last executing test programs: 1m53.761972588s ago: executing program 3 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "09ffffff"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 1m53.240723845s ago: executing program 3 (id=381): prctl$PR_GET_NO_NEW_PRIVS(0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xc, 0x1) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000140)='./bus\x00', 0x144) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r5 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4ea0, 0x0, @mcast2}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES16, @ANYRES8=r3], 0x1e4}, 0x1, 0x0, 0x0, 0x4048881}, 0x4000040) 1m53.206257756s ago: executing program 3 (id=382): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1bc, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4010}, 0x80a0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="050300061800091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fb8fdf2505000000200001800d000100750c0002800800030047060000000000000000000000000099620ec811acea2db87076d9a55223f94f33943fdfd14e2e470e25962071cd285a0ef8881af26dbd8feb26a3af618f4dcce90954a3b814a67c56c1ead44eb78623b45529c56f008794deca5d3965ad67496fa3a242d638a7aa990d00e9611b734f1193dc7f59b73f086233709ad0e63fdec582498826bdad72f7ca6044c1e8792e6d945d06aa332ac7f82c9203b6e9f0c0cfb23a8c90127512ba4de25d4c7056f5effb5bb9"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0x5, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x2, 0x2e, {0x8, 0x25, 0x1, 0x80, 0x33, 0xaa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x80, 0xf7, {0x8, 0x25, 0x1, 0x1, 0x3, 0x5, 0x5}}}}}}}}]}}, 0x0) 1m52.657217604s ago: executing program 3 (id=384): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{0x1, 0x0, 0x1}, 0x3e, 0x0, 0x0, 0x0, "0e1c8ce3e951c5511e3dc52fb611195014c7a0b2cd0fec090b3f4b188ea9b0e283dd48c4e12b7e74bb19aa86dbe285e51cfca99c0413b40664a5a67b3c9b387f"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) flock(0xffffffffffffffff, 0xe9abbc25f3ea9fef) (async) write$tun(r1, &(0x7f0000000380)={@void, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x7, 0x1, 0x24}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "8fb630", 0x18, 0x0, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@hopopts={0x67, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x4}}, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}}, 0x56) 1m52.630155424s ago: executing program 3 (id=385): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x801) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='caif0\x00', 0x10) sendto$inet6(r4, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) uname(&(0x7f0000000100)=""/252) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3d, 0x2, 0x4, r3, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x7ff, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r0, 0xae80, 0x0) setfsuid(0xee01) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "0e57b3d487e2db32", "011d1320a99c000009000000000200", "3c36a51c", "fffffffffffcffef"}, 0x28) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r9 = memfd_secret(0x0) close$binfmt(r9) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0x9f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) 1m52.564728847s ago: executing program 3 (id=386): unshare(0x22020400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r5, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x65, 0x8, '9P2000.u'}, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x221c1, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x647}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x47}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x44) 1m37.288818508s ago: executing program 32 (id=386): unshare(0x22020400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r5, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x65, 0x8, '9P2000.u'}, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x221c1, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x647}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x47}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x44) 1.915667868s ago: executing program 0 (id=1168): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) fchdir(r2) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x100}) 1.398843504s ago: executing program 0 (id=1182): r0 = socket(0x11, 0xa, 0x7) bind$inet(r0, &(0x7f00000130c0)={0x2, 0x4e22, @broadcast}, 0x10) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x5, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x1, 0x5, 0xdb}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket(0x11, 0xa, 0x7) (async) bind$inet(r0, &(0x7f00000130c0)={0x2, 0x4e22, @broadcast}, 0x10) (async) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x5, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x1, 0x5, 0xdb}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) 1.057447366s ago: executing program 1 (id=1188): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x33, [0xfffffff8, 0x8, 0x5, 0x9, 0x9, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0x7, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x6, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x100, 0x0, 0xfffffff8, 0x1, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x3000000, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0xb, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff05000000050001000100000008000340"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011000100"], 0x30}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x178, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xcb02, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfffffff6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x990}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x12}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x60b3e45f}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40094}, 0x810) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x31, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x385584689564a4db}, 0x44054) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f000000c000/0x3000)=nil, 0x3000}, 0x2}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000001c0)={0x11, 0x2, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x6611c9c152baacbc, 0x2000, &(0x7f0000009000/0x2000)=nil}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r9) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 1.016425747s ago: executing program 1 (id=1189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250200000008000800ac1e01010500040002000000050002000a00000014000900fe8000000000000000000000400000aa16060001004efa000014000900000000000000000000000000000000010500020002000000"], 0x64}, 0x1, 0x0, 0x0, 0x22000001}, 0x44000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f00000002c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r11, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128888807, 0x0, {[0xfffffffffffffff9, 0xffffffffff7fff00, 0x8, 0x200, 0x0, 0x100000000, 0x9, 0xc5]}}) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="260f21080f16c13e0ff3b7a3920f21076766c7442400060000006766c7442402e70000006766c744240600000000670f01142466b80500000066b92c5100000f01d966b9be03000066b80700000066ba00000000660fec848e380f7001e667660f383d00b820018ee0", 0x69}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003480)={0x8, 0x0, &(0x7f0000003240)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 968.126809ms ago: executing program 2 (id=1191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="0f20d835200000000f22d848b80a000000000000000f23c00f21f835020005000f23f8c423795cf85e66baf80cb8d51dd485ef66bafc0cb02deef3420f6f9a04000000b9800000c00f3235000800000f30b979000000b8c5000000ba000000000f300f01f1f2362e670f238fd9f5", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xa8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 937.066109ms ago: executing program 1 (id=1192): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) utimes(&(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x7}}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 936.540359ms ago: executing program 2 (id=1193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x528240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) syz_io_uring_setup(0x10e9, &(0x7f0000000640)={0x0, 0x2456, 0x10000, 0x0, 0x8026d}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x25f6, 0x6}}) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0xc0403d11, 0x0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = fcntl$dupfd(r1, 0x406, r0) mount_setattr(r9, &(0x7f0000000180)='.\x00', 0x6d9addcbb145d441, &(0x7f0000000000)={0x0, 0x7b, 0x20000, {r8}}, 0x20) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000000c0)="4eb3fb46317ddce6756f17c8e31fb3acbb1eaee8fef67930ab4a137bcdfaaa6a726ba561c1b23673da78ff4baaf26e7ac0211632ae445ae8429c190c84734dd3", 0x40) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r10, 0x0, 0x25, &(0x7f0000000440)={@multicast2, @loopback, @multicast1}, 0xc) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, 0x0) 872.801311ms ago: executing program 1 (id=1194): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) ptrace(0x4206, r0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x7, 0x0, &(0x7f0000000500)) (async) r6 = openat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x151) getdents64(r6, &(0x7f0000000280)=""/70, 0x46) fcntl$setpipe(r4, 0x407, 0x800) (async) getdents64(r6, &(0x7f0000000300)=""/254, 0xfe) (async) waitid(0x0, r0, 0x0, 0x8000000a, 0x0) (async) wait4(r0, 0x0, 0x2, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003a00)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}}, 0xc840) 872.514341ms ago: executing program 2 (id=1195): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xf22d}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c895}, 0x8044) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 872.285991ms ago: executing program 0 (id=1196): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=""/183, &(0x7f0000000300)=""/220, &(0x7f0000000400)=""/30, 0x40000}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(r4) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) 827.848943ms ago: executing program 1 (id=1197): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x1, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) 800.008214ms ago: executing program 4 (id=1198): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x0, 0xfffffffb, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) (async) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000108205a3004000010203010902600003011448070904400000010100000a24010c000a0002010209040100000102000009040101010102000009050109000202dcb00725010405018009040200000102000070b799bcd0576c125219c709040201010102"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) r2 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x0, 0x0, @d}, 0x18, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, r3) 720.679857ms ago: executing program 0 (id=1199): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4, 0x6) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000200)={{[0x877e, 0x1, 0x7fff, 0x4]}, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000140)=[{{@align=0xffffffffffffffff, {0x6, 0x1000, 0x9, 0x7}}, 0x5, 0x0, 'nl80211\x00'}, {{@align=0x7fff, {0x5, 0x6, 0x2, 0xa}}, 0x80000000, 0x0, '\x00'}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r2, 0x201, 0x70bd2e, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x48000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000496000/0x4000)=nil, 0x4000}, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0xf8b, 0x7, 0x0, 0x5, 0x8, 0x9e, 0xffffffffffffffff], 0x0, 0x94044}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x3, 0xaec4, 0x6, 0x4004, 0x200002, 0x4, 0x97, 0xfffffffffffffffd, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x9, 0x41], 0x0, 0x41981}) ioctl$KVM_RUN(r6, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xb4, 0xf3, 0x83, 0x20, 0x10f5, 0xf35a, 0x518b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x50, 0x7, "", [{{0x9, 0x4, 0x35, 0x21, 0x2, 0xff, 0x47, 0xd0, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7f, 0x6, 0xaf}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xdc, 0x2, 0x7}}]}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000080)='{!}#%\x00') 720.363117ms ago: executing program 4 (id=1200): r0 = socket(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001200)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)="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", 0x5dd}], 0x1, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x20044000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0xcaf5, 0x7, 0x6, 0xc, 0x7, 0x10000, 0xcc51, [0x8, 0xff]}}) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r3, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) 715.998647ms ago: executing program 2 (id=1201): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f00000002c0)=""/225, 0xe1) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000000)={0x200c, 0x3, 0x4}) pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x80000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0xb1, 0x24, 0xf4e}, {0x4, 0x1, 0x7, 0x5}, {0x62, 0x6, 0x2b, 0x7}, {0x3, 0x1, 0x7, 0x55c624e9}]}) read(r5, &(0x7f0000000740)=""/377, 0x179) 712.006377ms ago: executing program 4 (id=1202): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/242, 0x40000, 0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 636.896959ms ago: executing program 4 (id=1203): syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x21, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 636.317879ms ago: executing program 2 (id=1204): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000540)={0x1, 0x11, @ioapic={0x1000, 0x0, 0x1, 0xc, 0x0, [{0x99, 0x2, 0x8, '\x00', 0x6}, {0xe, 0x3, 0x3, '\x00', 0x43}, {0x5, 0x0, 0x4}, {0xaa, 0x9, 0x3, '\x00', 0x27}, {0x8, 0xb8, 0x8, '\x00', 0x11}, {0x6, 0x8d, 0x9, '\x00', 0x1}, {0x49, 0x2, 0x9, '\x00', 0x3}, {0x6}, {0xb0, 0x4, 0xb, '\x00', 0x9}, {0x9e, 0x7c}, {0x6, 0x8, 0x76, '\x00', 0x5}, {0x8}, {0x46, 0x5, 0xfe, '\x00', 0x6}, {0x2, 0xfd, 0x6, '\x00', 0x2b}, {0x5, 0x80, 0xc, '\x00', 0x2}, {0x3, 0x7, 0x12, '\x00', 0x74}, {0x7, 0xae, 0x6, '\x00', 0xce}, {0x8c, 0x81, 0x2, '\x00', 0x83}, {0xfc, 0xfd, 0x2, '\x00', 0x8a}, {0x2, 0x9, 0x4, '\x00', 0x7}, {0x46, 0x5f, 0x7, '\x00', 0x8}, {0xe9, 0xe, 0x1, '\x00', 0x7}, {0x5, 0x3, 0xf, '\x00', 0xb5}, {0x4, 0x4, 0x0, '\x00', 0x25}]}}) 519.006583ms ago: executing program 1 (id=1205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000981000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="ea7f0c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="402148000000480262d19224d0ea6c828975e091ac1576981c1bb827a0d57fabe5280e8a01a63b74567ca820160324a2ce0cf88b2ff45ff458a73864940978e3e3c35293cdc4044d0415d3ff8fa78de8f019df3d632fa3be1a"], &(0x7f0000000200)=ANY=[@ANYBLOB="0003770000007703aba119b2bfed96fa01f5809c4f5851770627931cb7e47b1fe0ea984e5cb120e5eb1ececcb86f27fbf984de5017007938ecc14ebd06a5af02b99638e6e5d94e00d0c6caabb5e24e2e4709bf8f0f0700000000000000d650e352921c31efd610ff55e963e4dc08c9a5116350f2712928b75a8a67f048"], &(0x7f0000000600)=ANY=[@ANYBLOB="00220f000000c2c91e1a0a78080000000000000000"], &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x625}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="200a9d0000000d038c87ba239d810bf5753d67ad8cfc5cc2e81c69f320dc268e7781cefb7339c927ff958b2e2e06b2671c58af2624922e7bd23e3f4fcd9b057b0c944ab5936c9273c490eb134e9e265a09a104faa80d64994a3ce0971c350395857223b08ab5260905b349e5d3da023a5b6cf4d489e10a493987432c9c67a222ef0b4572e525db6d12c0ddd04485b74ef623a5206b68477e68dd86446663d37babab171982421ce7ae53776ace53a93eb666f5b193b565b47855f82a4e24f5fa722bca0389a2a5577f6c8868312d502030118bc52afd8a15a6b520641be748cf4039d0fbb311ade9f25e16bee37da812044a4513f20483951573cf09991000000000000000"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)=ANY=[@ANYBLOB="20019d000000f32035c708414dd54ca5ddc586c5389fdf2a052db1d48645ad6e0cdfe680ce78f5196ce8529d09e54f3c90ceeecd051ecff0d3d263d7ca155a83c0790b3771a2492c925899879857b64b2b2436469ea4b087e0541ad55d408902efb157f05f27d5494aa0933fac0c0f6a5a14df643cd5b12fbc8e551fb29b7f20258ebee17993f0dd7f84585dcde0548c53209717e5d0cb68c82a164b70f65cc052d79c"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0xcb}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) ioctl$UBLK_U_CMD_GET_FEATURES(r2, 0x80207513, &(0x7f0000000740)={0x0, 0xffff, 0x8, &(0x7f0000000380)}) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x178, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0xfffffffa, 0x6, 0xffffffff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "75c9af4b0bfdb0ed97bcfaeb5bebdf2e1be643ef351153393df231c5595c17184b3bcf"}}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "88f0d192421c5e9a8723f7112a743b89f9a3b401e41b712acf2b892ed1148a681c52829b3dff8a8db072532d54a0696a3a1f84752d07045abaf1bae5cfb0b83a62bbe3241b174aa25e85f51e97f0c40b22c918b5544f6bb9e07b8fb0900dae8b4091e99abc4c17c15fd3b62c22704baffc2950239f5e3718560293ad1a9985fd9e24d9d44cb165e196ba1c39984bfa79038a4ab7b7248f596041412b71a6d14388536aeab53cf28538b428"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x4048014) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r9 = socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f00000007c0)={r3, 0xffff, 0x0, 0x0, r4}) read$watch_queue(r2, &(0x7f0000000640)=""/116, 0x74) accept$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 442.645995ms ago: executing program 33 (id=1205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000981000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="ea7f0c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="402148000000480262d19224d0ea6c828975e091ac1576981c1bb827a0d57fabe5280e8a01a63b74567ca820160324a2ce0cf88b2ff45ff458a73864940978e3e3c35293cdc4044d0415d3ff8fa78de8f019df3d632fa3be1a"], &(0x7f0000000200)=ANY=[@ANYBLOB="0003770000007703aba119b2bfed96fa01f5809c4f5851770627931cb7e47b1fe0ea984e5cb120e5eb1ececcb86f27fbf984de5017007938ecc14ebd06a5af02b99638e6e5d94e00d0c6caabb5e24e2e4709bf8f0f0700000000000000d650e352921c31efd610ff55e963e4dc08c9a5116350f2712928b75a8a67f048"], &(0x7f0000000600)=ANY=[@ANYBLOB="00220f000000c2c91e1a0a78080000000000000000"], &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x625}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)=ANY=[@ANYBLOB="20019d000000f32035c708414dd54ca5ddc586c5389fdf2a052db1d48645ad6e0cdfe680ce78f5196ce8529d09e54f3c90ceeecd051ecff0d3d263d7ca155a83c0790b3771a2492c925899879857b64b2b2436469ea4b087e0541ad55d408902efb157f05f27d5494aa0933fac0c0f6a5a14df643cd5b12fbc8e551fb29b7f20258ebee17993f0dd7f84585dcde0548c53209717e5d0cb68c82a164b70f65cc052d79c"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0xcb}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) ioctl$UBLK_U_CMD_GET_FEATURES(r2, 0x80207513, &(0x7f0000000740)={0x0, 0xffff, 0x8, &(0x7f0000000380)}) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x178, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0xfffffffa, 0x6, 0xffffffff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "75c9af4b0bfdb0ed97bcfaeb5bebdf2e1be643ef351153393df231c5595c17184b3bcf"}}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "88f0d192421c5e9a8723f7112a743b89f9a3b401e41b712acf2b892ed1148a681c52829b3dff8a8db072532d54a0696a3a1f84752d07045abaf1bae5cfb0b83a62bbe3241b174aa25e85f51e97f0c40b22c918b5544f6bb9e07b8fb0900dae8b4091e99abc4c17c15fd3b62c22704baffc2950239f5e3718560293ad1a9985fd9e24d9d44cb165e196ba1c39984bfa79038a4ab7b7248f596041412b71a6d14388536aeab53cf28538b428"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x4048014) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r9 = socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f00000007c0)={r3, 0xffff, 0x0, 0x0, r4}) read$watch_queue(r2, &(0x7f0000000640)=""/116, 0x74) accept$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 62.539658ms ago: executing program 0 (id=1207): socketpair(0x15, 0x0, 0x4, &(0x7f0000000000)) 59.433898ms ago: executing program 2 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1, 0x5, 0x0) r1 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0x0, 0x19d, 0x0, r1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x1, 0x3ab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x2, 0x2, 0x21b}}], 0x4, &(0x7f0000001540)={0x2e, 0x47, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x4cb, 0x0, 0x0}}, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000100), &(0x7f00000002c0)=0x4) ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f0000000380)={0x0, 0xffff, 0x70, &(0x7f0000000300)={0x70}}) 58.882578ms ago: executing program 34 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1, 0x5, 0x0) r1 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0x0, 0x19d, 0x0, r1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x1, 0x3ab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x2, 0x2, 0x21b}}], 0x4, &(0x7f0000001540)={0x2e, 0x47, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x4cb, 0x0, 0x0}}, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000100), &(0x7f00000002c0)=0x4) ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f0000000380)={0x0, 0xffff, 0x70, &(0x7f0000000300)={0x70}}) 4.63928ms ago: executing program 4 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9901) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000080)={0x0, 0x4, [0xa0b, 0xffffffffffff0001, 0x5, 0x9, 0xd6c5, 0x12]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.36087ms ago: executing program 4 (id=1210): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x802, 0x345040) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000580)="0f0054a4e90f3566b842000f00d8b805000000b9970000000f01c1241e0f0f0f01c90f0130670f01c2f2360f217a0f01ca", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x81) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r5, 0x0, 0x0, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x20000, @dev={0xfe, 0x80, '\x00', 0x80}, 0x3}, 0x1c) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1211): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x43, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}, 0xf1}], 0x1, 0x2, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="84e483f1353f", 0x6}], 0x1}}], 0x1, 0x4400c800) (async) sendto$inet6(r1, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) (async) write$tun(r2, &(0x7f0000000380)={@val={0xa, 0x9000}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x9, '\x00', @loopback, [{0x2, 0x7, "c662ed4bf68c001d4387efb499578095a3a10d8d97cae20b2da868becaa65a03ca80d89282400163204e1cb7bf82233dec2ad3102e6c"}]}}}}}}}, 0x8a) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x1e, 0xda, 0x5, 0x7, {0x4e21, 0x4e22, [0x1000, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xfffffffb, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): or -71 [ 117.179551][ T371] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 117.200784][ T371] usb 1-1: device descriptor read/8, error -71 [ 117.249669][ T31] usb usb2-port1: attempt power cycle [ 117.330830][ T371] usb 1-1: device descriptor read/8, error -71 [ 117.439653][ T371] usb usb1-port1: unable to enumerate USB device [ 117.586375][ T2322] kvm: user requested TSC rate below hardware speed [ 117.593069][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 117.620979][ T31] usb 2-1: device descriptor read/8, error -71 [ 117.750932][ T31] usb 2-1: device descriptor read/8, error -71 [ 117.989561][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 117.999748][ T311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.010971][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.096437][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.109987][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.125173][ T2332] SELinux: failed to load policy [ 118.140820][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.149660][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 118.156028][ T311] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 118.164288][ T311] usb 5-1: config 1 has no interface number 0 [ 118.170486][ T311] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 118.180446][ T311] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 118.190514][ T311] usb 5-1: config 1 interface 105 has no altsetting 0 [ 118.198941][ T311] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 118.208280][ T311] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 118.216513][ T311] usb 5-1: Product: syz [ 118.220836][ T311] usb 5-1: Manufacturer: syz [ 118.225446][ T311] usb 5-1: SerialNumber: syz [ 118.231505][ T2327] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 118.238722][ T2327] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 118.249661][ T31] usb usb2-port1: unable to enumerate USB device [ 118.653234][ T2327] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 118.664476][ T2327] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 118.692659][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.701710][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.873027][ T2327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.881672][ T311] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 118.881976][ T2327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.893208][ T311] aqc111 5-1:1.105: probe with driver aqc111 failed with error -32 [ 118.908343][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 118.979569][ T980] usb 5-1: USB disconnect, device number 7 [ 119.060706][ T31] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 119.069092][ T31] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 119.078146][ T31] usb 1-1: config 220 has an invalid interface number: 7 but max is 2 [ 119.086429][ T31] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.096807][ T31] usb 1-1: config 220 has 5 interfaces, different from the descriptor's value: 3 [ 119.106103][ T31] usb 1-1: config 220 has no interface number 3 [ 119.112496][ T31] usb 1-1: config 220 has no interface number 4 [ 119.118825][ T31] usb 1-1: config 220 interface 7 altsetting 1 endpoint 0x82 has an invalid bInterval 223, changing to 7 [ 119.130140][ T31] usb 1-1: config 220 interface 0 has no altsetting 0 [ 119.136933][ T31] usb 1-1: config 220 interface 76 has no altsetting 0 [ 119.144061][ T31] usb 1-1: config 220 interface 7 has no altsetting 0 [ 119.152679][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.161828][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.169895][ T31] usb 1-1: Product: syz [ 119.174069][ T31] usb 1-1: Manufacturer: syz [ 119.178690][ T31] usb 1-1: SerialNumber: syz [ 119.254121][ T2349] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 119.299527][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.319534][ T311] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 119.386540][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.395338][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.403737][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.412349][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.420532][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.429387][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.437677][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.448757][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.461842][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.467161][ T31] usb 1-1: selecting invalid altsetting 0 [ 119.473642][ T980] usb 5-1: string descriptor 0 read error: -22 [ 119.475740][ T31] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 119.488423][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 119.489766][ T980] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 119.494785][ T31] usb 1-1: No valid video chain found. [ 119.509487][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.520097][ T980] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.528295][ T31] usb 1-1: USB disconnect, device number 53 [ 119.536234][ T2360] virtio-fs: tag not found [ 119.547307][ T36] audit: type=1400 audit(1780243415.544:395): avc: denied { write } for pid=2359 comm="syz.2.581" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.629523][ T311] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 119.652124][ T2366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.660877][ T2366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.670570][ T2366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.679250][ T2366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.750703][ T980] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 119.757884][ T1205] udevd[1205]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.765718][ T980] usb 5-1: USB disconnect, device number 8 [ 119.789496][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 119.795094][ T311] usb usb2-port1: attempt power cycle [ 120.139675][ T311] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 120.159957][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 120.201840][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.211164][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.247694][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.256425][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.297340][ T311] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 120.319905][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 120.325555][ T311] usb usb2-port1: unable to enumerate USB device [ 120.519532][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.669547][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 120.676138][ T980] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.684463][ T980] usb 5-1: config 0 has no interface number 0 [ 120.690620][ T980] usb 5-1: config 0 interface 184 has no altsetting 0 [ 120.698900][ T980] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.708044][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.716209][ T980] usb 5-1: Product: syz [ 120.720421][ T980] usb 5-1: Manufacturer: syz [ 120.725040][ T980] usb 5-1: SerialNumber: syz [ 120.730480][ T980] usb 5-1: config 0 descriptor?? [ 120.736399][ T980] smsc75xx v1.0.0 [ 121.209537][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 121.340247][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 121.351226][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.379514][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 121.385647][ T9] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 121.393804][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 121.402010][ T9] usb 1-1: config 0 has no interface number 0 [ 121.408227][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.418239][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.435151][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 121.450441][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.458756][ T9] usb 1-1: Product: syz [ 121.463027][ T9] usb 1-1: Manufacturer: syz [ 121.467697][ T9] usb 1-1: SerialNumber: syz [ 121.479945][ T9] usb 1-1: config 0 descriptor?? [ 121.488241][ T2392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.495558][ T2392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.512884][ T2401] overlayfs: workdir and upperdir must reside under the same mount [ 121.524680][ T2401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.533455][ T2401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.704338][ T2392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=2392 comm=syz.0.592 [ 121.717256][ C0] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 121.726440][ T2402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.733682][ T2402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.942077][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.952354][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 121.962312][ T9] asix 1-1:0.251: probe with driver asix failed with error -5 [ 121.973459][ T9] usb 1-1: USB disconnect, device number 54 [ 122.063473][ T36] audit: type=1400 audit(1780243418.064:396): avc: denied { connect } for pid=2406 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.077412][ T2407] syzkaller1: entered promiscuous mode [ 122.088630][ T2407] syzkaller1: entered allmulticast mode [ 122.097047][ T2407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.105800][ T2407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.379578][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 122.509575][ T31] usb 2-1: device descriptor read/64, error -71 [ 122.701304][ T2431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.710757][ T2431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.759489][ T31] usb 2-1: device descriptor read/64, error -71 [ 122.999513][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 123.029514][ T623] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 123.129517][ T31] usb 2-1: device descriptor read/64, error -71 [ 123.181100][ T623] usb 1-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 123.191458][ T623] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 123.202713][ T623] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26001, setting to 1024 [ 123.213940][ T623] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 123.229869][ T623] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.238964][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.247085][ T623] usb 1-1: SerialNumber: syz [ 123.254298][ T2435] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.269531][ T2439] syzkaller1: entered promiscuous mode [ 123.271868][ T623] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 123.275396][ T2439] syzkaller1: entered allmulticast mode [ 123.291123][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 123.364974][ T2441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.373969][ T2441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.374748][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.390189][ T31] usb 2-1: device descriptor read/64, error -71 [ 123.395245][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.406004][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 123.419569][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 123.430151][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 123.439846][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 123.449708][ T980] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 123.462054][ T980] usb 5-1: USB disconnect, device number 9 [ 123.478659][ T371] usb 1-1: USB disconnect, device number 55 [ 123.499568][ T31] usb usb2-port1: attempt power cycle [ 123.510371][ T36] audit: type=1400 audit(1780243419.514:397): avc: denied { append } for pid=2445 comm="syz.0.610" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.544573][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.554819][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.839572][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 123.860585][ T31] usb 2-1: device descriptor read/8, error -71 [ 123.869534][ T371] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 123.990672][ T31] usb 2-1: device descriptor read/8, error -71 [ 124.009574][ T371] usb 1-1: device descriptor read/64, error -71 [ 124.127292][ T2455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.136102][ T2455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.169596][ T311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.239567][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 124.259543][ T371] usb 1-1: device descriptor read/64, error -71 [ 124.261299][ T31] usb 2-1: device descriptor read/8, error -71 [ 124.321403][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.329907][ T311] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 124.340857][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 124.353446][ T311] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 124.362548][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.370594][ T311] usb 5-1: Product: syz [ 124.374815][ T311] usb 5-1: Manufacturer: syz [ 124.379411][ T311] usb 5-1: SerialNumber: syz [ 124.400458][ T31] usb 2-1: device descriptor read/8, error -71 [ 124.509563][ T371] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 124.509938][ T31] usb usb2-port1: unable to enumerate USB device [ 124.589818][ T311] usb 5-1: Can't get UAC3 power state for id 10 [ 124.597026][ T311] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 124.606316][ T311] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 124.617234][ T311] usb 5-1: USB disconnect, device number 10 [ 124.630879][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.646739][ T371] usb 1-1: device descriptor read/64, error -71 [ 124.743906][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.753788][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.889516][ T371] usb 1-1: device descriptor read/64, error -71 [ 125.007666][ T36] audit: type=1400 audit(1780243421.004:398): avc: denied { bind } for pid=2461 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.027723][ T371] usb usb1-port1: attempt power cycle [ 125.085556][ T36] audit: type=1400 audit(1780243421.084:399): avc: denied { nlmsg_read } for pid=2463 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 125.113415][ T36] audit: type=1400 audit(1780243421.104:400): avc: denied { cmd } for pid=2463 comm="iou-wrk-2464" path="socket:[20079]" dev="sockfs" ino=20079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.314665][ T2481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 125.379620][ T36] audit: type=1326 audit(1780243421.374:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.405449][ T371] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 125.407563][ T36] audit: type=1326 audit(1780243421.384:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.438847][ T36] audit: type=1326 audit(1780243421.384:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.442293][ T371] usb 1-1: device descriptor read/8, error -71 [ 125.464100][ T311] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.477918][ T36] audit: type=1326 audit(1780243421.384:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.522764][ T36] audit: type=1326 audit(1780243421.384:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.548167][ T36] audit: type=1326 audit(1780243421.384:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.579705][ T36] audit: type=1326 audit(1780243421.384:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2486 comm="syz.1.624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ac39ce59 code=0x7ffc0000 [ 125.670733][ T371] usb 1-1: device descriptor read/8, error -71 [ 125.689558][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 125.696198][ T311] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 125.704649][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.714973][ T311] usb 5-1: config 0 has no interface number 0 [ 125.721360][ T311] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.734648][ T311] usb 5-1: config 0 interface 196 has no altsetting 0 [ 125.743122][ T311] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 125.754059][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.763523][ T311] usb 5-1: Product: syz [ 125.768273][ T311] usb 5-1: Manufacturer: syz [ 125.773305][ T311] usb 5-1: SerialNumber: syz [ 125.781978][ T311] usb 5-1: config 0 descriptor?? [ 125.788392][ T311] ipheth 5-1:0.196: Unable to find endpoints [ 125.817190][ T2503] rust_binder: Write failure EFAULT in pid:745 [ 125.820164][ T2503] €Â: renamed from tunl0 (while UP) [ 125.863864][ T2507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 125.872787][ T2507] bridge_slave_1: left allmulticast mode [ 125.878440][ T2507] bridge_slave_1: left promiscuous mode [ 125.884196][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.891859][ T2507] bridge_slave_0: left allmulticast mode [ 125.897522][ T2507] bridge_slave_0: left promiscuous mode [ 125.903464][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.909718][ T371] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 125.931128][ T371] usb 1-1: device descriptor read/8, error -71 [ 125.988074][ T980] usb 5-1: USB disconnect, device number 11 [ 126.060674][ T371] usb 1-1: device descriptor read/8, error -71 [ 126.069998][ T2509] fuse: root generation should be zero [ 126.169656][ T371] usb usb1-port1: unable to enumerate USB device [ 126.178309][ T2519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.186884][ T2519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.195808][ T2519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.204516][ T2519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.469515][ T371] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 126.586911][ T2534] input: syz0 as /devices/virtual/input/input24 [ 126.619604][ T371] usb 2-1: Using ep0 maxpacket: 32 [ 126.626779][ T371] usb 2-1: config 3 has an invalid interface number: 160 but max is 0 [ 126.635064][ T371] usb 2-1: config 3 has no interface number 0 [ 126.641260][ T371] usb 2-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 126.651580][ T371] usb 2-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 32, changing to 9 [ 126.662959][ T371] usb 2-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.673150][ T371] usb 2-1: config 3 interface 160 has no altsetting 0 [ 126.689513][ T371] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 126.700753][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.711721][ T371] usb 2-1: Product: syz [ 126.715926][ T371] usb 2-1: Manufacturer: syz [ 126.720842][ T371] usb 2-1: SerialNumber: syz [ 126.726605][ T2524] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 126.759574][ T311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.889508][ T311] usb 5-1: device descriptor read/64, error -71 [ 126.940556][ T371] usb 2-1: USB disconnect, device number 55 [ 126.969573][ T623] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 127.129589][ T623] usb 1-1: Using ep0 maxpacket: 32 [ 127.134833][ T311] usb 5-1: device descriptor read/64, error -71 [ 127.142685][ T623] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.151205][ T623] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 127.159636][ T623] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 127.170050][ T623] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 127.179109][ T623] usb 1-1: config 128 has no interface number 0 [ 127.185499][ T623] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 127.197106][ T623] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.207292][ T623] usb 1-1: config 128 interface 127 has no altsetting 0 [ 127.215930][ T623] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 127.225095][ T623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.233132][ T623] usb 1-1: Product: syz [ 127.237329][ T623] usb 1-1: Manufacturer: syz [ 127.241990][ T623] usb 1-1: SerialNumber: syz [ 127.348787][ T2554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.357514][ T2554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.374633][ T2554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.379676][ T311] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.385237][ T2554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.457550][ T623] usb 1-1: USB disconnect, device number 60 [ 127.472218][ T1205] udevd[1205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.519577][ T311] usb 5-1: device descriptor read/64, error -71 [ 127.689612][ T980] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 127.759564][ T311] usb 5-1: device descriptor read/64, error -71 [ 127.839542][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 127.846205][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.854742][ T980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.865117][ T980] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.879577][ T311] usb usb5-port1: attempt power cycle [ 127.879812][ T980] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 127.894150][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.902247][ T980] usb 2-1: Product: syz [ 127.906460][ T980] usb 2-1: Manufacturer: syz [ 127.911311][ T980] usb 2-1: SerialNumber: syz [ 127.982916][ T2562] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 128.048999][ T2564] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 128.080554][ T2566] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 128.124441][ T2557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.136584][ T2557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.174155][ T2557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.182927][ T2557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.219597][ T311] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.235397][ T980] usb 2-1: MIDIStreaming interface descriptor not found [ 128.244873][ T980] usb 2-1: USB disconnect, device number 56 [ 128.252440][ T311] usb 5-1: device descriptor read/8, error -71 [ 128.260593][ T1196] udevd[1196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.389548][ T371] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 128.390998][ T311] usb 5-1: device descriptor read/8, error -71 [ 128.539542][ T371] usb 1-1: Using ep0 maxpacket: 32 [ 128.545989][ T371] usb 1-1: config 5 has an invalid interface number: 90 but max is 0 [ 128.554167][ T371] usb 1-1: config 5 has no interface number 0 [ 128.560363][ T371] usb 1-1: config 5 interface 90 has no altsetting 0 [ 128.568461][ T371] usb 1-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 128.577708][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.585784][ T371] usb 1-1: Product: syz [ 128.590056][ T371] usb 1-1: Manufacturer: syz [ 128.594679][ T371] usb 1-1: SerialNumber: syz [ 128.649560][ T311] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.670744][ T311] usb 5-1: device descriptor read/8, error -71 [ 128.800730][ T311] usb 5-1: device descriptor read/8, error -71 [ 128.823353][ T371] usb-storage 1-1:5.90: USB Mass Storage device detected [ 128.832184][ T371] usb-storage 1-1:5.90: Quirks match for vid 050d pid 0115: 4 [ 128.871189][ T371] usb 1-1: USB disconnect, device number 61 [ 128.909659][ T311] usb usb5-port1: unable to enumerate USB device [ 128.989724][ T980] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 129.119615][ T980] usb 2-1: device descriptor read/64, error -71 [ 129.362652][ T980] usb 2-1: device descriptor read/64, error -71 [ 129.373128][ T2585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.654'. [ 129.417144][ T2587] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.482489][ T2589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'. [ 129.491518][ T2590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.493782][ T2590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.619593][ T980] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 129.749559][ T980] usb 2-1: device descriptor read/64, error -71 [ 129.939603][ T311] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 129.989538][ T980] usb 2-1: device descriptor read/64, error -71 [ 130.022664][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.032363][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.042479][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.051059][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.059505][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.068059][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.079541][ T311] usb 5-1: device descriptor read/64, error -71 [ 130.099663][ T980] usb usb2-port1: attempt power cycle [ 130.199553][ T623] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 130.319597][ T311] usb 5-1: device descriptor read/64, error -71 [ 130.349534][ T623] usb 1-1: Using ep0 maxpacket: 16 [ 130.355824][ T623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.366757][ T623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.376767][ T623] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.390486][ T623] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 130.399575][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.408714][ T623] usb 1-1: config 0 descriptor?? [ 130.459517][ T980] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 130.480634][ T980] usb 2-1: device descriptor read/8, error -71 [ 130.559504][ T311] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 130.610688][ T980] usb 2-1: device descriptor read/8, error -71 [ 130.661629][ T2617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.670786][ T2617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.680570][ T2617] fuse: Bad value for 'fd' [ 130.686339][ T2617] 9pnet_fd: Insufficient options for proto=fd [ 130.694229][ T36] kauditd_printk_skb: 454 callbacks suppressed [ 130.694246][ T36] audit: type=1400 audit(1780243426.694:862): avc: denied { create } for pid=2616 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.699653][ T311] usb 5-1: device descriptor read/64, error -71 [ 130.859877][ T980] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 130.880688][ T980] usb 2-1: device descriptor read/8, error -71 [ 130.959543][ T311] usb 5-1: device descriptor read/64, error -71 [ 131.018566][ T623] usbhid 1-1:0.0: can't add hid device: -71 [ 131.024392][ T980] usb 2-1: device descriptor read/8, error -71 [ 131.024940][ T623] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.039639][ T623] usb 1-1: USB disconnect, device number 62 [ 131.069616][ T311] usb usb5-port1: attempt power cycle [ 131.149711][ T980] usb usb2-port1: unable to enumerate USB device [ 131.217117][ T2619] netlink: 188 bytes leftover after parsing attributes in process `syz.2.666'. [ 131.419607][ T311] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.440674][ T311] usb 5-1: device descriptor read/8, error -71 [ 131.533408][ T36] audit: type=1400 audit(1780243427.534:863): avc: denied { ioctl } for pid=2631 comm="syz.0.669" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.570711][ T311] usb 5-1: device descriptor read/8, error -71 [ 131.799558][ T980] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 131.809544][ T311] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 131.830681][ T311] usb 5-1: device descriptor read/8, error -71 [ 131.959564][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 131.961604][ T311] usb 5-1: device descriptor read/8, error -71 [ 131.966753][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.980967][ T980] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 131.990100][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.998104][ T980] usb 1-1: Product: syz [ 132.002306][ T980] usb 1-1: Manufacturer: syz [ 132.006919][ T980] usb 1-1: SerialNumber: syz [ 132.080001][ T311] usb usb5-port1: unable to enumerate USB device [ 132.118982][ T2651] bpf: Bad value for 'mode' [ 132.141176][ T2654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.157311][ T31] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 132.165154][ T2654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.215255][ T2636] fuse: Bad value for 'fd' [ 132.319540][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 132.325977][ T31] usb 2-1: unable to get BOS descriptor set [ 132.332063][ T31] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 132.341100][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.348703][ T31] usb 2-1: can't read configurations, error -61 [ 132.422235][ T2636] 9pnet_fd: Insufficient options for proto=fd [ 132.463651][ T980] usb 1-1: unit 0 not found! [ 132.469881][ T980] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 132.479664][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 132.481439][ T980] usb 1-1: unit 0 not found! [ 132.493241][ T980] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 132.503495][ T980] usb 1-1: unit 0 not found! [ 132.511740][ T980] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 132.521817][ T980] usb 1-1: USB disconnect, device number 63 [ 132.531833][ T1196] udevd[1196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.623232][ T2657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2657 comm=syz.4.677 [ 132.635635][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 132.642220][ T31] usb 2-1: unable to get BOS descriptor set [ 132.648204][ T31] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 132.663681][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 132.666515][ T2659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.678'. [ 132.671906][ T31] usb 2-1: can't read configurations, error -61 [ 132.689620][ T31] usb usb2-port1: attempt power cycle [ 132.793300][ T2671] netlink: 72 bytes leftover after parsing attributes in process `syz.4.682'. [ 132.794262][ T2672] netlink: 72 bytes leftover after parsing attributes in process `syz.4.682'. [ 132.986104][ T36] audit: type=1400 audit(1780243428.984:864): avc: denied { write } for pid=2676 comm="syz.0.684" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.029488][ T36] audit: type=1400 audit(1780243428.984:865): avc: denied { ioctl } for pid=2676 comm="syz.0.684" path="/142/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.041070][ T31] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 133.070676][ T36] audit: type=1400 audit(1780243429.024:866): avc: denied { ioctl } for pid=2679 comm="syz.0.685" path="socket:[20965]" dev="sockfs" ino=20965 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.074228][ T623] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 133.129888][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 133.136336][ T31] usb 2-1: unable to get BOS descriptor set [ 133.142589][ T31] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 133.151904][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 133.159755][ T31] usb 2-1: can't read configurations, error -61 [ 133.271052][ T623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.279811][ T623] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.290146][ T31] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 133.297847][ T623] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.309666][ T623] usb 5-1: string descriptor 0 read error: -22 [ 133.315995][ T623] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.325591][ T623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.325666][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 133.342135][ T623] usb 5-1: low speed audio streaming not supported [ 133.348702][ T623] usb 5-1: 0:2 : does not exist [ 133.353949][ T31] usb 2-1: unable to get BOS descriptor set [ 133.359689][ T371] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 133.360533][ T31] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 133.379515][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 133.387464][ T31] usb 2-1: can't read configurations, error -61 [ 133.394197][ T31] usb usb2-port1: unable to enumerate USB device [ 133.509502][ T371] usb 1-1: Using ep0 maxpacket: 32 [ 133.517319][ T371] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 133.526560][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.534655][ T371] usb 1-1: Product: syz [ 133.538936][ T371] usb 1-1: Manufacturer: syz [ 133.543619][ T371] usb 1-1: SerialNumber: syz [ 133.564541][ T9] usb 5-1: USB disconnect, device number 20 [ 133.608565][ T36] audit: type=1400 audit(1780243429.604:867): avc: denied { accept } for pid=2686 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 133.693888][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.703246][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.758003][ T371] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 133.768433][ T371] usb 1-1: USB disconnect, device number 64 [ 134.228872][ T36] audit: type=1400 audit(1780243430.224:868): avc: denied { read } for pid=2693 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.304371][ T36] audit: type=1400 audit(1780243430.304:869): avc: denied { connect } for pid=2699 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.339515][ T623] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 134.373896][ T36] audit: type=1400 audit(1780243430.374:870): avc: denied { map } for pid=2708 comm="syz.0.697" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.451031][ T2721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.461884][ T2721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.510513][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 134.521567][ T623] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 134.535020][ T623] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 134.544835][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.554224][ T623] usb 5-1: config 0 descriptor?? [ 134.562938][ T2692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.569696][ T2727] netlink: 68 bytes leftover after parsing attributes in process `syz.0.702'. [ 134.919528][ T31] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 134.973682][ T623] kye 0003:0458:0087.0010: unknown main item tag 0x2 [ 134.980531][ T623] kye 0003:0458:0087.0010: bogus close delimiter [ 134.986875][ T623] kye 0003:0458:0087.0010: item 0 0 2 10 parsing failed [ 134.994240][ T623] kye 0003:0458:0087.0010: parse failed [ 134.999974][ T623] kye 0003:0458:0087.0010: probe with driver kye failed with error -22 [ 135.075819][ T2750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.084337][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 135.087061][ T2750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.096859][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 135.103510][ T2750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.106247][ T31] usb 1-1: config 0 has no interface number 0 [ 135.119042][ T2750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.122923][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 135.137094][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.145398][ T31] usb 1-1: Product: syz [ 135.149647][ T31] usb 1-1: Manufacturer: syz [ 135.154254][ T31] usb 1-1: SerialNumber: syz [ 135.159890][ T31] usb 1-1: config 0 descriptor?? [ 135.165777][ T31] smsc95xx v2.0.0 [ 135.177874][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.186774][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.194632][ T46] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 135.205333][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.213983][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.223845][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.232489][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.350822][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.363339][ T46] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 135.371174][ T46] usb 2-1: can't read configurations, error -71 [ 135.578207][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 135.589132][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.598484][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 135.609456][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 135.618777][ T31] usb 1-1: USB disconnect, device number 65 [ 135.645056][ T2753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.653678][ T2753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.663348][ T2753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.671920][ T2753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.760084][ T36] audit: type=1400 audit(1780243431.764:871): avc: denied { accept } for pid=2754 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.839085][ T2756] 9pnet_fd: Insufficient options for proto=fd [ 135.885378][ T2759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.894131][ T2759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.896436][ T2760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.911457][ T2760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.957573][ T36] audit: type=1400 audit(1780243431.954:872): avc: denied { mount } for pid=2761 comm="syz.1.716" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 136.052962][ T36] audit: type=1400 audit(1780243432.054:873): avc: denied { mount } for pid=2763 comm="syz.1.717" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 136.087667][ T2769] netlink: 'syz.1.718': attribute type 3 has an invalid length. [ 136.103253][ T2769] tipc: Failed to remove unknown binding: 66,1,1/0:2131207611/2131207613 [ 136.349557][ T371] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 136.500632][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.511691][ T371] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.520837][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.529616][ T371] usb 1-1: config 0 descriptor?? [ 136.738012][ T371] usbhid 1-1:0.0: can't add hid device: -71 [ 136.744100][ T371] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.752916][ T371] usb 1-1: USB disconnect, device number 66 [ 136.916732][ T2768] tipc: Failed to remove unknown binding: 66,1,1/0:2131207611/2131207613 [ 136.925341][ T2768] tipc: Failed to remove unknown binding: 66,1,1/0:2131207611/2131207613 [ 137.179663][ T371] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 137.330807][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.341886][ T371] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.351006][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.359756][ T371] usb 1-1: config 0 descriptor?? [ 137.365760][ T371] hub 1-1:0.0: USB hub found [ 137.565748][ T371] hub 1-1:0.0: 1 port detected [ 138.925266][ T9] usb 1-1: USB disconnect, device number 67 [ 155.962840][ T36] audit: type=1400 audit(1780243451.954:874): avc: denied { write } for pid=2793 comm="syz.2.723" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.988892][ T2794] tmpfs: Unknown parameter 'Poswap' [ 156.018256][ T2791] VFS: Mount too revealing [ 156.316811][ T2820] netlink: 'syz.2.728': attribute type 12 has an invalid length. [ 156.384141][ T2827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.408940][ T2827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.639535][ T31] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 156.800532][ T31] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.813542][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.820247][ T31] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 156.829527][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.838396][ T31] usb 2-1: config 0 descriptor?? [ 157.018364][ T2844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.027815][ T2844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.457001][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 157.463102][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 157.472039][ T31] usb 2-1: USB disconnect, device number 67 [ 157.552170][ T2850] bpf: Bad value for 'mode' [ 157.576672][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.585404][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.024711][ T2856] overlayfs: missing 'lowerdir' [ 158.124886][ T2870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.133573][ T2870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.156862][ T2872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.165504][ T2872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.329567][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 158.459520][ T9] usb 2-1: device descriptor read/64, error -71 [ 158.671571][ T2876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.680280][ T2876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.699683][ T9] usb 2-1: device descriptor read/64, error -71 [ 158.898963][ T2878] input: syz1 as /devices/virtual/input/input25 [ 158.909888][ T2878] netlink: 388 bytes leftover after parsing attributes in process `syz.4.749'. [ 158.939548][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 159.049860][ T2878] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.749'. [ 159.079549][ T9] usb 2-1: device descriptor read/64, error -71 [ 159.143514][ T36] audit: type=1400 audit(1780247807.147:875): avc: denied { mounton } for pid=2885 comm="syz.4.751" path="/49/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 159.176340][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.186812][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.202335][ T36] audit: type=1400 audit(1780247807.207:876): avc: denied { create } for pid=2887 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 159.224590][ T36] audit: type=1400 audit(1780247807.227:877): avc: denied { write } for pid=2887 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 159.252986][ T36] audit: type=1400 audit(1780247807.227:878): avc: denied { read } for pid=2887 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 159.274971][ T2893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 159.276810][ T36] audit: type=1400 audit(1780247807.247:879): avc: denied { write } for pid=2887 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 159.286127][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 159.307131][ T36] audit: type=1400 audit(1780247807.247:880): avc: denied { connect } for pid=2887 comm="syz.4.752" lport=34362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 159.313623][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 159.333771][ T36] audit: type=1400 audit(1780247807.247:881): avc: denied { create } for pid=2887 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 159.345018][ T9] usb 2-1: device descriptor read/64, error -71 [ 159.367982][ T36] audit: type=1400 audit(1780247807.247:882): avc: denied { ioctl } for pid=2887 comm="syz.4.752" path="socket:[22826]" dev="sockfs" ino=22826 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 159.399037][ T36] audit: type=1400 audit(1780247807.397:883): avc: denied { transfer } for pid=2892 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 159.399236][ T2893] rust_binder: Failed copying remainder into alloc: EFAULT [ 159.418165][ T2893] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 159.425812][ T2893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 159.434390][ T2893] rust_binder: 2892:2893 transaction to 2892 failed: EFAULT [ 159.500768][ T9] usb usb2-port1: attempt power cycle [ 159.516154][ T2903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.524863][ T2903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.699576][ T348] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 159.849524][ T348] usb 1-1: Using ep0 maxpacket: 16 [ 159.854802][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 159.864898][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.876037][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.885977][ T348] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 159.895403][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.904137][ T9] usb 2-1: device descriptor read/8, error -71 [ 159.911122][ T348] usb 1-1: config 0 descriptor?? [ 160.041017][ T9] usb 2-1: device descriptor read/8, error -71 [ 160.127691][ T2912] SELinux: failed to load policy [ 160.289540][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 160.310576][ T9] usb 2-1: device descriptor read/8, error -71 [ 160.320716][ T348] wacom 0003:056A:0084.0011: unbalanced delimiter at end of report description [ 160.330011][ T348] wacom 0003:056A:0084.0011: parse failed [ 160.335962][ T348] wacom 0003:056A:0084.0011: probe with driver wacom failed with error -22 [ 160.406337][ T2922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.414901][ T2922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.453457][ T9] usb 2-1: device descriptor read/8, error -71 [ 160.472162][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.481604][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.569672][ T9] usb usb2-port1: unable to enumerate USB device [ 160.590566][ T9] usb 1-1: USB disconnect, device number 68 [ 160.956420][ T2955] netlink: 'syz.2.767': attribute type 29 has an invalid length. [ 160.964405][ T2955] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.767'. [ 161.007038][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 161.110505][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 161.110523][ T36] audit: type=1400 audit(1780247809.117:885): avc: denied { listen } for pid=2973 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 161.162661][ T2978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.173797][ T2978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.185325][ T36] audit: type=1400 audit(1780247809.187:886): avc: denied { sys_module } for pid=2976 comm="syz.0.775" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 161.409502][ T348] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 161.489548][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 161.539510][ T348] usb 1-1: device descriptor read/64, error -71 [ 161.639514][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 161.646283][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 161.655426][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.665805][ T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 161.675863][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 161.685754][ T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 161.695817][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 161.702569][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 161.711873][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.722344][ T9] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 161.839508][ T348] usb 1-1: device descriptor read/64, error -71 [ 161.870257][ T2985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.878992][ T2985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.083100][ T348] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 162.121955][ T9] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 162.131731][ T9] usb 2-1: USB disconnect, device number 72 [ 162.219889][ T348] usb 1-1: device descriptor read/64, error -71 [ 162.404904][ T2993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.413586][ T2993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.460364][ T348] usb 1-1: device descriptor read/64, error -71 [ 162.491557][ T2996] netlink: 'syz.4.779': attribute type 11 has an invalid length. [ 162.499503][ T2996] netlink: 'syz.4.779': attribute type 27 has an invalid length. [ 162.507284][ T2996] netlink: 3521 bytes leftover after parsing attributes in process `syz.4.779'. [ 162.569586][ T348] usb usb1-port1: attempt power cycle [ 162.679531][ T46] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 162.840898][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.851885][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.863810][ T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.872981][ T46] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 162.881076][ T46] usb 2-1: Manufacturer: syz [ 162.886893][ T46] usb 2-1: config 0 descriptor?? [ 162.909614][ T348] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 162.930568][ T348] usb 1-1: device descriptor read/8, error -71 [ 162.973505][ T2999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.982163][ T2999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.062748][ T36] audit: type=1400 audit(1780247811.067:887): avc: denied { mount } for pid=3007 comm="syz.4.784" name="/" dev="pstore" ino=2330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 163.095904][ T348] usb 1-1: device descriptor read/8, error -71 [ 163.165348][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.174117][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.182941][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.191738][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.339553][ T348] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 163.380608][ T348] usb 1-1: device descriptor read/8, error -71 [ 163.387711][ T3018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.396350][ T3025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.400265][ T3018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.405583][ T3025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.510484][ T348] usb 1-1: device descriptor read/8, error -71 [ 163.619676][ T348] usb usb1-port1: unable to enumerate USB device [ 163.915930][ T46] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 163.925079][ T46] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 163.933269][ T46] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 163.941476][ T46] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 163.949022][ T46] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 163.959223][ T46] usb 2-1: USB disconnect, device number 73 [ 164.141048][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.149824][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.158895][ T36] audit: type=1400 audit(1780247812.157:888): avc: denied { accept } for pid=3026 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.180323][ T3027] netlink: 236 bytes leftover after parsing attributes in process `syz.4.789'. [ 164.198263][ T36] audit: type=1400 audit(1780247812.197:889): avc: denied { nlmsg_write } for pid=3030 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 164.550773][ T3044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 164.579593][ T348] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 164.729524][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 164.736022][ T348] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.744458][ T348] usb 1-1: config 0 has no interface number 0 [ 164.750821][ T348] usb 1-1: config 0 interface 184 has no altsetting 0 [ 164.759279][ T348] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.768454][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.776488][ T348] usb 1-1: Product: syz [ 164.780729][ T348] usb 1-1: Manufacturer: syz [ 164.785371][ T348] usb 1-1: SerialNumber: syz [ 164.790857][ T348] usb 1-1: config 0 descriptor?? [ 164.796886][ T348] smsc75xx v1.0.0 [ 164.809497][ T623] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 164.959517][ T623] usb 2-1: Using ep0 maxpacket: 8 [ 164.965778][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 164.977290][ T623] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.990365][ T623] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 164.999597][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.008654][ T623] usb 2-1: config 0 descriptor?? [ 165.404945][ T348] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 165.415915][ T348] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.425181][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.432737][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.439963][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.447100][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.454298][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.461501][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.468715][ T623] uclogic 0003:5543:0042.0013: unknown main item tag 0x0 [ 165.476176][ T623] uclogic 0003:5543:0042.0013: No inputs registered, leaving [ 165.484937][ T623] uclogic 0003:5543:0042.0013: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 165.508473][ T3055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.517693][ T3055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.550148][ T36] audit: type=1326 audit(1780247813.557:890): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3054 comm="syz.4.799" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83e19ce59 code=0x0 [ 165.621504][ T9] usb 2-1: USB disconnect, device number 74 [ 165.630480][ T348] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 165.641716][ T348] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 165.652033][ T348] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 165.661755][ T348] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 166.302627][ T36] audit: type=1400 audit(1780247814.307:891): avc: denied { create } for pid=3060 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 166.323403][ T36] audit: type=1400 audit(1780247814.307:892): avc: denied { ioctl } for pid=3060 comm="syz.2.801" path="socket:[23467]" dev="sockfs" ino=23467 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 166.338605][ T3062] 6: renamed from veth0_vlan (while UP) [ 166.409570][ T623] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 166.418195][ T3065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.427006][ T3065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.569499][ T623] usb 2-1: Using ep0 maxpacket: 32 [ 166.575869][ T623] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.584497][ T623] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.593287][ T623] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.602327][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.612040][ T623] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.621926][ T623] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.634967][ T623] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.644061][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.652809][ T623] usb 2-1: config 0 descriptor?? [ 166.862251][ T623] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 166.874942][ T623] usb 2-1: USB disconnect, device number 75 [ 166.882052][ T623] usblp0: removed [ 167.169506][ T623] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 167.319508][ T623] usb 2-1: Using ep0 maxpacket: 32 [ 167.326000][ T623] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.334891][ T623] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.343628][ T623] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.352711][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.362516][ T623] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.372221][ T623] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.385348][ T623] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.394626][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.403792][ T623] usb 2-1: config 0 descriptor?? [ 167.610528][ T623] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.729759][ T46] usb 1-1: USB disconnect, device number 73 [ 167.811533][ T311] usb 2-1: USB disconnect, device number 76 [ 167.822760][ T311] usblp0: removed [ 168.189543][ T46] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 168.349532][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 168.355824][ T46] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 168.364102][ T46] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 168.372321][ T46] usb 1-1: config 0 has no interface number 0 [ 168.378410][ T46] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 168.388428][ T46] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 168.399858][ T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 168.408936][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.417042][ T46] usb 1-1: Product: syz [ 168.421299][ T46] usb 1-1: Manufacturer: syz [ 168.425902][ T46] usb 1-1: SerialNumber: syz [ 168.431321][ T46] usb 1-1: config 0 descriptor?? [ 168.437067][ T3073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.444415][ T3073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.521635][ T3082] netlink: 'syz.4.808': attribute type 2 has an invalid length. [ 168.554391][ T3085] syzkaller1: entered promiscuous mode [ 168.560195][ T3085] syzkaller1: entered allmulticast mode [ 168.568252][ T3085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 168.579535][ T311] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 168.652558][ T3073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.660063][ T3073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.717458][ T3087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.726157][ T3087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.739571][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 168.746541][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 168.760557][ T311] usb 2-1: can't read configurations, error -61 [ 168.781354][ T36] audit: type=1400 audit(1780247816.787:893): avc: denied { execute } for pid=3091 comm="syz.4.811" path="/proc/partitions" dev="proc" ino=4026532091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 168.846247][ T3094] tipc: Started in network mode [ 168.851298][ T3094] tipc: Node identity 82279c18452, cluster identity 4711 [ 168.858704][ T3094] tipc: Enabled bearer , priority 0 [ 168.883782][ T3094] syzkaller0: entered promiscuous mode [ 168.889328][ T3094] syzkaller0: entered allmulticast mode [ 168.895569][ T3094] tipc: Resetting bearer [ 168.907976][ T3094] kvm: pic: non byte write [ 168.912813][ T311] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 168.922429][ T3093] tipc: Resetting bearer [ 168.940007][ T3093] tipc: Disabling bearer [ 169.053168][ T36] audit: type=1400 audit(1780247817.057:894): avc: denied { create } for pid=3110 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 169.073807][ T46] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 169.074009][ T36] audit: type=1400 audit(1780247817.057:895): avc: granted { setsecparam } for pid=3110 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 169.096606][ T46] asix 1-1:0.251: probe with driver asix failed with error -524 [ 169.111174][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 169.123700][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 169.131706][ T311] usb 2-1: can't read configurations, error -61 [ 169.138706][ T311] usb usb2-port1: attempt power cycle [ 169.144730][ T36] audit: type=1400 audit(1780247817.057:896): avc: granted { setsecparam } for pid=3110 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 169.168556][ T3118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.177782][ T3118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.186030][ T36] audit: type=1400 audit(1780247817.057:897): avc: granted { setsecparam } for pid=3110 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 169.206628][ T3118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.215812][ T3118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.226592][ T3118] x_tables: duplicate underflow at hook 4 [ 169.383644][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.392259][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.401793][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.410633][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.420175][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.428841][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.437899][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.446506][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.455480][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.464318][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.479537][ T311] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 169.499858][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 169.506707][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 169.514480][ T311] usb 2-1: can't read configurations, error -61 [ 169.649529][ T311] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 169.669934][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 169.676780][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 169.684538][ T311] usb 2-1: can't read configurations, error -61 [ 169.691104][ T311] usb usb2-port1: unable to enumerate USB device [ 169.752459][ T3135] 9pnet_fd: Insufficient options for proto=fd [ 169.800351][ T3140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.810019][ T3140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.820426][ T3140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.829086][ T3140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.007971][ T3146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.016750][ T3146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.352503][ T3151] netlink: 96 bytes leftover after parsing attributes in process `syz.2.829'. [ 170.391315][ T36] audit: type=1400 audit(1780247818.397:898): avc: denied { create } for pid=3157 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 170.548596][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.557302][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.568299][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.576924][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.643436][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.661878][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.748804][ T3185] random: crng reseeded on system resumption [ 170.860376][ T9] usb 1-1: USB disconnect, device number 74 [ 171.199496][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 171.349490][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 171.362660][ T3197] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 171.364655][ T9] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 171.371331][ T3197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 171.387652][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 171.397092][ T9] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 171.405876][ T9] usb 1-1: Product: syz [ 171.410342][ T9] usb 1-1: Manufacturer: syz [ 171.421118][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 171.430797][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 171.438608][ T9] cdc_acm 1-1:0.0: Zero length descriptor references [ 171.445722][ T36] audit: type=1400 audit(1780247819.437:899): avc: denied { ioctl } for pid=3198 comm="syz.1.843" path="socket:[24958]" dev="sockfs" ino=24958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.471103][ T9] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 171.471115][ T36] audit: type=1400 audit(1780247819.437:900): avc: denied { shutdown } for pid=3198 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.640418][ T311] r8152-cfgselector 1-1: USB disconnect, device number 75 [ 171.722475][ T3206] tmpfs: Invalid uid '0x00000000ffffffff' [ 171.759586][ T623] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 171.873446][ T3217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 171.883003][ T3217] SELinux: policydb table sizes (160,0) do not match mine (8,7) [ 171.891423][ T3217] SELinux: failed to load policy [ 171.899898][ T623] usb 2-1: device descriptor read/64, error -71 [ 172.003532][ T36] audit: type=1326 audit(1780247820.007:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3220 comm="syz.4.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83e19ce59 code=0x0 [ 172.059546][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.066008][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.066497][ T3222] Invalid logical block size (3601) [ 172.078792][ T3222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.087554][ T3222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.169515][ T623] usb 2-1: device descriptor read/64, error -71 [ 172.409534][ T623] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 172.489737][ T31] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 172.533413][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.542388][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.559532][ T623] usb 2-1: device descriptor read/64, error -71 [ 172.639665][ T31] usb 1-1: device descriptor read/64, error -71 [ 172.799530][ T623] usb 2-1: device descriptor read/64, error -71 [ 172.879525][ T31] usb 1-1: device descriptor read/64, error -71 [ 172.909692][ T623] usb usb2-port1: attempt power cycle [ 173.095099][ T3237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.105036][ T3237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.119572][ T31] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 173.249510][ T31] usb 1-1: device descriptor read/64, error -71 [ 173.255852][ T623] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 173.280700][ T623] usb 2-1: device descriptor read/8, error -71 [ 173.410726][ T623] usb 2-1: device descriptor read/8, error -71 [ 173.489560][ T31] usb 1-1: device descriptor read/64, error -71 [ 173.599752][ T31] usb usb1-port1: attempt power cycle [ 173.628467][ T3239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.637136][ T3239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.669516][ T623] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 173.690660][ T623] usb 2-1: device descriptor read/8, error -71 [ 173.821063][ T623] usb 2-1: device descriptor read/8, error -71 [ 173.929705][ T623] usb usb2-port1: unable to enumerate USB device [ 173.939724][ T31] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 173.960774][ T31] usb 1-1: device descriptor read/8, error -71 [ 174.059487][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 174.059487][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.090899][ T31] usb 1-1: device descriptor read/8, error -71 [ 174.240314][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.248970][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.258214][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.267063][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.329500][ T31] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 174.350676][ T31] usb 1-1: device descriptor read/8, error -71 [ 174.492000][ T31] usb 1-1: device descriptor read/8, error -71 [ 174.599990][ T31] usb usb1-port1: unable to enumerate USB device [ 174.869498][ T31] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 174.889908][ T3269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.898587][ T3269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.029521][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 175.035925][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.046910][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 175.057848][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 175.070785][ T31] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 175.079867][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.088438][ T31] usb 2-1: config 0 descriptor?? [ 175.179317][ T3273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.188064][ T3273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.289391][ T36] audit: type=1400 audit(1780247823.287:902): avc: denied { append } for pid=3274 comm="syz.0.869" name="pfkey" dev="proc" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 175.503141][ T3277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.511688][ T3278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.514608][ T3277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.522645][ T3278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.534930][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.544163][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.555488][ T31] nintendo 0003:057E:2019.0014: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 175.659735][ T347] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 175.755107][ C1] usb 2-1: input irq status -75 received [ 175.820636][ T347] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 175.831600][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.842569][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.852631][ T347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 175.872225][ T347] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 175.881496][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.896499][ T347] usb 1-1: config 0 descriptor?? [ 175.956038][ T31] nintendo 0003:057E:2019.0014: Failed to get joycon info; ret=-71 [ 175.964255][ T31] nintendo 0003:057E:2019.0014: Failed to retrieve controller info; ret=-71 [ 175.973056][ T31] nintendo 0003:057E:2019.0014: Failed to initialize controller; ret=-71 [ 175.983555][ T31] nintendo 0003:057E:2019.0014: probe - fail = -71 [ 175.990260][ T31] nintendo 0003:057E:2019.0014: probe with driver nintendo failed with error -71 [ 176.001268][ T31] usb 2-1: USB disconnect, device number 85 [ 176.071939][ T36] audit: type=1400 audit(1780247824.077:903): avc: denied { create } for pid=3296 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.305110][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.312679][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.320116][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.327522][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.334990][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.342426][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.349787][ T347] holtek_kbd 0003:04D9:A055.0015: unknown main item tag 0x0 [ 176.357830][ T347] holtek_kbd 0003:04D9:A055.0015: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 176.506212][ T3275] SELinux: policydb string length 51858 does not match expected length 8 [ 176.514948][ T3275] SELinux: failed to load policy [ 176.521458][ T9] usb 1-1: USB disconnect, device number 80 [ 176.719522][ T371] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 176.868565][ T3322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.869601][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 176.880700][ T3322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.891885][ T3322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.901725][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.914066][ T3322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.922040][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.939527][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.953256][ T371] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.962885][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.972130][ T371] usb 2-1: config 0 descriptor?? [ 177.057822][ T3335] 9pnet_fd: Insufficient options for proto=fd [ 177.064997][ T3332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.075020][ T3332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.349485][ T31] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 177.511109][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.519238][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 177.529884][ T31] usb 1-1: config 2 has an invalid interface number: 52 but max is 0 [ 177.538242][ T31] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 177.549216][ T31] usb 1-1: config 2 has no interface number 0 [ 177.556424][ T371] usbhid 2-1:0.0: can't add hid device: -71 [ 177.556998][ T31] usb 1-1: config 2 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 177.573106][ T371] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.575157][ T31] usb 1-1: config 2 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.591802][ T31] usb 1-1: config 2 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.608139][ T371] usb 2-1: USB disconnect, device number 86 [ 177.618545][ T31] usb 1-1: config 2 interface 52 has no altsetting 0 [ 177.626900][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=d7.f8 [ 177.636300][ T3341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.644952][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.653383][ T3341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.663390][ T31] usb 1-1: Product: syz [ 177.667604][ T31] usb 1-1: Manufacturer: syz [ 177.673410][ T31] usb 1-1: SerialNumber: syz [ 177.883062][ T31] usbhid 1-1:2.52: couldn't find an input interrupt endpoint [ 177.891959][ T31] usb 1-1: USB disconnect, device number 81 [ 178.297154][ T36] audit: type=1400 audit(1780247826.297:904): avc: denied { read write } for pid=3347 comm="syz.2.891" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.299277][ T3348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.320460][ T36] audit: type=1400 audit(1780247826.297:905): avc: denied { open } for pid=3347 comm="syz.2.891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.330447][ T31] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 178.360260][ T3348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.378840][ T3351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.383729][ T36] audit: type=1400 audit(1780247826.377:906): avc: denied { ioctl } for pid=3347 comm="syz.2.891" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.398258][ T3351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.412106][ T36] audit: type=1400 audit(1780247826.377:907): avc: denied { map } for pid=3347 comm="syz.2.891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.444189][ T36] audit: type=1400 audit(1780247826.377:908): avc: denied { execute } for pid=3347 comm="syz.2.891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.520733][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.531840][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.542412][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 178.551567][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.559623][ T31] usb 2-1: SerialNumber: syz [ 178.567297][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 178.575823][ T31] usb-storage 2-1:1.0: USB Mass Storage device detected [ 178.583813][ T31] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 178.591932][ T31] scsi host1: usb-storage 2-1:1.0 [ 178.709557][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 178.839570][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.006610][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.016219][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.040339][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.057382][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.079607][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.146903][ T3369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.155631][ T3369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.329499][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 179.459523][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.581167][ T3371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.590144][ T3371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.623702][ T3378] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 179.633606][ T3378] binder: Unknown parameter 'uid<00000000000000000000' [ 179.699495][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.809650][ T9] usb usb1-port1: attempt power cycle [ 179.931918][ T3386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.940599][ T3386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.975976][ T3386] kvm: kvm [3384]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 179.984860][ T3386] kvm: kvm [3384]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 180.149509][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 180.170571][ T9] usb 1-1: device descriptor read/8, error -71 [ 180.300612][ T9] usb 1-1: device descriptor read/8, error -71 [ 180.549540][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 180.580679][ T9] usb 1-1: device descriptor read/8, error -71 [ 180.650073][ T623] usb 2-1: USB disconnect, device number 87 [ 180.710725][ T9] usb 1-1: device descriptor read/8, error -71 [ 180.829564][ T9] usb usb1-port1: unable to enumerate USB device [ 181.402789][ T3401] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.508241][ T3406] netlink: 80 bytes leftover after parsing attributes in process `syz.0.909'. [ 181.530266][ T3408] rust_binder: 3407:3408 transaction to 0 failed: EINVAL [ 181.649500][ T623] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 181.809472][ T623] usb 2-1: Invalid ep0 maxpacket: 64 [ 181.879560][ T371] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 181.939524][ T623] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 182.035811][ T3412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.045396][ T3412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.054789][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.062989][ T371] usb 1-1: not running at top speed; connect to a high speed hub [ 182.071627][ T371] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 182.079999][ T371] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 182.088249][ T371] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 182.097476][ T371] usb 1-1: config 129 has no interface number 0 [ 182.103931][ T371] usb 1-1: config 129 has no interface number 1 [ 182.109561][ T623] usb 2-1: Invalid ep0 maxpacket: 64 [ 182.110318][ T371] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.116814][ T623] usb usb2-port1: attempt power cycle [ 182.128867][ T371] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 182.128910][ T371] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 182.158827][ T371] usb 1-1: config 129 interface 80 has no altsetting 0 [ 182.165782][ T371] usb 1-1: config 129 interface 5 has no altsetting 0 [ 182.174585][ T371] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 182.184275][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.192323][ T371] usb 1-1: Product: syz [ 182.196507][ T371] usb 1-1: Manufacturer: syz [ 182.201190][ T371] usb 1-1: SerialNumber: syz [ 182.411052][ T371] usb 1-1: MIDIStreaming interface descriptor not found [ 182.422491][ T371] usb 1-1: USB disconnect, device number 86 [ 182.441838][ T2896] udevd[2896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.479539][ T623] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 182.499905][ T623] usb 2-1: Invalid ep0 maxpacket: 64 [ 182.579281][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 182.629526][ T623] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 182.650438][ T623] usb 2-1: Invalid ep0 maxpacket: 64 [ 182.655986][ T623] usb usb2-port1: unable to enumerate USB device [ 182.672718][ T3417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.682118][ T3418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.682231][ T3417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.698773][ T3418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.837600][ T36] audit: type=1400 audit(1780247830.837:909): avc: denied { accept } for pid=3420 comm="syz.2.915" path="socket:[26365]" dev="sockfs" ino=26365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.289899][ T3431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 183.403110][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.412960][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.509209][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.528637][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.091187][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.099807][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.131327][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.140736][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.163849][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.172540][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.399527][ T623] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 184.550991][ T623] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.561209][ T623] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.570250][ T623] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 184.579324][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.588055][ T623] usb 1-1: config 0 descriptor?? [ 184.737464][ T3462] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 184.789539][ T371] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 184.904613][ T36] audit: type=1400 audit(1780247832.907:910): avc: denied { watch } for pid=3470 comm="syz.4.932" path="/108/bus" dev="tmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.949498][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 184.955986][ T371] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 184.967897][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 184.981293][ T371] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 184.982600][ T3471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.993372][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.008988][ T3471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.017015][ T371] usb 2-1: config 0 descriptor?? [ 185.292809][ T371] usbhid 2-1:0.0: can't add hid device: -71 [ 185.308756][ T371] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.318728][ T3480] overlayfs: unescaped trailing colons in lowerdir mount option. [ 185.326872][ T371] usb 2-1: USB disconnect, device number 92 [ 185.679532][ T371] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 185.733023][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.741771][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.762775][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.771367][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.849557][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 185.856033][ T371] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 185.864320][ T371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.874477][ T371] usb 2-1: config 0 has no interface number 0 [ 185.882298][ T371] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 185.891544][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.899637][ T371] usb 2-1: Product: syz [ 185.903831][ T371] usb 2-1: Manufacturer: syz [ 185.908435][ T371] usb 2-1: SerialNumber: syz [ 185.914296][ T371] usb 2-1: config 0 descriptor?? [ 185.920244][ T371] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 185.926923][ T371] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 185.933395][ T371] usb 2-1: No valid video chain found. [ 186.126592][ T371] usb 2-1: USB disconnect, device number 93 [ 186.337689][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 186.405078][ T3493] kvm: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 186.414143][ T3493] kvm: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 186.426538][ T3493] kvm: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 186.436645][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.445127][ T3493] kvm: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 186.454686][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.455506][ T3493] kvm: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 186.475256][ T3493] kvm_intel: kvm [3492]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 186.513043][ T3491] netlink: 'syz.4.937': attribute type 4 has an invalid length. [ 186.698198][ T3506] veth0_to_bridge: entered allmulticast mode [ 186.704469][ T3507] veth0_to_bridge: entered promiscuous mode [ 186.711147][ T3506] veth0_to_bridge: left promiscuous mode [ 186.717027][ T3506] veth0_to_bridge: left allmulticast mode [ 186.795317][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.804799][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.165640][ T347] usb 1-1: USB disconnect, device number 87 [ 187.189134][ T3518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.218809][ T3518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.599504][ T347] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 187.753611][ T347] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 187.774106][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.784660][ T347] usb 1-1: config 0 has no interfaces? [ 187.790622][ T347] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 187.809481][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.817893][ T3539] tipc: Enabled bearer , priority 10 [ 187.822032][ T3539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.951'. [ 187.838713][ T3539] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 187.842046][ T347] usb 1-1: config 0 descriptor?? [ 187.854027][ T3539] tipc: Enabled bearer , priority 10 [ 187.891236][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.900481][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.067802][ T348] usb 1-1: USB disconnect, device number 88 [ 188.119608][ T347] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 188.271141][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.279712][ T347] usb 2-1: config 6 has an invalid interface number: 223 but max is -1 [ 188.288047][ T347] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 0 [ 188.297041][ T347] usb 2-1: config 6 has no interface number 0 [ 188.303280][ T347] usb 2-1: config 6 interface 223 has no altsetting 0 [ 188.311796][ T347] usb 2-1: New USB device found, idVendor=32a7, idProduct=0000, bcdDevice=86.90 [ 188.320924][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.328972][ T347] usb 2-1: Product: syz [ 188.333274][ T347] usb 2-1: Manufacturer: syz [ 188.337963][ T347] usb 2-1: SerialNumber: syz [ 188.444001][ T3547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.452670][ T3547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.462617][ T36] audit: type=1400 audit(1780247836.467:911): avc: denied { append } for pid=3546 comm="syz.4.955" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.470435][ T3547] input: syz0 as /devices/virtual/input/input27 [ 188.606605][ T347] usb 2-1: USB disconnect, device number 94 [ 188.671126][ T36] audit: type=1400 audit(1780247836.677:912): avc: denied { ioctl } for pid=3550 comm="syz.0.956" path="socket:[27977]" dev="sockfs" ino=27977 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.929518][ T980] tipc: Node number set to 3339164696 [ 189.033615][ T3557] netlink: 104 bytes leftover after parsing attributes in process `syz.4.958'. [ 189.201668][ T3573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2056 sclass=netlink_route_socket pid=3573 comm=syz.1.961 [ 189.459573][ T348] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 189.610733][ T348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.620976][ T348] usb 2-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.634331][ T348] usb 2-1: config 1 interface 0 has no altsetting 0 [ 189.643312][ T348] usb 2-1: string descriptor 0 read error: -22 [ 189.649711][ T348] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 189.658799][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.691244][ T347] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 189.840854][ T347] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 189.849693][ T347] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 189.860010][ T347] usb 1-1: config 0 has no interface number 0 [ 189.867654][ T347] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 189.876915][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.886305][ T347] usb 1-1: Product: syz [ 189.890662][ T347] usb 1-1: Manufacturer: syz [ 189.895358][ T347] usb 1-1: SerialNumber: syz [ 189.900220][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.910050][ T347] usb 1-1: config 0 descriptor?? [ 189.910074][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.089162][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.098768][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.323406][ T36] audit: type=1400 audit(1780247838.327:913): avc: denied { create } for pid=3580 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.328272][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.351718][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.362877][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.371558][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.382561][ T347] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 190.388993][ T347] usb 1-1: No valid video chain found. [ 190.395437][ T347] usb 1-1: USB disconnect, device number 89 [ 190.449011][ T348] usb 2-1: USB disconnect, device number 95 [ 190.771899][ T36] audit: type=1400 audit(1780247838.777:914): avc: denied { create } for pid=3628 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 190.775174][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.801063][ T348] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 190.809050][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.914830][ T3632] sit0: entered promiscuous mode [ 190.921343][ T3632] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 190.929157][ T3632] netlink: 1 bytes leftover after parsing attributes in process `syz.0.980'. [ 190.943409][ T3632] fuse: Unknown parameter 'rootmode000040000' [ 190.960085][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 190.971310][ T348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.984573][ T348] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 190.993862][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.003175][ T348] usb 2-1: config 0 descriptor?? [ 191.018464][ T3636] 9pnet_fd: p9_fd_create_tcp (3636): problem connecting socket to 127.0.0.1 [ 191.028090][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.044327][ T36] audit: type=1400 audit(1780247839.037:915): avc: denied { mount } for pid=3633 comm="syz.0.981" name="/" dev="configfs" ino=2262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 191.067324][ T36] audit: type=1400 audit(1780247839.037:916): avc: denied { write } for pid=3633 comm="syz.0.981" name="/" dev="configfs" ino=2262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.080952][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.098734][ T36] audit: type=1400 audit(1780247839.107:917): avc: denied { mounton } for pid=3633 comm="syz.0.981" path="/192/file0" dev="configfs" ino=2262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.189579][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.198279][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.353964][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.364050][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.374604][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.383851][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.392767][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.402038][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.412759][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.422895][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.431913][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.441175][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.450893][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.459678][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.538259][ T36] audit: type=1400 audit(1780247839.537:918): avc: denied { audit_write } for pid=3668 comm="syz.4.992" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 191.589455][ T36] audit: type=1107 audit(1780247839.537:919): pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.589976][ T36] audit: type=1400 audit(1780247839.577:920): avc: denied { listen } for pid=3670 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.651497][ T348] hid (null): unknown global tag 0xc [ 191.754152][ T348] uclogic 0003:5543:0522.0016: unknown main item tag 0x3 [ 191.764803][ T348] uclogic 0003:5543:0522.0016: unknown main item tag 0x6 [ 191.788057][ T3671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.797103][ T348] uclogic 0003:5543:0522.0016: unknown global tag 0xc [ 191.808709][ T3671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.821725][ T348] uclogic 0003:5543:0522.0016: item 0 0 1 12 parsing failed [ 191.825130][ T36] audit: type=1400 audit(1780247839.827:921): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 191.830171][ T348] uclogic 0003:5543:0522.0016: parse failed [ 191.869594][ T348] uclogic 0003:5543:0522.0016: probe with driver uclogic failed with error -22 [ 191.887413][ T348] usb 2-1: USB disconnect, device number 96 [ 191.928740][ T3685] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 192.007400][ T3690] netlink: 152 bytes leftover after parsing attributes in process `syz.2.999'. [ 192.019869][ T3690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.028477][ T3690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.209490][ T31] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 192.370664][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.393029][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.406381][ T31] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 192.415684][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.423732][ T31] usb 1-1: Product: syz [ 192.428089][ T31] usb 1-1: Manufacturer: syz [ 192.432758][ T31] usb 1-1: SerialNumber: syz [ 192.552308][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.561005][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.570046][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.578657][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.639465][ T348] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 192.647655][ T31] usb 1-1: skipping empty audio interface (v1) [ 192.655706][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.667044][ T31] usb 1-1: USB disconnect, device number 90 [ 192.676230][ T2782] udevd[2782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.800898][ T348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.809609][ T348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.819915][ T348] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.829163][ T348] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 192.840169][ T348] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 192.853690][ T348] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.864844][ T348] usb 2-1: config 1 interface 1 has no altsetting 0 [ 192.873755][ T348] usb 2-1: string descriptor 0 read error: -22 [ 192.880087][ T348] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 192.889129][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.113640][ T3698] page size migration: [3698 (syz.2.1002)] madvise_vma_pad_pages:333: Invalid attempt to madvise padding on MAP_SHARED vma [ 193.114249][ T3698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.136171][ T3698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.170900][ T36] audit: type=1326 audit(1780247841.177:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.1003" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21759ce59 code=0x0 [ 193.260220][ T3709] rust_binder: 3708:3709 transaction to 0 failed: ENOENT [ 193.301507][ T348] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 193.320393][ T348] usb 2-1: USB disconnect, device number 97 [ 194.996407][ T3772] netlink: 'syz.2.1027': attribute type 58 has an invalid length. [ 195.646024][ T36] kauditd_printk_skb: 134 callbacks suppressed [ 195.646053][ T36] audit: type=1400 audit(1780247843.647:1057): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.677447][ T36] audit: type=1400 audit(1780247843.657:1058): avc: denied { create } for pid=3802 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 195.698048][ T36] audit: type=1400 audit(1780247843.657:1059): avc: denied { create } for pid=3802 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 195.718514][ T36] audit: type=1400 audit(1780247843.657:1060): avc: denied { read write } for pid=3802 comm="syz.2.1037" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 195.742000][ T36] audit: type=1400 audit(1780247843.677:1061): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.767755][ T36] audit: type=1400 audit(1780247843.727:1062): avc: denied { load_policy } for pid=3804 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 195.788342][ T36] audit: type=1400 audit(1780247843.727:1063): avc: denied { read write } for pid=3804 comm="syz.2.1038" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 195.812265][ T36] audit: type=1400 audit(1780247843.797:1064): avc: denied { read write } for pid=2017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.991461][ T36] audit: type=1400 audit(1780247843.997:1065): avc: denied { read write } for pid=2017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.015929][ T36] audit: type=1400 audit(1780247844.007:1066): avc: denied { read } for pid=3811 comm="syz.4.1040" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 197.930512][ T3872] netlink: 'syz.1.1063': attribute type 16 has an invalid length. [ 197.938470][ T3872] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1063'. [ 199.693968][ T3975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.696742][ T3976] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 199.701272][ T3975] IPv6: NLM_F_CREATE should be set when creating new route [ 199.701294][ T3975] IPv6: NLM_F_CREATE should be set when creating new route [ 199.762625][ T3988] syzkaller1: entered promiscuous mode [ 199.768158][ T3988] syzkaller1: entered allmulticast mode [ 199.874808][ T3999] syz.4.1104 (3999): /proc/3998/oom_adj is deprecated, please use /proc/3998/oom_score_adj instead. [ 199.890018][ T4001] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.901992][ T4001] binfmt_misc: register: failed to install interpreter file ./file0 [ 200.805212][ T36] kauditd_printk_skb: 284 callbacks suppressed [ 200.805232][ T36] audit: type=1400 audit(1780247848.807:1351): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.836030][ T36] audit: type=1400 audit(1780247848.837:1352): avc: denied { read } for pid=4035 comm="syz.0.1117" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 200.870387][ T36] audit: type=1400 audit(1780247848.837:1353): avc: denied { read } for pid=4035 comm="syz.0.1117" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 200.896851][ T36] audit: type=1400 audit(1780247848.867:1354): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.921288][ T36] audit: type=1400 audit(1780247848.867:1355): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.946451][ T36] audit: type=1400 audit(1780247848.897:1356): avc: denied { read } for pid=4037 comm="syz.0.1118" dev="nsfs" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 200.973050][ T36] audit: type=1400 audit(1780247848.897:1357): avc: denied { create } for pid=4037 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 200.994832][ T36] audit: type=1400 audit(1780247848.897:1358): avc: denied { create } for pid=4037 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 201.019474][ T36] audit: type=1400 audit(1780247848.897:1359): avc: denied { create } for pid=4037 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 201.045858][ T36] audit: type=1400 audit(1780247848.927:1360): avc: denied { validate_trans } for pid=4038 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 201.313919][ T4080] TCP: TCP_TX_DELAY enabled [ 201.635131][ T4093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 202.205201][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 202.318756][ T4135] Falling back ldisc for ttyS3. [ 202.620759][ T4140] can0: slcan on ptm0. [ 203.130387][ T4138] can0 (unregistered): slcan off ptm0. [ 203.368400][ T4187] 2N: renamed from vcan0 (while UP) [ 203.470038][ T4205] netlink: 'syz.4.1181': attribute type 4 has an invalid length. [ 203.478120][ T4205] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1181'. [ 203.579912][ T4210] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1183'. [ 203.590315][ T4212] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1183'. [ 204.070469][ T4242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4242 comm=syz.2.1195 [ 204.279226][ T371] usb 3-1: USB disconnect, device number 18 [ 204.300742][ T310] bridge_slave_1: left allmulticast mode [ 204.306451][ T310] bridge_slave_1: left promiscuous mode [ 204.321657][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.339770][ T310] bridge_slave_0: left allmulticast mode [ 204.351249][ T310] bridge_slave_0: left promiscuous mode [ 204.367454][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.525219][ T310] veth1_macvtap: left promiscuous mode [ 204.543910][ T310] veth0_vlan: left promiscuous mode [ 205.016923][ T4278] syzkaller1: entered promiscuous mode [ 205.022814][ T4278] syzkaller1: entered allmulticast mode [ 205.034087][ T310] veth1_macvtap: left promiscuous mode [ 205.044431][ T310] veth0_vlan: left promiscuous mode [ 205.261565][ T310] ------------[ cut here ]------------ [ 205.267130][ T310] WARNING: CPU: 1 PID: 310 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 205.277262][ T310] Modules linked in: [ 205.281251][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 205.293043][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.303259][ T310] Workqueue: netns cleanup_net [ 205.308172][ T310] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 205.314231][ T310] Code: e8 c1 fc d2 fc 4b 83 3c 3e 00 75 19 e8 a5 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 97 5a 7a fc 49 83 c7 08 eb c9 e8 8c 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 205.333922][ T310] RSP: 0018:ffffc9000b7bfb90 EFLAGS: 00010293 [ 205.340062][ T310] RAX: ffffffff850d6c44 RBX: ffff88812ca84700 RCX: ffff888106be4c00 [ 205.348166][ T310] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881043647f0 [ 205.356313][ T310] RBP: ffffc9000b7bfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 205.364357][ T310] R10: dffffc0000000000 R11: fffff520016f7f04 R12: dffffc0000000000 [ 205.372406][ T310] R13: dffffc0000000000 R14: ffff888104364000 R15: 00000000000007f0 [ 205.380451][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 205.389638][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.396269][ T310] CR2: 00007fb83e185fc0 CR3: 000000010c7aa000 CR4: 00000000003526b0 [ 205.404325][ T310] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 205.412357][ T310] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 205.420493][ T310] Call Trace: [ 205.423804][ T310] [ 205.426769][ T310] cleanup_net+0x6bd/0xc90 [ 205.431354][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 205.436338][ T310] process_scheduled_works+0x7d4/0x1020 [ 205.441961][ T310] worker_thread+0xc51/0x1370 [ 205.446676][ T310] ? __kasan_check_read+0x15/0x20 [ 205.451833][ T310] kthread+0x2c9/0x370 [ 205.455945][ T310] ? __cfi_worker_thread+0x10/0x10 [ 205.461133][ T310] ? __cfi_kthread+0x10/0x10 [ 205.465770][ T310] ret_from_fork+0x67/0xa0 [ 205.470343][ T310] ? __cfi_kthread+0x10/0x10 [ 205.475074][ T310] ret_from_fork_asm+0x1a/0x30 [ 205.479998][ T310] [ 205.483048][ T310] ---[ end trace 0000000000000000 ]--- [ 205.489052][ T310] ------------[ cut here ]------------ [ 205.494586][ T310] WARNING: CPU: 1 PID: 310 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 205.504744][ T310] Modules linked in: [ 205.508678][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 205.521878][ T310] Tainted: [W]=WARN [ 205.525717][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.535924][ T310] Workqueue: netns cleanup_net [ 205.540771][ T310] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 205.546895][ T310] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 42 5a 7a fc 49 83 c7 08 eb c5 e8 37 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 5a 7a fc 5b 41 5c 41 5e 41 [ 205.566585][ T310] RSP: 0018:ffffc9000b7bfb90 EFLAGS: 00010293 [ 205.572715][ T310] RAX: ffffffff850d6c99 RBX: ffff888104364800 RCX: ffff888106be4c00 [ 205.580793][ T310] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104364808 [ 205.588898][ T310] RBP: ffffc9000b7bfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 205.596937][ T310] R10: dffffc0000000000 R11: fffff520016f7f04 R12: dffffc0000000000 [ 205.604974][ T310] R13: dffffc0000000000 R14: ffff888104364000 R15: 0000000000000008 [ 205.613007][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 205.622015][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.628635][ T310] CR2: 00007fb83e185fc0 CR3: 000000010c7aa000 CR4: 00000000003526b0 [ 205.636687][ T310] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 205.644730][ T310] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 205.652784][ T310] Call Trace: [ 205.656096][ T310] [ 205.659056][ T310] cleanup_net+0x6bd/0xc90 [ 205.663561][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 205.668552][ T310] process_scheduled_works+0x7d4/0x1020 [ 205.674174][ T310] worker_thread+0xc51/0x1370 [ 205.678900][ T310] ? __kasan_check_read+0x15/0x20 [ 205.684004][ T310] kthread+0x2c9/0x370 [ 205.688120][ T310] ? __cfi_worker_thread+0x10/0x10 [ 205.693296][ T310] ? __cfi_kthread+0x10/0x10 [ 205.698018][ T310] ret_from_fork+0x67/0xa0 [ 205.702574][ T310] ? __cfi_kthread+0x10/0x10 [ 205.707255][ T310] ret_from_fork_asm+0x1a/0x30 [ 205.712092][ T310] [ 205.715143][ T310] ---[ end trace 0000000000000000 ]--- [ 205.754476][ T623] usb 5-1: USB disconnect, device number 21 [ 205.771421][ T310] ------------[ cut here ]------------ [ 205.776945][ T310] WARNING: CPU: 1 PID: 310 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 205.786492][ T310] Modules linked in: [ 205.790445][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 205.803648][ T310] Tainted: [W]=WARN [ 205.807482][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.816522][ T36] kauditd_printk_skb: 20128 callbacks suppressed [ 205.816575][ T36] audit: type=1400 audit(1780247859.812:21336): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.817666][ T310] Workqueue: netns cleanup_net [ 205.850074][ T310] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 205.851622][ T36] audit: type=1400 audit(1780247859.812:21337): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.855716][ T310] Code: 3c 20 00 74 08 48 89 df e8 8f d7 ed fc 48 8b 3b e8 d7 de d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 35 95 fc <0f> 0b e9 b0 fd ff ff e8 56 35 95 fc 0f 0b e9 18 fe ff ff e8 4a 35 [ 205.896603][ T310] RSP: 0018:ffffc9000b7bfb70 EFLAGS: 00010293 [ 205.902840][ T310] RAX: ffffffff84f2916e RBX: ffff88812ca84700 RCX: ffff888106be4c00 [ 205.910871][ T310] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888106be4c00 [ 205.918893][ T310] RBP: ffffc9000b7bfb98 R08: ffffffff87d49987 R09: 1ffffffff0fa9330 [ 205.924239][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.927228][ T310] R10: dffffc0000000000 R11: fffffbfff0fa9331 R12: 1ffffffff0fa9080 [ 205.941817][ T310] R13: dffffc0000000000 R14: ffff88812ca85300 R15: dffffc0000000000 [ 205.949862][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 205.958825][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.965463][ T310] CR2: 00007ffcea498a58 CR3: 000000010cbbc000 CR4: 00000000003526b0 [ 205.973673][ T310] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003 [ 205.979548][ T150] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 205.981728][ T310] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 205.996680][ T36] audit: type=1400 audit(1780247859.812:21338): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.997535][ T310] Call Trace: [ 205.997546][ T310] [ 206.024844][ T310] xfrm_net_exit+0x31/0x80 [ 206.027234][ T150] audit: backlog limit exceeded [ 206.029303][ T310] cleanup_net+0x6bd/0xc90 [ 206.038627][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 206.043633][ T310] process_scheduled_works+0x7d4/0x1020 [ 206.049218][ T310] worker_thread+0xc51/0x1370 [ 206.053807][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.053996][ T310] ? __kasan_check_read+0x15/0x20 [ 206.060938][ T36] audit: type=1400 audit(1780247859.812:21339): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.065504][ T310] kthread+0x2c9/0x370 [ 206.089485][ T150] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 206.090748][ T310] ? __cfi_worker_thread+0x10/0x10 [ 206.098442][ T150] audit: backlog limit exceeded [ 206.103577][ T310] ? __cfi_kthread+0x10/0x10 [ 206.113141][ T310] ret_from_fork+0x67/0xa0 [ 206.117593][ T310] ? __cfi_kthread+0x10/0x10 [ 206.122245][ T310] ret_from_fork_asm+0x1a/0x30 [ 206.127050][ T310] [ 206.130118][ T310] ---[ end trace 0000000000000000 ]--- [ 206.199589][ T310] bridge_slave_1: left allmulticast mode [ 206.205307][ T310] bridge_slave_1: left promiscuous mode [ 206.211193][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.219788][ T310] ôÛWgÚq: left allmulticast mode [ 206.224938][ T310] ôÛWgÚq: left promiscuous mode [ 206.237528][ T310] bridge0: port 1(ôÛWgÚq) entered disabled state [ 206.374170][ T310] veth1_macvtap: left promiscuous mode [ 206.385497][ T310] 6: left promiscuous mode [ 206.770413][ T310] bridge_slave_1: left allmulticast mode [ 206.776278][ T310] bridge_slave_1: left promiscuous mode [ 206.782371][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.790564][ T310] bridge_slave_0: left allmulticast mode [ 206.796262][ T310] bridge_slave_0: left promiscuous mode [ 206.802213][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.921431][ T310] tipc: Disabling bearer [ 206.926934][ T310] tipc: Disabling bearer [ 206.932655][ T310] tipc: Left network mode [ 206.938152][ T310] veth1_macvtap: left promiscuous mode [ 206.943997][ T310] veth0_vlan: left promiscuous mode [ 210.819425][ T36] kauditd_printk_skb: 45915 callbacks suppressed [ 210.819445][ T36] audit: type=1400 audit(1780247864.812:66691): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.847013][ T36] audit: type=1400 audit(1780247864.822:66692): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.847543][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.868818][ T36] audit: type=1400 audit(1780247864.822:66693): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.875069][ T150] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 210.896620][ T36] audit: type=1400 audit(1780247864.822:66694): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.904241][ T150] audit: backlog limit exceeded [ 210.926006][ T36] audit: type=1400 audit(1780247864.822:66695): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.931836][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.952120][ T36] audit: type=1400 audit(1780247864.822:66696): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0