 3174 (syz.2.803) did not claim interface 5 before use [ 167.651068][ T36] audit: type=1400 audit(1780476851.249:398): avc: denied { read } for pid=3175 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.675988][ T36] audit: type=1400 audit(1780476851.249:399): avc: denied { ioctl } for pid=3175 comm="syz.2.804" path="socket:[20002]" dev="sockfs" ino=20002 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.729486][ T3189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 167.742996][ T3191] netlink: 84 bytes leftover after parsing attributes in process `syz.1.809'. [ 167.753282][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.762350][ T31] usb 1-1: config 1 has an invalid interface number: 98 but max is 1 [ 167.771938][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.781199][ T31] usb 1-1: config 1 has no interface number 0 [ 167.787345][ T31] usb 1-1: config 1 interface 98 has no altsetting 0 [ 167.795078][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.806004][ T310] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 167.815998][ T31] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff59, bcdDevice=b6.44 [ 167.825086][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.833110][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.841173][ T31] usb 1-1: Product: syz [ 167.845490][ T31] usb 1-1: Manufacturer: syz [ 167.850677][ T31] usb 1-1: SerialNumber: syz [ 167.855504][ T310] usb 6-1: config 0 descriptor?? [ 167.863518][ T31] cdc_ether 1-1:1.98: skipping garbage [ 167.869184][ T31] usb 1-1: bad CDC descriptors [ 168.020277][ T321] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 168.064693][ T31] usb 1-1: USB disconnect, device number 93 [ 168.170266][ T321] usb 3-1: Using ep0 maxpacket: 16 [ 168.176386][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.186489][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.196670][ T321] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.205738][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.213743][ T321] usb 3-1: Product: syz [ 168.217897][ T321] usb 3-1: Manufacturer: syz [ 168.222651][ T321] usb 3-1: SerialNumber: syz [ 168.266459][ T310] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 168.275855][ T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0015/input/input15 [ 168.343563][ T310] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 168.392176][ T3211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3211 comm=syz.1.815 [ 168.430263][ T321] usb 3-1: 0:2 : does not exist [ 168.437227][ T321] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 168.447785][ T321] usb 3-1: USB disconnect, device number 80 [ 168.648512][ T3227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 168.715047][ T3227] netlink: 80 bytes leftover after parsing attributes in process `syz.0.821'. [ 168.767460][ T36] audit: type=1400 audit(1780476852.359:400): avc: denied { read } for pid=3229 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.000281][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 169.152641][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.161737][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.169724][ T9] usb 1-1: Product: syz [ 169.173930][ T9] usb 1-1: Manufacturer: syz [ 169.178524][ T9] usb 1-1: SerialNumber: syz [ 169.357095][ T3246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.366033][ T3246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.500281][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 169.651642][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.660048][ T10] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.674949][ T10] usb 3-1: string descriptor 0 read error: -22 [ 169.681174][ T10] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 169.690208][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.903117][ T3249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.911778][ T3249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.305604][ T3241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.314238][ T3241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.524799][ T3241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.533558][ T3241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.059357][ T36] audit: type=1400 audit(1780476854.649:401): avc: denied { getopt } for pid=3269 comm="syz.2.835" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.092412][ T3273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.101089][ T3273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.116391][ T3273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.124936][ T3273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.674002][ T3294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.683071][ T3294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.777502][ T9] usb 1-1: USB disconnect, device number 94 [ 172.031753][ T3310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.040648][ T3310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.063822][ T3316] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 172.180007][ T36] audit: type=1400 audit(1780476855.769:402): avc: denied { remount } for pid=3326 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.180013][ T3327] binder: Unknown parameter 'context' [ 172.240282][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 172.276562][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.285102][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.294448][ T3334] rust_binder: Error while translating object. [ 172.294486][ T3334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.300854][ T3334] rust_binder: 3333:3334 transaction to 3333 failed: EINVAL [ 172.390265][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 172.403940][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.411784][ T9] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 172.420199][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.431011][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.441805][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.452616][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.463385][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.474204][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.484977][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.495753][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.507209][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=5e20, bcdDevice= 9.aa [ 172.516270][ T9] usb 1-1: New USB device strings: Mfr=3, Product=6, SerialNumber=232 [ 172.524454][ T9] usb 1-1: Product: syz [ 172.528599][ T9] usb 1-1: Manufacturer: syz [ 172.533389][ T9] usb 1-1: SerialNumber: syz [ 172.751216][ T3303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.760266][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.768789][ T3303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.768829][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.787843][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.796823][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.904493][ T3352] kvm: pic: non byte read [ 172.909143][ T3352] kvm: pic: non byte read [ 172.916248][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 172.923569][ T3352] kvm: pic: level sensitive irq not supported [ 172.923649][ T3352] kvm: pic: non byte read [ 172.935143][ T3352] kvm: pic: single mode not supported [ 172.935156][ T3352] kvm: pic: level sensitive irq not supported [ 172.937831][ T9] usb 1-1: USB disconnect, device number 95 [ 172.941880][ T3352] kvm: pic: non byte read [ 172.959317][ T3352] kvm: pic: single mode not supported [ 172.959331][ T3352] kvm: pic: level sensitive irq not supported [ 172.965030][ T3352] kvm: pic: non byte read [ 172.975685][ T3352] kvm: pic: level sensitive irq not supported [ 172.975755][ T3352] kvm: pic: non byte read [ 172.986434][ T3352] kvm: pic: non byte read [ 172.991011][ T3352] kvm: pic: single mode not supported [ 172.991089][ T3352] kvm: pic: non byte read [ 173.001068][ T3352] kvm: pic: level sensitive irq not supported [ 173.001110][ T3352] kvm: pic: non byte read [ 173.011948][ T3352] kvm: pic: single mode not supported [ 173.012001][ T3352] kvm: pic: non byte read [ 173.305654][ T3360] netlink: 72 bytes leftover after parsing attributes in process `syz.0.862'. [ 173.423085][ T3374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.441322][ T3374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.126961][ T1073] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.133596][ T1073] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 174.141669][ T1073] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 174.390269][ T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 174.520269][ T9] usb 1-1: device descriptor read/64, error -71 [ 174.760281][ T9] usb 1-1: device descriptor read/64, error -71 [ 175.000275][ T9] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 175.130362][ T9] usb 1-1: device descriptor read/64, error -71 [ 175.146742][ T3408] bridge0: port 3(veth1_macvtap) entered blocking state [ 175.158574][ T3408] bridge0: port 3(veth1_macvtap) entered disabled state [ 175.165702][ T3408] veth1_macvtap: entered allmulticast mode [ 175.172115][ T3408] veth1_macvtap: left allmulticast mode [ 175.186384][ T36] audit: type=1400 audit(1780476858.779:403): avc: denied { getopt } for pid=3414 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.207047][ T36] audit: type=1400 audit(1780476858.779:404): avc: denied { read } for pid=3416 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.380281][ T9] usb 1-1: device descriptor read/64, error -71 [ 175.490367][ T9] usb usb1-port1: attempt power cycle [ 175.507450][ T3429] IPv6: A: Disabled Multicast RS [ 175.561520][ T3432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.570168][ T3432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.830290][ T9] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 175.851484][ T9] usb 1-1: device descriptor read/8, error -71 [ 175.981559][ T9] usb 1-1: device descriptor read/8, error -71 [ 176.130428][ T3398] Bluetooth: hci0: command 0x1003 tx timeout [ 176.130439][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.217493][ T3441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.226062][ T3441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.240275][ T9] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 176.261278][ T9] usb 1-1: device descriptor read/8, error -71 [ 176.391791][ T9] usb 1-1: device descriptor read/8, error -71 [ 176.500377][ T9] usb usb1-port1: unable to enumerate USB device [ 176.891293][ T3463] netlink: 182 bytes leftover after parsing attributes in process `syz.1.896'. [ 176.980838][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.990774][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.999638][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.009571][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.428900][ T3494] fuse: Bad value for 'rootmode' [ 177.532932][ T36] audit: type=1400 audit(1780476861.129:405): avc: denied { read write } for pid=3510 comm="syz.5.912" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 177.558793][ T36] audit: type=1400 audit(1780476861.129:406): avc: denied { open } for pid=3510 comm="syz.5.912" path="/dev/usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 177.583011][ T36] audit: type=1400 audit(1780476861.159:407): avc: denied { create } for pid=3510 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.610271][ T321] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 177.672335][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.680949][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.690844][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.699749][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.750280][ T321] usb 1-1: device descriptor read/64, error -71 [ 177.990282][ T321] usb 1-1: device descriptor read/64, error -71 [ 178.230319][ T321] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 178.232035][ T3529] ext3: Unknown parameter '} hV)l#'D' [ 178.254724][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.919'. [ 178.254938][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.919'. [ 178.360278][ T321] usb 1-1: device descriptor read/64, error -71 [ 178.600270][ T321] usb 1-1: device descriptor read/64, error -71 [ 178.637810][ T3544] kvm: kvm [3543]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000074) [ 178.704814][ T3548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.713449][ T321] usb usb1-port1: attempt power cycle [ 178.714089][ T3548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.729362][ T3548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.738657][ T3548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.848054][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.856616][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.050266][ T321] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 179.071219][ T321] usb 1-1: device descriptor read/8, error -71 [ 179.201222][ T321] usb 1-1: device descriptor read/8, error -71 [ 179.245916][ T3569] syzkaller1: entered allmulticast mode [ 179.253639][ T36] audit: type=1400 audit(1780477115.850:408): avc: denied { map } for pid=3567 comm="syz.5.928" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 179.277229][ T36] audit: type=1400 audit(1780477115.850:409): avc: denied { execute } for pid=3567 comm="syz.5.928" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 179.388619][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.397145][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.440296][ T321] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 179.461199][ T321] usb 1-1: device descriptor read/8, error -71 [ 179.591515][ T321] usb 1-1: device descriptor read/8, error -71 [ 179.700349][ T321] usb usb1-port1: unable to enumerate USB device [ 179.856593][ T36] audit: type=1400 audit(1780477116.450:410): avc: denied { map } for pid=3575 comm="syz.1.931" path="pipe:[2342]" dev="pipefs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 180.090635][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.099657][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.262005][ T36] audit: type=1400 audit(1780477116.860:411): avc: denied { create } for pid=3586 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 180.381350][ T3595] syzkaller0: entered promiscuous mode [ 180.383122][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.386842][ T3595] syzkaller0: entered allmulticast mode [ 180.388657][ T3595] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 180.405512][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.423066][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.432647][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.441375][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.450043][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.681660][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.690210][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.698314][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.707168][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.770166][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 180.920086][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 180.926270][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 180.934367][ T10] usb 1-1: config 0 has no interface number 0 [ 180.941824][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.950880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.958857][ T10] usb 1-1: Product: syz [ 180.963030][ T10] usb 1-1: Manufacturer: syz [ 180.967610][ T10] usb 1-1: SerialNumber: syz [ 180.972825][ T10] usb 1-1: config 0 descriptor?? [ 180.978529][ T10] smsc95xx v2.0.0 [ 181.206046][ T36] audit: type=1400 audit(1780477117.800:412): avc: denied { remount } for pid=3639 comm="syz.5.949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.206531][ T3640] option changes via remount are deprecated (pid=3639 comm=syz.5.949) [ 181.233926][ T3640] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 181.258732][ T3643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.267391][ T3640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.270169][ T3643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.276730][ T3640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.379384][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 181.390352][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.810953][ T3655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.819540][ T3655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.102678][ T3664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.111209][ T3664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.257377][ T3668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16442 sclass=netlink_audit_socket pid=3668 comm=syz.1.960 [ 182.405354][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 182.429942][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 182.439031][ T10] usb 1-1: USB disconnect, device number 104 [ 182.469631][ T3674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.478475][ T3674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.129913][ T3718] netlink: 'syz.1.971': attribute type 2 has an invalid length. [ 183.152744][ T36] audit: type=1400 audit(1780477119.751:413): avc: denied { read } for pid=3723 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.209421][ T36] audit: type=1326 audit(1780477119.801:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.0.973" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9390f9ce59 code=0x0 [ 183.234275][ T36] audit: type=1326 audit(1780477119.841:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.0.973" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9390f9ce59 code=0x0 [ 183.357199][ T36] audit: type=1400 audit(1780477119.951:416): avc: denied { map } for pid=3737 comm="syz.0.977" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 183.580035][ T3742] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 183.591727][ T3742] overlayfs: missing 'lowerdir' [ 183.674114][ T3745] overlayfs: workdir and upperdir must be separate subtrees [ 183.759727][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 183.930837][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.939127][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.950100][ T10] usb 1-1: config 220 has no interface number 2 [ 183.956382][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.969963][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 183.976752][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 183.983689][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 183.994832][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.014073][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.029682][ T10] usb 1-1: Product: syz [ 184.033876][ T10] usb 1-1: Manufacturer: syz [ 184.048615][ T10] usb 1-1: SerialNumber: syz [ 184.130871][ T36] audit: type=1400 audit(1780477120.731:417): avc: denied { connect } for pid=3751 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.151304][ T36] audit: type=1400 audit(1780477120.751:419): avc: denied { lock } for pid=3751 comm="syz.1.982" path="socket:[24229]" dev="sockfs" ino=24229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 184.175289][ T36] audit: type=1400 audit(1780477120.751:418): avc: denied { lock } for pid=3751 comm="syz.1.982" path="socket:[24229]" dev="sockfs" ino=24229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 184.262974][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 184.269339][ T10] usb 1-1: No valid video chain found. [ 184.274835][ T10] usb 1-1: selecting invalid altsetting 0 [ 184.285422][ T10] usb 1-1: USB disconnect, device number 105 [ 184.553114][ T3757] tipc: Enabled bearer , priority 10 [ 184.596829][ T3760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.605727][ T3760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.713023][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 184.774812][ T3777] exFAT-fs (rnullb0): invalid boot record signature [ 184.781445][ T3777] exFAT-fs (rnullb0): failed to read boot sector [ 184.787773][ T3777] exFAT-fs (rnullb0): failed to recognize exfat type [ 185.489425][ T3816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.500476][ T3816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.603672][ T36] audit: type=1400 audit(1780477378.236:420): avc: denied { mount } for pid=3825 comm="syz.2.1003" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 185.693681][ T3833] sit0: entered promiscuous mode [ 185.700010][ T3833] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 185.707823][ T3833] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1006'. [ 186.027973][ T36] audit: type=1400 audit(1780477378.656:421): avc: denied { audit_write } for pid=3847 comm="syz.5.1011" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 186.049342][ T36] audit: type=1107 audit(1780477378.656:422): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B' [ 186.132432][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.140981][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.319643][ T370] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 186.470598][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.481568][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.491321][ T370] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 186.500381][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.508893][ T370] usb 1-1: config 0 descriptor?? [ 186.580258][ T3866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.588819][ T3866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.886212][ T36] audit: type=1400 audit(1780477379.516:423): avc: denied { write } for pid=3891 comm="syz.5.1022" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.917868][ T370] hid-led 0003:1D34:000A.0016: unknown main item tag 0x3 [ 186.918951][ T3892] deleting an unspecified loop device is not supported. [ 186.926715][ T36] audit: type=1400 audit(1780477379.546:424): avc: denied { ioctl } for pid=3891 comm="syz.5.1022" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.042994][ T3905] SELinux: policydb version 1262704001 does not match my version range 15-33 [ 187.051997][ T3905] SELinux: failed to load policy [ 187.060061][ T3905] SELinux: failed to load policy [ 187.092679][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.101793][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.101803][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.101915][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.127581][ T370] hid-led 0003:1D34:000A.0016: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 187.143598][ T370] hid-led 0003:1D34:000A.0016: Dream Cheeky Webmail Notifier initialized [ 187.353813][ T321] usb 1-1: USB disconnect, device number 106 [ 187.420304][ T36] audit: type=1400 audit(1780477380.056:425): avc: denied { lock } for pid=3928 comm="syz.2.1035" path="socket:[25970]" dev="sockfs" ino=25970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 187.429994][ T3929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.460676][ T3929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.694435][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.703776][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.714678][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.723951][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.877141][ T3933] Invalid argument reading file caps for ./file0 [ 187.884392][ T36] audit: type=1400 audit(1780477380.516:426): avc: denied { getopt } for pid=3932 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.022596][ T3945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.035712][ T3945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.937185][ T36] audit: type=1400 audit(1780477381.566:427): avc: denied { cmd } for pid=3964 comm="syz.2.1046" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 188.965261][ T36] audit: type=1400 audit(1780477381.596:428): avc: denied { map } for pid=3964 comm="syz.2.1046" path="/dev/ublkc0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.990452][ T1064] ------------[ cut here ]------------ [ 188.995943][ T1064] WARNING: CPU: 1 PID: 1064 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 189.006586][ T1064] Modules linked in: [ 189.010547][ T1064] CPU: 1 UID: 0 PID: 1064 Comm: kworker/u8:7 Not tainted syzkaller #0 cd47f8e0083a5f781c340422d7a309d6c8dfd054 [ 189.022294][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.032455][ T1064] Workqueue: iou_exit io_ring_exit_work [ 189.038044][ T1064] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 189.044428][ T1064] Code: 5d e9 45 19 55 02 cc e8 4f 4d 32 fe 0f 0b eb e3 e8 46 4d 32 fe 0f 0b eb da e8 3d 4d 32 fe 0f 0b e9 4d fe ff ff e8 31 4d 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 189.064243][ T1064] RSP: 0018:ffffc90000f9f990 EFLAGS: 00010293 [ 189.070473][ T1064] RAX: ffffffff83557aff RBX: 1ffff1102280f76d RCX: ffff88811c94cc00 [ 189.072672][ T3971] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 189.078470][ T1064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 189.078488][ T1064] RBP: ffffc90000f9f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 189.103731][ T1064] R10: 0000000000000000 R11: ffffffff83556ae0 R12: ffff88811a634c00 [ 189.111734][ T1064] R13: ffff88811407bb40 R14: ffff8881165f1f00 R15: ffff8881165f1f10 [ 189.119732][ T1064] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 189.128672][ T1064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.135291][ T1064] CR2: 0000555566506918 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 189.143289][ T1064] Call Trace: [ 189.146581][ T1064] [ 189.149521][ T1064] ? _raw_spin_unlock+0x45/0x60 [ 189.154406][ T1064] ublk_ch_uring_cmd+0x6f/0xa0 [ 189.159186][ T1064] io_uring_try_cancel_uring_cmd+0x1a1/0x280 [ 189.159631][ T36] audit: type=1400 audit(1780477381.706:429): avc: denied { mounton } for pid=3970 comm="syz.2.1047" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 189.165191][ T1064] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 189.194016][ T1064] ? io_uring_cancel_generic+0x6eb/0x6eb [ 189.199672][ T1064] io_ring_exit_work+0x23c/0x83b [ 189.204623][ T1064] ? __cfi_io_ring_exit_work+0x10/0x10 [ 189.210116][ T1064] ? wake_up_process+0x14/0x20 [ 189.214895][ T1064] process_scheduled_works+0x7d4/0x1020 [ 189.220482][ T1064] worker_thread+0xc51/0x1370 [ 189.225185][ T1064] kthread+0x2c9/0x370 [ 189.229267][ T1064] ? __cfi_worker_thread+0x10/0x10 [ 189.234407][ T1064] ? __cfi_kthread+0x10/0x10 [ 189.239015][ T1064] ret_from_fork+0x67/0xa0 [ 189.243456][ T1064] ? __cfi_kthread+0x10/0x10 [ 189.248065][ T1064] ret_from_fork_asm+0x1a/0x30 [ 189.252867][ T1064] [ 189.255893][ T1064] ---[ end trace 0000000000000000 ]---