last executing test programs: 9.090337709s ago: executing program 3 (id=1107): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001d00), 0x2240, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) pwritev2(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)="bece2c2ed8fb671c4799b915fc14ab897b3f122c913dbc1f5f726d1a8ff68842255fd4d653331908f3ef857ee0b7ba37f8d8ab6fb6224ae9fa6cdfbd08da409e6a82fe906851820a0ae0721b65c90392892438fcd8166938c926e671356f50afb9005cf85857171665c82ac09ff4d20e8f59f315d9f0604e9eac9c7babdd3e5c", 0x80}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="92f06d35b867caf57237a4adf0893d889c8374963ca6572ac889e7d70511807b9597f6e319fad2cbe6f58c00dbf77bb6a71186ff0688f39c447a61e341c8fab008236654ce5b63edf08d318471f29340b86d2cd8af091da5706319c9bafa9589214f0d1eb346fa519909dbf92aa8dcf3e0cbf85ce2fbfd10b4ebec0689d7056c9a982eb525e2693dc2a0d60706fefe544b4de9abd23e8b4eff3d", 0x9a}, {&(0x7f0000001300)="3c04d76d8abf43a986ffb5386649a94ebb7c0aa2c60e3c3e2ad0b576b28e2c47811ac0ba4c09ce57ddaccb8bab8d5f4114f581", 0x33}], 0x4, 0x1, 0x3, 0x1a) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00.\v\x00'/13], 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x17}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x4e20, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x2, 0x100, @void}}}}}}}}, 0x32) syz_usb_control_io(r0, 0x0, &(0x7f0000003280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)={0x40, 0x21, 0x1, 0x6}}) 8.319937318s ago: executing program 0 (id=1116): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2}, 0x10) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x8002, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x20010, 0xffffffffffffffff, 0xffffd000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000540), 0xa, 0x0, 0x0, &(0x7f0000000580), 0x202) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) futex(&(0x7f000000cffc)=0xfffffffc, 0xc, 0x1, &(0x7f00000001c0), &(0x7f0000048000)=0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000300)) r8 = eventfd2(0xd, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r8, 0x4}) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cgroup_ro(r9, &(0x7f0000000340)='cpuacct.stat\x00', 0x275a, 0x0) 7.47079349s ago: executing program 0 (id=1124): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) (async) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x46) personality(0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513000000002e", @ANYRESHEX=r2], 0xa0}], 0x1, 0x0, 0x0, 0x4040}, 0x51) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003c758cc08b60430682499010203010902120001020e500a09040b01009ff2e1086f85479b9511c7701fe547cb17cd37042eb60c5b69eee31def589004a78ba87485a858829d9ebd800230031031d2e7fd4eb3ea46c0230a3acc3243e02f2675bed67805238cbbe1e49bd034660b37f91f2ce54165a47f172f8d43fe0c89f8df88a4ea618284ce14b1da6e44076479dea0de82f02cc1c2dd50bdd815235f5110500a626901688bb63ba166"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 6.070067719s ago: executing program 3 (id=1132): r0 = syz_open_dev$MSR(&(0x7f00000005c0), 0x359, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000680)=0x80, 0x800) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x78147e8c, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000408d}, 0x800) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0103000000000000000006241a0000000905810001000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x14, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xe56, 0x2b}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x12}]}, @NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x3}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040941}, 0x800) process_mrelease(r4, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r7, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x237, 0x1, @loopback, @mcast1, 0x7, 0x7, 0x5, 0xeee6}}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x74, 0x62}}}}}, 0x20}}, 0x20000001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) 4.463932649s ago: executing program 0 (id=1136): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) r2 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r3}}]}) r4 = getgid() fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x4, r3}], {0x4, 0x8}, [{0x8, 0x2}, {0x8, 0x4, r4}, {0x8, 0x3, r5}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x2, r8}], {0x10, 0x7}, {0x20, 0x2}}, 0x64, 0x3) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@favordynmods}, {@clone_children}], [{@pcr={'pcr', 0x3d, 0x5}}, {@obj_role={'obj_role', 0x3d, '(\x8d\x8e\x05'}}, {@subj_role={'subj_role', 0x3d, '}]^&#$#)'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/fuse\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\.'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fuse\x00'}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2120465, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xda9, 0x100) syz_usb_connect(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000000009059cf278"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.292148377s ago: executing program 2 (id=1139): r0 = socket$inet6(0xa, 0x4, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b3, 0x0, 0x854}]}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x103, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.22401413s ago: executing program 2 (id=1140): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) listen(r2, 0x3) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x5) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x5c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000), 0x4880) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) 3.509762556s ago: executing program 1 (id=1143): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2}, 0x1c) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async, rerun: 32) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (rerun: 32) 3.506895906s ago: executing program 1 (id=1144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@flushsa={0x1c, 0x1c, 0x300, 0x70bd25, 0x25dfdbfb, {0xff}, [@tfcpad={0x8, 0x16, 0xa7}]}, 0x1c}}, 0x20044015) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="ec04000019000100e5ff0000000000002001000000c300000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="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"], 0x4ec}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) listen(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000000b00010027bd7000fefffffffc020000002000000000080000000000e00000010000000000000000000000004e210000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unshare(0x42000000) 3.459845478s ago: executing program 1 (id=1145): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0xd, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) (fail_nth: 2) 3.377559292s ago: executing program 2 (id=1146): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)="55f81682a65d04d7390ed1de6eaa8a438cdb4d6406d36705d336c727a6af9923a765f65831f95f3f8e10e494b477b0b0d4c89ff009fa4344ae1a220226ebc1af0fdfa86db39086d7d0b00f823bed87eb4ff1df5f1ff041704d3e700cc3e4e3e7205e907f0e37bc0ddfb8b50c97dd07e4babbfd3812481bd1878a7e9f1c286a0c6719ea437d8e9e1e68f3857a62baa23f855c2c836fcf04494b419da777f8edddbfc65b2bc0bd900ec0f5a57baec96f850e4de754f7d5adc34f5315a578e5fe14851040adf81f16bf5972088d862c869483218e019d77a94d00bd468de7ccfc39efb7b555157e6814059fd62df90e9b6e20", 0xf1}, {&(0x7f0000000080)="79ef58ac8352a36fea21710fb943d7a2115d04186a75dbba38aa49c1", 0x1c}, {&(0x7f0000000380)="90bcd8506de72cf1b4bc5d349a94cbcb51dfa964323c6981adf696e676cf3b8b2994aba62860741df6c0a6f25db3e311798b48293ef33112e9cd9b0d324ae3159b4ad41681f32d888a700142ccee2f9e5a6625598b70ce3803764ddbf25ca15c186de33811376f76bbcc9f30effd60817f29fd56b195588fa0c282d1ff03525f18a7ab113bb9bceb27f6b1e8e00f", 0x8e}, {&(0x7f0000000100)="9b30cd0886a4cf1e8907dc95ac2989d45f442ecfd24200caa8ad00a3a683883613a35ae590", 0x25}, {&(0x7f0000000440)="8acec4c16faa7828adc669febe86d61b3657db5e18e669bb7c25a6ef2cc8efd280e29e4c681def302bf20ae356ae50178927a522453b2132aa8a71e123225b4fbe5ec1c9641244bdd24ca0f5c4a121235ba31dd1995d1ec800916e221553eb537d4c4a876cea897018d6636f6266", 0x6e}, {&(0x7f00000004c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="68b18a5e23c0f5c2217bf0880dfbeb69e1750900bffa2f0bfbd28c622b6166bcf84eac508fc40cf635fb44cea73c94a52ecd2a2dc238f6deb30f71825753f98e11cc23c6221c042b337c4f05b89c508b796c4204cbb75bb58c8331e1dfabbf13a92e83e2ecc93f27147d9d38d1ee3f6415dda01b47f6b193026deffcf43da8980b1b510d8887", 0x86}, {&(0x7f0000000640)="af91bb5fa4bc9a7e2f75e16f0e25ab97f5da2bdb5aeef6b74be5d1f2430039d5d89761bb4469d98b816ef231c97066ca6dbf5e13c448b0edbb01cbd9fc29ffe1f8adb3702c901807574dc13438c7d334bc7247d9a5bf3ddce80cfa67cd2ea84fe238a1f3275fbc3faade6edf5be0d31f79863a3e223f9eef80eb690f39940e981bb84f4a9499ff75c05e0eb1c730dfe4928ba9cce49dfcc7e68d73769ab467b645933db5b9f222", 0xa7}], 0x2, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1e7}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xbd, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010102, @rand_addr=0x64010100, @empty, @rand_addr=0x64010101]}, @end, @lsrr={0x83, 0x27, 0x36, [@local, @loopback, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @rand_addr=0x64010100, @multicast1, @broadcast]}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x8, "879f8edd6bf6"}, {0x5, 0x5, "050a59"}, {0x6, 0xb, "a6036b879c98a8f41c"}]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc5, [@private=0xa010102, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x2e, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @lsrr={0x83, 0x13, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x7, 0x39, [@remote]}, @generic={0x86, 0x4, "036b"}, @noop, @end]}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xea, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x7}, {@empty, 0x9b}]}, @lsrr={0x83, 0x7, 0xf3, [@local]}, @cipso={0x86, 0x2b, 0x2, [{0x7, 0x7, "3f3b1c6b8a"}, {0x5, 0xd, "7873b49c2b49e05ead3652"}, {0x1, 0x6, "9f0a50a5"}, {0x5, 0xb, "2a6d6c9d53dadaabc2"}]}, @cipso={0x86, 0x35, 0x1, [{0x5, 0xd, "d1ec4894ea685ea3f7a930"}, {0x6, 0xd, "5d716d813d9dfcf8f393e2"}, {0x1, 0x12, "3e477c24593ce04885b8e917d80e8178"}, {0x7, 0x3, '6'}]}, @ssrr={0x89, 0x2b, 0x9e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @remote, @multicast1, @rand_addr=0x64010101, @remote, @multicast1]}, @generic={0x7, 0x5, "7b4d7f"}, @noop, @ssrr={0x89, 0x13, 0x60, [@broadcast, @remote, @private=0xa010100, @empty]}]}}}], 0x200}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="80eff393075842dea59dd3c7e0740fe7c7cc6b7acc9cd0fbddde501a05e4cca0e18f1bb19bd04e468714288cc0b5e4bff34145c063566e640b731c326e2fcdd346bd931e9a1b26191ed8234490b846fb9c7188c52140494140fe0f108962bf05d422dc0ec8", 0x65}, {&(0x7f0000000a80)="db749bbbe8bd7f2ed6bd145dfbdf27eeef4bbc5d51e66f75c9c8aa4148fe46b1e8f1d0a7129f78a84520cbbadd1cd92bb7b33b7faa", 0x35}, {&(0x7f0000000ac0)="a63b59a293af76e94e4088a6b67978647df73ecffc00f740c7e6466fcbbca2a59fd1e1a3764a48d35db267d41604120b13b33828a78dbd4031d9b5ef9a604a81442893df8763e851c53f20e38208a8403a3395fc6638d671a7379ea91a5b28f1b23689305e766e54cd8a773272ec7ff0a3beed7dffce9ccbc5471e03d3f7624d8e24bb268a6e0c1963b93165b2c3f4d873f8bcb7851cc30249f2e60ff4", 0x9d}, {&(0x7f0000000b80)="5ee44308e447fcb9160dd6eade3b9404778f2f516203ff65de35f2687493ec87bd4b59869954379a1ee4683f7573ffbae2d103bb39790ea0c9ebb4d7d753472b9bfcaedc5911579ba38b76063eb093a6c72a8049d928652950f24275293c16102f2378f6274aba2c05925efd155ed7befcef0fe2e0e1cb3b0ef9b3f174bcf9ecec7482d4506180d9eb3bb832b860a70b0342c98ad3abef0c1a87c5c33188729448b1af311b3b6f90717684a15b099e91fe6982d0bfcfe8a13bdd182f65fac7e6d8c7302aee9ca633c2800272515053f666ce103cd03cb795e793c7b573d11e96d5946d1798849d39a26e1ed8fcb3420dfe7c5951a2d8ed656f", 0xf9}, {&(0x7f0000000c80)="a8f3d2e61ce80211b215dd6196bb3d13d72f881c943714660ca71a22ee3120724c98a115f36b2336aaa4e2a502b2fcd3dd847bb45328c52522694f15796ffe6e234213e149fe829e8c87c095b5f278748c", 0x51}, {&(0x7f0000000d00)="6ce1bd1232c776620fbfbee4350b84da635b491a64ff4284027437d22d6f38b382b7e89936708bfa2a15a3e860d463abe0d9fdd8b12816a6b0aab5", 0x3b}], 0x6, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x48}}], 0x3, 0x4081) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.068919378s ago: executing program 1 (id=1147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) iopl(0xff) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.068609908s ago: executing program 1 (id=1148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RWSTAT(r2, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.066754548s ago: executing program 3 (id=1149): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)="43e5", 0x2}], 0x1}}], 0x1, 0x20000081) sendmmsg(r4, &(0x7f00000000c0), 0x0, 0x4000040) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 3.03213312s ago: executing program 3 (id=1150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x60000600) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x50, 0x0, &(0x7f0000000680)="46277d4c1d99824cf457998c39ba94f1730394382b65ea6e16e982037689b95865af045f9bf1858cd12f4a76fc241a57f2a794d3a61a31fa5a1b10b5c386f5c08f71ec12146f8200761ef6651a03dc38"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa8, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x766}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xca}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x301}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xac}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x440e0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4018050100002f47d028a92bf1c9f4f14e76c11f962cc72a53763bae5497276ff5bdaf46929df8b769d99678b4a8cc8f400e1bc49c777069d7720f99543ba3cafafe10c07c12b9cd86970c733972623c325cc976cab78d33e7a1a6e2f633bd27cc6537e6692f5065027d0e52d7322812a33d56fdf8653ce72d7652ad5dc94d2d6310"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xd8, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x0, 0x90, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa86, 0x44}, [@feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x1, 0x1, 0x4, 0x1, 0x6, 0x9], 0xd}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x5, "83c68994"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x3, 0x8, 0x7, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x2, 0x2, 0x56}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x5, 0x5, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xff, 0x1, 0x3, 0xf}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x4, 0x8, "8103e2dd8228121fcc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd3, 0x830, 0x91, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x3e, 0x9a, {0x7, 0x25, 0x1, 0x8, 0x5, 0x35}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x5, 0x0, {0x7, 0x25, 0x1, 0x8, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x2, 0x9, 0xb6, 0x40, 0x69}, 0x69, &(0x7f0000000600)={0x5, 0xf, 0x69, 0x4, [@generic={0x4a, 0x10, 0xb, "3e8b43e4ede301dba884d509c88b327ffe9967651cd916349a2b3f1ede16c1415e013bcfc8df7d46c82fee2605c2227d968477bdabfba84b9610736aea3b79efe8fed9132028b7"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5a8, 0xf, 0xd, [0x446a9af9a0d73c18]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x3, 0xfff}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4b, &(0x7f0000000800)=@string={0x4b, 0x3, "41a0434b01b8c67c40bf6d77c7d1c0b01f35b8504b9be26041ba65b97c3dbe44288908d4e53812db794f3eba7a55ef63eca38cb913473c6e09f305967ff000d742a9f3cec09bcfd368"}}, {0x2a, &(0x7f0000000880)=@string={0x2a, 0x3, "6952fc72ae711bb83144875cbfee95042264e952f12fbfe8c95d51f345e4ba1e99f4efe2852a1c6c"}}, {0xe4, &(0x7f00000008c0)=@string={0xe4, 0x3, "e22c4a5f9d4689b69e236d1e7b8f9aeb3ea72979115d18954f12e037ab8cfd19fb2957a3a5b284fa4b388789e3f9a27eea22f844cf7d70c1d264a8e36d5882e9a96a56b837a100062d31e159c22d4672fd1818df810b6e8ec4ab3b375b7eaca31459c6362631987f313c94778978e22b573100af1d0fa3eaba53fdd6b7d40b5961b51622075d8f59be0980363c0cacf9f0407cd69903e288d0c9fdc895c9538ecd018e7ec5a16009326742b91d15aa47e6bd5f1a416c3ba8d5ef0183d7a8fef82f24b3a07ac7c1c84f8c86a583710e6601fa4b0683449de1846796acb61513d0c907"}}, {0x6b, &(0x7f00000009c0)=@string={0x6b, 0x3, "2c2e97d6e4355a6509c36708178406df030bf31f8ace74ef62b4582fc0d271a015410031d97b307461325528e01a64ac332ff5c87f10a85cd95eeffbbaf9e3d398b6e51a3bd8d2133049e44767a1aa9376cc4a7dd194b1c9a5d7f45f0d6003c9af4d164995c66f332b"}}]}) 2.960348003s ago: executing program 1 (id=1151): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x24, 0xb7, 0xd5, 0x40, 0xc52, 0x2872, 0xc6b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0xeb, 0x1, 0x0, 0x35, 0xf6, 0x1f, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x100, 0x0, 0xa0}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}}) r1 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_ep_write(r0, 0x7, 0x92, &(0x7f0000000040)="a3f661059b9f8f9b9bb4cd2ae2a2d971b1526b189ea4c61851974e6f9b7d90b28db4bd51b7bd1a6e544a5580e2dfbcb96e323b3d8aecb30140b65cca31c8118354c0e839bc81dc95b537de5f0d7db7d6cdfce45344e9a47874317cff6b511b67a068551b55e6f2630e7fd06ccf713f890bf2c664ea8dd3e4e6430d892cdde4c30055b6d3cb1eb84aeab1f209e5f125927bce") r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) accept4$nfc_llcp(r3, 0x0, &(0x7f0000000140), 0x800) 2.526290825s ago: executing program 2 (id=1152): r0 = socket$can_raw(0x1d, 0x3, 0x1) accept4$packet(r0, 0x0, 0x0, 0x800) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="80006455d3800000", 0x8, 0x800, &(0x7f0000000080)={0xa, 0x6f26, 0x805, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) socket$unix(0x1, 0x3, 0x0) 2.41868292s ago: executing program 2 (id=1153): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) 2.389397961s ago: executing program 2 (id=1154): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000100)=ANY=[@ANYBLOB="5ff6823d0b074b2800000000000000000000001b02bf798daf58a1b1a2a539245d32649b962d0d7f88a794342bb119fb2932ac81dc6f3a969fb1de61fabb6fcb7b23b670de73c3e255a5ddb53fe7cbb3bbbb28271bf01bd29cc9ef40161baf32b8bc53df773b80c55ffb781c4cf84b8bd1bf83e2614dbb3c9ec29e"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r3, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0c, 0x2, 0xfac02, 0xfac0d, 0xfac06]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x16, 0x115, "53e14eb7baef91eb1d262614b7d881c85398"}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x816}, 0x4000000) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) 1.451819898s ago: executing program 0 (id=1155): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.382081282s ago: executing program 0 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048088) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048088) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48004) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48004) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8501, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000480)=0x5) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000480)=0x5) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11) stat(&(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x4, r4}], {0x4, 0x1}, [{0x8, 0xa, r6}, {0x8, 0x0, r7}, {0x8, 0x3, r8}, {0x8, 0x5, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x0) (async) fsetxattr$system_posix_acl(r2, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x4, r4}], {0x4, 0x1}, [{0x8, 0xa, r6}, {0x8, 0x0, r7}, {0x8, 0x3, r8}, {0x8, 0x5, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) (async) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, r10, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "789ee91ee161d1e289b4d98e6969feb00df4f765cfdb204aa562d040b9c675"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "5286d241fb0589a5e4a9eba41c3daf986fd3a802d96f32d1921ce41bfc4ce55a4f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "79961ebb329773e269101f9a41565cbfbd79eb00281bad6e4a0f9b5498bfb00bbde4e731"}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) 1.363504232s ago: executing program 0 (id=1157): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020303030c0000000000000000000000020009000800000080000000000000000300060000000000020000000000040000000000000000000200010000004ade0002080200000000030005006c00000002000000640101000000000000000000"], 0x60}, 0x1, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e001f0700001a00000000000c00d60001"], 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeefc2000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x8080000, 0x13, 0x8, 0x9, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4, 0xfd}, {0x1, 0xdddd0000, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x26000, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xc0010141, 0x0, 0x40}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000021c0)={0x0, 0x8000000000000000}) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000100)=0xffffba60) ptrace(0x10, r2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) munmap(&(0x7f0000006000/0x1000)=nil, 0x1000) recvmmsg(r7, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r7, 0x4008586f, &(0x7f0000000240)={0x401, 0x7}) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0) setregid(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x35, &(0x7f0000000200)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb0408240301f0ffffff09050702"], 0x0) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x4) 14.598889ms ago: executing program 3 (id=1158): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) (async) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_context(r1, 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1) (async) ftruncate(r0, 0x10000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r2, 0x0, 0x0) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async, rerun: 64) fcntl$addseals(r0, 0x409, 0x7) (async) write(r0, &(0x7f0000000080)="e6c497956eb2666f31e8e5c678201147c8e0ecc3831f0a1c2653580526634aaa25fc8b7aac68c231886d79b9534ac85a81cce3fcf45b42a130e51159128aae733807", 0x42) 0s ago: executing program 3 (id=1159): gettid() timer_create(0x5, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000240)=0x6eeb, 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340)=[{{0x4, 0x0, 0x1}, {0x1, 0x1}}], 0x8) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x10600) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f000094f000/0x4000)=nil) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d, 0xfffffffc}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x4010, r3, 0xec776000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x5, 0x9}]}) ioctl$sock_inet_SIOCDARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @rand_addr=0x64010100}, {0x1, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'veth0\x00'}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) kernel console output (not intermixed with test programs): ][ T307] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 157.034698][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.043405][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.061107][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 157.067721][ T307] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 157.076082][ T307] usb 2-1: config 0 has no interface number 0 [ 157.082303][ T307] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 157.092655][ T307] usb 2-1: config 0 interface 196 has no altsetting 0 [ 157.100985][ T307] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 157.110184][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.118517][ T307] usb 2-1: Product: syz [ 157.123135][ T307] usb 2-1: Manufacturer: syz [ 157.123451][ T64] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 157.127746][ T307] usb 2-1: SerialNumber: syz [ 157.128464][ T307] usb 2-1: config 0 descriptor?? [ 157.150723][ T2680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.158884][ T64] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 157.172050][ T64] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 157.185869][ T64] usb 1-1: USB disconnect, device number 78 [ 157.195196][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.253341][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 157.259687][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.268857][ T31] usb 3-1: USB disconnect, device number 70 [ 157.813018][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 157.813032][ T36] audit: type=1400 audit(157.790:614): avc: denied { setopt } for pid=2679 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.000357][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.021086][ T31] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 158.172419][ T31] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 158.180864][ T31] usb 3-1: config 1 has no interface number 0 [ 158.187132][ T31] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 158.197543][ T31] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 211, changing to 11 [ 158.210669][ T31] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 158.219869][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.227911][ T31] usb 3-1: Product: syz [ 158.232231][ T31] usb 3-1: Manufacturer: syz [ 158.236969][ T31] usb 3-1: SerialNumber: syz [ 158.242655][ T2698] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 158.251636][ T306] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 158.402118][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.413334][ T306] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.422550][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.431340][ T306] usb 1-1: config 0 descriptor?? [ 158.837969][ T306] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 158.848028][ T306] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0027/input/input16 [ 158.914424][ T36] audit: type=1400 audit(158.890:615): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.920816][ T306] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 158.941623][ T36] audit: type=1400 audit(158.890:616): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.973970][ T36] audit: type=1400 audit(158.890:617): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=917 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.189312][ T2704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.198389][ T2704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.211258][ T306] usb 1-1: USB disconnect, device number 79 [ 159.600744][ T307] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 159.608903][ T307] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 159.619402][ T307] usb 2-1: USB disconnect, device number 74 [ 159.951109][ T307] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 160.041156][ T2705] Bluetooth: hci0: command 0x1003 tx timeout [ 160.041156][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.062669][ T36] audit: type=1400 audit(160.040:618): avc: denied { remount } for pid=2715 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.082013][ T36] audit: type=1400 audit(160.040:619): avc: denied { unlink } for pid=2715 comm="syz.0.756" name="#b" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.103906][ T36] audit: type=1400 audit(160.040:620): avc: denied { mount } for pid=2715 comm="syz.0.756" name="/" dev="overlay" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.126766][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.127828][ T36] audit: type=1400 audit(160.110:621): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.140317][ T307] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 160.168629][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.186784][ T307] usb 2-1: config 0 descriptor?? [ 160.195725][ T307] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 160.207424][ T36] audit: type=1400 audit(160.190:622): avc: denied { connect } for pid=2723 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.501131][ T64] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 160.652345][ T64] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.660432][ T64] usb 1-1: config 0 has no interface number 0 [ 160.666692][ T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.677792][ T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.687804][ T64] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.700629][ T64] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 160.709674][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.718270][ T64] usb 1-1: config 0 descriptor?? [ 160.787478][ T307] usb 3-1: USB disconnect, device number 71 [ 161.125045][ T2727] bridge0: port 4(erspan0) entered blocking state [ 161.131546][ T2727] bridge0: port 4(erspan0) entered disabled state [ 161.138054][ T2727] erspan0: entered allmulticast mode [ 161.143785][ T2727] erspan0: entered promiscuous mode [ 161.150260][ T2727] erspan0: left allmulticast mode [ 161.155814][ T2727] erspan0: left promiscuous mode [ 161.161404][ T307] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 161.166682][ T2727] bridge0: port 4(erspan0) entered disabled state [ 161.311091][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 161.317565][ T307] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 161.325990][ T307] usb 3-1: config 0 has no interface number 0 [ 161.332157][ T307] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 161.342194][ T307] usb 3-1: config 0 interface 196 has no altsetting 0 [ 161.350617][ T307] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 161.359741][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.368229][ T307] usb 3-1: Product: syz [ 161.372481][ T307] usb 3-1: Manufacturer: syz [ 161.377093][ T307] usb 3-1: SerialNumber: syz [ 161.382742][ T307] usb 3-1: config 0 descriptor?? [ 161.388150][ T2736] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.610615][ T2736] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 161.619300][ T2736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.627922][ T2736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.933665][ T307] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 161.941517][ T307] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 161.950846][ T307] usb 3-1: USB disconnect, device number 72 [ 162.659146][ T9] usb 2-1: USB disconnect, device number 75 [ 162.684103][ T307] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 162.842684][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.851294][ T307] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 162.861501][ T307] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 162.871992][ T307] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 162.881088][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.889169][ T307] usb 3-1: Product: syz [ 162.893376][ T307] usb 3-1: Manufacturer: syz [ 162.897984][ T307] usb 3-1: SerialNumber: syz [ 163.041174][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 163.108664][ T307] usb 3-1: USB disconnect, device number 73 [ 163.191140][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 163.197721][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.208778][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 163.220141][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 163.230211][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 163.231247][ T64] usbhid 1-1:0.1: can't add hid device: -71 [ 163.252883][ T64] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 163.253389][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 163.262489][ T64] usb 1-1: USB disconnect, device number 80 [ 163.273384][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.284219][ T9] usb 2-1: Product: syz [ 163.288576][ T9] usb 2-1: Manufacturer: syz [ 163.293214][ T9] usb 2-1: SerialNumber: syz [ 163.300185][ T2756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.571159][ T64] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 163.620683][ T36] audit: type=1400 audit(163.590:623): avc: denied { mount } for pid=2760 comm="syz.2.771" name="/" dev="incremental-fs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.643417][ T36] audit: type=1400 audit(163.600:624): avc: denied { read } for pid=2760 comm="syz.2.771" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.666805][ T36] audit: type=1400 audit(163.600:625): avc: denied { open } for pid=2760 comm="syz.2.771" path="/186/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.690819][ T36] audit: type=1400 audit(163.600:626): avc: denied { ioctl } for pid=2760 comm="syz.2.771" path="/186/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.693749][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 163.716527][ T36] audit: type=1400 audit(163.620:627): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.733450][ T9] usb 2-1: USB disconnect, device number 76 [ 163.742911][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 163.754975][ T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.772447][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.780884][ T64] usb 1-1: config 2 has an invalid interface number: 11 but max is 0 [ 163.789075][ T64] usb 1-1: config 2 has no interface number 0 [ 163.795547][ T64] usb 1-1: config 2 interface 11 has no altsetting 0 [ 163.804051][ T64] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=99.24 [ 163.813408][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.821530][ T64] usb 1-1: Product: syz [ 163.825719][ T64] usb 1-1: Manufacturer: syz [ 163.830422][ T64] usb 1-1: SerialNumber: syz [ 163.921111][ T31] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 164.037507][ T2758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.770'. [ 164.071091][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 164.078473][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.090454][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.100585][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 164.113702][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.120577][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 164.130222][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.139049][ T31] usb 3-1: config 0 descriptor?? [ 164.176784][ T64] ums-cypress 1-1:2.11: USB Mass Storage device detected [ 164.224051][ T64] usb 1-1: USB disconnect, device number 81 [ 164.291119][ T307] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 164.441125][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 164.447466][ T307] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.455896][ T307] usb 2-1: config 0 has no interface number 0 [ 164.462111][ T307] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.472401][ T307] usb 2-1: config 0 interface 196 has no altsetting 0 [ 164.481469][ T307] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.490534][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.498573][ T307] usb 2-1: Product: syz [ 164.502784][ T307] usb 2-1: Manufacturer: syz [ 164.507951][ T307] usb 2-1: SerialNumber: syz [ 164.513295][ T307] usb 2-1: config 0 descriptor?? [ 164.518605][ T2765] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.547264][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 164.553457][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.562565][ T31] usb 3-1: USB disconnect, device number 74 [ 164.707818][ T2773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1975152616 (3950305232 ns) > initial count (2545910224 ns). Using initial count to start timer. [ 164.790886][ T36] audit: type=1400 audit(164.760:628): avc: denied { write } for pid=2776 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.031090][ T306] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 165.074156][ T36] audit: type=1400 audit(165.050:629): avc: denied { connect } for pid=2781 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.093092][ T36] audit: type=1400 audit(165.050:630): avc: denied { read } for pid=2781 comm="syz.2.779" path="socket:[23052]" dev="sockfs" ino=23052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.115613][ T36] audit: type=1400 audit(165.070:631): avc: denied { bind } for pid=2764 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.142410][ T36] audit: type=1400 audit(165.120:632): avc: denied { create } for pid=2784 comm="syz.3.780" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.202171][ T306] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 165.210488][ T306] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 165.219707][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.228696][ T306] usb 1-1: config 0 descriptor?? [ 165.238248][ T306] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 165.441196][ T306] usb 1-1: USB disconnect, device number 82 [ 166.181077][ T31] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 166.261056][ T306] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 166.331140][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 166.337356][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.348411][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.358395][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 166.371402][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.378110][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.387204][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.396743][ T31] usb 3-1: config 0 descriptor?? [ 166.421089][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 166.428310][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.438656][ T306] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 166.447872][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.455917][ T306] usb 1-1: Product: syz [ 166.460844][ T306] usb 1-1: Manufacturer: syz [ 166.465489][ T306] usb 1-1: SerialNumber: syz [ 166.674646][ T306] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 166.683216][ T306] usb 1-1: found format II with max.bitrate = 4, frame size=65533 [ 166.691118][ T306] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.700589][ T306] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 166.709096][ T306] usb 1-1: found format II with max.bitrate = 4, frame size=65533 [ 166.717060][ T306] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.727274][ T306] usb 1-1: failed to enable PITCH for EP 0x1 [ 166.733891][ T306] usb 1-1: unit 8 not found! [ 166.743085][ T306] usb 1-1: USB disconnect, device number 83 [ 166.755638][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.804934][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 166.810937][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.820039][ T31] usb 3-1: USB disconnect, device number 75 [ 167.066155][ T307] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 167.073961][ T307] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 167.083838][ T307] usb 2-1: USB disconnect, device number 77 [ 167.316347][ T2825] fuse: Unknown parameter '' [ 167.333788][ T2832] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 167.376613][ T2834] syzkaller1: entered promiscuous mode [ 167.382254][ T2834] syzkaller1: entered allmulticast mode [ 167.382252][ T307] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 167.396771][ T2834] overlayfs: missing 'lowerdir' [ 167.529922][ T2843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.798'. [ 167.542594][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.553638][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.563435][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.576652][ T307] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.586246][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.598239][ T307] usb 2-1: config 0 descriptor?? [ 167.941086][ T306] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 168.006586][ T307] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x4 [ 168.014297][ T307] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 168.023338][ T307] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 168.080692][ T2858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 168.089963][ T2859] netlink: 64 bytes leftover after parsing attributes in process `syz.0.804'. [ 168.101056][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 168.111579][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.122649][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.132582][ T306] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 168.149654][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.156566][ T306] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.166247][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.175587][ T306] usb 3-1: config 0 descriptor?? [ 168.786398][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 168.792605][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.801522][ T306] usb 3-1: USB disconnect, device number 76 [ 169.399270][ T2898] FAULT_INJECTION: forcing a failure. [ 169.399270][ T2898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.412449][ T2898] CPU: 0 UID: 0 PID: 2898 Comm: syz.0.814 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 169.412483][ T2898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.412495][ T2898] Call Trace: [ 169.412503][ T2898] [ 169.412511][ T2898] __dump_stack+0x21/0x30 [ 169.412534][ T2898] dump_stack_lvl+0x140/0x1c0 [ 169.412548][ T2898] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.412562][ T2898] dump_stack+0x19/0x20 [ 169.412583][ T2898] should_fail_ex+0x3d7/0x530 [ 169.412597][ T2898] should_fail+0xf/0x20 [ 169.412609][ T2898] should_fail_usercopy+0x1e/0x30 [ 169.412623][ T2898] copy_fpstate_to_sigframe+0x99f/0xc10 [ 169.412638][ T2898] ? kasan_save_track+0x3e/0x80 [ 169.412657][ T2898] ? kasan_save_free_info+0x4a/0x60 [ 169.412672][ T2898] ? __kasan_slab_free+0x5f/0x80 [ 169.412682][ T2898] ? copy_fpstate_to_sigframe+0x188/0xc10 [ 169.412695][ T2898] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 169.412709][ T2898] ? fpu__alloc_mathframe+0xb7/0x150 [ 169.412726][ T2898] get_sigframe+0x5f8/0x820 [ 169.412742][ T2898] ? __cfi_get_sigframe+0x10/0x10 [ 169.412756][ T2898] ? __dequeue_signal+0x50e/0x680 [ 169.412768][ T2898] x64_setup_rt_frame+0x162/0xc30 [ 169.412783][ T2898] ? get_signal+0x1093/0x14e0 [ 169.412796][ T2898] ? _raw_spin_unlock_irq+0x45/0x70 [ 169.412811][ T2898] ? get_signal+0x124b/0x14e0 [ 169.412824][ T2898] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 169.412839][ T2898] arch_do_signal_or_restart+0x342/0x760 [ 169.412855][ T2898] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 169.412872][ T2898] syscall_exit_to_user_mode+0x57/0xb0 [ 169.412884][ T2898] do_syscall_64+0x63/0xf0 [ 169.412897][ T2898] ? clear_bhb_loop+0x50/0xa0 [ 169.412912][ T2898] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.412926][ T2898] RIP: 0033:0x7f1820b9c799 [ 169.412937][ T2898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.412947][ T2898] RSP: 002b:00007f1821ad4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.412961][ T2898] RAX: fffffffffffffffc RBX: 00007f1820e16180 RCX: 00007f1820b9c799 [ 169.412969][ T2898] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 169.412978][ T2898] RBP: 00007f1821ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 169.412985][ T2898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.412992][ T2898] R13: 00007f1820e16218 R14: 00007f1820e16180 R15: 00007ffd5aaddf58 [ 169.413001][ T2898] [ 169.791119][ T307] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 169.921088][ T307] usb 3-1: device descriptor read/64, error -71 [ 169.989271][ T2910] syzkaller0: entered promiscuous mode [ 169.995083][ T2910] syzkaller0: entered allmulticast mode [ 170.001375][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 170.011079][ T2910] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 170.023578][ T2910] netlink: 'syz.1.818': attribute type 5 has an invalid length. [ 170.033356][ T2910] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.818'. [ 170.047122][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 170.047141][ T36] audit: type=1400 audit(170.030:648): avc: denied { create } for pid=2920 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 170.072180][ T36] audit: type=1400 audit(170.030:649): avc: denied { setopt } for pid=2920 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.116487][ T306] usb 2-1: USB disconnect, device number 78 [ 170.119156][ T36] audit: type=1400 audit(170.090:650): avc: denied { sqpoll } for pid=2924 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.170695][ T307] usb 3-1: device descriptor read/64, error -71 [ 170.173817][ T36] audit: type=1400 audit(170.140:651): avc: denied { watch } for pid=2932 comm="syz.1.826" path="/234/file0" dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.411114][ T307] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 170.501131][ T306] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 170.541135][ T307] usb 3-1: device descriptor read/64, error -71 [ 170.652439][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.663503][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.673258][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.686282][ T306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.695435][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.704038][ T306] usb 2-1: config 0 descriptor?? [ 170.791086][ T307] usb 3-1: device descriptor read/64, error -71 [ 170.901151][ T307] usb usb3-port1: attempt power cycle [ 171.111293][ T306] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x4 [ 171.118900][ T306] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 171.127929][ T306] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 171.191591][ T36] audit: type=1400 audit(171.170:652): avc: denied { connect } for pid=2937 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.210677][ T36] audit: type=1400 audit(171.170:653): avc: denied { setopt } for pid=2937 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.246096][ T307] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 171.272154][ T307] usb 3-1: device descriptor read/8, error -71 [ 171.392895][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.402026][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.412146][ T307] usb 3-1: device descriptor read/8, error -71 [ 171.651094][ T307] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 171.672288][ T307] usb 3-1: device descriptor read/8, error -71 [ 171.802987][ T307] usb 3-1: device descriptor read/8, error -71 [ 171.911301][ T307] usb usb3-port1: unable to enumerate USB device [ 172.347711][ T2946] 9pnet_fd: Insufficient options for proto=fd [ 172.731104][ T307] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 172.881095][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 172.887851][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.896634][ T307] usb 3-1: config 3 has an invalid interface number: 11 but max is 0 [ 172.904777][ T307] usb 3-1: config 3 has no interface number 0 [ 172.910916][ T307] usb 3-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 172.928041][ T307] usb 3-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 172.939892][ T307] usb 3-1: config 3 interface 11 has no altsetting 0 [ 172.951636][ T307] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 172.960708][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.968731][ T307] usb 3-1: Product: syz [ 172.972935][ T307] usb 3-1: Manufacturer: syz [ 172.977521][ T307] usb 3-1: SerialNumber: syz [ 172.995561][ T2955] kvm: pic: non byte write [ 173.054134][ T36] audit: type=1326 audit(173.030:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.1.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc50439c799 code=0x0 [ 173.185060][ T307] usbhid 3-1:3.11: couldn't find an input interrupt endpoint [ 173.201864][ T307] usb 3-1: USB disconnect, device number 81 [ 173.218045][ T36] audit: type=1400 audit(173.190:655): avc: denied { getopt } for pid=2967 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.451564][ T306] usb 2-1: USB disconnect, device number 79 [ 173.581091][ T306] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 173.711072][ T306] usb 2-1: device descriptor read/64, error -71 [ 173.931088][ T31] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 173.951168][ T306] usb 2-1: device descriptor read/64, error -71 [ 174.061142][ T31] usb 3-1: device descriptor read/64, error -71 [ 174.191099][ T306] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 174.301092][ T31] usb 3-1: device descriptor read/64, error -71 [ 174.321099][ T306] usb 2-1: device descriptor read/64, error -71 [ 174.541142][ T31] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 174.561151][ T306] usb 2-1: device descriptor read/64, error -71 [ 174.671185][ T31] usb 3-1: device descriptor read/64, error -71 [ 174.671465][ T306] usb usb2-port1: attempt power cycle [ 174.911207][ T31] usb 3-1: device descriptor read/64, error -71 [ 175.021182][ T306] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 175.021244][ T31] usb usb3-port1: attempt power cycle [ 175.042454][ T306] usb 2-1: device descriptor read/8, error -71 [ 175.172425][ T306] usb 2-1: device descriptor read/8, error -71 [ 175.371141][ T31] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 175.392378][ T31] usb 3-1: device descriptor read/8, error -71 [ 175.411235][ T306] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 175.432246][ T306] usb 2-1: device descriptor read/8, error -71 [ 175.522129][ T31] usb 3-1: device descriptor read/8, error -71 [ 175.562552][ T306] usb 2-1: device descriptor read/8, error -71 [ 175.671234][ T306] usb usb2-port1: unable to enumerate USB device [ 175.761135][ T31] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 175.782254][ T31] usb 3-1: device descriptor read/8, error -71 [ 175.912278][ T31] usb 3-1: device descriptor read/8, error -71 [ 176.021225][ T31] usb usb3-port1: unable to enumerate USB device [ 176.070657][ T36] audit: type=1400 audit(176.040:656): avc: denied { append } for pid=2976 comm="syz.1.842" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 176.461083][ T31] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 176.611059][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 176.617410][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.628787][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.638813][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 176.651816][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.658430][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 176.667859][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.676471][ T31] usb 2-1: config 0 descriptor?? [ 177.090747][ T36] audit: type=1400 audit(177.060:657): avc: denied { mount } for pid=2987 comm="syz.0.847" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.090921][ T2988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 177.121127][ T306] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 177.121767][ T2988] syzkaller1: entered promiscuous mode [ 177.134288][ T2988] syzkaller1: entered allmulticast mode [ 177.227941][ T36] audit: type=1400 audit(177.200:658): avc: denied { bind } for pid=2996 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.247320][ T36] audit: type=1400 audit(177.230:659): avc: denied { setopt } for pid=2996 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.284719][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 177.290724][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.292200][ T306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 177.301143][ T31] usb 2-1: USB disconnect, device number 84 [ 177.315916][ T306] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 177.325748][ T306] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.340005][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.349243][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.357283][ T306] usb 3-1: SerialNumber: syz [ 177.362890][ T2986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.520192][ T3011] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 177.529632][ T3011] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 177.570598][ T2986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.980562][ T306] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 178.041079][ T31] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 178.187551][ T9] usb 3-1: USB disconnect, device number 86 [ 178.200528][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 178.219474][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 178.225792][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 178.234005][ T31] usb 2-1: config 0 has no interface number 0 [ 178.247650][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 178.256988][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.265275][ T31] usb 2-1: Product: syz [ 178.269507][ T31] usb 2-1: Manufacturer: syz [ 178.280100][ T31] usb 2-1: SerialNumber: syz [ 178.292685][ T31] usb 2-1: config 0 descriptor?? [ 178.303323][ T36] audit: type=1400 audit(178.280:660): avc: denied { read } for pid=3055 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.334597][ T31] smsc95xx v2.0.0 [ 178.581134][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 178.733185][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.744224][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.754050][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 178.763147][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.772052][ T9] usb 3-1: config 0 descriptor?? [ 179.305081][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32 [ 179.306075][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.316959][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 179.324917][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.947403][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 179.958370][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 179.968203][ T31] usb 2-1: USB disconnect, device number 85 [ 180.691065][ T31] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 180.842426][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.850842][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.861046][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.871467][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.880553][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.888605][ T31] usb 2-1: Product: syz [ 180.892924][ T31] usb 2-1: Manufacturer: syz [ 180.897527][ T31] usb 2-1: SerialNumber: syz [ 181.292653][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 181.299795][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 181.310657][ T31] usb 2-1: 0:1 : does not exist [ 181.311988][ T9] usb 3-1: USB disconnect, device number 87 [ 181.323859][ T31] usb 2-1: 0:2 : does not exist [ 181.331423][ T31] usb 2-1: 2:0: failed to get current value for ch 1 (-22) [ 181.342540][ T31] usb 2-1: 2:0: failed to get current value for ch 0 (-22) [ 181.353756][ T31] usb 2-1: 2:0: cannot get min/max values for control 3 (id 2) [ 181.372587][ T31] usb 2-1: 2:0: cannot get min/max values for control 4 (id 2) [ 181.384658][ T31] usb 2-1: 2:0: failed to get current value for ch 1 (-22) [ 181.395478][ T31] usb 2-1: 2:0: cannot get min/max values for control 8 (id 2) [ 181.405044][ T31] usb 2-1: 2:0: failed to get current value for ch 1 (-22) [ 181.421236][ T31] usb 2-1: USB disconnect, device number 86 [ 181.428331][ T3104] netlink: 344 bytes leftover after parsing attributes in process `syz.0.871'. [ 181.464273][ T3108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3108 comm=syz.0.873 [ 181.464279][ T3109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3109 comm=syz.0.873 [ 181.781125][ T467] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 182.017346][ T3113] overlayfs: lower data-only dirs require metacopy support. [ 182.097178][ T467] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 182.106490][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.114992][ T467] usb 3-1: Product: syz [ 182.119345][ T467] usb 3-1: Manufacturer: syz [ 182.123057][ T36] audit: type=1400 audit(182.100:661): avc: denied { ioctl } for pid=3119 comm="syz.1.877" path="socket:[24762]" dev="sockfs" ino=24762 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.124289][ T467] usb 3-1: SerialNumber: syz [ 182.150259][ T3120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3120 comm=syz.1.877 [ 182.167424][ T3120] netlink: 'syz.1.877': attribute type 30 has an invalid length. [ 182.421060][ T31] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 182.572150][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.583126][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.592916][ T31] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 182.602076][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.610608][ T31] usb 2-1: config 0 descriptor?? [ 183.018293][ T31] cp2112 0003:10C4:EA90.002A: item fetching failed at offset 5/7 [ 183.026229][ T31] cp2112 0003:10C4:EA90.002A: parse failed [ 183.032175][ T31] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -22 [ 184.555717][ T467] usb 3-1: MIDIStreaming interface descriptor not found [ 184.579085][ T467] usb 3-1: USB disconnect, device number 88 [ 184.835589][ T3145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.844120][ T3145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.187221][ T31] usb 2-1: USB disconnect, device number 87 [ 185.221085][ T467] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 185.371054][ T467] usb 3-1: Using ep0 maxpacket: 16 [ 185.377221][ T467] usb 3-1: config 0 has no interfaces? [ 185.384232][ T467] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.393389][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.401572][ T467] usb 3-1: Product: syz [ 185.405734][ T467] usb 3-1: Manufacturer: syz [ 185.410314][ T467] usb 3-1: SerialNumber: syz [ 185.417766][ T467] r8152-cfgselector 3-1: Unknown version 0x0000 [ 185.424065][ T467] r8152-cfgselector 3-1: config 0 descriptor?? [ 185.531102][ T31] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 185.632088][ T9] r8152-cfgselector 3-1: USB disconnect, device number 89 [ 185.681047][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 185.687546][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.696097][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 185.708357][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 185.717665][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.725739][ T31] usb 2-1: Product: syz [ 185.729926][ T31] usb 2-1: Manufacturer: syz [ 185.734562][ T31] usb 2-1: SerialNumber: syz [ 185.943811][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 185.954844][ T31] usb 2-1: USB disconnect, device number 88 [ 185.965277][ T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.147420][ T36] audit: type=1400 audit(186.120:662): avc: denied { ioctl } for pid=3149 comm="syz.2.888" path="socket:[24201]" dev="sockfs" ino=24201 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.751075][ T467] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 186.901039][ T467] usb 2-1: Using ep0 maxpacket: 16 [ 186.907302][ T467] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.918417][ T467] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 186.928380][ T467] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 186.938059][ T467] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.951713][ T467] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.960777][ T467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.968819][ T467] usb 2-1: SerialNumber: syz [ 186.974278][ T3153] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.981720][ T3153] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.993965][ T467] hub 2-1:1.0: bad descriptor, ignoring hub [ 187.000172][ T467] hub 2-1:1.0: probe with driver hub failed with error -5 [ 187.046312][ T36] audit: type=1400 audit(187.020:663): avc: denied { mount } for pid=3155 comm="syz.2.890" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.067608][ T36] audit: type=1400 audit(187.020:664): avc: denied { append } for pid=3155 comm="syz.2.890" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.090539][ T36] audit: type=1400 audit(187.040:665): avc: denied { setattr } for pid=3158 comm="syz.3.891" name="PACKET" dev="sockfs" ino=24865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.191521][ T3153] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 187.199001][ T3153] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 187.409768][ T467] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 187.762504][ T36] audit: type=1400 audit(187.740:666): avc: denied { create } for pid=3152 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.792057][ T467] usb 2-1: USB disconnect, device number 89 [ 187.798643][ T467] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 187.836984][ T36] audit: type=1400 audit(187.810:667): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.081135][ T31] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 188.211158][ T467] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 188.232202][ T31] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 188.240315][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.251207][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.260934][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.273826][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.282981][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.291741][ T31] usb 3-1: config 0 descriptor?? [ 188.381053][ T467] usb 2-1: Using ep0 maxpacket: 16 [ 188.387202][ T467] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.398209][ T467] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.408048][ T467] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 188.421108][ T467] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.427721][ T467] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 188.436786][ T467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.445768][ T467] usb 2-1: config 0 descriptor?? [ 188.653888][ T36] audit: type=1400 audit(188.630:668): avc: denied { block_suspend } for pid=3211 comm="syz.1.901" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.699019][ T31] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 188.707283][ T31] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 188.716440][ T31] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.941155][ T3221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.949693][ T3221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.973720][ T31] usb 3-1: USB disconnect, device number 90 [ 189.590290][ T3233] kvm: kvm [3232]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 189.599376][ T3233] kvm: kvm [3232]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 189.677992][ T3236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 189.829926][ T3247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=3247 comm=syz.2.910 [ 190.175053][ T3252] fuse: Bad value for 'group_id' [ 190.180022][ T3252] fuse: Bad value for 'group_id' [ 190.370742][ T36] audit: type=1400 audit(190.340:670): avc: denied { ioctl } for pid=3267 comm="syz.3.917" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.396011][ T36] audit: type=1400 audit(190.340:669): avc: denied { ioctl } for pid=3267 comm="syz.3.917" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.540142][ T3276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=3276 comm=syz.0.919 [ 190.551072][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 190.701088][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 190.707341][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.718289][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.728120][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.737192][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.746206][ T9] usb 3-1: config 0 descriptor?? [ 190.752168][ T9] hub 3-1:0.0: USB hub found [ 190.889945][ T36] audit: type=1400 audit(190.860:671): avc: denied { accept } for pid=3280 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.921431][ T467] usbhid 2-1:0.0: can't add hid device: -71 [ 190.930829][ T467] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 190.945078][ T467] usb 2-1: USB disconnect, device number 90 [ 190.955257][ T9] hub 3-1:0.0: 1 port detected [ 191.281070][ T467] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 191.431143][ T467] usb 2-1: Using ep0 maxpacket: 32 [ 191.437467][ T467] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.445833][ T467] usb 2-1: config 0 has no interface number 0 [ 191.451985][ T467] usb 2-1: config 0 interface 184 has no altsetting 0 [ 191.460319][ T467] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.469416][ T467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.477446][ T467] usb 2-1: Product: syz [ 191.481658][ T467] usb 2-1: Manufacturer: syz [ 191.486261][ T467] usb 2-1: SerialNumber: syz [ 191.491954][ T467] usb 2-1: config 0 descriptor?? [ 191.497717][ T467] smsc75xx v1.0.0 [ 191.555606][ T9] hub 3-1:0.0: activate --> -90 [ 191.861221][ T9] usb 3-1: USB disconnect, device number 91 [ 192.500480][ T467] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 192.510433][ T31] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 192.662020][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.673063][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.682981][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.696062][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.705278][ T467] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 192.716090][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.724168][ T467] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 192.734163][ T467] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 192.744699][ T31] usb 3-1: config 0 descriptor?? [ 192.749709][ T467] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 192.759180][ T467] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 192.769317][ T467] usb 2-1: USB disconnect, device number 91 [ 193.169175][ T31] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x4 [ 193.176819][ T31] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 193.185690][ T31] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 193.296854][ T3314] netlink: 'syz.1.930': attribute type 12 has an invalid length. [ 193.385325][ T36] audit: type=1400 audit(193.360:672): avc: denied { create } for pid=3315 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 193.405308][ T36] audit: type=1400 audit(193.360:673): avc: denied { create } for pid=3315 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 193.541063][ T31] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 193.691070][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 193.696640][ T31] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 193.705553][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.713215][ T31] usb 2-1: can't read configurations, error -61 [ 193.841067][ T31] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 193.937335][ T36] audit: type=1400 audit(193.910:674): avc: denied { bind } for pid=3319 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.991069][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 193.998429][ T31] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 194.007560][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.015297][ T31] usb 2-1: can't read configurations, error -61 [ 194.021983][ T31] usb usb2-port1: attempt power cycle [ 194.361139][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 194.381400][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 194.387046][ T31] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 194.395981][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.403773][ T31] usb 2-1: can't read configurations, error -61 [ 194.531107][ T31] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 194.551412][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 194.557245][ T31] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 194.566105][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.573696][ T31] usb 2-1: can't read configurations, error -61 [ 194.580074][ T31] usb usb2-port1: unable to enumerate USB device [ 195.038849][ T36] audit: type=1400 audit(195.014:675): avc: denied { bind } for pid=3329 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.040211][ T3332] netlink: 164 bytes leftover after parsing attributes in process `syz.2.935'. [ 195.231427][ T467] usb 3-1: USB disconnect, device number 92 [ 196.326994][ T3338] rust_binder: Read failure Err(EAGAIN) in pid:748 [ 196.327080][ T3337] rust_binder: Read failure Err(EAGAIN) in pid:748 [ 196.991062][ T467] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 197.152215][ T467] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 197.160662][ T467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.178921][ T467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.192292][ T467] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.205742][ T467] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.215044][ T467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.227349][ T467] usb 3-1: config 0 descriptor?? [ 197.324779][ T36] audit: type=1400 audit(197.304:676): avc: denied { getopt } for pid=3361 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.344196][ T3362] 9pnet_fd: Insufficient options for proto=fd [ 197.649911][ T467] plantronics 0003:047F:FFFF.002D: unknown main item tag 0xd [ 197.658089][ T467] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 197.667039][ T467] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.911601][ T3360] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 197.919348][ T3360] netlink: 1 bytes leftover after parsing attributes in process `syz.2.944'. [ 197.939875][ T3360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 198.032131][ T467] usb 3-1: USB disconnect, device number 93 [ 198.111163][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 198.261049][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 198.267476][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 198.275704][ T9] usb 2-1: config 0 has no interface number 0 [ 198.281836][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 198.290061][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 198.299157][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.307173][ T9] usb 2-1: Product: syz [ 198.311343][ T9] usb 2-1: Manufacturer: syz [ 198.315940][ T9] usb 2-1: SerialNumber: syz [ 198.321547][ T9] usb 2-1: config 0 descriptor?? [ 198.327225][ T9] smsc75xx v1.0.0 [ 198.532625][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.551032][ T36] audit: type=1400 audit(198.524:677): avc: denied { shutdown } for pid=3380 comm="syz.1.949" laddr=::ffff:172.20.20.11 lport=255 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.557303][ T3383] netlink: 'syz.1.950': attribute type 4 has an invalid length. [ 198.576678][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 198.583453][ T3383] netlink: 'syz.1.950': attribute type 21 has an invalid length. [ 198.593264][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 198.602286][ T3383] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.950'. [ 198.618801][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 198.633208][ T9] usb 2-1: USB disconnect, device number 96 [ 198.801646][ T36] audit: type=1400 audit(198.784:678): avc: denied { ioctl } for pid=3397 comm="syz.1.956" path="socket:[26117]" dev="sockfs" ino=26117 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.840875][ T3400] netlink: 'syz.2.957': attribute type 13 has an invalid length. [ 198.848820][ T3400] erspan0: refused to change device tx_queue_len [ 198.866121][ T36] audit: type=1400 audit(198.844:679): avc: denied { read } for pid=3401 comm="syz.2.958" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.101071][ T467] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 199.101071][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 199.251038][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 199.257205][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.267188][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.271037][ T467] usb 3-1: Using ep0 maxpacket: 32 [ 199.273836][ T9] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 199.281736][ T467] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 199.288018][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.297422][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.306246][ T9] usb 2-1: config 0 descriptor?? [ 199.315990][ T467] usb 3-1: Product: syz [ 199.322249][ T467] usb 3-1: Manufacturer: syz [ 199.326933][ T467] usb 3-1: SerialNumber: syz [ 199.535459][ T467] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 199.543816][ T467] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.553490][ T467] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 199.561780][ T467] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 199.571975][ T467] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 199.581743][ T467] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 199.592636][ T467] usb 3-1: USB disconnect, device number 94 [ 199.602950][ T484] udevd[484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.721148][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.728281][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.735512][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.742604][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.749647][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.756717][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.763808][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.770934][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.778012][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.785112][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.792188][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.799250][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.806412][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.813485][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.820609][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.827678][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.834748][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.841825][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.849055][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.856149][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.863320][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.870347][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.877418][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.885684][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.892786][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.899838][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.907025][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.914219][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.921329][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.928420][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.935535][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.942721][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.949758][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.956815][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.963963][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.971121][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.978258][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.985328][ T9] hid-rmi 0003:1532:011D.002E: unknown main item tag 0x0 [ 199.993012][ T9] hid-rmi 0003:1532:011D.002E: hidraw0: USB HID v10.0c Device [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 200.007615][ T9] usb 2-1: USB disconnect, device number 97 [ 200.047793][ T3416] netlink: 108 bytes leftover after parsing attributes in process `syz.2.962'. [ 200.056892][ T3416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 200.301068][ T358] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 200.431235][ T358] usb 3-1: device descriptor read/64, error -71 [ 200.671067][ T358] usb 3-1: device descriptor read/64, error -71 [ 200.911071][ T358] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 201.041060][ T358] usb 3-1: device descriptor read/64, error -71 [ 201.281055][ T358] usb 3-1: device descriptor read/64, error -71 [ 201.320359][ T3427] incfs: Backing dir is not set, filesystem can't be mounted. [ 201.327919][ T3427] incfs: mount failed -2 [ 201.345113][ T3432] cannot load conntrack support for proto=3 [ 201.391254][ T358] usb usb3-port1: attempt power cycle [ 201.591073][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 201.732271][ T358] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 201.741337][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 201.748573][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 201.756789][ T9] usb 2-1: config 0 has no interface number 0 [ 201.763766][ T358] usb 3-1: device descriptor read/8, error -71 [ 201.770525][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.779621][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.787654][ T9] usb 2-1: Product: syz [ 201.791831][ T9] usb 2-1: Manufacturer: syz [ 201.796421][ T9] usb 2-1: SerialNumber: syz [ 201.802146][ T9] usb 2-1: config 0 descriptor?? [ 201.807837][ T9] smsc95xx v2.0.0 [ 201.892494][ T358] usb 3-1: device descriptor read/8, error -71 [ 202.131066][ T358] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 202.152117][ T358] usb 3-1: device descriptor read/8, error -71 [ 202.209573][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 202.220333][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.282224][ T358] usb 3-1: device descriptor read/8, error -71 [ 202.391188][ T358] usb usb3-port1: unable to enumerate USB device [ 203.433899][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 203.444748][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 203.453053][ T358] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 203.461760][ T9] usb 2-1: USB disconnect, device number 98 [ 203.611471][ T358] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 203.620158][ T358] usb 3-1: config index 0 descriptor too short (expected 64575, got 68) [ 203.628661][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.638943][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.652749][ T358] usb 3-1: config index 1 descriptor too short (expected 64575, got 68) [ 203.661237][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.671376][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.684991][ T358] usb 3-1: config index 2 descriptor too short (expected 64575, got 68) [ 203.693398][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.703495][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.717289][ T358] usb 3-1: config index 3 descriptor too short (expected 64575, got 68) [ 203.725718][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.736126][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.749728][ T358] usb 3-1: config index 4 descriptor too short (expected 64575, got 68) [ 203.758134][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.768276][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.781865][ T358] usb 3-1: config index 5 descriptor too short (expected 64575, got 68) [ 203.790224][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.800353][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.813935][ T358] usb 3-1: config index 6 descriptor too short (expected 64575, got 68) [ 203.822313][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.832419][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.846059][ T358] usb 3-1: config index 7 descriptor too short (expected 64575, got 68) [ 203.854464][ T358] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 203.864600][ T358] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.878761][ T36] audit: type=1400 audit(203.854:680): avc: denied { write } for pid=3444 comm="syz.2.973" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.962577][ T358] usb 3-1: string descriptor 0 read error: -71 [ 203.968887][ T358] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.977946][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.987168][ T358] usb 3-1: can't set config #1, error -71 [ 203.994645][ T358] usb 3-1: USB disconnect, device number 99 [ 204.201087][ T467] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 204.352285][ T467] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 204.360406][ T467] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.370270][ T467] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.378441][ T467] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.387623][ T467] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.395810][ T467] usb 2-1: Product: syz [ 204.399950][ T467] usb 2-1: Manufacturer: syz [ 204.404553][ T467] usb 2-1: SerialNumber: syz [ 204.410425][ T467] usb 2-1: config 0 descriptor?? [ 204.416132][ T467] hub 2-1:0.0: bad descriptor, ignoring hub [ 204.422204][ T467] hub 2-1:0.0: probe with driver hub failed with error -5 [ 204.429680][ T467] usb 2-1: selecting invalid altsetting 0 [ 204.531861][ T3455] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 204.721168][ T31] usb 2-1: USB disconnect, device number 99 [ 204.791092][ T467] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 204.953075][ T467] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.967989][ T467] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.979339][ T467] usb 3-1: string descriptor 0 read error: -22 [ 204.985603][ T467] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 204.995257][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.006019][ T467] usb 3-1: 0:1 : does not exist [ 205.010951][ T467] usb 3-1: BAAD HEADSET c_chmask mismatch [ 205.018803][ T467] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.021813][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.206943][ T3458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.215595][ T3458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.224331][ T31] usb 3-1: USB disconnect, device number 100 [ 205.381110][ T467] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 205.531073][ T467] usb 2-1: Using ep0 maxpacket: 16 [ 205.537442][ T467] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.547676][ T467] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.557977][ T467] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.567069][ T467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.575066][ T467] usb 2-1: Product: syz [ 205.579209][ T467] usb 2-1: Manufacturer: syz [ 205.583813][ T467] usb 2-1: SerialNumber: syz [ 205.759700][ T36] audit: type=1400 audit(205.734:681): avc: denied { connect } for pid=3477 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.790385][ T467] usb 2-1: 0:2 : does not exist [ 205.801012][ T467] usb 2-1: unit 9 not found! [ 205.808917][ T467] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 205.819506][ T467] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 205.833341][ T467] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 205.843017][ T467] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 205.853177][ T467] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 205.863501][ T467] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 205.873173][ T467] usb 2-1: USB disconnect, device number 100 [ 206.061124][ T358] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 206.211107][ T358] usb 3-1: Using ep0 maxpacket: 32 [ 206.217684][ T358] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.225994][ T358] usb 3-1: config 0 has no interface number 0 [ 206.232154][ T358] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 206.243959][ T358] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 206.253074][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.261102][ T358] usb 3-1: Product: syz [ 206.265322][ T358] usb 3-1: Manufacturer: syz [ 206.270084][ T358] usb 3-1: SerialNumber: syz [ 206.275609][ T358] usb 3-1: config 0 descriptor?? [ 206.281050][ T3487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.434754][ T36] audit: type=1400 audit(206.414:682): avc: denied { setopt } for pid=3495 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.454136][ T36] audit: type=1400 audit(206.414:683): avc: denied { write } for pid=3495 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.491546][ T3487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.781074][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 206.931088][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.937427][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 206.948592][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33512, setting to 1024 [ 206.961482][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 206.970558][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 206.978932][ T9] usb 2-1: Product: syz [ 206.983135][ T9] usb 2-1: Manufacturer: syz [ 206.991067][ T9] hub 2-1:4.0: USB hub found [ 207.196739][ T9] hub 2-1:4.0: 2 ports detected [ 207.201871][ T9] hub 2-1:4.0: insufficient power available to use all downstream ports [ 207.318778][ T36] audit: type=1400 audit(207.294:684): avc: denied { map } for pid=3486 comm="syz.2.988" path="socket:[26409]" dev="sockfs" ino=26409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 207.342272][ T36] audit: type=1400 audit(207.304:685): avc: denied { accept } for pid=3486 comm="syz.2.988" path="socket:[26409]" dev="sockfs" ino=26409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 207.572558][ T358] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 207.582796][ T358] asix 3-1:0.188: probe with driver asix failed with error -61 [ 207.599652][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.608265][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.616986][ T9] hub 2-1:4.0: set hub depth failed [ 207.623800][ T9] usb 2-1: USB disconnect, device number 101 [ 207.861897][ T9] usb 3-1: USB disconnect, device number 101 [ 208.287605][ T36] audit: type=1400 audit(208.264:686): avc: denied { map } for pid=3506 comm="syz.1.994" path="socket:[26491]" dev="sockfs" ino=26491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.310101][ T36] audit: type=1400 audit(208.264:687): avc: denied { read } for pid=3506 comm="syz.1.994" path="socket:[26491]" dev="sockfs" ino=26491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.611078][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 208.761046][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 208.767379][ T9] usb 3-1: config 3 has too many interfaces: 244, using maximum allowed: 32 [ 208.776277][ T9] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 244 [ 208.785451][ T9] usb 3-1: config 3 has no interface number 0 [ 208.791585][ T9] usb 3-1: too many endpoints for config 3 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 208.802666][ T9] usb 3-1: config 3 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 208.812915][ T9] usb 3-1: config 3 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 208.824661][ T9] usb 3-1: config 3 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 208.838048][ T9] usb 3-1: config 3 interface 228 has no altsetting 0 [ 208.846780][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 208.855915][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.863991][ T9] usb 3-1: Product: syz [ 208.868178][ T9] usb 3-1: Manufacturer: syz [ 208.872791][ T9] usb 3-1: SerialNumber: syz [ 209.078738][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 209.079049][ T36] audit: type=1400 audit(209.054:688): avc: denied { nlmsg_read } for pid=3514 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.088069][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 209.121521][ T9] usb 3-1: USB disconnect, device number 102 [ 209.126113][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.301124][ T31] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 209.431196][ T31] usb 2-1: device descriptor read/64, error -71 [ 209.671112][ T31] usb 2-1: device descriptor read/64, error -71 [ 209.861087][ T45] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 209.911052][ T31] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 210.011081][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 210.017539][ T45] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 210.025703][ T45] usb 3-1: config 0 has no interface number 0 [ 210.033847][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 210.043014][ T31] usb 2-1: device descriptor read/64, error -71 [ 210.049292][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.057307][ T45] usb 3-1: Product: syz [ 210.061487][ T45] usb 3-1: Manufacturer: syz [ 210.066107][ T45] usb 3-1: SerialNumber: syz [ 210.071319][ T45] usb 3-1: config 0 descriptor?? [ 210.077394][ T45] smsc95xx v2.0.0 [ 210.281058][ T31] usb 2-1: device descriptor read/64, error -71 [ 210.391236][ T31] usb usb2-port1: attempt power cycle [ 210.478497][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 210.489281][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.731065][ T31] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 210.751955][ T31] usb 2-1: device descriptor read/8, error -71 [ 210.882742][ T31] usb 2-1: device descriptor read/8, error -71 [ 211.121063][ T31] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 211.142040][ T31] usb 2-1: device descriptor read/8, error -71 [ 211.272233][ T31] usb 2-1: device descriptor read/8, error -71 [ 211.300547][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 211.311324][ T45] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 211.381150][ T31] usb usb2-port1: unable to enumerate USB device [ 211.947084][ T36] audit: type=1400 audit(211.924:689): avc: denied { set_context_mgr } for pid=3534 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 211.966339][ T36] audit: type=1400 audit(211.924:690): avc: denied { map } for pid=3534 comm="syz.3.1002" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.989785][ T36] audit: type=1400 audit(211.924:691): avc: denied { call } for pid=3534 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 212.471080][ T45] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 212.621034][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 212.628259][ T45] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 212.631812][ T9] usb 3-1: USB disconnect, device number 103 [ 212.636826][ T45] usb 2-1: config 0 has no interface number 0 [ 212.648833][ T45] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 212.660520][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 212.669645][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.677711][ T45] usb 2-1: Product: syz [ 212.681932][ T45] usb 2-1: Manufacturer: syz [ 212.686533][ T45] usb 2-1: SerialNumber: syz [ 212.691849][ T45] usb 2-1: config 0 descriptor?? [ 212.697211][ T3543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.869695][ T3558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3558 comm=syz.3.1009 [ 212.882675][ T3558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=3558 comm=syz.3.1009 [ 212.895438][ T3558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3558 comm=syz.3.1009 [ 212.906130][ T3543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.908109][ T3558] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.922870][ T3558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.930146][ T3558] IPv6: NLM_F_CREATE should be set when creating new route [ 212.937515][ T3558] IPv6: NLM_F_CREATE should be set when creating new route [ 212.981039][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 213.009771][ T3562] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1010'. [ 213.131028][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 213.137614][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.148738][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.159613][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.168742][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 213.177111][ T9] usb 3-1: Product: syz [ 213.181306][ T9] usb 3-1: Manufacturer: syz [ 213.188491][ T9] hub 3-1:4.0: USB hub found [ 213.388475][ T9] hub 3-1:4.0: 4 ports detected [ 213.393783][ T9] hub 3-1:4.0: insufficient power available to use all downstream ports [ 213.589470][ T9] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 213.596089][ T9] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 213.622190][ T9] usb 3-1: USB disconnect, device number 104 [ 213.711744][ T36] audit: type=1400 audit(213.694:692): avc: denied { nlmsg_write } for pid=3567 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.732882][ T36] audit: type=1400 audit(213.694:693): avc: denied { audit_write } for pid=3567 comm="syz.3.1013" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 213.753916][ T36] audit: type=1107 audit(213.694:694): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 214.341121][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 214.591106][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 214.597504][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.605949][ T9] usb 3-1: config 0 has no interface number 0 [ 214.613795][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.622919][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.631331][ T9] usb 3-1: Product: syz [ 214.635496][ T9] usb 3-1: Manufacturer: syz [ 214.640104][ T9] usb 3-1: SerialNumber: syz [ 214.645535][ T9] usb 3-1: config 0 descriptor?? [ 214.651626][ T9] smsc95xx v2.0.0 [ 215.053258][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 215.064048][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.662879][ T45] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 215.673172][ T45] asix 2-1:0.188: probe with driver asix failed with error -71 [ 215.684594][ T45] usb 2-1: USB disconnect, device number 106 [ 216.284438][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 216.296202][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.305815][ T9] usb 3-1: USB disconnect, device number 105 [ 216.419316][ T3595] netlink: 'syz.1.1024': attribute type 13 has an invalid length. [ 216.438022][ T3595] rust_binder: Write failure EFAULT in pid:861 [ 216.803189][ T45] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 216.962174][ T45] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 216.970298][ T45] usb 2-1: config 1 has no interface number 0 [ 216.976434][ T45] usb 2-1: config 1 interface 93 has no altsetting 0 [ 216.983166][ T45] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 216.992280][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.207594][ T45] usb 2-1: string descriptor 0 read error: -71 [ 217.214369][ T45] gl620a 2-1:1.93: probe with driver gl620a failed with error -22 [ 217.223132][ T45] usb 2-1: USB disconnect, device number 107 [ 217.451156][ T9] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 217.602071][ T9] usb 3-1: config 0 has no interfaces? [ 217.608471][ T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 217.617674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 217.625806][ T9] usb 3-1: Manufacturer: syz [ 217.630483][ T9] usb 3-1: SerialNumber: syz [ 217.636080][ T9] usb 3-1: config 0 descriptor?? [ 217.874756][ T3628] fuse: Bad value for 'rootmode' [ 217.891234][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 217.924165][ T36] audit: type=1400 audit(217.904:695): avc: denied { map } for pid=3633 comm="syz.1.1038" path="socket:[27361]" dev="sockfs" ino=27361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.966031][ T3641] veth0: entered promiscuous mode [ 218.813305][ T3640] veth0: left promiscuous mode [ 218.935525][ T3646] bpf: Bad value for 'uid' [ 219.146609][ T3652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1044'. [ 219.496208][ T3655] fuse: Bad value for 'rootmode' [ 220.021584][ T45] usb 3-1: USB disconnect, device number 106 [ 220.361523][ T45] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 220.521262][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 220.527600][ T45] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 220.536148][ T45] usb 3-1: config 1 has no interface number 0 [ 220.542746][ T3677] fuse: Unknown parameter 'use00000000000000000000' [ 220.545037][ T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.563896][ T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.574080][ T45] usb 3-1: config 1 interface 105 has no altsetting 0 [ 220.582359][ T45] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 220.591940][ T45] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 220.600093][ T45] usb 3-1: Product: syz [ 220.604363][ T45] usb 3-1: Manufacturer: syz [ 220.609007][ T45] usb 3-1: SerialNumber: syz [ 220.615581][ T3668] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.624102][ T3668] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.679471][ T36] audit: type=1400 audit(220.654:696): avc: denied { bpf } for pid=3696 comm="syz.3.1061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.708726][ T36] audit: type=1400 audit(220.684:697): avc: denied { execstack } for pid=3698 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 220.777371][ T3705] fuse: Unknown parameter 'use00000000000000000000' [ 220.831245][ T9] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 220.982430][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.991047][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 221.002151][ T9] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 221.012596][ T9] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 221.022638][ T9] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 221.035897][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 221.040406][ T3668] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 221.044658][ T9] usb 2-1: string descriptor 0 read error: -22 [ 221.049843][ T3668] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 221.056027][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.072085][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.081066][ T3684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 221.088263][ T3684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 221.096258][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 221.302051][ T36] audit: type=1400 audit(221.284:698): avc: denied { relabelto } for pid=3683 comm="syz.1.1056" name="rdma.current" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 221.305608][ T467] usb 2-1: USB disconnect, device number 108 [ 221.326137][ T36] audit: type=1400 audit(221.284:699): avc: denied { associate } for pid=3683 comm="syz.1.1056" name="rdma.current" dev="tmpfs" ino=1670 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 221.465598][ T3668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.465820][ T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 221.474484][ T3668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.497464][ T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 221.508625][ T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 221.522642][ T45] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:5f:7d:2c:34:66 [ 221.550067][ T45] usb 3-1: USB disconnect, device number 107 [ 221.556579][ T3717] netlink: 'syz.2.1068': attribute type 27 has an invalid length. [ 221.563683][ T45] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 221.580191][ T3717] sit0: left promiscuous mode [ 221.587092][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.617016][ T3717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1068'. [ 221.645625][ T36] audit: type=1400 audit(221.624:700): avc: denied { watch } for pid=3719 comm="syz.2.1069" path="/269" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 221.681593][ T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 221.691042][ T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 221.700352][ T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 221.845844][ T36] audit: type=1400 audit(221.824:701): avc: denied { unlink } for pid=290 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 221.853105][ T3722] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1070'. [ 222.131072][ T45] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 222.281063][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 222.287416][ T45] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 222.295644][ T45] usb 2-1: config 0 has no interface number 0 [ 222.301920][ T45] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 222.313373][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 222.322487][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.330487][ T45] usb 2-1: Product: syz [ 222.334693][ T45] usb 2-1: Manufacturer: syz [ 222.339294][ T45] usb 2-1: SerialNumber: syz [ 222.344486][ T45] usb 2-1: config 0 descriptor?? [ 222.349736][ T3724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.575332][ T3724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.771042][ T467] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 222.922813][ T467] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.933908][ T467] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.943677][ T467] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.956510][ T467] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.963169][ T467] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 222.972260][ T467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.980864][ T467] usb 3-1: config 0 descriptor?? [ 223.388601][ T467] holtek 0003:1241:5015.002F: collection stack underflow [ 223.395800][ T467] holtek 0003:1241:5015.002F: item 0 4 0 12 parsing failed [ 223.403238][ T467] holtek 0003:1241:5015.002F: parse failed [ 223.409118][ T467] holtek 0003:1241:5015.002F: probe with driver holtek failed with error -22 [ 223.590097][ T467] usb 3-1: USB disconnect, device number 108 [ 223.688878][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.697471][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.753136][ T45] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 223.763380][ T45] asix 2-1:0.188: probe with driver asix failed with error -71 [ 223.767503][ T3736] overlay: ./file0 is not a directory [ 223.773881][ T45] usb 2-1: USB disconnect, device number 109 [ 223.783785][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.792488][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.801334][ T3737] 9pnet_fd: p9_fd_create_tcp (3737): problem connecting socket to 127.0.0.1 [ 223.809792][ T3738] 9pnet_fd: p9_fd_create_tcp (3738): problem connecting socket to 127.0.0.1 [ 223.819887][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.829292][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.830905][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 224.091045][ T45] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 224.107407][ T36] audit: type=1400 audit(224.084:702): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 224.241679][ T45] usb 2-1: no configurations [ 224.246299][ T45] usb 2-1: can't read configurations, error -22 [ 224.329073][ T36] audit: type=1400 audit(224.304:703): avc: denied { create } for pid=3767 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.349140][ T36] audit: type=1400 audit(224.304:704): avc: denied { write } for pid=3767 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.369135][ T36] audit: type=1400 audit(224.304:705): avc: denied { read } for pid=3767 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.389127][ T45] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 224.396878][ T36] audit: type=1400 audit(224.304:706): avc: denied { create } for pid=3767 comm="syz.3.1085" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.418044][ T36] audit: type=1400 audit(224.304:707): avc: denied { create } for pid=3767 comm="syz.3.1085" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.439248][ T36] audit: type=1400 audit(224.304:708): avc: denied { execmem } for pid=3767 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 224.458110][ T36] audit: type=1400 audit(224.394:709): avc: denied { ioctl } for pid=3735 comm="syz.1.1074" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.495946][ T36] audit: type=1400 audit(224.474:710): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.519385][ T36] audit: type=1400 audit(224.474:711): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.581423][ T45] usb 2-1: no configurations [ 224.586220][ T45] usb 2-1: can't read configurations, error -22 [ 224.592655][ T45] usb usb2-port1: attempt power cycle [ 224.931064][ T45] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 224.951977][ T45] usb 2-1: no configurations [ 224.956628][ T45] usb 2-1: can't read configurations, error -22 [ 225.091045][ T45] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 225.112853][ T45] usb 2-1: no configurations [ 225.117584][ T45] usb 2-1: can't read configurations, error -22 [ 225.124235][ T45] usb usb2-port1: unable to enumerate USB device [ 225.185357][ T3782] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 225.192021][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.198482][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.241048][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.241069][ T2705] Bluetooth: hci0: command 0x1003 tx timeout [ 227.501102][ T358] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 227.891076][ T358] usb 3-1: Using ep0 maxpacket: 8 [ 227.901804][ T358] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 227.909949][ T358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.920347][ T358] usb 3-1: config 0 has no interface number 0 [ 227.928128][ T358] usb 3-1: New USB device found, idVendor=2f33, idProduct=92f7, bcdDevice=7f.1c [ 227.951011][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.969449][ T358] usb 3-1: Product: syz [ 227.973848][ T358] usb 3-1: Manufacturer: syz [ 227.978458][ T358] usb 3-1: SerialNumber: syz [ 227.984766][ T358] usb 3-1: config 0 descriptor?? [ 228.164464][ T3834] syz.3.1101: attempt to access beyond end of device [ 228.164464][ T3834] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 228.167404][ T3836] 9pnet_fd: Insufficient options for proto=fd [ 228.177730][ T3834] exFAT-fs (loop3): unable to read boot sector [ 228.189807][ T3834] exFAT-fs (loop3): failed to read boot sector [ 228.198723][ T358] cdc_acm 3-1:0.6: More than one union descriptor, skipping ... [ 228.201248][ T3834] exFAT-fs (loop3): failed to recognize exfat type [ 228.209600][ T358] cdc_acm 3-1:0.6: skipping garbage [ 228.223300][ T358] usb 3-1: USB disconnect, device number 109 [ 228.231351][ T3838] SELinux: failed to load policy [ 228.236908][ T3838] tipc: Enabled bearer , priority 10 [ 228.284040][ T3846] veth0: entered promiscuous mode [ 228.289425][ T3845] veth0: left promiscuous mode [ 228.511086][ T307] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 228.671198][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 228.677486][ T307] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.686367][ T307] usb 2-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 228.697187][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.711209][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.720327][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.729403][ T307] usb 2-1: Product: syz [ 228.733700][ T307] usb 2-1: Manufacturer: syz [ 228.738313][ T307] usb 2-1: SerialNumber: syz [ 228.738683][ T3852] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1108'. [ 228.752161][ T3852] gretap0: entered promiscuous mode [ 228.758754][ T3852] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1108'. [ 228.767769][ T3852] 0ªî{X¹¦: renamed from gretap0 [ 228.773458][ T3852] 0ªî{X¹¦: left promiscuous mode [ 228.778556][ T3852] 0ªî{X¹¦: entered allmulticast mode [ 228.784383][ T3852] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 228.802539][ T3852] incfs: Can't find or create .index dir in ./cgroup [ 228.809283][ T3852] incfs: mount failed -22 [ 228.874179][ T3856] binder: Unknown parameter 'func' [ 228.948790][ T307] usb 2-1: 0:2 : does not exist [ 228.957753][ T307] usb 2-1: USB disconnect, device number 114 [ 228.964574][ T309] udevd[309]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 228.975019][ T309] udevd[309]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 229.050871][ T3861] netlink: 'syz.0.1112': attribute type 28 has an invalid length. [ 229.114722][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 229.114740][ T36] audit: type=1400 audit(229.094:773): avc: denied { bind } for pid=3871 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.139750][ T36] audit: type=1400 audit(229.094:774): avc: denied { setopt } for pid=3871 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.167834][ T36] audit: type=1326 audit(229.144:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.0.1116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1820b9c799 code=0x0 [ 229.193780][ T36] audit: type=1400 audit(229.174:776): avc: denied { read write } for pid=3874 comm="syz.2.1117" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 229.216972][ T36] audit: type=1400 audit(229.174:777): avc: denied { open } for pid=3874 comm="syz.2.1117" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 229.239702][ T36] audit: type=1400 audit(229.174:778): avc: denied { mount } for pid=3874 comm="syz.2.1117" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.261200][ T36] audit: type=1400 audit(229.204:779): avc: denied { read write } for pid=3871 comm="syz.0.1116" dev="sockfs" ino=30198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.388281][ T36] audit: type=1400 audit(229.364:780): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.414670][ T36] audit: type=1400 audit(229.394:781): avc: denied { map } for pid=3879 comm="syz.2.1118" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.437203][ T36] audit: type=1400 audit(229.394:782): avc: denied { execute } for pid=3879 comm="syz.2.1118" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.529074][ T3885] mmap: syz.1.1120 (3885): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 229.565148][ T3889] FAULT_INJECTION: forcing a failure. [ 229.565148][ T3889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.578318][ T3889] CPU: 0 UID: 0 PID: 3889 Comm: syz.1.1121 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 229.578351][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.578364][ T3889] Call Trace: [ 229.578370][ T3889] [ 229.578378][ T3889] __dump_stack+0x21/0x30 [ 229.578406][ T3889] dump_stack_lvl+0x140/0x1c0 [ 229.578421][ T3889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.578435][ T3889] ? check_stack_object+0x12b/0x150 [ 229.578451][ T3889] dump_stack+0x19/0x20 [ 229.578463][ T3889] should_fail_ex+0x3d7/0x530 [ 229.578477][ T3889] should_fail+0xf/0x20 [ 229.578489][ T3889] should_fail_usercopy+0x1e/0x30 [ 229.578502][ T3889] _copy_to_user+0x24/0xa0 [ 229.578518][ T3889] simple_read_from_buffer+0xed/0x160 [ 229.578531][ T3889] proc_fail_nth_read+0x1aa/0x220 [ 229.578544][ T3889] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 229.578556][ T3889] ? bpf_lsm_file_permission+0xd/0x20 [ 229.578568][ T3889] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 229.578580][ T3889] vfs_read+0x289/0xcb0 [ 229.578595][ T3889] ? __cfi_vfs_read+0x10/0x10 [ 229.578608][ T3889] ? __kasan_check_write+0x18/0x20 [ 229.578623][ T3889] ? mutex_lock+0x97/0x1d0 [ 229.578634][ T3889] ? __cfi_mutex_lock+0x10/0x10 [ 229.578643][ T3889] ? __fget_files+0x2c5/0x340 [ 229.578655][ T3889] ksys_read+0x145/0x260 [ 229.578668][ T3889] ? __cfi_ksys_read+0x10/0x10 [ 229.578682][ T3889] ? __kasan_check_write+0x18/0x20 [ 229.578696][ T3889] ? fpregs_restore_userregs+0x11c/0x260 [ 229.578709][ T3889] __x64_sys_read+0x7f/0x90 [ 229.578723][ T3889] x64_sys_call+0x2638/0x2ee0 [ 229.578738][ T3889] do_syscall_64+0x57/0xf0 [ 229.578751][ T3889] ? clear_bhb_loop+0x50/0xa0 [ 229.578767][ T3889] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.578780][ T3889] RIP: 0033:0x7fc50435cfce [ 229.578792][ T3889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.578802][ T3889] RSP: 002b:00007fc502df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.578815][ T3889] RAX: ffffffffffffffda RBX: 00007fc502df76c0 RCX: 00007fc50435cfce [ 229.578824][ T3889] RDX: 000000000000000f RSI: 00007fc502df70a0 RDI: 0000000000000006 [ 229.578831][ T3889] RBP: 00007fc502df7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.578838][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.578846][ T3889] R13: 00007fc504616038 R14: 00007fc504615fa0 R15: 00007fffb649aea8 [ 229.578855][ T3889] [ 229.951037][ T307] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 230.102391][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.112558][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.123196][ T307] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 230.132284][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.140308][ T307] usb 3-1: Product: syz [ 230.144696][ T307] usb 3-1: Manufacturer: syz [ 230.149296][ T307] usb 3-1: SerialNumber: syz [ 230.357931][ T307] usb 3-1: 0:1 : does not exist [ 230.362877][ T307] usb 3-1: unit 0 not found! [ 230.367472][ T307] usb 3-1: unit 63 not found! [ 230.373838][ T307] usb 3-1: USB disconnect, device number 110 [ 230.380341][ T309] udevd[309]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 230.742009][ T3899] fuse: Unknown parameter '0x0000000000000004' [ 230.805889][ T3904] incfs: Options parsing error. -22 [ 230.811186][ T3904] incfs: mount failed -22 [ 230.840591][ T3906] SELinux: security_context_str_to_sid () failed with errno=-22 [ 230.868341][ T3910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 231.101034][ T45] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 231.251028][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 231.257534][ T45] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 231.265854][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.276159][ T45] usb 2-1: config 0 has no interface number 0 [ 231.284492][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 231.293764][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.301831][ T45] usb 2-1: Product: syz [ 231.316211][ T45] usb 2-1: Manufacturer: syz [ 231.323173][ T45] usb 2-1: SerialNumber: syz [ 231.331333][ T45] usb 2-1: config 0 descriptor?? [ 231.337979][ T45] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 231.344670][ T45] usb 2-1: No valid video chain found. [ 231.538526][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.548380][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.558217][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.567876][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.577652][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.587801][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.597124][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.607112][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.616704][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.626128][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.638207][ T45] usb 2-1: USB disconnect, device number 115 [ 232.081061][ T307] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 232.232150][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.242329][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.252038][ T307] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.261198][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.269326][ T307] usb 3-1: SerialNumber: syz [ 232.476568][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.485148][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.493296][ T45] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 232.496477][ T307] usb 3-1: 0:2 : does not exist [ 232.506449][ T307] usb 3-1: unit 5: unexpected type 0x0b [ 232.520646][ T307] usb 3-1: USB disconnect, device number 111 [ 232.652103][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.663142][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 232.673972][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.686794][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 232.695897][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.704416][ T45] usb 2-1: config 0 descriptor?? [ 232.709765][ T3924] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 232.971452][ T3926] cgroup: Unknown subsys name 'pcr' [ 233.078762][ T3934] syzkaller1: entered promiscuous mode [ 233.084446][ T3934] syzkaller1: entered allmulticast mode [ 233.119183][ T45] microsoft 0003:045E:009D.0030: unknown main item tag 0x3 [ 233.126540][ T45] microsoft 0003:045E:009D.0030: unknown global tag 0xe [ 233.133589][ T45] microsoft 0003:045E:009D.0030: item 0 1 1 14 parsing failed [ 233.141378][ T45] microsoft 0003:045E:009D.0030: parse failed [ 233.147511][ T45] microsoft 0003:045E:009D.0030: probe with driver microsoft failed with error -22 [ 233.321381][ T307] usb 2-1: USB disconnect, device number 116 [ 233.917841][ T3951] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1144'. [ 233.928492][ T3951] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11 sclass=netlink_xfrm_socket pid=3951 comm=syz.1.1144 [ 233.974968][ T3953] FAULT_INJECTION: forcing a failure. [ 233.974968][ T3953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.988171][ T3953] CPU: 1 UID: 0 PID: 3953 Comm: syz.1.1145 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 233.988206][ T3953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.988218][ T3953] Call Trace: [ 233.988226][ T3953] [ 233.988234][ T3953] __dump_stack+0x21/0x30 [ 233.988264][ T3953] dump_stack_lvl+0x140/0x1c0 [ 233.988288][ T3953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 233.988311][ T3953] ? check_stack_object+0x12b/0x150 [ 233.988338][ T3953] dump_stack+0x19/0x20 [ 233.988360][ T3953] should_fail_ex+0x3d7/0x530 [ 233.988384][ T3953] should_fail+0xf/0x20 [ 233.988405][ T3953] should_fail_usercopy+0x1e/0x30 [ 233.988428][ T3953] _copy_to_user+0x24/0xa0 [ 233.988454][ T3953] simple_read_from_buffer+0xed/0x160 [ 233.988474][ T3953] proc_fail_nth_read+0x1aa/0x220 [ 233.988497][ T3953] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 233.988519][ T3953] ? bpf_lsm_file_permission+0xd/0x20 [ 233.988540][ T3953] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 233.988562][ T3953] vfs_read+0x289/0xcb0 [ 233.988588][ T3953] ? __cfi_vfs_read+0x10/0x10 [ 233.988611][ T3953] ? __kasan_check_write+0x18/0x20 [ 233.988636][ T3953] ? mutex_lock+0x97/0x1d0 [ 233.988654][ T3953] ? __cfi_mutex_lock+0x10/0x10 [ 233.988672][ T3953] ? __fget_files+0x2c5/0x340 [ 233.988692][ T3953] ksys_read+0x145/0x260 [ 233.988716][ T3953] ? __cfi_ksys_read+0x10/0x10 [ 233.988741][ T3953] ? __kasan_check_write+0x18/0x20 [ 233.988765][ T3953] ? fpregs_restore_userregs+0x11c/0x260 [ 233.988787][ T3953] __x64_sys_read+0x7f/0x90 [ 233.988809][ T3953] x64_sys_call+0x2638/0x2ee0 [ 233.988831][ T3953] do_syscall_64+0x57/0xf0 [ 233.988854][ T3953] ? clear_bhb_loop+0x50/0xa0 [ 233.988887][ T3953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 233.988911][ T3953] RIP: 0033:0x7fc50435cfce [ 233.988929][ T3953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.988946][ T3953] RSP: 002b:00007fc502df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.988968][ T3953] RAX: ffffffffffffffda RBX: 00007fc502df76c0 RCX: 00007fc50435cfce [ 233.988984][ T3953] RDX: 000000000000000f RSI: 00007fc502df70a0 RDI: 0000000000000006 [ 233.988997][ T3953] RBP: 00007fc502df7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.989015][ T3953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.989028][ T3953] R13: 00007fc504616038 R14: 00007fc504615fa0 R15: 00007fffb649aea8 [ 233.989045][ T3953] [ 234.354175][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 234.354193][ T36] audit: type=1400 audit(234.334:804): avc: denied { setcurrent } for pid=3964 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 234.721040][ T45] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 234.872451][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 234.881265][ T45] usb 2-1: config 9 has an invalid interface number: 235 but max is 0 [ 234.889482][ T45] usb 2-1: config 9 has no interface number 0 [ 234.895807][ T45] usb 2-1: config 9 interface 235 has no altsetting 0 [ 234.908487][ T45] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=c6.b8 [ 234.909165][ T36] audit: type=1400 audit(234.884:805): avc: denied { create } for pid=3972 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.918184][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.937255][ T36] audit: type=1400 audit(234.924:806): avc: denied { accept } for pid=3972 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.960161][ T45] usb 2-1: Product: syz [ 234.964683][ T36] audit: type=1400 audit(234.924:807): avc: denied { connect } for pid=3972 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.967696][ T45] usb 2-1: Manufacturer: syz [ 234.986480][ T36] audit: type=1400 audit(234.924:808): avc: denied { write } for pid=3972 comm="syz.2.1152" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.991180][ T45] usb 2-1: SerialNumber: syz [ 235.010576][ T36] audit: type=1400 audit(234.974:809): avc: denied { ioctl } for pid=3975 comm="syz.2.1153" path="socket:[31798]" dev="sockfs" ino=31798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.242234][ T36] audit: type=1400 audit(235.224:810): avc: denied { wake_alarm } for pid=3970 comm="syz.1.1151" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.271176][ T467] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 235.401082][ T467] usb 3-1: device descriptor read/64, error -71 [ 235.641048][ T467] usb 3-1: device descriptor read/64, error -71 [ 235.881115][ T467] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 236.011089][ T467] usb 3-1: device descriptor read/64, error -71 [ 236.020449][ T36] audit: type=1400 audit(235.994:811): avc: denied { getopt } for pid=3982 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.055801][ T36] audit: type=1400 audit(236.034:812): avc: denied { ioctl } for pid=3985 comm="syz.0.1157" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 236.089261][ T36] audit: type=1400 audit(236.064:813): avc: denied { connect } for pid=3985 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.251029][ T467] usb 3-1: device descriptor read/64, error -71 [ 236.361301][ T467] usb usb3-port1: attempt power cycle [ 236.701059][ T467] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 236.722176][ T467] usb 3-1: device descriptor read/8, error -71 [ 236.852080][ T467] usb 3-1: device descriptor read/8, error -71 [ 237.091036][ T467] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 237.112046][ T467] usb 3-1: device descriptor read/8, error -71 [ 237.242050][ T467] usb 3-1: device descriptor read/8, error -71 [ 237.351196][ T467] usb usb3-port1: unable to enumerate USB device [ 237.444647][ T3996] ------------[ cut here ]------------ [ 237.450193][ T3996] WARNING: CPU: 0 PID: 3996 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 237.459745][ T3996] Modules linked in: [ 237.463689][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: syz.3.1159 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 237.475380][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.485557][ T3996] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 237.491685][ T3996] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d da 80 0b 06 00 0f 85 c2 00 00 00 c6 05 cd 80 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 237.499186][ T45] ftdi_sio 2-1:9.235: FTDI USB Serial Device converter detected [ 237.511567][ T3996] RSP: 0018:ffffc9001114f560 EFLAGS: 00010246 [ 237.522215][ T45] ftdi_sio ttyUSB0: unknown device type: 0xc6b8 [ 237.525262][ T3996] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 237.539536][ T3996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001114f618 [ 237.547837][ T3996] RBP: ffffc9001114f6a0 R08: ffffc9001114f617 R09: 0000000000000000 [ 237.555898][ T3996] R10: ffffc9001114f600 R11: fffff52002229ec3 R12: ffffc9001114f5a0 [ 237.564009][ T3996] R13: dffffc0000000000 R14: 1ffff92002229eb0 R15: 0000000000000000 [ 237.566093][ T45] usb 2-1: USB disconnect, device number 117 [ 237.572095][ T3996] FS: 00007f52cdc8f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 237.572123][ T3996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.586507][ T45] ftdi_sio 2-1:9.235: device disconnected [ 237.587050][ T3996] CR2: 0000200000005000 CR3: 000000010bb14000 CR4: 00000000003526b0 [ 237.607380][ T3996] DR0: 000000000000f0c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.615406][ T3996] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 237.623421][ T3996] Call Trace: [ 237.626720][ T3996] [ 237.629641][ T3996] ? vfs_write+0x3c8/0xf90 [ 237.634085][ T3996] ? ksys_write+0x145/0x260 [ 237.638631][ T3996] ? x64_sys_call+0x271c/0x2ee0 [ 237.643516][ T3996] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 237.649243][ T3996] ? hashtab_init+0xdb/0x1f0 [ 237.653852][ T3996] ___kmalloc_large_node+0x81/0x210 [ 237.659063][ T3996] ? hashtab_init+0xdb/0x1f0 [ 237.663678][ T3996] __kmalloc_large_node_noprof+0x1e/0xd0 [ 237.669322][ T3996] ? hashtab_init+0xdb/0x1f0 [ 237.673947][ T3996] __kmalloc_noprof+0x326/0x500 [ 237.678920][ T3996] ? kasan_save_alloc_info+0x40/0x50 [ 237.684244][ T3996] hashtab_init+0xdb/0x1f0 [ 237.688675][ T3996] ? common_read+0x175/0x490 [ 237.693303][ T3996] symtab_init+0x44/0x70 [ 237.697556][ T3996] common_read+0x1e6/0x490 [ 237.701997][ T3996] ? hashtab_init+0xdb/0x1f0 [ 237.706595][ T3996] ? __cfi_common_read+0x10/0x10 [ 237.711853][ T3996] ? hashtab_init+0x105/0x1f0 [ 237.716545][ T3996] policydb_read+0xab8/0x28b0 [ 237.721262][ T3996] ? __kasan_kmalloc+0x96/0xb0 [ 237.726036][ T3996] ? __cfi_policydb_read+0x10/0x10 [ 237.731175][ T3996] ? security_load_policy+0x130/0x12d0 [ 237.736645][ T3996] security_load_policy+0x16a/0x12d0 [ 237.741953][ T3996] ? irqentry_exit+0x4a/0x60 [ 237.746548][ T3996] ? asm_exc_page_fault+0x2b/0x30 [ 237.751605][ T3996] ? __cfi_security_load_policy+0x10/0x10 [ 237.757332][ T3996] ? rep_movs_alternative+0x4a/0xa0 [ 237.762563][ T3996] sel_write_load+0x2a7/0x5f0 [ 237.767293][ T3996] ? __cfi_sel_write_load+0x10/0x10 [ 237.772525][ T3996] ? bpf_lsm_file_permission+0xd/0x20 [ 237.777903][ T3996] ? __cfi_sel_write_load+0x10/0x10 [ 237.783130][ T3996] vfs_write+0x3c8/0xf90 [ 237.787387][ T3996] ? __cfi_vfs_write+0x10/0x10 [ 237.792173][ T3996] ? __kasan_check_write+0x18/0x20 [ 237.797290][ T3996] ? mutex_lock+0x97/0x1d0 [ 237.801727][ T3996] ? __cfi_mutex_lock+0x10/0x10 [ 237.806586][ T3996] ? __fget_files+0x2c5/0x340 [ 237.811303][ T3996] ksys_write+0x145/0x260 [ 237.815642][ T3996] ? __cfi_ksys_write+0x10/0x10 [ 237.820488][ T3996] ? __kasan_check_write+0x18/0x20 [ 237.825673][ T3996] ? fpregs_restore_userregs+0x11c/0x260 [ 237.831350][ T3996] __x64_sys_write+0x7f/0x90 [ 237.835944][ T3996] x64_sys_call+0x271c/0x2ee0 [ 237.840611][ T3996] do_syscall_64+0x57/0xf0 [ 237.845055][ T3996] ? clear_bhb_loop+0x50/0xa0 [ 237.849748][ T3996] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.855661][ T3996] RIP: 0033:0x7f52ccd9c799 [ 237.860081][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.879720][ T3996] RSP: 002b:00007f52cdc8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.888166][ T3996] RAX: ffffffffffffffda RBX: 00007f52cd015fa0 RCX: 00007f52ccd9c799 [ 237.896169][ T3996] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004 [ 237.904170][ T3996] RBP: 00007f52cce32c99 R08: 0000000000000000 R09: 0000000000000000 [ 237.912178][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.920161][ T3996] R13: 00007f52cd016038 R14: 00007f52cd015fa0 R15: 00007ffc02375e58 [ 237.928248][ T3996] [ 237.931312][ T3996] ---[ end trace 0000000000000000 ]--- [ 237.937089][ T3996] SELinux: failed to load policy