last executing test programs: 2m24.599467436s ago: executing program 0 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffff) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8400, 0x0) umount2(&(0x7f0000000080)='./cgroup\x00', 0x2) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0xa4ec, 0x6f}, {0x800, 0x7}, 0x7}) 2m24.598854006s ago: executing program 0 (id=620): r0 = gettid() r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000080)=""/21, &(0x7f0000000240)=0x15) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000c80)={0x2c, &(0x7f0000000400)={0x20, 0x5, 0x9, {0x9, 0xf, "64ab3d6004faff"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 2m23.186818861s ago: executing program 0 (id=628): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006c6f00000000000000000000000000001c000380"], 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = dup(r2) syz_io_uring_setup(0x6ce8, &(0x7f00000013c0)={0x0, 0x4a14, 0x4000, 0x1, 0x25b, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000200)="0fd9c92e660f011866b84b000f00d8dce8660ff18600200000640f01c3640f78cd66b8de000f00d865f4b8de6200000f23c80f21f8350c0020000f23f8", 0x3d}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat(r6, &(0x7f0000000140)='root/proc/sys\x00', 0x2b2c00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x21, 0x1, @in6={0xa, 0xfffa, 0x7f, @private0, 0xcb}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) getdents(r7, 0x0, 0x18) getdents(r7, &(0x7f00000003c0)=""/4096, 0x1000) 2m23.015586575s ago: executing program 0 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000001100)='./file0\x00', 0x0, 0x2a01004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) 2m23.012338735s ago: executing program 0 (id=630): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0xffffffffffffffc5}, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 2m23.012090905s ago: executing program 0 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060000000003088402001000000000000000020000000000120010000000000000000000000000002"], 0x64) 2m23.001240275s ago: executing program 32 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060000000003088402001000000000000000020000000000120010000000000000000000000000002"], 0x64) 1m12.188373665s ago: executing program 3 (id=1077): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x88) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x41, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x7, 0x7ae, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x13b}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400"], 0x0) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda71, 0x400, 0x1040002, 0x7a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x400, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x80, 0x2, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x388d, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m11.615156039s ago: executing program 3 (id=1078): ftruncate(0xffffffffffffffff, 0x51a9497) (async) unshare(0x60000600) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 1m10.999375565s ago: executing program 3 (id=1079): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000000c0)=""/196, 0xc4}], 0x2, 0x63f4, 0x4, 0x0) r1 = syz_open_pts(r0, 0x88001) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfe, {0x24, 0x0, 0x0, r3, 0x8000, 0x9, 0x7, 0x8, 0x0, 0x5, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4041080) r4 = signalfd4(r2, &(0x7f0000000380)={[0xffffffff]}, 0x8, 0x800) ioctl$TIOCCONS(r4, 0x541d) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000003c0)={@dev={0xac, 0x14, 0x14, 0x13}, @loopback, 0x9, "accda2fe8113c5a531cc8b715d955cdc109e2effc8cda54472769480e48b11f1", 0x7, 0x24, 0x1, 0x4}, 0x3c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000440)="2eb80922631f2f36e20443fe487ae6a94e378cbe31fb00fb4e4841a50de7e7dd537a76d3e0a1f5d9619f64ebf0cd03940c37f9f0c58a7ef0dc916ef887b739b9f1f9af9b3f165aa8e6825288447416b4ff4ef9e68b5aaf773b43347036b92376d959e165d1ecd9e17c05349e719120ec2e13c503d65aba604f360b20f8bf2d0c65a30a22d722b9cbea5e906ed126cdc24c39dc51291b21e75d7a9f660222fe46c9646030e4fe0f42", 0xa8}], 0x1, 0x7fff, 0x8, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x40}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10001}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x90) r6 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) getsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000640)={@initdev, @remote, @multicast1}, &(0x7f0000000680)=0xc) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/183, 0xb7}, {&(0x7f0000000900)=""/132, 0x84}, {&(0x7f00000009c0)=""/52, 0x34}, {&(0x7f0000000a00)=""/142, 0x8e}], 0x6}, 0x43) socketpair(0x23, 0x6, 0x95, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000c00)={0x1d, r9}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000c40)={@initdev, @multicast2}, &(0x7f0000000c80)=0xc) io_setup(0xee6, &(0x7f0000000cc0)=0x0) r11 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) io_submit(r10, 0x5, &(0x7f0000001180)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xb03, r11, &(0x7f0000000d40)="72116b8e9df5886bdcbf94a49bece16860251f53bea3d7cbfe01ce3b278a00d50501a06072be3a6ea72c9e23c392579898feaf56e4c4b43ef5b06920f2e3cc56795f63f04696acae2d3b87a9bb825a253eb881f45d31c799c0bb", 0x5a, 0x9, 0x0, 0x1, r6}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000e00)="50862b3189bcfbfd99c7a9bdafbc6247864d50e850568740ed0167b7a8cc8246b2a659bf832c6690106781590df87d55d560e7021be2462a176dfe7647340117c6938286b318858549760020dfe6f93e15027974bd5fd0df3b6d4a1224525f389ad0dd82d994332ffc4b78a1258ec97d5fc09d70abd57e0d0787dbabd12005de48802e0f5d6afaba67d8b575b074174137c71e24126c13ae2aac5ffca4e7bef8b25c7b6da12aacff1bcf65019156bc49b02fdc6429578fd7c175c49def2fb589599be8c3810dbd301f4ddcbbb44066d0e8090ef0b9d8fb2c8e52f3f9", 0xdc, 0x3, 0x0, 0x1}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x3, 0x7, r6, &(0x7f0000000f40)="5b4759f4d9237fbd72ed7913ece250339b7bbf228957e93048cae71a7e5635b362ddb29be490eaea16cd8c9f26305458b97b3d", 0x33, 0x5, 0x0, 0x1}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2, 0x6, r5, &(0x7f0000000fc0)="76fd035a64f736638abb53878217a3820e6657e6996909b64919aefd0082", 0x1e, 0x2, 0x0, 0x1, r4}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x9487, r6, &(0x7f0000001040)="82aa42ea26002d0b5392ffc4d9e7adb01e1eda8f22de35d5ffe2ec3c40511772e99fa7440e481217e7815dd75afd0f682f418adb7ab03dac428f7cada9dc9a405c51aea6b19dd21046f74681b1a1ad164b305b0cdc081893faa25a98e881ca806d4c99eeaaf4d2737075af534d2b254a5283e3aeb88326c2191ed7dc57fd1a48c80f6b25a5fcafb33f11f087bcddf17af27d20f91c1594288733348fc7bee6e6bf4d7ac294d827ca0cd1e687a430dfc8a9dc36eea8b746b25ae7b3b28f9d33e9a2e61fbbb216c73ebcb0dba3a4dd0a579084761e00b31cb0bb5da3d831296613d7afb838938afbda6028acff0c722ffd704cd2fb", 0xf4, 0xd702, 0x0, 0x1, r4}]) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000055}, 0x3246afccaf75c450) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r12, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000016c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001440)={0x21c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x11}, 0x44080) 1m10.956001656s ago: executing program 3 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xb) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc30501, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f6e0effc) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) write(r0, &(0x7f0000000400)='comm', 0x4) (async) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f07000009040200000102200009040201010102"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1m10.406003369s ago: executing program 3 (id=1094): lsm_list_modules(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "1dedadef9e30ce93", "b3690ff2cba5b95ebc143dbe34d689b5", "011b8426", "49b4a72600"}, 0x28) sendto$inet(r1, &(0x7f0000000000)='\x00', 0xfffffffffffffe47, 0x40, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000b18"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m10.096633167s ago: executing program 3 (id=1096): syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)={0x0, 0x21, 0x59, {0x59, 0x7, "250e958a2717391a507644b92bdb8d5b74129250c03789cf097da3ecdfe89202a1d31db2f6357840d7f5003740fe8f49e6920295612a462ea875499a40ca2b89f8bc5edc5dae5294b51fbab4629c4d38b72b567420d472"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000240)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xa, '\t'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x86c9, 0x5, 0x1, {0x22, 0xdf7}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x96, "6bf05b1f3f09807ef97f77a70918e7042b043d0d005588e76c131fef907b7151187d574061170d7ef0ac0689d26c6aecfa794e5912bc3ad5091ca882c543a4be67da91a91bb00d8e1ec4be7b53b3255ded341b31466b5e0c77fc43f358ddd5f4b2ec4a3bbc7d4fd73fa13df0241ba2f2fce63b8cc70ab07479f8fb0c5600baf81b37632ee541795b11a36cd3bf354cf6c7bd245f7d74"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc9, "b283088c206ce843fe19b2bb2433b9594636ecffaa95a006cab9304f178489d6a53f9bd56ee1091b8bc53115e728933437643b43b958b98b254044b9f369286da021d0a4db95a2a3744417cc880bd2d7feec13c6ab5dc0eae5c2a32e3e4670d476fc10117338584f39a57bc0a61b39900278b41963ccb7efa580654d874919c586d80f009514e2c7b81bc01ad8ff2d160571807123829b4f5a2e5a6c0bffb457c5a392cf67dd06b0e61b86f2234e09aa987823793346bd23059f5044c9c5760e0ec92de0f2b6f65e2a"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) 1m10.088533367s ago: executing program 33 (id=1096): syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)={0x0, 0x21, 0x59, {0x59, 0x7, "250e958a2717391a507644b92bdb8d5b74129250c03789cf097da3ecdfe89202a1d31db2f6357840d7f5003740fe8f49e6920295612a462ea875499a40ca2b89f8bc5edc5dae5294b51fbab4629c4d38b72b567420d472"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000240)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xa, '\t'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x86c9, 0x5, 0x1, {0x22, 0xdf7}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x96, "6bf05b1f3f09807ef97f77a70918e7042b043d0d005588e76c131fef907b7151187d574061170d7ef0ac0689d26c6aecfa794e5912bc3ad5091ca882c543a4be67da91a91bb00d8e1ec4be7b53b3255ded341b31466b5e0c77fc43f358ddd5f4b2ec4a3bbc7d4fd73fa13df0241ba2f2fce63b8cc70ab07479f8fb0c5600baf81b37632ee541795b11a36cd3bf354cf6c7bd245f7d74"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc9, "b283088c206ce843fe19b2bb2433b9594636ecffaa95a006cab9304f178489d6a53f9bd56ee1091b8bc53115e728933437643b43b958b98b254044b9f369286da021d0a4db95a2a3744417cc880bd2d7feec13c6ab5dc0eae5c2a32e3e4670d476fc10117338584f39a57bc0a61b39900278b41963ccb7efa580654d874919c586d80f009514e2c7b81bc01ad8ff2d160571807123829b4f5a2e5a6c0bffb457c5a392cf67dd06b0e61b86f2234e09aa987823793346bd23059f5044c9c5760e0ec92de0f2b6f65e2a"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) 12.155537241s ago: executing program 4 (id=1491): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_usb_control_io(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(0xffffffffffffffff, &(0x7f0000000000), 0x12) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3e, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/127, 0x7f) 9.139223535s ago: executing program 4 (id=1512): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x17) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045439, 0x40bea7b87a0000) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000280)={{r3}, 0x4, &(0x7f0000000240)=[0x7, 0x100, 0x6, 0x1], 0x3ff, 0x4, 0x1}) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/157, 0x9d, 0x1, &(0x7f0000000100)=""/173, 0xad}, &(0x7f0000000200)=0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000480)=ANY=[], 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008004) 6.07258575s ago: executing program 4 (id=1534): pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (rerun: 64) mprotect(&(0x7f0000007000/0x13000)=nil, 0x13000, 0x1000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) (async) r2 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003"], 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00\f\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_connect$midi(0x3, 0x65, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206307500140000102030109025300010147000109040000040103001009050c020800050205062501027d7309050203ff03363201054d"], 0x0) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000378c0b3282d700000000020000000000000000010000"]}, 0x0) 3.858315504s ago: executing program 1 (id=1556): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_usb_control_io(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(0xffffffffffffffff, &(0x7f0000000000), 0x12) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3e, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/127, 0x7f) 3.047116465s ago: executing program 4 (id=1552): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6049, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x0, 0xffffff80}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.926626718s ago: executing program 2 (id=1558): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) close(0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.775523221s ago: executing program 2 (id=1561): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = syz_open_procfs(r0, &(0x7f0000002240)='mountinfo\x00') syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c240201"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab", 0x20, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000080)={0x0, r3, r3, 0x6, 0x1, '\x00', {0x80000001, 0x5, 0x9, 0x2, 0x2, 0x1, 0x7, 0x8, {0xb, 0x9}, {0x100000001, 0x2}, {0xffffffffffffff00, 0x3}, 0x0, 0x80, 0x80000001, 0x297, 0x7f, 0x10, 0x7, 0x9, 0x2, 0xd, '\x00', 0x8, 0x1, 0x9, 0x40}}) 2.768826761s ago: executing program 5 (id=1562): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xd13, 0x200, 0x6, 0x875f, 0x7, "ea71000500f9000000024200215f058400", 0x4000000, 0x400}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000015000b0000000000000000000afd000004000000140001"], 0x40}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x42) timer_create(0x0, 0x0, 0x0) unshare(0x60000600) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x53, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x4}}}}}]}}]}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001580)={0x2, 0x4, 0x2feb6d56, 0x681cd198, 0xffffffffffffffff, 0x7f, 0xd, 0x2}, &(0x7f00000015c0)={0x5, 0xcd01, 0xe, 0xd2a, 0x7, 0x40, 0x5}, &(0x7f0000001600)={0x0, 0x4, 0x1, 0x3, 0x0, 0x4, 0xfffffffffffffffa, 0x9}, &(0x7f0000001640)={0x77359400}, &(0x7f00000016c0)={&(0x7f0000001680)={[0x7]}, 0x8}) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/109, 0x6d}], 0x1, 0x7fff, 0xa) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffe27) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) write$evdev(r3, &(0x7f0000000540)=[{{0x77359400}, 0x5, 0x100, 0xb}, {{0x77359400}, 0x17, 0x7f, 0x480000}, {{0x77359400}, 0x14, 0x1, 0x3}, {{0x77359400}, 0x0, 0x101, 0x4}], 0x60) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x5, "5586d0e9"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xe, 0x1, {0x22, 0x211}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0xf, 0x29, "5543e2f064756841cfa5239f5c38c65dd399fe7252cba4922cd5e525615b02aec08837e4cb3e939ed4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20017b000000219c3905ae575d944d863badcd36b1cdf06b62c6f8c9bfc12f385243c3466322cbebdb6491903df0af5a1866fd8e4ef551d7de3f56310e6bd1d3a204fc2839cf72dad5dc74128850deb106c429ba0176a69bd76d8e4044b5a558143c7c2d02f9f1ce1871f0018c6da7cd5b8dd69faf3c5d209b8e85300f7a51e295"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) 2.559663797s ago: executing program 1 (id=1563): unshare(0x60000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB='5']) write$cgroup_freezer_state(r0, &(0x7f0000000140)='FROZEN\x00', 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) syz_clone3(&(0x7f0000000080)={0x4000000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000000000/0x9000)=nil) 1.58155973s ago: executing program 2 (id=1564): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x73f3, 0x9, r2}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.579861581s ago: executing program 1 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x593a, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"5d91d53e7246f953ceee0dbbd77c3bd7", r2, r3, {0x6, 0xb}, {0x8, 0xa}, 0x5, [0xfffffffffffffffe, 0x200, 0x3c, 0x1, 0x8, 0x401, 0x6, 0xffff, 0x80000000, 0xfffffffffffff01e, 0x5, 0xfff, 0xfffffffffffffff1, 0x6, 0x5, 0x7f]}) 1.531461632s ago: executing program 1 (id=1565): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) shutdown(r1, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) (async) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/39, 0x27}, 0x3}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.459558704s ago: executing program 1 (id=1566): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SECUREBITS(0x1c, 0xc) (async) setfsuid(0xee00) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x204}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x75e0) 1.053006463s ago: executing program 5 (id=1567): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0xffffffffffffffc5}, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 1.019504915s ago: executing program 5 (id=1568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0xcc000) (async) preadv(r0, &(0x7f0000019380)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x17d, 0x9) (async) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) sendto(r0, &(0x7f0000000080)="ec90424531ae95b42997ac82d605019c8c6cb6e60b6ccc790d6f89e9c5f32bd900aed9217596f97ee9a9579cd83d801bb489de883d608f3b875562d737b9485d1660ac132147baee9968470b9ee22bab0ea80b481819f956410ee90e5b4d0d19b082cbf123bce181621aec91c14c7ecfef0b40ef8886184e654759845892ffeb73a7dad69c31a84ed4570d559593e5d32e41f49bae47170a89ad8a6e42590bdf82aa65906022d57336d2ca1f470823b551eecd8757e9cad9eb3ff2001657bd5b2212d3eda1621073fcc2b126c9d7d954cec3", 0xd2, 0x24000000, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @local}, 0x0, 0x3, 0x2, 0x2}}, 0x80) (async) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2b, 0xb8, 0x26, 0x10, 0x489, 0xe167, 0x96c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0xff, 0x7f, 0x70, 0xf3, "", [{{0x9, 0x4, 0xb4, 0x2, 0x4, 0xff, 0xab, 0xb1, 0x6, [], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xa6, 0x5, 0xaa}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x5, 0x49}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x9, 0xc, 0xa, [@generic={0x7, 0xf, "a58719257a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x78f, 0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 721.602991ms ago: executing program 2 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001000000000000000000000000000120010000000005000000000000000002"], 0x64) 631.318254ms ago: executing program 2 (id=1570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060000000003088402001000000000000000000000000000120010020000000000000000000000002"], 0x64) 630.968984ms ago: executing program 1 (id=1571): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(0xffffffffffffffff, &(0x7f0000000000), 0x12) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3e, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/127, 0x7f) 611.366345ms ago: executing program 2 (id=1573): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x9, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x95, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}], 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x1d8, 0xffffffffffffffff) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = dup3(r10, r9, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="fec6410f01c8b9800000c00f3235000400000f30f03090abb88dc043db5600c4819f59ba00000080400f35c4617a5ded4c0fc7ad00000000c7442400a6000000c7442402be000000ff2c24", 0x4b}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r13, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0xf) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 493.905917ms ago: executing program 5 (id=1574): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0xa031, 0xffffffffffffffff, 0x9154e000) (async) read(r0, 0x0, 0x0) (async) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xfffffffffffffffd, 0x547b, 0x103d, 0x6, 0x1, 0x32a, 0xfffffffffffffffd, 0xffffffff, 0x1, 0x40000000009, 0x100005, 0x6a], 0x2000, 0x808d6}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000380)={0x160003, 0x0, {[0x7f, 0xf971, 0x0, 0x80000000, 0x17c1, 0xefc, 0x80000000]}}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000280)={0x0, &(0x7f0000000b80)=[@cpuid={0x64, 0x18, {0xffffffff, 0x3}}], 0x18}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x9, 0x55eb}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r7, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 435.187829ms ago: executing program 5 (id=1575): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 431.636909ms ago: executing program 5 (id=1576): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x41, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x28, {0x28, 0x21, "c263138526792c3cbdeacece2a52973661d67a2b554438a34d071e2d980fc2470f3651d49f5c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) open$dir(&(0x7f0000000300)='./sys/devices/system/memory/auto_online_blocks\x00', 0x4000, 0x228) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)="6f6e6c696e650abeb8", 0x9) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r5 = syz_open_dev$hiddev(&(0x7f0000000200), 0xcc, 0xa0040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000240)={0x1, 0x200, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0xa00, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x80000001, 0x60, &(0x7f0000000140)="ac486ef3", 0x4, 0x0, 0x5, 0x0, 0x80, 0x6, 0x0}) 20.501949ms ago: executing program 4 (id=1577): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0xffffffffffffffc5}, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 0s ago: executing program 4 (id=1578): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) syz_ublk_add_dev(r0, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) r7 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): [ 221.187115][ T10] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 221.209696][ T10] hid-generic 0000:0000:0001.0020: hidraw0: HID v0.10 Device [syz0] on syz1 [ 221.211928][ T541] usb 6-1: USB disconnect, device number 11 [ 221.233918][ T366] usbhid 2-1:0.0: can't add hid device: -71 [ 221.240755][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.244945][ T366] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.264871][ T4171] fido_id[4171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.294362][ T366] usb 2-1: USB disconnect, device number 103 [ 221.311961][ T36] audit: type=1326 audit(2000000416.988:35068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.1.1225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05fc39e0d9 code=0x0 [ 221.931597][ T366] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 221.941983][ T4182] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.951170][ T4182] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.081570][ T366] usb 6-1: Using ep0 maxpacket: 16 [ 222.089374][ T366] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.098997][ T366] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 222.114628][ T366] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 222.125315][ T366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.134923][ T366] usb 6-1: Product: syz [ 222.139416][ T366] usb 6-1: Manufacturer: syz [ 222.144253][ T366] usb 6-1: SerialNumber: syz [ 222.301474][ T390] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 222.355885][ T366] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 222.366211][ T366] usb 6-1: found format II with max.bitrate = 4608, frame size=4095 [ 222.375383][ T366] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 222.384542][ T366] usb 6-1: found format II with max.bitrate = 4608, frame size=4095 [ 222.394189][ T366] usb 6-1: failed to enable PITCH for EP 0x1 [ 222.400935][ T366] usb 6-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 222.411018][ T366] usb 6-1: found format II with max.bitrate = 6, frame size=5 [ 222.420121][ T366] usb 6-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 222.421366][ T541] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 222.429498][ T366] usb 6-1: found format II with max.bitrate = 6, frame size=5 [ 222.449637][ T366] usb 6-1: USB disconnect, device number 12 [ 222.463242][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.474310][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.491329][ T390] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.503118][ T390] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.514646][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.525912][ T390] usb 3-1: Product: syz [ 222.530860][ T390] usb 3-1: Manufacturer: syz [ 222.536439][ T390] usb 3-1: SerialNumber: syz [ 222.582651][ T541] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 222.592822][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.607288][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.621667][ T541] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.637211][ T541] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.647082][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.658595][ T541] usb 2-1: config 0 descriptor?? [ 222.743228][ T4187] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.756586][ T390] usb 3-1: 0:2 : does not exist [ 222.766487][ T390] usb 3-1: unit 9 not found! [ 222.776362][ T390] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 222.790536][ T390] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 222.805663][ T390] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 222.819647][ T390] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 222.834522][ T390] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 222.848642][ T390] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 222.862222][ T390] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 222.877019][ T390] usb 3-1: USB disconnect, device number 110 [ 222.912091][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.141043][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 223.221010][ T390] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 223.290964][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 223.299974][ T10] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.313925][ T10] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 223.325686][ T4186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=4186 comm=syz.1.1230 [ 223.333979][ T10] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1024 [ 223.352670][ T541] usbhid 2-1:0.0: can't add hid device: -71 [ 223.358607][ T4202] overlay: filesystem on ./file0 not supported as upperdir [ 223.364405][ T541] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.369786][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 223.382930][ T541] usb 2-1: USB disconnect, device number 104 [ 223.387915][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.393930][ T390] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.409601][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.417173][ T390] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.424773][ T10] usb 6-1: Product: С‹ [ 223.439423][ T10] usb 6-1: Manufacturer: ╋ק䢏籝딁¹釻懎湤隹゗墩䓺਍嵋稙褊㿓볻Ꮧ많㛩먾㺂帶ήᡇ䏸䁺͇ง㞣鐒黅虗覀齦饌ꈆ∢荂樣쉒⭺硸卛㢸駁刷꿥柗漃욃憲泔᷈䁂䠒铃 [ 223.440223][ T390] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 223.467810][ T4199] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 223.471927][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.488196][ T4204] rust_binder: Failure in copy_transaction_data: EINVAL [ 223.488248][ T4204] rust_binder: 4203:4204 transaction call to 4203:0 failed EINVAL, code 0 size 0-24 [ 223.493324][ T390] usb 3-1: Product: syz [ 223.495554][ T4199] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 223.505709][ T390] usb 3-1: Manufacturer: syz [ 223.526330][ T390] usb 3-1: SerialNumber: syz [ 223.535388][ T390] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 223.543865][ T390] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 223.543865][ T390] Please send a copy of this message to and [ 223.650749][ T541] rust_binder: 4203: undelivered TRANSACTION_ERROR: 29201 [ 223.659201][ T541] rust_binder: 4203: undelivered TRANSACTION_COMPLETE [ 223.666761][ T541] rust_binder: 4203: undelivered transaction 37, process died [ 223.832588][ T390] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 223.845035][ T390] usb 3-1: USB disconnect, device number 111 [ 224.033429][ T4227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1242'. [ 224.277688][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 224.290257][ T10] usb 6-1: USB disconnect, device number 13 [ 224.330419][ T366] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 224.341553][ T36] audit: type=1400 audit(2000000420.030:35069): avc: denied { ioctl } for pid=4228 comm="syz.1.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.378990][ T36] audit: type=1400 audit(2000000420.030:35070): avc: denied { read write } for pid=3783 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.407996][ T36] audit: type=1400 audit(2000000420.030:35071): avc: denied { open } for pid=3783 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.444247][ T36] audit: type=1400 audit(2000000420.030:35072): avc: denied { ioctl } for pid=3783 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.474722][ T36] audit: type=1400 audit(2000000420.060:35073): avc: denied { read write } for pid=4239 comm="syz.5.1247" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.502961][ T36] audit: type=1400 audit(2000000420.060:35074): avc: denied { open } for pid=4239 comm="syz.5.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.528691][ T36] audit: type=1400 audit(2000000420.060:35075): avc: denied { read write } for pid=4239 comm="syz.5.1247" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 224.530252][ T366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.557048][ T36] audit: type=1400 audit(2000000420.060:35076): avc: denied { open } for pid=4239 comm="syz.5.1247" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 224.568212][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.593165][ T390] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 224.604905][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.623750][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.640322][ T366] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.651081][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.660588][ T366] usb 2-1: config 0 descriptor?? [ 224.771738][ T390] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 224.782218][ T390] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.797031][ T390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.806743][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.817408][ T390] usb 3-1: SerialNumber: syz [ 224.827712][ T4222] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 224.870546][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 225.020072][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 225.027335][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 225.035194][ T10] usb 6-1: can't read configurations, error -61 [ 225.044363][ T390] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 225.057429][ T390] usb 3-1: USB disconnect, device number 112 [ 225.070714][ T366] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 225.080544][ T366] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 225.170064][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 225.330049][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 225.337866][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 225.347016][ T10] usb 6-1: can't read configurations, error -61 [ 225.354909][ T10] usb usb6-port1: attempt power cycle [ 225.372056][ T63] usb 2-1: USB disconnect, device number 105 [ 225.640512][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 225.640534][ T36] audit: type=1400 audit(2000000421.331:35088): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 225.647709][ T4258] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 225.668062][ T36] audit: type=1400 audit(2000000421.331:35089): avc: denied { mounton } for pid=4257 comm="syz.2.1252" path="/321/file0" dev="tmpfs" ino=1772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.699446][ T36] audit: type=1400 audit(2000000421.371:35090): avc: denied { read } for pid=4257 comm="syz.2.1252" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.725830][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 225.732568][ T36] audit: type=1400 audit(2000000421.371:35091): avc: denied { open } for pid=4257 comm="syz.2.1252" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.750702][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 225.759568][ T36] audit: type=1400 audit(2000000421.371:35092): avc: denied { ioctl } for pid=4257 comm="syz.2.1252" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.766124][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 225.801600][ T10] usb 6-1: can't read configurations, error -61 [ 225.860153][ T36] audit: type=1400 audit(2000000421.551:35093): avc: denied { write } for pid=4262 comm="syz.2.1253" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.905654][ T36] audit: type=1400 audit(2000000421.591:35094): avc: denied { read write } for pid=4264 comm="syz.1.1254" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.906848][ T4266] input: syz0 as /devices/virtual/input/input54 [ 225.939905][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 225.945315][ T36] audit: type=1400 audit(2000000421.591:35095): avc: denied { open } for pid=4264 comm="syz.1.1254" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.977197][ T36] audit: type=1400 audit(2000000421.591:35096): avc: denied { ioctl } for pid=4264 comm="syz.1.1254" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.980093][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 226.003457][ T36] audit: type=1400 audit(2000000421.631:35097): avc: denied { read } for pid=97 comm="acpid" name="event3" dev="devtmpfs" ino=1194 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.035715][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 226.043807][ T10] usb 6-1: can't read configurations, error -61 [ 226.050274][ T10] usb usb6-port1: unable to enumerate USB device [ 226.289496][ T541] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 226.424229][ T4283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1258'. [ 226.449419][ T541] usb 2-1: Using ep0 maxpacket: 8 [ 226.456763][ T541] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.465911][ T541] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 226.478473][ T541] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 226.488114][ T541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.496913][ T541] usb 2-1: Product: syz [ 226.501407][ T541] usb 2-1: Manufacturer: syz [ 226.506375][ T541] usb 2-1: SerialNumber: syz [ 226.669298][ T390] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 226.839230][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 226.850659][ T390] usb 3-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 226.862074][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.871598][ T390] usb 3-1: Product: syz [ 226.876201][ T390] usb 3-1: Manufacturer: syz [ 226.881274][ T390] usb 3-1: SerialNumber: syz [ 226.928432][ T541] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 226.946849][ T541] usb 2-1: USB disconnect, device number 106 [ 226.983215][ T4298] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 227.125944][ T390] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.170525][ T390] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 227.185690][ T390] usb 3-1: USB disconnect, device number 113 [ 227.193713][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.299068][ T541] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 227.325242][ T4308] input: syz0 as /devices/virtual/input/input55 [ 227.351070][ T4311] GUP no longer grows the stack in syz.2.1265 (4311): 200000004000-20000000a000 (200000002000) [ 227.364619][ T4311] CPU: 1 UID: 0 PID: 4311 Comm: syz.2.1265 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 227.364649][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.364659][ T4311] Call Trace: [ 227.364663][ T4311] [ 227.364670][ T4311] __dump_stack+0x21/0x30 [ 227.364693][ T4311] dump_stack_lvl+0x140/0x1c0 [ 227.364709][ T4311] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.364726][ T4311] ? find_vma+0xd3/0x120 [ 227.364739][ T4311] ? vma_is_secretmem+0x11/0x50 [ 227.364757][ T4311] dump_stack+0x19/0x20 [ 227.364772][ T4311] __get_user_pages+0x1e20/0x22d0 [ 227.364792][ T4311] ? populate_vma_page_range+0x220/0x220 [ 227.364808][ T4311] get_user_pages_remote+0x377/0xb80 [ 227.364824][ T4311] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 227.364837][ T4311] ? __cfi_get_user_pages_remote+0x10/0x10 [ 227.364854][ T4311] __access_remote_vm+0x1de/0x630 [ 227.364868][ T4311] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 227.364885][ T4311] ? access_remote_vm+0x60/0x60 [ 227.364898][ T4311] ? _raw_spin_lock+0x92/0x120 [ 227.364913][ T4311] ? __cfi__raw_spin_lock+0x10/0x10 [ 227.364929][ T4311] access_remote_vm+0x39/0x60 [ 227.364942][ T4311] proc_pid_cmdline_read+0x4c2/0xbf0 [ 227.364959][ T4311] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 227.364975][ T4311] ? bpf_lsm_file_permission+0xd/0x20 [ 227.364990][ T4311] vfs_readv+0x5e4/0xa00 [ 227.365009][ T4311] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 227.365025][ T4311] ? do_readv+0x2e0/0x2e0 [ 227.365043][ T4311] __x64_sys_preadv+0x19f/0x2c0 [ 227.365057][ T4311] ? __cfi___x64_sys_preadv+0x10/0x10 [ 227.365070][ T4311] ? switch_fpu_return+0x12/0x20 [ 227.365086][ T4311] x64_sys_call+0x1ee9/0x2ee0 [ 227.365097][ T4311] do_syscall_64+0x57/0xf0 [ 227.365265][ T4311] ? clear_bhb_loop+0x50/0xa0 [ 227.365288][ T4311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.365301][ T4311] RIP: 0033:0x7f1bd519e0d9 [ 227.365315][ T4311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.365340][ T4311] RSP: 002b:00007f1bd3bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.365360][ T4311] RAX: ffffffffffffffda RBX: 00007f1bd5425fa0 RCX: 00007f1bd519e0d9 [ 227.365371][ T4311] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 227.365380][ T4311] RBP: 00007f1bd5235024 R08: 00000000fffffff9 R09: 0000000000000000 [ 227.365388][ T4311] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 227.365398][ T4311] R13: 00007f1bd5426038 R14: 00007f1bd5425fa0 R15: 00007fffea4c1768 [ 227.365410][ T4311] [ 227.746280][ T541] usb 2-1: Using ep0 maxpacket: 16 [ 227.753146][ T541] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.764624][ T541] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 227.774712][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.783763][ T541] usb 2-1: SerialNumber: syz [ 227.791240][ T541] usb 2-1: config 0 descriptor?? [ 227.797804][ T541] hub 2-1:0.0: bad descriptor, ignoring hub [ 227.804443][ T541] hub 2-1:0.0: probe with driver hub failed with error -5 [ 227.812017][ T541] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 227.820870][ T541] usb 2-1: Detected SIO [ 227.826299][ T541] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 227.859666][ T4325] Line length is too long: Should be less than 4094 [ 228.308506][ T541] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 228.470828][ T541] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 228.480612][ T541] usb 6-1: New USB device strings: Mfr=8, Product=229, SerialNumber=0 [ 228.489698][ T541] usb 6-1: Product: syz [ 228.494071][ T541] usb 6-1: Manufacturer: syz [ 228.499852][ T541] usb 6-1: config 0 descriptor?? [ 228.509019][ T541] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 228.517366][ T541] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 228.710932][ T541] usb 6-1: USB disconnect, device number 18 [ 228.720370][ T541] ftdi_sio 6-1:0.0: device disconnected [ 228.768321][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 228.948423][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 228.954823][ T10] usb 3-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.967973][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.974893][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 228.984240][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.993049][ T10] usb 3-1: config 0 descriptor?? [ 229.399999][ T10] hid (null): unknown global tag 0xe [ 229.407297][ T10] logitech-djreceiver 0003:046D:C71C.0022: unknown main item tag 0x0 [ 229.415638][ T10] logitech-djreceiver 0003:046D:C71C.0022: unknown main item tag 0x4 [ 229.424304][ T10] logitech-djreceiver 0003:046D:C71C.0022: unknown global tag 0xe [ 229.432566][ T10] logitech-djreceiver 0003:046D:C71C.0022: item 0 4 1 14 parsing failed [ 229.441171][ T10] logitech-djreceiver 0003:046D:C71C.0022: logi_dj_probe: parse failed [ 229.449681][ T10] logitech-djreceiver 0003:046D:C71C.0022: probe with driver logitech-djreceiver failed with error -22 [ 229.988849][ T366] usb 2-1: USB disconnect, device number 107 [ 230.018651][ T366] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.044166][ T366] ftdi_sio 2-1:0.0: device disconnected [ 230.197640][ T4373] netlink: 'syz.5.1285': attribute type 4 has an invalid length. [ 230.222189][ T4373] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1285'. [ 230.393919][ T541] usb 3-1: USB disconnect, device number 114 [ 230.477465][ T366] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 230.587383][ T318] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 230.607518][ T366] usb 6-1: device descriptor read/64, error -71 [ 230.739145][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.750610][ T318] usb 2-1: not running at top speed; connect to a high speed hub [ 230.762046][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.772940][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.784481][ T318] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 230.795760][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.804468][ T318] usb 2-1: Product: syz [ 230.810626][ T318] usb 2-1: Manufacturer: syz [ 230.815764][ T318] usb 2-1: SerialNumber: syz [ 230.847289][ T366] usb 6-1: device descriptor read/64, error -71 [ 230.995034][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 230.995055][ T36] audit: type=1400 audit(2000000426.683:35178): avc: denied { mounton } for pid=4402 comm="syz.2.1287" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.995106][ T4403] /dev/rnullb0: Can't open blockdev [ 231.023369][ T36] audit: type=1400 audit(2000000426.713:35179): avc: denied { write } for pid=4376 comm="syz.1.1286" laddr=fe80::10de:51ff:fe0c:5c37 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.063825][ T318] usb 2-1: unit 3 not found! [ 231.074524][ T318] usb 2-1: USB disconnect, device number 108 [ 231.081018][ T36] audit: type=1400 audit(2000000426.763:35180): avc: denied { execute } for pid=4404 comm="syz.2.1288" name="file0" dev="tmpfs" ino=1861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.107528][ T36] audit: type=1400 audit(2000000426.763:35181): avc: denied { execute_no_trans } for pid=4404 comm="syz.2.1288" path="/338/file0" dev="tmpfs" ino=1861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.117150][ T366] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 231.267190][ T366] usb 6-1: device descriptor read/64, error -71 [ 231.317162][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 231.447032][ T10] usb 3-1: device descriptor read/64, error -71 [ 231.507134][ T366] usb 6-1: device descriptor read/64, error -71 [ 231.574580][ T36] audit: type=1400 audit(2000000427.263:35182): avc: denied { name_bind } for pid=4406 comm="syz.1.1289" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 231.601210][ T36] audit: type=1400 audit(2000000427.263:35183): avc: denied { node_bind } for pid=4406 comm="syz.1.1289" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 231.628522][ T366] usb usb6-port1: attempt power cycle [ 231.680079][ T36] audit: type=1400 audit(2000000427.373:35184): avc: denied { mounton } for pid=4406 comm="syz.1.1289" path="/proc/822/cgroup" dev="proc" ino=39687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 231.706886][ T10] usb 3-1: device descriptor read/64, error -71 [ 231.946765][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 231.976768][ T366] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 231.998900][ T366] usb 6-1: device descriptor read/8, error -71 [ 232.076645][ T10] usb 3-1: device descriptor read/64, error -71 [ 232.127963][ T366] usb 6-1: device descriptor read/8, error -71 [ 232.316578][ T10] usb 3-1: device descriptor read/64, error -71 [ 232.366566][ T366] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 232.387834][ T366] usb 6-1: device descriptor read/8, error -71 [ 232.426623][ T10] usb usb3-port1: attempt power cycle [ 232.518244][ T366] usb 6-1: device descriptor read/8, error -71 [ 232.626581][ T366] usb usb6-port1: unable to enumerate USB device [ 232.646463][ T63] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 232.766396][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 232.797917][ T10] usb 3-1: device descriptor read/8, error -71 [ 232.806342][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 232.814478][ T63] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 232.825700][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 232.840675][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.853284][ T63] usb 2-1: Product: syz [ 232.858374][ T63] usb 2-1: Manufacturer: syz [ 232.865342][ T63] usb 2-1: SerialNumber: syz [ 232.875727][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 232.884123][ T63] r8152-cfgselector 2-1: config 0 descriptor?? [ 232.927822][ T10] usb 3-1: device descriptor read/8, error -71 [ 233.093351][ T63] r8152-cfgselector 2-1: Unknown version 0x0020 [ 233.102229][ T63] r8152-cfgselector 2-1: bad CDC descriptors [ 233.186247][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 233.217714][ T10] usb 3-1: device descriptor read/8, error -71 [ 233.256172][ T36] audit: type=1400 audit(2000000428.954:35185): avc: denied { getopt } for pid=4415 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.295330][ T63] r8152-cfgselector 2-1: USB disconnect, device number 109 [ 233.347559][ T10] usb 3-1: device descriptor read/8, error -71 [ 233.456539][ T10] usb usb3-port1: unable to enumerate USB device [ 233.575945][ T318] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 233.727689][ T318] usb 6-1: config 0 has an invalid interface number: 241 but max is 3 [ 233.737059][ T318] usb 6-1: config 0 has an invalid interface number: 46 but max is 3 [ 233.746060][ T318] usb 6-1: config 0 has an invalid interface number: 143 but max is 3 [ 233.754979][ T318] usb 6-1: config 0 has an invalid interface number: 80 but max is 3 [ 233.763474][ T318] usb 6-1: config 0 has an invalid interface number: 158 but max is 3 [ 233.771817][ T318] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 233.781356][ T318] usb 6-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 233.791499][ T318] usb 6-1: config 0 has no interface number 0 [ 233.802399][ T318] usb 6-1: config 0 has no interface number 1 [ 233.808776][ T318] usb 6-1: config 0 has no interface number 2 [ 233.815188][ T318] usb 6-1: config 0 has no interface number 3 [ 233.821633][ T318] usb 6-1: config 0 has no interface number 4 [ 233.828000][ T318] usb 6-1: config 0 interface 241 altsetting 12 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 233.839918][ T318] usb 6-1: config 0 interface 241 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 233.852832][ T318] usb 6-1: config 0 interface 241 altsetting 12 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 233.866924][ T318] usb 6-1: config 0 interface 241 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 233.883072][ T318] usb 6-1: too many endpoints for config 0 interface 46 altsetting 162: 42, using maximum allowed: 30 [ 233.897875][ T318] usb 6-1: config 0 interface 46 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 233.911088][ T318] usb 6-1: config 0 interface 46 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 233.925804][ T36] audit: type=1400 audit(2000000429.605:35186): avc: denied { unlink } for pid=4424 comm="syz.1.1296" name="#36" dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.927676][ T318] usb 6-1: config 0 interface 46 altsetting 162 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 233.961276][ T318] usb 6-1: config 0 interface 46 altsetting 162 has a duplicate endpoint with address 0x6, skipping [ 233.965742][ T36] audit: type=1400 audit(2000000429.605:35187): avc: denied { mount } for pid=4424 comm="syz.1.1296" name="/" dev="overlay" ino=1588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 233.985743][ T318] usb 6-1: config 0 interface 46 altsetting 162 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 234.015721][ T318] usb 6-1: config 0 interface 46 altsetting 162 has an endpoint descriptor with address 0x68, changing to 0x8 [ 234.035713][ T318] usb 6-1: config 0 interface 46 altsetting 162 endpoint 0x8 has invalid maxpacket 56343, setting to 64 [ 234.055681][ T318] usb 6-1: config 0 interface 46 altsetting 162 has 8 endpoint descriptors, different from the interface descriptor's value: 42 [ 234.069602][ T318] usb 6-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 234.088224][ T318] usb 6-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 234.102076][ T318] usb 6-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 234.114218][ T318] usb 6-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 234.128403][ T318] usb 6-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 234.139183][ T318] usb 6-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 234.150537][ T318] usb 6-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 234.163064][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 234.174870][ T318] usb 6-1: config 0 interface 158 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 234.187439][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 234.198913][ T318] usb 6-1: config 0 interface 158 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 234.210289][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 234.221045][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 234.231804][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 234.242946][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 234.253787][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 234.264792][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 234.276433][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 234.287839][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 234.299585][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 234.313533][ T318] usb 6-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 234.326554][ T318] usb 6-1: config 0 interface 158 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 234.341671][ T318] usb 6-1: config 0 interface 241 has no altsetting 0 [ 234.349164][ T318] usb 6-1: config 0 interface 46 has no altsetting 0 [ 234.356374][ T318] usb 6-1: config 0 interface 143 has no altsetting 0 [ 234.363711][ T318] usb 6-1: config 0 interface 80 has no altsetting 0 [ 234.374147][ T318] usb 6-1: New USB device found, idVendor=0af0, idProduct=9200, bcdDevice=6a.bd [ 234.383503][ T318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.391661][ T318] usb 6-1: Product: syz [ 234.396513][ T318] usb 6-1: Manufacturer: syz [ 234.401707][ T318] usb 6-1: SerialNumber: syz [ 234.408120][ T318] usb 6-1: config 0 descriptor?? [ 234.414395][ T4416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 234.422230][ T4416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 234.495536][ T45] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 234.581816][ T4433] kvm: kvm [4430]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7891 [ 234.592641][ T4433] kvm: kvm [4430]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x8f17 [ 234.647600][ T318] usb 6-1: USB disconnect, device number 23 [ 234.656225][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.677503][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 234.686995][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.695068][ T45] usb 3-1: Product: syz [ 234.699433][ T45] usb 3-1: Manufacturer: syz [ 234.704077][ T45] usb 3-1: SerialNumber: syz [ 234.720038][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 234.726348][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 235.119697][ T318] usb 3-1: USB disconnect, device number 119 [ 235.535022][ T366] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 235.633465][ T4448] 9p: Unknown uid 00000000004294967295 [ 235.666932][ T4450] tipc: Started in network mode [ 235.671954][ T4450] tipc: Node identity 1, cluster identity 4711 [ 235.678291][ T4450] tipc: Node number set to 1 [ 235.683536][ T4450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1305'. [ 235.694420][ T4450] tipc: Invalid UDP bearer configuration [ 235.694449][ T4450] tipc: Enabling of bearer rejected, failed to enable media [ 235.711264][ T366] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.722813][ T366] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 235.736746][ T366] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 235.748456][ T366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.757313][ T366] usb 6-1: Product: syz [ 235.762304][ T366] usb 6-1: Manufacturer: syz [ 235.767241][ T366] usb 6-1: SerialNumber: syz [ 235.776568][ T4444] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.835001][ T63] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 235.954788][ T45] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 236.004779][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 236.013961][ T63] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 236.024512][ T63] usb 2-1: config 0 has no interface number 0 [ 236.032816][ T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 236.044490][ T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 236.058356][ T63] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 236.069252][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.080812][ T63] usb 2-1: Product: syz [ 236.086616][ T63] usb 2-1: Manufacturer: syz [ 236.091859][ T63] usb 2-1: SerialNumber: syz [ 236.097994][ T63] usb 2-1: config 0 descriptor?? [ 236.103686][ T4446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 236.112879][ T45] usb 3-1: device descriptor read/64, error -71 [ 236.114819][ T4446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 236.330673][ T4446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 236.339677][ T4446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 236.354909][ T45] usb 3-1: device descriptor read/64, error -71 [ 236.489921][ T366] usb 6-1: invalid MIDI out EP 0 [ 236.509169][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 236.509188][ T36] audit: type=1400 audit(2000000432.196:35195): avc: denied { mount } for pid=4453 comm="syz.5.1307" name="/" dev="incremental-fs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.548030][ T366] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.548083][ T36] audit: type=1400 audit(2000000432.196:35196): avc: denied { setattr } for pid=4453 comm="syz.5.1307" name="/" dev="incremental-fs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.562527][ T366] usb 6-1: USB disconnect, device number 24 [ 236.594655][ T36] audit: type=1400 audit(2000000432.236:35197): avc: denied { unmount } for pid=3783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.600266][ T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 236.622453][ T45] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 236.646117][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.764428][ T45] usb 3-1: device descriptor read/64, error -71 [ 236.934358][ T366] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 237.004350][ T45] usb 3-1: device descriptor read/64, error -71 [ 237.084307][ T366] usb 6-1: Using ep0 maxpacket: 8 [ 237.090773][ T366] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 237.101100][ T366] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.117490][ T366] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 237.124330][ T45] usb usb3-port1: attempt power cycle [ 237.126635][ T366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.142118][ T366] usb 6-1: Product: syz [ 237.146472][ T366] usb 6-1: Manufacturer: syz [ 237.152908][ T366] usb 6-1: SerialNumber: syz [ 237.158884][ T4459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.367990][ T366] usblp0: Disabling reads from problematic bidirectional printer [ 237.378123][ T366] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 237.396205][ T366] usb 6-1: USB disconnect, device number 25 [ 237.403802][ T366] usblp0: removed [ 237.484134][ T45] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 237.505558][ T45] usb 3-1: device descriptor read/8, error -71 [ 237.635105][ T45] usb 3-1: device descriptor read/8, error -71 [ 237.873970][ T45] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 237.895353][ T45] usb 3-1: device descriptor read/8, error -71 [ 238.035242][ T45] usb 3-1: device descriptor read/8, error -71 [ 238.143869][ T45] usb usb3-port1: unable to enumerate USB device [ 238.453854][ T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 238.465441][ T63] asix 2-1:0.34: probe with driver asix failed with error -71 [ 238.475003][ T63] usb 2-1: USB disconnect, device number 110 [ 238.965267][ T36] audit: type=1400 audit(2000000434.657:35198): avc: denied { create } for pid=4460 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.991583][ T36] audit: type=1400 audit(2000000434.657:35199): avc: denied { write } for pid=4460 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.042899][ T36] audit: type=1400 audit(2000000434.727:35200): avc: denied { mount } for pid=4473 comm="syz.4.1314" name="/" dev="configfs" ino=2160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 239.076687][ T36] audit: type=1400 audit(2000000434.767:35201): avc: denied { mount } for pid=4473 comm="syz.4.1314" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.102240][ T36] audit: type=1400 audit(2000000434.767:35202): avc: denied { mounton } for pid=4473 comm="syz.4.1314" path="/128/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 239.127027][ T36] audit: type=1400 audit(2000000434.767:35203): avc: denied { search } for pid=4473 comm="syz.4.1314" name="/" dev="configfs" ino=2160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.155462][ T36] audit: type=1400 audit(2000000434.767:35204): avc: denied { write } for pid=4473 comm="syz.4.1314" name="b_vendor_code" dev="configfs" ino=41046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 239.253263][ T63] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 239.424681][ T63] usb 2-1: config 0 has an invalid interface number: 241 but max is 3 [ 239.435623][ T63] usb 2-1: config 0 has an invalid interface number: 46 but max is 3 [ 239.444766][ T63] usb 2-1: config 0 has an invalid interface number: 143 but max is 3 [ 239.454451][ T63] usb 2-1: config 0 has an invalid interface number: 80 but max is 3 [ 239.462985][ T63] usb 2-1: config 0 has an invalid interface number: 158 but max is 3 [ 239.473164][ T63] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 239.482352][ T63] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 239.492892][ T63] usb 2-1: config 0 has no interface number 0 [ 239.500641][ T63] usb 2-1: config 0 has no interface number 1 [ 239.508369][ T63] usb 2-1: config 0 has no interface number 2 [ 239.516738][ T63] usb 2-1: config 0 has no interface number 3 [ 239.523697][ T63] usb 2-1: config 0 has no interface number 4 [ 239.530475][ T63] usb 2-1: config 0 interface 241 altsetting 12 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 239.545415][ T63] usb 2-1: config 0 interface 241 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 239.559611][ T63] usb 2-1: config 0 interface 241 altsetting 12 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 239.576182][ T63] usb 2-1: config 0 interface 241 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 239.591078][ T63] usb 2-1: too many endpoints for config 0 interface 46 altsetting 162: 42, using maximum allowed: 30 [ 239.604610][ T63] usb 2-1: config 0 interface 46 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 239.618163][ T63] usb 2-1: config 0 interface 46 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 239.633411][ T366] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 239.642287][ T63] usb 2-1: config 0 interface 46 altsetting 162 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 239.656364][ T63] usb 2-1: config 0 interface 46 altsetting 162 has a duplicate endpoint with address 0x6, skipping [ 239.669567][ T63] usb 2-1: config 0 interface 46 altsetting 162 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 239.683141][ T63] usb 2-1: config 0 interface 46 altsetting 162 has an endpoint descriptor with address 0x68, changing to 0x8 [ 239.697485][ T63] usb 2-1: config 0 interface 46 altsetting 162 endpoint 0x8 has invalid maxpacket 56343, setting to 64 [ 239.710035][ T63] usb 2-1: config 0 interface 46 altsetting 162 has 8 endpoint descriptors, different from the interface descriptor's value: 42 [ 239.725757][ T63] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 239.738587][ T63] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 239.757388][ T63] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 239.771766][ T63] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 239.788095][ T63] usb 2-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 239.803056][ T63] usb 2-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 239.818471][ T63] usb 2-1: config 0 interface 80 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 239.835751][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 239.848847][ T63] usb 2-1: config 0 interface 158 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 239.863237][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 239.875357][ T63] usb 2-1: config 0 interface 158 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 239.886893][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 239.899970][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 239.911521][ T366] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.927090][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 239.943094][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 239.955843][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 239.967864][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 239.979504][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 239.993824][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 240.009188][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 240.023870][ T366] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 240.038322][ T63] usb 2-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 240.049919][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.059395][ T63] usb 2-1: config 0 interface 158 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 240.073257][ T366] usb 3-1: Product: syz [ 240.077765][ T366] usb 3-1: Manufacturer: syz [ 240.083387][ T63] usb 2-1: config 0 interface 241 has no altsetting 0 [ 240.090376][ T63] usb 2-1: config 0 interface 46 has no altsetting 0 [ 240.097173][ T366] usb 3-1: SerialNumber: syz [ 240.105244][ T366] usb-storage 3-1:1.0: USB Mass Storage device detected [ 240.115973][ T63] usb 2-1: config 0 interface 143 has no altsetting 0 [ 240.123189][ T63] usb 2-1: config 0 interface 80 has no altsetting 0 [ 240.131482][ T366] scsi host1: usb-storage 3-1:1.0 [ 240.137884][ T63] usb 2-1: New USB device found, idVendor=0af0, idProduct=9200, bcdDevice=6a.bd [ 240.155961][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.164905][ T63] usb 2-1: Product: syz [ 240.169253][ T63] usb 2-1: Manufacturer: syz [ 240.174065][ T63] usb 2-1: SerialNumber: syz [ 240.179234][ T63] usb 2-1: config 0 descriptor?? [ 240.184868][ T4467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 240.194035][ T4467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 240.318920][ T4032] usb 3-1: USB disconnect, device number 124 [ 240.414330][ T63] usb 2-1: USB disconnect, device number 111 [ 240.462701][ T366] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 240.592613][ T366] usb 6-1: device descriptor read/64, error -71 [ 240.832458][ T366] usb 6-1: device descriptor read/64, error -71 [ 240.987178][ T4516] 9pnet_fd: Insufficient options for proto=fd [ 241.072381][ T366] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 241.216916][ T366] usb 6-1: device descriptor read/64, error -71 [ 241.292300][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 241.432247][ T10] usb 2-1: device descriptor read/64, error -71 [ 241.462259][ T366] usb 6-1: device descriptor read/64, error -71 [ 241.502195][ T4032] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 241.572322][ T366] usb usb6-port1: attempt power cycle [ 241.642155][ T4032] usb 3-1: device descriptor read/64, error -71 [ 241.672183][ T10] usb 2-1: device descriptor read/64, error -71 [ 241.882088][ T4032] usb 3-1: device descriptor read/64, error -71 [ 241.912019][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 241.920613][ T366] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 241.943586][ T366] usb 6-1: device descriptor read/8, error -71 [ 242.061926][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.073615][ T366] usb 6-1: device descriptor read/8, error -71 [ 242.132058][ T4032] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 242.271830][ T4032] usb 3-1: device descriptor read/64, error -71 [ 242.301807][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.311807][ T366] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 242.343367][ T366] usb 6-1: device descriptor read/8, error -71 [ 242.412044][ T10] usb usb2-port1: attempt power cycle [ 242.473207][ T366] usb 6-1: device descriptor read/8, error -71 [ 242.511695][ T4032] usb 3-1: device descriptor read/64, error -71 [ 242.581779][ T366] usb usb6-port1: unable to enumerate USB device [ 242.621848][ T4032] usb usb3-port1: attempt power cycle [ 242.751629][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 242.773353][ T10] usb 2-1: device descriptor read/8, error -71 [ 242.902818][ T10] usb 2-1: device descriptor read/8, error -71 [ 242.961497][ T4032] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 242.982734][ T4032] usb 3-1: device descriptor read/8, error -71 [ 243.112949][ T4032] usb 3-1: device descriptor read/8, error -71 [ 243.141401][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 243.162643][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.292966][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.354048][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 243.354067][ T36] audit: type=1400 audit(2000000439.049:35227): avc: denied { create } for pid=4544 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.361346][ T4032] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 243.411457][ T10] usb usb2-port1: unable to enumerate USB device [ 243.412485][ T4032] usb 3-1: device descriptor read/8, error -71 [ 243.429756][ T36] audit: type=1400 audit(2000000439.119:35228): avc: denied { map } for pid=4544 comm="syz.5.1339" path="socket:[41209]" dev="sockfs" ino=41209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 243.459063][ T36] audit: type=1400 audit(2000000439.119:35229): avc: denied { accept } for pid=4544 comm="syz.5.1339" path="socket:[41209]" dev="sockfs" ino=41209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 243.553258][ T4032] usb 3-1: device descriptor read/8, error -71 [ 243.661255][ T4032] usb usb3-port1: unable to enumerate USB device [ 243.741139][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 243.891052][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 243.897766][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.914076][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.926300][ T45] usb 6-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 243.937206][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.945842][ T45] usb 6-1: Product: syz [ 243.951354][ T45] usb 6-1: Manufacturer: syz [ 243.956156][ T45] usb 6-1: SerialNumber: syz [ 244.080261][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.090714][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.100638][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.109577][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.164647][ T36] audit: type=1400 audit(2000000439.859:35230): avc: denied { getopt } for pid=4548 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.177603][ T45] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 244.197695][ T45] usb 6-1: unit 0 not found! [ 244.205322][ T45] usb 6-1: USB disconnect, device number 30 [ 244.214050][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.385829][ T36] audit: type=1400 audit(2000000440.080:35231): avc: denied { remount } for pid=4557 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 244.480762][ T366] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 244.620695][ T366] usb 2-1: device descriptor read/64, error -71 [ 244.713538][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 244.720403][ T36] audit: type=1400 audit(2000000440.410:35232): avc: denied { write } for pid=4562 comm="syz.5.1346" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.753871][ T36] audit: type=1400 audit(2000000440.450:35233): avc: denied { create } for pid=4562 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.778350][ T36] audit: type=1400 audit(2000000440.450:35234): avc: denied { mounton } for pid=4562 comm="syz.5.1346" path="/64/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 244.860713][ T366] usb 2-1: device descriptor read/64, error -71 [ 244.880609][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 244.887801][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.901072][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 244.911535][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.922258][ T10] usb 3-1: config 0 descriptor?? [ 245.046153][ T36] audit: type=1400 audit(2000000440.740:35235): avc: denied { ioctl } for pid=4568 comm="syz.5.1348" path="socket:[40474]" dev="sockfs" ino=40474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.073205][ T36] audit: type=1400 audit(2000000440.750:35236): avc: denied { create } for pid=4568 comm="syz.5.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.100394][ T366] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 245.245190][ T366] usb 2-1: device descriptor read/64, error -71 [ 245.301984][ T4581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4581 comm=syz.5.1351 [ 245.319766][ T4581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=4581 comm=syz.5.1351 [ 245.334684][ T4581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=4581 comm=syz.5.1351 [ 245.351546][ T4581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4581 comm=syz.5.1351 [ 245.354996][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.375796][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.383857][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.393330][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.403317][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.412060][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.420440][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.430249][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.438600][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.447785][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.456813][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.470016][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.478177][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.486895][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.494915][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.511642][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.519443][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.527572][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.536479][ T366] usb 2-1: device descriptor read/64, error -71 [ 245.545553][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.559647][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.569041][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.570433][ T4588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1353'. [ 245.577879][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.597636][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.609136][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.617757][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.625560][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.633076][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.640527][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.648273][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.656149][ T366] usb usb2-port1: attempt power cycle [ 245.662287][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.669795][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.677973][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.685790][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.693936][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.703407][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.711648][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.720026][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.730401][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.741407][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.749972][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.757913][ T10] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0 [ 245.817667][ T4595] Mass Storage Function, version: 2009/09/11 [ 245.820097][ T10] hid-picolcd 0003:04D8:C002.0023: No report with id 0x11 found [ 245.824589][ T4595] LUN: removable file: (no medium) [ 245.837462][ T10] usb 3-1: USB disconnect, device number 3 [ 246.010084][ T366] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 246.031773][ T366] usb 2-1: device descriptor read/8, error -71 [ 246.129995][ T318] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 246.156318][ T4607] cgroup: subsys name conflicts with all [ 246.163070][ T366] usb 2-1: device descriptor read/8, error -71 [ 246.270188][ T318] usb 6-1: device descriptor read/64, error -71 [ 246.409809][ T366] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 246.441042][ T366] usb 2-1: device descriptor read/8, error -71 [ 246.519773][ T318] usb 6-1: device descriptor read/64, error -71 [ 246.571253][ T366] usb 2-1: device descriptor read/8, error -71 [ 246.680110][ T366] usb usb2-port1: unable to enumerate USB device [ 246.759623][ T318] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 246.899588][ T318] usb 6-1: device descriptor read/64, error -71 [ 247.139510][ T318] usb 6-1: device descriptor read/64, error -71 [ 247.249521][ T318] usb usb6-port1: attempt power cycle [ 247.479286][ T366] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 247.589332][ T318] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 247.609418][ T366] usb 2-1: device descriptor read/64, error -71 [ 247.610797][ T318] usb 6-1: device descriptor read/8, error -71 [ 247.750514][ T318] usb 6-1: device descriptor read/8, error -71 [ 247.859152][ T366] usb 2-1: device descriptor read/64, error -71 [ 247.989083][ T318] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 248.010350][ T318] usb 6-1: device descriptor read/8, error -71 [ 248.099092][ T366] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 248.140351][ T318] usb 6-1: device descriptor read/8, error -71 [ 248.239019][ T366] usb 2-1: device descriptor read/64, error -71 [ 248.249456][ T318] usb usb6-port1: unable to enumerate USB device [ 248.360452][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 248.360485][ T36] audit: type=1326 audit(2000000444.051:35252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.398849][ T36] audit: type=1326 audit(2000000444.051:35253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.432691][ T36] audit: type=1326 audit(2000000444.051:35254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.461018][ T36] audit: type=1326 audit(2000000444.051:35255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.488975][ T36] audit: type=1326 audit(2000000444.051:35256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.519103][ T36] audit: type=1326 audit(2000000444.051:35257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.519150][ T366] usb 2-1: device descriptor read/64, error -71 [ 248.547874][ T36] audit: type=1326 audit(2000000444.051:35258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.582896][ T36] audit: type=1326 audit(2000000444.051:35259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.610710][ T36] audit: type=1326 audit(2000000444.051:35260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.640386][ T36] audit: type=1326 audit(2000000444.051:35261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1366" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd519e0d9 code=0x50000 [ 248.677541][ T366] usb usb2-port1: attempt power cycle [ 249.028711][ T366] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 249.059626][ T366] usb 2-1: device descriptor read/8, error -71 [ 249.189437][ T366] usb 2-1: device descriptor read/8, error -71 [ 249.288495][ T63] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 249.428375][ T366] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 249.458310][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 249.464376][ T63] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 249.478778][ T366] usb 2-1: device descriptor read/8, error -71 [ 249.486849][ T63] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 249.494799][ T63] usb 6-1: can't read configurations, error -61 [ 249.609292][ T366] usb 2-1: device descriptor read/8, error -71 [ 249.628258][ T63] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 249.718351][ T366] usb usb2-port1: unable to enumerate USB device [ 249.788168][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 249.801062][ T63] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 249.820465][ T63] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 249.830156][ T63] usb 6-1: can't read configurations, error -61 [ 249.856167][ T63] usb usb6-port1: attempt power cycle [ 250.199118][ T63] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 250.228379][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 250.237415][ T4640] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1372'. [ 250.237651][ T63] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 250.274397][ T63] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 250.287152][ T63] usb 6-1: can't read configurations, error -61 [ 250.427868][ T63] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 250.448194][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 250.455291][ T63] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 250.466481][ T63] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 250.476057][ T63] usb 6-1: can't read configurations, error -61 [ 250.483067][ T63] usb usb6-port1: unable to enumerate USB device [ 250.577795][ T45] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 250.738988][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 250.757697][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 250.771046][ T45] usb 2-1: config 1 interface 1 has no altsetting 0 [ 250.782649][ T45] usb 2-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 250.797692][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.808667][ T45] usb 2-1: Product: syz [ 250.813474][ T45] usb 2-1: Manufacturer: syz [ 250.827853][ T45] usb 2-1: SerialNumber: syz [ 251.039150][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.057074][ T45] usb 2-1: selecting invalid altsetting 0 [ 251.065707][ T45] usb 2-1: cannot setup if 2: error -71 [ 251.071755][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 251.089495][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.096357][ T45] usb 2-1: selecting invalid altsetting 0 [ 251.119773][ T45] usb 2-1: cannot setup if 2: error -71 [ 251.126596][ T45] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 251.149822][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.157603][ T45] usb 2-1: selecting invalid altsetting 0 [ 251.165895][ T45] usb 2-1: cannot setup if 2: error -71 [ 251.174679][ T45] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 251.191749][ T45] usb 2-1: USB disconnect, device number 124 [ 251.218230][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.647342][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.797347][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 251.803990][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.813595][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.823490][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.837258][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.847256][ T366] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 251.849640][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.870191][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.887440][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.898902][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.909062][ T45] usb 3-1: config 0 descriptor?? [ 252.007131][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 252.014345][ T366] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 252.028298][ T366] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.049308][ T366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.056711][ T366] usb 2-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 252.069179][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.084799][ T366] usb 2-1: config 0 descriptor?? [ 252.128398][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 252.149087][ T45] usb 3-1: USB disconnect, device number 4 [ 252.158269][ T45] usblp0: removed [ 252.427013][ T63] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 252.496932][ T366] input: HID 1b96:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0006.0024/input/input56 [ 252.511150][ T366] ntrig 0003:1B96:0006.0024: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.1-1/input0 [ 252.586892][ T1049] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 252.595839][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 252.605737][ T63] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 252.614998][ T63] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 252.629800][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 252.642396][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.655077][ T63] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.666206][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.682331][ T63] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 252.693487][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.706515][ T63] usb 6-1: config 0 descriptor?? [ 252.712309][ T366] usb 2-1: USB disconnect, device number 125 [ 252.766859][ T1049] usb 3-1: Using ep0 maxpacket: 32 [ 252.773327][ T1049] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 252.781908][ T1049] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 252.790841][ T1049] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 252.800053][ T1049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.810596][ T1049] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.821554][ T1049] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.837653][ T1049] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 252.847569][ T1049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.857847][ T1049] usb 3-1: config 0 descriptor?? [ 252.921383][ T63] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 252.935461][ T63] usb 6-1: USB disconnect, device number 39 [ 252.943031][ T63] usblp0: removed [ 253.104388][ T1049] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 253.339131][ T4032] usb 3-1: USB disconnect, device number 5 [ 253.348103][ T4032] usblp0: removed [ 253.376737][ T1049] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 253.526482][ T1049] usb 6-1: Using ep0 maxpacket: 32 [ 253.534039][ T1049] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 253.543790][ T1049] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.554314][ T1049] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.564503][ T1049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.577658][ T366] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 253.586945][ T1049] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.596951][ T1049] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.612770][ T1049] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.624272][ T1049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.635030][ T1049] usb 6-1: config 0 descriptor?? [ 253.767647][ T366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.777970][ T366] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.786913][ T366] usb 2-1: config 1 has no interface number 0 [ 253.793041][ T366] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.804544][ T366] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 253.814448][ T366] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.831748][ T366] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.845708][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.857564][ T1049] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 253.872281][ T366] usb 2-1: Product: syz [ 253.877623][ T366] usb 2-1: Manufacturer: syz [ 253.884298][ T366] usb 2-1: SerialNumber: syz [ 253.896204][ T36] kauditd_printk_skb: 30015 callbacks suppressed [ 253.896223][ T36] audit: type=1400 audit(2000000449.594:65277): avc: granted { setsecparam } for pid=4681 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 253.926591][ T36] audit: type=1400 audit(2000000449.604:65278): avc: denied { read write } for pid=4683 comm="syz.2.1391" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.953062][ T36] audit: type=1400 audit(2000000449.604:65279): avc: denied { open } for pid=4683 comm="syz.2.1391" path="/364/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.978872][ T36] audit: type=1400 audit(2000000449.604:65280): avc: denied { mounton } for pid=4683 comm="syz.2.1391" path="/364/file0" dev="configfs" ino=2160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.004653][ T36] audit: type=1400 audit(2000000449.604:65281): avc: denied { read } for pid=4683 comm="syz.2.1391" name="/" dev="configfs" ino=2160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.031830][ T36] audit: type=1400 audit(2000000449.604:65282): avc: denied { open } for pid=4683 comm="syz.2.1391" path="/364/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.045642][ T318] usb 6-1: USB disconnect, device number 40 [ 254.055448][ T36] audit: type=1400 audit(2000000449.604:65283): avc: denied { setattr } for pid=4683 comm="syz.2.1391" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 254.066224][ T318] usblp0: removed [ 254.156147][ T4032] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.286403][ T4032] usb 3-1: device descriptor read/64, error -71 [ 254.526026][ T4032] usb 3-1: device descriptor read/64, error -71 [ 254.587792][ T36] audit: type=1400 audit(2000000450.294:65284): avc: denied { remount } for pid=4685 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 254.613740][ T4686] netlink: 'syz.5.1392': attribute type 64 has an invalid length. [ 254.697229][ T366] cdc_ncm 2-1:1.1: bind() failure [ 254.704368][ T366] usb 2-1: USB disconnect, device number 126 [ 254.765909][ T4032] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 254.915821][ T4032] usb 3-1: device descriptor read/64, error -71 [ 255.155736][ T4032] usb 3-1: device descriptor read/64, error -71 [ 255.185285][ T4697] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 255.196653][ T4697] overlayfs: missing 'lowerdir' [ 255.212800][ T36] audit: type=1400 audit(2000000450.905:65285): avc: denied { bind } for pid=4700 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.235115][ T36] audit: type=1400 audit(2000000450.905:65286): avc: denied { listen } for pid=4700 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.265722][ T4032] usb usb3-port1: attempt power cycle [ 255.425607][ T366] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 255.565534][ T366] usb 6-1: device descriptor read/64, error -71 [ 255.615469][ T4032] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.636853][ T4032] usb 3-1: device descriptor read/8, error -71 [ 255.766652][ T4032] usb 3-1: device descriptor read/8, error -71 [ 255.805371][ T366] usb 6-1: device descriptor read/64, error -71 [ 256.015247][ T4032] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 256.036586][ T4032] usb 3-1: device descriptor read/8, error -71 [ 256.045351][ T366] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 256.166716][ T4032] usb 3-1: device descriptor read/8, error -71 [ 256.185231][ T366] usb 6-1: device descriptor read/64, error -71 [ 256.275195][ T4032] usb usb3-port1: unable to enumerate USB device [ 256.435073][ T366] usb 6-1: device descriptor read/64, error -71 [ 256.455099][ T1049] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 256.545140][ T366] usb usb6-port1: attempt power cycle [ 256.605013][ T1049] usb 2-1: Using ep0 maxpacket: 32 [ 256.611708][ T1049] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 256.621343][ T1049] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 256.632533][ T1049] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 256.642874][ T1049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.653594][ T1049] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.664157][ T1049] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 256.678922][ T1049] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 256.689346][ T1049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.700561][ T1049] usb 2-1: config 0 descriptor?? [ 256.896665][ T366] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 256.917270][ T1049] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 256.935431][ T366] usb 6-1: device descriptor read/8, error -71 [ 256.943695][ T1049] usb 2-1: USB disconnect, device number 127 [ 256.952771][ T1049] usblp0: removed [ 256.961136][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4720 comm=syz.2.1401 [ 257.037492][ T4722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1402'. [ 257.068211][ T366] usb 6-1: device descriptor read/8, error -71 [ 257.314727][ T366] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 257.336092][ T366] usb 6-1: device descriptor read/8, error -71 [ 257.364624][ T1049] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 257.434612][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 257.465752][ T366] usb 6-1: device descriptor read/8, error -71 [ 257.514546][ T1049] usb 2-1: Using ep0 maxpacket: 32 [ 257.521134][ T1049] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 257.529700][ T1049] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 257.538881][ T1049] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 257.548768][ T1049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.558852][ T1049] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.569060][ T1049] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.574515][ T45] usb 3-1: device descriptor read/64, error -71 [ 257.583040][ T1049] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 257.599527][ T366] usb usb6-port1: unable to enumerate USB device [ 257.606645][ T1049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.616290][ T1049] usb 2-1: config 0 descriptor?? [ 257.823530][ T1049] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 257.834507][ T45] usb 3-1: device descriptor read/64, error -71 [ 258.026762][ T1049] usb 2-1: USB disconnect, device number 2 [ 258.035001][ T1049] usblp0: removed [ 258.084348][ T45] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 258.224215][ T45] usb 3-1: device descriptor read/64, error -71 [ 258.318372][ T4736] overlay: ./file0 is not a directory [ 258.464251][ T45] usb 3-1: device descriptor read/64, error -71 [ 258.574391][ T45] usb usb3-port1: attempt power cycle [ 258.697633][ T4756] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 258.794066][ T318] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 258.846392][ T4763] netlink: 'syz.1.1420': attribute type 12 has an invalid length. [ 258.913971][ T45] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 258.945463][ T318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.956509][ T45] usb 3-1: device descriptor read/8, error -71 [ 258.964990][ T318] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 258.974542][ T318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.983150][ T318] usb 6-1: Product: syz [ 258.988102][ T318] usb 6-1: Manufacturer: syz [ 258.992926][ T318] usb 6-1: SerialNumber: syz [ 259.084992][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.174141][ T541] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 259.213961][ T318] usb 6-1: 1:1 : unsupported format bits 0x2020000 [ 259.223405][ T318] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 259.234938][ T318] usb 6-1: 2:1 : unsupported format bits 0x2020000 [ 259.245948][ T318] usb 6-1: USB disconnect, device number 45 [ 259.263062][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.323933][ T541] usb 2-1: Using ep0 maxpacket: 32 [ 259.331769][ T541] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.343544][ T541] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.354022][ T45] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 259.362605][ T541] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.373634][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.385998][ T541] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.398910][ T541] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.414635][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.422974][ T541] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.429790][ T4780] netlink: 772 bytes leftover after parsing attributes in process `syz.4.1427'. [ 259.433337][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.454912][ T541] usb 2-1: config 0 descriptor?? [ 259.544887][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.653803][ T45] usb usb3-port1: unable to enumerate USB device [ 259.665584][ T541] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.681640][ T541] usb 2-1: USB disconnect, device number 3 [ 259.693204][ T541] usblp0: removed [ 259.727928][ T4786] netlink: 'syz.4.1430': attribute type 46 has an invalid length. [ 259.774103][ T4789] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1431'. [ 260.043112][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 260.043132][ T36] audit: type=1400 audit(2000000455.737:65299): avc: denied { bind } for pid=4800 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.073538][ T45] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 260.083098][ T36] audit: type=1400 audit(2000000455.757:65300): avc: denied { map } for pid=4800 comm="syz.4.1436" path="socket:[43308]" dev="sockfs" ino=43308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.109261][ T36] audit: type=1400 audit(2000000455.757:65301): avc: denied { read write } for pid=4800 comm="syz.4.1436" path="socket:[43308]" dev="sockfs" ino=43308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.223275][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 260.229798][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.243805][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 260.268252][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.281557][ T45] usb 6-1: config 0 descriptor?? [ 260.303842][ T4812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4812 comm=syz.4.1441 [ 260.338811][ T36] audit: type=1400 audit(2000000456.027:65302): avc: denied { name_bind } for pid=4813 comm="syz.4.1442" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 260.421516][ T36] audit: type=1400 audit(2000000456.117:65303): avc: denied { read } for pid=4823 comm="syz.4.1445" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.421855][ T4824] rust_binder: 4823:4824 got reply transaction with no transaction stack [ 260.454152][ T36] audit: type=1400 audit(2000000456.117:65304): avc: denied { open } for pid=4823 comm="syz.4.1445" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.457241][ T4824] rust_binder: 4823:4824 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 [ 260.489758][ T36] audit: type=1400 audit(2000000456.117:65305): avc: denied { ioctl } for pid=4823 comm="syz.4.1445" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.489815][ T36] audit: type=1400 audit(2000000456.117:65306): avc: denied { set_context_mgr } for pid=4823 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.492874][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.560033][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.560657][ T1049] rust_binder: 4823: undelivered TRANSACTION_ERROR: 29201 [ 260.579493][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.587313][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.595578][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.602317][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 260.610839][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.620896][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.628600][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.636841][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.644635][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.651779][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.660004][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.661196][ T36] audit: type=1400 audit(2000000456.367:65307): avc: denied { setopt } for pid=4829 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.667476][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.695880][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.703359][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.710280][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.720554][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.728057][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.736847][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.743772][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.752394][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.760992][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.776803][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.784720][ T36] audit: type=1400 audit(2000000456.477:65308): avc: denied { append } for pid=4834 comm="syz.4.1449" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.784903][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.821397][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.829892][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.839526][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.848165][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.855164][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.862598][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.869828][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.877036][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.886731][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.894011][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.901574][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.909066][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.920814][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.928077][ T45] lua 0003:1E7D:2C2E.0025: unknown main item tag 0x0 [ 260.938699][ T45] lua 0003:1E7D:2C2E.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 260.974021][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.990200][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.003052][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 261.018895][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 261.028426][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.037114][ T10] usb 3-1: Product: syz [ 261.042083][ T10] usb 3-1: Manufacturer: syz [ 261.046791][ T10] usb 3-1: SerialNumber: syz [ 261.053834][ T10] usb 3-1: config 0 descriptor?? [ 261.059260][ T4818] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.068639][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 261.270657][ T4808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.279854][ T4808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.289665][ T10] usb 3-1: USB disconnect, device number 14 [ 261.536213][ T4844] kvm: MWAIT instruction emulated as NOP! [ 261.677092][ T4851] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 261.901971][ T4858] kvm: pic: single mode not supported [ 261.902039][ T4858] kvm: pic: single mode not supported [ 261.907905][ T4858] kvm: pic: level sensitive irq not supported [ 261.917174][ T4858] kvm: pic: single mode not supported [ 261.923739][ T4858] kvm: pic: level sensitive irq not supported [ 261.931997][ T4858] kvm: pic: single mode not supported [ 261.940547][ T4858] kvm: pic: level sensitive irq not supported [ 262.132904][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 262.164895][ T4879] TCP: TCP_TX_DELAY enabled [ 262.298173][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.309150][ T10] usb 3-1: can't read configurations, error -61 [ 262.442351][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 262.604064][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.612375][ T10] usb 3-1: can't read configurations, error -61 [ 262.619770][ T10] usb usb3-port1: attempt power cycle [ 262.642172][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 262.792080][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 262.799156][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.810098][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.822595][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.828851][ T1049] usb 6-1: USB disconnect, device number 46 [ 262.832152][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.854048][ T45] usb 2-1: Product: syz [ 262.858908][ T45] usb 2-1: Manufacturer: syz [ 262.864715][ T45] usb 2-1: SerialNumber: syz [ 262.962116][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 262.984363][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.992389][ T10] usb 3-1: can't read configurations, error -61 [ 263.131953][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 263.154008][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 263.162140][ T10] usb 3-1: can't read configurations, error -61 [ 263.169544][ T10] usb usb3-port1: unable to enumerate USB device [ 263.586712][ T4917] sit0: entered promiscuous mode [ 263.592983][ T4917] netlink: 'syz.5.1481': attribute type 1 has an invalid length. [ 263.601288][ T4917] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1481'. [ 263.612130][ T4918] netlink: 'syz.5.1481': attribute type 1 has an invalid length. [ 263.621465][ T4918] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1481'. [ 263.902082][ T10] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 264.041567][ T10] usb 6-1: device descriptor read/64, error -71 [ 264.281369][ T10] usb 6-1: device descriptor read/64, error -71 [ 264.531642][ T10] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 264.671490][ T10] usb 6-1: device descriptor read/64, error -71 [ 264.914960][ T10] usb 6-1: device descriptor read/64, error -71 [ 265.031184][ T10] usb usb6-port1: attempt power cycle [ 265.290937][ T366] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 265.371007][ T10] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 265.403245][ T10] usb 6-1: device descriptor read/8, error -71 [ 265.462448][ T366] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.470195][ T45] usb 2-1: 0:2 : does not exist [ 265.474180][ T366] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 265.483315][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 265.491834][ T366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.508204][ T45] usb 2-1: USB disconnect, device number 4 [ 265.514308][ T366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 265.534302][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 265.553014][ T366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 265.569153][ T366] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.580225][ T10] usb 6-1: device descriptor read/8, error -71 [ 265.586964][ T366] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.596826][ T366] usb 3-1: Product: syz [ 265.601138][ T366] usb 3-1: Manufacturer: syz [ 265.608424][ T366] cdc_wdm 3-1:1.0: skipping garbage [ 265.614325][ T366] cdc_wdm 3-1:1.0: skipping garbage [ 265.623170][ T366] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 265.631531][ T366] cdc_wdm 3-1:1.0: Unknown control protocol [ 265.824564][ T318] usb 3-1: USB disconnect, device number 19 [ 265.830664][ T10] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 265.861983][ T10] usb 6-1: device descriptor read/8, error -71 [ 265.950682][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 265.991892][ T10] usb 6-1: device descriptor read/8, error -71 [ 266.100690][ T10] usb usb6-port1: unable to enumerate USB device [ 266.111875][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.125989][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.139062][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 266.148523][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.157554][ T45] usb 2-1: config 0 descriptor?? [ 266.568640][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 266.576882][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 266.588860][ T45] usb 2-1: USB disconnect, device number 5 [ 266.661129][ T4977] kvm: pic: level sensitive irq not supported [ 266.661504][ T4977] kvm: pic: single mode not supported [ 266.669605][ T4977] kvm: pic: single mode not supported [ 266.675070][ T4977] kvm: pic: level sensitive irq not supported [ 266.681540][ T4977] kvm: pic: level sensitive irq not supported [ 266.688624][ T4977] kvm: pic: single mode not supported [ 266.883167][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 266.883189][ T36] audit: type=1400 audit(2000000462.590:65330): avc: denied { setopt } for pid=4990 comm="syz.2.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.120077][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 267.273753][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.284901][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.293653][ T10] usb 3-1: Product: syz [ 267.298624][ T10] usb 3-1: Manufacturer: syz [ 267.304465][ T10] usb 3-1: SerialNumber: syz [ 267.319928][ T390] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 267.366527][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1511'. [ 267.378711][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'. [ 267.491469][ T390] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.503094][ T390] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.513699][ T390] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16905, setting to 64 [ 267.531787][ T390] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 267.543113][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.552360][ T390] usb 2-1: Product: syz [ 267.557448][ T390] usb 2-1: Manufacturer: syz [ 267.562456][ T390] usb 2-1: SerialNumber: syz [ 267.791801][ T390] usb 2-1: 0:2 : does not exist [ 267.806213][ T390] usb 2-1: USB disconnect, device number 6 [ 267.822626][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.108170][ T36] audit: type=1400 audit(2000000463.811:65331): avc: denied { create } for pid=5002 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 268.138107][ T390] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 268.291059][ T390] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.299577][ T390] usb 2-1: config 0 has no interface number 0 [ 268.305955][ T390] usb 2-1: config 0 interface 41 has no altsetting 0 [ 268.316753][ T390] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.329858][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.339288][ T390] usb 2-1: Product: syz [ 268.343950][ T390] usb 2-1: Manufacturer: syz [ 268.348570][ T390] usb 2-1: SerialNumber: syz [ 268.354919][ T390] usb 2-1: config 0 descriptor?? [ 268.399605][ T45] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 268.551053][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 268.566286][ T45] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 268.576237][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.585275][ T45] usb 6-1: Product: syz [ 268.589951][ T45] usb 6-1: Manufacturer: syz [ 268.595376][ T45] usb 6-1: SerialNumber: syz [ 268.603458][ T45] ums-onetouch 6-1:1.0: USB Mass Storage device detected [ 268.807014][ T10] usb 6-1: USB disconnect, device number 51 [ 269.165313][ T390] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 269.778883][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 269.883167][ T366] usb 3-1: USB disconnect, device number 20 [ 269.928812][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 269.938765][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 269.948356][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 269.958081][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 269.974355][ T36] audit: type=1400 audit(2000000465.682:65332): avc: denied { create } for pid=5032 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 269.977501][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.008819][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.020454][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.038327][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 270.049788][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.060387][ T10] usb 6-1: config 0 descriptor?? [ 270.267839][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.278213][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.292585][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 270.309342][ T10] usb 6-1: USB disconnect, device number 52 [ 270.312256][ T390] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 270.330294][ T390] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 270.330494][ T10] usblp0: removed [ 270.344012][ T390] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 270.362322][ T390] usb 2-1: USB disconnect, device number 7 [ 270.366875][ T5045] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 270.376845][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 270.458488][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 270.608633][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 270.616866][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 270.631165][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.644526][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.656319][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.670766][ T45] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 270.681192][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.689694][ T45] usb 3-1: Product: syz [ 270.694784][ T45] usb 3-1: Manufacturer: syz [ 270.700713][ T45] usb 3-1: SerialNumber: syz [ 270.707501][ T45] usb 3-1: config 0 descriptor?? [ 270.717394][ T5043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.727414][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input59 [ 270.740584][ T390] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 270.768813][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 270.825718][ T5052] loop7: detected capacity change from 0 to 7 [ 270.835972][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.845927][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.856271][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.865855][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.874617][ T5052] loop7: unable to read partition table [ 270.881678][ T5052] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 270.882941][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.902911][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.912751][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.922361][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.937567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.938009][ T10] usb 3-1: USB disconnect, device number 21 [ 270.949954][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.950005][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 270.950944][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.983906][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 270.989696][ T36] audit: type=1400 audit(2000000466.682:65333): avc: denied { write } for pid=5051 comm="syz.5.1533" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.027440][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.037525][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 271.050088][ T390] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.063026][ T390] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.065609][ T5052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.073580][ T390] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 271.085498][ T36] audit: type=1400 audit(2000000466.792:65334): avc: denied { setopt } for pid=5051 comm="syz.5.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.091845][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.530255][ T390] wacom 0003:056A:033B.0026: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 271.542386][ T390] input input61: Absolute device without dev->absinfo, refusing to register [ 271.552466][ T390] wacom 0003:056A:033B.0026: probe with driver wacom failed with error -22 [ 271.679988][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.686990][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.689229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 271.700579][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 271.711087][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.729783][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 271.739533][ T112] loop7: unable to read partition table [ 271.750873][ T5050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1532'. [ 271.763258][ T318] usb 2-1: USB disconnect, device number 8 [ 271.811505][ T36] audit: type=1400 audit(2000000467.522:65335): avc: denied { map } for pid=5069 comm="syz.5.1540" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 271.848000][ T390] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 272.009150][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.019152][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.030446][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.039890][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.055298][ T390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.073278][ T390] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 272.082394][ T390] usb 3-1: can't read configurations, error -71 [ 272.087734][ T1049] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 272.171750][ T5082] incfs: Can't find or create .index dir in ./file0 [ 272.173809][ T36] audit: type=1400 audit(2000000467.883:65336): avc: denied { mounton } for pid=5081 comm="syz.2.1543" path="/399/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 272.178977][ T5082] incfs: mount failed -1 [ 272.205495][ T36] audit: type=1400 audit(2000000467.883:65337): avc: denied { write } for pid=5081 comm="syz.2.1543" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 272.247696][ T1049] usb 6-1: Using ep0 maxpacket: 32 [ 272.255412][ T1049] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.264666][ T1049] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.275483][ T1049] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.286080][ T1049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.299816][ T1049] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.311522][ T1049] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.328941][ T1049] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.340742][ T1049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.351776][ T1049] usb 6-1: config 0 descriptor?? [ 272.399520][ T36] audit: type=1400 audit(2000000468.113:65338): avc: denied { execute } for pid=5092 comm="syz.1.1547" path="/file1" dev="ramfs" ino=44509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 272.560195][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.569575][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.579799][ T1049] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 272.593851][ T1049] usb 6-1: USB disconnect, device number 53 [ 272.601272][ T1049] usblp0: removed [ 272.717599][ T390] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 272.878930][ T390] usb 3-1: config index 0 descriptor too short (expected 202, got 80) [ 272.888898][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.906656][ T390] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 272.918731][ T390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.3c [ 272.930377][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.940729][ T390] usb 3-1: SerialNumber: syz [ 273.149660][ T10] usb 3-1: USB disconnect, device number 23 [ 273.347173][ T1049] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 273.497049][ T1049] usb 2-1: Using ep0 maxpacket: 32 [ 273.504430][ T1049] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.513833][ T1049] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.523766][ T1049] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.533052][ T1049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.543243][ T1049] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.555886][ T1049] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.569413][ T1049] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.579743][ T1049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.589875][ T1049] usb 2-1: config 0 descriptor?? [ 273.797654][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.807533][ T36] audit: type=1400 audit(2000000469.523:65339): avc: denied { call } for pid=5103 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 273.807570][ T5104] rust_binder: 5103:5104 got transaction with invalid offset [ 273.831509][ T5104] rust_binder: Failure in copy_transaction_data: EINVAL [ 273.838542][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.855670][ T5104] rust_binder: 5103:5104 transaction call to 5103:0 failed EINVAL, code 0 size 88-24 [ 273.871433][ T1049] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 273.896973][ T10] rust_binder: 5103: undelivered TRANSACTION_ERROR: 29201 [ 273.916984][ T1049] usb 2-1: USB disconnect, device number 9 [ 273.938338][ T1049] usblp0: removed [ 274.201858][ T5127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 274.376658][ T390] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.476632][ T1049] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 274.536581][ T390] usb 3-1: Using ep0 maxpacket: 32 [ 274.545014][ T390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.554336][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.565894][ T390] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.577722][ T390] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 274.588882][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.597706][ T390] usb 3-1: Product: syz [ 274.602069][ T390] usb 3-1: Manufacturer: syz [ 274.607443][ T390] usb 3-1: SerialNumber: syz [ 274.616955][ T390] usb 3-1: 0:1 : does not exist [ 274.622088][ T390] usb 3-1: 0:2 : does not exist [ 274.636517][ T1049] usb 6-1: Using ep0 maxpacket: 16 [ 274.643762][ T1049] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 274.657604][ T1049] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.673073][ T1049] usb 6-1: config 0 interface 0 has no altsetting 0 [ 274.680593][ T1049] usb 6-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 274.689861][ T1049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.703538][ T1049] usb 6-1: config 0 descriptor?? [ 274.814971][ T36] audit: type=1400 audit(2000000470.524:65340): avc: denied { name_bind } for pid=5122 comm="syz.2.1561" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 274.821165][ T390] usb 3-1: 3:0: failed to get current value for ch 0 (-22) [ 274.860749][ T390] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 274.871350][ T390] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 274.886505][ T390] usb 3-1: USB disconnect, device number 24 [ 274.902098][ T404] udevd[404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.911787][ T36] audit: type=1400 audit(2000000470.624:65341): avc: denied { view } for pid=5126 comm="syz.5.1562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 274.928063][ T5127] netlink: 'syz.5.1562': attribute type 4 has an invalid length. [ 274.958341][ T5127] netlink: 'syz.5.1562': attribute type 4 has an invalid length. [ 274.968432][ T5127] netlink: 'syz.5.1562': attribute type 4 has an invalid length. [ 275.427876][ T5136] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1565'. [ 275.454825][ T36] audit: type=1400 audit(2000000471.164:65342): avc: denied { mount } for pid=5139 comm="syz.1.1566" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.890197][ T1049] usbhid 6-1:0.0: can't add hid device: -71 [ 275.905946][ T1049] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 275.918669][ T1049] usb 6-1: USB disconnect, device number 54 [ 276.585674][ T1049] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 276.735703][ T45] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 276.745626][ T390] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.745764][ T1049] usb 3-1: Using ep0 maxpacket: 8 [ 276.764670][ T1049] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 276.775502][ T1049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.784828][ T1049] usb 3-1: Product: syz [ 276.789719][ T1049] usb 3-1: Manufacturer: syz [ 276.797056][ T1049] usb 3-1: SerialNumber: syz [ 276.885551][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 276.892803][ T390] usb 2-1: device descriptor read/64, error -71 [ 276.901678][ T45] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 276.917787][ T45] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 276.933770][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.941442][ T45] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 276.953827][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.965688][ T45] usb 6-1: config 0 descriptor?? [ 277.005781][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.016678][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.028092][ T5155] ================================================================== [ 277.038457][ T5155] BUG: KASAN: slab-use-after-free in usbhid_power+0x7c/0xd0 [ 277.046156][ T5155] Read of size 8 at addr ffff8881093f8008 by task syz.2.1573/5155 [ 277.055751][ T5155] [ 277.058478][ T5155] CPU: 0 UID: 0 PID: 5155 Comm: syz.2.1573 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 277.058519][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.058534][ T5155] Call Trace: [ 277.058542][ T5155] [ 277.058551][ T5155] __dump_stack+0x21/0x30 [ 277.058586][ T5155] dump_stack_lvl+0x140/0x1c0 [ 277.058614][ T5155] ? __cfi_dump_stack_lvl+0x10/0x10 [ 277.058645][ T5155] print_address_description+0x71/0x210 [ 277.058675][ T5155] print_report+0x4a/0x70 [ 277.058703][ T5155] kasan_report+0x162/0x1a0 [ 277.058729][ T5155] ? usbhid_power+0x7c/0xd0 [ 277.058756][ T5155] ? __kmalloc_cache_noprof+0x23c/0x470 [ 277.058778][ T5155] ? usbhid_power+0x7c/0xd0 [ 277.058805][ T5155] __asan_report_load8_noabort+0x18/0x20 [ 277.058825][ T5155] usbhid_power+0x7c/0xd0 [ 277.058852][ T5155] hidraw_open+0x257/0x960 [ 277.058879][ T5155] chrdev_open+0x4e8/0x610 [ 277.058961][ T5155] ? __cfi_chrdev_open+0x10/0x10 [ 277.058988][ T5155] ? do_dentry_open+0x3da/0x1510 [ 277.059019][ T5155] ? bpf_lsm_file_open+0xd/0x20 [ 277.059050][ T5155] ? __cfi_chrdev_open+0x10/0x10 [ 277.059073][ T5155] do_dentry_open+0x97f/0x1510 [ 277.059108][ T5155] vfs_open+0x86/0x240 [ 277.059133][ T5155] ? __cfi_vfs_open+0x10/0x10 [ 277.059159][ T5155] ? may_open+0x352/0x430 [ 277.059192][ T5155] path_openat+0x2c49/0x35a0 [ 277.059218][ T5155] ? schedule+0xc5/0x240 [ 277.059254][ T5155] ? kasan_save_alloc_info+0x3a/0x50 [ 277.059275][ T5155] ? getname+0x1b/0x30 [ 277.059296][ T5155] ? x64_sys_call+0xe69/0x2ee0 [ 277.059316][ T5155] ? do_syscall_64+0x57/0xf0 [ 277.059344][ T5155] ? do_filp_open+0x440/0x440 [ 277.059372][ T5155] do_filp_open+0x1f2/0x440 [ 277.059400][ T5155] ? __cfi_do_filp_open+0x10/0x10 [ 277.059428][ T5155] ? alloc_fd+0x4c1/0x570 [ 277.059453][ T5155] do_sys_openat2+0x134/0x1d0 [ 277.059482][ T5155] ? do_sys_open+0x100/0x100 [ 277.059509][ T5155] __x64_sys_openat+0x13a/0x170 [ 277.059538][ T5155] x64_sys_call+0xe69/0x2ee0 [ 277.059558][ T5155] do_syscall_64+0x57/0xf0 [ 277.059583][ T5155] ? clear_bhb_loop+0x50/0xa0 [ 277.059606][ T5155] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 277.059626][ T5155] RIP: 0033:0x7f1bd515e90e [ 277.059645][ T5155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.059665][ T5155] RSP: 002b:00007f1bd3bf6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.059690][ T5155] RAX: ffffffffffffffda RBX: 00007f1bd3bf76c0 RCX: 00007f1bd515e90e [ 277.059707][ T5155] RDX: 0000000000000602 RSI: 00007f1bd3bf6c00 RDI: ffffffffffffff9c [ 277.059723][ T5155] RBP: 00007f1bd3bf6c00 R08: 0000000000000000 R09: 0000000000000000 [ 277.059737][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 277.059752][ T5155] R13: 00007f1bd5426038 R14: 00007f1bd5425fa0 R15: 00007fffea4c1768 [ 277.059770][ T5155] [ 277.059778][ T5155] [ 277.145404][ T390] usb 2-1: device descriptor read/64, error -71 [ 277.145960][ T5155] Allocated by task 5064: [ 277.145980][ T5155] kasan_save_track+0x3e/0x80 [ 277.453511][ T5155] kasan_save_alloc_info+0x3a/0x50 [ 277.460140][ T5155] __kasan_slab_alloc+0x73/0x90 [ 277.466997][ T5155] kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 277.475616][ T5155] kmalloc_reserve+0xcf/0x4f0 [ 277.482278][ T5155] __alloc_skb+0x13f/0x360 [ 277.487083][ T5155] wg_packet_send_keepalive+0x66/0x1d0 [ 277.494155][ T5155] wg_expired_send_persistent_keepalive+0x57/0x80 [ 277.502258][ T5155] call_timer_fn+0x4c/0x300 [ 277.507538][ T5155] __run_timer_base+0x6c0/0x9b0 [ 277.512691][ T5155] run_timer_softirq+0x35/0x70 [ 277.519279][ T5155] handle_softirqs+0x1aa/0x620 [ 277.524585][ T5155] __irq_exit_rcu+0x47/0xb0 [ 277.529780][ T5155] irq_exit_rcu+0xd/0x30 [ 277.537138][ T5155] sysvec_apic_timer_interrupt+0x82/0x90 [ 277.543986][ T5155] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 277.551775][ T5155] [ 277.554731][ T5155] Freed by task 318: [ 277.560576][ T5155] kasan_save_track+0x3e/0x80 [ 277.566694][ T5155] kasan_save_free_info+0x44/0x50 [ 277.573024][ T5155] __kasan_slab_free+0x5f/0x80 [ 277.579471][ T5155] kfree+0x158/0x440 [ 277.585269][ T5155] skb_free_head+0xf7/0x300 [ 277.590468][ T5155] skb_release_data+0x6d0/0x860 [ 277.597624][ T5155] __kfree_skb+0x62/0x210 [ 277.603572][ T5155] consume_skb+0x65/0x1a0 [ 277.609654][ T5155] wg_packet_rx_poll+0x11d3/0x1d70 [ 277.616714][ T5155] __napi_poll+0xd0/0x600 [ 277.622521][ T5155] net_rx_action+0x5dc/0xd70 [ 277.628988][ T5155] handle_softirqs+0x1aa/0x620 [ 277.635603][ T5155] __do_softirq+0xf/0x16 [ 277.641459][ T5155] [ 277.643907][ T5155] The buggy address belongs to the object at ffff8881093f8000 [ 277.643907][ T5155] which belongs to the cache skbuff_small_head of size 768 [ 277.662215][ T5155] The buggy address is located 8 bytes inside of [ 277.662215][ T5155] freed 768-byte region [ffff8881093f8000, ffff8881093f8300) [ 277.677227][ T5155] [ 277.679575][ T5155] The buggy address belongs to the physical page: [ 277.687406][ T5155] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1093f8 [ 277.696625][ T5155] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 277.706299][ T5155] flags: 0x4000000000000040(head|zone=1) [ 277.712781][ T5155] page_type: f5(slab) [ 277.717764][ T5155] raw: 4000000000000040 ffff88810664cdc0 dead000000000122 0000000000000000 [ 277.730314][ T5155] raw: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000 [ 277.741290][ T5155] head: 4000000000000040 ffff88810664cdc0 dead000000000122 0000000000000000 [ 277.752287][ T5155] head: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000 [ 277.762391][ T5155] head: 4000000000000002 ffffea000424fe01 ffffffffffffffff 0000000000000000 [ 277.772804][ T5155] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 277.782936][ T5155] page dumped because: kasan: bad access detected [ 277.793758][ T5155] page_owner tracks the page as allocated [ 277.805871][ T5155] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 112, tgid 112 (udevd), ts 271773714231, free_ts 271771020315 [ 277.845286][ T5155] post_alloc_hook+0x37d/0x3b0 [ 277.852294][ T5155] prep_new_page+0x2d/0x180 [ 277.857631][ T5155] get_page_from_freelist+0x4aea/0x4ba0 [ 277.863485][ T5155] __alloc_pages_noprof+0x35a/0x7e0 [ 277.870601][ T5155] alloc_slab_page+0x6b/0x1e0 [ 277.877591][ T5155] allocate_slab+0x69/0x430 [ 277.882581][ T5155] ___slab_alloc+0x591/0x8c0 [ 277.889301][ T5155] kmem_cache_alloc_node_noprof+0x29b/0x420 [ 277.896722][ T5155] kmalloc_reserve+0xcf/0x4f0 [ 277.902746][ T5155] __alloc_skb+0x13f/0x360 [ 277.907450][ T5155] netlink_alloc_large_skb+0xf7/0x1b0 [ 277.914088][ T5155] netlink_sendmsg+0x576/0xad0 [ 277.922186][ T5155] ____sys_sendmsg+0x99e/0xa00 [ 277.927834][ T5155] ___sys_sendmsg+0x2a6/0x370 [ 277.935285][ T5155] __x64_sys_sendmsg+0x206/0x2e0 [ 277.942849][ T5155] x64_sys_call+0x2a4c/0x2ee0 [ 277.948960][ T5155] page last free pid 318 tgid 318 stack trace: [ 277.956264][ T5155] free_unref_page+0xbb8/0xf70 [ 277.963009][ T5155] __folio_put+0x272/0x2c0 [ 277.969975][ T5155] free_large_kmalloc+0xb7/0x110 [ 277.976687][ T5155] kfree+0x209/0x440 [ 277.982605][ T5155] usbhid_disconnect+0xab/0xc0 [ 277.988958][ T5155] usb_unbind_interface+0x2ad/0xa40 [ 277.994982][ T5155] device_release_driver_internal+0x525/0x830 [ 278.002647][ T5155] device_release_driver+0x1d/0x30 [ 278.010517][ T5155] bus_remove_device+0x34f/0x370 [ 278.017146][ T5155] device_del+0x583/0xcf0 [ 278.022085][ T5155] usb_disable_device+0x3af/0x770 [ 278.028226][ T5155] usb_disconnect+0x331/0x950 [ 278.034443][ T5155] hub_event+0x1ad5/0x4360 [ 278.039160][ T5155] process_scheduled_works+0x7f7/0x1060 [ 278.047249][ T5155] worker_thread+0xc99/0x13f0 [ 278.053157][ T5155] kthread+0x2c7/0x360 [ 278.061695][ T5155] [ 278.065386][ T5155] Memory state around the buggy address: [ 278.072009][ T5155] ffff8881093f7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.083928][ T5155] ffff8881093f7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.094816][ T5155] >ffff8881093f8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.104678][ T5155] ^ [ 278.109398][ T5155] ffff8881093f8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.118627][ T5155] ffff8881093f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.128313][ T5155] ================================================================== [ 278.145545][ T5155] Disabling lock debugging due to kernel taint [ 278.152830][ T5155] Oops: general protection fault, probably for non-canonical address 0x61201ab0000036e: 0000 [#1] PREEMPT SMP KASAN PTI [ 278.157908][ T36] audit: type=1400 audit(2000000473.855:65343): avc: denied { read } for pid=94 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 278.167075][ T5155] CPU: 1 UID: 0 PID: 5155 Comm: syz.2.1573 Tainted: G B syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 278.167116][ T5155] Tainted: [B]=BAD_PAGE [ 278.167124][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.167136][ T5155] RIP: 0010:__pm_runtime_resume+0x49/0xa0 [ 278.167170][ T5155] Code: ff e8 9b f9 3f fe 89 d8 83 e0 04 75 07 e8 4f f5 3f fe eb 1e e8 48 f5 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 f7 d6 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 90 3f 5f [ 278.198468][ T36] audit: type=1400 audit(2000000473.855:65344): avc: denied { search } for pid=94 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.214344][ T5155] RSP: 0018:ffffc9000173f6a8 EFLAGS: 00010202 [ 278.214377][ T5155] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff83477c89 [ 278.214423][ T5155] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 061201ab0000036e [ 278.214437][ T5155] RBP: ffffc9000173f6c8 R08: 061201ab00000372 R09: 0000000000000c24 [ 278.214453][ T5155] R10: dffffc0000000000 R11: fffffbfff1176f29 R12: 0000000000000000 [ 278.242670][ T36] audit: type=1400 audit(2000000473.855:65345): avc: denied { write } for pid=94 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.242711][ T5155] R13: ffffffff8680c8e0 R14: 061201ab0000018e R15: dffffc0000000000 [ 278.265194][ T36] audit: type=1400 audit(2000000473.855:65346): avc: denied { add_name } for pid=94 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.290462][ T5155] FS: 00007f1bd3bf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 278.290495][ T5155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.290577][ T5155] CR2: 000000110c3397cd CR3: 0000000115f9e000 CR4: 00000000003526b0 [ 278.290611][ T5155] Call Trace: [ 278.290620][ T5155] [ 278.290631][ T5155] usb_autopm_get_interface+0x25/0xf0 [ 278.290661][ T5155] usbhid_power+0x84/0xd0 [ 278.290688][ T5155] hidraw_open+0x257/0x960 [ 278.298539][ T36] audit: type=1400 audit(2000000473.855:65347): avc: denied { create } for pid=94 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.308251][ T5155] chrdev_open+0x4e8/0x610 [ 278.308290][ T5155] ? __cfi_chrdev_open+0x10/0x10 [ 278.308314][ T5155] ? do_dentry_open+0x3da/0x1510 [ 278.308341][ T5155] ? bpf_lsm_file_open+0xd/0x20 [ 278.308370][ T5155] ? __cfi_chrdev_open+0x10/0x10 [ 278.318645][ T36] audit: type=1400 audit(2000000473.855:65348): avc: denied { append open } for pid=94 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.326565][ T5155] do_dentry_open+0x97f/0x1510 [ 278.326673][ T5155] vfs_open+0x86/0x240 [ 278.326700][ T5155] ? __cfi_vfs_open+0x10/0x10 [ 278.338006][ T36] audit: type=1400 audit(2000000473.855:65349): avc: denied { getattr } for pid=94 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.364732][ T5155] ? may_open+0x352/0x430 [ 278.364778][ T5155] path_openat+0x2c49/0x35a0 [ 278.364806][ T5155] ? schedule+0xc5/0x240 [ 278.364836][ T5155] ? kasan_save_alloc_info+0x3a/0x50 [ 278.364855][ T5155] ? getname+0x1b/0x30 [ 278.364875][ T5155] ? x64_sys_call+0xe69/0x2ee0 [ 278.364894][ T5155] ? do_syscall_64+0x57/0xf0 [ 278.364923][ T5155] ? do_filp_open+0x440/0x440 [ 278.375813][ T36] audit: type=1400 audit(2000000473.935:65350): avc: denied { setopt } for pid=5154 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.400783][ T5155] do_filp_open+0x1f2/0x440 [ 278.400827][ T5155] ? __cfi_do_filp_open+0x10/0x10 [ 278.400857][ T5155] ? alloc_fd+0x4c1/0x570 [ 278.400882][ T5155] do_sys_openat2+0x134/0x1d0 [ 278.400911][ T5155] ? do_sys_open+0x100/0x100 [ 278.692341][ T5155] __x64_sys_openat+0x13a/0x170 [ 278.699874][ T5155] x64_sys_call+0xe69/0x2ee0 [ 278.706508][ T5155] do_syscall_64+0x57/0xf0 [ 278.711750][ T5155] ? clear_bhb_loop+0x50/0xa0 [ 278.718528][ T5155] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 278.725967][ T5155] RIP: 0033:0x7f1bd515e90e [ 278.732493][ T5155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.758509][ T5155] RSP: 002b:00007f1bd3bf6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.768180][ T5155] RAX: ffffffffffffffda RBX: 00007f1bd3bf76c0 RCX: 00007f1bd515e90e [ 278.779707][ T5155] RDX: 0000000000000602 RSI: 00007f1bd3bf6c00 RDI: ffffffffffffff9c [ 278.790066][ T5155] RBP: 00007f1bd3bf6c00 R08: 0000000000000000 R09: 0000000000000000 [ 278.803561][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 278.815840][ T5155] R13: 00007f1bd5426038 R14: 00007f1bd5425fa0 R15: 00007fffea4c1768 [ 278.828501][ T5155] [ 278.832518][ T5155] Modules linked in: [ 278.838407][ T5155] ---[ end trace 0000000000000000 ]--- [ 278.845755][ T5155] RIP: 0010:__pm_runtime_resume+0x49/0xa0 [ 278.854461][ T5155] Code: ff e8 9b f9 3f fe 89 d8 83 e0 04 75 07 e8 4f f5 3f fe eb 1e e8 48 f5 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 f7 d6 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 90 3f 5f [ 278.855392][ T45] microsoft 0003:045E:00F9.0027: unknown main item tag 0x2 [ 278.891888][ T45] microsoft 0003:045E:00F9.0027: unknown main item tag 0x6 [ 278.902576][ T5155] RSP: 0018:ffffc9000173f6a8 EFLAGS: 00010202 [ 278.914272][ T390] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.916241][ T5155] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff83477c89 [ 278.933342][ T45] microsoft 0003:045E:00F9.0027: unknown main item tag 0x5 [ 278.944983][ T5155] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 061201ab0000036e [ 278.950052][ T45] microsoft 0003:045E:00F9.0027: unknown main item tag 0x6 [ 278.958709][ T5155] RBP: ffffc9000173f6c8 R08: 061201ab00000372 R09: 0000000000000c24 [ 278.967538][ T45] microsoft 0003:045E:00F9.0027: unknown main item tag 0x5 [ 278.976298][ T5155] R10: dffffc0000000000 R11: fffffbfff1176f29 R12: 0000000000000000 [ 278.985332][ T45] microsoft 0003:045E:00F9.0027: item fetching failed at offset 38/40 [ 278.995770][ T5155] R13: ffffffff8680c8e0 R14: 061201ab0000018e R15: dffffc0000000000 [ 279.016707][ T45] microsoft 0003:045E:00F9.0027: parse failed [ 279.023425][ T5155] FS: 00007f1bd3bf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 279.028946][ T45] microsoft 0003:045E:00F9.0027: probe with driver microsoft failed with error -22 [ 279.038196][ T5155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.065285][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.072103][ T5155] CR2: 00007f81dcfef2f8 CR3: 0000000115f9e000 CR4: 00000000003526b0 [ 279.080790][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.088564][ T5155] Kernel panic - not syncing: Fatal exception [ 279.104382][ T5155] Kernel Offset: disabled [ 279.109637][ T5155] Rebooting in 86400 seconds..