last executing test programs: 31.248204986s ago: executing program 2 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) unshare(0x26020600) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x16) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r2) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 30.617730266s ago: executing program 2 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) unshare(0x26020600) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x16) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r2) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 30.560800407s ago: executing program 2 (id=118): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getrlimit(0x8, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{r0, r1/1000+10000}, {r2, r3/1000+60000}}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) getrlimit(0x8, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{r0, r1/1000+10000}, {r2, r3/1000+60000}}) (async) 30.47223416s ago: executing program 2 (id=119): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) shutdown(r3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660f38217c43660fd6420466b9a80200000f32b8ff078ec80f20e06635010000000f22e00f01d1f30fbb5d09b6060f0966b9ae09000066b8910ccd5666ba8d3f02230f30"}], 0x16, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r4, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.359697433s ago: executing program 2 (id=120): madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6}, 0x5}], 0x1, 0x2000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x400, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffffd, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x8, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 30.212998998s ago: executing program 2 (id=121): write$tun(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) connect$802154_dgram(r3, &(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000001821f10f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000904"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, &(0x7f0000000200)) syz_usb_control_io$printer(r4, 0x0, 0x0) 14.874728986s ago: executing program 32 (id=121): write$tun(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) connect$802154_dgram(r3, &(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000001821f10f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000904"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, &(0x7f0000000200)) syz_usb_control_io$printer(r4, 0x0, 0x0) 4.83482089s ago: executing program 1 (id=267): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x3000082, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESHEX]) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x220000, 0x20, 0x4}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x100000000, 0x0, 0x81, 0x9, 0x0, 0x102004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000010000000000000000000000002000000240001"], 0x80}}, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x10}}, 0x24000800) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r10, &(0x7f0000000300)=@unlock_all, 0xb) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000000)) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.48829206s ago: executing program 1 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @local}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x38, 0x100, @void}}}}}, 0x2e) 4.430321002s ago: executing program 1 (id=277): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081", 0x11) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0x9, 0x7, 0x2, 0xffffa16f, 0x80}, [{0x4, 0x8, 0xf, 0x80}, {0x143d, 0x1, 0x6, 0xc}]}) write$binfmt_elf32(r2, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x1f, 0x2, 0x6, 0x3, 0x6, 0x80000000, 0x19f, 0x38, 0x2c5, 0x100400, 0x4, 0x20, 0x4, 0xffff, 0xc, 0xf6d}, [{0x2, 0x91, 0x4, 0x4, 0x9, 0x7, 0xfbc9, 0xffff}, {0x5, 0x4, 0x6, 0x77681864, 0x3, 0xfff, 0x5, 0xb5b4}, {0x5, 0x80000, 0x9, 0x5, 0x0, 0x9, 0x7, 0xc8e}, {0x6, 0x10000, 0x0, 0xa1, 0x9, 0xdfd, 0x6, 0x5}]}, 0xb8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x4040) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x4000000, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r3, 0xc0000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x12) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x189, 0x0, 0x2000, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0xd0, 0xa, 0x10, 0x80, 0x2e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) recvmmsg(r0, &(0x7f0000009100)=[{{0x0, 0x0, 0x0}, 0x7a62}, {{0x0, 0x0, 0x0}, 0xd}], 0x2, 0x2000, 0x0) 4.066229283s ago: executing program 3 (id=281): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100fdff3f00000000002600000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011008000"], 0x54}}, 0x20000010) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40816) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xba, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, r7) fchown(r5, r6, r7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000480)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$cgroup_ro(r10, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r12 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000004000000", @ANYRES32=r3, @ANYBLOB="0000000000f0ffffffffffff0080000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000f0ffffffff0000000001000000", @ANYRES32=r3, @ANYBLOB="0000000000f0ffff0000000000f0ffffffffffff", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r13 = openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x20000, 0x4, 0x16}, 0x18) ppoll(&(0x7f0000000300)=[{r8, 0x40}, {r12, 0x2}, {r13, 0x8045}, {r0, 0x20}, {r2, 0x20c7}, {r11, 0x2002}, {r11, 0x222}], 0x7, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0xfffffffffffffffb]}, 0x8) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) r14 = socket$netlink(0x10, 0x3, 0xf) writev(r14, &(0x7f0000001400), 0x0) 3.350896045s ago: executing program 1 (id=289): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c0d4) 3.350526145s ago: executing program 1 (id=290): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@empty, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4f}, {0x80, 0x1000000000, 0x800, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x404d3, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a040000052412"], 0x0) (async) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a040000052412"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x4283cafe) (async) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x4283cafe) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000070000000000000000000000ff020000000000000000010004fffe4e2100020000000021f9801715df000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002"], 0x15c}, 0x1, 0x0, 0x0, 0x24000800}, 0x2014) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r6, &(0x7f0000000340)='fdinfo/3\x00') 3.307181407s ago: executing program 0 (id=292): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 3.293913338s ago: executing program 4 (id=293): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x800019, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b140, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) (async) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8881f6e0effc) 3.18416141s ago: executing program 3 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x674642, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0xffffff93) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240302, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000100)={0x1, 0x2, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}]}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @local}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x38, 0x100, @void}}}}}, 0x2e) 3.181406491s ago: executing program 3 (id=295): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000002000)={{0x0, 0x1, 0x6, 0x0, 0x9}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9922}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x937d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) poll(&(0x7f000000bcc0)=[{0xffffffffffffffff, 0x40}], 0x1, 0x200) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x200013) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000006c0)={0x0, 0x110000, 0x800, 0x7, 0x2}, 0x20) wait4(0x0, 0x0, 0x2, &(0x7f0000000180)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.765241724s ago: executing program 4 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x200) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x80, 0x0) ptrace$cont(0x9, r2, 0x7ff, 0x3) ptrace$cont(0x21, r2, 0x80000001, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110) fcntl$setown(r0, 0x8, r2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="2e652e36f3ab0f21ce2e2e0f0050a166b9ce0000000f32670f23810fc777fe0fc71e08000f01c2260fe2a6f10c3328", 0x2f}], 0x1, 0x31, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540), 0x4000, &(0x7f00000015c0)) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') 2.676503367s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x816}, @val={0x7, 0x0, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @local}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x38, 0x100, @void}}}}}, 0x2e) 2.604268229s ago: executing program 4 (id=298): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0xa, 0x801, 0x6) listen(r1, 0x48) accept4(r1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x1, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="643f0e91", 0x4}], 0x1}}, {{&(0x7f0000000340)=@can, 0x80, 0x0}}], 0x2, 0x40) 2.604072349s ago: executing program 4 (id=299): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0xda, 0x9, 0x9, 0x1, 0x5, 0xee, 0x81, 0x6, 0x1, 0x9, 0x7, 0x8, 0xa3, 0x4b, 0x6}}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0xda, 0x9, 0x9, 0x1, 0x5, 0xee, 0x81, 0x6, 0x1, 0x9, 0x7, 0x8, 0xa3, 0x4b, 0x6}}) 2.603854869s ago: executing program 4 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @local}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x38, 0x100, @void}}}}}, 0x2e) (fail_nth: 4) 2.588465819s ago: executing program 3 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001e80301090267000201df70010904000001020d00000b24060001f4ef554c63f505240024000d240f01fcffffffba00b4000906241abcf8e60424010302090581031000dd00000904010002020d000009058202ff0308090909050302080000060b0000000000"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000a69074d75ff159ef596140fb646dde8350bd0f5792ddfc156d81b1921457cd53d2a3b9dd2352f354721d0309d2b9991525154df6272408ae7a2868794222a07e8a3736864afd9deb08c2333c7e9ebc01cdbcf2a562e1ed632e31c4dfce1ef438c2720af9ef7f8f0a5b702ca1", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080001000b0000000800020040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.549647601s ago: executing program 4 (id=302): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010328bd7000fcdbdf2529"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004814) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30}, 0x200000d0) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0) 2.135889543s ago: executing program 1 (id=303): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect(0x5, 0x38, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x34, 0xed, 0x45, 0xea9eae119b77cf3d, 0x19d2, 0x1080, 0xed34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x7f, 0xc, 0x80, 0x8, "", [{{0x9, 0x4, 0x41, 0x4, 0x1, 0xff, 0xff, 0xff, 0x5, [@generic={0x2, 0x30}, @hid_hid={0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x1}}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7f, 0x2b}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdn\x82'}}]}}) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x41007701, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x4000000000010046) ioctl$KVM_S390_VCPU_FAULT(r10, 0x4008ae52, &(0x7f00000002c0)=0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r11, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) ioctl$VHOST_VDPA_SET_CONFIG(r11, 0x4008af74, &(0x7f0000000440)={0x10000, 0xe2, "691b04e5ba6c919bcb155e56230ea72d95f67fdcf5fe0bcafc2dbcb3f11603bf64a0f2f62188674a75fb646d35b79f0fc10bcc0632bb2ecec620ed5b09f2f374228594c1a490eb76c166f85560c778be2dfd0e02a2d996418a8f0ca25dc496e593d083d1a63116e6ce6349dedf3eb4eb2cce2f5bf7ec259ce9c7432970b5688d1973f684e23d0618cc07f0bcdd8bdbfc1f122cae091208e136ea0621956c64f32f41788534c74ef4f05023f92c7b6ec1c872ca999a74811df213b071b6acb7e53c72155602367da8147a09571dcb2904ac14d1deab82714bb2f4f6856c865ad3cab0"}) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.367580478s ago: executing program 3 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000000c0)={0x8000000000000000, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x50, 0x1, {0x22, 0x788}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xe9, 0x8}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) shutdown(r4, 0x1) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2401c804, 0x0, 0x0) write$binfmt_misc(r3, 0x0, 0x0) r5 = dup(0xffffffffffffffff) syz_usb_connect$uac3(0x1, 0xd1, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x1, 0x0, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x24, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x34, 0x1}, [@feature_unit={0x1d, 0x24, 0x7, 0x5, 0x1, [0x5, 0x0, 0xb, 0xc, 0xc, 0x4]}, @power_domain={0xd, 0x24, 0x10, 0xe, 0x4, 0x6e6c, 0x1, "23c7325d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x40, 0x43, {0xa, 0x25, 0x25, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7f, 0x9, "c7d841c3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x94, 0x1, 0x6, 0x1, "d29e91"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x4, "4aef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb, 0xd4, 0x1, {0xa, 0x25, 0x25, 0x5, 0x6, 0x1}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0xe, 0x2c, 0x4, 0x8, 0x7}, 0x87, &(0x7f0000000840)={0x5, 0xf, 0x87, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x7, 0xa}, @ssp_cap={0x20, 0x10, 0xa, 0xd, 0x5, 0x81, 0xf, 0xe, [0xffcf, 0x0, 0xfff0, 0xfff0, 0x0]}, @ptm_cap={0x3}, @generic={0x58, 0x10, 0x4, "46efb0ceba9c9a487d0fba06c1b4b6c24b34295a57f61df71a658636995b5a99788a41a5e30bc3ec168a0d55b7c77a766431f6824f179ce465174fccfe1648937fd373870caf27950121715a3983e8e4b1f5bd1b6a"}]}, 0x7, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x204b}}, {0xea, &(0x7f00000009c0)=@string={0xea, 0x3, "0d089544d386396d68cc97fbc99b63ff0d660370de4baf0f52e54dc069c44d0b24b2995968052fb832dc31e2183e01e2d7c97535c143281078bde468b9b307ae1516d4e00f9eca3f4bf836f1c179dc649660732f5123a922dab29e0049926ef862677017d03481604bce16f070c1218aa3e97ee16863d0eb07000af912f9bf19fdce06333457b84651f8b819fdc27f65ea793c5dd3415dce728efd4bacfe2fac63981644a650199a0c49adeca0c0297013aba0a65d165fd999fdddc7d20e0ee041837c533784b69ce11a679e3de1e18adf752528a0ef1a2dbbf67ac9064717e4e1ff15bb07d65e20"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2801}}, {0xa8, &(0x7f0000000b40)=@string={0xa8, 0x3, "29dc5871e4bc9b02d2284638cc5aa9b6df38e9f06769c522869066dcc0a028dfe15bafc49b4d5e7639f19fd611e905cfb79b764099cd1bb54f13fd73b031bed18fe8e6e53e56e9fdf19956389bdb6b29a445df3532cae84258377f2f8d8dfb1a525760c6cf6b8fece1edf3b748d0c51d4fce8dcd09c29a0d7fa165abe7767b982dc45228e3fa848af9fae7381aa0cd5746614f0f20d0a9885244164fa506dfaf7c40072d14bb"}}]}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = getpid() syz_open_procfs(r6, &(0x7f00000006c0)='net/icmp6\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x0, 0xf, 0x86, {0x86, 0x22, "dbd2e076b2d91e4cc65ff2ab51303ac102a7af56060231a5c4981e0f524cb5e7751a692bd0efee9f8b5aee157077342f05e30d9f9370775e48cf1c1cb602df482a95da93bf222a235f71c71b54881a951c08a5ccb0de3e93aae787cd58ab4c380ffcbc93270c1719b08adf157f5e52c841772ce8db3a4551c067e218072cffe27c273a5a"}}, &(0x7f0000000300)={0x0, 0x3, 0x67, @string={0x67, 0x3, "5c4aded09f88c9a6e775fb9771038c26b964df26e96d4a864925c9b45ba686d400b4a1da99364d156b8cfef0d8e9f7da333372a9dcfa86ffce2c174942c881f2e86a700e45ad90ac77b04f51422804a1db3c57a053f49a904589aa3943ee6db94c6553793e"}}, &(0x7f0000000380)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x8, "647a82dc"}, @local=@item_4={0x3, 0x2, 0x3, "08e00fe4"}, @global=@item_4={0x3, 0x1, 0x0, "04e5a618"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x1, 0x1, {0x22, 0x486}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x20, 0x16, 0x94, "c87b7f413cd8f11f945363e530f07e45143d4ef121562de0b4ac40089a8d66e4583b721a9159f458e9c359d49b16da08fecc4ee906123dcaff12835fcf963a400582fff45ad366406b8411d81f40e0d22ea8c0ebd633e2334d5f36dbdfdc181bf4776b29bb0304151fac7b6b6c2329bd72baf1c983a320a9eff204f547c2e261810c6a8c5c0f93c8ea39ad25e24cdd5f7992e46b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x87}, &(0x7f0000000580)=ANY=[@ANYBLOB="20018a000000cf159ccdf83bdf39ec3733516ff38fcab7d0e1dd4275c4fa72f54cf9c5c588edb5661988ce8e4fb28fa6b957206ec8df2f0dc03fc1d22738c3769d255739b2b9ecaf45dca614b578d8a769157019af673e1d65bcdc750ea12b7683f11ddc39a390140dd9fc3e660ed8717c40d05c502f47063ea141ca8487c80a704b373a4cdb4fb2dbbc9aa94870c14a"], &(0x7f0000000640)={0x20, 0x3, 0x1}}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x3, 0x14, 0x1}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x5c, 0x66, 0x0, 0x5, 0x11, 0x0, @multicast1, @local}, {0x4e23, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "355ec073dd3a777bb48ae4d5c3dfcbbd641bd6274f58a2d4", "344cd06574f2015016727a0f1ac75d3a6acb4829297e83a5469c95f1bce9f428"}}}}, 0x6a) 1.307333299s ago: executing program 0 (id=305): socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.216259642s ago: executing program 0 (id=306): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f00030001000000dd0000003800000045800000000000000000200001000500090000000000000003000000040000000500000006000000800000000600000002000000a25b00"/88], 0x58) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.215646902s ago: executing program 0 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_io_uring_setup(0x2fb8, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff810040000806000108000604000201"], 0x2e) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000001099043110400001020301090269000301062004080b0100010a200c0904000000010120000924010180060900e6fd08818f20b9682000090401010101022000090501090004c124b04fe6100ff907082501013303faff090402000001022000090402010101022000090582092000050524082501010008f9ff"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 20.07123ms ago: executing program 0 (id=308): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000004480)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x14004000) 0s ago: executing program 0 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x16, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @local}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x38, 0x100, @void}}}}}, 0x2e) kernel console output (not intermixed with test programs): onnect, device number 2 [ 24.849172][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 24.855495][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.867063][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.877588][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.891166][ T311] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.900593][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.910204][ T311] usb 2-1: config 0 descriptor?? [ 25.339347][ T311] microsoft 0003:045E:07DA.0001: report is too long [ 25.377421][ T375] netlink: 'syz.3.17': attribute type 27 has an invalid length. [ 25.385213][ T311] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 25.386057][ T375] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 25.402469][ T311] microsoft 0003:045E:07DA.0001: parse failed [ 25.402635][ T375] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.418799][ T311] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 25.459120][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.528069][ T311] usb 2-1: USB disconnect, device number 3 [ 25.588286][ T378] netlink: 168 bytes leftover after parsing attributes in process `syz.3.18'. [ 25.620202][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.626867][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 25.636171][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.644971][ T31] usb 1-1: config 0 descriptor?? [ 26.054417][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.061704][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.068911][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.076322][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.083709][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.091023][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.098243][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.106099][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.113384][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.120651][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.128027][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.135306][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 26.135320][ T36] audit: type=1400 audit(1781354130.620:128): avc: denied { create } for pid=384 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.160609][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.167858][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.175483][ T36] audit: type=1400 audit(1781354130.620:129): avc: denied { setopt } for pid=384 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.194819][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.195054][ T36] audit: type=1400 audit(1781354130.620:130): avc: denied { write } for pid=384 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.202334][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.228799][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.236096][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.243401][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.250679][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.257896][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.265132][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.272826][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.280074][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.287335][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.294670][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.299107][ T381] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 26.301926][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.316668][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.323917][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.331167][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.338472][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.345755][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.353010][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.360259][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.367469][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.374706][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.381940][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.389182][ T31] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 26.396955][ T31] microsoft 0003:045E:00F9.0002: hidraw0: USB HID v0.04 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 26.408510][ T31] microsoft 0003:045E:00F9.0002: no inputs found [ 26.410473][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.415174][ T31] microsoft 0003:045E:00F9.0002: could not initialize ff, continuing anyway [ 26.434656][ T31] usb 1-1: USB disconnect, device number 3 [ 26.441813][ T392] fido_id[392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 26.480132][ T381] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 26.491392][ T381] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.502578][ T381] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 26.513503][ T381] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 26.527924][ T381] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.537136][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.545292][ T381] usb 2-1: SerialNumber: syz [ 26.551198][ T383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.569083][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 26.575606][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 26.583790][ T9] usb 4-1: config 0 has no interface number 0 [ 26.589964][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.600963][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.610807][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 26.618825][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 26.629116][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.637125][ T9] usb 4-1: Product: syz [ 26.641320][ T9] usb 4-1: Manufacturer: syz [ 26.645926][ T9] usb 4-1: SerialNumber: syz [ 26.651357][ T9] usb 4-1: config 0 descriptor?? [ 26.762322][ T381] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 26.770005][ T381] usb 2-1: USB disconnect, device number 4 [ 26.784699][ T36] audit: type=1400 audit(1781354131.280:131): avc: denied { create } for pid=393 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.804473][ T36] audit: type=1400 audit(1781354131.280:132): avc: denied { bind } for pid=393 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.858673][ T36] audit: type=1400 audit(1781354131.350:133): avc: denied { create } for pid=389 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.878061][ T36] audit: type=1400 audit(1781354131.350:134): avc: denied { ioctl } for pid=389 comm="syz.3.22" path="socket:[4244]" dev="sockfs" ino=4244 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.029126][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.080402][ T381] usb 4-1: USB disconnect, device number 3 [ 27.179083][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 27.185223][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.196180][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.205949][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.219577][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=8928, bcdDevice=16.90 [ 27.228625][ T31] usb 1-1: New USB device strings: Mfr=61, Product=0, SerialNumber=0 [ 27.236759][ T31] usb 1-1: Manufacturer: syz [ 27.241882][ T31] usb 1-1: config 0 descriptor?? [ 27.275436][ T36] audit: type=1400 audit(1781354131.770:135): avc: denied { read write } for pid=395 comm="syz.1.24" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.298646][ T36] audit: type=1400 audit(1781354131.770:136): avc: denied { open } for pid=395 comm="syz.1.24" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.321603][ T36] audit: type=1400 audit(1781354131.770:137): avc: denied { mounton } for pid=395 comm="syz.1.24" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 27.448120][ T394] process 'syz.0.23' launched './file0' with NULL argv: empty string added [ 27.615290][ T334] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.659172][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.666085][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.673174][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x4 [ 27.680071][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.686932][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.694054][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.700949][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.707819][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.714714][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.721601][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.728714][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.735614][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.742504][ T31] wacom 0003:056A:8928.0003: unknown main item tag 0x0 [ 27.749708][ T31] wacom 0003:056A:8928.0003: Unknown device_type for 'syz'. Ignoring. [ 27.769396][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 27.775771][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.782459][ T334] usb 2-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 27.791568][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.800328][ T334] usb 2-1: config 0 descriptor?? [ 27.862464][ T31] usb 1-1: USB disconnect, device number 4 [ 27.869138][ T381] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.029105][ T381] usb 4-1: Using ep0 maxpacket: 16 [ 28.035481][ T381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.045624][ T381] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.055889][ T381] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.064976][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.072999][ T381] usb 4-1: Product: syz [ 28.077173][ T381] usb 4-1: Manufacturer: syz [ 28.081788][ T381] usb 4-1: SerialNumber: syz [ 28.209120][ T334] wacom 0003:056A:009A.0004: unknown main item tag 0x2 [ 28.216081][ T334] wacom 0003:056A:009A.0004: unknown main item tag 0x6 [ 28.223024][ T334] wacom 0003:056A:009A.0004: ignoring exceeding usage max [ 28.232084][ T334] wacom 0003:056A:009A.0004: hidraw0: USB HID v0.bd Device [HID 056a:009a] on usb-dummy_hcd.1-1/input0 [ 28.292410][ T381] usb 4-1: 0:2 : does not exist [ 28.299733][ T381] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 28.310458][ T381] usb 4-1: USB disconnect, device number 4 [ 28.321236][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.386004][ T411] rust_binder: inc_ref_done called when no active inc_refs [ 28.386167][ T411] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 28.400976][ T411] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.30'. [ 28.450792][ T9] usb 2-1: USB disconnect, device number 5 [ 28.742021][ T420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 28.928165][ T430] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 28.936568][ T431] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 28.950892][ T431] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 29.009086][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.159082][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 29.165549][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.176825][ T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 29.186096][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.195858][ T31] usb 3-1: config 0 descriptor?? [ 29.329072][ T334] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 29.371078][ T443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=443 comm=syz.0.41 [ 29.405730][ T422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.419274][ T422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.510191][ T334] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.529064][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 29.550160][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 29.556380][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 29.566486][ T334] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 29.584794][ T31] usb 3-1: USB disconnect, device number 3 [ 29.590841][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.610709][ T334] usb 2-1: config 0 descriptor?? [ 29.619451][ T439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 29.628151][ T334] hub 2-1:0.0: USB hub found [ 29.685490][ T381] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.812615][ T458] fuse: Bad value for 'fd' [ 29.827445][ T334] hub 2-1:0.0: 1 port detected [ 29.829084][ T381] usb 1-1: device descriptor read/64, error -71 [ 30.079108][ T381] usb 1-1: device descriptor read/64, error -71 [ 30.189088][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.319085][ T381] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.326672][ T9] usb 4-1: device descriptor read/64, error -71 [ 30.437646][ T334] usb 2-1-port1: config error [ 30.442554][ T311] usb 2-1: USB disconnect, device number 6 [ 30.469117][ T381] usb 1-1: device descriptor read/64, error -71 [ 30.579101][ T9] usb 4-1: device descriptor read/64, error -71 [ 30.709081][ T381] usb 1-1: device descriptor read/64, error -71 [ 30.819108][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.826936][ T381] usb usb1-port1: attempt power cycle [ 30.959165][ T9] usb 4-1: device descriptor read/64, error -71 [ 31.122962][ T497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=497 comm=syz.2.58 [ 31.148035][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.148054][ T36] audit: type=1400 audit(1781354135.640:185): avc: denied { setopt } for pid=501 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.173482][ T36] audit: type=1400 audit(1781354135.650:186): avc: denied { read } for pid=501 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.174165][ T381] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.200236][ T9] usb 4-1: device descriptor read/64, error -71 [ 31.207757][ T36] audit: type=1400 audit(1781354135.700:187): avc: denied { write } for pid=501 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.227680][ T381] usb 1-1: device descriptor read/8, error -71 [ 31.309231][ T9] usb usb4-port1: attempt power cycle [ 31.325028][ T36] audit: type=1400 audit(1781354135.820:188): avc: denied { map } for pid=509 comm="syz.1.61" path="socket:[6246]" dev="sockfs" ino=6246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.360068][ T381] usb 1-1: device descriptor read/8, error -71 [ 31.399246][ T537] kvm: kvm [536]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.407975][ T537] kvm: kvm [536]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 31.488986][ T36] audit: type=1400 audit(1781354135.980:189): avc: denied { getopt } for pid=544 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.490124][ T545] netlink: 'syz.2.65': attribute type 27 has an invalid length. [ 31.589334][ T64] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.599175][ T381] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.620874][ T381] usb 1-1: device descriptor read/8, error -71 [ 31.649161][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.670228][ T9] usb 4-1: device descriptor read/8, error -71 [ 31.749207][ T391] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.756762][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 31.762948][ T381] usb 1-1: device descriptor read/8, error -71 [ 31.769530][ T64] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.777636][ T64] usb 2-1: config 0 has no interface number 0 [ 31.785103][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.794194][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.802269][ T64] usb 2-1: Product: syz [ 31.806462][ T64] usb 2-1: Manufacturer: syz [ 31.811251][ T64] usb 2-1: SerialNumber: syz [ 31.816433][ T9] usb 4-1: device descriptor read/8, error -71 [ 31.822853][ T64] usb 2-1: config 0 descriptor?? [ 31.828573][ T64] smsc95xx v2.0.0 [ 31.879191][ T381] usb usb1-port1: unable to enumerate USB device [ 31.920145][ T391] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.928427][ T391] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.938966][ T391] usb 3-1: config 220 has no interface number 2 [ 31.945293][ T391] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.958470][ T391] usb 3-1: config 220 interface 0 has no altsetting 0 [ 31.965259][ T391] usb 3-1: config 220 interface 76 has no altsetting 0 [ 31.972242][ T391] usb 3-1: config 220 interface 1 has no altsetting 0 [ 31.980344][ T391] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.989449][ T391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.997437][ T391] usb 3-1: Product: syz [ 32.001797][ T391] usb 3-1: Manufacturer: syz [ 32.006411][ T391] usb 3-1: SerialNumber: syz [ 32.030268][ T36] audit: type=1326 audit(1781354136.530:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.1.62" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd36a59ce59 code=0x0 [ 32.059091][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.080054][ T9] usb 4-1: device descriptor read/8, error -71 [ 32.087195][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 32.092189][ T36] audit: type=1400 audit(1781354136.580:191): avc: denied { connect } for pid=519 comm="syz.1.62" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.097344][ T64] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.117769][ T36] audit: type=1400 audit(1781354136.580:192): avc: denied { write } for pid=519 comm="syz.1.62" laddr=fe80::6063:3bff:fec2:fd9 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.130479][ T64] usb 2-1: USB disconnect, device number 7 [ 32.210047][ T9] usb 4-1: device descriptor read/8, error -71 [ 32.218677][ T391] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 32.225110][ T391] usb 3-1: No valid video chain found. [ 32.230676][ T391] usb 3-1: selecting invalid altsetting 0 [ 32.240345][ T391] usb 3-1: USB disconnect, device number 4 [ 32.319190][ T9] usb usb4-port1: unable to enumerate USB device [ 32.461879][ T36] audit: type=1400 audit(1781354136.960:193): avc: denied { ioctl } for pid=549 comm="syz.0.66" path="socket:[5268]" dev="sockfs" ino=5268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.869089][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.974518][ T36] audit: type=1400 audit(1781354137.470:194): avc: denied { ioctl } for pid=559 comm="syz.3.70" path="socket:[5353]" dev="sockfs" ino=5353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.999277][ T311] usb 1-1: device descriptor read/64, error -71 [ 33.249084][ T311] usb 1-1: device descriptor read/64, error -71 [ 33.259104][ T391] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.410283][ T391] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.420199][ T391] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.430308][ T391] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.445099][ T391] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 33.454947][ T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 33.463306][ T391] usb 4-1: Product: syz [ 33.467664][ T391] usb 4-1: Manufacturer: syz [ 33.472638][ T391] usb 4-1: SerialNumber: syz [ 33.499104][ T311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 33.639232][ T311] usb 1-1: device descriptor read/64, error -71 [ 33.680356][ T391] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 33.879085][ T311] usb 1-1: device descriptor read/64, error -71 [ 33.882770][ T391] usb 4-1: USB disconnect, device number 9 [ 33.893902][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 33.902046][ T391] usblp0: removed [ 33.989176][ T311] usb usb1-port1: attempt power cycle [ 34.049079][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 34.179106][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 34.329135][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 34.329160][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 34.329266][ T9] usb usb3-port1: attempt power cycle [ 34.350167][ T311] usb 1-1: device descriptor read/8, error -71 [ 34.490092][ T311] usb 1-1: device descriptor read/8, error -71 [ 34.659200][ T334] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.689121][ T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 34.709426][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 34.729454][ T311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 34.760189][ T311] usb 1-1: device descriptor read/8, error -71 [ 34.819109][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 34.825560][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.838684][ T334] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 34.848173][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.857128][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 34.857195][ T334] usb 2-1: config 0 descriptor?? [ 34.879444][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 34.884845][ T9] usb usb3-port1: unable to enumerate USB device [ 34.890192][ T311] usb 1-1: device descriptor read/8, error -71 [ 34.899111][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 34.999177][ T311] usb usb1-port1: unable to enumerate USB device [ 35.050039][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.060975][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.070798][ T31] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 35.079932][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.088596][ T31] usb 4-1: config 0 descriptor?? [ 35.281125][ T334] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x3 [ 35.288418][ T334] zeroplus 0003:0C12:0030.0005: unknown main item tag 0x6 [ 35.296398][ T334] zeroplus 0003:0C12:0030.0005: unknown global tag 0xc [ 35.303338][ T334] zeroplus 0003:0C12:0030.0005: item 0 0 1 12 parsing failed [ 35.310902][ T334] zeroplus 0003:0C12:0030.0005: parse failed [ 35.316939][ T334] zeroplus 0003:0C12:0030.0005: probe with driver zeroplus failed with error -22 [ 35.484309][ T311] usb 2-1: USB disconnect, device number 8 [ 35.512473][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 35.518512][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.527291][ T31] usb 4-1: USB disconnect, device number 10 [ 35.899106][ T334] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 36.024174][ T589] ======================================================= [ 36.024174][ T589] WARNING: The mand mount option has been deprecated and [ 36.024174][ T589] and is ignored by this kernel. Remove the mand [ 36.024174][ T589] option from the mount to silence this warning. [ 36.024174][ T589] ======================================================= [ 36.062560][ T589] tmpfs: Too few inodes for current use [ 36.079567][ T334] usb 1-1: Using ep0 maxpacket: 8 [ 36.094171][ T334] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 36.103546][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.112672][ T334] usb 1-1: Product: syz [ 36.117569][ T334] usb 1-1: Manufacturer: syz [ 36.122402][ T334] usb 1-1: SerialNumber: syz [ 36.146872][ T594] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 36.155614][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 36.155631][ T36] audit: type=1400 audit(1781354140.650:203): avc: denied { read } for pid=593 comm="syz.3.83" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.188574][ T36] audit: type=1400 audit(1781354140.650:204): avc: denied { open } for pid=593 comm="syz.3.83" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.211585][ T36] audit: type=1400 audit(1781354140.650:205): avc: denied { ioctl } for pid=593 comm="syz.3.83" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.271246][ T596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.84'. [ 36.350330][ T334] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 36.367473][ T334] usb 1-1: clock source 0 is not valid, cannot use [ 36.387618][ T334] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 36.406107][ T334] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 36.419592][ T334] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 36.433089][ T334] usb 1-1: clock source 0 is not valid, cannot use [ 36.440051][ T334] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 36.448305][ T334] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 36.471652][ T334] usb 1-1: USB disconnect, device number 13 [ 36.485844][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.539090][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 36.684649][ T607] ôÛWgÚq: renamed from bridge_slave_0 (while UP) [ 36.699075][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 36.715495][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.727142][ T36] audit: type=1400 audit(1781354141.220:206): avc: denied { setopt } for pid=608 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.748389][ T36] audit: type=1400 audit(1781354141.250:207): avc: denied { block_suspend } for pid=608 comm="syz.2.88" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.769927][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.780117][ T9] usb 4-1: config 1 interface 2 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 36.793297][ T9] usb 4-1: config 1 interface 2 has no altsetting 0 [ 36.808668][ T9] usb 4-1: string descriptor 0 read error: -22 [ 36.815095][ T9] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 36.824646][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.839372][ T334] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 36.849883][ T9] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 36.866661][ T9] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 36.879095][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 36.962685][ T614] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 36.974335][ T614] overlayfs: missing 'lowerdir' [ 36.988248][ T617] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.001074][ T36] audit: type=1400 audit(1781354141.500:208): avc: denied { getopt } for pid=615 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.020397][ T36] audit: type=1400 audit(1781354141.500:209): avc: denied { nlmsg_read } for pid=621 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.020512][ T622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=622 comm=syz.1.92 [ 37.041790][ T334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.058928][ T622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=622 comm=syz.1.92 [ 37.063443][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.088367][ T9] usb 4-1: failed to enable PITCH for EP 0x1 [ 37.088937][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.095817][ T9] usb 4-1: unit 3 not found! [ 37.104199][ T334] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 37.118031][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.126126][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.134600][ T36] audit: type=1400 audit(1781354141.630:210): avc: denied { setopt } for pid=623 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.138205][ T9] usb 4-1: USB disconnect, device number 11 [ 37.161141][ T624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 37.169595][ T334] usb 1-1: config 0 descriptor?? [ 37.169967][ T624] tipc: Invalid UDP bearer configuration [ 37.174857][ T624] tipc: Enabling of bearer rejected, failed to enable media [ 37.280130][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 37.295064][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 37.304177][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.312918][ T31] usb 3-1: config 0 descriptor?? [ 37.449102][ T391] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 37.576946][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.584080][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.591149][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.598216][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.605321][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.606022][ T391] usb 2-1: config 6 has an invalid interface number: 118 but max is 1 [ 37.612504][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.623233][ T391] usb 2-1: config 6 has an invalid interface number: 229 but max is 1 [ 37.630582][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.639860][ T391] usb 2-1: config 6 has no interface number 0 [ 37.644386][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.649896][ T391] usb 2-1: config 6 has no interface number 1 [ 37.656856][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.662956][ T391] usb 2-1: config 6 interface 118 has no altsetting 0 [ 37.669820][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.676864][ T391] usb 2-1: config 6 interface 229 has no altsetting 0 [ 37.683645][ T334] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 37.692198][ T391] usb 2-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=27.48 [ 37.702570][ T334] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 37.717818][ T391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.726416][ T391] usb 2-1: Product: syz [ 37.730875][ T391] usb 2-1: Manufacturer: syz [ 37.735499][ T391] usb 2-1: SerialNumber: syz [ 37.780270][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.787484][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.794407][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.801350][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.808227][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.815176][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.822083][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.828977][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.835878][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.842781][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.849765][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.856658][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.863652][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.870547][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.877420][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.879108][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 37.884325][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.898754][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.905680][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.912585][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.919844][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.926815][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.934526][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.941448][ T31] wacom 0003:056A:00B8.0007: unknown main item tag 0x0 [ 37.945146][ T391] ax88179_178a 2-1:6.118: probe with driver ax88179_178a failed with error -22 [ 37.949192][ T31] wacom 0003:056A:00B8.0007: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 37.962684][ T391] usb 2-1: USB disconnect, device number 9 [ 37.975588][ T31] wacom 0003:056A:00B8.0007: hidraw1: USB HID v0.05 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 37.996717][ T31] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.0007/input/input11 [ 38.016716][ T36] audit: type=1400 audit(1781354142.510:211): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=517 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.038971][ T36] audit: type=1400 audit(1781354142.510:212): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=517 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.059145][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 38.068306][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.079270][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.092271][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 38.101375][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.110111][ T9] usb 4-1: config 0 descriptor?? [ 38.302262][ T391] usb 1-1: USB disconnect, device number 14 [ 38.536711][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x2 [ 38.549117][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 38.549393][ T647] capability: warning: `syz.1.99' uses 32-bit capabilities (legacy support in use) [ 38.555925][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 38.555958][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 38.599140][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 38.605969][ T9] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 38.615044][ T9] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 38.781219][ T9] usb 4-1: USB disconnect, device number 12 [ 38.829110][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 38.989086][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 38.999821][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.010826][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.020653][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.033603][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.042715][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.059313][ T31] usb 2-1: config 0 descriptor?? [ 39.267790][ T31] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 39.279374][ T31] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 39.298822][ T655] netlink: 'syz.3.101': attribute type 28 has an invalid length. [ 39.467717][ T31] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 39.478560][ T31] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 39.491780][ T31] microsoft 0003:045E:07DA.0009: no inputs found [ 39.498197][ T31] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 39.509183][ T31] usb 2-1: USB disconnect, device number 10 [ 39.619105][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 39.619117][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.759100][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.770418][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.778809][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 39.791277][ T45] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 39.800389][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.808368][ T45] usb 4-1: Product: syz [ 39.812562][ T45] usb 4-1: Manufacturer: syz [ 39.817149][ T45] usb 4-1: SerialNumber: syz [ 39.849088][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.873078][ T311] usb 3-1: USB disconnect, device number 9 [ 39.880480][ T676] 9pnet_fd: p9_fd_create_tcp (676): problem connecting socket to 127.0.0.1 [ 39.890036][ T675] incfs: Options parsing error. -22 [ 39.895271][ T675] incfs: mount failed -22 [ 39.959202][ T682] kvm: kvm [681]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 39.968035][ T682] kvm: kvm [681]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 39.999070][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 40.005751][ T31] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 40.015722][ T31] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.019105][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.026622][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 40.040360][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 40.049677][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.058721][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.067601][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 40.076646][ T31] usb 2-1: Product: 曠çƒȘă­êŒ„è—ˆäž±á‹Żè€âŒŁì”­éžŒç­ăŠžîłˆăź–çž‘ăčšè”­çș„舚䠌∛銇䛎ኀć€Č䆍⮡㍟ [ 40.088955][ T31] usb 2-1: Manufacturer: э [ 40.094079][ T31] usb 2-1: SerialNumber: ⠊ [ 40.099612][ T45] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 40.110250][ T45] usb 4-1: USB disconnect, device number 13 [ 40.116597][ T673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.123906][ T673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.132114][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.279095][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 40.409110][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.629779][ T689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.649198][ T9] usb 1-1: device descriptor read/64, error -71 [ 40.662968][ T526] bridge_slave_1: left allmulticast mode [ 40.668634][ T526] bridge_slave_1: left promiscuous mode [ 40.675009][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.682807][ T526] ôÛWgÚq: left allmulticast mode [ 40.687813][ T526] ôÛWgÚq: left promiscuous mode [ 40.693090][ T526] bridge0: port 1(ôÛWgÚq) entered disabled state [ 40.733418][ T673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.747347][ T673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.760371][ T694] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.772926][ T673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.781466][ T9] usb usb1-port1: attempt power cycle [ 40.787174][ T673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.796099][ T673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.804973][ T673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.851821][ T526] veth1_macvtap: left promiscuous mode [ 40.857397][ T526] veth0_vlan: left promiscuous mode [ 40.870861][ T699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.879810][ T699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.970535][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.979996][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.990462][ T698] bridge_slave_0: entered allmulticast mode [ 40.999868][ T698] bridge_slave_0: entered promiscuous mode [ 41.008346][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.016213][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.023577][ T698] bridge_slave_1: entered allmulticast mode [ 41.030238][ T698] bridge_slave_1: entered promiscuous mode [ 41.092815][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.099930][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.107250][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.114318][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.129598][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 41.146716][ T532] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.154922][ T532] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.165270][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.170091][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.172367][ T532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.207034][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.214171][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.228616][ T698] veth0_vlan: entered promiscuous mode [ 41.243337][ T698] veth1_macvtap: entered promiscuous mode [ 41.266451][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 41.266477][ T36] audit: type=1400 audit(1781354145.760:260): avc: denied { mount } for pid=698 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.295247][ T64] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 41.303753][ T36] audit: type=1400 audit(1781354145.760:261): avc: denied { mounton } for pid=698 comm="syz-executor" path="/root/syzkaller.FeETYB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.332065][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.344947][ T36] audit: type=1400 audit(1781354145.840:262): avc: denied { bind } for pid=707 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.364066][ T36] audit: type=1400 audit(1781354145.840:263): avc: denied { name_bind } for pid=707 comm="syz.2.113" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 41.391267][ T36] audit: type=1400 audit(1781354145.840:264): avc: denied { node_bind } for pid=707 comm="syz.2.113" saddr=172.20.20.187 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 41.414265][ T710] syz.2.118 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.489131][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 41.495900][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.507030][ T64] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 41.518402][ T64] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 41.528366][ T64] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.542376][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.551469][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.559512][ T64] usb 4-1: SerialNumber: syz [ 41.565031][ T706] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 41.572417][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 41.580730][ T706] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 41.591225][ T64] hub 4-1:1.0: bad descriptor, ignoring hub [ 41.597176][ T64] hub 4-1:1.0: probe with driver hub failed with error -5 [ 41.605540][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.742154][ T9] usb 1-1: device descriptor read/8, error -71 [ 41.790897][ T706] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 41.798075][ T706] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 41.849311][ T9] usb usb1-port1: unable to enumerate USB device [ 41.979121][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.007817][ T64] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 42.025509][ T36] audit: type=1400 audit(1781354146.520:265): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.048083][ T36] audit: type=1400 audit(1781354146.520:266): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.069363][ T36] audit: type=1400 audit(1781354146.520:267): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.091511][ T36] audit: type=1400 audit(1781354146.520:268): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.114522][ T36] audit: type=1400 audit(1781354146.520:269): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.169394][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.175551][ T45] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 42.183757][ T45] usb 3-1: config 1 has an invalid interface number: 128 but max is 0 [ 42.191979][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 42.200973][ T45] usb 3-1: config 1 has no interface number 0 [ 42.207069][ T45] usb 3-1: config 1 has no interface number 1 [ 42.213311][ T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 42.223298][ T45] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.230506][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 87! [ 42.236492][ T45] usb 3-1: too many endpoints for config 1 interface 128 altsetting 191: 116, using maximum allowed: 30 [ 42.255777][ T45] usb 3-1: config 1 interface 128 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 42.269324][ T45] usb 3-1: config 1 interface 105 has no altsetting 0 [ 42.276106][ T45] usb 3-1: config 1 interface 128 has no altsetting 0 [ 42.284359][ T45] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 42.293442][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.301476][ T45] usb 3-1: Product: syz [ 42.305652][ T45] usb 3-1: Manufacturer: syz [ 42.310280][ T45] usb 3-1: SerialNumber: syz [ 42.315885][ T721] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 42.444488][ T334] usb 4-1: USB disconnect, device number 14 [ 42.451200][ T334] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 42.556424][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 42.581305][ T45] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 42.591376][ T31] usb 2-1: USB disconnect, device number 11 [ 42.600528][ T31] usblp0: removed [ 42.769119][ T64] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 42.920115][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.931190][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.940957][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.953800][ T64] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 42.969447][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.982297][ T64] usb 1-1: config 0 descriptor?? [ 43.039521][ T776] Zero length message leads to an empty skb [ 43.223325][ T789] SELinux: policydb version 0 does not match my version range 15-33 [ 43.231522][ T789] SELinux: failed to load policy [ 43.389702][ T64] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x6 [ 43.397417][ T64] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x6 [ 43.405964][ T64] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 43.499082][ T334] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 43.643540][ T738] random: crng reseeded on system resumption [ 43.659078][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 43.665738][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.679086][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.682026][ T64] usb 1-1: USB disconnect, device number 19 [ 43.689714][ T334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.708191][ T334] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 43.717293][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.726489][ T334] usb 4-1: config 0 descriptor?? [ 43.919078][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.069440][ T31] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 44.082423][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 44.091595][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.102665][ T31] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 44.109642][ T31] usb 2-1: No valid video chain found. [ 44.304416][ T64] usb 2-1: USB disconnect, device number 12 [ 44.339819][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.348397][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.368409][ T334] pantherlord 0003:0810:0002.000B: unknown main item tag 0x0 [ 44.375898][ T334] pantherlord 0003:0810:0002.000B: unknown main item tag 0x0 [ 44.383310][ T334] pantherlord 0003:0810:0002.000B: unknown main item tag 0x0 [ 44.390717][ T334] pantherlord 0003:0810:0002.000B: unknown main item tag 0x0 [ 44.398101][ T334] pantherlord 0003:0810:0002.000B: unknown main item tag 0x0 [ 44.406345][ T334] pantherlord 0003:0810:0002.000B: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 44.418001][ T334] pantherlord 0003:0810:0002.000B: no output reports found [ 44.499086][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 44.592611][ T64] usb 4-1: USB disconnect, device number 15 [ 44.649083][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 44.655497][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 44.667039][ T9] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 44.676132][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 44.684224][ T9] usb 1-1: Product: syz [ 44.688387][ T9] usb 1-1: Manufacturer: syz [ 44.693021][ T9] usb 1-1: SerialNumber: syz [ 44.700021][ T9] asix 1-1:2.0: probe with driver asix failed with error -22 [ 44.900433][ T9] usb 1-1: USB disconnect, device number 20 [ 45.099298][ T334] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.249095][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 45.261451][ T334] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 45.269815][ T334] usb 2-1: config 0 has no interface number 0 [ 45.275978][ T334] usb 2-1: config 0 interface 178 altsetting 66 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.287231][ T334] usb 2-1: config 0 interface 178 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.297752][ T334] usb 2-1: config 0 interface 178 has no altsetting 0 [ 45.305070][ T334] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 45.314245][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.322914][ T334] usb 2-1: config 0 descriptor?? [ 45.423703][ T821] fuse: Unknown parameter 'Œ”ee' [ 45.446198][ T824] netlink: 188 bytes leftover after parsing attributes in process `syz.0.142'. [ 45.502019][ T827] fuse: Bad value for 'user_id' [ 45.506927][ T827] fuse: Bad value for 'user_id' [ 45.529110][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 45.564039][ T828] fuse: Bad value for 'user_id' [ 45.568971][ T828] fuse: Bad value for 'user_id' [ 45.680439][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.688851][ T9] usb 4-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 45.699179][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 45.710244][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 45.722801][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 45.731883][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.739914][ T9] usb 4-1: Product: syz [ 45.741471][ T334] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 45.744069][ T9] usb 4-1: Manufacturer: syz [ 45.744087][ T9] usb 4-1: SerialNumber: syz [ 45.943081][ T806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.951423][ T9] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 45.956844][ T806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.963218][ T9] usb 4-1: USB disconnect, device number 16 [ 45.972739][ T334] usb 2-1: USB disconnect, device number 13 [ 45.989968][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.503177][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 46.503195][ T36] audit: type=1400 audit(1781354407.002:297): avc: denied { read } for pid=845 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.538881][ T36] audit: type=1400 audit(1781354407.032:298): avc: denied { setopt } for pid=848 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.634474][ T36] audit: type=1400 audit(1781354407.132:299): avc: denied { bind } for pid=853 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.682054][ T858] netlink: 'syz.1.152': attribute type 28 has an invalid length. [ 46.859111][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 46.949095][ T64] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 47.009109][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 47.015342][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 47.023477][ T9] usb 1-1: config 0 has no interface number 0 [ 47.029708][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.040598][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.050529][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 47.059590][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.068381][ T9] usb 1-1: config 0 descriptor?? [ 47.089087][ T64] usb 2-1: device descriptor read/64, error -71 [ 47.329086][ T64] usb 2-1: device descriptor read/64, error -71 [ 47.569097][ T64] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 47.649098][ T547] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 47.675607][ T9] usbhid 1-1:0.1: can't add hid device: -71 [ 47.681621][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 47.690319][ T9] usb 1-1: USB disconnect, device number 21 [ 47.699163][ T64] usb 2-1: device descriptor read/64, error -71 [ 47.799138][ T547] usb 4-1: Using ep0 maxpacket: 32 [ 47.805935][ T547] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 47.817597][ T547] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.826681][ T547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.834773][ T547] usb 4-1: Product: syz [ 47.838929][ T547] usb 4-1: Manufacturer: ఉ [ 47.843533][ T547] usb 4-1: SerialNumber: syz [ 47.949081][ T64] usb 2-1: device descriptor read/64, error -71 [ 48.059161][ T64] usb usb2-port1: attempt power cycle [ 48.070042][ T868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 48.152563][ T547] cdc_ncm 4-1:1.0: bind() failure [ 48.158563][ T547] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 48.165600][ T547] cdc_ncm 4-1:1.1: bind() failure [ 48.172708][ T547] usb 4-1: USB disconnect, device number 17 [ 48.399109][ T64] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 48.420161][ T64] usb 2-1: device descriptor read/8, error -71 [ 48.509082][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 48.550083][ T64] usb 2-1: device descriptor read/8, error -71 [ 48.659092][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 48.665605][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.675295][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 48.684391][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.692416][ T9] usb 1-1: Product: syz [ 48.696572][ T9] usb 1-1: Manufacturer: syz [ 48.701179][ T9] usb 1-1: SerialNumber: syz [ 48.789096][ T64] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 48.810380][ T64] usb 2-1: device descriptor read/8, error -71 [ 48.908394][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.917026][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.926932][ T9] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 48.934417][ T9] usb 1-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 48.941784][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 48.951800][ T9] usb 1-1: failed to enable PITCH for EP 0x1 [ 48.958155][ T64] usb 2-1: device descriptor read/8, error -71 [ 48.964378][ T9] usb 1-1: unit 3 not found! [ 48.972057][ T9] usb 1-1: USB disconnect, device number 22 [ 49.069188][ T64] usb usb2-port1: unable to enumerate USB device [ 49.437657][ T898] x_tables: duplicate underflow at hook 1 [ 49.445742][ T898] syzkaller1: entered promiscuous mode [ 49.452416][ T898] syzkaller1: entered allmulticast mode [ 49.479089][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 49.630137][ T45] usb 4-1: no configurations [ 49.636909][ T45] usb 4-1: can't read configurations, error -22 [ 49.769153][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 49.803375][ T914] netlink: 'syz.1.171': attribute type 27 has an invalid length. [ 49.812829][ T914] netlink: 'syz.1.171': attribute type 27 has an invalid length. [ 49.826555][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.833788][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.857656][ T915] netlink: 'syz.1.171': attribute type 27 has an invalid length. [ 49.867733][ T915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.877067][ T915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.884868][ T64] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 49.939437][ T45] usb 4-1: no configurations [ 49.944101][ T45] usb 4-1: can't read configurations, error -22 [ 49.950471][ T45] usb usb4-port1: attempt power cycle [ 50.039095][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 50.045242][ T64] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 50.056417][ T64] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.069474][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 50.076069][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 50.085103][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.094045][ T64] usb 1-1: config 0 descriptor?? [ 50.109102][ T342] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 50.260132][ T342] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 50.268265][ T342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.278594][ T342] usb 2-1: config 0 has no interface number 0 [ 50.286094][ T342] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 50.295250][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.303281][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 50.303281][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 50.303345][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 50.310908][ T342] usb 2-1: Product: syz [ 50.323039][ T64] usb 1-1: USB disconnect, device number 23 [ 50.324716][ T342] usb 2-1: Manufacturer: syz [ 50.339425][ T342] usb 2-1: SerialNumber: syz [ 50.344589][ T45] usb 4-1: no configurations [ 50.349546][ T342] usb 2-1: config 0 descriptor?? [ 50.354571][ T45] usb 4-1: can't read configurations, error -22 [ 50.489121][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 50.509844][ T45] usb 4-1: no configurations [ 50.514558][ T45] usb 4-1: can't read configurations, error -22 [ 50.520948][ T45] usb usb4-port1: unable to enumerate USB device [ 50.561413][ T64] usb 2-1: USB disconnect, device number 18 [ 50.825540][ T36] audit: type=1400 audit(1781354411.322:300): avc: denied { read } for pid=919 comm="syz.0.173" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.848236][ T36] audit: type=1400 audit(1781354411.322:301): avc: denied { open } for pid=919 comm="syz.0.173" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.871470][ T36] audit: type=1400 audit(1781354411.322:302): avc: denied { ioctl } for pid=919 comm="syz.0.173" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.896391][ T36] audit: type=1400 audit(1781354411.322:303): avc: denied { read write } for pid=919 comm="syz.0.173" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.920996][ T36] audit: type=1400 audit(1781354411.322:304): avc: denied { open } for pid=919 comm="syz.0.173" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.945347][ T36] audit: type=1400 audit(1781354411.322:305): avc: denied { ioctl } for pid=919 comm="syz.0.173" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.971164][ T36] audit: type=1400 audit(1781354411.322:306): avc: denied { accept } for pid=919 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 51.309064][ T64] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 51.460117][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.471047][ T64] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.482372][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.491458][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.499470][ T64] usb 2-1: Product: syz [ 51.503625][ T64] usb 2-1: Manufacturer: syz [ 51.508196][ T64] usb 2-1: SerialNumber: syz [ 51.514616][ T64] cdc_mbim 2-1:1.0: skipping garbage [ 51.599078][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 51.714164][ T922] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.727108][ T64] cdc_mbim 2-1:1.0: bind() failure [ 51.731107][ T45] usb 1-1: device descriptor read/64, error -71 [ 51.733895][ T64] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 51.746894][ T64] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 51.756392][ T64] usb 2-1: USB disconnect, device number 19 [ 51.979085][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.059078][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 52.209091][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 52.215170][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.224964][ T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 52.229083][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 52.234733][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.252544][ T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 52.264308][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 52.273416][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.281432][ T64] usb 2-1: Product: syz [ 52.285609][ T64] usb 2-1: Manufacturer: syz [ 52.290217][ T64] usb 2-1: SerialNumber: syz [ 52.296813][ T64] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 52.305236][ T64] usb-storage 2-1:1.0: USB Mass Storage device detected [ 52.312842][ T64] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 52.369090][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.497779][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.506269][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.514743][ T64] usb 2-1: USB disconnect, device number 20 [ 52.609078][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.639079][ T342] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 52.719199][ T45] usb usb1-port1: attempt power cycle [ 52.790139][ T342] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.801191][ T342] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 52.810465][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.818462][ T342] usb 4-1: Product: syz [ 52.822671][ T342] usb 4-1: Manufacturer: syz [ 52.827266][ T342] usb 4-1: SerialNumber: syz [ 53.035996][ T342] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 53.059091][ T45] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 53.067198][ T342] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 53.078896][ T342] usb 4-1: USB disconnect, device number 22 [ 53.090189][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.102630][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.160100][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 53.169320][ T944] syzkaller0: entered allmulticast mode [ 53.175675][ T944] syzkaller0 (unregistering): left allmulticast mode [ 53.220130][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.459077][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 53.480049][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.610195][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.719169][ T45] usb usb1-port1: unable to enumerate USB device [ 53.839077][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 53.989067][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 53.995210][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 54.006478][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 54.017886][ T31] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 54.026945][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.034934][ T31] usb 4-1: Product: syz [ 54.039105][ T31] usb 4-1: Manufacturer: syz [ 54.043674][ T31] usb 4-1: SerialNumber: syz [ 54.049155][ T955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.261293][ T31] usb 4-1: USB disconnect, device number 23 [ 54.272711][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.139097][ T64] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 55.239140][ T31] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 55.289090][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 55.295233][ T64] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 55.303286][ T64] usb 4-1: config 0 has no interface number 0 [ 55.309400][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.320281][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.330073][ T64] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 55.339126][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.347687][ T64] usb 4-1: config 0 descriptor?? [ 55.369076][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.609127][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.849410][ T31] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 55.954940][ T64] uclogic 0003:28BD:0071.000D: pen parameters not found [ 55.961987][ T64] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 55.979131][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.149250][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 56.149267][ T36] audit: type=1400 audit(1781354416.652:310): avc: denied { checkpoint_restore } for pid=972 comm="syz.1.191" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.157427][ T966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.185687][ T966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.198040][ T342] usb 4-1: USB disconnect, device number 24 [ 56.239091][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.349178][ T31] usb usb1-port1: attempt power cycle [ 56.689092][ T31] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 56.710146][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.840052][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.939082][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 57.044194][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.054706][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.079086][ T64] usb 4-1: device descriptor read/64, error -71 [ 57.079111][ T31] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 57.110172][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.143342][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.150574][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.157627][ T989] bridge_slave_0: entered allmulticast mode [ 57.164413][ T989] bridge_slave_0: entered promiscuous mode [ 57.170769][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.177794][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.184915][ T989] bridge_slave_1: entered allmulticast mode [ 57.191099][ T989] bridge_slave_1: entered promiscuous mode [ 57.228692][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.235756][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.243057][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.250103][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.258661][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.271456][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.278750][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.288326][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.289242][ T547] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 57.295408][ T532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.320608][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.327685][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.341570][ T989] veth0_vlan: entered promiscuous mode [ 57.352371][ T989] veth1_macvtap: entered promiscuous mode [ 57.359152][ T64] usb 4-1: device descriptor read/64, error -71 [ 57.370130][ T31] usb usb1-port1: unable to enumerate USB device [ 57.429131][ T547] usb 2-1: device descriptor read/64, error -71 [ 57.609231][ T64] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 57.629111][ T31] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 57.689115][ T547] usb 2-1: device descriptor read/64, error -71 [ 57.759090][ T64] usb 4-1: device descriptor read/64, error -71 [ 57.780425][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.788513][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 57.796972][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.807189][ T31] usb 5-1: config 1 interface 2 has no altsetting 0 [ 57.815138][ T31] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 57.824259][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.832317][ T31] usb 5-1: Product: syz [ 57.836480][ T31] usb 5-1: Manufacturer: syz [ 57.841113][ T31] usb 5-1: SerialNumber: syz [ 57.929477][ T547] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.009858][ T64] usb 4-1: device descriptor read/64, error -71 [ 58.050684][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.061475][ T998] mmap: syz.0.197 (998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.061486][ T31] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 58.066217][ T31] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 58.079094][ T547] usb 2-1: device descriptor read/64, error -71 [ 58.088147][ T31] usb 5-1: USB disconnect, device number 2 [ 58.111407][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.129219][ T64] usb usb4-port1: attempt power cycle [ 58.349145][ T547] usb 2-1: device descriptor read/64, error -71 [ 58.409112][ T381] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 58.459167][ T547] usb usb2-port1: attempt power cycle [ 58.479152][ T64] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 58.500531][ T64] usb 4-1: device descriptor read/8, error -71 [ 58.560390][ T381] usb 1-1: Using ep0 maxpacket: 8 [ 58.566748][ T36] audit: type=1400 audit(1781354419.062:311): avc: denied { write } for pid=1003 comm="syz.4.199" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.567379][ T1004] overlay: Unknown parameter 'dont_appraise' [ 58.591784][ T36] audit: type=1400 audit(1781354419.062:312): avc: denied { open } for pid=1003 comm="syz.4.199" path="/1/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.620666][ T36] audit: type=1400 audit(1781354419.062:313): avc: denied { setattr } for pid=1003 comm="syz.4.199" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.621678][ T381] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 58.644894][ T36] audit: type=1400 audit(1781354419.062:314): avc: denied { mounton } for pid=1003 comm="syz.4.199" path="/1/file0" dev="incremental-fs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.656809][ T381] usb 1-1: can't read configurations, error -61 [ 58.682578][ T64] usb 4-1: device descriptor read/8, error -71 [ 58.782765][ T36] audit: type=1400 audit(1781354419.282:315): avc: denied { unmount } for pid=989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.806159][ T547] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 58.814169][ T381] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 58.840205][ T547] usb 2-1: device descriptor read/8, error -71 [ 58.939336][ T64] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 58.960123][ T64] usb 4-1: device descriptor read/8, error -71 [ 58.969207][ T381] usb 1-1: Using ep0 maxpacket: 8 [ 58.975103][ T547] usb 2-1: device descriptor read/8, error -71 [ 58.982347][ T381] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 58.990137][ T381] usb 1-1: can't read configurations, error -61 [ 58.996487][ T381] usb usb1-port1: attempt power cycle [ 59.090103][ T64] usb 4-1: device descriptor read/8, error -71 [ 59.109103][ T391] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.199177][ T64] usb usb4-port1: unable to enumerate USB device [ 59.219106][ T547] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 59.240117][ T547] usb 2-1: device descriptor read/8, error -71 [ 59.259110][ T391] usb 5-1: Using ep0 maxpacket: 32 [ 59.265350][ T391] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.273471][ T391] usb 5-1: config 0 has no interface number 0 [ 59.281142][ T391] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.290370][ T391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.298364][ T391] usb 5-1: Product: syz [ 59.302576][ T391] usb 5-1: Manufacturer: syz [ 59.307183][ T391] usb 5-1: SerialNumber: syz [ 59.312391][ T391] usb 5-1: config 0 descriptor?? [ 59.318119][ T391] smsc95xx v2.0.0 [ 59.339082][ T381] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 59.359423][ T381] usb 1-1: Using ep0 maxpacket: 8 [ 59.365813][ T381] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 59.373508][ T381] usb 1-1: can't read configurations, error -61 [ 59.380592][ T547] usb 2-1: device descriptor read/8, error -71 [ 59.489188][ T547] usb usb2-port1: unable to enumerate USB device [ 59.509098][ T381] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 59.529398][ T381] usb 1-1: Using ep0 maxpacket: 8 [ 59.535792][ T381] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 59.543538][ T381] usb 1-1: can't read configurations, error -61 [ 59.549935][ T381] usb usb1-port1: unable to enumerate USB device [ 59.792556][ T36] audit: type=1400 audit(1781354420.292:316): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.116660][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 60.125677][ T381] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 60.137066][ T1025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.149947][ T36] audit: type=1400 audit(1781354420.652:317): avc: denied { read } for pid=1024 comm="syz.1.208" path="socket:[9661]" dev="sockfs" ino=9661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.175328][ T391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 60.229395][ T36] audit: type=1400 audit(1781354420.732:318): avc: denied { ioctl } for pid=1029 comm="syz.1.210" path="socket:[9671]" dev="sockfs" ino=9671 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.290364][ T381] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.298450][ T381] usb 4-1: not running at top speed; connect to a high speed hub [ 60.308231][ T381] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 60.317315][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.325336][ T381] usb 4-1: Product: syz [ 60.329515][ T381] usb 4-1: Manufacturer: syz [ 60.334098][ T381] usb 4-1: SerialNumber: syz [ 60.379343][ T391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 60.390262][ T391] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 60.399600][ T391] usb 5-1: USB disconnect, device number 3 [ 60.742088][ T391] usb 4-1: USB disconnect, device number 29 [ 60.800955][ T1032] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 60.811009][ T36] audit: type=1400 audit(1781354421.312:319): avc: denied { relabelto } for pid=1031 comm="syz.1.211" name="file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 60.845270][ T1034] syzkaller0: entered promiscuous mode [ 60.850847][ T1034] syzkaller0: entered allmulticast mode [ 61.149108][ T342] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.156666][ T31] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 61.265470][ T1053] netlink: 96 bytes leftover after parsing attributes in process `syz.3.217'. [ 61.305729][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 61.305746][ T36] audit: type=1400 audit(1781354421.802:324): avc: denied { connect } for pid=1073 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.320124][ T342] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 61.342479][ T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 61.353425][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.365526][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 61.376459][ T342] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 61.387925][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 61.401281][ T342] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.414295][ T342] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.421033][ T342] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 61.430248][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.438475][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.447824][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.456138][ T342] usb 5-1: config 0 descriptor?? [ 61.462153][ T1036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.462659][ T31] usb 2-1: SerialNumber: syz [ 61.475234][ T1041] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 61.484943][ T1094] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 61.487568][ T31] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 61.691301][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.699900][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.708846][ T31] usb 2-1: USB disconnect, device number 25 [ 61.885284][ T342] hid (null): unknown global tag 0xe [ 61.890645][ T342] hid (null): usage index exceeded [ 61.896636][ T342] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x1 [ 61.904034][ T342] magicmouse 0003:05AC:0265.000E: ignoring exceeding usage max [ 61.912543][ T342] magicmouse 0003:05AC:0265.000E: unknown global tag 0xe [ 61.919612][ T342] magicmouse 0003:05AC:0265.000E: item 0 1 1 14 parsing failed [ 61.927505][ T342] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 61.935486][ T342] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22 [ 62.091258][ T1036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'. [ 62.100967][ T381] usb 5-1: USB disconnect, device number 4 [ 62.148113][ T36] audit: type=1400 audit(1781354422.642:325): avc: denied { bind } for pid=1110 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.179155][ T64] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 62.219982][ T1113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.227'. [ 62.229799][ T36] audit: type=1400 audit(1781354422.732:326): avc: denied { setopt } for pid=1112 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.229879][ T1113] netlink: 'syz.1.227': attribute type 5 has an invalid length. [ 62.309753][ T36] audit: type=1400 audit(1781354422.812:327): avc: denied { mounton } for pid=1116 comm="syz.1.229" path="/63/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.309759][ T1117] fuse: Unknown parameter 'śl[0x0000000000000004' [ 62.340486][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 62.351196][ T64] usb 4-1: not running at top speed; connect to a high speed hub [ 62.357001][ T1119] 9pnet_virtio: no channels available for device 127.0.0.1 [ 62.359656][ T64] usb 4-1: config 1 has an invalid interface number: 168 but max is 0 [ 62.374831][ T64] usb 4-1: config 1 has no interface number 0 [ 62.381096][ T64] usb 4-1: config 1 interface 168 has no altsetting 0 [ 62.390161][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 62.399451][ T64] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 62.408602][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.416776][ T64] usb 4-1: Product: syz [ 62.421605][ T64] usb 4-1: Manufacturer: syz [ 62.426193][ T64] usb 4-1: SerialNumber: syz [ 62.434168][ T64] ums-jumpshot 4-1:1.168: USB Mass Storage device detected [ 62.442620][ T64] ums-jumpshot 4-1:1.168: Quirks match for vid 05dc pid 0001: 2 [ 62.519177][ T31] usb 1-1: device descriptor read/64, error -71 [ 62.636043][ T36] audit: type=1400 audit(1781354423.132:328): avc: denied { write } for pid=1108 comm="syz.3.225" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.636831][ T1109] input: syz0 as /devices/virtual/input/input14 [ 62.662233][ T36] audit: type=1400 audit(1781354423.132:329): avc: denied { ioctl } for pid=1108 comm="syz.3.225" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.690978][ T406] udevd[406]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 62.702810][ T343] usb 4-1: USB disconnect, device number 30 [ 62.729093][ T342] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 62.759094][ T31] usb 1-1: device descriptor read/64, error -71 [ 62.880115][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.891391][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 62.902567][ T342] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 62.915541][ T342] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 62.924612][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.933394][ T342] usb 2-1: config 0 descriptor?? [ 62.938605][ T1126] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 62.999134][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 63.129294][ T31] usb 1-1: device descriptor read/64, error -71 [ 63.218556][ T1132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 63.347989][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.355030][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.362192][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.369387][ T31] usb 1-1: device descriptor read/64, error -71 [ 63.375679][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.382668][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.389652][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.396636][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.403609][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.410597][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.417530][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.424496][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.431465][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.438411][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.445399][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.452601][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.459814][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.467055][ T342] elecom 0003:056E:010C.000F: unknown main item tag 0x0 [ 63.469176][ T64] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 63.475635][ T342] elecom 0003:056E:010C.000F: hidraw0: USB HID v2.08 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 63.494162][ T31] usb usb1-port1: attempt power cycle [ 63.555462][ T381] usb 2-1: USB disconnect, device number 26 [ 63.633554][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.644078][ T64] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 63.658962][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.667224][ T64] usb 4-1: Product: syz [ 63.671747][ T64] usb 4-1: Manufacturer: syz [ 63.676393][ T64] usb 4-1: SerialNumber: syz [ 63.683871][ T64] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 63.839114][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 63.860126][ T31] usb 1-1: device descriptor read/8, error -71 [ 63.885962][ T1131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 63.909087][ T342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.990066][ T31] usb 1-1: device descriptor read/8, error -71 [ 64.039095][ T342] usb 5-1: device descriptor read/64, error -71 [ 64.043655][ T64] usb 4-1: USB disconnect, device number 31 [ 64.058125][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.239077][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 64.260170][ T31] usb 1-1: device descriptor read/8, error -71 [ 64.279088][ T342] usb 5-1: device descriptor read/64, error -71 [ 64.319097][ T334] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 64.390141][ T31] usb 1-1: device descriptor read/8, error -71 [ 64.469086][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 64.475355][ T334] usb 2-1: config index 0 descriptor too short (expected 45786, got 36) [ 64.483849][ T334] usb 2-1: config 23 has too many interfaces: 116, using maximum allowed: 32 [ 64.492656][ T334] usb 2-1: config 23 has an invalid descriptor of length 0, skipping remainder of the config [ 64.502920][ T334] usb 2-1: config 23 has 1 interface, different from the descriptor's value: 116 [ 64.512108][ T31] usb usb1-port1: unable to enumerate USB device [ 64.518811][ T334] usb 2-1: config 23 has no interface number 0 [ 64.525018][ T342] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.532526][ T334] usb 2-1: config 23 interface 13 has no altsetting 0 [ 64.540744][ T334] usb 2-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=be.c3 [ 64.549798][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.557762][ T334] usb 2-1: Product: syz [ 64.561953][ T334] usb 2-1: Manufacturer: syz [ 64.566540][ T334] usb 2-1: SerialNumber: syz [ 64.669111][ T342] usb 5-1: device descriptor read/64, error -71 [ 64.750545][ T36] audit: type=1400 audit(1781354425.252:330): avc: denied { create } for pid=1158 comm="syz.3.242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.752806][ T1159] rust_binder: 1158:1159 transaction to 0 failed: ENOENT [ 64.773472][ T334] rtl8150 2-1:23.13: couldn't find required endpoints [ 64.778818][ T36] audit: type=1400 audit(1781354425.272:331): avc: denied { write } for pid=1158 comm="syz.3.242" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.780646][ T334] rtl8150 2-1:23.13: probe with driver rtl8150 failed with error -5 [ 64.811381][ T64] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 64.821923][ T334] usb 2-1: USB disconnect, device number 27 [ 64.828085][ T64] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.916458][ T36] audit: type=1400 audit(1781354425.412:332): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.941308][ T36] audit: type=1400 audit(1781354425.442:333): avc: denied { map } for pid=1162 comm="syz.3.243" path="socket:[10863]" dev="sockfs" ino=10863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.949129][ T342] usb 5-1: device descriptor read/64, error -71 [ 65.079149][ T342] usb usb5-port1: attempt power cycle [ 65.298087][ T1178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1178 comm=syz.0.249 [ 65.312548][ T1178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1178 comm=syz.0.249 [ 65.419096][ T342] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.440061][ T342] usb 5-1: device descriptor read/8, error -71 [ 65.559079][ T334] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 65.570059][ T342] usb 5-1: device descriptor read/8, error -71 [ 65.710128][ T334] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 65.718476][ T334] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 65.728807][ T334] usb 1-1: config 220 has no interface number 2 [ 65.735105][ T334] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 65.748237][ T334] usb 1-1: config 220 interface 0 has no altsetting 0 [ 65.755099][ T334] usb 1-1: config 220 interface 76 has no altsetting 0 [ 65.762072][ T334] usb 1-1: config 220 interface 1 has no altsetting 0 [ 65.770184][ T334] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 65.779257][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.787237][ T334] usb 1-1: Product: syz [ 65.791404][ T334] usb 1-1: Manufacturer: syz [ 65.795993][ T334] usb 1-1: SerialNumber: syz [ 65.819084][ T342] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.840048][ T342] usb 5-1: device descriptor read/8, error -71 [ 65.980062][ T342] usb 5-1: device descriptor read/8, error -71 [ 66.003849][ T334] usb 1-1: selecting invalid altsetting 0 [ 66.009737][ T334] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 66.016066][ T334] usb 1-1: No valid video chain found. [ 66.023562][ T334] usb 1-1: USB disconnect, device number 40 [ 66.089149][ T342] usb usb5-port1: unable to enumerate USB device [ 66.333809][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 66.333825][ T36] audit: type=1326 audit(1781354426.832:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1199 comm="syz.1.254" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd36a59ce59 code=0x0 [ 66.630547][ T36] audit: type=1400 audit(1781354427.132:342): avc: denied { view } for pid=1210 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.650344][ T36] audit: type=1400 audit(1781354427.152:343): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.720733][ T1224] 9pnet_fd: p9_fd_create_tcp (1224): problem binding to privport [ 66.816487][ T1237] FAULT_INJECTION: forcing a failure. [ 66.816487][ T1237] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.830324][ T1237] CPU: 1 UID: 0 PID: 1237 Comm: syz.3.265 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 66.830355][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.830370][ T1237] Call Trace: [ 66.830375][ T1237] [ 66.830382][ T1237] __dump_stack+0x21/0x30 [ 66.830414][ T1237] dump_stack_lvl+0x140/0x1c0 [ 66.830438][ T1237] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.830461][ T1237] ? kasan_save_alloc_info+0x40/0x50 [ 66.830477][ T1237] dump_stack+0x19/0x20 [ 66.830498][ T1237] should_fail_ex+0x3d7/0x530 [ 66.830520][ T1237] should_fail+0xf/0x20 [ 66.830539][ T1237] should_fail_usercopy+0x1e/0x30 [ 66.830564][ T1237] _copy_from_iter+0x1a9/0x1510 [ 66.830590][ T1237] ? __cfi__copy_from_iter+0x10/0x10 [ 66.830616][ T1237] tun_get_user+0x235/0x36c0 [ 66.830635][ T1237] ? __kernel_text_address+0x11/0x40 [ 66.830668][ T1237] ? arch_stack_walk+0x10a/0x170 [ 66.830688][ T1237] ? _parse_integer_limit+0x195/0x1e0 [ 66.830710][ T1237] ? ptr_ring_consume+0x430/0x430 [ 66.830730][ T1237] ? _parse_integer+0x2e/0x40 [ 66.830750][ T1237] ? kstrtoull+0x13b/0x1e0 [ 66.830771][ T1237] ? __kasan_check_write+0x18/0x20 [ 66.830789][ T1237] ? ref_tracker_alloc+0x30d/0x590 [ 66.830814][ T1237] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 66.830837][ T1237] ? selinux_file_permission+0x318/0xb60 [ 66.830857][ T1237] ? __kasan_check_write+0x18/0x20 [ 66.830873][ T1237] tun_chr_write_iter+0x1fc/0x310 [ 66.830891][ T1237] vfs_write+0x761/0xf90 [ 66.830907][ T1237] ? __cfi_vfs_write+0x10/0x10 [ 66.830925][ T1237] ksys_write+0x145/0x260 [ 66.830941][ T1237] ? __cfi_ksys_write+0x10/0x10 [ 66.830958][ T1237] ? __kasan_check_read+0x15/0x20 [ 66.830976][ T1237] __x64_sys_write+0x7f/0x90 [ 66.830991][ T1237] x64_sys_call+0x271c/0x2ee0 [ 66.831007][ T1237] do_syscall_64+0x57/0xf0 [ 66.831030][ T1237] ? clear_bhb_loop+0x50/0xa0 [ 66.831048][ T1237] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.831074][ T1237] RIP: 0033:0x7f7c2919ce59 [ 66.831096][ T1237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.831110][ T1237] RSP: 002b:00007f7c2a0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.831137][ T1237] RAX: ffffffffffffffda RBX: 00007f7c29415fa0 RCX: 00007f7c2919ce59 [ 66.831150][ T1237] RDX: 000000000000002e RSI: 0000200000000240 RDI: 0000000000000003 [ 66.831162][ T1237] RBP: 00007f7c2a0ea090 R08: 0000000000000000 R09: 0000000000000000 [ 66.831174][ T1237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.831186][ T1237] R13: 00007f7c29416038 R14: 00007f7c29415fa0 R15: 00007ffe6db5d3f8 [ 66.831203][ T1237] [ 67.126258][ T36] audit: type=1400 audit(1781354427.622:344): avc: denied { mount } for pid=1242 comm="syz.4.268" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.154408][ T36] audit: type=1400 audit(1781354427.622:345): avc: denied { mounton } for pid=1242 comm="syz.4.268" path="/14/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 67.176525][ T36] audit: type=1400 audit(1781354427.662:346): avc: denied { unmount } for pid=989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.210936][ T36] audit: type=1400 audit(1781354427.702:347): avc: denied { map } for pid=1251 comm="syz.4.269" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.260372][ T1239] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 67.268046][ T1239] netlink: 72 bytes leftover after parsing attributes in process `syz.1.267'. [ 67.303410][ T1259] random: crng reseeded on system resumption [ 67.304293][ T36] audit: type=1400 audit(1781354427.802:348): avc: denied { append } for pid=1258 comm="syz.0.273" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.344280][ T36] audit: type=1400 audit(1781354427.842:349): avc: denied { read write } for pid=1238 comm="syz.1.267" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.350673][ T1260] rust_binder: Error in use_page_slow: ESRCH [ 67.369127][ T1260] rust_binder: use_range failure ESRCH [ 67.369149][ T36] audit: type=1400 audit(1781354427.842:350): avc: denied { open } for pid=1238 comm="syz.1.267" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.375154][ T1260] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 67.405005][ T1260] rust_binder: Failure in copy_transaction_data: ESRCH [ 67.412991][ T1260] rust_binder: 1251:1260 transaction to 1251 failed: ESRCH [ 67.439770][ T1266] .N: renamed from veth0_to_bond (while UP) [ 67.488343][ T1270] fuse: Bad value for 'fd' [ 67.547397][ T1276] FAULT_INJECTION: forcing a failure. [ 67.547397][ T1276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.560525][ T1276] CPU: 1 UID: 0 PID: 1276 Comm: syz.3.279 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 67.560559][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.560569][ T1276] Call Trace: [ 67.560573][ T1276] [ 67.560578][ T1276] __dump_stack+0x21/0x30 [ 67.560597][ T1276] dump_stack_lvl+0x140/0x1c0 [ 67.560612][ T1276] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.560625][ T1276] ? kasan_save_alloc_info+0x40/0x50 [ 67.560642][ T1276] dump_stack+0x19/0x20 [ 67.560655][ T1276] should_fail_ex+0x3d7/0x530 [ 67.560669][ T1276] should_fail+0xf/0x20 [ 67.560680][ T1276] should_fail_usercopy+0x1e/0x30 [ 67.560694][ T1276] _copy_from_iter+0x1a9/0x1510 [ 67.560710][ T1276] ? __cfi__copy_from_iter+0x10/0x10 [ 67.560725][ T1276] tun_get_user+0x503/0x36c0 [ 67.560738][ T1276] ? arch_stack_walk+0x10a/0x170 [ 67.560749][ T1276] ? _parse_integer_limit+0x195/0x1e0 [ 67.560761][ T1276] ? ptr_ring_consume+0x430/0x430 [ 67.560772][ T1276] ? _parse_integer+0x2e/0x40 [ 67.560783][ T1276] ? kstrtoull+0x13b/0x1e0 [ 67.560794][ T1276] ? __kasan_check_write+0x18/0x20 [ 67.560804][ T1276] ? ref_tracker_alloc+0x30d/0x590 [ 67.560817][ T1276] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 67.560830][ T1276] ? selinux_file_permission+0x318/0xb60 [ 67.560842][ T1276] ? __kasan_check_write+0x18/0x20 [ 67.560855][ T1276] tun_chr_write_iter+0x1fc/0x310 [ 67.560866][ T1276] vfs_write+0x761/0xf90 [ 67.560878][ T1276] ? __cfi_vfs_write+0x10/0x10 [ 67.560889][ T1276] ksys_write+0x145/0x260 [ 67.560899][ T1276] ? xfd_validate_state+0x68/0x140 [ 67.560914][ T1276] ? __cfi_ksys_write+0x10/0x10 [ 67.560924][ T1276] ? __kasan_check_read+0x15/0x20 [ 67.560934][ T1276] __x64_sys_write+0x7f/0x90 [ 67.560944][ T1276] x64_sys_call+0x271c/0x2ee0 [ 67.560954][ T1276] do_syscall_64+0x57/0xf0 [ 67.560968][ T1276] ? clear_bhb_loop+0x50/0xa0 [ 67.560979][ T1276] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.560994][ T1276] RIP: 0033:0x7f7c2919ce59 [ 67.561005][ T1276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.561014][ T1276] RSP: 002b:00007f7c2a0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.561027][ T1276] RAX: ffffffffffffffda RBX: 00007f7c29415fa0 RCX: 00007f7c2919ce59 [ 67.561035][ T1276] RDX: 000000000000002e RSI: 0000200000000240 RDI: 0000000000000003 [ 67.561042][ T1276] RBP: 00007f7c2a0ea090 R08: 0000000000000000 R09: 0000000000000000 [ 67.561048][ T1276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.561055][ T1276] R13: 00007f7c29416038 R14: 00007f7c29415fa0 R15: 00007ffe6db5d3f8 [ 67.561064][ T1276] [ 67.834440][ T1278] Invalid argument reading file caps for ./file0 [ 68.206466][ T1307] FAULT_INJECTION: forcing a failure. [ 68.206466][ T1307] name failslab, interval 1, probability 0, space 0, times 1 [ 68.219200][ T1307] CPU: 0 UID: 0 PID: 1307 Comm: syz.4.288 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 68.219231][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 68.219242][ T1307] Call Trace: [ 68.219248][ T1307] [ 68.219255][ T1307] __dump_stack+0x21/0x30 [ 68.219283][ T1307] dump_stack_lvl+0x140/0x1c0 [ 68.219308][ T1307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.219330][ T1307] ? proc_tid_base_lookup+0x2f/0x40 [ 68.219347][ T1307] ? do_filp_open+0x1f5/0x440 [ 68.219370][ T1307] ? do_sys_openat2+0x134/0x1d0 [ 68.219394][ T1307] ? __x64_sys_openat+0x13a/0x170 [ 68.219418][ T1307] ? do_syscall_64+0x57/0xf0 [ 68.219442][ T1307] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.219469][ T1307] dump_stack+0x19/0x20 [ 68.219491][ T1307] should_fail_ex+0x3d7/0x530 [ 68.219513][ T1307] should_failslab+0xac/0x100 [ 68.219535][ T1307] kmem_cache_alloc_node_noprof+0x45/0x420 [ 68.219555][ T1307] ? __alloc_skb+0x108/0x370 [ 68.219572][ T1307] ? avc_has_perm_noaudit+0x28a/0x360 [ 68.219592][ T1307] __alloc_skb+0x108/0x370 [ 68.219609][ T1307] ? avc_has_perm+0x155/0x240 [ 68.219628][ T1307] alloc_skb_with_frags+0xce/0x8b0 [ 68.219658][ T1307] sock_alloc_send_pskb+0x883/0x9a0 [ 68.219674][ T1307] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 68.219688][ T1307] ? iov_iter_advance+0x9b/0x1e0 [ 68.219698][ T1307] tun_get_user+0xae2/0x36c0 [ 68.219711][ T1307] ? arch_stack_walk+0x10a/0x170 [ 68.219722][ T1307] ? _parse_integer_limit+0x195/0x1e0 [ 68.219734][ T1307] ? ptr_ring_consume+0x430/0x430 [ 68.219745][ T1307] ? _parse_integer+0x2e/0x40 [ 68.219756][ T1307] ? kstrtoull+0x13b/0x1e0 [ 68.219768][ T1307] ? __kasan_check_write+0x18/0x20 [ 68.219778][ T1307] ? ref_tracker_alloc+0x30d/0x590 [ 68.219792][ T1307] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 68.219805][ T1307] ? selinux_file_permission+0x318/0xb60 [ 68.219816][ T1307] ? __kasan_check_write+0x18/0x20 [ 68.219826][ T1307] tun_chr_write_iter+0x1fc/0x310 [ 68.219837][ T1307] vfs_write+0x761/0xf90 [ 68.219849][ T1307] ? __cfi_vfs_write+0x10/0x10 [ 68.219860][ T1307] ksys_write+0x145/0x260 [ 68.219870][ T1307] ? xfd_validate_state+0x68/0x140 [ 68.219885][ T1307] ? __cfi_ksys_write+0x10/0x10 [ 68.219895][ T1307] ? __kasan_check_read+0x15/0x20 [ 68.219905][ T1307] __x64_sys_write+0x7f/0x90 [ 68.219915][ T1307] x64_sys_call+0x271c/0x2ee0 [ 68.219925][ T1307] do_syscall_64+0x57/0xf0 [ 68.219939][ T1307] ? clear_bhb_loop+0x50/0xa0 [ 68.219949][ T1307] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.219964][ T1307] RIP: 0033:0x7fc7e499ce59 [ 68.219973][ T1307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.219983][ T1307] RSP: 002b:00007fc7e584b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.219996][ T1307] RAX: ffffffffffffffda RBX: 00007fc7e4c15fa0 RCX: 00007fc7e499ce59 [ 68.220004][ T1307] RDX: 000000000000002e RSI: 0000200000000240 RDI: 0000000000000003 [ 68.220011][ T1307] RBP: 00007fc7e584b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.220018][ T1307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.220024][ T1307] R13: 00007fc7e4c16038 R14: 00007fc7e4c15fa0 R15: 00007ffd394d2998 [ 68.220033][ T1307] [ 68.558868][ T1309] syz.1.289 (1309): /proc/1308/oom_adj is deprecated, please use /proc/1308/oom_score_adj instead. [ 68.586284][ T1313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.291'. [ 68.586905][ T1315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.597134][ T1315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.607133][ T1313] netlink: 'syz.4.291': attribute type 64 has an invalid length. [ 68.619666][ T1313] netlink: 5 bytes leftover after parsing attributes in process `syz.4.291'. [ 68.626450][ T1315] netlink: 108 bytes leftover after parsing attributes in process `syz.1.290'. [ 68.630747][ T1313] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 68.637416][ T1313] rust_binder: 1311:1313 transaction to 1311 failed: BR_DEAD_REPLY [ 68.661843][ T1322] overlay: ./file0 is not a directory [ 68.819092][ T334] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 68.869076][ T343] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 68.969093][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 68.975163][ T334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.986738][ T334] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 68.995831][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.003982][ T334] usb 2-1: Product: syz [ 69.008189][ T334] usb 2-1: Manufacturer: syz [ 69.012827][ T334] usb 2-1: SerialNumber: syz [ 69.017962][ T334] usb 2-1: config 0 descriptor?? [ 69.023631][ T334] usb 2-1: bad CDC descriptors [ 69.028549][ T334] usb 2-1: unsupported MDLM descriptors [ 69.035190][ T343] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.045374][ T343] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 69.055528][ T343] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.063508][ T343] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 69.072589][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.080596][ T343] usb 1-1: Product: syz [ 69.084754][ T343] usb 1-1: Manufacturer: syz [ 69.089632][ T343] usb 1-1: SerialNumber: syz [ 69.095099][ T1318] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 69.102316][ T1318] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 69.229124][ T1331] 9pnet_fd: p9_fd_create_unix (1331): problem connecting socket: ./cgroup/file0: -2 [ 69.233099][ T334] usb 2-1: USB disconnect, device number 28 [ 69.364764][ T1343] tipc: Started in network mode [ 69.369774][ T1343] tipc: Node identity ac14140f, cluster identity 4711 [ 69.376697][ T1343] tipc: New replicast peer: 255.255.255.255 [ 69.384054][ T1343] tipc: Enabled bearer , priority 10 [ 69.629072][ T342] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 69.639079][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.779088][ T31] usb 5-1: device descriptor read/64, error -71 [ 69.785397][ T342] usb 4-1: Using ep0 maxpacket: 8 [ 69.791768][ T342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.800278][ T342] usb 4-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 69.810820][ T342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.820150][ T342] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.834954][ T342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.844086][ T342] usb 4-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 69.852280][ T342] usb 4-1: Product: syz [ 69.856440][ T342] usb 4-1: Manufacturer: syz [ 69.861048][ T342] usb 4-1: SerialNumber: syz [ 69.999090][ T64] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 70.019102][ T31] usb 5-1: device descriptor read/64, error -71 [ 70.069506][ T342] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 70.076194][ T342] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 70.083419][ T342] cdc_ncm 4-1:1.0: bind() failure [ 70.089906][ T342] usb 4-1: USB disconnect, device number 32 [ 70.133033][ T343] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:b9:16:ec:29:96 [ 70.145638][ T343] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 70.153193][ T343] usb 1-1: USB disconnect, device number 41 [ 70.160181][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.173133][ T64] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 70.182227][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.190860][ T64] usb 2-1: config 0 descriptor?? [ 70.259082][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 70.389078][ T31] usb 5-1: device descriptor read/64, error -71 [ 70.399419][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 70.405407][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 70.414066][ T64] usb 2-1: USB disconnect, device number 29 [ 70.499115][ T343] tipc: Node number set to 2886997007 [ 70.629093][ T31] usb 5-1: device descriptor read/64, error -71 [ 70.739159][ T31] usb usb5-port1: attempt power cycle [ 70.819082][ T342] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 70.839082][ T343] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 70.939088][ T311] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 70.971043][ T342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.979416][ T342] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 70.992308][ T342] usb 4-1: config 1 interface 0 has no altsetting 0 [ 70.999873][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.010970][ T343] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 71.020242][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.028300][ T342] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 71.037570][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.045806][ T343] usb 2-1: config 0 descriptor?? [ 71.050864][ T342] usb 4-1: Product: syz [ 71.055039][ T342] usb 4-1: Manufacturer: syz [ 71.060309][ T342] usb 4-1: SerialNumber: syz [ 71.079163][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 71.099071][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 71.105315][ T31] usb 5-1: device descriptor read/8, error -71 [ 71.111729][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.120090][ T311] usb 1-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 71.130583][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.140848][ T311] usb 1-1: New USB device found, idVendor=0499, idProduct=1031, bcdDevice= 0.40 [ 71.149969][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.157973][ T311] usb 1-1: Product: syz [ 71.162168][ T311] usb 1-1: Manufacturer: syz [ 71.166779][ T311] usb 1-1: SerialNumber: syz [ 71.250024][ T31] usb 5-1: device descriptor read/8, error -71 [ 71.260372][ T1347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.268855][ T1349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.270074][ T1347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.277588][ T1349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.377714][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 71.389216][ T311] usb 1-1: USB disconnect, device number 42 [ 71.399713][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.489129][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 71.500242][ T342] usbhid 4-1:1.0: can't add hid device: -71 [ 71.506174][ T342] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 71.515414][ T342] usb 4-1: USB disconnect, device number 33 [ 71.522766][ T31] usb 5-1: device descriptor read/8, error -71 [ 71.650096][ T31] usb 5-1: device descriptor read/8, error -71 [ 71.697337][ T1347] 9pnet_fd: Insufficient options for proto=fd [ 71.759234][ T31] usb usb5-port1: unable to enumerate USB device [ 71.899455][ T343] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 71.906901][ T343] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 71.966924][ C1] ------------[ cut here ]------------ [ 71.972408][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 71.980980][ C1] index 14782 is out of range for type 'const int[34]' [ 71.987816][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 71.987835][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.987843][ C1] Call Trace: [ 71.987853][ C1] [ 71.987859][ C1] __dump_stack+0x21/0x30 [ 71.987881][ C1] dump_stack_lvl+0x140/0x1c0 [ 71.987897][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.987913][ C1] ? default_idle_call+0x3e/0x80 [ 71.987927][ C1] ? common_startup_64+0x13b/0x157 [ 71.987943][ C1] dump_stack+0x19/0x20 [ 71.987957][ C1] ubsan_epilogue+0xe/0x40 [ 71.987968][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 71.987984][ C1] ? __kasan_check_write+0x18/0x20 [ 71.987995][ C1] aiptek_irq+0x20cb/0x2a00 [ 71.988006][ C1] ? kcov_remote_start+0x1d3/0x3c0 [ 71.988018][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 71.988030][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 71.988041][ C1] dummy_timer+0x816/0x4300 [ 71.988056][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 71.988068][ C1] ? timerqueue_del+0xd7/0x130 [ 71.988081][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 71.988097][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 71.988109][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 71.988126][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 71.988141][ C1] ? read_tsc+0xd/0x20 [ 71.988155][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 71.988169][ C1] hrtimer_run_softirq+0x159/0x560 [ 71.988179][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 71.988194][ C1] handle_softirqs+0x1aa/0x630 [ 71.988206][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 71.988220][ C1] __irq_exit_rcu+0x47/0xb0 [ 71.988230][ C1] irq_exit_rcu+0xd/0x30 [ 71.988240][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 71.988252][ C1] [ 71.988255][ C1] [ 71.988259][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 71.988270][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 71.988284][ C1] Code: cc cc cc cc cc cc cc b8 4f 34 94 fc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 71.988294][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 71.988305][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366b900 RCX: ffffffff85a89bcd [ 71.988313][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000001c6d74 [ 71.988320][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 71.988328][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 71.988335][ C1] R13: 1ffff110206cd720 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 71.988344][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 71.988357][ C1] default_idle+0x17/0x30 [ 71.988369][ C1] arch_cpu_idle+0xd/0x20 [ 71.988381][ C1] default_idle_call+0x3e/0x80 [ 71.988394][ C1] do_idle+0x2fc/0x570 [ 71.988406][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 71.988419][ C1] cpu_startup_entry+0x47/0x60 [ 71.988444][ C1] start_secondary+0x12e/0x140 [ 71.988468][ C1] common_startup_64+0x13b/0x157 [ 71.988495][ C1] [ 71.988499][ C1] ---[ end trace ]--- [ 72.041369][ T1363] FAULT_INJECTION: forcing a failure. [ 72.041369][ T1363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.044178][ C1] ------------[ cut here ]------------ [ 72.044188][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 72.044208][ C1] index 14783 is out of range for type 'const int[34]' [ 72.048713][ T1363] CPU: 0 UID: 0 PID: 1363 Comm: syz.3.310 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 72.048738][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.048750][ T1363] Call Trace: [ 72.048757][ T1363] [ 72.048766][ T1363] __dump_stack+0x21/0x30 [ 72.048794][ T1363] dump_stack_lvl+0x140/0x1c0 [ 72.048817][ T1363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.048842][ T1363] dump_stack+0x19/0x20 [ 72.048864][ T1363] should_fail_ex+0x3d7/0x530 [ 72.048887][ T1363] should_fail+0xf/0x20 [ 72.048907][ T1363] should_fail_usercopy+0x1e/0x30 [ 72.048929][ T1363] _copy_from_iter+0x1a9/0x1510 [ 72.048954][ T1363] ? __virt_addr_valid+0x2a6/0x380 [ 72.048975][ T1363] ? __cfi__copy_from_iter+0x10/0x10 [ 72.048998][ T1363] ? __check_object_size+0x527/0x830 [ 72.049021][ T1363] ? __cfi___check_object_size+0x10/0x10 [ 72.049040][ T1363] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 72.049062][ T1363] skb_copy_datagram_from_iter+0x100/0x700 [ 72.049085][ T1363] tun_get_user+0x16ef/0x36c0 [ 72.049105][ T1363] ? arch_stack_walk+0x10a/0x170 [ 72.049123][ T1363] ? _parse_integer_limit+0x195/0x1e0 [ 72.049143][ T1363] ? ptr_ring_consume+0x430/0x430 [ 72.049162][ T1363] ? _parse_integer+0x2e/0x40 [ 72.049180][ T1363] ? kstrtoull+0x13b/0x1e0 [ 72.049200][ T1363] ? __kasan_check_write+0x18/0x20 [ 72.049218][ T1363] ? ref_tracker_alloc+0x30d/0x590 [ 72.049240][ T1363] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 72.049262][ T1363] ? selinux_file_permission+0x318/0xb60 [ 72.049281][ T1363] ? __kasan_check_write+0x18/0x20 [ 72.049299][ T1363] tun_chr_write_iter+0x1fc/0x310 [ 72.049318][ T1363] vfs_write+0x761/0xf90 [ 72.049336][ T1363] ? __cfi_vfs_write+0x10/0x10 [ 72.049363][ T1363] ksys_write+0x145/0x260 [ 72.049381][ T1363] ? __cfi_ksys_write+0x10/0x10 [ 72.049399][ T1363] ? __kasan_check_read+0x15/0x20 [ 72.049416][ T1363] __x64_sys_write+0x7f/0x90 [ 72.049434][ T1363] x64_sys_call+0x271c/0x2ee0 [ 72.049452][ T1363] do_syscall_64+0x57/0xf0 [ 72.049473][ T1363] ? clear_bhb_loop+0x50/0xa0 [ 72.049491][ T1363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.049516][ T1363] RIP: 0033:0x7f7c2919ce59 [ 72.049532][ T1363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.049547][ T1363] RSP: 002b:00007f7c2a0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.049566][ T1363] RAX: ffffffffffffffda RBX: 00007f7c29415fa0 RCX: 00007f7c2919ce59 [ 72.049580][ T1363] RDX: 000000000000002e RSI: 0000200000000240 RDI: 0000000000000003 [ 72.049591][ T1363] RBP: 00007f7c2a0ea090 R08: 0000000000000000 R09: 0000000000000000 [ 72.049603][ T1363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.049614][ T1363] R13: 00007f7c29416038 R14: 00007f7c29415fa0 R15: 00007ffe6db5d3f8 [ 72.049629][ T1363] [ 72.603395][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 72.603415][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.603422][ C1] Call Trace: [ 72.603427][ C1] [ 72.603433][ C1] __dump_stack+0x21/0x30 [ 72.603453][ C1] dump_stack_lvl+0x140/0x1c0 [ 72.603468][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.603482][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 72.603499][ C1] dump_stack+0x19/0x20 [ 72.603513][ C1] ubsan_epilogue+0xe/0x40 [ 72.603524][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 72.603541][ C1] aiptek_irq+0x1f85/0x2a00 [ 72.603553][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 72.603565][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 72.603576][ C1] dummy_timer+0x816/0x4300 [ 72.603593][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 72.603605][ C1] ? timerqueue_del+0xd7/0x130 [ 72.603618][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 72.603634][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 72.603645][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 72.603662][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 72.603677][ C1] ? read_tsc+0xd/0x20 [ 72.603693][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 72.603707][ C1] hrtimer_run_softirq+0x159/0x560 [ 72.603717][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 72.603734][ C1] handle_softirqs+0x1aa/0x630 [ 72.603745][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 72.603760][ C1] __irq_exit_rcu+0x47/0xb0 [ 72.603771][ C1] irq_exit_rcu+0xd/0x30 [ 72.603781][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 72.603793][ C1] [ 72.603797][ C1] [ 72.603801][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 72.603813][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 72.603827][ C1] Code: cc cc cc cc cc cc cc b8 4f 34 94 fc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 72.603837][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 72.603848][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366b900 RCX: ffffffff85a89bcd [ 72.603856][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000001c6d74 [ 72.603863][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 72.603872][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 72.603879][ C1] R13: 1ffff110206cd720 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 72.603888][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 72.603901][ C1] default_idle+0x17/0x30 [ 72.603913][ C1] arch_cpu_idle+0xd/0x20 [ 72.603926][ C1] default_idle_call+0x3e/0x80 [ 72.603939][ C1] do_idle+0x2fc/0x570 [ 72.603950][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 72.603963][ C1] cpu_startup_entry+0x47/0x60 [ 72.603975][ C1] start_secondary+0x12e/0x140 [ 72.603990][ C1] common_startup_64+0x13b/0x157 [ 72.604006][ C1] [ 72.604010][ C1] ---[ end trace ]--- [ 72.899120][ C1] ================================================================== [ 72.907259][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20e9/0x2a00 [ 72.914796][ C1] Read of size 4 at addr ffffffff8671e0d0 by task udevd/110 [ 72.922065][ C1] [ 72.924375][ C1] CPU: 1 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 72.924392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.924400][ C1] Call Trace: [ 72.924405][ C1] [ 72.924410][ C1] __dump_stack+0x21/0x30 [ 72.924430][ C1] dump_stack_lvl+0x140/0x1c0 [ 72.924446][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.924461][ C1] ? __cfi__printk+0x10/0x10 [ 72.924475][ C1] ? kfree+0x158/0x440 [ 72.924486][ C1] print_address_description+0x71/0x210 [ 72.924501][ C1] print_report+0x4a/0x70 [ 72.924514][ C1] kasan_report+0x162/0x1a0 [ 72.924527][ C1] ? aiptek_irq+0x20e9/0x2a00 [ 72.924538][ C1] ? aiptek_irq+0x20e9/0x2a00 [ 72.924547][ C1] __asan_report_load4_noabort+0x18/0x20 [ 72.924558][ C1] aiptek_irq+0x20e9/0x2a00 [ 72.924567][ C1] ? kcov_remote_start+0x1d3/0x3c0 [ 72.924580][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 72.924592][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 72.924603][ C1] dummy_timer+0x816/0x4300 [ 72.924619][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 72.924631][ C1] ? timerqueue_del+0xd7/0x130 [ 72.924645][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 72.924660][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 72.924671][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 72.924687][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 72.924703][ C1] ? read_tsc+0xd/0x20 [ 72.924718][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 72.924731][ C1] hrtimer_run_softirq+0x159/0x560 [ 72.924741][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 72.924756][ C1] handle_softirqs+0x1aa/0x630 [ 72.924768][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 72.924782][ C1] __irq_exit_rcu+0x47/0xb0 [ 72.924793][ C1] irq_exit_rcu+0xd/0x30 [ 72.924803][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 72.924815][ C1] [ 72.924819][ C1] [ 72.924823][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 72.924834][ C1] RIP: 0010:update_stack_state+0x2a4/0x4b0 [ 72.924850][ C1] Code: fc ff df 41 80 3c 07 00 74 08 4c 89 f7 e8 d4 a5 9b 00 49 83 3e 00 74 2b 44 3b 6d ac 75 25 48 8b 45 a0 48 39 45 b0 73 1b 31 db <89> d8 48 81 c4 98 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 72.924860][ C1] RSP: 0018:ffffc90000e0f778 EFLAGS: 00000286 [ 72.924871][ C1] RAX: 1ffff920001c1f22 RBX: ffffc90000e0f901 RCX: ffffc90000e0fd01 [ 72.924880][ C1] RDX: ffffc90000e0fd90 RSI: 1ffff920001c1f1a RDI: ffffc90000e0f920 [ 72.924888][ C1] RBP: ffffc90000e0f838 R08: ffffc90000e0f990 R09: ffffc90000e0f988 [ 72.924896][ C1] R10: 0000000000000003 R11: ffffffff8175ee80 R12: dffffc0000000000 [ 72.924904][ C1] R13: ffffc90000e0f8f0 R14: ffffc90000e0f908 R15: 1ffff920001c1f21 [ 72.924913][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 72.924928][ C1] unwind_next_frame+0x3c1/0x750 [ 72.924942][ C1] ? __kernel_text_address+0x11/0x40 [ 72.924957][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 72.924969][ C1] arch_stack_walk+0x138/0x170 [ 72.924980][ C1] ? call_rcu+0x14/0x20 [ 72.924992][ C1] stack_trace_save+0xaa/0x100 [ 72.925004][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 72.925016][ C1] ? kernel_text_address+0xa9/0xe0 [ 72.925030][ C1] ? __kernel_text_address+0x11/0x40 [ 72.925044][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 72.925057][ C1] kasan_save_stack+0x3e/0x60 [ 72.925069][ C1] ? kasan_save_stack+0x3e/0x60 [ 72.925080][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 72.925090][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 72.925100][ C1] ? __call_rcu_common+0xd7/0x720 [ 72.925115][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 72.925129][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 72.925139][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 72.925163][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 72.925174][ C1] __call_rcu_common+0xd7/0x720 [ 72.925187][ C1] ? call_rcu_hurry+0x30/0x30 [ 72.925200][ C1] call_rcu+0x14/0x20 [ 72.925211][ C1] kmem_cache_free+0x4b1/0x4f0 [ 72.925222][ C1] ? percpu_counter_add_batch+0xfc/0x1a0 [ 72.925237][ C1] ? __fput+0x6ed/0xa00 [ 72.925252][ C1] __fput+0x6ed/0xa00 [ 72.925265][ C1] ? file_close_fd_locked+0x2c0/0x350 [ 72.925279][ C1] __fput_sync+0x4a/0x70 [ 72.925293][ C1] __se_sys_close+0x17a/0x240 [ 72.925302][ C1] __x64_sys_close+0x3c/0x60 [ 72.925311][ C1] x64_sys_call+0x2560/0x2ee0 [ 72.925322][ C1] do_syscall_64+0x57/0xf0 [ 72.925336][ C1] ? clear_bhb_loop+0x50/0xa0 [ 72.925347][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.925363][ C1] RIP: 0033:0x7ff800f15a67 [ 72.925373][ C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 72.925381][ C1] RSP: 002b:00007ffcd0326268 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 72.925393][ C1] RAX: ffffffffffffffda RBX: 0000559a18def790 RCX: 00007ff800f15a67 [ 72.925401][ C1] RDX: 00007ff800fefea0 RSI: 0000559a18e15d50 RDI: 000000000000000c [ 72.925408][ C1] RBP: 00007ff800fefff0 R08: 0000000000000000 R09: 0000000000000000 [ 72.925415][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 72.925422][ C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 72.925431][ C1] [ 72.925436][ C1] [ 73.441369][ C1] The buggy address belongs to the variable: [ 73.447337][ C1] .str.4+0x30/0x40 [ 73.451139][ C1] [ 73.453449][ C1] The buggy address belongs to the physical page: [ 73.459853][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x671e [ 73.468513][ C1] flags: 0x4000(reserved|zone=0) [ 73.473446][ C1] raw: 0000000000004000 ffffea000019c788 ffffea000019c788 0000000000000000 [ 73.482017][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 73.490582][ C1] page dumped because: kasan: bad access detected [ 73.496991][ C1] page_owner info is not present (never set?) [ 73.503033][ C1] [ 73.505347][ C1] Memory state around the buggy address: [ 73.510958][ C1] ffffffff8671df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.519089][ C1] ffffffff8671e000: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 05 f9 [ 73.527138][ C1] >ffffffff8671e080: f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9 00 00 07 f9 [ 73.535181][ C1] ^ [ 73.541839][ C1] ffffffff8671e100: f9 f9 f9 f9 00 00 00 03 f9 f9 f9 f9 00 07 f9 f9 [ 73.549885][ C1] ffffffff8671e180: 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 73.557930][ C1] ================================================================== [ 73.565972][ C1] Disabling lock debugging due to kernel taint [ 73.587344][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 73.587360][ T36] audit: type=1400 audit(1781354434.082:356): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 73.619107][ T36] audit: type=1400 audit(1781354434.082:357): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.640823][ T36] audit: type=1400 audit(1781354434.082:358): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.662078][ T36] audit: type=1400 audit(1781354434.082:359): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.662995][ T343] usb 2-1: USB disconnect, device number 30 [ 73.663028][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 73.682681][ T36] audit: type=1400 audit(1781354434.082:360): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.700392][ T36] audit: type=1400 audit(1781354434.082:361): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.739855][ T36] audit: type=1400 audit(1781354434.082:362): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1