last executing test programs: 43.895524494s ago: executing program 3 (id=264): r0 = socket(0x10, 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x420, 0x3f3, 0x20, 0x70bd29, 0x25dfdbfe, {0x4, 0x0, 0x33, [0x101, 0x5, 0x200, 0x0, 0x1, 0x5, 0x1, 0xdb8e, 0x4, 0xa, 0x9, 0xff, 0x0, 0x9, 0x3, 0x200, 0x2, 0x5, 0x3, 0xff, 0x4, 0x1, 0x9, 0x9, 0x2, 0x0, 0x5, 0xe9b, 0x7, 0x3, 0x101, 0x9, 0x5, 0x0, 0x66e, 0x9, 0x0, 0x7, 0x7b, 0x3fe, 0x5, 0x2, 0x400, 0x4, 0x2, 0x9, 0x7, 0x6, 0x7c8, 0x0, 0x200, 0x400, 0x0, 0x7, 0x4, 0x7, 0x1ff, 0xd5, 0x6, 0x1, 0x0, 0x0, 0x1ff, 0x8], [0xfffffced, 0x9, 0x9, 0x40, 0x2, 0x6, 0x4ed, 0x9, 0x9, 0x40, 0x1, 0x8000, 0x4, 0xfffffff8, 0x400, 0x1, 0x37, 0xb, 0xffff, 0x5, 0xeadf238, 0x8, 0x5, 0x9, 0x100, 0x1, 0xfffffff7, 0x0, 0xffffff00, 0x10000, 0xa, 0x5, 0x3, 0xff, 0x2, 0x5, 0x1, 0x800, 0x4, 0xa5d0, 0x1ff, 0x8, 0xfffffffc, 0x10, 0x3ff, 0xff, 0xfffffff3, 0x6, 0x4, 0x8, 0x14, 0x9, 0x3, 0x4, 0xf6a1, 0x10000002, 0x0, 0x550, 0x100, 0x1ff, 0x5, 0x9ae, 0x8462, 0x7], [0x7, 0x80000000, 0x6, 0x6, 0x7fffffff, 0x4, 0xf, 0x5, 0x9, 0x8, 0x388, 0x5, 0x3, 0x8, 0x0, 0x18000000, 0x6, 0x6, 0x10000, 0x7, 0x8001, 0x200, 0x2, 0x2, 0x3, 0xfffff800, 0x7ff, 0x6, 0x9, 0xffffffff, 0x5, 0x7eb7, 0x59, 0x12b0, 0x5, 0x80, 0x8, 0x0, 0x1000000, 0xfffffffd, 0x9, 0x1, 0x1, 0xc, 0x25c1, 0xf256, 0x2, 0x3, 0xbc9, 0xbd2, 0xa656, 0x6, 0x6, 0x8, 0x9, 0x7, 0x46b7c467, 0xfe4, 0x6, 0x1000, 0x884, 0x1, 0xfffffff7, 0xffffff7f], [0x5d, 0x9, 0xeab4, 0x2, 0x5, 0x9, 0x7, 0x3, 0x39, 0x95, 0xffffffff, 0x0, 0x6, 0x3, 0x200, 0x8, 0xdcc, 0x0, 0x3, 0xfffffff3, 0x0, 0x38000000, 0xffffffff, 0x4, 0xa, 0x0, 0x2, 0xf735, 0x6, 0x14, 0x5, 0x0, 0x7c, 0x7f, 0x3, 0x1, 0x80, 0x4, 0x2, 0xffff971c, 0x6, 0x9, 0x8054, 0x3, 0x1, 0xf049, 0x3, 0x4, 0x80, 0x3, 0x9, 0x80, 0x3, 0x6, 0x0, 0xfe5d, 0x1, 0x2, 0x8, 0x2, 0xd55d, 0x7, 0x4, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) (async) syz_io_uring_setup(0x44cf, &(0x7f0000000500)={0x0, 0x1ff5d, 0x2000, 0x2, 0x291}, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 43.891696224s ago: executing program 3 (id=265): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000011c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4000000000a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x10002000, &(0x7f00000000c0)="8774bc1ac94e6beb368ba3ce7f244c35fb455bf74719c558931832dd667dc84f1282c902453724b7413d8356b6441024cdf82bd9cf669ff9130ca7069c1382fd79392c08df3a0d3d08b9f29a3e62ed30c6e28719ff5463f38445d6c9981d64ea68c94d6ed63d1e2db991db2b3d28cf46afde4b89014dab27512c9a51ccf697774a4eda4aa8ca3f0c5538cce2a17260d293def5dba49e314cecc53195f5c88be7c5819cc4d0ab76f3f32d2b8e00923afdca2d8e756906eb33a3849e7fde68371e7a384893659c3eb6c687bf0842a6f733b970f80e1c2862e4fd39cb4afb4b86f2d45bd49795c4b97d336d0a101cabe3285bb165f545098840", 0xf8, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="b20551b9bd101334faefd313e26bcaf9f5") timer_create(0x7, &(0x7f0000000080)={0x0, 0x1, 0x1, @tid=r5}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) timer_gettime(r6, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000040)={{r8, r9+60000000}, {0x0, 0x989680}}, 0x0) 43.847387996s ago: executing program 3 (id=267): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) renameat2(r0, 0x0, r0, 0x0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000940)={0x1, 0x2, "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"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x2000001, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00210000000000000000000700000016000000020000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x4, 0x90, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ae66"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6cf, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x5, 0x7}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0xa7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xd, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x8, 0x2}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x9, 0x62, 0x10, 0xc}, 0x108, &(0x7f0000000100)={0x5, 0xf, 0x108, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa3, "1e0d658045d326f1c47ede6c89e39149"}, @generic={0xc9, 0x10, 0x1, "4d49d89dd51d9ee69a20b5060d4f0af0211b91e5f4a27eff70c419f4e8d217732410a0c667fc8484a426272e995d221f6ef004802dfbd2bee6109d1bf33981e2eb244c4704ef0a65d64e066c5adffc577ee51d5dd6e1bdf9c4339d75f907dccc8ead9332c84fc6a1b35f6a3133d87eae0bacafdb418f5ebdde0a94b51271e1c89e66f0242456ad1fea983a89cfc580a95727d927e8882af26db4400614592b8d3e8f8f2ea71f80db9cc799829de7471afb2359935bb64599818a34b758107555910389f5299e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x0, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x2, 0x8800, 0x7ff, [0x0, 0xff00, 0xc0, 0xffc0]}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "af0f0273fd1aefd997891a9b8d729ccb015a9cf6e371c56869e2da3028ceae42df92f5b7f10f244d4327e1c5c2185d8c3ee5dff16f9f38c6b2c70c7b5b49b22b1e916313d043843202f56dc290bd2f16d077489149515e9061cde8c918102dd693eac3911852242ae881f7fbe31c058e3bc470303e2f3fbf50f75292e09567860830cf46eeef9ef5b7dab19a99a2b34f1e7f61824e91eaf986ba132d0377a42c9d99b79c0ca698459190440388c95173f1d2e4490e0141"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x438}}, {0x3d, &(0x7f0000000880)=@string={0x3d, 0x3, "9d9f9c573dd992666e623f7884359dcba2cb6940309fc576e1316fe1a3074daa7f3763ffd12f6162042aad2214ab671020b0ba5df8aa5cea436a55"}}]}) 43.311143344s ago: executing program 3 (id=276): prlimit64(0x0, 0x11, 0x0, 0x0) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf252b000000"], 0x14}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000043c0)=ANY=[@ANYBLOB="290000000100"], 0x29) (rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000240)) (async) r8 = dup(r1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_GET_DEVICE_ID(r8, 0x8004af70, &(0x7f0000000140)) (rerun: 32) 43.221578007s ago: executing program 3 (id=278): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup2(r2, r2) (async) r3 = dup2(r2, r2) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) (async) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x118, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x6a, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x6de}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x3, 0x0, {0x7, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x9, 0xd}}, @cf={0x4, 0x6, {0x6, 0x9, 0x9, 0x60}}, @random_vendor={0xdd, 0x3a, "1c2437cc3e7bbd7b418e50888fc6c3371939bbec0d9e71057e531258db6bd03029a2aefffcee71a939d86834d9ebf7545172ce2d44039e679809"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4a, 0x2a, [@dsss={0x3, 0x1, 0xb1}, @peer_mgmt={0x75, 0x6, {0x1, 0x1ff, @val=0x7, @void, @void}}, @perr={0x84, 0x2, {0xfd}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x5}, @peer_mgmt={0x75, 0x14, {0x1, 0x800, @void, @void, @val="24524e64cc8f69cd2953097eedb41592"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xad, 0x2}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @void, @val=0x1a, @void}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x96fe}]}, 0x118}, 0x1, 0x0, 0x0, 0x20}, 0x4000004) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r9, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) (async) recvmmsg(r9, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) (async) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) 42.376317577s ago: executing program 3 (id=284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$khugepaged_scan(r1, &(0x7f0000000080), 0x8) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0x400, 0x100, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 27.234042023s ago: executing program 32 (id=284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$khugepaged_scan(r1, &(0x7f0000000080), 0x8) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0x400, 0x100, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 2.947515347s ago: executing program 0 (id=590): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.095384387s ago: executing program 0 (id=606): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='defc/xt=\"\x00\x00\x00']) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$FITRIM(r0, 0xb701, 0x0) mmap$xdp(&(0x7f0000ac8000/0x4000)=nil, 0x4000, 0x400000d, 0x20010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x420001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x8, 0x8001], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000340)="a1984e", 0x0, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000200)="00c80207ac829700", 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4a22, @empty}, 0xfffffffffffffdd9) (async) sendto$inet(r9, &(0x7f0000000200)="00c80207ac829700", 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4a22, @empty}, 0xfffffffffffffdd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom(r8, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) (async) recvfrom(r8, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r6, 0x800448f0, &(0x7f0000000140)="8e7c29a4e2") (async) ioctl$sock_bt_hci(r6, 0x800448f0, &(0x7f0000000140)="8e7c29a4e2") sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x240088c1}, 0x2000c000) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x1, 0x100010005, 0x8, r5}) (async) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x1, 0x100010005, 0x8, r5}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x4, 0xd6, 0x100, 0x2, 0x0, 0x5, 0x8}, 0x1c) 1.609107484s ago: executing program 4 (id=620): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x80, 0x9, {0x8, 0xb, 0x41, 0x1, 0x1, 0x6, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x8, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x181, 0x3f, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x1, 0xe, {0x8, 0x25, 0x1, 0x3, 0xf, 0x3, 0x69}}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) 1.043140683s ago: executing program 4 (id=625): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000002c00)={0x0, 0x22, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002c40)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) socket(0x29, 0xa, 0x1) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2a, 0x6}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x306, 0x6, 0x4, 0xff, 0xc, 0x3, 0x8, 0x8}, @feature_unit={0xd, 0x24, 0x7, 0x4, 0x4, [0x1b, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 1.016018204s ago: executing program 2 (id=628): r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f0000000300)) r2 = fsmount(r0, 0x0, 0x9) fchdir(r2) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) lseek(r1, 0x9, 0x1) syz_usb_control_io(r4, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x7c5a, &(0x7f0000000600)={0x0, 0x4bc9, 0x2, 0x1, 0x3d4}, 0x0, 0x0, &(0x7f0000000100)) readv(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/33, 0xfffffffffffffdc3}, {&(0x7f0000002680)=""/100, 0x64}, {&(0x7f0000002700)=""/164, 0xa4}, {&(0x7f00000027c0)=""/53, 0x35}], 0x6) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400e8c480000000000"], 0x0, 0x0}) r6 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) lseek(r3, 0xfffffffffffffffa, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) socket$inet6(0xa, 0x5, 0x40000000) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080)=0x1, 0x4) 787.553322ms ago: executing program 1 (id=629): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000}, 0x18) openat(r0, &(0x7f0000000100)='./file1\x00', 0x503140, 0x102) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 787.131502ms ago: executing program 1 (id=630): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) landlock_restrict_self(r0, 0x0) truncate(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0) 786.882392ms ago: executing program 1 (id=631): recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f0000002100)={0xa, 0x4e20, 0x93ad, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000002140)="d8df6ae5552ca76ebdaf2cb753eb759c50631e4531332c16b037e72fd56fcafc7ef13239ff0fe4fdb9977189e357185a1848df6584d53d27904b324348ccfc93c585b82a5f09086f7ac67f6fd943dc0a7f8b1d6e14e5485f0b7378364203ec4a46e9e06bb508d4b3bd512f1c7ea69f242d2dfdf0dba1e720d126a277a1fde8ab7e9ad2b4a2a1237345c45b0ac09a91e9e5df99d2ec3c2f0e066bd1e999af31178978a65ed6ac80209d6cfc976ff30cb5dffa59e5b028f8", 0xb7}, {&(0x7f00000024c0)="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", 0x269}, {&(0x7f0000002300)="3aed2b042b0dc3417cec12cd9ed5bd2977df5af45d545b70ce2c6a27bc845d15f06b88b31ed367bb4e4cac8160f3637bb092581f469309e1af5c43d18aeb2d1a3e8765bb87a5f6195f0dc55faaf5ba15669b72d1e56fe5fc6f0884d8f6961b54fe419ac80f8276313e49fd6fb536d0b97b0d33ae3ee8ae66d662a5f362a3b942a88712c6f0653ae20f21dac5df68d0e2f5196c89b8213d2332b1485a5c93ca85fd8b7abbf7e2008b4d960316b9c239114c45c2ca39019a4d9365643e8cc7380d3065ab4737db65b3bcfe3bc3dfb05120987b31c0b030596d7a3ec009ac7f1e60a8f40f42f83d72d46a0518abb03bd9b757aa6a", 0xf3}], 0x3}}], 0x2, 0x4000000) (async) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd70020000ac7b8cb0d5a258610005002900000000000a000900bbbbbbbbbbbb00000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x5) (async) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1300) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000002080), &(0x7f00000020c0)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x7, 0x80, 0x5b, 0x4, 0x7b, 0x551ffab2}, 0x1c) (async, rerun: 32) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000180)=0x40) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ec7291fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31d7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440e06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a41fc93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2910659dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df7072dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a3167e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c5940900000000000000773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49656b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES8=r5], 0x18, 0x4040095}}], 0x1, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendto$packet(r3, &(0x7f00000003c0)="fc", 0x6, 0x24042881, &(0x7f0000000c80)={0x11, 0x5, r8, 0x1, 0x9}, 0x14) 786.736012ms ago: executing program 1 (id=632): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340)="64c25baba3", 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 702.780335ms ago: executing program 1 (id=633): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1014, 0x55, 0x1, 0x3, 0x0, {0xa}, [@generic="1521d0879863c25a776c476ba97a6090dc10739f234b03ef71c09d64d9eb1ad64d7f1a92cebc9719355a9edc7bae21e16e6d88427a3591101b1b249d673e97ec0f23c49125fa2478d40432c562cf31435897f12cbbe930d27212c88cfd02b5b92ea55ac483b299ab00567cc08ce4ff6de740acbd74604fa322abbaebeae089047c616d310ff684febce191d19b7ab832439d966079e6ed53a0b086b51a0539254a8c8b968ec1a2909124ffc1fdd5ff75135825c417c0d342e94061891ea143133aa7ea97580235f3bd56b17fc96556d7a8f9a36244f0e6b83491e1b324ede043d90269fea05b3b0f588c4e47ef59861169305a32c1bd24a1f0fe36282802a62a3916b805f689495fc854e9690fcf30f67ee5318c2ae28dda87362bb89a67a1c9e40ab019c40ccf5a0c73420611d001b4976bc1f0d354e94e8f1db02ab88bb00680242506347bd688f9775c7664f04d779cd51923420654b70eb9d73a7b9e423ea159aaa7e92cf068e9e9836b2d11dd5632175dc6db6a41bf92af355c90243206a94d002191fdde2b309d9c9c80f956c15f124007c0a610dd604cb5df47879da80b5e21c676ed31e015c1acb3fb3acac6c35fd7663e3a61c74d79326be2cf391652148c9f968761a1e2955e1a83cc640ea0bb90843b1f35389e7dd3bb76b9b839d5c4d9f57fee516191faacc8306951b86fef66a827c94d117de002a274426ff87f0263ac3d89bb9c2c671cc1b839d1781ab89e0f55fd862ba6f1617eda7458a9b23728f0b8f608aa6d647adda1352d57a2b62f4ff36d7504b004e768954fa665ef744c55f58587ad7379762935d19c189641ba77bb6e79b4a36c70715c7afe62996d5cb1860461cb24552481b4db2f1f4e14f8cef3ec1b6229874d5d5648e82bd54ca92b827384761a308bb00bb105a174318f7b56220dfa47553b03da18e666e523a36501e41fe5e2931217ae79cbf540fc8addb0a6bfa4f2dd4ea9b6b1f4f86b1e235b18d7e6621dc939be4fe13d2056ffd20000e62b834d9d8148fa0cd1e0700eeda07abf1df2192f4f6f352eecfcd66b2552db6d41f21118b0c7cd698e9c45fa86f569c95ade357ca2ff7874b88251a5c77b6d11cca5dd8ef13b63fb4d0b200550f7128bf1448258712be4304b00a356996de09faf3c3c4e189ecb8278065a0bb4cfaa2e7dcd90ff4cd6c11b6010964aa60d121a2677aca9a29f2cdcfcd62e4e47b10005cd42088dd580418c707d47cbfa879314dee8014f0ebee856a41429ff2ebddac34728d56b8d5f2d57fd7f96973d7d806cc11394cb5b443bbbb786c69938c3f72dab0771a3cba0f32790833bfe46e56c569c2d9eb9cd8db6f1b76d4eeaa47309a00fa88d76487cba93072610c9e4ffc6599778115226cae282e7e66d572063fede125c21e939014250ce30f2b016ad468b9c7e3ecf0e97f7d2d6f85af8319b3f0d4e57b3bdcbab02982f51fb1d60c42fcb90a75867e784cfb18a0a97dd455d03ceb2af3a3ba87507c70aedc6b08a8c1647c390c15613e8e59c6920c57c4b195b31004137e91648071d3ae7f6c1b4db99f740faae93a2c0183114e013f9f7e397ceb653dfc86b5ad9fd54168ecd5e9caf87317433690baff49a3523b46fbbb27e9cbf4b4d7c2daff416ae47ca594e222b4fc7f82dbcd322afd4bdecf3e2ec3202071a348d0af49016d8d44ec88011f33270e14f74e215281af28929f098b0cde9cd21c182c23b8269e510058247b897602403382fdbd39fc4a3bedc73baf567724ad0b2a89d02317be8235b18fdd377860cd959b15ded131a28b6b4549515189266707f1151e7bd10c2c816f4e4d5e242ffb240340267815df6919b6f1f78799c162dad71922637650cd2e1096ade45442e52ff4cbb83a381d8a77afcb450044b3439ddbf11c54916d199408ceacf27869d23115ae8b0e4b295b97fe27db71ea4f4d6757750931a35d1b46586da7564f5647393e1d103ce562608741cdfc57028a1cbb3cca595efe0409bd8794edc9b512ed8fb9a651af9316c1c09527e29f851a81d57f87992943e10e553379af0ff4c297ec6de2faa206c12ae039c0f3212f900b2e9dc496356b58a6fd1f5eb1f43e1c8b52310918124d80ef93a05b005925aa84dd8a3bd3a01f7c1225473b03775d3335e647d03e13eed336ee9f550c0caa432144afd7dfde13bababf2b29b7b816e2f930f38dfdf9daec72f16019958de8252a73fb77d7e2215641da164541f3fd3348e3f00985c08ba4cf3403929cedc24568a74e986bdc5f35009992a12629790e8b378adcea8bd1cedc9f339be860e35d4f4d7cf2694b27ce2e7b59c4241e6e9349b2edd5fd462ccc0db4c42cb387833a713adcf8a460a956014cf25a66bdcb8ec318d09e08d7a8c4a606055c56738cd527010e4b1ae22166c5413ca0659c3f091a3cbea9a3aabc652f0f84d2e7e88cd027d5e8e498a831dc0293dd1faace1992a74e653e8f957f1ebae2440b09d9edfa013029f3e40753a8655c49353d230e222a17a9477e0e9d6b5ae163760e23a7dee68ec6f7194f716c281376a0644f33b8581882d13a517d3c5d59c8a6268644f90f016d274614882bfcdb25db931b903868ad71b8b1c42c5d441905b5abb9189a3e637dc02cad8f0dda70b3d0da055e9fdb03cd1d69ad8eeaa045d2f402bf5fd0167c5ca948bb87fe404bed80ea0c90de71528d936a7f1a90d7d57d414bcdefc17e20dc00397396e9ea2e4b621117ca685a76069522dc7e33dda108375abb710f2c9f19ecf2aa44b258bed4a24edeed5f063caf8959561b8d0eb36908124fdb7c6071b1b7eb46f7c7ab877d2c29373ec41965f2f9217e0a92635451c966bd48265dd418ce8d7da988cc328721d4befcdb89bae68ba3872e25790a842bd4c23d9ff7999f4270b1ef9bb08e6b1285f2f64fcb4461c1a920009c4c51e469c193df3ed6f5dd1906a5ba24396ca87aaa64a2d05b301a7539839577cf9d262624c8b61505e2e94558c1404e829b44193cf8ec5e808643bbe41b70c5fc79c5cfed84587fd48adb9ceb7d6839a9cb7f9aac199249010a0a4a9313a80affb055730ed231bb527cda55758bd55c6afe2abf4548f128b57e2a51d0c518561dedc0e85fd35d230fa91e726182118edd70523e60c3c9fc46b77bf468c47911519c4abd03322c3cac833f08c4711439f868779d2680e3252f5e47befe0803058c6fb420a3ac61b00ee65e9759cad41bef65aec877223c0b3f2e62219636424f9ec19edda5619413dc8805f17dc4fde366a5aae9c803cb57dca64332ed3d271eab356142fb12d32e15a4390a69dafc133019619f27eb36768d4c245cbe85b465067d77a254886ea40085240e8c9d2c0ad408d2635932ead02cbf3a5743f62c9b2fe601524cd4d7c2ed478d5cfb5587a8e9632a3a1f113ca098576c05fe68b9b5837271a620f102915a7e31506f2b4f94e6159bf88eaf1a9a58c4258c29a1d9196570b3c6685dd33f9c233e46ff5fd2f2d6d1be9afdbe633826ccb6781fe07cc1d4a06454fdb0a3e0789350b4bff0c2c96d3f2d34b99410ad9f3a26a987df01fc0f65b9c35b16525145fb6e812294f1fd23c7d1c5386e14cc26158b8173d80ea1bcf7ad0983e83168aa491b54cbeae8ab0e6363ddac82b0aa508c015f478941fca6cfbdcd3993703bc99e6e2e89e504c29618518a7a39e6ec8408ad5a78747d6f7791e2c84c7001845aa60ab1da580e70978daf5c615163e86ef700c785bac295156834b72596d2d279bbf1bb193391dd298af89755331493175f09267d0bf1c3facddcfbcdee500396757062aba88cf3123bfd1c0ac3d16dd164e36ad404a31f321c4bc0c144b4107d32198e5d79e05ba4b989e0cf54bc63b5dfef12627025cf7cac919c1f463e47c30269a1f5882a169d444b106e8ff9a4fa82ede3d857fbb279c2b22c16eb5f632a699fac256d2b7cea3a24ff0c4c3f17cf605d3f464afb0fdae4b031a8959124653487ed138556dc121f260ddd5de47810164d7429450c3a474910770fd8cf6d2d8f94c5d06bb34a652e6cd44e1cb8af9a014d6c369cea81325a490536ebe9e5d2e2aff7254c805cc5165a59fa888b40b2ccd7a0e82ca79d32366b44bdf565306074e87e9c739e294ab041fcbaf0eeaf88ccfedee830523d128addf3aa28512a47405972f1791f31ed6c5d04e6f464ed5fcad22ef8600d937099ee41947977d1e2f5637008000f7728047fa4f3ac24e0dfb7996d848a051041b60bd6b5971799ab433cea77ea190f3296d6a0bd4bf6c69f2f18680abf3dbd890eea6c11712154132be34d1f27fcd1d815cb30cb2175b8374fe5b94e0e7690ed9df08d5cef8bdb3b0db74c9f193dc1e1998fade00bddc7e12bbca7dd80573b8c866423be714e6d0b70db0d64ec0e6979648dca1b20865e9744392ca4e257c2b01ee1b7eaa07e0eaaf8927ff1288a1e49141f71734ba8100b5e7413df33fe4d54622fee322be12599ce21a38bc0d7a5f0a60417d77e9fc5cc71c42ff7de7044f8f87d8b903b2cb83df6fb78c3ed02f8557415582d9114e532e4aac1e77ed886c3c034a974f888cf935a7cbc86f6d0a5112fe64fa2f851d6d8e3ccf92aca9524df5cbba54bd68eaeacc162a29116673e9b4a4d5109ca2a3ef8b469b9e679be13cd0f92949f0d5f9d4c1f81c40097a25fe9761af53fe2def2b90696b741b2372eee23d68c858f41f2fa50de43332e6a2b4a777ebfd2095341bb2a2019bcc4e8ba6e73359ef41e5390ca5acdb22ff796e47fc796d2a3b82638fff954a35560ae883c2b9094b56a93a0b826e06e89d05f41fcd50dfe0429b84d6ef837e8baec3855030945b81704601d54834b87a92600005c8a7ffd4c26a3f13be7424ae8980b1eff112d13e096dbcd556147a48bbb28d56355dccb9858dab6b98b632205be6e35429e795c341786e7d7d2dbc01e77dbadad2e2a2f21f0393b8c6b0b54d92e9412db7c6494450838c24bb162597cc8f3dfd5214976963a76177b9ba04ad2f35379c9794df7896af4718f42275b32f5ab9b702a04799903faaf581e3e7a241e2b22e9c7c7bf6ea7c4b1f82c76aec751296f336dd8da28ba7011aa83be52cd384ebbd1464e3446f9a2fe84f80497f3d5c41b513523e2eafae4f2bfe2b2d8715da52fe36a33b843d50c4964d33663cb5242769df76c6bc63b12caf0ade03e6d00613cefed625aed8004f34b1634d6f1e8be19fe82a725c3e4dc5139112b1907f0619c86b0ae2e7e8a83af6206e4b726e6f174738ceb383476f563118e8dec86e38dd8f4450dc76c165775bf5bfb645a8fccb749521feca7dc2782364bf6baf40cc5200fdd1c6c5b0325d309ae0e8725b0d494c8ef844c12e4ce05441fd16a37ed0decd852bce9a1c2e2b40e77146427d5eba8eddec17b989e5027562a041eda1b8c7f6ba4d3896211c38e09d4dac57104c33c42d0176ab7c07e9da5b525a1795c7608bbff0314a0b7591cd30d265f792476da062ea7580e71289bb2eeb1eb11b1e9911ae3d9b2f03a88210241a6c36023bd9ea5fe6f639b22d7c5500b9a7826027130aa6473e1fb083e0d1bcee1135cd72babb45ead346430d1c01d7b3ff19bda931c9d2411ab441785a6bc06c35b10aed4d1642d8351e6a4c37398c6ba4a17c56f3da0142190a2c817bd99f1ed17bcd6257aadf24311f11453b66de734a65082e4cfb09f0a26f117f97c0571c3afd1041d21aa7fca5882ff0451ba4bf8e71f30cfd3a5e60374e2eeb223668bc46d1550c26142a52e55328c89ac3f61992a12961b2e37573"]}, 0x1014}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 563.55773ms ago: executing program 4 (id=634): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xc5bb000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x84, r2, 0x201, 0x70bd2e, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x5b, 0xe, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "1f20bffd09f49342914f45644d19c747", "8a14d9d2a80d3ec84d016bfb376d2afbf334794240d0df30be1d35341d7109e3", "b18ff4c3b578f2fc53abbabe671eef9214f3ea7825efa98ef89bc1e4ef7b1c41"}}]}]]}, 0x84}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='.@,\x00') (async) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="65000000000000000500000000000000200000000000cfa7"], 0x20, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044080}, 0x2004080) mprotect(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000000) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004580)=""/4104, 0x1008}, {&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000001780)=""/4066, 0xfe2}], 0x5}, 0xef6a}], 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7721646edb00", @ANYRESHEX=r3, @ANYBLOB=',privport,noextend,version=9p2000.L,access=user,posixacl,cache=mmap,msize=0x0000000000000095,posixacl,appraise,audit,\x00']) 491.551852ms ago: executing program 4 (id=635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x8000) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/4096) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='macsec0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5898c2, 0x0) ioctl(r3, 0x541b, 0x0) ioctl(r3, 0x5451, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001000010000100ffffffff00000000fe880000000000000000000000000101ac1e0001000000000000000000000000000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x800) 491.313292ms ago: executing program 4 (id=636): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) io_setup(0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 488.978053ms ago: executing program 2 (id=637): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009e, 0x0, 0x20}]}) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f00000001c0)=""/134, 0x86}) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000007000000860a00000003070419099404"], 0x38}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) ioctl$SIOCSIFHWADDR(r9, 0x8947, &(0x7f00000002c0)={'macvlan0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 462.806633ms ago: executing program 2 (id=638): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [], {}, [{0x8, 0x7}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) 441.994575ms ago: executing program 2 (id=639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0xb, {{0x2, 0x4e23, @multicast2}}}, 0x88) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r4, 0xf28c1000) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0xe, 0x9, 0x2, 0x0, 0x2, 0xffffffff, 0x60000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 379.531896ms ago: executing program 2 (id=640): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x5, 0x3}, 0x20) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x800, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7fbaf3e5e4cfdd34, 0x12, r0, 0x100000000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 378.461086ms ago: executing program 2 (id=641): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4096, 0x1000}, {0x0, 0x46}], 0x2}, 0x1d}], 0x2, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r2, 0x0, 0x0, 0x2042, 0x0, 0x0) read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) 329.732408ms ago: executing program 4 (id=642): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c2680, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x5) ioctl$BLKPG(r1, 0x1269, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) preadv(r3, &(0x7f00000001c0), 0x100000d5, 0x2, 0x3e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000104050000000000000000000c000006080003400000090800054000000400050001000400"/52], 0x34}, 0x1, 0x0, 0x0, 0x40841}, 0x44) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x40010, &(0x7f0000000140)={0x11, 0x19, r9, 0x1, 0x0, 0x6, @random="0704a17ce972"}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="636f422b148697ea415247", @ANYRES16=r11, @ANYBLOB="c9472bbd7000fbdbdf24150000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102000000ffcc171c0440000102030109026e0003017f8006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a252501040000020000f803020000010230000904020101010230000905820900027409b40a2525ffffff7f01e10b", @ANYRES32=r10, @ANYRES16=r0, @ANYRES16=r7], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 190.220063ms ago: executing program 1 (id=643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.57733ms ago: executing program 0 (id=644): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001180)={0x1, 0x0, 0x1000, 0xc0, &(0x7f0000001000)="99f7bdfe689c82268cde07a7fffccd576f699f5a533ed2a99829d25759a7fd08d3748f85ddc2d8c6823e7ceef7e8e24272073d5805f9c27e66d7948365d5a337e9df63c98002e385fda73beaf02b9e5a63c52649184261b1d0755246fcea055d18a8da9b96b673a0d388325e192fdeb99f8d1eb750a5ff3a80ce888935d8af133bd2b1d6df14469801c1f54bc3427e65738636c839c895e6801843a844ea5e866f4df849840d5def3a2ae75a27c47293126779a16d5fb8fcd689d81dd1681040", 0x9a, 0x0, &(0x7f00000010c0)="862df6190c8e0b2327184c9cec9a111183fb172a319e5a9797eb6852133e2658112fd6014b8236f74549186126db546ebe3697cac81cc049f587cfe926bba4b0411cbe0e167869b2b2692ba351b97fee60079f0b58006fcfaf6569f67f7ee25b595769970c134e831d107fc427aa0aef5e8dfa892b047e616eb637e51638fdf8155efdeb0bf7d1aa13127dd93b0d9875c7aa5bb96c3d28be2bb9"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)=0x40) 3.17982ms ago: executing program 0 (id=645): mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/21) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'veth1_macvtap\x00', 0x7f}) 2.848899ms ago: executing program 0 (id=646): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x7, 0x5fc9ca3c, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7840, 0x80, 0x1, 0x9d}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={r1, @multicast1, @loopback}, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x18, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9cbbefce3babab}, 0x0) close(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000180)={0x8000, 0x4, 0x4, 0x8001, 0x12, "ca02959273afd722"}) socket$inet6_udplite(0xa, 0x2, 0x88) 0s ago: executing program 0 (id=647): sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000004040)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect$uac2(0x0, 0x9d, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x426}}, {0x28, &(0x7f0000000080)=@string={0x28, 0x3, "47ab655f57ca9a51ad1f6f8e25608b23bf610c6acbcb8410eb932722f69bc6fe4fb68468175b"}}, {0x15, &(0x7f00000000c0)=@string={0x15, 0x3, "29f572424b6510cfe199a81050a6e019fb9a32"}}, {0xc4, &(0x7f0000000100)=@string={0xc4, 0x3, "ba3d188a1a09421be131720d108dd5650889bfc908e37ec06adddc680952502de07b91cf7f587a9f490b2b3cfaa2c75f4553f410ec40a21e16e67148d3b85f2e4056d91cbc80f09335b46c535724bfb990875a29a660e6c150e4bf446bc93006910e2671b9a8992052945bf72c8952e2d7cf4118d9ba4002f6d70e45a05e0a7b70f86ef0975bef4f198fc1a74df0d69b1372b383cb10e1d8853f82c13537f4b50ce95e6215329d31d929339eac667faf4334966a5098da7ef571bb4601be4f991ed7"}}, {0x4f, &(0x7f0000000200)=@string={0x4f, 0x3, "7c909ee2b4a38fbef5c588710d51d389f6b28e54c4f477e9e5b2931c8e0bbf7405803064b96a0d63b0b2a295fe4dec8deaf533d1e170b8c1abfb45ee49bf96364efa31d499248cb0e6e665e01e"}}]}) kernel console output (not intermixed with test programs): device descriptor read/8, error -71 [ 28.010382][ T306] usb 1-1: device descriptor read/8, error -71 [ 28.049245][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.109165][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.119643][ T306] usb usb1-port1: unable to enumerate USB device [ 28.199160][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 28.205690][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.216388][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.226987][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.236556][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.244790][ T45] usb 4-1: Product: syz [ 28.248990][ T45] usb 4-1: Manufacturer: syz [ 28.253664][ T45] usb 4-1: SerialNumber: syz [ 28.259310][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 28.266772][ T31] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.276883][ T31] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.286993][ T31] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.300299][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 28.308428][ T31] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 28.317761][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.325829][ T31] usb 2-1: Product: syz [ 28.330245][ T31] usb 2-1: Manufacturer: syz [ 28.334877][ T31] usb 2-1: SerialNumber: syz [ 28.369215][ T367] kvm: emulating exchange as write [ 28.467239][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.475929][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.545864][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 28.685439][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.694350][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.703915][ T45] usb 4-1: cannot find UAC_HEADER [ 28.710692][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.720907][ T45] usb 4-1: USB disconnect, device number 3 [ 28.729641][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.747863][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 28.747883][ T36] audit: type=1400 audit(1775106206.100:142): avc: denied { read write } for pid=364 comm="syz.1.19" name="lp0" dev="devtmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 28.778042][ T36] audit: type=1400 audit(1775106206.100:143): avc: denied { open } for pid=364 comm="syz.1.19" path="/dev/usb/lp0" dev="devtmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 28.803036][ T36] audit: type=1400 audit(1775106206.100:144): avc: denied { ioctl } for pid=364 comm="syz.1.19" path="/dev/usb/lp0" dev="devtmpfs" ino=442 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 28.805663][ T375] process 'syz.0.22' launched './file1' with NULL argv: empty string added [ 28.828816][ T36] audit: type=1400 audit(1775106206.110:145): avc: denied { ioctl } for pid=364 comm="syz.1.19" path="socket:[4411]" dev="sockfs" ino=4411 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.864315][ T36] audit: type=1400 audit(1775106206.160:146): avc: denied { execute } for pid=373 comm="syz.0.22" name="file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.887806][ T36] audit: type=1400 audit(1775106206.200:147): avc: denied { setopt } for pid=373 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.907889][ T36] audit: type=1400 audit(1775106206.200:148): avc: denied { mount } for pid=373 comm="syz.0.22" name="/" dev="ramfs" ino=3471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 28.931676][ T36] audit: type=1400 audit(1775106206.220:149): avc: denied { execute_no_trans } for pid=373 comm="syz.0.22" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.955307][ T36] audit: type=1400 audit(1775106206.250:150): avc: denied { ioctl } for pid=373 comm="syz.0.22" path="socket:[3470]" dev="sockfs" ino=3470 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.989164][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.139209][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 29.146554][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.155327][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 32 [ 29.165481][ T9] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 29.176496][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 29.185849][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40 [ 29.195338][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.203435][ T9] usb 3-1: Product: syz [ 29.207733][ T9] usb 3-1: Manufacturer: syz [ 29.212685][ T9] usb 3-1: SerialNumber: syz [ 29.218780][ T371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 29.282207][ T36] audit: type=1400 audit(1775106206.640:151): avc: denied { write } for pid=382 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.323571][ T387] netlink: 37 bytes leftover after parsing attributes in process `syz.1.27'. [ 29.336691][ T390] FAULT_INJECTION: forcing a failure. [ 29.336691][ T390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.347333][ T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 29.349859][ T390] CPU: 1 UID: 0 PID: 390 Comm: syz.3.28 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 29.349889][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.349901][ T390] Call Trace: [ 29.349907][ T390] [ 29.349915][ T390] __dump_stack+0x21/0x30 [ 29.349944][ T390] dump_stack_lvl+0x140/0x1c0 [ 29.349967][ T390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.349991][ T390] ? _parse_integer+0x2e/0x40 [ 29.350021][ T390] ? kstrtoull+0x13b/0x1e0 [ 29.350041][ T390] dump_stack+0x19/0x20 [ 29.350063][ T390] should_fail_ex+0x3d7/0x530 [ 29.350087][ T390] should_fail+0xf/0x20 [ 29.350108][ T390] should_fail_usercopy+0x1e/0x30 [ 29.350132][ T390] _copy_from_user+0x20/0xa0 [ 29.350149][ T390] ___sys_sendmsg+0x1c7/0x370 [ 29.350175][ T390] ? __sys_sendmsg+0x2a0/0x2a0 [ 29.350199][ T390] ? proc_fail_nth_write+0x184/0x220 [ 29.350222][ T390] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 29.350248][ T390] __x64_sys_sendmsg+0x1fb/0x2d0 [ 29.350273][ T390] ? fput+0x1a4/0x240 [ 29.350292][ T390] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 29.350316][ T390] ? ksys_write+0x1f3/0x260 [ 29.350342][ T390] ? __kasan_check_read+0x15/0x20 [ 29.350367][ T390] x64_sys_call+0x2a4c/0x2ee0 [ 29.350393][ T390] do_syscall_64+0x57/0xf0 [ 29.350419][ T390] ? clear_bhb_loop+0x50/0xa0 [ 29.350436][ T390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.350461][ T390] RIP: 0033:0x7f68ac59c819 [ 29.350479][ T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.350494][ T390] RSP: 002b:00007f68ad41e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.350516][ T390] RAX: ffffffffffffffda RBX: 00007f68ac815fa0 RCX: 00007f68ac59c819 [ 29.350530][ T390] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 29.350543][ T390] RBP: 00007f68ad41e090 R08: 0000000000000000 R09: 0000000000000000 [ 29.350555][ T390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.350566][ T390] R13: 00007f68ac816038 R14: 00007f68ac815fa0 R15: 00007ffda4329238 [ 29.350582][ T390] [ 29.360964][ T387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 29.372981][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.602938][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 29.613135][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 29.627471][ T9] usb 3-1: invalid MIDI in EP 0 [ 29.634724][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.645389][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.654079][ T10] usb 1-1: SerialNumber: syz [ 29.660787][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.673097][ T9] usb 3-1: USB disconnect, device number 3 [ 29.682753][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.872989][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 29.896959][ T10] usb 1-1: USB disconnect, device number 6 [ 29.951018][ T407] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 29.958888][ T407] netlink: 17 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.249146][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.399127][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 30.407809][ T422] FAULT_INJECTION: forcing a failure. [ 30.407809][ T422] name failslab, interval 1, probability 0, space 0, times 1 [ 30.411665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.420971][ T422] CPU: 1 UID: 0 PID: 422 Comm: syz.1.40 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 30.421000][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.421012][ T422] Call Trace: [ 30.421018][ T422] [ 30.421025][ T422] __dump_stack+0x21/0x30 [ 30.421054][ T422] dump_stack_lvl+0x140/0x1c0 [ 30.421076][ T422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.421100][ T422] ? release_sock+0x171/0x1f0 [ 30.421121][ T422] dump_stack+0x19/0x20 [ 30.421144][ T422] should_fail_ex+0x3d7/0x530 [ 30.421167][ T422] should_failslab+0xac/0x100 [ 30.421187][ T422] kmem_cache_alloc_node_noprof+0x45/0x420 [ 30.421212][ T422] ? netlink_data_ready+0x20/0x20 [ 30.421234][ T422] ? __alloc_skb+0x108/0x370 [ 30.421255][ T422] __alloc_skb+0x108/0x370 [ 30.421275][ T422] netlink_alloc_large_skb+0xf7/0x1b0 [ 30.421307][ T422] netlink_sendmsg+0x594/0xb10 [ 30.421332][ T422] ? __cfi_netlink_sendmsg+0x10/0x10 [ 30.421357][ T422] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 30.421384][ T422] ? security_socket_sendmsg+0x3d/0x100 [ 30.421404][ T422] ? __cfi_netlink_sendmsg+0x10/0x10 [ 30.421428][ T422] ____sys_sendmsg+0xa8c/0xae0 [ 30.421453][ T422] ? __import_iovec+0x5ad/0x7c0 [ 30.421472][ T422] ? __sys_sendmsg_sock+0x50/0x50 [ 30.421497][ T422] ? import_iovec+0x80/0xb0 [ 30.421515][ T422] ___sys_sendmsg+0x2a6/0x370 [ 30.421540][ T422] ? __sys_sendmsg+0x2a0/0x2a0 [ 30.421564][ T422] ? proc_fail_nth_write+0x184/0x220 [ 30.421586][ T422] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 30.421612][ T422] __x64_sys_sendmsg+0x1fb/0x2d0 [ 30.421637][ T422] ? fput+0x1a4/0x240 [ 30.421656][ T422] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 30.421681][ T422] ? ksys_write+0x1f3/0x260 [ 30.421706][ T422] ? __kasan_check_read+0x15/0x20 [ 30.421731][ T422] x64_sys_call+0x2a4c/0x2ee0 [ 30.421757][ T422] do_syscall_64+0x57/0xf0 [ 30.421782][ T422] ? clear_bhb_loop+0x50/0xa0 [ 30.421800][ T422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.422038][ T422] RIP: 0033:0x7f9ed4f9c819 [ 30.422057][ T422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.422073][ T422] RSP: 002b:00007f9ed5ebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.422095][ T422] RAX: ffffffffffffffda RBX: 00007f9ed5215fa0 RCX: 00007f9ed4f9c819 [ 30.422109][ T422] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 30.422122][ T422] RBP: 00007f9ed5ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 30.422135][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.422147][ T422] R13: 00007f9ed5216038 R14: 00007f9ed5215fa0 R15: 00007fffbd6aa728 [ 30.422163][ T422] [ 30.713191][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.723605][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.733534][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.742961][ T9] usb 4-1: config 0 descriptor?? [ 30.756327][ T9] hub 4-1:0.0: USB hub found [ 30.794893][ T427] loop7: detected capacity change from 0 to 7 [ 30.949520][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 30.950123][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.966994][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.139189][ T45] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 31.150147][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.158691][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.158786][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.168924][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.185204][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 31.191562][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.220337][ T9] usb 4-1: USB disconnect, device number 4 [ 31.290370][ T45] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 31.300653][ T45] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 31.311643][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.499386][ T306] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.650476][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.658839][ T306] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 31.670232][ T306] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 31.682675][ T306] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 31.691915][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.699994][ T306] usb 1-1: Product: syz [ 31.704385][ T306] usb 1-1: Manufacturer: syz [ 31.709129][ T306] usb 1-1: SerialNumber: syz [ 31.920834][ T306] usb 1-1: Can't get UAC3 power state for id 10 [ 31.928185][ T306] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 31.937564][ T306] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 31.949052][ T306] usb 1-1: USB disconnect, device number 7 [ 32.323915][ T460] netlink: 'syz.3.55': attribute type 5 has an invalid length. [ 32.331809][ T460] netlink: 'syz.3.55': attribute type 5 has an invalid length. [ 32.339461][ T460] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.55'. [ 32.589102][ T306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.740200][ T306] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 32.747663][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 32.757754][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 32.770710][ T306] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 32.780240][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.788459][ T306] usb 4-1: Product: syz [ 32.792707][ T306] usb 4-1: Manufacturer: syz [ 32.797450][ T306] usb 4-1: SerialNumber: syz [ 32.802978][ T306] usb 4-1: config 0 descriptor?? [ 32.809402][ T306] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 33.014226][ T306] usb 4-1: USB disconnect, device number 5 [ 33.028056][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.219124][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 33.349091][ T9] usb 1-1: device descriptor read/64, error -71 [ 33.589098][ T9] usb 1-1: device descriptor read/64, error -71 [ 33.759082][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.829169][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 33.910273][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.921602][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.931877][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 33.931967][ T306] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 33.946505][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 33.946521][ T36] audit: type=1400 audit(1775106211.300:185): avc: denied { mount } for pid=484 comm="syz.2.64" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.950212][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.959185][ T9] usb 1-1: device descriptor read/64, error -71 [ 33.978130][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 33.978158][ T306] usb 4-1: SerialNumber: syz [ 33.983843][ T45] usb 3-1: can't set config #1, error -71 [ 34.014613][ T45] usb 3-1: USB disconnect, device number 4 [ 34.019221][ T36] audit: type=1400 audit(1775106211.370:186): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.196241][ T306] usb 4-1: 0:2 : does not exist [ 34.202843][ T306] usb 4-1: USB disconnect, device number 6 [ 34.211777][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.227863][ T9] usb 1-1: device descriptor read/64, error -71 [ 34.339180][ T9] usb usb1-port1: attempt power cycle [ 34.389108][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.539085][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 34.545661][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.553333][ T45] usb 3-1: can't read configurations, error -61 [ 34.679121][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 34.689125][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.703917][ T9] usb 1-1: device descriptor read/8, error -71 [ 34.713792][ T36] audit: type=1400 audit(1775106212.070:187): avc: denied { setopt } for pid=492 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.733926][ T36] audit: type=1400 audit(1775106212.070:188): avc: denied { setopt } for pid=492 comm="syz.3.67" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.754719][ T36] audit: type=1400 audit(1775106212.070:189): avc: denied { connect } for pid=492 comm="syz.3.67" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.859085][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 34.860162][ T9] usb 1-1: device descriptor read/8, error -71 [ 34.865730][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.878286][ T45] usb 3-1: can't read configurations, error -61 [ 34.884756][ T45] usb usb3-port1: attempt power cycle [ 35.069106][ T10] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 35.109125][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 35.130252][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.147545][ T507] netlink: 'syz.1.71': attribute type 3 has an invalid length. [ 35.167183][ T36] audit: type=1400 audit(1775106212.520:190): avc: denied { append } for pid=508 comm="syz.1.72" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.194903][ T509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.203551][ T10] usb 4-1: device descriptor read/64, error -71 [ 35.210492][ T509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.220986][ T509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.229562][ T509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.249094][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.260348][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.269609][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 35.276462][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.284130][ T45] usb 3-1: can't read configurations, error -61 [ 35.369174][ T9] usb usb1-port1: unable to enumerate USB device [ 35.419124][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.439524][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 35.446225][ T45] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.453940][ T45] usb 3-1: can't read configurations, error -61 [ 35.459078][ T10] usb 4-1: device descriptor read/64, error -71 [ 35.460340][ T45] usb usb3-port1: unable to enumerate USB device [ 35.699112][ T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 35.803829][ T36] audit: type=1326 audit(1775106213.160:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed4f9c819 code=0x7ff00000 [ 35.827218][ T36] audit: type=1326 audit(1775106213.160:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed4f9c819 code=0x7ff00000 [ 35.850856][ T10] usb 4-1: device descriptor read/64, error -71 [ 35.851048][ T36] audit: type=1326 audit(1775106213.160:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed4f9c819 code=0x7ff00000 [ 35.881063][ T36] audit: type=1326 audit(1775106213.160:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed4f9c819 code=0x7ff00000 [ 36.062686][ T514] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 36.070565][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.099062][ T10] usb 4-1: device descriptor read/64, error -71 [ 36.209162][ T10] usb usb4-port1: attempt power cycle [ 36.559059][ T10] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 36.600203][ T10] usb 4-1: device descriptor read/8, error -71 [ 36.730278][ T10] usb 4-1: device descriptor read/8, error -71 [ 36.913656][ T518] 9pnet_fd: p9_fd_create_unix (518): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 36.916603][ T518] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 37.011328][ T10] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 37.048124][ T10] usb 4-1: device descriptor read/8, error -71 [ 37.180498][ T10] usb 4-1: device descriptor read/8, error -71 [ 37.289234][ T10] usb usb4-port1: unable to enumerate USB device [ 37.429826][ T538] kernel read not supported for file /policy (pid: 538 comm: syz.1.82) [ 37.459086][ T396] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.609123][ T396] usb 3-1: Using ep0 maxpacket: 32 [ 37.615665][ T396] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.625870][ T396] usb 3-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 37.639298][ T396] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.645920][ T396] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 37.655030][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.663702][ T396] usb 3-1: config 0 descriptor?? [ 37.669864][ T396] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 38.086915][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.095590][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.189075][ T396] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.209104][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 38.339080][ T396] usb 4-1: Using ep0 maxpacket: 16 [ 38.345982][ T396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.354639][ T396] usb 4-1: config 12 has an invalid interface number: 249 but max is 0 [ 38.363196][ T396] usb 4-1: config 12 has no interface number 0 [ 38.369605][ T396] usb 4-1: config 12 interface 249 has no altsetting 0 [ 38.377304][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 38.385721][ T9] usb 1-1: config 0 has no interface number 0 [ 38.392121][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 38.399531][ T396] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=f1.c2 [ 38.408860][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.417262][ T396] usb 4-1: Product: syz [ 38.421637][ T396] usb 4-1: Manufacturer: syz [ 38.426340][ T396] usb 4-1: SerialNumber: syz [ 38.431290][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 38.440694][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.449048][ T9] usb 1-1: Product: syz [ 38.453260][ T9] usb 1-1: Manufacturer: syz [ 38.458188][ T9] usb 1-1: SerialNumber: syz [ 38.463701][ T9] usb 1-1: config 0 descriptor?? [ 38.662568][ T396] usb_ehset_test 4-1:12.249: probe with driver usb_ehset_test failed with error -32 [ 38.673909][ T396] usb 4-1: USB disconnect, device number 11 [ 39.073127][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 39.085012][ T9] usb 1-1: USB disconnect, device number 12 [ 39.662491][ T36] kauditd_printk_skb: 12074 callbacks suppressed [ 39.662614][ T36] audit: type=1400 audit(1775106217.020:12269): avc: denied { ioctl } for pid=580 comm="syz.0.97" path="socket:[5253]" dev="sockfs" ino=5253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.694221][ T36] audit: type=1400 audit(1775106217.030:12270): avc: denied { write } for pid=580 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.729409][ T36] audit: type=1400 audit(1775106217.080:12271): avc: denied { read write } for pid=582 comm="syz.3.98" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.770659][ T36] audit: type=1400 audit(1775106217.080:12272): avc: denied { open } for pid=582 comm="syz.3.98" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.891245][ T36] audit: type=1400 audit(1775106217.250:12273): avc: denied { map } for pid=589 comm="syz.3.99" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.933689][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 39.990552][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 40.168405][ T36] audit: type=1400 audit(1775106217.520:12274): avc: denied { relabelfrom } for pid=620 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.189317][ T36] audit: type=1400 audit(1775106217.540:12275): avc: denied { relabelto } for pid=620 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.223563][ T9] usb 3-1: USB disconnect, device number 9 [ 40.266350][ T36] audit: type=1400 audit(1775106217.620:12276): avc: denied { write } for pid=626 comm="syz.0.116" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 40.528717][ T634] can: request_module (can-proto-6) failed. [ 40.783249][ T36] audit: type=1400 audit(1775106218.140:12277): avc: denied { ioctl } for pid=637 comm="syz.3.120" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 40.930597][ T643] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 41.189081][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 41.305716][ T36] audit: type=1400 audit(1775106218.650:12278): avc: denied { ioctl } for pid=668 comm="syz.2.131" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.360343][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 41.368893][ T31] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 41.377487][ T31] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 41.388137][ T31] usb 4-1: config 11 has no interface number 0 [ 41.394728][ T31] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 41.411285][ T31] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x8 has invalid wMaxPacketSize 0 [ 41.421910][ T31] usb 4-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.435430][ T31] usb 4-1: config 11 interface 95 has no altsetting 0 [ 41.443252][ T31] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 41.452704][ T31] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 41.461163][ T31] usb 4-1: Manufacturer: syz [ 41.483277][ T648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.335654][ T31] usb 4-1: USB disconnect, device number 12 [ 42.436771][ T699] kernel profiling enabled (shift: 9) [ 42.468750][ T701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 42.589145][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 42.745212][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 42.769063][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 42.798230][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 42.905014][ T45] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 42.914564][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.922879][ T45] usb 1-1: Product: syz [ 42.927243][ T45] usb 1-1: Manufacturer: syz [ 42.932138][ T45] usb 1-1: SerialNumber: syz [ 43.020989][ T45] usb 1-1: config 0 descriptor?? [ 43.037914][ T692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.047259][ T692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.340165][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.348763][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.929066][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.021415][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.030825][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.099069][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 44.107165][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 44.116873][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.125110][ T10] usb 3-1: Product: syz [ 44.129578][ T10] usb 3-1: Manufacturer: syz [ 44.135354][ T10] usb 3-1: SerialNumber: syz [ 44.140821][ T10] usb 3-1: config 0 descriptor?? [ 45.364950][ T10] usb 1-1: USB disconnect, device number 13 [ 45.766154][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 45.766175][ T36] audit: type=1400 audit(1775106479.117:12292): avc: denied { create } for pid=775 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 45.897804][ T36] audit: type=1400 audit(1775106479.247:12293): avc: denied { create } for pid=790 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.287203][ T36] audit: type=1400 audit(1775106479.637:12294): avc: denied { transfer } for pid=802 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 46.288815][ T803] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 46.493581][ T10] usb 3-1: USB disconnect, device number 10 [ 46.518944][ T809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.545410][ T809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.817843][ T36] audit: type=1400 audit(1775106480.167:12295): avc: denied { read write } for pid=813 comm="syz.0.187" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.843275][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.851252][ T36] audit: type=1400 audit(1775106480.167:12296): avc: denied { open } for pid=813 comm="syz.0.187" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.877678][ T36] audit: type=1400 audit(1775106480.167:12297): avc: denied { ioctl } for pid=813 comm="syz.0.187" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.989119][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.029143][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 47.035627][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.045762][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 47.055943][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.065334][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 47.074638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.087990][ T10] usb 3-1: Product: syz [ 47.093617][ T10] usb 3-1: Manufacturer: syz [ 47.098459][ T10] usb 3-1: SerialNumber: syz [ 47.104288][ T10] usb 3-1: config 0 descriptor?? [ 47.149420][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 47.155769][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.166465][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.177115][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.186589][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.194839][ T45] usb 4-1: Product: syz [ 47.199241][ T45] usb 4-1: Manufacturer: syz [ 47.206527][ T45] usb 4-1: SerialNumber: syz [ 47.414953][ T45] usb 4-1: 0:2 : does not exist [ 47.421906][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 47.432740][ T45] usb 4-1: USB disconnect, device number 13 [ 47.441928][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.547113][ T36] audit: type=1400 audit(1775106480.897:12298): avc: denied { read write } for pid=825 comm="syz.0.191" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 47.570644][ T36] audit: type=1400 audit(1775106480.897:12299): avc: denied { open } for pid=825 comm="syz.0.191" path="/50/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 47.616891][ T36] audit: type=1400 audit(1775106480.967:12300): avc: denied { connect } for pid=830 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.047373][ T839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.057492][ T839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.409245][ T565] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.836838][ T565] usb 1-1: Using ep0 maxpacket: 16 [ 49.848069][ T565] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 49.862978][ T10] usb 3-1: USB disconnect, device number 11 [ 49.885777][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.941611][ T565] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 50.023820][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.032436][ T565] usb 1-1: Product: syz [ 50.036628][ T565] usb 1-1: Manufacturer: syz [ 50.041638][ T565] usb 1-1: SerialNumber: syz [ 50.049303][ T565] usb 1-1: config 0 descriptor?? [ 50.247440][ T881] kvm: pic: non byte read [ 50.252321][ T881] kvm: pic: single mode not supported [ 50.252332][ T881] kvm: pic: level sensitive irq not supported [ 50.257885][ T881] kvm: pic: non byte read [ 50.269306][ T881] kvm: pic: single mode not supported [ 50.269363][ T881] kvm: pic: non byte read [ 50.279262][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.287542][ T881] kvm: pic: non byte read [ 50.292248][ T881] kvm: pic: non byte read [ 50.297091][ T881] kvm: pic: single mode not supported [ 50.297105][ T881] kvm: pic: level sensitive irq not supported [ 50.302967][ T881] kvm: pic: non byte read [ 50.314497][ T881] kvm: pic: single mode not supported [ 50.314557][ T881] kvm: pic: non byte read [ 50.324755][ T881] kvm: pic: non byte read [ 50.329554][ T881] kvm: pic: non byte read [ 50.334557][ T881] kvm: pic: single mode not supported [ 50.334569][ T881] kvm: pic: level sensitive irq not supported [ 50.340351][ T881] kvm: pic: non byte read [ 50.351249][ T881] kvm: pic: single mode not supported [ 50.352060][ T881] kvm: pic: single mode not supported [ 50.357607][ T881] kvm: pic: level sensitive irq not supported [ 50.363409][ T881] kvm: pic: single mode not supported [ 50.370336][ T881] kvm: pic: single mode not supported [ 50.376069][ T881] kvm: pic: level sensitive irq not supported [ 50.381938][ T881] kvm: pic: single mode not supported [ 50.388838][ T881] kvm: pic: level sensitive irq not supported [ 50.395546][ T881] kvm: pic: level sensitive irq not supported [ 50.403034][ T881] kvm: pic: level sensitive irq not supported [ 50.410500][ T881] kvm: pic: level sensitive irq not supported [ 50.430633][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 50.446240][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.455774][ T10] usb 3-1: config 0 descriptor?? [ 50.673744][ T306] usb 3-1: USB disconnect, device number 12 [ 50.687891][ T36] audit: type=1400 audit(1775106484.037:12301): avc: denied { connect } for pid=883 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.905106][ T36] audit: type=1400 audit(1775106484.257:12302): avc: denied { read append } for pid=890 comm="syz.3.213" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.932624][ T36] audit: type=1400 audit(1775106484.287:12303): avc: denied { open } for pid=890 comm="syz.3.213" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.448472][ T898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.457165][ T898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.621110][ T36] audit: type=1400 audit(1775106484.977:12304): avc: denied { setopt } for pid=899 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.627621][ T565] usb 1-1: USB disconnect, device number 14 [ 51.687861][ T36] audit: type=1400 audit(1775106485.037:12305): avc: denied { setopt } for pid=905 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.708511][ T906] tipc: Started in network mode [ 51.713769][ T906] tipc: Node identity 4, cluster identity 4711 [ 51.720655][ T906] tipc: Node number set to 4 [ 52.298130][ T36] audit: type=1400 audit(1775106485.647:12306): avc: denied { name_bind } for pid=916 comm="syz.3.223" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 52.609077][ T565] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 52.790578][ T565] usb 4-1: config 0 has no interfaces? [ 52.797741][ T565] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 52.807244][ T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.816885][ T565] usb 4-1: Product: syz [ 52.821523][ T565] usb 4-1: Manufacturer: syz [ 52.826827][ T565] usb 4-1: SerialNumber: syz [ 52.879912][ T928] netlink: 180 bytes leftover after parsing attributes in process `syz.0.227'. [ 52.969600][ T565] usb 4-1: config 0 descriptor?? [ 53.011721][ T36] audit: type=1400 audit(1775106486.367:12307): avc: denied { mount } for pid=933 comm="syz.1.230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.012222][ T934] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 53.035178][ T36] audit: type=1400 audit(1775106486.367:12308): avc: denied { mounton } for pid=933 comm="syz.1.230" path="/63/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.065983][ T36] audit: type=1400 audit(1775106486.407:12309): avc: denied { remount } for pid=933 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.187069][ T565] usb 4-1: USB disconnect, device number 14 [ 53.635431][ T36] audit: type=1400 audit(1775106486.987:12310): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.718438][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.729228][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.738251][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.747818][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.753259][ T36] audit: type=1326 audit(1775106487.107:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.3.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ac59c819 code=0x0 [ 53.757898][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.790022][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.798902][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.808663][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.817686][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 53.858348][ T45] kernel write not supported for file /rfkill (pid: 45 comm: kworker/1:1) [ 54.039109][ T10] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 54.109103][ T565] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.189095][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 54.270483][ T565] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.280932][ T565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.289949][ T565] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.304074][ T565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.313167][ T565] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 54.321463][ T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 54.328959][ T565] usb 3-1: Product: syz [ 54.333208][ T565] usb 3-1: SerialNumber: syz [ 54.341244][ T565] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 54.349062][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 54.357249][ T565] cdc_ncm 3-1:1.0: bind() failure [ 54.479121][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 54.484649][ T10] usb usb4-port1: attempt power cycle [ 54.500445][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 54.508097][ T45] usb 1-1: can't read configurations, error -61 [ 54.542664][ T565] usb 3-1: USB disconnect, device number 13 [ 54.639152][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 54.790472][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 54.798181][ T45] usb 1-1: can't read configurations, error -61 [ 54.804764][ T45] usb usb1-port1: attempt power cycle [ 54.829088][ T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 54.852992][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 54.875341][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.884056][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.989115][ T10] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 55.009508][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 55.015202][ T10] usb usb4-port1: unable to enumerate USB device [ 55.149150][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 55.170893][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 55.179077][ T45] usb 1-1: can't read configurations, error -61 [ 55.309126][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 55.331087][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 55.338704][ T45] usb 1-1: can't read configurations, error -61 [ 55.345242][ T45] usb usb1-port1: unable to enumerate USB device [ 56.029297][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 56.029318][ T36] audit: type=1400 audit(1775106489.387:12325): avc: denied { bind } for pid=983 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.374143][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.382834][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.400506][ T36] audit: type=1400 audit(1775106489.757:12326): avc: denied { connect } for pid=987 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.409093][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.429240][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.437556][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.446224][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.508786][ T993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.517359][ T993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.858613][ T36] audit: type=1400 audit(1775106490.207:12327): avc: denied { load_policy } for pid=998 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.858949][ T999] SELinux: failed to load policy [ 56.943056][ T36] audit: type=1400 audit(1775106490.297:12328): avc: denied { listen } for pid=1000 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.962805][ T36] audit: type=1400 audit(1775106490.297:12329): avc: denied { accept } for pid=1000 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.314520][ T1011] netlink: 'syz.3.258': attribute type 8 has an invalid length. [ 57.519116][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 57.680121][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.691295][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.707412][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 57.709798][ T1028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=1028 comm=syz.3.264 [ 57.717025][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.738641][ T10] usb 1-1: config 0 descriptor?? [ 57.758433][ T36] audit: type=1400 audit(1775106491.107:12330): avc: denied { write } for pid=1031 comm="syz.3.265" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.801044][ T36] audit: type=1400 audit(1775106491.157:12331): avc: denied { setopt } for pid=1033 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.933907][ T1042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.975656][ T36] audit: type=1400 audit(1775106491.327:12332): avc: denied { watch watch_reads } for pid=1045 comm="syz.1.270" path="/76" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.157936][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 58.171053][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 58.179770][ T10] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 58.182133][ T1060] __nla_validate_parse: 25 callbacks suppressed [ 58.182150][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 58.239065][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.255352][ T1060] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 58.340585][ T36] audit: type=1400 audit(1775106491.697:12333): avc: denied { write } for pid=1068 comm="syz.1.277" name="mcfilter6" dev="proc" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.340972][ T1071] netlink: 'syz.1.277': attribute type 27 has an invalid length. [ 58.382531][ T10] usb 1-1: USB disconnect, device number 19 [ 58.409089][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 58.425552][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.450416][ T36] audit: type=1400 audit(1775106491.777:12334): avc: denied { ioctl } for pid=1072 comm="syz.3.278" path="socket:[8666]" dev="sockfs" ino=8666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.475280][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.475765][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.482723][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.509560][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.529071][ T45] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 58.549146][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.561848][ T45] usb 3-1: config 0 descriptor?? [ 58.690314][ T1078] FAULT_INJECTION: forcing a failure. [ 58.690314][ T1078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.704941][ T1078] CPU: 1 UID: 0 PID: 1078 Comm: syz.1.279 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 58.704983][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.704995][ T1078] Call Trace: [ 58.705002][ T1078] [ 58.705010][ T1078] __dump_stack+0x21/0x30 [ 58.705042][ T1078] dump_stack_lvl+0x140/0x1c0 [ 58.705067][ T1078] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.705093][ T1078] ? check_stack_object+0x12b/0x150 [ 58.705122][ T1078] dump_stack+0x19/0x20 [ 58.705146][ T1078] should_fail_ex+0x3d7/0x530 [ 58.705173][ T1078] should_fail+0xf/0x20 [ 58.705196][ T1078] should_fail_usercopy+0x1e/0x30 [ 58.705222][ T1078] _copy_to_user+0x24/0xa0 [ 58.705241][ T1078] simple_read_from_buffer+0xed/0x160 [ 58.705264][ T1078] proc_fail_nth_read+0x1aa/0x220 [ 58.705289][ T1078] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 58.705313][ T1078] ? bpf_lsm_file_permission+0xd/0x20 [ 58.705334][ T1078] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 58.705357][ T1078] vfs_read+0x289/0xcb0 [ 58.705382][ T1078] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 58.705408][ T1078] ? __cfi_vfs_read+0x10/0x10 [ 58.705433][ T1078] ? __kasan_check_write+0x18/0x20 [ 58.705459][ T1078] ? mutex_lock+0x97/0x1d0 [ 58.705480][ T1078] ? __cfi_mutex_lock+0x10/0x10 [ 58.705500][ T1078] ? __fget_files+0x2c5/0x340 [ 58.705520][ T1078] ksys_read+0x145/0x260 [ 58.705546][ T1078] ? __cfi_ksys_read+0x10/0x10 [ 58.705572][ T1078] ? __kasan_check_read+0x15/0x20 [ 58.705598][ T1078] __x64_sys_read+0x7f/0x90 [ 58.705625][ T1078] x64_sys_call+0x2638/0x2ee0 [ 58.705653][ T1078] do_syscall_64+0x57/0xf0 [ 58.705681][ T1078] ? clear_bhb_loop+0x50/0xa0 [ 58.705700][ T1078] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.705728][ T1078] RIP: 0033:0x7f9ed4f5d04e [ 58.705746][ T1078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.705763][ T1078] RSP: 002b:00007f9ed5e9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.705787][ T1078] RAX: ffffffffffffffda RBX: 00007f9ed5e9e6c0 RCX: 00007f9ed4f5d04e [ 58.705802][ T1078] RDX: 000000000000000f RSI: 00007f9ed5e9e0a0 RDI: 0000000000000005 [ 58.705815][ T1078] RBP: 00007f9ed5e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 58.705836][ T1078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.705849][ T1078] R13: 00007f9ed5216128 R14: 00007f9ed5216090 R15: 00007fffbd6aa728 [ 58.705866][ T1078] [ 59.087986][ T1086] syz.0.281 (1086): attempted to duplicate a private mapping with mremap. This is not supported. [ 59.101480][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 59.107481][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 59.117000][ T45] usb 3-1: USB disconnect, device number 14 [ 59.406591][ T1097] tipc: Started in network mode [ 59.411892][ T1097] tipc: Node identity 7f000001, cluster identity 4711 [ 59.419453][ T1097] tipc: Enabled bearer , priority 10 [ 59.850223][ T1104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.879696][ T1104] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 59.887773][ T1104] netlink: 5 bytes leftover after parsing attributes in process `syz.1.287'. [ 59.897489][ T1104] bridge_slave_1: left promiscuous mode [ 59.903509][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.956787][ T1110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.982618][ T1110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.177100][ T1121] netlink: 'syz.0.293': attribute type 46 has an invalid length. [ 60.307085][ T1125] netlink: 'syz.2.294': attribute type 16 has an invalid length. [ 60.315112][ T1125] netlink: 'syz.2.294': attribute type 25 has an invalid length. [ 60.323143][ T1125] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.294'. [ 60.333228][ T1125] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 60.522173][ T1130] overlay: filesystem on ./bus is read-only [ 60.539068][ T10] tipc: Node number set to 2130706433 [ 60.979046][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 61.119045][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.214757][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 61.214777][ T36] audit: type=1400 audit(1775106494.567:12341): avc: denied { ioctl } for pid=1157 comm="syz.0.306" path="socket:[9359]" dev="sockfs" ino=9359 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.379063][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.415001][ T36] audit: type=1400 audit(1775106494.767:12342): avc: denied { getopt } for pid=1163 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.483447][ T1167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 61.508793][ T36] audit: type=1400 audit(1775106494.857:12343): avc: denied { create } for pid=1165 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.539073][ T306] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.644767][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.654536][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.662384][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.719054][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 61.725903][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.738018][ T306] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 61.748037][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.756683][ T306] usb 1-1: Product: syz [ 61.761282][ T306] usb 1-1: Manufacturer: syz [ 61.765922][ T306] usb 1-1: SerialNumber: syz [ 61.771717][ T306] usb 1-1: config 0 descriptor?? [ 61.777926][ T306] asix 1-1:0.0: probe with driver asix failed with error -22 [ 61.799053][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.981171][ T1162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.990968][ T1162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.999826][ T565] usb 1-1: USB disconnect, device number 20 [ 62.049063][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.168986][ T10] usb usb3-port1: attempt power cycle [ 62.509100][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.531079][ T36] audit: type=1400 audit(1775106495.887:12344): avc: denied { mounton } for pid=1179 comm="syz.0.313" path="/proc/205/task" dev="proc" ino=9142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 62.562243][ T36] audit: type=1400 audit(1775106495.907:12345): avc: denied { associate } for pid=1179 comm="syz.0.313" name="memory.numa_stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.589197][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.720052][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.959048][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.980029][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.989079][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 63.110032][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.139057][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 63.145993][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.154981][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.179059][ T45] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 63.195574][ T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 63.205153][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.219042][ T45] usb 1-1: Product: syz [ 63.223255][ T45] usb 1-1: Manufacturer: syz [ 63.229102][ T10] usb usb3-port1: unable to enumerate USB device [ 63.238333][ T45] usb 1-1: SerialNumber: syz [ 63.456459][ T45] usb 1-1: unit 2 not found! [ 63.465505][ T45] usb 1-1: USB disconnect, device number 21 [ 64.031824][ T1198] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 64.039386][ T1196] overlayfs: overlapping lowerdir path [ 64.040403][ T1198] overlayfs: overlapping lowerdir path [ 64.147052][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 64.219088][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 64.319078][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 64.327059][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.335166][ T45] usb 3-1: no configurations [ 64.345145][ T45] usb 3-1: can't read configurations, error -22 [ 64.362960][ T1211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.380316][ T1211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.380516][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.396986][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 64.408380][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 64.421097][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 64.430245][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.438374][ T10] usb 1-1: Product: syz [ 64.442871][ T10] usb 1-1: Manufacturer: syz [ 64.447606][ T10] usb 1-1: SerialNumber: syz [ 64.489078][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 64.639084][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 64.645820][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.653910][ T45] usb 3-1: no configurations [ 64.658839][ T45] usb 3-1: can't read configurations, error -22 [ 64.666839][ T36] audit: type=1400 audit(1775106498.017:12346): avc: denied { bind } for pid=1193 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.688049][ T45] usb usb3-port1: attempt power cycle [ 64.701068][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.710820][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.723735][ T10] usb 1-1: Can't get UAC3 power state for id 10 [ 64.732581][ T10] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 64.751740][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.772569][ T10] usb 1-1: USB disconnect, device number 22 [ 65.029061][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 65.053304][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 65.064708][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.076544][ T45] usb 3-1: no configurations [ 65.086584][ T45] usb 3-1: can't read configurations, error -22 [ 65.229086][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 65.249447][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 65.259086][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.267709][ T45] usb 3-1: no configurations [ 65.274659][ T45] usb 3-1: can't read configurations, error -22 [ 65.293157][ T45] usb usb3-port1: unable to enumerate USB device [ 65.397772][ T36] audit: type=1400 audit(1775106498.747:12347): avc: denied { ioctl } for pid=1220 comm="syz.0.327" path="socket:[9659]" dev="sockfs" ino=9659 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.669056][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 65.769545][ T1225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 65.830178][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.849041][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.869063][ T45] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 65.878230][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.909876][ T45] usb 1-1: config 0 descriptor?? [ 66.518381][ T45] hid-led 0003:1D34:000A.0002: item fetching failed at offset 0/3 [ 66.529274][ T45] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -22 [ 66.719801][ T565] usb 1-1: USB disconnect, device number 23 [ 66.871128][ T1238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.886562][ T1238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.079917][ T1243] overlayfs: conflicting options: userxattr,redirect_dir=on [ 67.199054][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 67.369047][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 67.380924][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 67.400732][ T45] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 67.419035][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.437325][ T45] usb 3-1: Product: 䂋ꧭ캐硟곘ꫭ앦逛輁硲◊₩笣姩㸳炣鳱⪃ᬊ뺦ʤ㩈쥇嫋ꛜ錶都챣ʶⰓ둠㷅崳 [ 67.462286][ T45] usb 3-1: Manufacturer: 㐉 [ 67.467108][ T45] usb 3-1: SerialNumber: 倊 [ 67.529060][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 67.679052][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 67.690389][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.706399][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.727574][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.756356][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.767087][ T1241] bridge0: port 3(team_slave_1) entered blocking state [ 67.774209][ T1241] bridge0: port 3(team_slave_1) entered disabled state [ 67.781327][ T1241] team_slave_1: entered allmulticast mode [ 67.789652][ T1241] team_slave_1: entered promiscuous mode [ 67.799291][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.822491][ T31] usb 1-1: config 0 descriptor?? [ 68.245055][ T31] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 68.255234][ T31] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 68.265722][ T31] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/1:0) [ 68.453712][ T31] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 68.470478][ T31] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 68.483376][ T31] microsoft 0003:045E:07DA.0003: no inputs found [ 68.490280][ T31] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 68.502676][ T31] usb 1-1: USB disconnect, device number 24 [ 69.010103][ T1248] syz.0.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.057723][ T1251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.337'. [ 69.075108][ T1251] gretap0: entered promiscuous mode [ 69.439060][ T565] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 69.620134][ T565] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.639050][ T565] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 69.650160][ T565] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 519, setting to 64 [ 69.661176][ T565] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 69.679784][ T565] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.699063][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.707454][ T565] usb 1-1: Product: syz [ 69.729053][ T565] usb 1-1: Manufacturer: syz [ 69.733827][ T565] usb 1-1: SerialNumber: syz [ 69.740127][ T1255] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 69.926274][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 69.956593][ T1255] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 69.970854][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.987336][ T45] usb 3-1: USB disconnect, device number 23 [ 69.998100][ T1255] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 70.003052][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.180429][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.190544][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.201161][ T36] audit: type=1400 audit(1775106503.557:12348): avc: denied { bind } for pid=1268 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.221908][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.231265][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.241118][ T36] audit: type=1400 audit(1775106503.557:12349): avc: denied { name_bind } for pid=1268 comm="syz.1.343" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.262462][ T36] audit: type=1400 audit(1775106503.557:12350): avc: denied { node_bind } for pid=1268 comm="syz.1.343" saddr=127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.409078][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 70.570283][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.581344][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.591153][ T45] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 70.600587][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.612944][ T45] usb 3-1: config 0 descriptor?? [ 70.629202][ T1255] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 70.636431][ T1255] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 70.772175][ T1271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.798449][ T1271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.845353][ T565] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 70.853296][ T565] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 70.861239][ T565] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 71.021546][ T45] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 71.031054][ T45] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 71.038489][ T45] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 71.045664][ T45] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 71.056327][ T45] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0 [ 71.224211][ T45] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 71.238200][ T45] usb 3-1: USB disconnect, device number 24 [ 71.991056][ T10] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 72.129151][ T10] usb 3-1: device descriptor read/64, error -71 [ 72.159139][ T565] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 72.167213][ T565] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 72.201146][ T565] usb 1-1: USB disconnect, device number 25 [ 72.207547][ T565] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 72.252228][ T1288] SELinux: failed to load policy [ 72.253954][ T36] audit: type=1400 audit(1775106505.607:12351): avc: denied { load_policy } for pid=1286 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.257921][ T1288] netlink: 'syz.0.348': attribute type 16 has an invalid length. [ 72.286186][ T1288] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.348'. [ 72.308854][ T36] audit: type=1400 audit(1775106505.657:12352): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.399073][ T10] usb 3-1: device descriptor read/64, error -71 [ 72.639047][ T10] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 72.789081][ T10] usb 3-1: device descriptor read/64, error -71 [ 73.031070][ T10] usb 3-1: device descriptor read/64, error -71 [ 73.037650][ T565] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 73.149153][ T10] usb usb3-port1: attempt power cycle [ 73.189051][ T565] usb 1-1: Using ep0 maxpacket: 32 [ 73.195452][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.216273][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.230920][ T565] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 73.240222][ T565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.250040][ T565] usb 1-1: config 0 descriptor?? [ 73.264227][ T565] hub 1-1:0.0: USB hub found [ 73.460624][ T565] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 73.499146][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 73.520200][ T10] usb 3-1: device descriptor read/8, error -71 [ 73.574144][ T36] audit: type=1400 audit(1775106506.927:12353): avc: denied { view } for pid=1296 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.607587][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 73.650266][ T10] usb 3-1: device descriptor read/8, error -71 [ 73.875540][ T565] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 73.898197][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 73.940405][ T10] usb 3-1: device descriptor read/8, error -71 [ 74.070321][ T10] usb 3-1: device descriptor read/8, error -71 [ 74.179248][ T10] usb usb3-port1: unable to enumerate USB device [ 74.189619][ T36] audit: type=1400 audit(1775106507.547:12354): avc: denied { append } for pid=1306 comm="syz.1.354" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.490590][ T36] audit: type=1326 audit(1775106507.847:12355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1311 comm="syz.1.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed4f9c819 code=0x0 [ 74.514593][ T36] audit: type=1400 audit(1775106507.857:12356): avc: denied { mounton } for pid=1315 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.547588][ T13] bridge_slave_1: left allmulticast mode [ 74.553551][ T13] bridge_slave_1: left promiscuous mode [ 74.559584][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.567296][ T13] bridge_slave_0: left allmulticast mode [ 74.573818][ T13] bridge_slave_0: left promiscuous mode [ 74.579798][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.647190][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.654443][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.661726][ T1315] bridge_slave_0: entered allmulticast mode [ 74.668191][ T1315] bridge_slave_0: entered promiscuous mode [ 74.675057][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.682242][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.689519][ T1315] bridge_slave_1: entered allmulticast mode [ 74.695885][ T1315] bridge_slave_1: entered promiscuous mode [ 74.706098][ T13] veth1_macvtap: left promiscuous mode [ 74.711736][ T13] veth0_vlan: left promiscuous mode [ 74.794917][ T1290] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 74.798657][ T36] audit: type=1400 audit(1775106508.147:12357): avc: denied { setopt } for pid=1322 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.838402][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.845670][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.853014][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.860158][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.881446][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.888980][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.898804][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.906364][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.916539][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.924013][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.949961][ T1315] veth0_vlan: entered promiscuous mode [ 74.966682][ T1315] veth1_macvtap: entered promiscuous mode [ 75.157679][ T396] usb 1-1: USB disconnect, device number 26 [ 75.158058][ T1290] usbhid 1-1:0.0: reset_resume error -19 [ 75.189128][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 75.275541][ T1329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.284223][ T1329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.339091][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 75.346592][ T45] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 75.356434][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 75.364903][ T45] usb 3-1: SerialNumber: syz [ 75.370560][ T45] usb 3-1: config 0 descriptor?? [ 75.376572][ T45] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 75.384519][ T45] usb 3-1: Detected FT232A [ 75.389750][ T45] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 75.576429][ T396] usb 3-1: USB disconnect, device number 29 [ 75.583424][ T396] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 75.593850][ T396] ftdi_sio 3-1:0.0: device disconnected [ 75.804294][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.813143][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.813922][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 75.813935][ T36] audit: type=1400 audit(1775106509.167:12362): avc: denied { getopt } for pid=1330 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.861966][ T36] audit: type=1400 audit(1775106509.217:12363): avc: denied { bind } for pid=1335 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.863959][ T1338] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 75.889349][ T1337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.900258][ T1337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.954448][ T1342] netlink: 108 bytes leftover after parsing attributes in process `syz.4.364'. [ 76.097044][ T36] audit: type=1400 audit(1775106509.447:12364): avc: denied { create } for pid=1343 comm="syz.2.365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.124061][ T36] audit: type=1400 audit(1775106509.477:12365): avc: denied { rename } for pid=1343 comm="syz.2.365" name="file0" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.179103][ T565] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 76.331057][ T565] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 76.341771][ T565] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 76.352864][ T565] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 76.362062][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.370447][ T565] usb 1-1: Product: syz [ 76.374606][ T565] usb 1-1: Manufacturer: syz [ 76.379498][ T565] usb 1-1: SerialNumber: syz [ 76.409085][ T396] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 76.419221][ T45] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 76.570193][ T396] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.570218][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.571708][ T45] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 76.582318][ T396] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.592985][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.603407][ T396] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.613323][ T45] usb 5-1: Product: syz [ 76.623793][ T565] usb 1-1: USB disconnect, device number 27 [ 76.633973][ T45] usb 5-1: Manufacturer: syz [ 76.644977][ T1364] netlink: 416 bytes leftover after parsing attributes in process `syz.1.371'. [ 76.647967][ T45] usb 5-1: SerialNumber: syz [ 76.658147][ T45] usb 5-1: config 0 descriptor?? [ 76.662093][ T396] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 76.669977][ T45] plusb 5-1:0.0: probe with driver plusb failed with error -22 [ 76.676341][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.694378][ T396] usb 3-1: Product: syz [ 76.694942][ T36] audit: type=1400 audit(1775106510.047:12366): avc: denied { connect } for pid=1360 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.698982][ T396] usb 3-1: Manufacturer: syz [ 76.723785][ T396] usb 3-1: SerialNumber: syz [ 76.729824][ T396] usb 3-1: config 0 descriptor?? [ 76.879075][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.887673][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.896841][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.905703][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.946923][ T565] usb 3-1: USB disconnect, device number 30 [ 77.000185][ T396] usb 5-1: USB disconnect, device number 2 [ 77.349139][ T565] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 77.499142][ T565] usb 1-1: Using ep0 maxpacket: 32 [ 77.506137][ T565] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.515018][ T565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.525671][ T565] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.534845][ T565] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 77.550960][ T565] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 77.560361][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.569262][ T565] usb 1-1: Product: syz [ 77.574372][ T565] usb 1-1: Manufacturer: syz [ 77.579742][ T565] usb 1-1: SerialNumber: syz [ 77.676934][ T36] audit: type=1400 audit(1775106511.027:12367): avc: denied { write } for pid=1381 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.709153][ T45] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 77.938461][ T565] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.940482][ T36] audit: type=1400 audit(1775106511.297:12368): avc: denied { create } for pid=1391 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 77.949925][ T565] usb 1-1: unit 2 not found! [ 77.970832][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.981367][ T36] audit: type=1400 audit(1775106511.327:12369): avc: denied { ioctl } for pid=1391 comm="syz.1.381" path="socket:[12982]" dev="sockfs" ino=12982 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 77.981501][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 78.010551][ T565] usb 1-1: unit 1 not found! [ 78.020717][ T36] audit: type=1400 audit(1775106511.327:12370): avc: denied { write } for pid=1391 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 78.023347][ T1394] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 78.056314][ T565] usb 1-1: USB disconnect, device number 28 [ 78.057789][ T45] usb 3-1: config 5 has an invalid interface number: 45 but max is 0 [ 78.071466][ T36] audit: type=1400 audit(1775106511.427:12371): avc: denied { relabelto } for pid=1393 comm="syz.1.382" name="cgroup" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 78.076474][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.100348][ T45] usb 3-1: config 5 has no interface number 0 [ 78.122738][ T45] usb 3-1: config 5 interface 45 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 78.134126][ T45] usb 3-1: config 5 interface 45 has no altsetting 0 [ 78.142640][ T45] usb 3-1: New USB device found, idVendor=162e, idProduct=cba2, bcdDevice=bd.d6 [ 78.152072][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.160412][ T306] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.168011][ T45] usb 3-1: Product: syz [ 78.172470][ T45] usb 3-1: Manufacturer: syz [ 78.177419][ T45] usb 3-1: SerialNumber: syz [ 78.319091][ T306] usb 5-1: Using ep0 maxpacket: 32 [ 78.325462][ T306] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.336709][ T306] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.347862][ T306] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 78.357079][ T306] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 78.365582][ T306] usb 5-1: Product: syz [ 78.369875][ T306] usb 5-1: Manufacturer: syz [ 78.377568][ T306] hub 5-1:4.0: USB hub found [ 78.390710][ T45] usb 3-1: USB disconnect, device number 31 [ 78.594951][ T306] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 78.795236][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.804167][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.849066][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 78.959143][ T313] usb 5-1: USB disconnect, device number 3 [ 78.979124][ T45] usb 1-1: device descriptor read/64, error -71 [ 79.219122][ T45] usb 1-1: device descriptor read/64, error -71 [ 79.279144][ T313] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 79.356029][ T1422] kvm: user requested TSC rate below hardware speed [ 79.429088][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 79.430704][ T1424] netlink: 'syz.4.391': attribute type 63 has an invalid length. [ 79.435472][ T313] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.442600][ T1424] netlink: 5 bytes leftover after parsing attributes in process `syz.4.391'. [ 79.451188][ T313] usb 3-1: config 0 has no interface number 0 [ 79.459755][ T1424] gretap0: entered allmulticast mode [ 79.466421][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 79.479410][ T313] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 79.488434][ T1424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 79.490960][ T1426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.516196][ T1426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.516737][ T313] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.534384][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.542602][ T313] usb 3-1: Product: syz [ 79.547049][ T313] usb 3-1: Manufacturer: syz [ 79.551681][ T313] usb 3-1: SerialNumber: syz [ 79.557255][ T313] usb 3-1: config 0 descriptor?? [ 79.568721][ T1419] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 79.598442][ T1431] syzkaller1: entered promiscuous mode [ 79.603996][ T1431] syzkaller1: entered allmulticast mode [ 79.639182][ T45] usb 1-1: device descriptor read/64, error -71 [ 79.777763][ T1419] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 79.889117][ T45] usb 1-1: device descriptor read/64, error -71 [ 79.999174][ T45] usb usb1-port1: attempt power cycle [ 80.160436][ T1447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.169205][ T1447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.194784][ T313] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.205070][ T313] asix 3-1:0.188: probe with driver asix failed with error -71 [ 80.214929][ T313] usb 3-1: USB disconnect, device number 32 [ 80.339256][ T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 80.360571][ T45] usb 1-1: device descriptor read/8, error -71 [ 80.490485][ T45] usb 1-1: device descriptor read/8, error -71 [ 80.692223][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.701501][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.739138][ T45] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 80.760159][ T45] usb 1-1: device descriptor read/8, error -71 [ 80.890658][ T45] usb 1-1: device descriptor read/8, error -71 [ 80.999218][ T45] usb usb1-port1: unable to enumerate USB device [ 81.059119][ T396] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 81.189089][ T396] usb 3-1: device descriptor read/64, error -71 [ 81.221690][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 81.221710][ T36] audit: type=1400 audit(1775106514.577:12408): avc: denied { name_bind } for pid=1461 comm="syz.1.402" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.250231][ T36] audit: type=1400 audit(1775106514.577:12409): avc: denied { node_bind } for pid=1461 comm="syz.1.402" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.274055][ T36] audit: type=1400 audit(1775106514.607:12410): avc: denied { read } for pid=1461 comm="syz.1.402" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.296312][ T36] audit: type=1400 audit(1775106514.607:12411): avc: denied { open } for pid=1461 comm="syz.1.402" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.320465][ T36] audit: type=1400 audit(1775106514.637:12412): avc: denied { create } for pid=1461 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.340859][ T36] audit: type=1400 audit(1775106514.637:12413): avc: denied { bind } for pid=1461 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.375517][ T36] audit: type=1400 audit(1775106514.727:12414): avc: denied { create } for pid=1470 comm="syz.1.405" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.377240][ T1471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.405401][ T36] audit: type=1400 audit(1775106514.727:12415): avc: denied { read } for pid=1470 comm="syz.1.405" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.408668][ T1471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.430881][ T36] audit: type=1400 audit(1775106514.727:12416): avc: denied { open } for pid=1470 comm="syz.1.405" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.485732][ T36] audit: type=1400 audit(1775106514.837:12417): avc: denied { unmount } for pid=1315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.489071][ T396] usb 3-1: device descriptor read/64, error -71 [ 81.749083][ T396] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 81.879110][ T396] usb 3-1: device descriptor read/64, error -71 [ 81.899104][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.049117][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 82.055749][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.067867][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.077105][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.085168][ T45] usb 5-1: Product: syz [ 82.089375][ T45] usb 5-1: Manufacturer: syz [ 82.094151][ T45] usb 5-1: SerialNumber: syz [ 82.099889][ T45] usb 5-1: config 0 descriptor?? [ 82.106024][ T45] smsc75xx v1.0.0 [ 82.110062][ T45] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 82.120313][ T45] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 82.129083][ T396] usb 3-1: device descriptor read/64, error -71 [ 82.249399][ T396] usb usb3-port1: attempt power cycle [ 82.260902][ T1491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.269678][ T1491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.308760][ T45] usb 5-1: USB disconnect, device number 4 [ 82.589085][ T396] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 82.610432][ T396] usb 3-1: device descriptor read/8, error -71 [ 82.729118][ T565] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 82.740613][ T396] usb 3-1: device descriptor read/8, error -71 [ 82.890516][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.901644][ T565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.911734][ T565] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.924880][ T565] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.934191][ T565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.943662][ T565] usb 1-1: config 0 descriptor?? [ 82.989180][ T396] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 83.010430][ T396] usb 3-1: device descriptor read/8, error -71 [ 83.079105][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.140223][ T396] usb 3-1: device descriptor read/8, error -71 [ 83.229149][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 83.235607][ T45] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 83.243989][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.254473][ T45] usb 5-1: config 0 has no interface number 0 [ 83.259180][ T396] usb usb3-port1: unable to enumerate USB device [ 83.260914][ T45] usb 5-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.281252][ T45] usb 5-1: config 0 interface 200 has no altsetting 0 [ 83.290046][ T45] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 83.299627][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.307892][ T45] usb 5-1: Product: syz [ 83.312468][ T45] usb 5-1: Manufacturer: syz [ 83.317201][ T45] usb 5-1: SerialNumber: syz [ 83.323094][ T45] usb 5-1: config 0 descriptor?? [ 83.353530][ T565] usbhid 1-1:0.0: can't add hid device: -71 [ 83.360191][ T565] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.369929][ T565] usb 1-1: USB disconnect, device number 33 [ 83.531317][ T45] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 83.540088][ T45] usb 5-1: USB disconnect, device number 5 [ 84.161977][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.170626][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.199497][ T565] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 84.339098][ T45] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 84.359081][ T565] usb 3-1: Using ep0 maxpacket: 32 [ 84.365874][ T565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.374491][ T565] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 84.387029][ T565] usb 3-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 84.396237][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.405015][ T565] usb 3-1: Product: syz [ 84.409315][ T565] usb 3-1: Manufacturer: syz [ 84.413920][ T565] usb 3-1: SerialNumber: syz [ 84.479284][ T45] usb 5-1: device descriptor read/64, error -71 [ 84.719065][ T45] usb 5-1: device descriptor read/64, error -71 [ 84.877435][ T1552] rust_binder: Write failure EFAULT in pid:414 [ 84.949069][ T396] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 84.969052][ T45] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.067777][ T1560] overlayfs: unescaped trailing colons in lowerdir mount option. [ 85.099065][ T45] usb 5-1: device descriptor read/64, error -71 [ 85.119056][ T396] usb 1-1: Using ep0 maxpacket: 16 [ 85.125961][ T396] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 85.138183][ T396] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.157832][ T396] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.169066][ T396] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 85.178234][ T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.196617][ T396] usb 1-1: config 0 descriptor?? [ 85.206439][ T1566] kvm: kvm [1565]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x74cb [ 85.339069][ T45] usb 5-1: device descriptor read/64, error -71 [ 85.353690][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.362735][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.449638][ T45] usb usb5-port1: attempt power cycle [ 85.511137][ T396] usbhid 1-1:0.0: can't add hid device: -71 [ 85.518841][ T396] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.528918][ T396] usb 1-1: USB disconnect, device number 34 [ 85.789126][ T45] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 85.810604][ T45] usb 5-1: device descriptor read/8, error -71 [ 85.942836][ T45] usb 5-1: device descriptor read/8, error -71 [ 85.951932][ T1578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.961240][ T1578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.189091][ T45] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 86.210495][ T45] usb 5-1: device descriptor read/8, error -71 [ 86.289069][ T65] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 86.340322][ T45] usb 5-1: device descriptor read/8, error -71 [ 86.440153][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.449199][ T45] usb usb5-port1: unable to enumerate USB device [ 86.450133][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.467849][ T65] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.477477][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.485722][ T65] usb 1-1: Product: syz [ 86.497688][ T65] usb 1-1: Manufacturer: syz [ 86.502682][ T65] usb 1-1: SerialNumber: syz [ 86.508844][ T65] usb 1-1: config 0 descriptor?? [ 86.516284][ T1586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.517660][ T65] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 86.526391][ T1586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.650107][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 86.650179][ T36] audit: type=1400 audit(1775106520.007:12463): avc: denied { create } for pid=1593 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.686572][ T36] audit: type=1400 audit(1775106520.037:12464): avc: denied { write } for pid=1593 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.717908][ T1581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.727606][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.740139][ T1598] netlink: 104 bytes leftover after parsing attributes in process `syz.1.442'. [ 86.742055][ T1581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.754238][ T1598] netlink: 9 bytes leftover after parsing attributes in process `syz.1.442'. [ 86.758936][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.768511][ T1598] gretap0: entered promiscuous mode [ 86.780429][ T36] audit: type=1400 audit(1775106520.137:12465): avc: denied { mounton } for pid=1599 comm="syz.2.443" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.781360][ T36] audit: type=1400 audit(1775106520.137:12466): avc: denied { read write } for pid=1599 comm="syz.2.443" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.808795][ T65] usb 1-1: USB disconnect, device number 35 [ 86.833961][ T36] audit: type=1400 audit(1775106520.187:12467): avc: denied { lock } for pid=1596 comm="syz.1.442" path="socket:[14661]" dev="sockfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 86.859666][ T36] audit: type=1400 audit(1775106520.187:12468): avc: denied { open } for pid=1599 comm="syz.2.443" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.876297][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.884326][ T36] audit: type=1400 audit(1775106520.187:12469): avc: denied { unlink } for pid=1596 comm="syz.1.442" name="#5" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.923552][ T36] audit: type=1400 audit(1775106520.187:12470): avc: denied { mount } for pid=1596 comm="syz.1.442" name="/" dev="overlay" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.950078][ T36] audit: type=1400 audit(1775106520.257:12471): avc: denied { read } for pid=1596 comm="syz.1.442" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.974193][ T36] audit: type=1400 audit(1775106520.257:12472): avc: denied { open } for pid=1596 comm="syz.1.442" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.175846][ T1614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.185477][ T1614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.325556][ T1619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 87.488114][ T1629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.451'. [ 87.529055][ T313] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 87.574164][ T1636] netlink: 'syz.1.454': attribute type 19 has an invalid length. [ 87.619572][ T1638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 87.629462][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.638054][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.669134][ T313] usb 5-1: device descriptor read/64, error -71 [ 87.721939][ T1646] lo: entered promiscuous mode [ 87.849109][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 87.909108][ T313] usb 5-1: device descriptor read/64, error -71 [ 87.931450][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.999112][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 88.007328][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.015875][ T31] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 88.024334][ T31] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 88.034912][ T31] usb 1-1: config 0 has no interface number 0 [ 88.041072][ T31] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 88.052859][ T31] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 88.065543][ T31] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 12592, setting to 1024 [ 88.077711][ T31] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 88.088386][ T31] usb 1-1: config 0 interface 122 altsetting 187 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.101897][ T31] usb 1-1: config 0 interface 122 has no altsetting 0 [ 88.112158][ T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 88.121300][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.129540][ T31] usb 1-1: Product: syz [ 88.133737][ T31] usb 1-1: Manufacturer: syz [ 88.138361][ T31] usb 1-1: SerialNumber: syz [ 88.144100][ T31] usb 1-1: config 0 descriptor?? [ 88.149459][ T1640] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 88.156839][ T1640] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 88.164242][ T313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.299062][ T313] usb 5-1: device descriptor read/64, error -71 [ 88.539058][ T313] usb 5-1: device descriptor read/64, error -71 [ 88.649158][ T313] usb usb5-port1: attempt power cycle [ 88.989052][ T313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 89.017667][ T313] usb 5-1: device descriptor read/8, error -71 [ 89.020106][ T1658] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.053548][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.063870][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.150263][ T313] usb 5-1: device descriptor read/8, error -71 [ 89.389090][ T313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 89.410419][ T313] usb 5-1: device descriptor read/8, error -71 [ 89.506421][ T565] usb 3-1: MIDIStreaming interface descriptor not found [ 89.550429][ T313] usb 5-1: device descriptor read/8, error -71 [ 89.659256][ T313] usb usb5-port1: unable to enumerate USB device [ 89.979575][ T1647] Bluetooth: hci0: command 0x1003 tx timeout [ 89.979828][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.992825][ T1646] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 90.001858][ T1649] lo: left promiscuous mode [ 90.022944][ T1667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.031849][ T1667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.184543][ T1670] netlink: 'syz.4.464': attribute type 22 has an invalid length. [ 90.296810][ T1674] binder: Unknown parameter 'defcontextfdno' [ 90.443312][ T1682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.453057][ T1682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.619568][ T31] pl2303 1-1:0.122: required endpoints missing [ 90.634885][ T31] usb 1-1: USB disconnect, device number 36 [ 90.706254][ T1686] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 90.807592][ T1691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.816898][ T1691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.929136][ T31] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 91.078196][ T1702] netlink: 580 bytes leftover after parsing attributes in process `syz.1.474'. [ 91.088362][ T1702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.093313][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.104399][ T1702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.108878][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.126742][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.136318][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.144709][ T31] usb 1-1: Product: syz [ 91.149389][ T31] usb 1-1: Manufacturer: syz [ 91.154639][ T31] usb 1-1: SerialNumber: syz [ 91.201964][ T1713] netlink: 'syz.4.476': attribute type 28 has an invalid length. [ 91.366468][ T31] usb 1-1: 0:2 : does not exist [ 91.374028][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 91.386697][ T31] usb 1-1: USB disconnect, device number 37 [ 91.398201][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.638718][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 91.669229][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.678254][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.899742][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 91.899764][ T36] audit: type=1400 audit(1775106525.257:12513): avc: denied { connect } for pid=1759 comm="syz.0.492" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.927321][ T36] audit: type=1400 audit(1775106525.277:12514): avc: denied { map } for pid=1759 comm="syz.0.492" path="socket:[15868]" dev="sockfs" ino=15868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.951130][ T36] audit: type=1400 audit(1775106525.277:12515): avc: denied { read } for pid=1759 comm="syz.0.492" path="socket:[15868]" dev="sockfs" ino=15868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.975939][ T36] audit: type=1400 audit(1775106525.277:12516): avc: denied { write } for pid=1759 comm="syz.0.492" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.029148][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.179077][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 92.189297][ T31] usb 5-1: string descriptor 0 read error: -22 [ 92.197787][ T31] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 92.214342][ T36] audit: type=1400 audit(1775106525.567:12517): avc: denied { wake_alarm } for pid=1765 comm="syz.1.495" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.236188][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.256390][ T1766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 92.273556][ T36] audit: type=1400 audit(1775106525.627:12518): avc: denied { validate_trans } for pid=1765 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.319087][ T36] audit: type=1400 audit(1775106525.657:12519): avc: denied { ioctl } for pid=1769 comm="syz.2.496" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.346885][ T36] audit: type=1400 audit(1775106525.667:12520): avc: denied { map } for pid=1772 comm="syz.2.497" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 92.383320][ T1777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.393037][ T1777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.407215][ T1779] overlayfs: missing 'workdir' [ 92.412636][ T1779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 92.559174][ T313] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 92.663278][ T31] usb 5-1: USB disconnect, device number 14 [ 92.709100][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 92.717422][ T36] audit: type=1400 audit(1775106526.067:12521): avc: denied { create } for pid=1774 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.737777][ T36] audit: type=1400 audit(1775106526.077:12522): avc: denied { create } for pid=1774 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.759460][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.767568][ T313] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 92.776307][ T313] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 92.784094][ T313] usb 1-1: can't read configurations, error -71 [ 93.073404][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.083391][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.094213][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.103059][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.171747][ T1801] tc_dump_action: action bad kind [ 93.285225][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.293997][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.336397][ T1813] can0: slcan on ptm0. [ 93.459246][ T65] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 93.822389][ T1807] can0 (unregistered): slcan off ptm0. [ 94.089187][ T1846] sock: sock_timestamping_bind_phc: sock not bind to device [ 94.100246][ T1846] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.351992][ T1898] netlink: 92 bytes leftover after parsing attributes in process `syz.2.538'. [ 95.362807][ T1898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=1898 comm=syz.2.538 [ 95.668702][ T1931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 96.244098][ T1951] mmap: syz.4.557 (1951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.664997][ T1959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 96.789046][ T1972] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=118 sclass=netlink_audit_socket pid=1972 comm=syz.1.564 [ 96.804647][ T1972] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.879061][ T1647] Bluetooth: hci0: sending frame failed (-49) [ 96.885922][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 96.909057][ T36] kauditd_printk_skb: 25511 callbacks suppressed [ 96.909077][ T36] audit: type=1400 audit(1775106530.257:37311): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.958233][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.969311][ T149] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 96.978119][ T36] audit: type=1400 audit(1775106530.287:37312): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.003382][ T149] audit: backlog limit exceeded [ 97.017005][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.022078][ T1978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.024368][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.038901][ T292] audit: audit_lost=243 audit_rate_limit=0 audit_backlog_limit=64 [ 97.039060][ T1978] audit: audit_lost=244 audit_rate_limit=0 audit_backlog_limit=64 [ 97.696057][ T2013] can0: slcan on ptm0. [ 97.802702][ T2013] can0 (unregistered): slcan off ptm0. [ 97.929524][ T2022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 98.063502][ T2028] netlink: 25 bytes leftover after parsing attributes in process `syz.2.584'. [ 98.631188][ T2036] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.588'. Stopping sshd: [ 99.425881][ T2085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. stopped /usr/sbin/sshd (pid 201) OK [ 99.533075][ T46] Bluetooth: hci0: Frame reassembly failed (-84) Stopping crond: [ 99.631468][ T2111] syzkaller1: entered promiscuous mode [ 99.637589][ T2111] syzkaller1: entered allmulticast mode stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: OK Stopping iptables: FAIL Stopping system message bus: [ 100.139675][ T2165] netlink: 'syz.1.621': attribute type 46 has an invalid length. done Stopping klogd: OK Stopping acpid: [ 101.083511][ T2212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2212 comm=syz.4.634 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 101.579185][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.579230][ T1647] Bluetooth: hci0: command 0x1003 tx timeout umount: can't remount debugfs read-only Connection to 10.128.1.11 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 101.784824][ T45] usb 2-1: USB disconnect, device number 2 [ 101.793420][ T565] usb 3-1: USB disconnect, device number 37 [ 101.830393][ T45] usblp0: removed [ 101.951113][ T13] bridge_slave_1: left allmulticast mode [ 101.957344][ T13] bridge_slave_1: left promiscuous mode [ 101.963911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.971599][ T13] bridge_slave_0: left allmulticast mode [ 101.977363][ T13] bridge_slave_0: left promiscuous mode [ 101.984131][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.121692][ T13] veth1_macvtap: left promiscuous mode [ 102.127416][ T13] veth0_vlan: left promiscuous mode [ 102.454000][ T13] bridge_slave_0: left allmulticast mode [ 102.460020][ T13] bridge_slave_0: left promiscuous mode [ 102.465985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.473944][ T13] bridge_slave_1: left allmulticast mode [ 102.479743][ T13] bridge_slave_1: left promiscuous mode [ 102.485405][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.493467][ T13] bridge_slave_0: left allmulticast mode [ 102.499838][ T13] bridge_slave_0: left promiscuous mode [ 102.505689][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.513568][ T13] team_slave_1: left allmulticast mode [ 102.519158][ T13] team_slave_1: left promiscuous mode [ 102.524786][ T13] bridge0: port 3(team_slave_1) entered disabled state [ 102.532202][ T13] bridge_slave_1: left allmulticast mode [ 102.538114][ T13] bridge_slave_1: left promiscuous mode [ 102.544099][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.551553][ T13] bridge_slave_0: left allmulticast mode [ 102.557483][ T13] bridge_slave_0: left promiscuous mode [ 102.564098][ T13] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 102.791818][ T13] tipc: Disabling bearer [ 102.797604][ T13] tipc: Left network mode [ 102.809282][ T13] tipc: Left network mode [ 102.815748][ T13] veth1_macvtap: left promiscuous mode [ 102.821788][ T13] veth0_vlan: left promiscuous mode [ 102.827784][ T13] veth1_macvtap: left promiscuous mode [ 102.833718][ T13] veth0_vlan: left promiscuous mode [ 103.481590][ T13] ------------[ cut here ]------------ [ 103.487172][ T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 103.497534][ T13] Modules linked in: [ 103.501850][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 103.513791][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.524096][ T13] Workqueue: netns cleanup_net [ 103.528897][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 103.535212][ T13] Code: e8 41 4c d9 fc 4b 83 3c 3e 00 75 19 e8 e5 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 d7 1d 81 fc 49 83 c7 08 eb c9 e8 cc 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 103.555094][ T13] RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293 [ 103.561207][ T13] RAX: ffffffff85068ce4 RBX: ffff888123200000 RCX: ffff888103652600 [ 103.569252][ T13] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810c2b40b8 [ 103.577437][ T13] RBP: ffffc900000d7bb0 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 103.585814][ T13] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: dffffc0000000000 [ 103.594189][ T13] R13: dffffc0000000000 R14: ffff88810c2b4000 R15: 00000000000000b8 [ 103.602317][ T13] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 103.611766][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.618492][ T13] CR2: 00007f7fbca6ee9c CR3: 00000000074a8000 CR4: 00000000003526b0 [ 103.626984][ T13] Call Trace: [ 103.630355][ T13] [ 103.633325][ T13] cleanup_net+0x6bd/0xc90 [ 103.637752][ T13] ? __cfi_cleanup_net+0x10/0x10 [ 103.643086][ T13] ? kick_pool+0xb9/0x550 [ 103.647605][ T13] process_scheduled_works+0x7d1/0x1020 [ 103.653178][ T13] worker_thread+0xc70/0x10b0 [ 103.657884][ T13] kthread+0x2c9/0x370 [ 103.662035][ T13] ? __cfi_worker_thread+0x10/0x10 [ 103.667258][ T13] ? __cfi_kthread+0x10/0x10 [ 103.672115][ T13] ret_from_fork+0x67/0xa0 [ 103.676740][ T13] ? __cfi_kthread+0x10/0x10 [ 103.681456][ T13] ret_from_fork_asm+0x1a/0x30 [ 103.686319][ T13] [ 103.689422][ T13] ---[ end trace 0000000000000000 ]--- [ 103.695284][ T13] ------------[ cut here ]------------ [ 103.701808][ T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 103.712129][ T13] Modules linked in: [ 103.716038][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 103.729481][ T13] Tainted: [W]=WARN [ 103.733286][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.743410][ T13] Workqueue: netns cleanup_net [ 103.748550][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 103.755064][ T13] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 82 1d 81 fc 49 83 c7 08 eb c5 e8 77 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 1d 81 fc 5b 41 5c 41 5e 41 [ 103.775710][ T13] RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293 [ 103.782333][ T13] RAX: ffffffff85068d39 RBX: ffff88810c2b4800 RCX: ffff888103652600 [ 103.782900][ T2254] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 103.790530][ T13] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810c2b4808 [ 103.805263][ T13] RBP: ffffc900000d7bb0 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 103.806028][ T2254] ACPI: PM: Preparing to enter system sleep state S5 [ 103.813585][ T13] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: dffffc0000000000 [ 103.820584][ T2254] kvm: exiting hardware virtualization [ 103.828442][ T13] R13: dffffc0000000000 R14: ffff88810c2b4000 R15: 0000000000000008 [ 103.833981][ T2254] reboot: Power down [ 103.842247][ T13] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 103.856004][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.856030][ T13] CR2: 00007fe58d7f84c0 CR3: 00000000074a8000 CR4: 00000000003506b0 [ 103.856052][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.879524][ T13] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 103.879549][ T13] Call Trace: [ 103.879557][ T13] [ 103.879566][ T13] cleanup_net+0x6bd/0xc90 serialport: VM disconnected.